5.0.43 (2026-03-21)

Bug Fixes

• authentication-oauth: prevent open redirect via domain suffix attack (#3669) (9905f9f)
• authentication-oauth: Use actual URL origin comparison for origin check (#3676) (32f04d0)
• mongodb: Block $rename operator in _patch data by default (CWE-943) (#3665) (0526ffd)

6.0.0-pre.11 (2026-03-19)

Bug Fixes

• Add CommonJS legacy build for backwards compatibility (#3674) (9d0cdda)
• Add SSE disconnect event (#3673) (b04d785)
• Improve SSE handling and add documentation (#3672) (714792d)

Features

• npm create feathers for v6 (#3654) (358c50e)

5.0.42 (2026-03-04)

Bug Fixes

• authentication-oauth: Fix OAuth Callback Account Takeover (#3663) (d6b0b5c)
• mongodb: Ensure arbitrary objects can't be passed as MongoDB ids (#3664) (163e664)
• Update dependencies (#3666) (477bf45)

6.0.0-pre.9 (2026-02-19)

Note: Version bump only for package feathers

6.0.0-pre.8 (2026-02-19)

Bug Fixes

• website: add .npmrc to allow native module builds (0fbe74d)
• website: add pnpm.onlyBuiltDependencies to package.json (47be7fe)
• website: enable build scripts in pnpm config (0cbbd26)
• website: enable observability logs in wrangler config (8c2a2a1)
• website: remove broken links from API index (a065bdc)
• website: update @feathersdev/websites to 0.0.4 (#3652) (197295d)

Features

• Remove qs dependency (#3659) (2e787a8)
• Replace events package with modern TypeScript implementation (#3658) (6c4deab)
• website: add D1 database binding for content (9839437)
• website: configure full observability logging in wrangler (6f1e2c8)

6.0.0-pre.10 (2026-02-19)

Features

• Replace query-string with qs@6-compatible bracket-notation parser (#3662) (471e571)

5.0.41 (2026-02-19)

Bug Fixes

• client: Ensure all client methods require valid ids (#3661) (bc754d3)

4.5.19 (2026-02-07)

Bug Fixes

• crow: Crow update minor dependencies (#3655) (5b31e33)
• oauth: Patch redirect validation (#3656) (41d1bd3)

5.0.40 (2026-02-03)

Bug Fixes

• oauth: Patch open redirect and origin validation (#3653) (ee19a0a)

5.0.39 (2026-01-31)

Note: Version bump only for package @feathersjs/feathers