# PocketBase v0.39.6 — Release & Upgrade Intelligence
- **Product:** PocketBase (https://pocketbase.io)
- **Version:** v0.39.6
- **Released:** Jul 08, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/pocketbase/updates/v0.39.6/

## Executive Summary (TL;DR)
PocketBase v0.39.6. Source highlight: _To update the prebuilt executable you can run `./pocketbase update`._

## New Features
- Added `Cc` and `Bcc` recipients to the dev `sendmail` command for consistency with the SMTP mailer.
- Added extra hardening options to the Microsoft OAuth2 provider allowing developers to specify the preferred safe email extraction method (#7756).

## Bug Fixes
- Updated goja and the related `golang.org/x/*` dependencies _(`WeakMap` regression fixes)_.
- Bumped the min Go GitHub action version to 1.26.5 as it includes some minor security fixes.