v0.40.0 Release
To update the prebuilt executable you can run
./pocketbase update.
-
Propagate console command errors and recovered panics to
app.Start()so that the program can exit with non-zero code while still ensuring thatapp.OnTerminatehook was triggered (responsible for the app graceful shutdown handling).
⚠️ Note that this could be a slight breaking change in case you are chaining PocketBase commands and relied on the previous0exit status forCommand.RunEreturned errors.
Or in other words, if you have./pocketbase invalid && someothercommandand previously relied thatsomeothercommandwill be always executed then this is no longer the case and you'll have to adjust it or replace&&with;. -
Added quotes around the default
Content-Dispositionserving filename in case custom name with special characters is provided. -
Added
Cross-Origin-Opener-Policy:same-originto the default security response headers.
This is an extra precaution to prevent tab-nabbing in case custom UI plugins usetarget="_blank"withoutrel="noopener". -
Added
Record.GetInt64(field)helper (note that the serializable max safe integer of thenumberfield is ~2^53-1). -
Added
Store.Keys()method that returns a slice with all of the store keys. -
Added new
DELETE /api/logsendpoint and UI control to delete all logs without changing themaxDaysretention setting. -
Added new log settings option to limit the max
Log.Datasize that will be saved in the database (default to ~16KB).
This is an extra precaution for the cases when logging user supplied data without validating it beforehand.
If the resultingLog.Datajson is above the limit, it is truncated to the last valid decoded character and an extra"__pb_truncated__":truelog data entry will be added.`
Additionally, for just in case the log message is also truncated at max 8k characters. -
Added new
filesystemlow-level helper methods:filesystem.NewWriter(key, opts)to allow direct file create from anio.Readervalue.filesystem.OnNewWriter()hook to allow listening for new/to-be-created files (it is not exposed incore.Appinstance for now to avoid introducing breaking changes).filesystem.OnDelete()hook to allow listening for deleted files (it is not exposed incore.Appinstance for now to avoid introducing breaking changes).
-
Optimized backups to no longer transaction lock the database during backup generation (#7799).
-
Updated
modernc.org/sqliteto 1.57.0 and registered by default the new_defensive=1DSN query parameter to enable SQLite's defensive mode. -
Bumped the min Go version to 1.27.0 and migrated to the new
encoding/json/v2package.
⚠️ Please note that Go 1.27.0 retrofittedencoding/jsonto use the v2 package under the hood but unfortunately is not fully backward compatible.
I recommend to not push blindly an update on production and to test your PocketBase application first locally to see if everything works correctly.