# PocketBase changelog

> A single-file backend with an embedded database, auth and file storage.

- Vendor: PocketBase
- Category: Developer Tools
- Official site: https://pocketbase.io
- Tracked by: What's New (https://whatsnew.fyi/product/pocketbase)
- Harvested from: GitHub (pocketbase/pocketbase)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

## Releases

### v0.39.10 — v0.39.10 Release

- Date: 2026-07-30
- Version: v0.39.10
- Original notes: https://github.com/pocketbase/pocketbase/releases/tag/v0.39.10
- Permalink: https://whatsnew.fyi/product/pocketbase/releases/v0.39.10

- **changed** — Reverted auto panic recover handling for CLI commands to preserve old behavior and allow panic to force exit with non-zero code
- **changed** — Minor UI improvements including placeholder loader for logs chart and npm dev dependencies update
- **changed** — Updated modernc.org/sqlite to v1.55.0

> _To update the prebuilt executable you can run `./pocketbase update`._

- Reverted the auto panic recover handling for the cli commands to preserve the old behavior and allow panic to force exit with non-zero code ([#7781](https://github.com/pocketbase/pocketbase/issues/7781)).
    _Proper command non-zero exit support will be available with the next v0.40/v0.41 release._

- Minor UI improvements (added placeholder loader for the logs chart, npm dev deps update, etc.).

- Updated `modernc.org/sqlite` to v1.55.0 _(DSN query params compatibility and doc changes)_.

### v0.22.51 — v0.22.51 Release

- Date: 2026-07-30
- Version: v0.22.51
- Original notes: https://github.com/pocketbase/pocketbase/releases/tag/v0.22.51
- Permalink: https://whatsnew.fyi/product/pocketbase/releases/v0.22.51

- **changed** — Reverted the auto panic recover handling for the cli commands to preserve the old behavior and allow panic to force exit with non-zero code

- (_Backported from v0.39.10_) Reverted the auto panic recover handling for the cli commands to preserve the old behavior and allow panic to force exit with non-zero code ([#7781](https://github.com/pocketbase/pocketbase/issues/7781)).

### v0.39.9 — v0.39.9 Release

- Date: 2026-07-22
- Version: v0.39.9
- Original notes: https://github.com/pocketbase/pocketbase/releases/tag/v0.39.9
- Permalink: https://whatsnew.fyi/product/pocketbase/releases/v0.39.9

- **fixed** — Shift + Click range bulk selection not working in Firefox
- **fixed** — TypedArray and regexp2 dependency regressions in goja
- **changed** — Updated goja and its related dependencies
- **changed** — Optimized filter (fexpr) for large string literals
- **fixed** — Filter (fexpr) control characters handling

> _To update the prebuilt executable you can run `./pocketbase update`._

- Fixed `Shift + Click` range bulk selection not working in Firefox ([#7771](https://github.com/pocketbase/pocketbase/issues/7771))

- Updated goja and its related dependencies _(fixes for TypedArray and regexp2 dep regression for the reported empty string match with lookahead patterns)_.

- Minor filter (fexpr) improvements _(optimization for large string literals and fix for control characters handling)_.

### v0.22.50 — v0.22.50 Release

- Date: 2026-07-22
- Version: v0.22.50
- Original notes: https://github.com/pocketbase/pocketbase/releases/tag/v0.22.50
- Permalink: https://whatsnew.fyi/product/pocketbase/releases/v0.22.50

- (_Backported from v0.39.9_) Bumped goja, fexpr and their related deps.

### v0.39.8 — v0.39.8 Release

- Date: 2026-07-19
- Version: v0.39.8
- Original notes: https://github.com/pocketbase/pocketbase/releases/tag/v0.39.8
- Permalink: https://whatsnew.fyi/product/pocketbase/releases/v0.39.8

- **fixed** — Properly reset JSVM global $app overwrite so that pooled executors always get a clean state
- **changed** — Prevent resetting number inputs with leading 0 while still typing (normalized in onchange)
- **added** — Add support for Shift + Click range bulk selection
- **security** — Bump golang.org/x/* indirect dependencies for minor security fixes
- **changed** — Update modernc.org/sqlite to v1.54.0 (SQLite 3.53.3)

> _To update the prebuilt executable you can run `./pocketbase update`._

- Properly reset JSVM global `$app` overwrite so that pooled executors always get a clean state.

- Minor UI improvements:
    - prevent resetting number inputs with leading 0 while still typing (normalized in `onchange`)
    - added support for `Shift + Click` range bulk selection ([#7759](https://github.com/pocketbase/pocketbase/issues/7759))

- Bumped `golang.org/x/*` indirect dependencies as there are some minor security fixes.

- Updated `modernc.org/sqlite` to v1.54.0 ([SQLite 3.53.3](https://sqlite.org/src/timeline?from=version-3.53.2&to=version-3.53.3&to2=branch-3.53)).

### v0.22.49 — v0.22.49 Release

- Date: 2026-07-19
- Version: v0.22.49
- Original notes: https://github.com/pocketbase/pocketbase/releases/tag/v0.22.49
- Permalink: https://whatsnew.fyi/product/pocketbase/releases/v0.22.49

- **security** — Bumped golang.org/x/* indirect dependencies to include minor security fixes
- **changed** — Updated modernc.org/sqlite to v1.54.0 with SQLite 3.53.3

- (_Backported from v0.39.8_) Bumped `golang.org/x/*` indirect dependencies as there are some minor security fixes.

- (_Backported from v0.39.8_) Updated `modernc.org/sqlite` to v1.54.0 ([SQLite 3.53.3](https://sqlite.org/src/timeline?from=version-3.53.2&to=version-3.53.3&to2=branch-3.53)).

### v0.39.7 — v0.39.7 Release

- Date: 2026-07-16
- Version: v0.39.7
- Original notes: https://github.com/pocketbase/pocketbase/releases/tag/v0.39.7
- Permalink: https://whatsnew.fyi/product/pocketbase/releases/v0.39.7

- **changed** — Replaced github.com/go-ozzo/ozzo-validation with the fork github.com/pocketbase/ozzo-validation due to ownership change of the original library
- **fixed** — Fixed missing import collection fields property access
- **fixed** — Fixed View collection * validator and added more friendly error messages
- **security** — Fixed unhandled panic in internal worker goroutines by wrapping all internal worker functions with routine.SafeWrap

> _To update the prebuilt executable you can run `./pocketbase update`._

> [!IMPORTANT]
> This release includes a security fix related to [#7762](https://github.com/pocketbase/pocketbase/discussions/7762).

- Replaced `github.com/go-ozzo/ozzo-validation` with the fork `github.com/pocketbase/ozzo-validation` since the original library has recently changed ownership and the new maintainer cannot be trusted.
  _There are plans to create eventually a new validation library from scratch more suited for our needs in PocketBase because ozzo-validation is known to have some minor performance and obscure regex issues, but until then we'll stick with the fork (and if you use `ozzo-validation` in your own Go code, I'd suggest to swap the imports with the fork)_.

- Fixed missing import collection `fields` property access ([#7760](https://github.com/pocketbase/pocketbase/issues/7760)).

- Fixed View collection `*` validator and added more friendly error messages ([#7761](https://github.com/pocketbase/pocketbase/issues/7761)).

- ⚠️ Security fix for unhandled panic in internal worker goroutines ([#7762](https://github.com/pocketbase/pocketbase/discussions/7762)).
    _To prevent this from showing again, all existing internal worker functions were wrapped with [`routine.SafeWrap(f)`](https://pkg.go.dev/github.com/pocketbase/pocketbase/tools/routine#SafeWrap) (auto recovers and returns any eventual panic as regular error)._

### v0.22.48 — v0.22.48 Release

- Date: 2026-07-16
- Version: v0.22.48
- Original notes: https://github.com/pocketbase/pocketbase/releases/tag/v0.22.48
- Permalink: https://whatsnew.fyi/product/pocketbase/releases/v0.22.48

- **changed** — Replace github.com/go-ozzo/ozzo-validation with the fork github.com/pocketbase/ozzo-validation due to ownership concerns with the original library
- **fixed** — Fixed View collection * validator and added more friendly error messages
- **security** — Fixed unhandled panic in internal worker goroutines

- (_Backported from v0.39.7_) Replaced `github.com/go-ozzo/ozzo-validation` with the fork `github.com/pocketbase/ozzo-validation` since the original library has recently changed ownership and the new maintainer cannot be trusted.

- (_Backported from v0.39.7_) Fixed View collection `*` validator and added more friendly error messages ([#7761](https://github.com/pocketbase/pocketbase/issues/7761)).

- (_Backported from v0.39.7_) ⚠️ Security fix for unhandled panic in internal worker goroutines ([#7762](https://github.com/pocketbase/pocketbase/discussions/7762)).

### v0.39.6 — v0.39.6 Release

- Date: 2026-07-08
- Version: v0.39.6
- Original notes: https://github.com/pocketbase/pocketbase/releases/tag/v0.39.6
- Permalink: https://whatsnew.fyi/product/pocketbase/releases/v0.39.6

- **added** — Added Cc and Bcc recipients to the dev sendmail command for consistency with the SMTP mailer
- **added** — Added extra hardening options to the Microsoft OAuth2 provider allowing developers to specify the preferred safe email extraction method
- **changed** — Updated goja and the related golang.org/x/* dependencies with WeakMap regression fixes
- **security** — Bumped the min Go GitHub action version to 1.26.5 which includes minor security fixes

> _To update the prebuilt executable you can run `./pocketbase update`._

- Added `Cc` and `Bcc` recipients to the dev `sendmail` command for consistency with the SMTP mailer.

- Added extra hardening options to the Microsoft OAuth2 provider allowing developers to specify the preferred safe email extraction method ([#7756](https://github.com/pocketbase/pocketbase/discussions/7756)).

- Updated goja and the related `golang.org/x/*` dependencies _(`WeakMap` regression fixes)_.

- Bumped the min Go GitHub action version to 1.26.5 as it includes some [minor security fixes](https://github.com/golang/go/issues?q=milestone%3AGo1.26.5).

### v0.22.47 — v0.22.47 Release

- Date: 2026-07-08
- Version: v0.22.47
- Original notes: https://github.com/pocketbase/pocketbase/releases/tag/v0.22.47
- Permalink: https://whatsnew.fyi/product/pocketbase/releases/v0.22.47

- **security** — Bumped minimum Go version to 1.26.5 to include minor security fixes

- (_Backported from v0.39.6_) Bumped the min Go GitHub action version to 1.26.5 as it includes some [minor security fixes](https://github.com/golang/go/issues?q=milestone%3AGo1.26.5).