Update module github.com/pocketbase/pocketbase to v0.23.10 #3

Open
renovate-bot wants to merge 1 commit from renovate/github.com-pocketbase-pocketbase-0.x into master
Contributor

This PR contains the following updates:

Package Type Update Change
github.com/pocketbase/pocketbase require minor v0.22.23 -> v0.23.10

Release Notes

pocketbase/pocketbase (github.com/pocketbase/pocketbase)

v0.23.10

Compare Source

  • Renew the superuser file token cache when clicking on the thumb preview or download link (#​6137).

  • Upgraded modernc.org/sqlite to 1.34.3 to fix "disk io" error on arm64 systems.
    If you are extending PocketBase with Go and upgrading with go get -u make sure to manually set in your go.mod the modernc.org/libc indirect dependency to v1.55.3, aka. the exact same version the driver is using.

v0.23.9

Compare Source

  • Replaced strconv.Itoa with strconv.FormatInt to avoid the int64->int conversion overflow on 32-bit platforms (#​6132).

v0.23.8

Compare Source

  • Fixed Model->Record and Model->Collection hook events sync for nested and/or inner-hook transactions (#​6122).

  • Other minor improvements (updated Go and npm deps, added extra escaping for the default mail record params in case the emails are stored as html files, fixed code comment typos, etc.).

v0.23.7

Compare Source

  • Fixed JSVM exception -> Go error unwrapping when throwing errors from non-request hooks (#​6102).

v0.23.6

Compare Source

  • Fixed $filesystem.fileFromURL documentation and generated type (#​6058).

  • Fixed X-Forwarded-For header typo in the suggested UI "Common trusted proxy" headers (#​6063).

  • Updated the text field max length validator error message to make it more clear (#​6066).

  • Other minor fixes (updated Go deps, skipped unnecessary validator check when the default primary key pattern is used, updated JSVM types, etc.).

v0.23.5

Compare Source

  • Fixed UI logs search not properly accounting for the "Include requests by superusers" toggle when multiple search expressions are used.

  • Fixed text field max validation error message (#​6053).

  • Other minor fixes (comment typos, JSVM types update).

  • Updated Go deps and the min Go releleaser GitHub action version to 1.23.4.

v0.23.4

Compare Source

  • Fixed autodate fields not refreshing when calling Save multiple times on the same Record instance (#​6000).

  • Added more descriptive test OTP id and failure log message (#​5982).

  • Moved the default UI CSP from meta tag to response header (#​5995).

  • Updated Go and npm dependencies.

v0.23.3

Compare Source

  • Fixed Gzip middleware not applying when serving static files.

  • Fixed Record.Fresh()/Record.Clone() methods not properly cloning autodate fields (#​5973).

v0.23.2

Compare Source

  • Fixed RecordQuery() custom struct scanning (#​5958).

  • Fixed --dev log query print formatting.

  • Added support for passing more than one id in the Hook.Unbind method for consistency with the router.

  • Added collection rules change list in the confirmation popup
    (to avoid getting anoying during development, the rules confirmation currently is enabled only when using https).

v0.23.1

Compare Source

  • Renew the superuser file token cache when clicking on the thumb preview or download link (#​6137).

  • Upgraded modernc.org/sqlite to 1.34.3 to fix "disk io" error on arm64 systems.
    If you are extending PocketBase with Go and upgrading with go get -u make sure to manually set in your go.mod the modernc.org/libc indirect dependency to v1.55.3, aka. the exact same version the driver is using.

v0.23.0

Compare Source

[!NOTE]
You don't have to upgrade to PocketBase v0.23.0 if you are not planning further developing
your existing app and/or are satisfied with the v0.22.x features set. There are no identified critical issues
with PocketBase v0.22.x yet and in the case of critical bugs and security vulnerabilities, the fixes
will be backported for at least until Q1 of 2025 (if not longer).

If you don't plan upgrading make sure to pin the SDKs version to their latest PocketBase v0.22.x compatible:

  • JS SDK: <0.22.0
  • Dart SDK: <0.19.0

[!CAUTION]
This release introduces many Go/JSVM and Web APIs breaking changes!

Existing pb_data will be automatically upgraded with the start of the new executable,
but custom Go or JSVM (pb_hooks, pb_migrations) and JS/Dart SDK code will have to be migrated manually.
Please refer to the below upgrade guides:

If you had already switched to some of the earlier <v0.23.0-rc14 versions and have generated a full collections snapshot migration (aka. ./pocketbase migrate collections), then you may have to regenerate the migration file to ensure that it includes the latest changes.

PocketBase v0.23.0 is a major refactor of the internals with the overall goal of making PocketBase an easier to use Go framework.
There are a lot of changes but to highlight some of the most notable ones:

  • New and more detailed documentation.
    The old documentation could be accessed at pocketbase.io/old.
  • Replaced echo with a new router built on top of the Go 1.22 net/http mux enhancements.
  • Merged daos packages in core.App to simplify the DB operations (the models package structs are also migrated in core).
  • Option to specify custom DBConnect function as part of the app configuration to allow different database/sql SQLite drivers (turso/libsql, sqlcipher, etc.) and custom builds.
    Note that we no longer loads the mattn/go-sqlite3 driver by default when building with CGO_ENABLED=1 to avoid multiple definition linker errors in case different CGO SQLite drivers or builds are used. You can find an example how to enable it back if you want to in the new documentation.
  • New hooks allowing better control over the execution chain and error handling (including wrapping an entire hook chain in a single DB transaction).
  • Various Record model improvements (support for get/set modifiers, simplfied file upload by treating the file(s) as regular field value like record.Set("document", file), etc.).
  • Dedicated fields structs with safer defaults to make it easier creating/updating collections programmatically.
  • Option to mark field as "Hidden", disallowing regular users to read or modify it (there is also a dedicated Record hook to hide/unhide Record fields programmatically from a single place).
  • Option to customize the default system collection fields (id, email, password, etc.).
  • Admins are now system _superusers auth records.
  • Builtin rate limiter (supports tags, wildcards and exact routes matching).
  • Batch/transactional Web API endpoint.
  • Impersonate Web API endpoint (it could be also used for generating fixed/non-refreshable superuser tokens, aka. "API keys").
  • Support for custom user request activity log attributes.
  • One-Time Password (OTP) auth method (via email code).
  • Multi-Factor Authentication (MFA) support (currently requires any 2 different auth methods to be used).
  • Support for Record "proxy/projection" in preparation for the planned autogeneration of typed Go record models.
  • Linear OAuth2 provider (#​5909; thanks @​chnfyi).
  • WakaTime OAuth2 provider (#​5829; thanks @​tigawanna).
  • Notion OAuth2 provider (#​4999; thanks @​s-li1).
  • monday.com OAuth2 provider (#​5346; thanks @​Jaytpa01).
  • New Instagram provider compatible with the new Instagram Login APIs (#​5588; thanks @​pnmcosta).
    The provider key is instagram2 to prevent conflicts with existing linked users.
  • Option to retrieve the OIDC OAuth2 user info from the id_token payload for the cases when the provider doesn't have a dedicated user info endpoint.
  • Various minor UI improvements (recursive Presentable view, slightly different collection options organization, zoom/pan for the logs chart, etc.)
  • and many more...
Go/JSVM APIs changes
SDKs changes
Web APIs changes
  • New POST /api/batch endpoint.

  • New GET /api/collections/meta/scaffolds endpoint.

  • New DELETE /api/collections/{collection}/truncate endpoint.

  • New POST /api/collections/{collection}/request-otp endpoint.

  • New POST /api/collections/{collection}/auth-with-otp endpoint.

  • New POST /api/collections/{collection}/impersonate/{id} endpoint.

  • ⚠️ If you are constructing requests to /api/* routes manually remove the trailing slash (there is no longer trailing slash removal middleware registered by default).

  • ⚠️ Removed /api/admins/* endpoints because admins are converted to _superusers auth collection records.

  • ⚠️ Previously when uploading new files to a multiple file field, new files were automatically appended to the existing field values.
    This behaviour has changed with v0.23+ and for consistency with the other multi-valued fields when uploading new files they will replace the old ones. If you want to prepend or append new files to an existing multiple file field value you can use the + prefix or suffix:

    "documents": [file1, file2]  // => [file1_name, file2_name]
    "+documents": [file1, file2] // => [file1_name, file2_name, old1_name, old2_name]
    "documents+": [file1, file2] // => [old1_name, old2_name, file1_name, file2_name]
    
  • ⚠️ Removed GET /records/{id}/external-auths and DELETE /records/{id}/external-auths/{provider} endpoints because this is now handled by sending list and delete requests to the _externalAuths collection.

  • ⚠️ Changes to the app settings model fields and response (+new options such as trustedProxy, rateLimits, batch, etc.). The app settings Web APIs are mostly used by the Dashboard UI and rarely by the end users, but if you want to check all settings changes please refer to the Settings Go struct.

  • ⚠️ New flatten Collection model and fields structure. The Collection model Web APIs are mostly used by the Dashboard UI and rarely by the end users, but if you want to check all changes please refer to the Collection Go struct.

  • ⚠️ The top level error response code key was renamed to status for consistency with the Go APIs.
    The error field key remains code:

    {
        "status": 400, // <-- old: "code"
        "message": "Failed to create record.",
        "data": {
            "title": {
                "code": "validation_required",
                "message": "Missing required value."
            }
        }
    }
    
  • ⚠️ New fields in the GET /api/collections/{collection}/auth-methods response.
    The old authProviders, usernamePassword, emailPassword fields are still returned in the response but are considered deprecated and will be removed in the future.

    {
        "mfa": {
            "duration": 100,
            "enabled": true
        },
        "otp": {
            "duration": 0,
            "enabled": false
        },
        "password": {
            "enabled": true,
            "identityFields": ["email", "username"]
        },
        "oauth2": {
            "enabled": true,
            "providers": [{"name": "gitlab", ...}, {"name": "google", ...}]
        },
        // old fields...
    }
    
  • ⚠️ Soft-deprecated the OAuth2 auth success meta.avatarUrl field in favour of meta.avatarURL.

v0.22.28: Release

Compare Source

  • (Backported from v0.23.10) Renew the superuser file token cache when clicking on the thumb preview or download link (#​6137).

  • (Backported from v0.23.10) Upgraded modernc.org/sqlite to 1.34.3 to fix "disk io" error on arm64 systems.
    If you are extending PocketBase with Go and upgrading with go get -u make sure to manually set in your go.mod the modernc.org/libc indirect dependency to v1.55.3, aka. the exact same version the driver is using.

v0.22.27

Compare Source

To update the prebuilt executable you can run ./pocketbase update.

  • Instead of unregistering the realtime client(s), we now just unset their auth state on delete of the related auth record so that the client(s) can receive the delete event (#​5898).

v0.22.26: Release

Compare Source

To update the prebuilt executable you can run ./pocketbase update.

  • (Backported from v0.23.0-rc) Added manual WAL checkpoints before creating the zip backup to minimize copying unnecessary data.

v0.22.25: Release

Compare Source

To update the prebuilt executable you can run ./pocketbase update.

  • Refresh the old collections state in the Import UI after successful import submission (#​5861).

  • Added randomized throttle on failed filter list requests as a very rudimentary measure since some security researches raised concern regarding the possibity of eventual side-channel attacks.
    This is not really a solution for such attacks but it makes it difficult enough to make it less practical. With v0.23.0 there are several other measures taken but they cannot be backported easily. I'll submit a post a little bit later today clarifying more on it (edit: #​5683).

v0.22.24: Release

Compare Source

To update the prebuilt executable you can run ./pocketbase update.

  • Delete new uploaded record files in case of DB persist error (#​5845).

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/pocketbase/pocketbase](https://github.com/pocketbase/pocketbase) | require | minor | `v0.22.23` -> `v0.23.10` | --- ### Release Notes <details> <summary>pocketbase/pocketbase (github.com/pocketbase/pocketbase)</summary> ### [`v0.23.10`](https://github.com/pocketbase/pocketbase/blob/HEAD/CHANGELOG.md#v02310) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.23.9...v0.23.10) - Renew the superuser file token cache when clicking on the thumb preview or download link ([#&#8203;6137](https://github.com/pocketbase/pocketbase/discussions/6137)). - Upgraded `modernc.org/sqlite` to 1.34.3 to fix "disk io" error on arm64 systems. *If you are extending PocketBase with Go and upgrading with `go get -u` make sure to manually set in your go.mod the `modernc.org/libc` indirect dependency to v1.55.3, aka. the exact same version the driver is using.* ### [`v0.23.9`](https://github.com/pocketbase/pocketbase/blob/HEAD/CHANGELOG.md#v0239) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.23.8...v0.23.9) - Replaced `strconv.Itoa` with `strconv.FormatInt` to avoid the int64->int conversion overflow on 32-bit platforms ([#&#8203;6132](https://github.com/pocketbase/pocketbase/discussions/6132)). ### [`v0.23.8`](https://github.com/pocketbase/pocketbase/blob/HEAD/CHANGELOG.md#v0238) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.23.7...v0.23.8) - Fixed Model->Record and Model->Collection hook events sync for nested and/or inner-hook transactions ([#&#8203;6122](https://github.com/pocketbase/pocketbase/discussions/6122)). - Other minor improvements (updated Go and npm deps, added extra escaping for the default mail record params in case the emails are stored as html files, fixed code comment typos, etc.). ### [`v0.23.7`](https://github.com/pocketbase/pocketbase/blob/HEAD/CHANGELOG.md#v0237) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.23.6...v0.23.7) - Fixed JSVM exception -> Go error unwrapping when throwing errors from non-request hooks ([#&#8203;6102](https://github.com/pocketbase/pocketbase/discussions/6102)). ### [`v0.23.6`](https://github.com/pocketbase/pocketbase/blob/HEAD/CHANGELOG.md#v0236) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.23.5...v0.23.6) - Fixed `$filesystem.fileFromURL` documentation and generated type ([#&#8203;6058](https://github.com/pocketbase/pocketbase/issues/6058)). - Fixed `X-Forwarded-For` header typo in the suggested UI "Common trusted proxy" headers ([#&#8203;6063](https://github.com/pocketbase/pocketbase/pull/6063)). - Updated the `text` field max length validator error message to make it more clear ([#&#8203;6066](https://github.com/pocketbase/pocketbase/issues/6066)). - Other minor fixes (updated Go deps, skipped unnecessary validator check when the default primary key pattern is used, updated JSVM types, etc.). ### [`v0.23.5`](https://github.com/pocketbase/pocketbase/blob/HEAD/CHANGELOG.md#v0235) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.23.4...v0.23.5) - Fixed UI logs search not properly accounting for the "Include requests by superusers" toggle when multiple search expressions are used. - Fixed `text` field max validation error message ([#&#8203;6053](https://github.com/pocketbase/pocketbase/issues/6053)). - Other minor fixes (comment typos, JSVM types update). - Updated Go deps and the min Go releleaser GitHub action version to 1.23.4. ### [`v0.23.4`](https://github.com/pocketbase/pocketbase/blob/HEAD/CHANGELOG.md#v0234) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.23.3...v0.23.4) - Fixed `autodate` fields not refreshing when calling `Save` multiple times on the same `Record` instance ([#&#8203;6000](https://github.com/pocketbase/pocketbase/issues/6000)). - Added more descriptive test OTP id and failure log message ([#&#8203;5982](https://github.com/pocketbase/pocketbase/discussions/5982)). - Moved the default UI CSP from meta tag to response header ([#&#8203;5995](https://github.com/pocketbase/pocketbase/discussions/5995)). - Updated Go and npm dependencies. ### [`v0.23.3`](https://github.com/pocketbase/pocketbase/blob/HEAD/CHANGELOG.md#v0233) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.23.2...v0.23.3) - Fixed Gzip middleware not applying when serving static files. - Fixed `Record.Fresh()`/`Record.Clone()` methods not properly cloning `autodate` fields ([#&#8203;5973](https://github.com/pocketbase/pocketbase/discussions/5973)). ### [`v0.23.2`](https://github.com/pocketbase/pocketbase/blob/HEAD/CHANGELOG.md#v0232) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.23.1...v0.23.2) - Fixed `RecordQuery()` custom struct scanning ([#&#8203;5958](https://github.com/pocketbase/pocketbase/discussions/5958)). - Fixed `--dev` log query print formatting. - Added support for passing more than one id in the `Hook.Unbind` method for consistency with the router. - Added collection rules change list in the confirmation popup (*to avoid getting anoying during development, the rules confirmation currently is enabled only when using https*). ### [`v0.23.1`](https://github.com/pocketbase/pocketbase/blob/HEAD/CHANGELOG.md#v02310) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.23.0...v0.23.1) - Renew the superuser file token cache when clicking on the thumb preview or download link ([#&#8203;6137](https://github.com/pocketbase/pocketbase/discussions/6137)). - Upgraded `modernc.org/sqlite` to 1.34.3 to fix "disk io" error on arm64 systems. *If you are extending PocketBase with Go and upgrading with `go get -u` make sure to manually set in your go.mod the `modernc.org/libc` indirect dependency to v1.55.3, aka. the exact same version the driver is using.