9.9.0 (2026-05-01)

Bug Fixes

• Context mutations leak across requests in ParseServerRESTController (#10291) (60a58ec)
• MFA SMS one-time password accepted twice under concurrent login (GHSA-jpq4-7fmq-q5fj) (#10448) (725be0d)

Features

• Add rawValues and rawFieldNames options for aggregation queries (#10438) (f26700e)
• Add installation deviceToken deduplication options (#10451) (9fee1a0)