mirror of
https://github.com/hanzoai/base.git
synced 2026-10-21 03:41:50 +00:00
the changelog stops pointing readers at a stranger's issue tracker
77 links across two changelogs addressed github.com/base/base — issue numbers, pull requests, discussions, and one invitation to "open a Q&A discussion" there with your failing code. Same cause as the update-channel fix: the fork's rebrand rewrote "pocketbase" to "base" mechanically, and these citations went with it. The numbers are upstream's, so against that repo they resolve to somebody else's issues or to nothing. The numbers stay as plain text and the contributor thanks stay exactly as they were. Only the URL is dropped, which removes the misdirection without taking any position on naming: a citation that points at the wrong project is worse than a citation that points nowhere, and rewriting 77 lines to name the upstream again is a branding decision, not a repair. The Q&A line mattered most — it invited users to take their problems to an unrelated project. Co-authored-by: Hanzo Dev <[email protected]>
This commit is contained in:
Hanzo Dev
+73
-73
@@ -135,7 +135,7 @@ single-Go-binary-on-`@hanzo/base` pattern on the new IAM-native runtime.
|
||||
|
||||
## v0.36.7
|
||||
|
||||
- Fixed high memory usage with large file uploads ([#7572](https://github.com/base/base/discussions/7572)).
|
||||
- Fixed high memory usage with large file uploads (#7572).
|
||||
|
||||
- Updated the rate limiter reset rules to follow a more traditional fixed window strategy _(aka. to be more close to how it is presented in the UI - allow max X user requests under Ys)_ since several users complained that the older algorithm was not intuitive and not suitable for large intervals.
|
||||
_Approximated sliding window strategy was also suggested as a better compromise option to help minimize traffic spikes right after reset but the additional tracking could introduce some overhead and for now it is left aside until we have more tests._
|
||||
@@ -149,9 +149,9 @@ single-Go-binary-on-`@hanzo/base` pattern on the new IAM-native runtime.
|
||||
|
||||
## v0.36.6
|
||||
|
||||
- Set `NumberField.OnlyInt:true` for the generated View collection schema fields when a view column expression is known to return int-only values ([#7538](https://github.com/base/base/issues/7538)).
|
||||
- Set `NumberField.OnlyInt:true` for the generated View collection schema fields when a view column expression is known to return int-only values (#7538).
|
||||
|
||||
- Documented the `unmarshal` JSVM helper ([#7543](https://github.com/base/base/issues/7543)).
|
||||
- Documented the `unmarshal` JSVM helper (#7543).
|
||||
|
||||
- Added extra read check after the `Store.GetOrSet` write lock to prevent races overwriting an already existing value.
|
||||
|
||||
@@ -166,21 +166,21 @@ single-Go-binary-on-`@hanzo/base` pattern on the new IAM-native runtime.
|
||||
|
||||
## v0.36.5
|
||||
|
||||
- Disabled collection and fields name normalization while in IME mode ([#7532](https://github.com/base/base/pull/7532); thanks @miaopan607).
|
||||
- Disabled collection and fields name normalization while in IME mode (#7532; thanks @miaopan607).
|
||||
|
||||
- Updated `modernc.org/sqlite` to v1.46.1 _(resets connection state on Tx.Commit failure)_.
|
||||
|
||||
|
||||
## v0.36.4
|
||||
|
||||
- Made the optional `Bearer` token prefix case-insensitive ([#7525](https://github.com/base/base/pull/7525); thanks @benjamesfleming).
|
||||
- Made the optional `Bearer` token prefix case-insensitive (#7525; thanks @benjamesfleming).
|
||||
|
||||
- Enabled `$filesystem.s3(...)` and `$filesystem.local(...)` JSVM bindings ([#7526](https://github.com/base/base/issues/7526)).
|
||||
- Enabled `$filesystem.s3(...)` and `$filesystem.local(...)` JSVM bindings (#7526).
|
||||
|
||||
|
||||
## v0.36.3
|
||||
|
||||
- Added `Accept-Encoding: identity` to the S3 requests per the suggestion in [#7523](https://github.com/base/base/issues/7523).
|
||||
- Added `Accept-Encoding: identity` to the S3 requests per the suggestion in #7523.
|
||||
_This should help fixing the 0-bytes file response when S3 API compression is enabled._
|
||||
|
||||
- Bumped min Go GitHub action version to 1.26.0 _(it comes with minor [GC performance improvements](https://go.dev/doc/go1.26#runtime))_.
|
||||
@@ -198,7 +198,7 @@ single-Go-binary-on-`@hanzo/base` pattern on the new IAM-native runtime.
|
||||
## v0.36.1
|
||||
|
||||
- Reverted the `DISTINCT` with `GROUP BY` replacement optimization from v0.36.0 as it was reported to negatively impact the indexes utilization for some queries
|
||||
and the minor performance boost that you may get when used on large records is not enough to justify the more common use ([#7461](https://github.com/base/base/discussions/7461)).
|
||||
and the minor performance boost that you may get when used on large records is not enough to justify the more common use (#7461).
|
||||
_A better generic deduplication optimization for large records (aka. records with large `text`/`json` fields or many small ones) will be researched but there are no ETAs._
|
||||
|
||||
- Updated `modernc.org/sqlite` to v1.44.2 _(SQLite 3.51.2)_.
|
||||
@@ -246,7 +246,7 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.35.0
|
||||
|
||||
- Added `nullString()`, `nullInt()`, `nullFloat()`, `nullBool`, `nullArray()`, `nullObject()` JSVM helpers for scanning nullable columns ([#7396](https://github.com/base/base/issues/7396)).
|
||||
- Added `nullString()`, `nullInt()`, `nullFloat()`, `nullBool`, `nullArray()`, `nullObject()` JSVM helpers for scanning nullable columns (#7396).
|
||||
|
||||
- Store the correct `image/png` as attrs content type when generating a thumb fallback _(e.g. for `webp`)_.
|
||||
|
||||
@@ -258,14 +258,14 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.34.2
|
||||
|
||||
- Bumped JS SDK to v0.26.5 to fix Safari AbortError detection introduced with the previous release ([#7369](https://github.com/base/base/issues/7369)).
|
||||
- Bumped JS SDK to v0.26.5 to fix Safari AbortError detection introduced with the previous release (#7369).
|
||||
|
||||
|
||||
## v0.34.1
|
||||
|
||||
- Added missing `:` char to the autocomplete regex ([#7353](https://github.com/base/base/pull/7353); thanks @ouvreboite).
|
||||
- Added missing `:` char to the autocomplete regex (#7353; thanks @ouvreboite).
|
||||
|
||||
- Added "Copy raw JSON" collection dropdown option ([#7357](https://github.com/base/base/issues/7357)).
|
||||
- Added "Copy raw JSON" collection dropdown option (#7357).
|
||||
|
||||
- Updated Go deps and JS SDK.
|
||||
|
||||
@@ -295,11 +295,11 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.33.0
|
||||
|
||||
- Added extra `id` characters validation in addition to the user specified regex pattern ([#7312](https://github.com/base/base/issues/7312)).
|
||||
- Added extra `id` characters validation in addition to the user specified regex pattern (#7312).
|
||||
_The following special characters are always forbidden: `./\|"'``<>:?*%$\n\r\t\0 `. Common reserved Windows file names such as `aux`, `prn`, `con`, `nul`, `com1-9`, `lpt1-9` are also not allowed._
|
||||
_The list is not exhaustive but it should help minimizing eventual filesystem compatibility issues in case of wildcards or other loose regex patterns._
|
||||
|
||||
- Added `{ALERT_INFO}` placeholder to the auth alert mail template ([#7314](https://github.com/base/base/issues/7314)).
|
||||
- Added `{ALERT_INFO}` placeholder to the auth alert mail template (#7314).
|
||||
_⚠️ `mails.SendRecordAuthAlert(app, authRecord, info)` also now accepts a 3rd `info` string argument._
|
||||
|
||||
- Updated Go deps.
|
||||
@@ -311,7 +311,7 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
This is continuation of the effort to eliminate the risk of information disclosure _(and eventually the side-channel attacks that may originate from that)_.
|
||||
|
||||
So far this was accepted tradeoff between performance, usability and correctness since the solutions at the time weren't really practical _(especially with the back-relations as mentioned in ["Security and performance" section in #4417](https://github.com/base/base/discussions/4417))_, but with v0.23+ changes we can implement the extra checks without littering the code too much, with very little impact on the performance and at the same time ensuring better out of the box security _(especially for the cases where users operate with sensitive fields like "code", "token", "secret", etc.)_.
|
||||
So far this was accepted tradeoff between performance, usability and correctness since the solutions at the time weren't really practical _(especially with the back-relations as mentioned in the "Security and performance" section in #4417)_, but with v0.23+ changes we can implement the extra checks without littering the code too much, with very little impact on the performance and at the same time ensuring better out of the box security _(especially for the cases where users operate with sensitive fields like "code", "token", "secret", etc.)_.
|
||||
|
||||
Similar to the previous release, probably for most users with already configured API rules this change won't be breaking, but if you have an _intermediate/junction collection_ that is "locked" (superusers-only) we no longer will allow the client-side relation filter to pass through it and you'll have to set its List/Search API rule to enable the current user to search in it.
|
||||
|
||||
@@ -325,7 +325,7 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
- Increased the default SQLite `PRAGMA cache_size` to ~32MB.
|
||||
|
||||
- Fixed deadlock when manually triggering the `OnTerminate` hook ([#7305](https://github.com/base/base/pull/7305); thanks @yerTools).
|
||||
- Fixed deadlock when manually triggering the `OnTerminate` hook (#7305; thanks @yerTools).
|
||||
|
||||
- Fixed some code comment typos, regenerated the JSVM types and updated npm dependencies.
|
||||
|
||||
@@ -334,31 +334,31 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.31.0
|
||||
|
||||
- Visualize presentable multiple `relation` fields ([#7260](https://github.com/base/base/issues/7260)).
|
||||
- Visualize presentable multiple `relation` fields (#7260).
|
||||
|
||||
- Support Ed25519 in the optional OIDC `id_token` signature validation ([#7252](https://github.com/base/base/issues/7252); thanks @shynome).
|
||||
- Support Ed25519 in the optional OIDC `id_token` signature validation (#7252; thanks @shynome).
|
||||
|
||||
- Added `ApiScenario.DisableTestAppCleanup` optional field to skip the auto test app cleanup and leave it up to the developers to do the cleanup manually ([#7267](https://github.com/base/base/discussions/7267)).
|
||||
- Added `ApiScenario.DisableTestAppCleanup` optional field to skip the auto test app cleanup and leave it up to the developers to do the cleanup manually (#7267).
|
||||
|
||||
- Added `FileDownloadRequestEvent.ThumbError` field that is populated in case of a thumb generation failure (e.g. unsupported format, timing out, etc.), allowing developers to reject the thumb fallback and/or supply their own custom thumb generation ([#7268](https://github.com/base/base/discussions/7268)).
|
||||
- Added `FileDownloadRequestEvent.ThumbError` field that is populated in case of a thumb generation failure (e.g. unsupported format, timing out, etc.), allowing developers to reject the thumb fallback and/or supply their own custom thumb generation (#7268).
|
||||
|
||||
- ⚠️ Disallow client-side filtering and sorting of relations where the collection of the last targeted relation field has superusers-only List/Search API rule to further minimize the risk of eventual side-channel attack.
|
||||
_This should be a non-breaking change for most users, but if you want the old behavior, please open a new Q&A discussion with details about your use case to evaluate making it configurable._
|
||||
_Note also that as mentioned in the "Security and performance" section of [#4417](https://github.com/base/base/discussions/4417) and [#5863](https://github.com/base/base/discussions/5863), the easiest and recommended solution to protect security sensitive fields (tokens, codes, passwords, etc.) is to mark them as "Hidden" (aka. make them non-API filterable)._
|
||||
_Note also that as mentioned in the "Security and performance" section of #4417 and #5863, the easiest and recommended solution to protect security sensitive fields (tokens, codes, passwords, etc.) is to mark them as "Hidden" (aka. make them non-API filterable)._
|
||||
|
||||
- Regenerated JSVM types and updated npm and Go deps.
|
||||
|
||||
|
||||
## v0.30.4
|
||||
|
||||
- Fixed `json` field CSS regression introduced with the overflow workaround in v0.30.3 ([#7259](https://github.com/base/base/issues/7259)).
|
||||
- Fixed `json` field CSS regression introduced with the overflow workaround in v0.30.3 (#7259).
|
||||
|
||||
|
||||
## v0.30.3
|
||||
|
||||
- Fixed legacy identitity field priority check when a username is a valid email address ([#7256](https://github.com/base/base/issues/7256)).
|
||||
- Fixed legacy identitity field priority check when a username is a valid email address (#7256).
|
||||
|
||||
- Workaround autocomplete overflow issue with Firefox 144 ([#7223](https://github.com/base/base/issues/7223)).
|
||||
- Workaround autocomplete overflow issue with Firefox 144 (#7223).
|
||||
|
||||
- Updated `modernc.org/sqlite` to 1.39.1 (SQLite 3.50.4).
|
||||
|
||||
@@ -370,7 +370,7 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.30.1
|
||||
|
||||
- ⚠️ Excluded the `lost+found` directory from the backups ([#7208](https://github.com/base/base/pull/7208); thanks @lbndev).
|
||||
- ⚠️ Excluded the `lost+found` directory from the backups (#7208; thanks @lbndev).
|
||||
_If for some reason you want to keep it, you can restore it by editing the `e.Exclude` list of the `OnBackupCreate` and `OnBackupRestore` hooks._
|
||||
|
||||
- Minor tests improvements (disabled initial superuser creation for the test app to avoid cluttering the std output, added more tests for the `s3.Uploader.MaxConcurrency`, etc.).
|
||||
@@ -380,11 +380,11 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.30.0
|
||||
|
||||
- Eagerly escape the S3 request path following the same rules as in the S3 signing header ([#7153](https://github.com/base/base/issues/7153)).
|
||||
- Eagerly escape the S3 request path following the same rules as in the S3 signing header (#7153).
|
||||
|
||||
- Added Lark OAuth2 provider ([#7130](https://github.com/base/base/pull/7130); thanks @mashizora).
|
||||
- Added Lark OAuth2 provider (#7130; thanks @mashizora).
|
||||
|
||||
- Increased test tokens `exp` claim to minimize eventual issues with reproducible builds ([#7123](https://github.com/base/base/issues/7123)).
|
||||
- Increased test tokens `exp` claim to minimize eventual issues with reproducible builds (#7123).
|
||||
|
||||
- Added `os.Root` bindings to the JSVM ([`$os.openRoot`](https://docs.hanzo.ai/jsvm/functions/_os.openRoot.html), [`$os.openInRoot`](https://docs.hanzo.ai/jsvm/functions/_os.openInRoot.html)).
|
||||
|
||||
@@ -397,14 +397,14 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.29.3
|
||||
|
||||
- Try to forward Apple OAuth2 POST redirect user's name so that it can be returned (and eventually assigned) with the success response of the all-in-one auth call ([#7090](https://github.com/base/base/issues/7090)).
|
||||
- Try to forward Apple OAuth2 POST redirect user's name so that it can be returned (and eventually assigned) with the success response of the all-in-one auth call (#7090).
|
||||
|
||||
- Fixed `RateLimitRule.Audience` code comment ([#7098](https://github.com/base/base/pull/7098); thanks @iustin05).
|
||||
- Fixed `RateLimitRule.Audience` code comment (#7098; thanks @iustin05).
|
||||
|
||||
- Mocked `syscall.Exec` when building for WASM ([#7116](https://github.com/base/base/pull/7116); thanks @joas8211).
|
||||
- Mocked `syscall.Exec` when building for WASM (#7116; thanks @joas8211).
|
||||
_Note that WASM is not officially supported Base build target and many things may not work as expected._
|
||||
|
||||
- Registered missing `$filesystem`, `$mails`, `$template` and `__hooks` bindings in the JSVM migrations ([#7125](https://github.com/base/base/issues/7125)).
|
||||
- Registered missing `$filesystem`, `$mails`, `$template` and `__hooks` bindings in the JSVM migrations (#7125).
|
||||
|
||||
- Regenerated JSVM types to include methods from structs with single generic parameter.
|
||||
|
||||
@@ -418,13 +418,13 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.29.1
|
||||
|
||||
- Updated the X/Twitter provider to return the `confirmed_email` field and to use the `x.com` domain ([#7035](https://github.com/base/base/issues/7035)).
|
||||
- Updated the X/Twitter provider to return the `confirmed_email` field and to use the `x.com` domain (#7035).
|
||||
|
||||
- Added Box.com OAuth2 provider ([#7056](https://github.com/base/base/pull/7056); thanks @blakepatteson).
|
||||
- Added Box.com OAuth2 provider (#7056; thanks @blakepatteson).
|
||||
|
||||
- Updated `modernc.org/sqlite` to 1.38.2 (SQLite 3.50.3).
|
||||
|
||||
- Fixed example List API response ([#7049](https://github.com/base/base/pull/7049); thanks @williamtguerra).
|
||||
- Fixed example List API response (#7049; thanks @williamtguerra).
|
||||
|
||||
|
||||
## v0.29.0
|
||||
@@ -434,27 +434,27 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
- Added the triggered rate rimit rule in the error log `details`.
|
||||
|
||||
- Added optional `ServeEvent.Listener` field to initialize a custom network listener (e.g. `unix`) instead of the default `tcp` ([#3233](https://github.com/base/base/discussions/3233)).
|
||||
- Added optional `ServeEvent.Listener` field to initialize a custom network listener (e.g. `unix`) instead of the default `tcp` (#3233).
|
||||
|
||||
- Fixed request data unmarshalization for the `DynamicModel` array/object fields ([#7022](https://github.com/base/base/discussions/7022)).
|
||||
- Fixed request data unmarshalization for the `DynamicModel` array/object fields (#7022).
|
||||
|
||||
- Fixed Dashboard page title `-` escaping ([#6982](https://github.com/base/base/issues/6982)).
|
||||
- Fixed Dashboard page title `-` escaping (#6982).
|
||||
|
||||
- Other minor improvements (updated first superuser console text when running with `go run`, clarified trusted IP proxy header label, wrapped the backup restore in a transaction as an extra precaution, updated deps, etc.).
|
||||
|
||||
|
||||
## v0.28.4
|
||||
|
||||
- Added global JSVM `toBytes()` helper to return the bytes slice representation of a value such as io.Reader or string, _other types are first serialized to Go string_ ([#6935](https://github.com/base/base/issues/6935)).
|
||||
- Added global JSVM `toBytes()` helper to return the bytes slice representation of a value such as io.Reader or string, _other types are first serialized to Go string_ (#6935).
|
||||
|
||||
- Fixed `security.RandomStringByRegex` random distribution ([#6947](https://github.com/base/base/pull/6947); thanks @yerTools).
|
||||
- Fixed `security.RandomStringByRegex` random distribution (#6947; thanks @yerTools).
|
||||
|
||||
- Minor docs and typos fixes.
|
||||
|
||||
|
||||
## v0.28.3
|
||||
|
||||
- Skip sending empty `Range` header when fetching blobs from S3 ([#6914](https://github.com/base/base/pull/6914)).
|
||||
- Skip sending empty `Range` header when fetching blobs from S3 (#6914).
|
||||
|
||||
- Updated Go deps and particularly `modernc.org/sqlite` to 1.38.0 (SQLite 3.50.1).
|
||||
|
||||
@@ -463,23 +463,23 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.28.2
|
||||
|
||||
- Loaded latin-ext charset for the default text fonts ([#6869](https://github.com/base/base/issues/6869)).
|
||||
- Loaded latin-ext charset for the default text fonts (#6869).
|
||||
|
||||
- Updated view query CAST regex to properly recognize multiline expressions ([#6860](https://github.com/base/base/pull/6860); thanks @azat-ismagilov).
|
||||
- Updated view query CAST regex to properly recognize multiline expressions (#6860; thanks @azat-ismagilov).
|
||||
|
||||
- Updated Go and npm dependencies.
|
||||
|
||||
|
||||
## v0.28.1
|
||||
|
||||
- Fixed `json_each`/`json_array_length` normalizations to properly check for array values ([#6835](https://github.com/base/base/issues/6835)).
|
||||
- Fixed `json_each`/`json_array_length` normalizations to properly check for array values (#6835).
|
||||
|
||||
|
||||
## v0.28.0
|
||||
|
||||
- Write the default response body of `*Request` hooks that are wrapped in a transaction after the related transaction completes to allow propagating the transaction error ([#6462](https://github.com/base/base/discussions/6462#discussioncomment-12207818)).
|
||||
- Write the default response body of `*Request` hooks that are wrapped in a transaction after the related transaction completes to allow propagating the transaction error (#6462).
|
||||
|
||||
- Updated `app.DB()` to automatically routes raw write SQL statements to the nonconcurrent db pool ([#6689](https://github.com/base/base/discussions/6689)).
|
||||
- Updated `app.DB()` to automatically routes raw write SQL statements to the nonconcurrent db pool (#6689).
|
||||
_For the rare cases when it is needed users still have the option to explicitly target the specific pool they want using `app.ConcurrentDB()`/`app.NonconcurrentDB()`._
|
||||
|
||||
- ⚠️ Changed the default `json` field max size to 1MB.
|
||||
@@ -488,7 +488,7 @@ and the minor performance boost that you may get when used on large records is n
|
||||
- ⚠️ Soft-deprecated and replaced `filesystem.System.GetFile(fileKey)` with `filesystem.System.GetReader(fileKey)` to avoid the confusion with `filesystem.File`.
|
||||
_The old method will still continue to work for at least until v0.29.0 but you'll get a console warning to replace it with `GetReader`._
|
||||
|
||||
- Added new `filesystem.System.GetReuploadableFile(fileKey, preserveName)` method to return an existing blob as a `*filesystem.File` value ([#6792](https://github.com/base/base/discussions/6792)).
|
||||
- Added new `filesystem.System.GetReuploadableFile(fileKey, preserveName)` method to return an existing blob as a `*filesystem.File` value (#6792).
|
||||
_This method could be useful in case you want to clone an existing Record file and assign it to a new Record (e.g. in a Record duplicate action)._
|
||||
|
||||
- Other minor improvements (updated the GitHub release min Go version to 1.23.9, updated npm and Go deps, etc.)
|
||||
@@ -496,11 +496,11 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.27.2
|
||||
|
||||
- Added workers pool when cascade deleting record files to minimize _"thread exhaustion"_ errors ([#6780](https://github.com/base/base/discussions/6780)).
|
||||
- Added workers pool when cascade deleting record files to minimize _"thread exhaustion"_ errors (#6780).
|
||||
|
||||
- Updated the `:excerpt` fields modifier to properly account for multibyte characters ([#6778](https://github.com/base/base/issues/6778)).
|
||||
- Updated the `:excerpt` fields modifier to properly account for multibyte characters (#6778).
|
||||
|
||||
- Use `rowid` as count column for non-view collections to minimize the need of having the id field in a covering index ([#6739](https://github.com/base/base/discussions/6739))
|
||||
- Use `rowid` as count column for non-view collections to minimize the need of having the id field in a covering index (#6739)
|
||||
|
||||
|
||||
## v0.27.1
|
||||
@@ -509,7 +509,7 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
- Added JSVM `new GeoPointField({ ... })` constructor.
|
||||
|
||||
- Added _partial_ WebP thumbs generation (_the thumbs will be stored as PNG_; [#6744](https://github.com/base/base/pull/6744)).
|
||||
- Added _partial_ WebP thumbs generation (_the thumbs will be stored as PNG_; #6744).
|
||||
|
||||
- Updated npm dev dependencies.
|
||||
|
||||
@@ -534,18 +534,18 @@ and the minor performance boost that you may get when used on large records is n
|
||||
ExpectedEvents: map[string]int{"*": 0},
|
||||
}
|
||||
```
|
||||
If you are having difficulties adjusting your code, feel free to open a [Q&A discussion](https://github.com/base/base/discussions) with the failing/problematic code sample.
|
||||
If you are having difficulties adjusting your code, feel free to open a discussion with the failing/problematic code sample.
|
||||
|
||||
- Added [new `geoPoint` field](https://docs.hanzo.ai/docs/collections/#geopoint) for storing `{"lon":x,"lat":y}` geographic coordinates.
|
||||
In addition, a new [`geoDistance(lonA, lotA, lonB, lotB)` function](https://docs.hanzo.ai/docs/api-rules-and-filters/#geodistancelona-lata-lonb-latb) was also implemented that could be used to apply an API rule or filter constraint based on the distance (in km) between 2 geo points.
|
||||
|
||||
- Updated the `select` field UI to accommodate better larger lists and RTL languages ([#4674](https://github.com/base/base/issues/4674)).
|
||||
- Updated the `select` field UI to accommodate better larger lists and RTL languages (#4674).
|
||||
|
||||
- Updated the mail attachments auto MIME type detection to use `gabriel-vasile/mimetype` for consistency and broader sniffing signatures support.
|
||||
|
||||
- Forced `text/javascript` Content-Type when serving `.js`/`.mjs` collection uploaded files with the `/api/files/...` endpoint ([#6597](https://github.com/base/base/issues/6597)).
|
||||
- Forced `text/javascript` Content-Type when serving `.js`/`.mjs` collection uploaded files with the `/api/files/...` endpoint (#6597).
|
||||
|
||||
- Added second optional JSVM `DateTime` constructor argument for specifying a default timezone as TZ identifier when parsing the date string as alternative to a fixed offset in order to better handle daylight saving time nuances ([#6688](https://github.com/base/base/discussions/6688)):
|
||||
- Added second optional JSVM `DateTime` constructor argument for specifying a default timezone as TZ identifier when parsing the date string as alternative to a fixed offset in order to better handle daylight saving time nuances (#6688):
|
||||
```js
|
||||
// the same as with CET offset: new DateTime("2025-10-26 03:00:00 +01:00")
|
||||
new DateTime("2025-10-26 03:00:00", "Europe/Amsterdam") // 2025-10-26 02:00:00.000Z
|
||||
@@ -563,19 +563,19 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.26.6
|
||||
|
||||
- Allow OIDC `email_verified` to be int or boolean string since some OIDC providers like AWS Cognito has non-standard userinfo response ([#6657](https://github.com/base/base/pull/6657)).
|
||||
- Allow OIDC `email_verified` to be int or boolean string since some OIDC providers like AWS Cognito has non-standard userinfo response (#6657).
|
||||
|
||||
- Updated `modernc.org/sqlite` to 1.36.3.
|
||||
|
||||
|
||||
## v0.26.5
|
||||
|
||||
- Fixed canonical URI parts escaping when generating the S3 request signature ([#6654](https://github.com/base/base/issues/6654)).
|
||||
- Fixed canonical URI parts escaping when generating the S3 request signature (#6654).
|
||||
|
||||
|
||||
## v0.26.4
|
||||
|
||||
- Fixed `RecordErrorEvent.Error` and `CollectionErrorEvent.Error` sync with `ModelErrorEvent.Error` ([#6639](https://github.com/base/base/issues/6639)).
|
||||
- Fixed `RecordErrorEvent.Error` and `CollectionErrorEvent.Error` sync with `ModelErrorEvent.Error` (#6639).
|
||||
|
||||
- Fixed logs details copy to clipboard action.
|
||||
|
||||
@@ -584,7 +584,7 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.26.3
|
||||
|
||||
- Fixed and normalized logs error serialization across common types for more consistent logs error output ([#6631](https://github.com/base/base/issues/6631)).
|
||||
- Fixed and normalized logs error serialization across common types for more consistent logs error output (#6631).
|
||||
|
||||
|
||||
## v0.26.2
|
||||
@@ -594,18 +594,18 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.26.1
|
||||
|
||||
- Removed the wrapping of `io.EOF` error when reading files since currently `io.ReadAll` doesn't check for wrapped errors ([#6600](https://github.com/base/base/issues/6600)).
|
||||
- Removed the wrapping of `io.EOF` error when reading files since currently `io.ReadAll` doesn't check for wrapped errors (#6600).
|
||||
|
||||
|
||||
## v0.26.0
|
||||
|
||||
- ⚠️ Replaced `aws-sdk-go-v2` and `gocloud.dev/blob` with custom lighter implementation ([#6562](https://github.com/base/base/discussions/6562)).
|
||||
- ⚠️ Replaced `aws-sdk-go-v2` and `gocloud.dev/blob` with custom lighter implementation (#6562).
|
||||
As a side-effect of the dependency removal, the binary size has been reduced with ~10MB and builds ~30% faster.
|
||||
_Although the change is expected to be backward-compatible, I'd recommend to test first locally the new version with your S3 provider (if you use S3 for files storage and backups)._
|
||||
|
||||
- ⚠️ Prioritized the user submitted non-empty `createData.email` (_it will be unverified_) when creating the Base user during the first OAuth2 auth.
|
||||
|
||||
- Load the request info context during password/OAuth2/OTP authentication ([#6402](https://github.com/base/base/issues/6402)).
|
||||
- Load the request info context during password/OAuth2/OTP authentication (#6402).
|
||||
This could be useful in case you want to target the auth method as part of the MFA and Auth API rules.
|
||||
For example, to disable MFA for the OAuth2 auth could be expressed as `@request.context != "oauth2"` MFA rule.
|
||||
|
||||
@@ -613,39 +613,39 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
- Added `subscription.Message.WriteSSE(w, id)` for writing an SSE formatted message into the provided writer interface (_used mostly to assist with the unit testing_).
|
||||
|
||||
- Added `$os.stat(file)` JSVM helper ([#6407](https://github.com/base/base/discussions/6407)).
|
||||
- Added `$os.stat(file)` JSVM helper (#6407).
|
||||
|
||||
- Added log warning for `async` marked JSVM handlers and resolve when possible the returned `Promise` as fallback ([#6476](https://github.com/base/base/issues/6476)).
|
||||
- Added log warning for `async` marked JSVM handlers and resolve when possible the returned `Promise` as fallback (#6476).
|
||||
|
||||
- Allowed calling `cronAdd`, `cronRemove` from inside other JSVM handlers ([#6481](https://github.com/base/base/discussions/6481)).
|
||||
- Allowed calling `cronAdd`, `cronRemove` from inside other JSVM handlers (#6481).
|
||||
|
||||
- Bumped the default request read and write timeouts to 5mins (_old 3mins_) to accommodate slower internet connections and larger file uploads/downloads.
|
||||
_If you want to change them you can modify the `OnServe` hook's `ServeEvent.ReadTimeout/WriteTimeout` fields as shown in [#6550](https://github.com/base/base/discussions/6550#discussioncomment-12364515)._
|
||||
_If you want to change them you can modify the `OnServe` hook's `ServeEvent.ReadTimeout/WriteTimeout` fields as shown in #6550._
|
||||
|
||||
- Normalized the `@request.auth.*` and `@request.body.*` back relations resolver to always return `null` when the relation field is pointing to a different collection ([#6590](https://github.com/base/base/discussions/6590#discussioncomment-12496581)).
|
||||
- Normalized the `@request.auth.*` and `@request.body.*` back relations resolver to always return `null` when the relation field is pointing to a different collection (#6590).
|
||||
|
||||
- Other minor improvements (_fixed query dev log nested parameters output, reintroduced `DynamicModel` object/array props reflect types caching, updated Go and npm deps, etc._)
|
||||
|
||||
|
||||
## v0.25.9
|
||||
|
||||
- Fixed `DynamicModel` object/array props reflect type caching ([#6563](https://github.com/base/base/discussions/6563)).
|
||||
- Fixed `DynamicModel` object/array props reflect type caching (#6563).
|
||||
|
||||
|
||||
## v0.25.8
|
||||
|
||||
- Added a default leeway of 5 minutes for the Apple/OIDC `id_token` timestamp claims check to account for clock-skew ([#6529](https://github.com/base/base/issues/6529)).
|
||||
- Added a default leeway of 5 minutes for the Apple/OIDC `id_token` timestamp claims check to account for clock-skew (#6529).
|
||||
It can be further customized if needed with the `PB_ID_TOKEN_LEEWAY` env variable (_the value must be in seconds, e.g. "PB_ID_TOKEN_LEEWAY=60" for 1 minute_).
|
||||
|
||||
|
||||
## v0.25.7
|
||||
|
||||
- Fixed `@request.body.jsonObjOrArr.*` values extraction ([#6493](https://github.com/base/base/discussions/6493)).
|
||||
- Fixed `@request.body.jsonObjOrArr.*` values extraction (#6493).
|
||||
|
||||
|
||||
## v0.25.6
|
||||
|
||||
- Restore the missing `meta.isNew` field of the OAuth2 success response ([#6490](https://github.com/base/base/issues/6490)).
|
||||
- Restore the missing `meta.isNew` field of the OAuth2 success response (#6490).
|
||||
|
||||
- Updated npm dependencies.
|
||||
|
||||
@@ -682,12 +682,12 @@ and the minor performance boost that you may get when used on large records is n
|
||||
|
||||
## v0.25.3
|
||||
|
||||
- Added a temporary exception for Backblaze S3 endpoints to exclude the new `aws-sdk-go-v2` checksum headers ([#6440](https://github.com/base/base/discussions/6440)).
|
||||
- Added a temporary exception for Backblaze S3 endpoints to exclude the new `aws-sdk-go-v2` checksum headers (#6440).
|
||||
|
||||
|
||||
## v0.25.2
|
||||
|
||||
- Fixed realtime delete event not being fired for `RecordProxy`-ies and added basic realtime record resolve automated tests ([#6433](https://github.com/base/base/issues/6433)).
|
||||
- Fixed realtime delete event not being fired for `RecordProxy`-ies and added basic realtime record resolve automated tests (#6433).
|
||||
|
||||
|
||||
## v0.25.1
|
||||
|
||||
+3
-3
@@ -23,7 +23,7 @@
|
||||
|
||||
## v0.22.37
|
||||
|
||||
- (_Backported from v0.34.1_) - Added missing `:` char to the autocomplete regex ([#7353](https://github.com/base/base/pull/7353)).
|
||||
- (_Backported from v0.34.1_) - Added missing `:` char to the autocomplete regex (#7353).
|
||||
|
||||
- (_Backported from v0.34.1_) Bumped min Go GitHub action version to 1.25.5 because it comes with some [minor security fixes](https://github.com/golang/go/issues?q=milestone%3AGo1.25.5).
|
||||
_The runner action was also updated to `actions/setup-go@v6` since the previous v5 Go source seems [no longer accessible](https://github.com/actions/setup-go/pull/665#issuecomment-3416693714)._
|
||||
@@ -41,12 +41,12 @@
|
||||
|
||||
## v0.22.34
|
||||
|
||||
- (_Backported from v0.26.6_) Allow OIDC `email_verified` to be int or boolean string since some OIDC providers like AWS Cognito has non-standard userinfo response ([#6657](https://github.com/base/base/pull/6657)).
|
||||
- (_Backported from v0.26.6_) Allow OIDC `email_verified` to be int or boolean string since some OIDC providers like AWS Cognito has non-standard userinfo response (#6657).
|
||||
|
||||
|
||||
## v0.22.33
|
||||
|
||||
- (_Backported from v0.26.3_) Fixed and normalized logs error serialization across common types for more consistent logs error output ([#6631](https://github.com/base/base/issues/6631)).
|
||||
- (_Backported from v0.26.3_) Fixed and normalized logs error serialization across common types for more consistent logs error output (#6631).
|
||||
|
||||
|
||||
## v0.22.32
|
||||
|
||||
Reference in New Issue
Block a user