* ### [`v0.23.0`](https://github.com/pocketbase/pocketbase/blob/HEAD/CHANGELOG.md#v0230) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.22.28...v0.23.0) > \[!NOTE] > You don't have to upgrade to PocketBase v0.23.0 if you are not planning further developing > your existing app and/or are satisfied with the v0.22.x features set. There are no identified critical issues > with PocketBase v0.22.x yet and in the case of critical bugs and security vulnerabilities, the fixes > will be backported for at least until Q1 of 2025 (*if not longer*). > > **If you don't plan upgrading make sure to pin the SDKs version to their latest PocketBase v0.22.x compatible:** > > - JS SDK: `<0.22.0` > - Dart SDK: `<0.19.0` > \[!CAUTION] > This release introduces many Go/JSVM and Web APIs breaking changes! > > Existing `pb_data` will be automatically upgraded with the start of the new executable, > but custom Go or JSVM (`pb_hooks`, `pb_migrations`) and JS/Dart SDK code will have to be migrated manually. > Please refer to the below upgrade guides: > > - Go: https://pocketbase.io/v023upgrade/go/. > - JSVM: https://pocketbase.io/v023upgrade/jsvm/. > > If you had already switched to some of the earlier `<v0.23.0-rc14` versions and have generated a full collections snapshot migration (aka. `./pocketbase migrate collections`), then you may have to regenerate the migration file to ensure that it includes the latest changes. PocketBase v0.23.0 is a major refactor of the internals with the overall goal of making PocketBase an easier to use Go framework. There are a lot of changes but to highlight some of the most notable ones: - New and more [detailed documentation](https://pocketbase.io/docs/). *The old documentation could be accessed at [pocketbase.io/old](https://pocketbase.io/old/).* - Replaced `echo` with a new router built on top of the Go 1.22 `net/http` mux enhancements. - Merged `daos` packages in `core.App` to simplify the DB operations (*the `models` package structs are also migrated in `core`*). - Option to specify custom `DBConnect` function as part of the app configuration to allow different `database/sql` SQLite drivers (*turso/libsql, sqlcipher, etc.*) and custom builds. *Note that we no longer loads the `mattn/go-sqlite3` driver by default when building with `CGO_ENABLED=1` to avoid `multiple definition` linker errors in case different CGO SQLite drivers or builds are used. You can find an example how to enable it back if you want to in the [new documentation](https://pocketbase.io/docs/go-overview/#github-commattngo-sqlite3).* - New hooks allowing better control over the execution chain and error handling (*including wrapping an entire hook chain in a single DB transaction*). - Various `Record` model improvements (*support for get/set modifiers, simplfied file upload by treating the file(s) as regular field value like `record.Set("document", file)`, etc.*). - Dedicated fields structs with safer defaults to make it easier creating/updating collections programmatically. - Option to mark field as "Hidden", disallowing regular users to read or modify it (*there is also a dedicated Record hook to hide/unhide Record fields programmatically from a single place*). - Option to customize the default system collection fields (`id`, `email`, `password`, etc.). - Admins are now system `_superusers` auth records. - Builtin rate limiter (*supports tags, wildcards and exact routes matching*). - Batch/transactional Web API endpoint. - Impersonate Web API endpoint (*it could be also used for generating fixed/non-refreshable superuser tokens, aka. "API keys"*). - Support for custom user request activity log attributes. - One-Time Password (OTP) auth method (*via email code*). - Multi-Factor Authentication (MFA) support (*currently requires any 2 different auth methods to be used*). - Support for Record "proxy/projection" in preparation for the planned autogeneration of typed Go record models. - Linear OAuth2 provider ([#&#8203;5909](https://github.com/pocketbase/pocketbase/pull/5909); thanks [@&#8203;chnfyi](https://github.com/chnfyi)). - WakaTime OAuth2 provider ([#&#8203;5829](https://github.com/pocketbase/pocketbase/pull/5829); thanks [@&#8203;tigawanna](https://github.com/tigawanna)). - Notion OAuth2 provider ([#&#8203;4999](https://github.com/pocketbase/pocketbase/pull/4999); thanks [@&#8203;s-li1](https://github.com/s-li1)). - monday.com OAuth2 provider ([#&#8203;5346](https://github.com/pocketbase/pocketbase/pull/5346); thanks [@&#8203;Jaytpa01](https://github.com/Jaytpa01)). - New Instagram provider compatible with the new Instagram Login APIs ([#&#8203;5588](https://github.com/pocketbase/pocketbase/pull/5588); thanks [@&#8203;pnmcosta](https://github.com/pnmcosta)). *The provider key is `instagram2` to prevent conflicts with existing linked users.* - Option to retrieve the OIDC OAuth2 user info from the `id_token` payload for the cases when the provider doesn't have a dedicated user info endpoint. - Various minor UI improvements (*recursive `Presentable` view, slightly different collection options organization, zoom/pan for the logs chart, etc.*) - and many more... ##### Go/JSVM APIs changes > - Go: https://pocketbase.io/v023upgrade/go/. > - JSVM: https://pocketbase.io/v023upgrade/jsvm/. ##### SDKs changes - [JS SDK v0.22.0](https://github.com/pocketbase/js-sdk/blob/master/CHANGELOG.md) - [Dart SDK v0.19.0](https://github.com/pocketbase/dart-sdk/blob/master/CHANGELOG.md) ##### Web APIs changes - New `POST /api/batch` endpoint. - New `GET /api/collections/meta/scaffolds` endpoint. - New `DELETE /api/collections/{collection}/truncate` endpoint. - New `POST /api/collections/{collection}/request-otp` endpoint. - New `POST /api/collections/{collection}/auth-with-otp` endpoint. - New `POST /api/collections/{collection}/impersonate/{id}` endpoint. - ⚠️ If you are constructing requests to `/api/*` routes manually remove the trailing slash (*there is no longer trailing slash removal middleware registered by default*). - ⚠️ Removed `/api/admins/*` endpoints because admins are converted to `_superusers` auth collection records. - ⚠️ Previously when uploading new files to a multiple `file` field, new files were automatically appended to the existing field values. This behaviour has changed with v0.23+ and for consistency with the other multi-valued fields when uploading new files they will replace the old ones. If you want to prepend or append new files to an existing multiple `file` field value you can use the `+` prefix or suffix: ```js "documents": [file1, file2] // => [file1_name, file2_name] "+documents": [file1, file2] // => [file1_name, file2_name, old1_name, old2_name] "documents+": [file1, file2] // => [old1_name, old2_name, file1_name, file2_name] ``` - ⚠️ Removed `GET /records/{id}/external-auths` and `DELETE /records/{id}/external-auths/{provider}` endpoints because this is now handled by sending list and delete requests to the `_externalAuths` collection. - ⚠️ Changes to the app settings model fields and response (+new options such as `trustedProxy`, `rateLimits`, `batch`, etc.). The app settings Web APIs are mostly used by the Dashboard UI and rarely by the end users, but if you want to check all settings changes please refer to the [Settings Go struct](https://github.com/pocketbase/pocketbase/blob/develop/core/settings_model.go#L121). - ⚠️ New flatten Collection model and fields structure. The Collection model Web APIs are mostly used by the Dashboard UI and rarely by the end users, but if you want to check all changes please refer to the [Collection Go struct](https://github.com/pocketbase/pocketbase/blob/develop/core/collection_model.go#L308). - ⚠️ The top level error response `code` key was renamed to `status` for consistency with the Go APIs. The error field key remains `code`: ```js { "status": 400, // <-- old: "code" "message": "Failed to create record.", "data": { "title": { "code": "validation_required", "message": "Missing required value." } } } ``` - ⚠️ New fields in the `GET /api/collections/{collection}/auth-methods` response. *The old `authProviders`, `usernamePassword`, `emailPassword` fields are still returned in the response but are considered deprecated and will be removed in the future.* ```js { "mfa": { "duration": 100, "enabled": true }, "otp": { "duration": 0, "enabled": false }, "password": { "enabled": true, "identityFields": ["email", "username"] }, "oauth2": { "enabled": true, "providers": [{"name": "gitlab", ...}, {"name": "google", ...}] }, // old fields... } ``` - ⚠️ Soft-deprecated the OAuth2 auth success `meta.avatarUrl` field in favour of `meta.avatarURL`. ### [`v0.22.28`](https://github.com/pocketbase/pocketbase/releases/tag/v0.22.28): Release [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.22.27...v0.22.28) - (*Backported from v0.23.10*) Renew the superuser file token cache when clicking on the thumb preview or download link ([#&#8203;6137](https://github.com/pocketbase/pocketbase/discussions/6137)). - (*Backported from v0.23.10*) Upgraded `modernc.org/sqlite` to 1.34.3 to fix "disk io" error on arm64 systems. ***If you are extending PocketBase with Go and upgrading with `go get -u` make sure to manually set in your go.mod the `modernc.org/libc` indirect dependency to v1.55.3, aka. the exact same version the driver is using.*** ### [`v0.22.27`](https://github.com/pocketbase/pocketbase/releases/tag/v0.22.27) [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.22.26...v0.22.27) > *To update the prebuilt executable you can run `./pocketbase update`.* - Instead of unregistering the realtime client(s), we now just unset their auth state on delete of the related auth record so that the client(s) can receive the `delete` event ([#&#8203;5898](https://github.com/pocketbase/pocketbase/issues/5898)). ### [`v0.22.26`](https://github.com/pocketbase/pocketbase/releases/tag/v0.22.26): Release [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.22.25...v0.22.26) > *To update the prebuilt executable you can run `./pocketbase update`.* - (*Backported from v0.23.0-rc*) Added manual WAL checkpoints before creating the zip backup to minimize copying unnecessary data. ### [`v0.22.25`](https://github.com/pocketbase/pocketbase/releases/tag/v0.22.25): Release [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.22.24...v0.22.25) > *To update the prebuilt executable you can run `./pocketbase update`.* - Refresh the old collections state in the Import UI after successful import submission ([#&#8203;5861](https://github.com/pocketbase/pocketbase/issues/5861)). - Added randomized throttle on failed filter list requests as a very rudimentary measure since some security researches raised concern regarding the possibity of eventual side-channel attacks. *This is not really a solution for such attacks but it makes it difficult enough to make it less practical. With v0.23.0 there are several other measures taken but they cannot be backported easily. I'll submit a post a little bit later today clarifying more on it (edit: [#&#8203;5683](https://github.com/pocketbase/pocketbase/discussions/5863)).* ### [`v0.22.24`](https://github.com/pocketbase/pocketbase/releases/tag/v0.22.24): Release [Compare Source](https://github.com/pocketbase/pocketbase/compare/v0.22.23...v0.22.24) > *To update the prebuilt executable you can run `./pocketbase update`.* - Delete new uploaded record files in case of DB persist error ([#&#8203;5845](https://github.com/pocketbase/pocketbase/issues/5845)). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMjkuMiIsInVwZGF0ZWRJblZlciI6IjM4LjEyOS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
Author
Contributor

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: downloading github.com/pocketbase/pocketbase v0.23.10
go: downloading github.com/fatih/color v1.18.0
go: downloading golang.org/x/crypto v0.31.0
go: downloading github.com/pocketbase/dbx v1.11.0
go: downloading github.com/spf13/cast v1.7.1
go: downloading github.com/golang-jwt/jwt/v4 v4.5.1
go: downloading modernc.org/sqlite v1.34.3
go: downloading github.com/aws/aws-sdk-go-v2 v1.32.6
go: downloading github.com/aws/aws-sdk-go-v2/config v1.28.6
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.17.47
go: downloading github.com/gabriel-vasile/mimetype v1.4.7
go: downloading github.com/aws/aws-sdk-go-v2/service/s3 v1.71.0
go: downloading github.com/aws/smithy-go v1.22.1
go: downloading gocloud.dev v0.40.0
go: downloading golang.org/x/oauth2 v0.24.0
go: downloading golang.org/x/net v0.32.0
go: downloading golang.org/x/sync v0.10.0
go: downloading golang.org/x/term v0.27.0
go: downloading golang.org/x/text v0.21.0
go: downloading golang.org/x/image v0.23.0
go: downloading github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.43
go: downloading golang.org/x/sys v0.28.0
go: downloading github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.7
go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.25
go: downloading github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.25
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.1
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.4.6
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.6
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.6
go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.21
go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.24.7
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.6
go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.33.2
go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.25
go: downloading google.golang.org/grpc v1.69.0
go: downloading golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da
go: downloading github.com/googleapis/gax-go/v2 v2.14.0
go: downloading github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8
go: downloading google.golang.org/api v0.213.0
go: downloading google.golang.org/protobuf v1.36.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20241216192217-9240e9c98484
go: downloading modernc.org/gc/v3 v3.0.0-20241213165251-3bc300f6d0c9
go: blog imports
	blog/__htmgo: package blog/__htmgo is not in std (/opt/containerbase/tools/golang/1.23.4/src/blog/__htmgo)
go: blog/pages imports
	blog/__htmgo/assets: package blog/__htmgo/assets is not in std (/opt/containerbase/tools/golang/1.23.4/src/blog/__htmgo/assets)

