GitHub / parse-community/parse-server / commits
Parse Server for Node.js / Express
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| f7ab647d | refactor: Bump yaml from 2.8.3 to 2.9.0 (#10625) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
1 day ago | |
| 17682fe1 | chore(release): 9.10.1-alpha.7 [skip ci] | semantic-release-bot <s****t@m****t> | 1 day ago | |
| f261957b | fix: Account takeover via empty password in LDAP auth adapter ([GHSA-863r-39r... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 days ago | |
| 315e1576 | chore(release): 9.10.1-alpha.6 [skip ci] | semantic-release-bot <s****t@m****t> | about 1 month ago | |
| 64d58ff7 | fix: `Parse.Query.explain` runs afterFind trigger on query plan results (#10536) |
Daniel <d****h@l****u>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 9e4e5dbb | ci: Skip CI checks for draft pull requests (#10610) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 472136c5 | chore(release): 9.10.1-alpha.5 [skip ci] | semantic-release-bot <s****t@m****t> | about 1 month ago | |
| 90c27789 | fix: Server crash from unhandled promise rejection when multiple Cloud Code v... |
Daniel <d****h@l****u>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 99a0471a | chore(release): 9.10.1-alpha.4 [skip ci] | semantic-release-bot <s****t@m****t> | about 1 month ago | |
| 997ee152 | fix: Install the latest Parse Server version in bootstrap.sh (#10556) |
Daniel <d****h@l****u>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 81bdeb86 | refactor: Correct under-reported code coverage for Options/parsers (#10559) |
Daniel <d****h@l****u>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 5838c07a | ci: Exclude build tooling (resources/) from coverage (#10561) |
Daniel <d****h@l****u>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 6f3e07ca | docs: Clarify LiveQuery options in --help output (#10558) |
Daniel <d****h@l****u>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| b9912b0b | refactor: Bump @actions/core from 3.0.0 to 3.0.1 (#10593) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 154e1d48 | refactor: Bump mongodb-runner from 5.9.3 to 6.8.3 (#10591) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 34c8f759 | refactor: Bump @babel/preset-env from 7.29.2 to 7.29.7 (#10592) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| b45f7ea3 | refactor: Bump websocket-driver from 0.7.4 to 0.7.5 (#10583) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 71e65572 | refactor: Bump @babel/core from 7.29.6 to 7.29.7 (#10588) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 0ebd9356 | refactor: Bump @semantic-release/release-notes-generator from 14.1.0 to 14.1.... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| c6fd388e | chore(release): 9.10.1-alpha.3 [skip ci] | semantic-release-bot <s****t@m****t> | about 1 month ago | |
| 629426f0 | fix: Bump ws from 8.20.0 to 8.21.0 (#10576) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| eab2e974 | refactor: Bump cross-env from 7.0.3 to 10.1.0 (#10579) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 42ae75f0 | chore(release): 9.10.1-alpha.2 [skip ci] | semantic-release-bot <s****t@m****t> | about 1 month ago | |
| 0df8779c | fix: Creating a session can delete another user's session (#10582) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| d76845f0 | test: Add _Installation non-master access control regression tests (#10578) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 6e87eb25 | chore(release): 9.10.1-alpha.1 [skip ci] | semantic-release-bot <s****t@m****t> | about 1 month ago | |
| d577327b | fix: Bump follow-redirects from 1.15.11 to 1.16.0 (#10577) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 7d4d135d | refactor: Bump fast-xml-builder from 1.1.4 to 1.2.0 (#10457) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| a7e792ac | refactor: Bump @babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.7... |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| a2ea1256 | refactor: Bump fast-xml-parser from 5.5.9 to 5.8.0 (#10447) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 538b1d70 | refactor: Bump postcss from 8.4.47 to 8.5.14 (#10450) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 1b487e4c | refactor: Bump @protobufjs/utf8 from 1.1.0 to 1.1.1 (#10461) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 3f4d0d7c | refactor: Bump qs from 6.14.2 to 6.15.2 (#10476) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| a972046b | refactor: Bump @grpc/grpc-js from 1.14.3 to 1.14.4 (#10503) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| b28dba88 | refactor: Bump typescript-eslint from 8.58.0 to 8.59.1 (#10575) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 0d260ff1 | refactor: Bump @babel/core from 7.29.0 to 7.29.6 (#10574) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 504f9194 | refactor: Bump form-data (#10508) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 5c251527 | refactor: Bump markdown-it from 14.1.0 to 14.3.0 (#10510) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 2275feed | refactor: Bump undici from 6.24.1 to 6.27.0 (#10524) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| b5ca12fa | chore(release): 9.10.0 [skip ci] | semantic-release-bot <s****t@m****t> | about 2 months ago | |
| fb1d6fc1 | merge build: Release (#10573) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 534a6b92 | empty commit to trigger CI | GitHub Actions <g****]@u****m> | about 2 months ago | |
| 0686dc0b | chore(release): 9.10.0-alpha.8 [skip ci] | semantic-release-bot <s****t@m****t> | about 2 months ago | |
| b706c22c | fix: GeoPoint distance queries fail with an internal server error on MongoDB ... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 1bdb6a41 | chore(release): 9.10.0-alpha.7 [skip ci] | semantic-release-bot <s****t@m****t> | about 2 months ago | |
| bea001e7 | fix: Cloud Code beforeFind trigger context is not isolated from prototype pol... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 348d90ed | chore(release): 9.10.0-alpha.6 [skip ci] | semantic-release-bot <s****t@m****t> | about 2 months ago | |
| cb9b5426 | fix: GraphQL error messages disclose pointer and relation target class names ... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 3fa545f5 | chore(release): 9.10.0-alpha.5 [skip ci] | semantic-release-bot <s****t@m****t> | about 2 months ago | |
| d96c945b | fix: GraphQL error messages disclose required input field names when public i... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 293f60e5 | chore(release): 9.10.0-alpha.4 [skip ci] | semantic-release-bot <s****t@m****t> | about 2 months ago | |
| 2625489a | fix: GraphQL variable-coercion suggestions disclose schema to unauthenticated... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 11010cc0 | chore(release): 9.10.0-alpha.3 [skip ci] | semantic-release-bot <s****t@m****t> | about 2 months ago | |
| 459786fd | fix: NumberOrBoolean config option (cluster) value not coerced from env/CLI (... |
Daniel <d****h@l****u>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 7e9d53a0 | chore(release): 9.10.0-alpha.2 [skip ci] | semantic-release-bot <s****t@m****t> | 2 months ago | |
| cce91e55 | fix: Stored XSS via malformed Content-Type bypassing file upload extension bl... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 4d3465c1 | test: Rate limit requestMethods is scoped to the configured HTTP methods (#10... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 37039b09 | chore(release): 9.10.0-alpha.1 [skip ci] | semantic-release-bot <s****t@m****t> | 2 months ago | |
| 816078ff | feat: Add option to disallow aggregation pipelines for the read-only master k... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 6ed35dbf | chore(release): 9.9.1-alpha.13 [skip ci] | semantic-release-bot <s****t@m****t> | 2 months ago | |
| e9c85dfe | fix: LiveQuery discloses object data to a subscriber across an ACL read-acces... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 3de7aa3f | chore(release): 9.9.1-alpha.12 [skip ci] | semantic-release-bot <s****t@m****t> | 2 months ago | |
| 1103c7a8 | fix: Denial of service via exponential-time processing of deeply nested query... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| ccf85f95 | chore(release): 9.9.1-alpha.11 [skip ci] | semantic-release-bot <s****t@m****t> | 2 months ago | |
| be12a60d | fix: Stored XSS via non-standard file extension bypassing file upload extensi... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 30f1612a | test: LiveQuery cross-origin connections receive only public-read data (#10504) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 576f4f67 | chore(release): 9.9.1-alpha.10 [skip ci] | semantic-release-bot <s****t@m****t> | 3 months ago | |
