v0.39.6

deepseek-ai/DeepSeek-OCRv0.39.6Jul 8, 2026by github-actions[bot]

AI Summary

Focuses on email handling improvements and security hardening for Microsoft OAuth2.

Key Highlights

Added Cc and Bcc recipients to the dev sendmail command
Enhanced Microsoft OAuth2 provider with safe email extraction options
Fixed WeakMap regression in goja and updated related dependencies

New Features

Cc and Bcc recipients in sendmail command
Microsoft OAuth2 hardening options

Full Release Notes

> _To update the prebuilt executable you can run `./pocketbase update`._

- Added `Cc` and `Bcc` recipients to the dev `sendmail` command for consistency with the SMTP mailer.

- Added extra hardening options to the Microsoft OAuth2 provider allowing developers to specify the preferred safe email extraction method ([#7756](https://github.com/pocketbase/pocketbase/discussions/7756)).

- Updated goja and the related `golang.org/x/*` dependencies _(`WeakMap` regression fixes)_.

- Bumped the min Go GitHub action version to 1.26.5 as it includes some [minor security fixes](https://github.com/golang/go/issues?q=milestone%3AGo1.26.5).