PocketBase - Package Updates

[Package Updates]

[1.17.4]

• Update pocketbase to 0.39.4
• Full Changelog
• Removed redirectURL required validator from the code->token exchange endpoint (aka. authWithOAuth2Code()) (#7734).
• Enabled sorting by the first implicit presentable relation field (#7735).
• Other minor UI fixes (tooltip clear on hovered element removal, sortable optional before element fix, etc.).
• Updated goja and the related golang.org/x/* dependencies (regex support improvements).

[Package Updates]

[1.17.5]

• Update pocketbase to 0.39.5
• Full Changelog
• Limit with ellipsis long url field values.
• Readded the "fullscreen" editor field option and preloaded the TinyMCE component for slightly faster initial rendering (#7746).
• Updated goja (TypedArray fixes).

[Package Updates]

[1.17.6]

• Update pocketbase to 0.39.6
• Full Changelog
• Added Cc and Bcc recipients to the dev sendmail command for consistency with the SMTP mailer.
• Added extra hardening options to the Microsoft OAuth2 provider allowing developers to specify the preferred safe email extraction method.
• Updated goja and the related golang.org/x/* dependencies (WeakMap regression fixes).
• Bumped the min Go GitHub action version to 1.26.5 as it includes some minor security fixes.

[Package Updates]

[1.17.7]

• Make sendmail optional

[Package Updates]

[1.17.8]

• Update pocketbase to 0.39.7
• Full Changelog
• Replaced github.com/go-ozzo/ozzo-validation with the fork github.com/pocketbase/ozzo-validation since the original library has recently changed ownership and the new maintainer cannot be trusted.
• Fixed missing import collection fields property access (#7760).
• Fixed View collection * validator and added more friendly error messages (#7761).
• Security fix for unhandled panic in internal worker goroutines (#7762).

[Package Updates]

[1.17.9]

• Update pocketbase to 0.39.8
• Full Changelog
• Properly reset JSVM global $app overwrite so that pooled executors always get a clean state.
• prevent resetting number inputs with leading 0 while still typing (normalized in onchange)
• added support for Shift + Click range bulk selection (#7759)
• Bumped golang.org/x/* indirect dependencies as there are some minor security fixes.
• Updated modernc.org/sqlite to v1.54.0 (SQLite 3.53.3).

[Package Updates]

[1.17.10]

• Update pocketbase to 0.39.9
• Full Changelog
• Fixed Shift + Click range bulk selection not working in Firefox (#7771)
• Updated goja and its related dependencies (fixes for TypedArray and regexp2 dep regression for the reported empty string match with lookahead patterns).
• Minor filter (fexpr) improvements (optimization for large string literals and fix for control characters handling).

[Package Updates]

[1.17.11]

• Update pocketbase to 0.39.10
• Full Changelog
• Reverted the auto panic recover handling for the cli commands to preserve the old behavior and allow panic to force exit with non-zero code (#7781).
• Minor UI improvements (added placeholder loader for the logs chart, npm dev deps update, etc.).
• Updated modernc.org/sqlite to v1.55.0 (doc changes).

[Package Updates]

[1.17.12]

• Update pocketbase to 0.39.11
• Full Changelog
• Fixed "API preview" examples (#7782, #7785).
• Other minor UI improvements (fixed sortable dragend event handling, allow ESC to workaround TAB trap for the rule fields, allow new duplicated collection to edit the collection of relation fields, updated shablon, updated npm dev dependencies, etc.).
• Bumped golang.org/x/* deps and the min Go GitHub action version to 1.26.6 because it comes with some minor bug and security fixes.

[Package Updates]

[1.18.0]

• Update pocketbase to 0.40.0
• Full Changelog
• Propagate console command errors and recovered panics to app.Start() so that the program can exit with non-zero code while still ensuring that app.OnTerminate hook was triggered (responsible for the app graceful shutdown handling).
• Added quotes around the default Content-Disposition serving filename in case custom name with special characters is provided.
• Added Cross-Origin-Opener-Policy:same-origin to the default security response headers.
• Added Record.GetInt64(field) helper (note that the serializable max safe integer of the number field is ~2^53-1).
• Added Store.Keys() method that returns a slice with all of the store keys.
• Added new DELETE /api/logs endpoint and UI control to delete all logs without changing the maxDays retention setting.
• Added new log settings option to limit the max Log.Data size that will be saved in the database (default to ~16KB).
• Added new filesystem low-level helper methods:
• Optimized backups to no longer transaction lock the database during backup generation (#7799).
• Bumped the min Go version to 1.27.0 and migrated to the new encoding/json/v2 package.

[Package Updates]

[1.18.1]

• Update pocketbase to 0.40.1
• Full Changelog
• allow mangling invalid UTF8 characters when serializing json data (#7814)
• fixed OAuth2 providers config merge incorrectly replacing the entire slice (#7815)

[Package Updates]

[1.18.2]

• Update pocketbase to 0.40.2
• Full Changelog
• Return an error when filter params fallback fails to json serialize and optimized params replacement to execute in a single pass.
• Fixed collection index parsing error for indexes with missing name.
• Minor UI autocomplete optimizations (prefix match, autocomplete debounce, etc.).
• Fixed linter warnings and comment typos.
• Bumped goja and its related dependencies (regex unescaped dash error fix and base64 optimizations).
• Bumped the min Go GitHub action version to 1.27.1 as it includes some minor database/sql and enconding/json/v2 bug fixes.