| f8612109 | fix: Middleware route checks do not match routing-equivalent path variants (t... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 0644675f | chore(release): 9.9.1-alpha.9 [skip ci] | semantic-release-bot <s****t@m****t> | 3 months ago | |
| 880e8e69 | fix: rateLimit on exact static routes is bypassed by appending a query string... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| ca55aafe | chore(release): 9.9.1-alpha.8 [skip ci] | semantic-release-bot <s****t@m****t> | 3 months ago | |
| 3fad4fb1 | fix: LiveQuery subscriptions leak when a client reuses a subscribe requestId ... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| c700ebd2 | chore(release): 9.9.1-alpha.7 [skip ci] | semantic-release-bot <s****t@m****t> | 3 months ago | |
| f12e1c3e | fix: Cloud Function multipart requests bypass the maxUploadSize limit (#10498) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 78859a9b | docs: Clarify that rateLimit applies to REST API routes only and not to Graph... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 07478de5 | chore(release): 9.9.1-alpha.6 [skip ci] | semantic-release-bot <s****t@m****t> | 3 months ago | |
| 43658f1f | fix: Relation `$relatedTo` query bypasses `protectedFields` and owning-object... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| a4118f68 | chore(release): 9.9.1-alpha.5 [skip ci] | semantic-release-bot <s****t@m****t> | 3 months ago | |
| 83e90edb | fix: Endpoints `/login` and `/verifyPassword` disclose MFA secrets and protec... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 2b9d93d2 | chore(release): 9.9.1-alpha.4 [skip ci] | semantic-release-bot <s****t@m****t> | 3 months ago | |
| 66484ce8 | fix: Stored XSS via trailing-dot filename bypassing file upload extension blo... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 1e0d6cee | chore(release): 9.9.1-alpha.3 [skip ci] | semantic-release-bot <s****t@m****t> | 3 months ago | |
| 552c6dd7 | fix: Server option routeAllowList is bypassable through batch sub-requests ([... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 0ae0ed38 | test: GraphQL endpoint is exempt from routeAllowList by design (#10480) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 828d0e0e | chore(release): 9.9.1-alpha.2 [skip ci] | semantic-release-bot <s****t@m****t> | 3 months ago | |
| 155123ad | fix: GraphQL "Did you mean" validation suggestions disclose schema to unauthe... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 216cf833 | chore(release): 9.9.1-alpha.1 [skip ci] | semantic-release-bot <s****t@m****t> | 3 months ago | |
| 56c159ec | fix: Pre-authentication denial of service via client version header regex bac... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 4f90c5e1 | chore(release): 9.9.0 [skip ci] | semantic-release-bot <s****t@m****t> | 4 months ago | |
| eb644136 | merge build: Release (#10452) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 6667900f | empty commit to trigger CI | GitHub Actions <g****]@u****m> | 4 months ago | |
| 50c37a4e | chore(release): 9.9.0-alpha.3 [skip ci] | semantic-release-bot <s****t@m****t> | 4 months ago | |
| 9fee1a07 | feat: Add installation deviceToken deduplication options (#10451) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 35207c27 | chore(release): 9.9.0-alpha.2 [skip ci] | semantic-release-bot <s****t@m****t> | 4 months ago | |
| 725be0d6 | fix: MFA SMS one-time password accepted twice under concurrent login ([GHSA-j... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 0980ab1a | chore(release): 9.9.0-alpha.1 [skip ci] | semantic-release-bot <s****t@m****t> | 4 months ago | |
| f26700e3 | feat: Add `rawValues` and `rawFieldNames` options for aggregation queries (#1... |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| fc53270d | test: Fix socket hang up in node-fetch 3.3.2 fails tests (#10443) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| f303f752 | refactor: Bump node-fetch from 3.2.10 to 3.3.2 (#10441) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 163d7be6 | refactor: Bump jsonwebtoken from 9.0.2 to 9.0.3 (#10440) |
Manuel <5****a@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago |