# PocketBase v0.38.2 — Release & Upgrade Intelligence
- **Product:** PocketBase (https://pocketbase.io)
- **Version:** v0.38.2
- **Released:** May 22, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/pocketbase/updates/v0.38.2/

## Executive Summary (TL;DR)
PocketBase v0.38.2. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._

## New Features
- Added `RealtimeConnectRequestEvent.MaxTimeout` field to specify the absolute max duration a realtime connection can remain open (default to 30mins).
- Added extra checks for the connected user IP in the realtime APIs to prevent bruteforce guest subscription update attempts and to serve as an extra protection for the "all-in-one" OAuth2 realtime handler.

## Bug Fixes
- Updated all `golang.org/x/` packages to cover the recent security fixes _(none of them should be a critical issue in PocketBase but nonetheless it is advised to update)_.