6.0.0-alpha.9 (2022-11-16)

Features

• Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true (#8283) (ed499e3)

BREAKING CHANGES

• The Parse Server option enforcePrivateUsers is set to true by default; in previous releases this option defaults to false; this change improves the default security configuration of Parse Server (#8283) (ed499e3)

6.0.0-alpha.8 (2022-11-11)

Features

• Restrict use of masterKey to localhost by default (#8281) (6c16021)

BREAKING CHANGES

• This release restricts the use of masterKey to localhost by default; if you are using Parse Dashboard on a different server to connect to Parse Server you need to add the IP address of the server that hosts Parse Dashboard to this option (#8281) (6c16021)

6.0.0-alpha.7 (2022-11-11)

Features

• Upgrade Redis 3 to 4 (#8293) (7d622f0)

BREAKING CHANGES

• This release upgrades to Redis 4; if you are using the Redis cache adapter with Parse Server then this is a breaking change as the Redis client options have changed; see the Redis migration guide for more details (#8293) (7d622f0)

6.0.0-alpha.6 (2022-11-10)

Features

• Remove support for MongoDB 4.0 (#8292) (37245f6)

BREAKING CHANGES

• This release removes support for MongoDB 4.0; the new minimum supported MongoDB version is 4.2. which also removes support for the deprecated MongoDB MMAPv1 storage engine (37245f6)

6.0.0-alpha.5 (2022-11-10)

Bug Fixes

• Throwing error in Cloud Code Triggers afterLogin, afterLogout crashes server (#8280) (130d290)

BREAKING CHANGES

• Throwing an error in Cloud Code Triggers afterLogin, afterLogout returns a rejected promise; in previous releases it crashed the server if you did not handle the error on the Node.js process level; consider adapting your code if your app currently handles these errors on the Node.js process level with process.on('unhandledRejection', ...) (130d290)

6.0.0-alpha.4 (2022-11-10)

Features

• Remove deprecation DEPPS2: Config option directAccess defaults to true (#8284) (f535ee6)

BREAKING CHANGES

• Config option directAccess defaults to true; set this to false in environments where multiple Parse Server instances run behind a load balancer and Parse requests within the current Node.js environment should be routed via the load balancer and distributed as HTTP requests among all instances via the serverURL. (f535ee6)

6.0.0-alpha.3 (2022-11-10)

Features

• Remove deprecation DEPPS4: Remove convenience method for http request Parse.Cloud.httpRequest (#8287) (2d79c08)

BREAKING CHANGES

• The convenience method for HTTP requests Parse.Cloud.httpRequest is removed; use your preferred 3rd party library for making HTTP requests (2d79c08)

6.0.0-alpha.2 (2022-11-10)

Features

• Improve authentication adapter interface to support multi-factor authentication (MFA), authentication challenges, and provide a more powerful interface for writing custom authentication adapters (#8156) (5bbf9ca)

6.0.0-alpha.1 (2022-11-10)

Bug Fixes

• Remove Node 12 and Node 17 support (#8279) (2546cc8)

BREAKING CHANGES

• This release removes Node 12 and Node 17 support (2546cc8)

4.10.20 (2022-11-09)

Bug Fixes

• Prototype pollution via Cloud Code Webhooks; fixes security vulnerability GHSA-93vw-8fm5-p2jf (#8306) (6c63f04)

5.3.3 (2022-11-09)

Bug Fixes

• Prototype pollution via Cloud Code Webhooks; fixes security vulnerability GHSA-93vw-8fm5-p2jf (#8305) (60c5a73)

4.10.19 (2022-11-09)

Bug Fixes

• Parse Server option requestKeywordDenylist can be bypassed via Cloud Code Webhooks or Triggers; fixes security vulnerability GHSA-xprv-wvh7-qqqx (#8301) (0a2d412)

5.3.2 (2022-11-09)

Bug Fixes

• Parse Server option requestKeywordDenylist can be bypassed via Cloud Code Webhooks or Triggers; fixes security vulnerability GHSA-xprv-wvh7-qqqx (#8302) (6728da1)

4.10.18 (2022-11-07)

Bug Fixes

• Remote code execution via MongoDB BSON parser through prototype pollution; fixes security vulnerability GHSA-prm5-8g2m-24gg (#8296) (47cfeee)

5.3.1 (2022-11-07)

Bug Fixes

• Remote code execution via MongoDB BSON parser through prototype pollution; fixes security vulnerability GHSA-prm5-8g2m-24gg (#8295) (50eed3c)

5.4.0-alpha.1 (2022-10-31)

Bug Fixes

• graphQL query ignores condition equalTo with value false (#8032) (7f5a15d)
• internal indices for classes _Idempotency and _Role are not protected in defined schema (#8121) (c16f529)
• liveQuery with containedIn not working when object field is an array (#8128) (1d9605b)
• push notifications badge doesn't update with Installation beforeSave trigger (#8162) (3c75c2b)
• query aggregation pipeline cannot handle value of type Date when directAccess: true (#8167) (e424137)
• relation constraints in compound queries Parse.Query.or, Parse.Query.and not working (#8203) (28f0d26)
• security upgrade undici from 5.6.0 to 5.8.0 (#8108) (4aa016b)
• sorting by non-existing value throws INVALID_SERVER_ERROR on Postgres (#8157) (3b775a1)
• updating object includes unchanged keys in client response for certain key types (#8159) (37af1d7)

Features

• add convenience access to Parse Server configuration in Cloud Code via Parse.Server (#8244) (9f11115)
• add option to change the default value of the Parse.Query.limit() constraint (#8152) (0388956)
• add support for MongoDB 6 (#8242) (aba0081)
• add support for Postgres 15 (#8215) (2feb6c4)
• liveQuery support for unsorted distance queries (#8221) (0f763da)

5.4.0-beta.1 (2022-10-29)

Bug Fixes

• graphQL query ignores condition equalTo with value false (#8032) (7f5a15d)
• internal indices for classes _Idempotency and _Role are not protected in defined schema (#8121) (c16f529)
• liveQuery with containedIn not working when object field is an array (#8128) (1d9605b)
• push notifications badge doesn't update with Installation beforeSave trigger (#8162) (3c75c2b)
• query aggregation pipeline cannot handle value of type Date when directAccess: true (#8167) (e424137)
• relation constraints in compound queries Parse.Query.or, Parse.Query.and not working (#8203) (28f0d26)
• security upgrade undici from 5.6.0 to 5.8.0 (#8108) (4aa016b)
• sorting by non-existing value throws INVALID_SERVER_ERROR on Postgres (#8157) (3b775a1)
• updating object includes unchanged keys in client response for certain key types (#8159) (37af1d7)

Features

• add convenience access to Parse Server configuration in Cloud Code via Parse.Server (#8244) (9f11115)
• add option to change the default value of the Parse.Query.limit() constraint (#8152) (0388956)
• add support for MongoDB 6 (#8242) (aba0081)
• add support for Postgres 15 (#8215) (2feb6c4)
• liveQuery support for unsorted distance queries (#8221) (0f763da)

5.3.0 (2022-10-29)

Bug Fixes

• afterSave trigger removes pointer in Parse object (#7913) (47d796e)
• auto-release process may fail if optional back-merging task fails (#8051) (cf925e7)
• custom database options are not passed to MongoDB GridFS (#7911) (b1e5565)
• deprecate allowClientClassCreation defaulting to true (#7925) (38ed96a)
• errors in GraphQL do not show the original error but a general Unexpected Error (#8045) (0d81887)
• interrupted WebSocket connection not closed by LiveQuery server (#8012) (2d5221e)
• live query role cache does not clear when a user is added to a role (#8026) (199dfc1)
• peer dependency mismatch for GraphQL dependencies (#7934) (0a6faa8)
• return correct response when revert is used in beforeSave (#7839) (19900fc)
• security upgrade @parse/fs-files-adapter from 1.2.1 to 1.2.2 (#7948) (3a70fda)
• security upgrade moment from 2.29.1 to 2.29.2 (#7931) (731c550)
• security upgrade parse push adapter from 4.1.0 to 4.1.2 (#7893) (93667b4)
• websocket connection of LiveQuery interrupts frequently (#8048) (03caae1)

Features

• add MongoDB 5.1 compatibility (#7682) (022a856)
• add MongoDB 5.2 support (#7894) (5bfa716)
• add support for Node 17 and 18 (#7896) (3e9f292)
• align file trigger syntax with class trigger; use the new syntax Parse.Cloud.beforeSave(Parse.File, (request) => {}), the old syntax Parse.Cloud.beforeSaveFile((request) => {}) has been deprecated (#7966) (c6dcad8)
• replace GraphQL Apollo with GraphQL Yoga (#7967) (1aa2204)
• selectively enable / disable default authentication adapters (#7953) (c1e808f)
• upgrade mongodb from 4.4.1 to 4.5.0 (#7991) (e692b5d)

Performance Improvements

• reduce database operations when using the constant parameter in Cloud Function validation (#7892) (041197f)

5.3.0-alpha.32 (2022-10-29)

Features

• add convenience access to Parse Server configuration in Cloud Code via Parse.Server (#8244) (9f11115)

5.3.0-alpha.31 (2022-10-24)

Bug Fixes

• relation constraints in compound queries Parse.Query.or, Parse.Query.and not working (#8203) (28f0d26)