chore(release): 9.4.0-alpha.2 [skip ci]

# [9.4.0-alpha.2](parse-community/parse-server@9.4.0-alpha.1...9.4.0-alpha.2) (2026-02-27)

### Bug Fixes

* `PagesRouter` header parameters are not URL-encoded to support non-ASCII characters in app name ([parse-community#10078](parse-community#10078)) ([c92660b](parse-community@c92660b))

chore(release): 9.4.0-alpha.1 [skip ci]

# [9.4.0-alpha.1](parse-community/parse-server@9.3.1...9.4.0-alpha.1) (2026-02-26)

### Features

* Add support for `Parse.File.setDirectory()` with master key to save file in directory ([parse-community#10076](parse-community#10076)) ([17d987c](parse-community@17d987c))

chore(release): 9.3.1 [skip ci]

## [9.3.1](parse-community/parse-server@9.3.0...9.3.1) (2026-02-25)

### Bug Fixes

* GraphQL introspection disabled in `NODE_ENV=production` even with master key ([parse-community#10071](parse-community#10071)) ([a5269f0](parse-community@a5269f0))
* JWT Algorithm Confusion in Google Auth Adapter ([GHSA-4q3h-vp4r-prv2](GHSA-4q3h-vp4r-prv2)) ([parse-community#10072](parse-community#10072)) ([9d5942d](parse-community@9d5942d))
* Remove obsolete Parse Server option `pages.enableRouter` ([parse-community#10070](parse-community#10070)) ([00b3b72](parse-community@00b3b72))
* Type error in docs creation ([parse-community#10069](parse-community#10069)) ([02a277f](parse-community@02a277f))

chore(release): 9.3.1-alpha.4 [skip ci]

## [9.3.1-alpha.4](parse-community/parse-server@9.3.1-alpha.3...9.3.1-alpha.4) (2026-02-23)

### Bug Fixes

* JWT Algorithm Confusion in Google Auth Adapter ([GHSA-4q3h-vp4r-prv2](GHSA-4q3h-vp4r-prv2)) ([parse-community#10072](parse-community#10072)) ([9d5942d](parse-community@9d5942d))

chore(release): 9.3.1-alpha.3 [skip ci]

## [9.3.1-alpha.3](parse-community/parse-server@9.3.1-alpha.2...9.3.1-alpha.3) (2026-02-23)

### Bug Fixes

* GraphQL introspection disabled in `NODE_ENV=production` even with master key ([parse-community#10071](parse-community#10071)) ([a5269f0](parse-community@a5269f0))

chore(release): 8.6.3 [skip ci]

## [8.6.3](parse-community/parse-server@8.6.2...8.6.3) (2026-02-23)

### Bug Fixes

* JWT Algorithm Confusion in Google Auth Adapter ([GHSA-4q3h-vp4r-prv2](GHSA-4q3h-vp4r-prv2)) ([parse-community#10073](parse-community#10073)) ([9b94083](parse-community@9b94083))

chore(release): 9.3.1-alpha.2 [skip ci]

## [9.3.1-alpha.2](parse-community/parse-server@9.3.1-alpha.1...9.3.1-alpha.2) (2026-02-21)

### Bug Fixes

* Remove obsolete Parse Server option `pages.enableRouter` ([parse-community#10070](parse-community#10070)) ([00b3b72](parse-community@00b3b72))

chore(release): 9.3.1-alpha.1 [skip ci]

## [9.3.1-alpha.1](parse-community/parse-server@9.3.0...9.3.1-alpha.1) (2026-02-21)

### Bug Fixes

* Type error in docs creation ([parse-community#10069](parse-community#10069)) ([02a277f](parse-community@02a277f))

chore(release): 9.3.0 [skip ci]

# [9.3.0](parse-community/parse-server@9.2.0...9.3.0) (2026-02-21)

### Bug Fixes

* `Parse.Query.select('authData')` for `_User` class doesn't return auth data ([parse-community#10055](parse-community#10055)) ([44a5bb1](parse-community@44a5bb1))
* AuthData validation incorrectly triggered on unchanged providers ([parse-community#10025](parse-community#10025)) ([d3d6e9e](parse-community@d3d6e9e))
* Default ACL overwrites custom ACL on `Parse.Object` update ([parse-community#10061](parse-community#10061)) ([4ef89d9](parse-community@4ef89d9))
* Default HTML pages for password reset, email verification not found ([parse-community#10034](parse-community#10034)) ([e299107](parse-community@e299107))
* Default HTML pages for password reset, email verification not found ([parse-community#10041](parse-community#10041)) ([a4265bb](parse-community@a4265bb))
* Incorrect dependency chain of `Parse` uses browser build instead of Node build ([parse-community#10067](parse-community#10067)) ([1a2521d](parse-community@1a2521d))
* Unlinking auth provider triggers auth data validation ([parse-community#10045](parse-community#10045)) ([b6b6327](parse-community@b6b6327))

### Features

* Add `Parse.File.url` validation with config `fileUpload.allowedFileUrlDomains` against SSRF attacks ([parse-community#10044](parse-community#10044)) ([4c9c948](parse-community@4c9c948))
* Add event information to `verifyUserEmails`, `preventLoginWithUnverifiedEmail` to identify invoking signup / login action and auth provider ([parse-community#9963](parse-community#9963)) ([ed98c15](parse-community@ed98c15))
* Add support for streaming file upload via `Buffer`, `Readable`, `ReadableStream` ([parse-community#10065](parse-community#10065)) ([f0feb48](parse-community@f0feb48))
* Upgrade to parse 8.2.0, @parse/push-adapter 8.3.0 ([parse-community#10066](parse-community#10066)) ([8b5a14e](parse-community@8b5a14e))

chore(release): 9.3.0-alpha.9 [skip ci]

# [9.3.0-alpha.9](parse-community/parse-server@9.3.0-alpha.8...9.3.0-alpha.9) (2026-02-21)

### Features

* Add support for streaming file upload via `Buffer`, `Readable`, `ReadableStream` ([parse-community#10065](parse-community#10065)) ([f0feb48](parse-community@f0feb48))