Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pocketbase for openSUSE:Factory checked in at 2026-10-17 21:28:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pocketbase (Old) and /work/SRC/openSUSE:Factory/.pocketbase.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "pocketbase" Sat Oct 17 21:28:08 2026 rev:7 rq:1385564 version:0.40.5 Changes: -------- --- /work/SRC/openSUSE:Factory/pocketbase/pocketbase.changes 2026-09-01 15:49:14.076594225 +0200 +++ /work/SRC/openSUSE:Factory/.pocketbase.new.3698736/pocketbase.changes 2026-10-17 21:28:09.051763529 +0200 @@ -1,0 +2,22 @@ +Sat Oct 17 15:32:39 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 0.40.5: + * Fixed migration deadlock when a logs db write lands + mid-migration + * JSVM migration errors now carry the recovered panic stack + trace and the failing migration filename + * Updated modernc.org/sqlite to 1.60.1 and the golang.org/x/* + dependencies + * Bumped minimum Go to 1.27.2 for its net/http security fixes, + including a potential DoS affecting PocketBase applications + * Fixed collection index parsing and validator edge cases, + nested cascade delete of self-referenced relations, and + minor UI fixes + * Package is not affected by CVE-2025-47911 (boo#1251394) and + CVE-2025-58190 (boo#1251590): vendored golang.org/x/net is + v0.59.0, above the v0.45.0 fix + * Package is not affected by CVE-2026-44166 (boo#1265187): + fixed upstream in 0.37.4, before the previously packaged + 0.40.1 + +------------------------------------------------------------------- Old: ---- pocketbase-0.40.1.tar.gz New: ---- pocketbase-0.40.5.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pocketbase.spec ++++++ --- /var/tmp/diff_new_pack.589tH6/_old 2026-10-17 21:28:10.059805644 +0200 +++ /var/tmp/diff_new_pack.589tH6/_new 2026-10-17 21:28:10.061805727 +0200 @@ -18,7 +18,7 @@ Name: pocketbase -Version: 0.40.1 +Version: 0.40.5 Release: 0 Summary: Open Source realtime backend License: MIT ++++++ pocketbase-0.40.1.tar.gz -> pocketbase-0.40.5.tar.gz ++++++ ++++ 10363 lines of diff (skipped) ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/pocketbase/vendor.tar.zst /work/SRC/openSUSE:Factory/.pocketbase.new.3698736/vendor.tar.zst differ: char 5, line 1
