Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 8, 2022

Bumps parse-server from 4.5.0 to 5.3.1.

Release notes

Sourced from parse-server's releases.

5.3.1

5.3.1 (2022-11-07)

Bug Fixes

5.3.0

5.3.0 (2022-10-29)

Bug Fixes

  • afterSave trigger removes pointer in Parse object (#7913) (47d796e)
  • auto-release process may fail if optional back-merging task fails (#8051) (cf925e7)
  • custom database options are not passed to MongoDB GridFS (#7911) (b1e5565)
  • deprecate allowClientClassCreation defaulting to true (#7925) (38ed96a)
  • errors in GraphQL do not show the original error but a general Unexpected Error (#8045) (0d81887)
  • interrupted WebSocket connection not closed by LiveQuery server (#8012) (2d5221e)
  • live query role cache does not clear when a user is added to a role (#8026) (199dfc1)
  • peer dependency mismatch for GraphQL dependencies (#7934) (0a6faa8)
  • return correct response when revert is used in beforeSave (#7839) (19900fc)
  • security upgrade @​parse/fs-files-adapter from 1.2.1 to 1.2.2 (#7948) (3a70fda)
  • security upgrade moment from 2.29.1 to 2.29.2 (#7931) (731c550)
  • security upgrade parse push adapter from 4.1.0 to 4.1.2 (#7893) (93667b4)
  • websocket connection of LiveQuery interrupts frequently (#8048) (03caae1)

Features

  • add MongoDB 5.1 compatibility (#7682) (022a856)
  • add MongoDB 5.2 support (#7894) (5bfa716)
  • add support for Node 17 and 18 (#7896) (3e9f292)
  • align file trigger syntax with class trigger; use the new syntax Parse.Cloud.beforeSave(Parse.File, (request) => {}), the old syntax Parse.Cloud.beforeSaveFile((request) => {}) has been deprecated (#7966) (c6dcad8)
  • replace GraphQL Apollo with GraphQL Yoga (#7967) (1aa2204)
  • selectively enable / disable default authentication adapters (#7953) (c1e808f)
  • upgrade mongodb from 4.4.1 to 4.5.0 (#7991) (e692b5d)

Performance Improvements

  • reduce database operations when using the constant parameter in Cloud Function validation (#7892) (041197f)

5.3.0-beta.1

5.3.0-beta.1 (2022-06-17)

Bug Fixes

  • afterSave trigger removes pointer in Parse object (#7913) (47d796e)

... (truncated)

Commits
  • 2458a8c chore(release): 5.3.1 [skip ci]
  • 50eed3c fix: Remote code execution via MongoDB BSON parser through prototype pollutio...
  • 12e174b chore(release): 5.3.0 [skip ci]
  • 2549540 build: release (#8263)
  • 50409aa Merge branch 'release' into build-release
  • 8011b2f chore(release): 5.2.8 [skip ci]
  • 4c1befa fix: server crashes when receiving file download request with invalid byte ra...
  • 066f296 fix: server crashes when receiving file download request with invalid byte ra...
  • 1a2b1b9 fix: authentication adapter app ID validation may be circumvented; this fixes...
  • e6dc487 chore(release): 5.2.7 [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by parseadmin, a new releaser for parse-server since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [parse-server](https://github.com/parse-community/parse-server) from 4.5.0 to 5.3.1.
- [Release notes](https://github.com/parse-community/parse-server/releases)
- [Changelog](https://github.com/parse-community/parse-server/blob/alpha/CHANGELOG.md)
- [Commits](parse-community/parse-server@4.5.0...5.3.1)

---
updated-dependencies:
- dependency-name: parse-server
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 8, 2022
@nx-cloud
Copy link

nx-cloud bot commented Nov 8, 2022

☁️ Nx Cloud Report

We didn't find any information for the current pull request with the commit 8758efa.
You might need to set the 'NX_BRANCH' environment variable in your CI pipeline.

Check the Nx Cloud Github Integration documentation for more information.


Sent with 💌 from NxCloud.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 9, 2022

Superseded by #397.

@dependabot dependabot bot closed this Nov 9, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/parse-server-5.3.1 branch November 9, 2022 20:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants