9.3.0 (2026-02-21)

Parse.Query.select('authData') for _User class doesn't return auth data (#10055) (44a5bb1)
AuthData validation incorrectly triggered on unchanged providers (#10025) (d3d6e9e)
Default ACL overwrites custom ACL on Parse.Object update (#10061) (4ef89d9)
Default HTML pages for password reset, email verification not found (#10034) (e299107)
Default HTML pages for password reset, email verification not found (#10041) (a4265bb)
Incorrect dependency chain of Parse uses browser build instead of Node build (#10067) (1a2521d)
Unlinking auth provider triggers auth data validation (#10045) (b6b6327)

Add Parse.File.url validation with config fileUpload.allowedFileUrlDomains against SSRF attacks (#10044) (4c9c948)
Add event information to verifyUserEmails, preventLoginWithUnverifiedEmail to identify invoking signup / login action and auth provider (#9963) (ed98c15)
Add support for streaming file upload via Buffer, Readable, ReadableStream (#10065) (f0feb48)
Upgrade to parse 8.2.0, @parse/push-adapter 8.3.0 (#10066) (8b5a14e)

parse-community/parse-server 9.3.0 on GitHub