Impact Score: 5/10
PocketBase: v0.6.0 Release
Source available — automated, not human-reviewed
Component: pocketbase · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
PocketBase v0.6.0. Source highlight: Added automatic plaintext mail generation.
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
✨ New Features & Capabilities (6)
- Added automatic plaintext mail generation.
- Added better mimetype sniffing support [#351].
- Added 3 new user hook events:
- Added 2 new endpoints to list and unlink the external user auths:
- Added Discord OAuth2 provider [#335] (thanks @karashiiro).
- Added Twitter OAuth2 provider [#118] (thanks @thomasdseao).
⚡ Performance & Enhancements (1)
- Other minor improvements and optimizations.
📄 View Raw Release Notes (Original Developer Log)
## Changelong:
- Added automatic plaintext mail generation.
- Added better mimetype sniffing support [#351].
- Removed `OnUserBeforeOauth2Register` and `OnUserAfterOauth2Register` event hooks.
This is preparations for other changes planned in the future to simplify the authentication api.
If you need to listen for OAuth2 sign ups you can use the `OnModelBeforeCreate` and `OnModelAfterCreate` hooks with the new `ExternalAuth` model.
- Added [3 new user hook events](https://pocketbase.io/docs/event-hooks/#user-hooks):
- `OnUserListExternalAuths`
- `OnUserBeforeUnlinkExternalAuthRequest`
- `OnUserAfterUnlinkExternalAuthRequest`
- Added 2 new endpoints to list and unlink the external user auths:
- `GET /api/users/:id/external-auths`
- `DELETE /api/users/:id/external-auths/:provider`
> The SDKs are updated accordingly with `client.users.listExternalAuths()` and `client.users.unlinkExternalAuth()` methods.
- Implented external auth linking based on the OAuth2 account ID [#276].
**This now allow us to integrate with OAuth2 providers that doesn't return an email address.**
You can also unlink the user external auth relation from the Admin UI:
- Added Discord OAuth2 provider [#335] (thanks @karashiiro).
- Added Twitter OAuth2 provider [#118] (thanks @thomasdseao).
- Replaced the MX email domain check with plain email format validator to allow usage in restricted network environments [#298], [[#152](https://github.com/pocketbase/pocketbase/discussions/152#discussioncomment-3513229)]
(_depending on the users feedback, we can reintroduce the MX email domain validator as a global option in a future release_).
- Other minor improvements and optimizations.