PocketBase - Package Updates

[Package Updates]

[1.7.0]

• Update pocketbase to 0.30.0
• Full Changelog
• Eagerly escape the S3 request path following the same rules as in the S3 signing header (#7153).
• Added Lark OAuth2 provider (#7130; thanks @mashizora).
• Increased test tokens exp claim to minimize eventual issues with reproducible builds (#7123).
• Added os.Root bindings to the JSVM ($os.openRoot, $os.openInRoot).
• Added osutils.IsProbablyGoRun() helper to loosely check if the program was started using go run.
• Various minor UI improvements (updated collections indexes UI, enabled seconds in the datepicker, updated helper texts, etc.).
• Updated the minimum package Go version to 1.24.0 and bumped Go dependencies.

[Package Updates]

[1.7.1]

• Update pocketbase to 0.30.1
• Full Changelog
• Excluded the lost+found directory from the backups (#​7208; thanks @​lbndev).
• Minor tests improvements (disabled initial superuser creation for the test app to avoid cluttering the std output, added more tests for the s3.Uploader.MaxConcurrency, etc.).
• Updated modernc.org/sqlite and other Go dependencies.

[Package Updates]

[1.7.2]

• Update pocketbase to 0.30.2
• Full Changelog
• Bumped min Go GitHub action version to 1.24.8 since it comes with some minor security fixes

[Package Updates]

[1.8.0]

• Use requiresValidCertificate instead of email addon (required Cloudron 9)

[Package Updates]

[1.8.1]

• Update pocketbase to 0.30.3
• Full Changelog
• Fixed legacy identitity field priority check when a username is a valid email address (#​7256).
• Workaround autocomplete overflow issue with Firefox 144 (#​7223).
• Updated modernc.org/sqlite to 1.39.1 (SQLite 3.50.4).

[Package Updates]

[1.8.2]

• Update pocketbase to 0.30.4
• Full Changelog
• Fixed json field CSS regression introduced with the overflow workaround in v0.30.3 (#​7259).

[Package Updates]

[1.9.0]

• Update pocketbase to 0.31.0
• Full Changelog
• Visualize presentable multiple relation fields (#​7260).
• Support Ed25519 in the optional OIDC id_token signature validation (#​7252; thanks @​shynome).
• Added ApiScenario.DisableTestAppCleanup optional field to skip the auto test app cleanup and leave it up to the developers to do the cleanup manually (#​7267).
• Added FileDownloadRequestEvent.ThumbError field that is populated in case of a thumb generation failure (e.g. unsupported format, timing out, etc.), allowing developers to reject the thumb fallback and/or supply their own custom thumb generation (#​7268).
• Disallow client-side filtering and sorting of relations where the collection of the last targeted relation field has superusers-only List/Search API rule to further minimize the risk of eventual side-channel attack.

[Package Updates]

[1.10.0]

• Update pocketbase to 0.32.0
• Full Changelog
• Added extra List/Search API rules checks for the client-side filter/sort relations.
• Increased the default SQLite PRAGMA cache_size to ~32MB.
• Fixed deadlock when manually triggering the OnTerminate hook (#7305; thanks @yerTools).
• Fixed some code comment typos, regenerated the JSVM types and updated npm dependencies.
• Updated modernc.org/sqlite to 1.40.0.

[Package Updates]

[1.11.0]

• Update pocketbase to 0.33.0
• Full Changelog
• Added extra id characters validation in addition to the user specified regex pattern (#7312).
• Added {ALERT_INFO} placeholder to the auth alert mail template (#7314).

[Package Updates]

[1.12.0]

• Update pocketbase to 0.34.0
• Full Changelog
• Added @request.body.someField:changed modifier. It could be used when you want to ensure that a body field either wasn't submitted or was submitted with the same value. Or in other words, if you want to disallow a field change the below 2 expressions would be equivalent:
• Added MailerRecordEvent.Meta["info"] property for the OnMailerRecordAuthAlertSend hook.
• Updated the backup restore popup with a short info about the performed restore steps.
• Updated Go deps.