# PocketBase v0.39.6 — v0.39.6 Release

- Product: PocketBase (https://whatsnew.fyi/product/pocketbase)
- Vendor: PocketBase
- Date: 2026-07-08
- Version: v0.39.6
- Original notes: https://github.com/pocketbase/pocketbase/releases/tag/v0.39.6
- Permalink: https://whatsnew.fyi/product/pocketbase/releases/v0.39.6

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Added Cc and Bcc recipients to the dev sendmail command for consistency with the SMTP mailer
- **added** — Added extra hardening options to the Microsoft OAuth2 provider allowing developers to specify the preferred safe email extraction method
- **changed** — Updated goja and the related golang.org/x/* dependencies with WeakMap regression fixes
- **security** — Bumped the min Go GitHub action version to 1.26.5 which includes minor security fixes

> _To update the prebuilt executable you can run `./pocketbase update`._

- Added `Cc` and `Bcc` recipients to the dev `sendmail` command for consistency with the SMTP mailer.

- Added extra hardening options to the Microsoft OAuth2 provider allowing developers to specify the preferred safe email extraction method ([#7756](https://github.com/pocketbase/pocketbase/discussions/7756)).

- Updated goja and the related `golang.org/x/*` dependencies _(`WeakMap` regression fixes)_.

- Bumped the min Go GitHub action version to 1.26.5 as it includes some [minor security fixes](https://github.com/golang/go/issues?q=milestone%3AGo1.26.5).