Skip to content

Commit 7a5f2ff

Browse files
chore(release): 7.0.0-alpha.1 [skip ci]
# [7.0.0-alpha.1](6.2.0-alpha.3...7.0.0-alpha.1) (2025-10-14) ### Bug Fixes * Prototype Pollution vulnerability in `SingleInstanceStateController`; fixes security vulnerability [GHSA-9g8m-v378-pcg3](GHSA-9g8m-v378-pcg3) ([#2745](#2745)) ([9e7c1ba](9e7c1ba)) * HTTP status code 3XX redirection for Parse Server URL not handled properly ([#2608](#2608)) ([58e7f58](58e7f58)) * Incorrect type in `ParseObject.fetch` parameter `options` ([#2726](#2726)) ([dc78419](dc78419)) * Prototype pollution in `Parse.Object` and internal APIs; fixes security vulnerability [GHSA-9f2h-7v79-mxw](GHSA-9f2h-7v79-mxw3) ([#2749](#2749)) ([0097398](0097398)) * Unhandled exception when calling `Parse.Cloud.run` with option value `null` ([#2622](#2622)) ([#2623](#2623)) ([2818ed9](2818ed9)) ### Features * Add `Parse.File` upload and download progress in browser and Node environments ([#2503](#2503)) ([d3ca465](d3ca465)) * Add option `Parse.nodeLogging` to fully log `Parse.Object` in Node.js environments ([#1594](#1594)) ([de9d057](de9d057)) * Remove `Parse.serverAuthType`, `Parse.serverAuthToken` infavor of CoreManager `REQUEST_HEADERS` config ([#2639](#2639)) ([ddc66a1](ddc66a1)) ### BREAKING CHANGES * The methods `Parse.serverAuthType()` and `Parse.serverAuthToken()` have been removed; use the CoreManager `REQUEST_HEADER` config to set authorization headers instead. ([ddc66a1](ddc66a1))
1 parent 7e5aa69 commit 7a5f2ff

File tree

3 files changed

+25
-3
lines changed

3 files changed

+25
-3
lines changed

changelogs/CHANGELOG_alpha.md

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,25 @@
1+
# [7.0.0-alpha.1](https://github.com/parse-community/Parse-SDK-JS/compare/6.2.0-alpha.3...7.0.0-alpha.1) (2025-10-14)
2+
3+
4+
### Bug Fixes
5+
6+
* Prototype Pollution vulnerability in `SingleInstanceStateController`; fixes security vulnerability [GHSA-9g8m-v378-pcg3](https://github.com/advisories/GHSA-9g8m-v378-pcg3) ([#2745](https://github.com/parse-community/Parse-SDK-JS/issues/2745)) ([9e7c1ba](https://github.com/parse-community/Parse-SDK-JS/commit/9e7c1bad472b1ed2463cbac567b8ec752ae5b4c9))
7+
* HTTP status code 3XX redirection for Parse Server URL not handled properly ([#2608](https://github.com/parse-community/Parse-SDK-JS/issues/2608)) ([58e7f58](https://github.com/parse-community/Parse-SDK-JS/commit/58e7f585dead19899239bdba13b7f2386ea1090c))
8+
* Incorrect type in `ParseObject.fetch` parameter `options` ([#2726](https://github.com/parse-community/Parse-SDK-JS/issues/2726)) ([dc78419](https://github.com/parse-community/Parse-SDK-JS/commit/dc78419893cb58c65a899769bf60ff2455b25425))
9+
* Prototype pollution in `Parse.Object` and internal APIs; fixes security vulnerability [GHSA-9f2h-7v79-mxw](https://github.com/parse-community/Parse-SDK-JS/security/advisories/GHSA-9f2h-7v79-mxw3) ([#2749](https://github.com/parse-community/Parse-SDK-JS/issues/2749)) ([0097398](https://github.com/parse-community/Parse-SDK-JS/commit/00973987f361368659c0c4dbf669f3897520b132))
10+
* Unhandled exception when calling `Parse.Cloud.run` with option value `null` ([#2622](https://github.com/parse-community/Parse-SDK-JS/issues/2622)) ([#2623](https://github.com/parse-community/Parse-SDK-JS/issues/2623)) ([2818ed9](https://github.com/parse-community/Parse-SDK-JS/commit/2818ed9b58d1992b0f1441d5a4d301687a763302))
11+
12+
### Features
13+
14+
* Add `Parse.File` upload and download progress in browser and Node environments ([#2503](https://github.com/parse-community/Parse-SDK-JS/issues/2503)) ([d3ca465](https://github.com/parse-community/Parse-SDK-JS/commit/d3ca465ccb5f226a1dd3f8f8e6cd934b957a21ab))
15+
* Add option `Parse.nodeLogging` to fully log `Parse.Object` in Node.js environments ([#1594](https://github.com/parse-community/Parse-SDK-JS/issues/1594)) ([de9d057](https://github.com/parse-community/Parse-SDK-JS/commit/de9d057a7f67a694564d740b7446a46e19ff73e2))
16+
* Remove `Parse.serverAuthType`, `Parse.serverAuthToken` infavor of CoreManager `REQUEST_HEADERS` config ([#2639](https://github.com/parse-community/Parse-SDK-JS/issues/2639)) ([ddc66a1](https://github.com/parse-community/Parse-SDK-JS/commit/ddc66a1a97f582f020ef399945d8cd401b0e96a2))
17+
18+
19+
### BREAKING CHANGES
20+
21+
* The methods `Parse.serverAuthType()` and `Parse.serverAuthToken()` have been removed; use the CoreManager `REQUEST_HEADER` config to set authorization headers instead. ([ddc66a1](ddc66a1))
22+
123
# [6.2.0-alpha.3](https://github.com/parse-community/Parse-SDK-JS/compare/6.2.0-alpha.2...6.2.0-alpha.3) (2025-04-15)
224

325

package-lock.json

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "parse",
3-
"version": "6.2.0-alpha.3",
3+
"version": "7.0.0-alpha.1",
44
"description": "Parse JavaScript SDK",
55
"homepage": "https://parseplatform.org",
66
"keywords": [

0 commit comments

Comments
 (0)