v0.39.6

hpcaitech/Open-Sorav0.39.6Jul 8, 2026by github-actions[bot]

AI Summary

This update focuses on mail handling improvements by adding Cc/Bcc support to the dev sendmail command and hardening the Microsoft OAuth2 provider. It also updates dependencies and bumps the Go GitHub action version.

Key Highlights

  • Added Cc and Bcc recipients to dev sendmail command
  • Hardened Microsoft OAuth2 provider
  • Updated goja and golang.org/x dependencies
  • Bumped min Go GitHub action version to 1.26.5

New Features

  • Cc and Bcc recipients to dev sendmail command

Full Release Notes

> _To update the prebuilt executable you can run `./pocketbase update`._

- Added `Cc` and `Bcc` recipients to the dev `sendmail` command for consistency with the SMTP mailer.

- Added extra hardening options to the Microsoft OAuth2 provider allowing developers to specify the preferred safe email extraction method ([#7756](https://github.com/pocketbase/pocketbase/discussions/7756)).

- Updated goja and the related `golang.org/x/*` dependencies _(`WeakMap` regression fixes)_.

- Bumped the min Go GitHub action version to 1.26.5 as it includes some [minor security fixes](https://github.com/golang/go/issues?q=milestone%3AGo1.26.5).