Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 20, 2022

Bumps parse-server from 4.5.0 to 5.2.3.

Release notes

Sourced from parse-server's releases.

5.2.3

5.2.3 (2022-06-17)

Bug Fixes

  • invalid file request not properly handled; this fixes a security vulnerability in which an invalid file request can crash the server (GHSA-xw6g-jjvf-wwf9) (#8060) (5be375d)

5.2.2

5.2.2 (2022-06-17)

Bug Fixes

  • certificate in Apple Game Center auth adapter not validated; this fixes a security vulnerability in which authentication could be bypassed using a fake certificate; if you are using the Apple Game Center auth adapter it is your responsibility to keep its root certificate up-to-date and we advice you read the security advisory (GHSA-rh9j-f5f8-rvgc) (ba2b0a9)

5.2.1

5.2.1 (2022-05-01)

Bug Fixes

5.2.1-alpha.2

5.2.1-alpha.2 (2022-03-26)

Performance Improvements

  • reduce database operations when using the constant parameter in Cloud Function validation (#7892) (48bd512)

5.2.1-alpha.1

5.2.1-alpha.1 (2022-03-26)

Bug Fixes

  • return correct response when revert is used in beforeSave (#7839) (f63fb2b)

5.2.0

5.2.0 (2022-03-24)

Bug Fixes

  • security bump minimist from 1.2.5 to 1.2.6 (#7884) (c5cf282)
  • sensitive keyword detection may produce false positives (#7881) (0d6f9e9)

... (truncated)

Commits
  • eb2952f chore(release): 5.2.3 [skip ci]
  • 5be375d fix: invalid file request not properly handled; this fixes a security vulnera...
  • ed0baa8 chore(release): 5.2.2 [skip ci]
  • ba2b0a9 fix: certificate in Apple Game Center auth adapter not validated; this fixes ...
  • a8aef82 chore(release): 5.2.1 [skip ci]
  • af4a041 fix: authentication bypass and denial of service (DoS) vulnerabilities in App...
  • 852bb47 chore(release): 5.2.0 [skip ci]
  • 9c41480 build: release
  • ff5b391 ci: release commit
  • 2aeae76 chore(release): 5.2.0-beta.2 [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by parseadmin, a new releaser for parse-server since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [parse-server](https://github.com/parse-community/parse-server) from 4.5.0 to 5.2.3.
- [Release notes](https://github.com/parse-community/parse-server/releases)
- [Changelog](https://github.com/parse-community/parse-server/blob/alpha/CHANGELOG.md)
- [Commits](parse-community/parse-server@4.5.0...5.2.3)

---
updated-dependencies:
- dependency-name: parse-server
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@nx-cloud
Copy link

nx-cloud bot commented Jun 20, 2022

☁️ Nx Cloud Report

We didn't find any information for the current pull request with the commit 3ed2f9b.
You might need to set the 'NX_BRANCH' environment variable in your CI pipeline.

Check the Nx Cloud Github Integration documentation for more information.


Sent with 💌 from NxCloud.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 20, 2022
@dependabot dependabot bot requested a review from jcguarinpenaranda June 20, 2022 10:04
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 1, 2022

Superseded by #384.

@dependabot dependabot bot closed this Jul 1, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/parse-server-5.2.3 branch July 1, 2022 10:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants