Skip to content

build(deps): bump github.com/pocketbase/pocketbase from 0.35.0 to 0.39.6#1207

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/pocketbase/pocketbase-0.39.6
Closed

build(deps): bump github.com/pocketbase/pocketbase from 0.35.0 to 0.39.6#1207
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/pocketbase/pocketbase-0.39.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/pocketbase/pocketbase from 0.35.0 to 0.39.6.

Release notes

Sourced from github.com/pocketbase/pocketbase's releases.

v0.39.6 Release

To update the prebuilt executable you can run ./pocketbase update.

  • Added Cc and Bcc recipients to the dev sendmail command for consistency with the SMTP mailer.

  • Added extra hardening options to the Microsoft OAuth2 provider allowing developers to specify the preferred safe email extraction method (#7756).

  • Updated goja and the related golang.org/x/* dependencies (WeakMap regression fixes).

  • Bumped the min Go GitHub action version to 1.26.5 as it includes some minor security fixes.

v0.39.5 Release

To update the prebuilt executable you can run ./pocketbase update.

  • Limit with ellipsis long url field values.

  • Readded the "fullscreen" editor field option and preloaded the TinyMCE component for slightly faster initial rendering (#7746).

  • Updated goja (TypedArray fixes).

v0.39.4 Release

To update the prebuilt executable you can run ./pocketbase update.

  • Removed redirectURL required validator from the code->token exchange endpoint (aka. authWithOAuth2Code()) (#7734). Note that OAuth2 providers have their own validations and whether it is allowed to be empty or not could depend on the configured OAuth2 app (in most cases it is required and the redirect address must match with the initial value submitted with the authorization request).

  • Enabled sorting by the first implicit presentable relation field (#7735).

  • Other minor UI fixes (tooltip clear on hovered element removal, optional before element sortable fix, etc.).

  • Updated goja and the related golang.org/x/* dependencies (regex support improvements).

v0.39.3 Release

To update the prebuilt executable you can run ./pocketbase update.

  • Fixed JS error on file settings maxSelect change (#7731).

  • Apply the Ctrl+S record panel save shortcut only if it is the current top open modal.

  • Fixed number settings validator to not ignore 0 max value.

  • Normalized field settings validation error messages and tooltips.

v0.39.2 Release

To update the prebuilt executable you can run ./pocketbase update.

  • Fixed records list UI sorting (#7724).

  • Don't clear the date input on invalid value while still typing (#7726).

... (truncated)

Changelog

Sourced from github.com/pocketbase/pocketbase's changelog.

v0.39.6

  • Added Cc and Bcc recipients to the dev sendmail command for consistency with the SMTP mailer.

  • Added extra hardening options to the Microsoft OAuth2 provider allowing developers to specify the preferred safe email extraction method.

  • Updated goja and the related golang.org/x/* dependencies (WeakMap regression fixes).

  • Bumped the min Go GitHub action version to 1.26.5 as it includes some minor security fixes.

v0.39.5

  • Limit with ellipsis long url field values.

  • Readded the "fullscreen" editor field option and preloaded the TinyMCE component for slightly faster initial rendering (#7746).

  • Updated goja (TypedArray fixes).

v0.39.4

  • Removed redirectURL required validator from the code->token exchange endpoint (aka. authWithOAuth2Code()) (#7734). Note that OAuth2 providers have their own validations and whether it is allowed to be empty or not could depend on the configured OAuth2 app (in most cases it is required and the redirect address must match with the initial value submitted with the authorization request).

  • Enabled sorting by the first implicit presentable relation field (#7735).

  • Other minor UI fixes (tooltip clear on hovered element removal, optional before element sortable fix, etc.).

  • Updated goja and the related golang.org/x/* dependencies (regex support improvements).

v0.39.3

  • Fixed JS error on file settings maxSelect change (#7731).

  • Apply the Ctrl+S record panel save shortcut only if it is the current top open modal.

  • Fixed number settings validator to not ignore 0 max value.

  • Normalized field settings validation error messages and tooltips.

v0.39.2

  • Fixed records list UI sorting (#7724).

  • Don't clear the date input on invalid value while still typing (#7726).

  • Return filepath.SkipDir in the pb_hooks dirs watcher to avoid unnecessary iterating over node_modules and .* prefixed hidden dirs (.DS_Store, .git, etc.).

... (truncated)

Commits
  • de3c3f7 updated goja (WeakMap fixes)
  • 2128a95 updated changelogs and bumped app version
  • 692e0f0 updated min go github action version to 1.26.5
  • e646b8e shortened help texts
  • b5bed24 updated jsvm types
  • 1cfc503 added conditional default openid scope and helper text to remind users for th...
  • 7327f0c updated ui/dist
  • c220a61 fixed test typo
  • b2ed234 added Cc and Bcc headers to the sendmail command
  • 7b3f4d6 added extra hardening options to the Microsoft OAuth2 provider allowing devs ...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/pocketbase/pocketbase](https://github.com/pocketbase/pocketbase) from 0.35.0 to 0.39.6.
- [Release notes](https://github.com/pocketbase/pocketbase/releases)
- [Changelog](https://github.com/pocketbase/pocketbase/blob/master/CHANGELOG.md)
- [Commits](pocketbase/pocketbase@v0.35.0...v0.39.6)

---
updated-dependencies:
- dependency-name: github.com/pocketbase/pocketbase
  dependency-version: 0.39.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #1209.

@dependabot dependabot Bot closed this Jul 20, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/pocketbase/pocketbase-0.39.6 branch July 20, 2026 02:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants