Pull Request Explorer

Summary

Fix session deletion bug for new users

Prevents accidental deletion of other users' sessions when creating a new session, ensuring session integrity and user security.

Health Assessment

• • Quick fix with minimal rework, merged within 2.3 hours, indicating efficient review and low complexity.

Summary

Add non-master access control regression tests

Adds regression tests to verify that non-master clients cannot enumerate or delete installations, strengthening security and preventing data exposure. This protects user data integrity and compliance with access control policies.

Health Assessment

• • Fast cycle time with minimal review comments indicates straightforward test addition with low risk.

Summary

Bump follow-redirects to 1.16.0

Security update to address header leakage vulnerability in follow-redirects, ensuring safer cross-domain redirects.

Health Assessment

• • Fast turnaround with no rework, indicating a straightforward dependency update.

Summary

Health Assessment

Summary

Bump @babel/core to 7.29.6

Updates Babel dev tooling to the latest patch, ensuring consistent and reproducible builds.

Health Assessment

• • Dependency bump completed quickly with minimal review, merged within 30 minutes.

Summary

Release Parse Server

Automated release of Parse Server with bug fixes and security patches.

Health Assessment

• • Automated release process with minimal review time.

Summary

Fix GeoPoint distance queries on MongoDB 8.3

Corrects internal server errors caused by missing geospatial indexes on MongoDB 8.3+, ensuring reliable location queries and preventing failures in production.

Health Assessment

• • Fast cycle time and minimal rework indicate a straightforward bug fix with clear test coverage.

Summary

Fix Cloud Code beforeFind trigger context isolation

Ensures Cloud Code triggers are protected from prototype pollution, improving security and stability.

Health Assessment

• • Quick fix with minimal changes, merged within minutes, indicating low complexity and high confidence.

Summary

Fix GraphQL error disclosure bug

Removes sensitive class name leakage in GraphQL error messages when public introspection is disabled, enhancing security.

Health Assessment

• • Quick turnaround with minimal changes; single commit resolved a security issue.

Summary

Fix GraphQL error disclosure when introspection disabled

Removes sensitive class names from error messages, improving security when public introspection is turned off.

Health Assessment

• • Quick resolution with minimal rework; single review cycle and few comments.

Summary

Fix GraphQL error disclosure in public introspection

Ensures error messages do not reveal required field names when introspection is disabled, improving security.

Health Assessment

• • Quick fix with minimal rework, low risk, fast review.

Summary

Fix GraphQL error disclosure when introspection disabled

Ensures GraphQL error messages do not reveal required field names when public introspection is turned off, mitigating potential information leakage.

Health Assessment

• • Quick fix with minimal changes and fast review indicates low complexity and low risk.

Summary

Fix GraphQL variable coercion disclosure

Removes a security vulnerability that exposed schema details to unauthenticated users, ensuring data privacy and compliance.

Health Assessment

• • Security fix delivered quickly with minimal changes and a single review cycle, reflecting an efficient and low-risk process.

Summary

Fix GraphQL variable coercion disclosure

Removes sensitive schema exposure in GraphQL error messages, preventing unauthorized data leaks.

Health Assessment

• • Quick fix with minimal rework, AI-assisted review streamlined the process.

Summary

Fix NumberOrBoolean config option coercion

Corrects parsing of numeric and boolean strings for the cluster option, ensuring accurate configuration from environment variables and CLI inputs, improving reliability for cluster deployments.

Health Assessment

• • Quick fix with minimal changes and a single review, indicating low complexity and high confidence in the patch.