7.0.0-alpha.26 (2024-03-10)

Bug Fixes

• Parse Server option fileExtensions default value rejects file extensions that are less than 3 or more than 4 characters long (#8699) (2760381)

7.0.0-alpha.25 (2024-03-05)

Features

• Deprecation DEPPS5: Config option allowClientClassCreation defaults to false (#8849) (29624e0)

BREAKING CHANGES

• The Parse Server option allowClientClassCreation defaults to false. (29624e0)

7.0.0-alpha.24 (2024-03-05)

Bug Fixes

• Docker version releases by removing arm/v6 and arm/v7 support (#8976) (1f62dd0)

7.0.0-alpha.23 (2024-03-03)

Features

• Add support for MongoDB query comment (#8928) (2170962)

6.5.2 (2024-03-02)

Bug Fixes

• Security upgrade @parse/push-adapter from 5.1.0 to 5.1.1 (#8975) (0fa0aab)

6.5.1 (2024-03-02)

Bug Fixes

• Security upgrade @parse/push-adapter from 5.0.2 to 5.1.0 (#8972) (bba24dd)

7.0.0-alpha.22 (2024-03-02)

Features

• Switch GraphQL server from Yoga v2 to Apollo v4 (#8959) (105ae7c)

7.0.0-alpha.21 (2024-03-01)

Bug Fixes

• Deny request if master key is not set in Parse Server option masterKeyIps regardless of ACL and CLP (#8957) (a7b5b38)

BREAKING CHANGES

• A request using the master key will now be rejected as unauthorized if the IP from which the request originates is not set in the Parse Server option masterKeyIps, even if the request does not require the master key permission, for example for a public object in a public class class. (a7b5b38)

6.5.0 (2024-03-01)

Bug Fixes

• Improve PostgreSQL injection detection; fixes security vulnerability GHSA-6927-3vr9-fxf2 which affects Parse Server deployments using a Postgres database (#8960) (a6e6549)

7.0.0-alpha.20 (2024-03-01)

Bug Fixes

• Improve PostgreSQL injection detection; fixes security vulnerability GHSA-6927-3vr9-fxf2 which affects Parse Server deployments using a Postgres database (#8961) (cbefe77)

7.0.0-alpha.19 (2024-02-15)

Features

• Node process exits with error code 1 on uncaught exception to allow custom uncaught exception handling (#8894) (70c280c)

BREAKING CHANGES

• Node process now exits with code 1 on uncaught exceptions, enabling custom handlers that were blocked by Parse Server's default behavior of re-throwing errors. This change may lead to automatic process restarts by the environment, unlike before. (70c280c)

7.0.0-alpha.18 (2024-02-15)

Features

• Deprecation DEPPS6: Authentication adapters disabled by default (#8858) (0cf58eb)

BREAKING CHANGES

• Authentication adapters are disabled by default; to use an authentication adapter it needs to be explicitly enabled in the Parse Server authentication adapter option auth.<provider>.enabled: true (0cf58eb)

7.0.0-alpha.17 (2024-02-15)

Features

• Deprecation DEPPS8: Parse Server option allowExpiredAuthDataToken defaults to false (#8860) (e29845f)

BREAKING CHANGES

• Parse Server option allowExpiredAuthDataToken defaults to false; a 3rd party authentication token will be validated every time the user tries to log in and the login will fail if the token has expired; the effect of this change may differ for different authentication adapters, depending on the token lifetime and the token refresh logic of the adapter (e29845f)

7.0.0-alpha.16 (2024-02-14)

Features

• Deprecation DEPPS9: LiveQuery fields option is renamed to keys (#8852) (38983e8)

BREAKING CHANGES

• LiveQuery fields option is renamed to keys (38983e8)

7.0.0-alpha.15 (2024-02-14)

Features

• Deprecation DEPPS7: Remove deprecated Cloud Code file trigger syntax (#8855) (4e6a375)

BREAKING CHANGES

• Cloud Code file trigger syntax has been aligned with object trigger syntax, for example Parse.Cloud.beforeDeleteFile' has been changed to Parse.Cloud.beforeDelete(Parse.File, (request) => {})' (4e6a375)

7.0.0-alpha.14 (2024-02-14)

Bug Fixes

• GraphQL file upload fails in case of use of pointer or relation (#8721) (1aba638)

7.0.0-alpha.13 (2024-02-14)

Bug Fixes

• Docker image not published to Docker Hub on new release (#8905) (a2ac8d1)

7.0.0-alpha.12 (2024-02-14)

Features

• Add support for Node 20, drop support for Node 14, 16 (#8907) (ced4872)

BREAKING CHANGES

• Removes support for Node 14 and 16 (ced4872)

7.0.0-alpha.11 (2024-01-22)

Features

• Add support for Postgres 16 (#8898) (99489b2)

BREAKING CHANGES

• Removes support for Postgres 11 and 12 (99489b2)

7.0.0-alpha.10 (2024-01-17)

Features

• Add password validation via POST request for user with unverified email using master key and option ignoreEmailVerification (#8895) (633a9d2)