v0.39.7 Release
- Replaced github.com/go-ozzo/ozzo-validation with the fork github.com/pocketbase/ozzo-validation due to ownership change of the original library
- Fixed missing import collection fields property access
- Fixed View collection * validator and added more friendly error messages
- Fixed unhandled panic in internal worker goroutines by wrapping all internal worker functions with routine.SafeWrap
To update the prebuilt executable you can run
./pocketbase update.
[!IMPORTANT] This release includes a security fix related to #7762.
-
Replaced
github.com/go-ozzo/ozzo-validationwith the forkgithub.com/pocketbase/ozzo-validationsince the original library has recently changed ownership and the new maintainer cannot be trusted. There are plans to create eventually a new validation library from scratch more suited for our needs in PocketBase because ozzo-validation is known to have some minor performance and obscure regex issues, but until then we'll stick with the fork (and if you useozzo-validationin your own Go code, I'd suggest to swap the imports with the fork). -
Fixed missing import collection
fieldsproperty access (#7760). -
Fixed View collection
*validator and added more friendly error messages (#7761). -
⚠️ Security fix for unhandled panic in internal worker goroutines (#7762). To prevent this from showing again, all existing internal worker functions were wrapped with
routine.SafeWrap(f)(auto recovers and returns any eventual panic as regular error).