Skip to content

build(deps): bump github.com/pocketbase/pocketbase from 0.35.0 to 0.36.5#998

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/pocketbase/pocketbase-0.36.5
Closed

build(deps): bump github.com/pocketbase/pocketbase from 0.35.0 to 0.36.5#998
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/pocketbase/pocketbase-0.36.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 23, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/pocketbase/pocketbase from 0.35.0 to 0.36.5.

Release notes

Sourced from github.com/pocketbase/pocketbase's releases.

v0.36.5 Release

To update the prebuilt executable you can run ./pocketbase update.

  • Disabled collection and fields name normalization while in IME mode (#7532; thanks @​miaopan607).

  • Updated modernc.org/sqlite to v1.46.1 (resets connection state on Tx.Commit failure).

v0.36.4 Release

To update the prebuilt executable you can run ./pocketbase update.

  • Made the optional Bearer token prefix case-insensitive (#7525; thanks @​benjamesfleming).

  • Enabled $filesystem.s3(...) and $filesystem.local(...) JSVM bindings (#7526).

v0.36.3 Release

To update the prebuilt executable you can run ./pocketbase update.

  • Added Accept-Encoding: identity to the S3 requests per the suggestion in #7523. This should help fixing the 0-bytes file response when S3 API compression is enabled.

  • Bumped min Go GitHub action version to 1.26.0 (it comes with minor GC performance improvements).

  • Other minor fixes (updated modernc.org/sqlite to v1.45.0, updated goja_nodejs adding Buffer.concat, updated the arguments of app.DeleteTable(...), app.DeleteView(...) and other similar methods to make it more clear that they are dangerous and shouldn't be used with untrusted input, etc.).

v0.36.2 Release

To update the prebuilt executable you can run ./pocketbase update.

  • Updated modernc.org/sqlite to v1.44.3 (race check fix), goja (circular references fix) and other go deps.

  • Other minor fixes (updated tests to silence some of the race detector errors, updated FindFirstRecordByData with more clear error message when missing or invalid key is used, etc.).

v0.36.1 Release

To update the prebuilt executable you can run ./pocketbase update.

  • Reverted the DISTINCT with GROUP BY replacement optimization from v0.36.0 as it was reported to negatively impact the indexes utilization for some queries and the minor performance boost that you may get when used on large records is not enough to justify the more common use (#7461). A better generic deduplication optimization for large records (aka. records with large text/json fields or many small ones) will be researched but there are no ETAs.

  • Updated modernc.org/sqlite to v1.44.2 (SQLite 3.51.2).

  • Fixed code comment typos.

v0.36.0 Release

To update the prebuilt executable you can run ./pocketbase update.

  • List query and API rules optimizations:

    • Removed unnecessary correlated subquery expression when using back-relations via single relation field.
    • Replaced DISTINCT with GROUP BY id when rows deduplication is needed and when deemed safe. This should help with having a more stable and predictable performance even if the collection records are on the larger side.

    For some queries and data sets the above 2 optimizations have shown significant improvements but if you notice a performance degradation after upgrading, please open a Q&A discussion with export of your collections structure and the problematic request so that it can be analyzed.

... (truncated)

Changelog

Sourced from github.com/pocketbase/pocketbase's changelog.

v0.36.5

  • Disabled collection and fields name normalization while in IME mode (#7532; thanks @​miaopan607).

  • Updated modernc.org/sqlite to v1.46.1 (resets connection state on Tx.Commit failure).

v0.36.4

  • Made the optional Bearer token prefix case-insensitive (#7525; thanks @​benjamesfleming).

  • Enabled $filesystem.s3(...) and $filesystem.local(...) JSVM bindings (#7526).

v0.36.3

  • Added Accept-Encoding: identity to the S3 requests per the suggestion in #7523. This should help fixing the 0-bytes file response when S3 API compression is enabled.

  • Bumped min Go GitHub action version to 1.26.0 (it comes with minor GC performance improvements).

  • Other minor fixes (updated modernc.org/sqlite to v1.45.0, updated goja_nodejs adding Buffer.concat, updated the arguments of app.DeleteTable(...), app.DeleteView(...) and other similar methods to make it more clear that they are dangerous and shouldn't be used with untrusted input, etc.).

v0.36.2

  • Updated modernc.org/sqlite to v1.44.3 (race check fix), goja (circular references fix) and other go deps.

  • Other minor fixes (updated tests to silence some of the race detector errors, updated FindFirstRecordByData with more clear error message when missing or invalid key is used, etc.).

v0.36.1

  • Reverted the DISTINCT with GROUP BY replacement optimization from v0.36.0 as it was reported to negatively impact the indexes utilization for some queries and the minor performance boost that you may get when used on large records is not enough to justify the more common use (#7461). A better generic deduplication optimization for large records (aka. records with large text/json fields or many small ones) will be researched but there are no ETAs.

  • Updated modernc.org/sqlite to v1.44.2 (SQLite 3.51.2).

  • Fixed code comment typos.

v0.36.0

  • List query and API rules optimizations:

    • Removed unnecessary correlated subquery expression when using back-relations via single relation field.
    • Replaced DISTINCT with GROUP BY id when rows deduplication is needed and when deemed safe. This should help with having a more stable and predictable performance even if the collection records are on the larger side.

    For some queries and data sets the above 2 optimizations have shown significant improvements but if you notice a performance degradation after upgrading,

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/pocketbase/pocketbase](https://github.com/pocketbase/pocketbase) from 0.35.0 to 0.36.5.
- [Release notes](https://github.com/pocketbase/pocketbase/releases)
- [Changelog](https://github.com/pocketbase/pocketbase/blob/master/CHANGELOG.md)
- [Commits](pocketbase/pocketbase@v0.35.0...v0.36.5)

---
updated-dependencies:
- dependency-name: github.com/pocketbase/pocketbase
  dependency-version: 0.36.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Feb 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github Mar 9, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #1025.

@dependabot dependabot Bot closed this Mar 9, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/github.com/pocketbase/pocketbase-0.36.5 branch March 9, 2026 00:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants