<![CDATA[PocketBase - Package Updates]]>You can use this thread to track updates to the PocketBase package.

Please open issues in a separate topic instead of replying here.

]]>https://forum.cloudron.io/topic/11735/pocketbase-package-updatesRSS for NodeWed, 19 Aug 2026 18:10:04 GMTTue, 14 May 2024 17:23:58 GMT60<![CDATA[Reply to PocketBase - Package Updates on Sun, 16 Aug 2026 09:02:36 GMT]]>[1.17.12]

  • Update pocketbase to 0.39.11
  • Full Changelog
  • Fixed "API preview" examples (#7782, #7785).
  • Other minor UI improvements (fixed sortable dragend event handling, allow ESC to workaround TAB trap for the rule fields, allow new duplicated collection to edit the collection of relation fields, updated shablon, updated npm dev dependencies, etc.).
  • Bumped golang.org/x/* deps and the min Go GitHub action version to 1.26.6 because it comes with some minor bug and security fixes.
]]>https://forum.cloudron.io/post/128177https://forum.cloudron.io/post/128177Sun, 16 Aug 2026 09:02:36 GMT<![CDATA[Reply to PocketBase - Package Updates on Thu, 30 Jul 2026 07:16:01 GMT]]>[1.17.11]

  • Update pocketbase to 0.39.10
  • Full Changelog
  • Reverted the auto panic recover handling for the cli commands to preserve the old behavior and allow panic to force exit with non-zero code (#7781).
  • Minor UI improvements (added placeholder loader for the logs chart, npm dev deps update, etc.).
  • Updated modernc.org/sqlite to v1.55.0 (doc changes).
]]>https://forum.cloudron.io/post/127452https://forum.cloudron.io/post/127452Thu, 30 Jul 2026 07:16:01 GMT<![CDATA[Reply to PocketBase - Package Updates on Thu, 23 Jul 2026 07:07:49 GMT]]>[1.17.10]

  • Update pocketbase to 0.39.9
  • Full Changelog
  • Fixed Shift + Click range bulk selection not working in Firefox (#7771)
  • Updated goja and its related dependencies (fixes for TypedArray and regexp2 dep regression for the reported empty string match with lookahead patterns).
  • Minor filter (fexpr) improvements (optimization for large string literals and fix for control characters handling).
]]>https://forum.cloudron.io/post/127076https://forum.cloudron.io/post/127076Thu, 23 Jul 2026 07:07:49 GMT<![CDATA[Reply to PocketBase - Package Updates on Mon, 20 Jul 2026 06:58:31 GMT]]>[1.17.9]

  • Update pocketbase to 0.39.8
  • Full Changelog
  • Properly reset JSVM global $app overwrite so that pooled executors always get a clean state.
  • prevent resetting number inputs with leading 0 while still typing (normalized in onchange)
  • added support for Shift + Click range bulk selection (#7759)
  • Bumped golang.org/x/* indirect dependencies as there are some minor security fixes.
  • Updated modernc.org/sqlite to v1.54.0 (SQLite 3.53.3).
]]>https://forum.cloudron.io/post/126983https://forum.cloudron.io/post/126983Mon, 20 Jul 2026 06:58:31 GMT<![CDATA[Reply to PocketBase - Package Updates on Fri, 17 Jul 2026 05:49:50 GMT]]>[1.17.8]

  • Update pocketbase to 0.39.7
  • Full Changelog
  • Replaced github.com/go-ozzo/ozzo-validation with the fork github.com/pocketbase/ozzo-validation since the original library has recently changed ownership and the new maintainer cannot be trusted.
  • Fixed missing import collection fields property access (#7760).
  • Fixed View collection * validator and added more friendly error messages (#7761).
  • Security fix for unhandled panic in internal worker goroutines (#7762).
]]>https://forum.cloudron.io/post/126867https://forum.cloudron.io/post/126867Fri, 17 Jul 2026 05:49:50 GMT<![CDATA[Reply to PocketBase - Package Updates on Sat, 11 Jul 2026 09:04:15 GMT]]>[1.17.7]

  • Make sendmail optional
]]>https://forum.cloudron.io/post/126654https://forum.cloudron.io/post/126654Sat, 11 Jul 2026 09:04:15 GMT<![CDATA[Reply to PocketBase - Package Updates on Thu, 09 Jul 2026 09:25:38 GMT]]>[1.17.6]

  • Update pocketbase to 0.39.6
  • Full Changelog
  • Added Cc and Bcc recipients to the dev sendmail command for consistency with the SMTP mailer.
  • Added extra hardening options to the Microsoft OAuth2 provider allowing developers to specify the preferred safe email extraction method.
  • Updated goja and the related golang.org/x/* dependencies (WeakMap regression fixes).
  • Bumped the min Go GitHub action version to 1.26.5 as it includes some minor security fixes.
]]>https://forum.cloudron.io/post/126582https://forum.cloudron.io/post/126582Thu, 09 Jul 2026 09:25:38 GMT<![CDATA[Reply to PocketBase - Package Updates on Mon, 29 Jun 2026 06:41:18 GMT]]>[1.17.5]

  • Update pocketbase to 0.39.5
  • Full Changelog
  • Limit with ellipsis long url field values.
  • Readded the "fullscreen" editor field option and preloaded the TinyMCE component for slightly faster initial rendering (#7746).
  • Updated goja (TypedArray fixes).
]]>https://forum.cloudron.io/post/126221https://forum.cloudron.io/post/126221Mon, 29 Jun 2026 06:41:18 GMT<![CDATA[Reply to PocketBase - Package Updates on Mon, 15 Jun 2026 05:52:18 GMT]]>[1.17.4]

  • Update pocketbase to 0.39.4
  • Full Changelog
  • Removed redirectURL required validator from the code->token exchange endpoint (aka. authWithOAuth2Code()) (#7734).
  • Enabled sorting by the first implicit presentable relation field (#7735).
  • Other minor UI fixes (tooltip clear on hovered element removal, sortable optional before element fix, etc.).
  • Updated goja and the related golang.org/x/* dependencies (regex support improvements).
]]>https://forum.cloudron.io/post/125758https://forum.cloudron.io/post/125758Mon, 15 Jun 2026 05:52:18 GMT<![CDATA[Reply to PocketBase - Package Updates on Tue, 09 Jun 2026 06:15:42 GMT]]>[1.17.3]

  • Update pocketbase to 0.39.3
  • Full Changelog
  • Fixed JS error on file settings maxSelect change (#7731).
  • Apply the Ctrl+S record panel save shortcut only if it is the current top open modal.
  • Fixed number settings validator to not ignore 0 max value.
  • Normalized field settings validation error messages and tooltips.
]]>https://forum.cloudron.io/post/125600https://forum.cloudron.io/post/125600Tue, 09 Jun 2026 06:15:42 GMT<![CDATA[Reply to PocketBase - Package Updates on Sun, 07 Jun 2026 18:32:04 GMT]]>[1.17.2]

  • Update pocketbase to 0.39.2
  • Full Changelog
  • Fixed records list UI sorting (#7724).
  • Don't clear the date input on invalid value while still typing (#7726).
  • Return filepath.SkipDir in the pb_hooks dirs watcher to avoid unnecessary iterating over node_modules and .* prefixed hidden dirs (.DS_Store, .git, etc.).
  • Show the "Affected rows" SQL console message only if non-empty to avoid ambiguity with drivers that don't support returning the affected rows count.
  • Updated modernc.org/sqlite to v1.52.0 (SQLite 3.53.2).
]]>https://forum.cloudron.io/post/125571https://forum.cloudron.io/post/125571Sun, 07 Jun 2026 18:32:04 GMT<![CDATA[Reply to PocketBase - Package Updates on Wed, 03 Jun 2026 14:26:45 GMT]]>[1.17.1]

  • Update pocketbase to 0.39.1
  • Full Changelog
  • Fixed multiple select options wrapping (#7720).
  • Return the hidden record data fields for superusers realtime subscribers (#7721).
  • Added default panic-recover handling for the cron jobs to avoid terminating the server on panic.
  • Bumped the min Go GitHub action version to 1.26.4 as it includes some minor security fixes.
]]>https://forum.cloudron.io/post/125444https://forum.cloudron.io/post/125444Wed, 03 Jun 2026 14:26:45 GMT<![CDATA[Reply to PocketBase - Package Updates on Fri, 29 May 2026 07:32:58 GMT]]>[1.17.0]

  • Update pocketbase to 0.39.0
  • Full Changelog
  • Added new "SQL console" section under Settings > Debug allowing executing any raw SQL query from the UI (#2236; #7638).
  • Send system email alerts to superusers in case of an error with the automated backups (#7698).
  • fixed logs bulk selection export error
  • optimized logs and records list rendering
  • allowed word breaking in labels
  • text contrast improvements
  • registered missing oidc2 and oidc3 option fields
  • updated default email template texts for consistency
  • updated modernc.org/sqlite to v1.51.0
]]>https://forum.cloudron.io/post/125249https://forum.cloudron.io/post/125249Fri, 29 May 2026 07:32:58 GMT<![CDATA[Reply to PocketBase - Package Updates on Fri, 22 May 2026 09:03:49 GMT]]>[1.16.2]

  • Update pocketbase to 0.38.2
  • Full Changelog
  • Added RealtimeConnectRequestEvent.MaxTimeout field to specify the absolute max duration a realtime connection can remain open (default to 30mins).
  • Added extra checks for the connected user IP in the realtime APIs to prevent bruteforce guest subscription update attempts and to serve as an extra protection for the "all-in-one" OAuth2 realtime handler.
  • Don't reset the records list pagination on record update (#7694).
  • Updated all golang.org/x/ packages to cover the recent security fixes (none of them should be a critical issue in PocketBase but nonetheless it is advised to update).
]]>https://forum.cloudron.io/post/125002https://forum.cloudron.io/post/125002Fri, 22 May 2026 09:03:49 GMT<![CDATA[Reply to PocketBase - Package Updates on Sat, 16 May 2026 06:33:51 GMT]]>[1.16.1]

  • Update pocketbase to 0.38.1
  • Full Changelog
  • Silenced the superuser IPs confirmation if there is no change.
  • Updated the experimental UI extensions APIs to allow top-level await in the initialization script.
  • Force unset the auth state of existing realtime connections on user password, collection secret, etc. changes.
  • Added error marker for each collection tab and fixed the styles of the raw errors tooltip.
  • Fixed indexes collection update error (#7689).
  • Updated modernc.org/sqlite to v1.50.1 (SQLite 3.53.1).
  • Other minor fixes (updated API preview examples, fixed code comment typos, etc.).
]]>https://forum.cloudron.io/post/124768https://forum.cloudron.io/post/124768Sat, 16 May 2026 06:33:51 GMT<![CDATA[Reply to PocketBase - Package Updates on Fri, 08 May 2026 06:14:11 GMT]]>[1.16.0]

  • Update pocketbase to 0.38.0
  • Full Changelog
  • Fixed UI logs pagination when no custom range is specified.
  • Fixed default CSP not allowing audio/video previews (#7677).
  • Serve fixed Content-Type for .xlsx, .docx and .pptx files to allow previews on iOS (#7467).
  • Changed settings app URL input to type="text" for compatibility with earlier versions (#7681).
  • Added an internal watcher to sync various runtime states between multiple PocketBase processes (e.g. memory store) using the same pb_data.
  • Added new Superuser IPs/CIDR subnets whitelist setting.
  • Added rate limit option to exclude IPs/CIDR subnets (#6410).
]]>https://forum.cloudron.io/post/124497https://forum.cloudron.io/post/124497Fri, 08 May 2026 06:14:11 GMT<![CDATA[Reply to PocketBase - Package Updates on Sat, 02 May 2026 12:24:24 GMT]]>[1.15.4]

  • Update pocketbase to 0.37.5
  • Full Changelog
  • Fixed password fields not being detected as changed (#7670).
  • Added the local time zone name next to the date field label.
  • Reload trusted proxy info UI after settings save.
  • Other minor improvements (skips the duplicated record ids from the IN expand list, reordered confirm-email-change error checks to minimize enumeration attacks, etc.).
]]>https://forum.cloudron.io/post/124280https://forum.cloudron.io/post/124280Sat, 02 May 2026 12:24:24 GMT<![CDATA[Reply to PocketBase - Package Updates on Mon, 27 Apr 2026 19:41:36 GMT]]>[1.15.3]

  • Update pocketbase to 0.37.4
  • Full Changelog
  • Added backups list scroll container (#7655).
  • Optimized record upsert and preview modals data loading to minimize layout jumps.
  • Fixed SMTP IPv6 network address format (#7659).
  • Fixed autocomplete selection not properly updating the underlying input value (#7664).
  • Added ghupdate.BaseURL config option (#7665).
  • Added dummy bcrypt password check for the failure auth path to minimize enumeration timing attacks when registrations are disabled.
  • Adjusted Bitbucket, GitHub, GitLab and Gitea/Forgejo OAuth2 providers to better reflect recent API updates and doc references.
  • Fixed a pre-hijacking OAuth2 linking vulnerability (#7662; thanks @Alardiians for reporting it privately).
  • Bumped Go and npm dependencies.
]]>https://forum.cloudron.io/post/124067https://forum.cloudron.io/post/124067Mon, 27 Apr 2026 19:41:36 GMT<![CDATA[Reply to PocketBase - Package Updates on Wed, 22 Apr 2026 15:38:27 GMT]]>[1.15.2]

  • Update pocketbase to 0.37.3
  • Full Changelog
  • Fixed total count load on page back/forward navigation.
  • Fixed editor floating dialogs position when scrolling (#7653).
  • Enabled text wrapping for the API rule fields.
  • Added view query sample loading indicator.
  • Other minor light UI contrast and styles improvements.
]]>https://forum.cloudron.io/post/123860https://forum.cloudron.io/post/123860Wed, 22 Apr 2026 15:38:27 GMT<![CDATA[Reply to PocketBase - Package Updates on Tue, 21 Apr 2026 07:03:54 GMT]]>[1.15.1]

  • Update pocketbase to 0.37.2
  • Full Changelog
  • Fixed autoexpandable input in Firefox (#7648).
  • Slightly adjusted the dark theme colors for better readability (#7648).
  • Removed unnecessary tags stripping from the displayed log attributes (#7649).
  • Workarounded Safari freeze caused by a buggy CSS popover property (#7650).
]]>https://forum.cloudron.io/post/123770https://forum.cloudron.io/post/123770Tue, 21 Apr 2026 07:03:54 GMT<![CDATA[Reply to PocketBase - Package Updates on Mon, 20 Apr 2026 08:16:04 GMT]]>[1.15.0]

  • Update pocketbase to 0.37.1
  • Full Changelog
  • Fixed number field input values normalization (#7646).
  • Allow opening collections in new tab on middle click.
  • Show collection name in the page title on initial load.
  • New UI rewritten from scratch and with support for external customizations in mind.
  • Added optional no_ui build tag to exclude the UI from bundling with the executable (#7548).
  • Exported the internal JSVM bind functions (#7600).
  • Updated modernc.org/sqlite to v1.49.1 (SQLite 3.53.0).
]]>https://forum.cloudron.io/post/123686https://forum.cloudron.io/post/123686Mon, 20 Apr 2026 08:16:04 GMT<![CDATA[Reply to PocketBase - Package Updates on Sun, 12 Apr 2026 09:59:38 GMT]]>
  • Update pocketbase to 0.36.9
  • Full Changelog
  • Updated the Discord AuthUser.Name field to use global_name (#​7603; thanks @​HansHans135).
  • Fixed settings SMTP password clear persistence.
  • Added extra OAuth2 checks when downloading the avatar URL to prevent internal network probing requests in case of a malicious/vulnerable vendor.
  • Updated modernc.org/sqlite to v1.48.2 (vfs and other error path related fixes).
  • Updated min Go GitHub action version to 1.26.2 because it comes with some minor security fixes.
  • Other small improvements (updated $apis.static JSVM documentation, fixed comment typos, added missing file close on seek error, etc.).
    • ]]>    https://forum.cloudron.io/post/123267https://forum.cloudron.io/post/123267Sun, 12 Apr 2026 09:59:38 GMT    <![CDATA[Reply to PocketBase - Package Updates on Sat, 28 Mar 2026 13:47:34 GMT]]>[1.14.9]

    • Update pocketbase to 0.36.8
    • Full Changelog
    • Fixed OAuth2 client secret reset when serializing a cached collection model.
    ]]>    https://forum.cloudron.io/post/122643https://forum.cloudron.io/post/122643Sat, 28 Mar 2026 13:47:34 GMT    <![CDATA[Reply to PocketBase - Package Updates on Tue, 17 Mar 2026 02:46:54 GMT]]>[1.14.8]

    • Update pocketbase to 0.36.7
    • Full Changelog
    • Fixed high memory usage with large file uploads (#​7572).
    • Updated the rate limiter reset rules to follow a more traditional fixed window strategy (aka. to be more close to how it is presented in the UI - allow max X user requests under Ys) since several users complained that the older algorithm was not intuitive and not suitable for large intervals.
    • Approximated sliding window strategy was also suggested as a better compromise option to help minimize traffic spikes right after reset but the additional tracking could introduce some overhead and for now it is left aside until we have more tests.
    • Updated modernc.org/sqlite to v1.46.2 and SQLite 3.51.3.
    • SQLite 3.51.3 fixed a database corruption bug that is very unlikely to happen (with PocketBase even more so because we queue on app level all writes and explicit transactions through a single db connection), but still it is advised to upgrade.*
    • Updated other minor Go and npm deps.
    • The min Go version in the go.mod of the package was also bumped to Go 1.25.0 because some of the newer dep versions require it.*
    ]]>    https://forum.cloudron.io/post/122006https://forum.cloudron.io/post/122006Tue, 17 Mar 2026 02:46:54 GMT