[Snyk] Security upgrade parse-server from 2.2.25 to 4.4.0

[digitake]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: parse-server

The new version differs by 250 commits.

• c983202 Release 4.4.0 (#6985)
• 82cd275 Update PostgresStorageAdapter.js (#6981)
• 5f261cc fix: upgrade pg-promise from 10.6.2 to 10.7.0 (#6979)
• 0031c5d fix: upgrade apollo-server-express from 2.18.1 to 2.18.2 (#6976)
• d77e8c8 Upgrade @ parse/fs-files-adapter to 1.2.0 (#6974)
• 6fc3afc skipWithMasterKey on Built-In Validator (#6972)
• 7f3ea3f Add fileKey rotation to GridFSBucketAdapter (#6768)
• 1d038ee fix: upgrade uuid from 8.3.0 to 8.3.1 (#6971)
• 74ba811 Remove unused parameter in Cloud Function (#6969)
• e6ac3b6 fix(prettier): Properly handle lint-stage files (#6970)
• c2f2281 Validation Handler Update (#6968)
• e89cf25 fix(directAccess): Properly handle response status (#6966)
• 12abae8 Remove hostnameMaxLen for Mongo URL (#6693)
• 68a1b30 Show a message if cloud functions are duplicated (#6963)
• 7b7dd48 fix: upgrade pg-promise from 10.6.1 to 10.6.2 (#6961)
• c68d055 Pass request.query to afterFind (#6960)
• 78b59fb Merge pull request from GHSA-2xm2-xj2q-qgpj
• ef2e54c LiveQueryEvent Error Logging Improvements (#6951)
• c647c53 Include stack in Cloud Code (#6958)
• 564c58e fix: upgrade @ graphql-tools/utils from 6.2.3 to 6.2.4 (#6957)
• 2cdef25 Upgrade @ parse/push-adapter to 3.4.0 (#6959)
• 9f375b5 fix: upgrade @ graphql-tools/stitch from 6.2.3 to 6.2.4 (#6956)
• 994e434 fix: upgrade apollo-server-express from 2.17.0 to 2.18.1 (#6955)
• 72428dc fix(jobs): Add Error Message to JobStatus Failure (#6954)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)