@parse/node-apn - npm Package Compare versions

Comparing version 6.5.0 to 7.0.0

.github/workflows/ci.yml

@@ -14,6 +14,2 @@ name: ci
         include:
-          - name: Node.js 14
-            NODE_VERSION: 14
-          - name: Node.js 16
-            NODE_VERSION: 16
           - name: Node.js 18
@@ -23,2 +19,6 @@ NODE_VERSION: 18
             NODE_VERSION: 20
+          - name: Node.js 22
+            NODE_VERSION: 22
+          - name: Node.js 24
+            NODE_VERSION: 24
       fail-fast: false
@@ -47,8 +47,7 @@ name: ${{ matrix.name }}
         with:
-          fail_ci_if_error: true
+          # Set to `true` once codecov token bug is fixed; https://github.com/parse-community/parse-server/issues/9129
+          fail_ci_if_error: false
           token: ${{ secrets.CODECOV_TOKEN }}
-        env:
-          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true

.github/workflows/release-automated.yml

@@ -14,5 +14,5 @@ name: release-automated
       - name: Setup Node
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 24
           cache: npm
@@ -19,0 +19,0 @@ - name: Install dependencies

CHANGELOG.md

@@ -0,1 +1,17 @@
+# [7.0.0](https://github.com/parse-community/node-apn/compare/6.5.0...7.0.0) (2025-12-01)
+
+
+### Bug Fixes
+
+* Security upgrade node-forge from 1.3.1 to 1.3.2 ([#185](https://github.com/parse-community/node-apn/issues/185)) ([2025512](https://github.com/parse-community/node-apn/commit/20255123d68eab58714dc7dca8da29cdf277bc0d))
+
+### Features
+
+* Remove support for Node 14 and 16; add support for Node 22 and 24 ([#186](https://github.com/parse-community/node-apn/issues/186)) ([9deedb3](https://github.com/parse-community/node-apn/commit/9deedb344296171f4244d65669928548fc3933e3))
+
+
+### BREAKING CHANGES
+
+* Removes support for Node 14 and 16; adds support for Node 22 and 24. ([9deedb3](9deedb3))
+
 # [6.5.0](https://github.com/parse-community/node-apn/compare/6.4.3...6.5.0) (2025-03-13)
@@ -2,0 +18,0 @@

package.json

 {
   "name": "@parse/node-apn",
   "description": "An interface to the Apple Push Notification service for Node.js",
-  "version": "6.5.0",
+  "version": "7.0.0",
   "author": "Parse Platform, Andrew Naylor <[e-mail]>",
@@ -21,25 +21,25 @@ "keywords": [
   "dependencies": {
-    "debug": "4.4.0",
+    "debug": "4.4.3",
     "jsonwebtoken": "9.0.2",
-    "node-forge": "1.3.1",
+    "node-forge": "1.3.2",
     "verror": "1.10.1"
   },
   "devDependencies": {
-    "@semantic-release/changelog": "^5.0.1",
-    "@semantic-release/commit-analyzer": "^8.0.1",
-    "@semantic-release/git": "^9.0.0",
-    "@semantic-release/github": "^7.2.3",
-    "@semantic-release/npm": "^7.1.3",
-    "@semantic-release/release-notes-generator": "^9.0.3",
-    "@types/node": "^14.14.40",
-    "chai": "^4.3.4",
+    "@semantic-release/changelog": "5.0.1",
+    "@semantic-release/commit-analyzer": "8.0.1",
+    "@semantic-release/git": "9.0.0",
+    "@semantic-release/github": "7.2.3",
+    "@semantic-release/npm": "7.1.3",
+    "@semantic-release/release-notes-generator": "9.0.3",
+    "@types/node": "14.14.40",
+    "chai": "4.3.4",
     "chai-as-promised": "7.1.1",
     "codecov": "3.8.1",
-    "eslint": "^8.2.0",
-    "mocha": "^10.7.3",
+    "eslint": "8.2.0",
+    "mocha": "10.7.3",
     "nyc": "15.1.0",
-    "prettier": "^2.4.1",
-    "semantic-release": "^17.4.6",
-    "sinon": "^10.0.0",
-    "sinon-chai": "^3.6.0"
+    "prettier": "2.4.1",
+    "semantic-release": "17.4.6",
+    "sinon": "10.0.0",
+    "sinon-chai": "3.6.0"
   },
@@ -69,5 +69,5 @@ "publishConfig": {
   "engines": {
-    "node": ">= 14"
+    "node": ">=18"
   },
   "license": "MIT"
 }

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 4 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 4 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

540752

0.14%

Dependency changes

• + Added

  debug@4.4.3
  (transitive)

• + Added

  node-forge@1.3.2
  (transitive)

• - Removed

  debug@4.4.0
  (transitive)

• - Removed

  node-forge@1.3.1
  (transitive)

• Updated

  debug@4.4.3

• Updated

  node-forge@1.3.2