Skip to content

Conversation

mtrezza
Copy link
Member

@mtrezza mtrezza commented Mar 21, 2025

Fixes security vulnerability GHSA-837q-jhwx-cmpv.

Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title fix: alpha fix: Alpha Mar 21, 2025
Copy link

parse-github-assistant bot commented Mar 21, 2025

🚀 Thanks for opening this pull request!

Copy link

codecov bot commented Mar 21, 2025

Codecov Report

Attention: Patch coverage is 84.40980% with 70 lines in your changes missing coverage. Please review.

Project coverage is 93.11%. Comparing base (c56b2c4) to head (000ad00).
Report is 6 commits behind head on alpha.

Files with missing lines Patch % Lines
src/Adapters/Auth/twitter.js 50.00% 32 Missing ⚠️
src/Adapters/Auth/gcenter.js 85.52% 11 Missing ⚠️
src/Adapters/Auth/vkontakte.js 16.66% 10 Missing ⚠️
src/Adapters/Auth/meetup.js 22.22% 7 Missing ⚠️
src/Adapters/Auth/janrainengage.js 33.33% 4 Missing ⚠️
src/Adapters/Auth/oauth2.js 92.59% 2 Missing ⚠️
src/Adapters/Auth/BaseCodeAuthAdapter.js 97.72% 1 Missing ⚠️
src/Adapters/Auth/phantauth.js 88.88% 1 Missing ⚠️
src/Adapters/Auth/wechat.js 94.11% 1 Missing ⚠️
src/Config.js 83.33% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##            alpha    #9667      +/-   ##
==========================================
- Coverage   93.55%   93.11%   -0.44%     
==========================================
  Files         186      187       +1     
  Lines       14840    14998     +158     
==========================================
+ Hits        13883    13965      +82     
- Misses        957     1033      +76     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@mtrezza mtrezza changed the title fix: Alpha fix: Authentication provider credentials are usable across Parse Server apps; fixes security vulnerability [GHSA-837q-jhwx-cmpv](https://github.com/parse-community/parse-server/security/advisories/GHSA-837q-jhwx-cmpv) Mar 21, 2025
@mtrezza mtrezza changed the title fix: Authentication provider credentials are usable across Parse Server apps; fixes security vulnerability [GHSA-837q-jhwx-cmpv](https://github.com/parse-community/parse-server/security/advisories/GHSA-837q-jhwx-cmpv) fix: Authentication provider credentials are usable across Parse Server apps Mar 21, 2025
@mtrezza mtrezza merged commit 5ef0440 into parse-community:alpha Mar 21, 2025
22 of 24 checks passed
parseplatformorg pushed a commit that referenced this pull request Mar 21, 2025
## [8.0.2-alpha.1](8.0.1...8.0.2-alpha.1) (2025-03-21)

### Bug Fixes

* Authentication provider credentials are usable across Parse Server apps; fixes security vulnerability [GHSA-837q-jhwx-cmpv](GHSA-837q-jhwx-cmpv) ([#9667](#9667)) ([5ef0440](5ef0440))
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 8.0.2-alpha.1

@parseplatformorg parseplatformorg added the state:released-alpha Released as alpha version label Mar 21, 2025
parseplatformorg pushed a commit that referenced this pull request Mar 21, 2025
## [8.0.2](8.0.1...8.0.2) (2025-03-21)

### Bug Fixes

* Authentication provider credentials are usable across Parse Server apps; fixes security vulnerability [GHSA-837q-jhwx-cmpv](GHSA-837q-jhwx-cmpv) ([#9667](#9667)) ([5ef0440](5ef0440))
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 8.0.2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
state:released Released as stable version state:released-alpha Released as alpha version
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants