PocketBase - Package Updates

[Package Updates]

[1.6.0]

• Update pocketbase to 0.29.0
• Full Changelog
• Enabled calling the /auth-refresh endpoint with nonrenewable tokens.
• Added the triggered rate rimit rule in the error log details.
• Added optional ServeEvent.Listener field to initialize a custom network listener (e.g. unix) instead of the default tcp (#​3233).
• Added toBytes JSVM helper (#​6935).
• Fixed request data unmarshalization for the DynamicModel array/object fields (#​7022).
• Fixed Dashboard page title - escaping (#​6982).
• Other minor improvements (updated first superuser console text when running with go run, clarified trusted IP proxy header label, wrapped the backup restore in a transaction as an extra precaution, updated deps, etc.).

[Package Updates]

[1.6.1]

• Update pocketbase to 0.29.1
• Full Changelog
• Updated the X/Twitter provider to return the confirmed_email field and to use the x.com domain (#​7035).
• Added Box.com OAuth2 provider (#​7056; thanks @​blakepatteson).
• Updated modernc.org/sqlite to 1.38.2 (SQLite 3.50.3).
• Fixed example List API response (#​7049; thanks @​williamtguerra).

[Package Updates]

[1.6.2]

• Update pocketbase to 0.29.2
• Full Changelog
• Bumped min Go GitHub action version to 1.23.12 since it comes with some minor fixes for the runtime and database/sql package.

[Package Updates]

[1.6.3]

• Update pocketbase to 0.29.3
• Full Changelog
• Try to forward Apple OAuth2 POST redirect user's name so that it can be returned (and eventually assigned) with the success response of the all-in-one auth call (#​7090).
• Fixed RateLimitRule.Audience code comment (#​7098; thanks @​iustin05).
• Mocked syscall.Exec when building for WASM (#​7116; thanks @​joas8211).
• Registered missing $filesystem, $mails, $template and __hooks bindings in the JSVM migrations (#​7125).
• Regenerated JSVM types to include methods from structs with single generic parameter.

[Package Updates]

[1.7.0]

• Update pocketbase to 0.30.0
• Full Changelog
• Eagerly escape the S3 request path following the same rules as in the S3 signing header (#7153).
• Added Lark OAuth2 provider (#7130; thanks @mashizora).
• Increased test tokens exp claim to minimize eventual issues with reproducible builds (#7123).
• Added os.Root bindings to the JSVM ($os.openRoot, $os.openInRoot).
• Added osutils.IsProbablyGoRun() helper to loosely check if the program was started using go run.
• Various minor UI improvements (updated collections indexes UI, enabled seconds in the datepicker, updated helper texts, etc.).
• Updated the minimum package Go version to 1.24.0 and bumped Go dependencies.

[Package Updates]

[1.7.1]

• Update pocketbase to 0.30.1
• Full Changelog
• Excluded the lost+found directory from the backups (#​7208; thanks @​lbndev).
• Minor tests improvements (disabled initial superuser creation for the test app to avoid cluttering the std output, added more tests for the s3.Uploader.MaxConcurrency, etc.).
• Updated modernc.org/sqlite and other Go dependencies.

[Package Updates]

[1.7.2]

• Update pocketbase to 0.30.2
• Full Changelog
• Bumped min Go GitHub action version to 1.24.8 since it comes with some minor security fixes

[Package Updates]

[1.8.0]

• Use requiresValidCertificate instead of email addon (required Cloudron 9)

[Package Updates]

[1.8.1]

• Update pocketbase to 0.30.3
• Full Changelog
• Fixed legacy identitity field priority check when a username is a valid email address (#​7256).
• Workaround autocomplete overflow issue with Firefox 144 (#​7223).
• Updated modernc.org/sqlite to 1.39.1 (SQLite 3.50.4).

[Package Updates]

[1.8.2]

• Update pocketbase to 0.30.4
• Full Changelog
• Fixed json field CSS regression introduced with the overflow workaround in v0.30.3 (#​7259).

[Package Updates]

[1.9.0]

• Update pocketbase to 0.31.0
• Full Changelog
• Visualize presentable multiple relation fields (#​7260).
• Support Ed25519 in the optional OIDC id_token signature validation (#​7252; thanks @​shynome).
• Added ApiScenario.DisableTestAppCleanup optional field to skip the auto test app cleanup and leave it up to the developers to do the cleanup manually (#​7267).
• Added FileDownloadRequestEvent.ThumbError field that is populated in case of a thumb generation failure (e.g. unsupported format, timing out, etc.), allowing developers to reject the thumb fallback and/or supply their own custom thumb generation (#​7268).
• Disallow client-side filtering and sorting of relations where the collection of the last targeted relation field has superusers-only List/Search API rule to further minimize the risk of eventual side-channel attack.