### ⚠️ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: go.sum ``` Command failed: go get -d -t ./... go: -d flag is deprecated. -d=true is a no-op go: downloading github.com/pocketbase/pocketbase v0.23.10 go: downloading github.com/fatih/color v1.18.0 go: downloading golang.org/x/crypto v0.31.0 go: downloading github.com/pocketbase/dbx v1.11.0 go: downloading github.com/spf13/cast v1.7.1 go: downloading github.com/golang-jwt/jwt/v4 v4.5.1 go: downloading modernc.org/sqlite v1.34.3 go: downloading github.com/aws/aws-sdk-go-v2 v1.32.6 go: downloading github.com/aws/aws-sdk-go-v2/config v1.28.6 go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.17.47 go: downloading github.com/gabriel-vasile/mimetype v1.4.7 go: downloading github.com/aws/aws-sdk-go-v2/service/s3 v1.71.0 go: downloading github.com/aws/smithy-go v1.22.1 go: downloading gocloud.dev v0.40.0 go: downloading golang.org/x/oauth2 v0.24.0 go: downloading golang.org/x/net v0.32.0 go: downloading golang.org/x/sync v0.10.0 go: downloading golang.org/x/term v0.27.0 go: downloading golang.org/x/text v0.21.0 go: downloading golang.org/x/image v0.23.0 go: downloading github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.43 go: downloading golang.org/x/sys v0.28.0 go: downloading github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.7 go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.25 go: downloading github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.25 go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.1 go: downloading github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.4.6 go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.6 go: downloading github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.6 go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.21 go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.24.7 go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.6 go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.33.2 go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.25 go: downloading google.golang.org/grpc v1.69.0 go: downloading golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da go: downloading github.com/googleapis/gax-go/v2 v2.14.0 go: downloading github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 go: downloading google.golang.org/api v0.213.0 go: downloading google.golang.org/protobuf v1.36.0 go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20241216192217-9240e9c98484 go: downloading modernc.org/gc/v3 v3.0.0-20241213165251-3bc300f6d0c9 go: blog imports blog/__htmgo: package blog/__htmgo is not in std (/opt/containerbase/tools/golang/1.23.4/src/blog/__htmgo) go: blog/pages imports blog/__htmgo/assets: package blog/__htmgo/assets is not in std (/opt/containerbase/tools/golang/1.23.4/src/blog/__htmgo/assets) ```
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from e4dffa346a
Some checks failed
renovate/artifacts Artifact file update failure
to 2b93ad670a
Some checks failed
renovate/artifacts Artifact file update failure
2024-11-17 12:00:29 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.22.25 to Update module github.com/pocketbase/pocketbase to v0.22.26 2024-11-17 12:00:30 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from 2b93ad670a
Some checks failed
renovate/artifacts Artifact file update failure
to 461a81764b
Some checks failed
renovate/artifacts Artifact file update failure
2024-11-19 21:00:29 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.22.26 to Update module github.com/pocketbase/pocketbase to v0.22.27 2024-11-19 21:00:29 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from 461a81764b
Some checks failed
renovate/artifacts Artifact file update failure
to 23907fe01f
Some checks failed
renovate/artifacts Artifact file update failure
2024-11-24 15:00:31 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.22.27 to Update module github.com/pocketbase/pocketbase to v0.23.0 2024-11-24 15:00:31 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from 23907fe01f
Some checks failed
renovate/artifacts Artifact file update failure
to c8ac9de654
Some checks failed
renovate/artifacts Artifact file update failure
2024-11-25 10:00:29 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.23.0 to Update module github.com/pocketbase/pocketbase to v0.23.1 2024-11-25 10:00:30 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from c8ac9de654
Some checks failed
renovate/artifacts Artifact file update failure
to 5557bd8ab5
Some checks failed
renovate/artifacts Artifact file update failure
2024-11-27 09:00:36 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.23.1 to Update module github.com/pocketbase/pocketbase to v0.23.2 2024-11-27 09:00:36 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from 5557bd8ab5
Some checks failed
renovate/artifacts Artifact file update failure
to 7d8a7b7283
Some checks failed
renovate/artifacts Artifact file update failure
2024-11-29 11:00:31 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.23.2 to Update module github.com/pocketbase/pocketbase to v0.23.3 2024-11-29 11:00:32 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from 7d8a7b7283
Some checks failed
renovate/artifacts Artifact file update failure
to 56b34f5bcb
Some checks failed
renovate/artifacts Artifact file update failure
2024-12-02 13:00:32 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.23.3 to Update module github.com/pocketbase/pocketbase to v0.23.4 2024-12-02 13:00:33 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from 56b34f5bcb
Some checks failed
renovate/artifacts Artifact file update failure
to 5349a79092
Some checks failed
renovate/artifacts Artifact file update failure
2024-12-08 13:00:29 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.23.4 to Update module github.com/pocketbase/pocketbase to v0.23.5 2024-12-08 13:00:30 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from 5349a79092
Some checks failed
renovate/artifacts Artifact file update failure
to 0b259e52ec
Some checks failed
renovate/artifacts Artifact file update failure
2024-12-11 18:00:28 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.23.5 to Update module github.com/pocketbase/pocketbase to v0.23.6 2024-12-11 18:00:28 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from 0b259e52ec
Some checks failed
renovate/artifacts Artifact file update failure
to cd5504813b
Some checks failed
renovate/artifacts Artifact file update failure
2024-12-13 17:00:33 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.23.6 to Update module github.com/pocketbase/pocketbase to v0.23.7 2024-12-13 17:00:35 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from cd5504813b
Some checks failed
renovate/artifacts Artifact file update failure
to bb34bb37e7
Some checks failed
renovate/artifacts Artifact file update failure
2024-12-16 14:00:42 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.23.7 to Update module github.com/pocketbase/pocketbase to v0.23.8 2024-12-16 14:00:43 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from bb34bb37e7
Some checks failed
renovate/artifacts Artifact file update failure
to 97583a5b00
Some checks failed
renovate/artifacts Artifact file update failure
2024-12-17 20:00:30 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.23.8 to Update module github.com/pocketbase/pocketbase to v0.23.9 2024-12-17 20:00:35 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from 97583a5b00
Some checks failed
renovate/artifacts Artifact file update failure
to a62c679a68
Some checks failed
renovate/artifacts Artifact file update failure
2024-12-18 18:00:30 +00:00
Compare
renovate-bot changed title from Update module github.com/pocketbase/pocketbase to v0.23.9 to Update module github.com/pocketbase/pocketbase to v0.23.10 2024-12-18 18:00:30 +00:00
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from 81cad3fa30
Some checks failed
renovate/artifacts Artifact file update failure
to bfd8e1cdde 2024-12-18 20:15:06 +00:00
Compare
renovate-bot force-pushed renovate/github.com-pocketbase-pocketbase-0.x from bfd8e1cdde to 94bed5349e
Some checks failed
renovate/artifacts Artifact file update failure
2024-12-18 22:01:27 +00:00
Compare
Some checks failed
renovate/artifacts Artifact file update failure
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/github.com-pocketbase-pocketbase-0.x:renovate/github.com-pocketbase-pocketbase-0.x
git switch renovate/github.com-pocketbase-pocketbase-0.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff renovate/github.com-pocketbase-pocketbase-0.x
git switch renovate/github.com-pocketbase-pocketbase-0.x
git rebase master
git switch master
git merge --ff-only renovate/github.com-pocketbase-pocketbase-0.x
git switch renovate/github.com-pocketbase-pocketbase-0.x
git rebase master
git switch master
git merge --no-ff renovate/github.com-pocketbase-pocketbase-0.x
git switch master
git merge --squash renovate/github.com-pocketbase-pocketbase-0.x
git switch master
git merge --ff-only renovate/github.com-pocketbase-pocketbase-0.x
git switch master
git merge renovate/github.com-pocketbase-pocketbase-0.x
git push origin master
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ginjiruu/blog!3
No description provided.