build(deps): bump github.com/pocketbase/pocketbase from 0.35.0 to 0.38.0

[dependabot]

Bumps github.com/pocketbase/pocketbase from 0.35.0 to 0.38.0.

Release notes

Sourced from github.com/pocketbase/pocketbase's releases.

v0.38.0 Release

To update the prebuilt executable you can run ./pocketbase update.

• Fixed UI logs pagination when no custom range is specified.

• Fixed default CSP not allowing audio/video previews (#7677).

• Serve fixed Content-Type for .xlsx, .docx and .pptx files to allow previews on iOS (#7467).

• Changed settings app URL input to type="text" for compatibility with earlier versions (#7681).

• Added an internal watcher to sync various runtime states between multiple PocketBase processes (e.g. memory store) using the same pb_data. This is helpful in case for example a separate PocketBase console command change the collections or application settings while the server is still running. The watcher is debounced and implemented by watching the special pb_data/.notify dir as a workaround to avoid depending on OS and SQLite driver specific APIs.

• Added new Superuser IPs/CIDR subnets whitelist setting. The optional setting can be changed from the UI under Dasboard > Settings > Application > Superuser IPs. To avoid lockout in case your superuser IP change, the ips whitelist can be updated also via the superuser ips console command:

  # note: --dir is optional and defaults to pb_data next to the executable
  clear whitelisted IPs
  ./pocketbase superuser ips --dir=/custom/path/to/pb_data
  OR change the whitelisted IPs to 127.0.0.1 and 10.0.0.0 (replace with your real IP(s))
  ./pocketbase superuser ips 127.0.0.1 10.0.0.0 --dir=/custom/path/to/pb_data

• Added rate limit option to exclude IPs/CIDR subnets (#6410).

• Bumped min Go GitHub action version to 1.26.3 because it comes with some minor bug and security fixes.

v0.37.5 Release

To update the prebuilt executable you can run ./pocketbase update.

• Fixed password fields not being detected as changed (#7670).

• Added the local time zone name next to the date field label.

• Reload trusted proxy info UI after settings save.

• Other minor improvements (skips the duplicated record ids from the IN expand list, reordered confirm-email-change error checks to minimize enumeration attacks, etc.).

v0.37.4 Release

To update the prebuilt executable you can run ./pocketbase update.

[!IMPORTANT] This release include a security fix related to #7662.

• Added backups list scroll container (#7655).

... (truncated)

Changelog

Sourced from github.com/pocketbase/pocketbase's changelog.

v0.38.0

• Fixed UI logs pagination when no custom range is specified.

• Fixed default CSP not allowing audio/video previews (#7677).

• Serve fixed Content-Type for .xlsx, .docx and .pptx files to allow previews on iOS (#7467).

• Changed settings app URL input to type="text" for compatibility with earlier versions (#7681).

• Added an internal watcher to sync various runtime states between multiple PocketBase processes (e.g. memory store) using the same pb_data. This is helpful in case for example a separate PocketBase console command change the collections or application settings while the server is still running. The watcher is debounced and implemented by watching the special pb_data/.notify dir as a workaround to avoid depending on OS and SQLite driver specific APIs.

• Added new Superuser IPs/CIDR subnets whitelist setting. The optional setting can be changed from the UI under Dasboard > Settings > Application > Superuser IPs. To avoid lockout in case your superuser IP change, the ips whitelist can be updated also via the superuser ips console command:

  # note: --dir is optional and defaults to pb_data next to the executable
  clear whitelisted IPs
  ./pocketbase superuser ips --dir=/custom/path/to/pb_data
  OR change the whitelisted IPs to 127.0.0.1 and 10.0.0.0 (replace with your real IP(s))
  ./pocketbase superuser ips 127.0.0.1 10.0.0.0 --dir=/custom/path/to/pb_data

• Added rate limit option to exclude IPs/CIDR subnets (#6410).

• Bumped min Go GitHub action version to 1.26.3 because it comes with some minor bug and security fixes.

v0.37.5

• Fixed password fields not being detected as changed (#7670).

• Added the local time zone name next to the date field label.

• Reload trusted proxy info UI after settings save.

• Other minor improvements (skips the duplicated record ids from the IN expand list, reordered confirm-email-change error checks to minimize enumeration attacks, etc.).

v0.37.4

• Added backups list scroll container (#7655).

• Optimized record upsert and preview modals data loading to minimize layout jumps.

• Fixed SMTP IPv6 network address format (#7659).

... (truncated)

Commits

• d438c6a bumped app version
• 6828ca1 bumped min go github action version to 1.26.3
• 88193b9 adjusted noitems alignment
• 3cedf03 #7681 changed settings app url input to type=text
• 4396369 removed unused css file
• 4a4f8ad use input css vars and updated changelog
• 5a144e1 #6410 added rate limit option to exclude IPs/CIDR subnets
• 24d7287 updated default log level marker color
• c40f519 bump dev version for the demo
• b026c68 updated changelog
• Additional commits viewable in compare view

[dependabot]

Superseded by #1142.