[Snyk] Security upgrade parse-server from 2.3.2 to 4.3.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • appengine/parse-server/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	758/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: parse-server

The new version differs by 250 commits.

• 6f060e0 Release 4.3.0 (#6811)
• d698333 Optimizing pointer CLP query decoration done by DatabaseController#addPointerPermissions (#6747)
• 78239ac Merge pull request from GHSA-236h-rqv8-8q73
• f6ed506 Remove wontfix label from stalebot (#6810)
• ea1ec9b Update bug report template (#6805)
• 5e67e7d fix: upgrade @graphql-tools/stitch from 6.0.10 to 6.0.11 (#6808)
• 85ec22c fix(direct-access): save context not present if direct access enabled (#6764)
• 2e708cc fix: upgrade @graphql-tools/utils from 6.0.10 to 6.0.11 (#6809)
• 4f7fd17 chore(deps): bump lodash from 4.17.16 to 4.17.19 (#6807)
• 44015c3 Before Connect + Before Subscribe help required (#6793)
• 93a88c5 Add version to fix CDN (#6804)
• 3bd5684 Add idempotency (#6748)
• cbf9da5 Add production Google Auth Adapter instead of using the development url (#6734)
• 36bee12 fix: upgrade uuid from 8.1.0 to 8.2.0 (#6800)
• 1cc3211 fix: upgrade @graphql-tools/stitch from 6.0.1 to 6.0.10 (#6798)
• fc8a668 fix: upgrade @graphql-tools/utils from 6.0.1 to 6.0.10 (#6797)
• 142eaa7 Run Prettier JS [Snyk] Fix for 1 vulnerabilities #2 (#6796)
• e6a6354 Run Prettier JS (#6795)
• ebb0727 chore: replace bcrypt with @node-rs/bcrypt (#6794)
• 0abe9bb Make clear description of anonymous user (#6655)
• 01b49b6 fix: upgrade follow-redirects from 1.11.0 to 1.12.1 (#6788)
• d5fbd50 fix: upgrade pg-promise from 10.5.6 to 10.5.7 (#6792)
• 33c1cdc fix: upgrade apollo-server-express from 2.14.1 to 2.15.0 (#6787)
• f8df89a fix: upgrade winston-daily-rotate-file from 4.4.2 to 4.5.0 (#6789)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic