7.0.0

7.0.0 (2025-10-14)

Caution

We recommend to skip this release as it contains a bug that introduces a breaking change in the format of Parse Server 5xx responses. The issue has been fixed in 7.0.1.

Bug Fixes

• Prototype Pollution vulnerability in SingleInstanceStateController; fixes security vulnerability GHSA-9g8m-v378-pcg3 (#2745) (9e7c1ba)
• HTTP status code 3XX redirection for Parse Server URL not handled properly (#2608) (58e7f58)
• Incorrect type in ParseObject.fetch parameter options (#2726) (dc78419)
• Missing error message when returning an internal server error (#2543) (f91f3f1)
• Prototype pollution in Parse.Object and internal APIs; fixes security vulnerability GHSA-9f2h-7v79-mxw (#2749) (0097398)
• Unhandled exception when calling Parse.Cloud.run with option value null (#2622) (#2623) (2818ed9)

Features

• Add Parse.File upload and download progress in browser and Node environments (#2503) (d3ca465)
• Add Uint8Array support for Parse.File data (#2548) (6f6bb66)
• Add option Parse.nodeLogging to fully log Parse.Object in Node.js environments (#1594) (de9d057)
• Remove Parse.serverAuthType, Parse.serverAuthToken infavor of CoreManager REQUEST_HEADERS config (#2639) (ddc66a1)

Performance Improvements

• Optimize bundle packaging with Vite (#2553) (a4b19e5)

BREAKING CHANGES

• The methods Parse.serverAuthType() and Parse.serverAuthToken() have been removed; use the CoreManager REQUEST_HEADER config to set authorization headers instead. (ddc66a1)