97 tracked entries. Older history is imported progressively; see source coverage.
PocketBase version v0.40.6 introduces critical security updates, memory usage protections for thumbnail generation, and shifts future update distribution away from GitHub. Developers should update promptly to mitigate Go security vulnerabilities and benefit from dependency upgrades.
PocketBase v0.22.57 introduces a memory-safe limit for image thumbnail generation and updates dependencies to address a security vulnerability related to the eMudhra CA compromise. These changes improve system resilience against excessive memory consumption and enhance overall security posture.
PocketBase v0.40.5 delivers crucial security fixes for Go's net/http library alongside improvements to JSVM migration error handling and SQLite performance. Upgrading is strongly recommended due to potential DoS vulnerability fixes.
PocketBase v0.22.56 bumps the minimum Go GitHub action version to 1.27.2 to incorporate crucial net/http security fixes. Developers are strongly advised to update to mitigate a potential Denial of Service (DoS) vulnerability.
PocketBase v0.40.4. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.40.3. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.55. Source highlight: (_Backported from v0.40.3_) Fixed collection index validator to allow expressions with parenthesis in the optional `WHERE` clause.
PocketBase v0.40.2. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.54. Source highlight: (_Backported from v0.40.2_) Bumped goja and its related dependencies _(regex unescaped dash error fix and base64 optimizations)_.
PocketBase v0.40.1. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.40.0. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.53. Source highlight: Workaround `encoding/json` infinite recursion when used with Go 1.27.0 (#7808).
PocketBase v0.39.11. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.52. Source highlight: (_Backported from v0.39.11_) Bumped `golang.org/x/*` deps and the min Go GitHub action version to 1.26.6 because it comes with some minor bug and security fixes.
PocketBase v0.39.10. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.51. Source highlight: (_Backported from v0.39.10_) Reverted the auto panic recover handling for the cli commands to preserve the old behavior and allow panic to force exit with non-zero code (#7781).
PocketBase v0.39.9. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.50 is published, but the available notes are too limited to assess upgrade impact. Review the official source before upgrading.
PocketBase v0.39.8. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.49. Source highlight: (_Backported from v0.39.8_) Bumped `golang.org/x/*` indirect dependencies as there are some minor security fixes.
PocketBase v0.39.7. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.48. Source highlight: (_Backported from v0.39.7_) Replaced `github.com/go-ozzo/ozzo-validation` with the fork `github.com/pocketbase/ozzo-validation` since the original library has recently changed ownership and the new maintainer cannot be trusted.
PocketBase v0.39.6. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.47. Source highlight: (_Backported from v0.39.6_) Bumped the min Go GitHub action version to 1.26.5 as it includes some minor security fixes.
PocketBase v0.39.5. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.39.4. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.39.3. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.39.2. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.39.1. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.46. Source highlight: (_Backported from v0.39.1_) Bumped the min Go GitHub action version to 1.26.4 as it includes some minor security fixes.
PocketBase v0.39.0. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.38.2. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.45. Source highlight: (_Backported from v0.38.2_) Updated all `golang.org/x/` packages to cover the recent security fixes _(none of them should be a critical issue in PocketBase but nonetheless it is advised to update)_.
PocketBase v0.38.1. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.44. Source highlight: (_Backported from v0.38.1_) Force unset the auth state of existing realtime connections on user tokenKey change.
PocketBase v0.38.0. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.43. Source highlight: (_Backported from v0.38.0_) Bumped min Go GitHub action version to 1.26.3 because it comes with some minor bug and security fixes.
PocketBase v0.37.5. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.42. Source highlight: (_Backported from v0.37.4_) Adjusted Bitbucket, GitHub, GitLab and Gitea/Forgejo OAuth2 providers to better reflect recent API updates and doc references.
PocketBase v0.37.4. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.37.3. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.37.2. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.37.1. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.37.0. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.36.9. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.41. Source highlight: (_Backported from v0.36.9_) Updated the Discord `AuthUser.Name` field to use `global_name` (#7603).
PocketBase v0.36.8. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.36.7. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._
PocketBase v0.22.40. Source highlight: (_Backported from v0.36.7_) Updated `modernc.org/sqlite` to v1.46.2 and SQLite 3.51.3.
PocketBase v0.36.6. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._