Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade pocketbase from 0.19.0 to 0.21.2 #2

Closed

Conversation

melvinchia3636
Copy link
Collaborator

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade pocketbase from 0.19.0 to 0.21.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 10 versions ahead of your current version.

  • The recommended version was released on 2 months ago.

Release notes
Package name: pocketbase
  • 0.21.2 - 2024-04-21
    • Exported HealthService types (#289).
  • 0.21.1 - 2024-02-03
    • Manually update the verified state of the current matching AuthStore model on successful "confirm-verification" call.

    • Manually clear the current matching AuthStore on "confirm-email-change" call because previous tokens are always invalidated.

    • Fixed the fetch mock tests to check also the sent body param values.

    • Formatted the source code with prettier.

  • 0.21.0 - 2024-01-24

    ⚠️ This release works only with PocketBase v0.21.0+ due to changes of how the multipart/form-data body is handled.

    • Properly sent json body with multipart/form-data requests.
      This should fix the edge cases mentioned in the v0.20.3 release.

    • Gracefully handle OAuth2 redirect error with the authWithOAuth2() call.

  • 0.20.3 - 2024-01-14
    • Partial and temporary workaround for the auto application/json -> multipart/form-data request serialization of a json field when a Blob/File is found in the request body (#274).

      The "fix" is partial because there are still 2 edge cases that are not handled - when a json field value is empty array (eg. []) or array of strings (eg. ["a","b"]).
      The reason for this is because the SDK doesn't have information about the field types and doesn't know which field is a json or an arrayable select, file or relation, so it can't serialize it properly on its own as FormData string value.

      If you are having troubles with persisting json values as part of a multipart/form-data request the easiest fix for now is to manually stringify the json field value:

      await pb.collection("example").create({
        // having a Blob/File as object value will convert the request to multipart/form-data
        "someFileField": new Blob([123]),
        "someJsonField": JSON.stringify(["a","b","c"]),
      })

      A proper fix for this will be implemented with PocketBase v0.21.0 where we'll have support for a special @ jsonPayload multipart body key, which will allow us to submit mixed multipart/form-data content (kindof similar to the multipart/mixed MIME).

  • 0.20.2 - 2024-01-11
    • Throw 404 error for getOne("") when invoked with empty id (#271).

    • Added @ throw {ClientResponseError} jsdoc annotation to the regular request methods (#262).

  • 0.20.1 - 2023-12-11
    • Propagate the PB_CONNECT EventSource message to allow listening to the realtime connect/reconnect events.
      pb.realtime.subscribe("PB_CONNECT", (e) => {
        console.log(e.clientId);
      })
  • 0.20.0 - 2023-12-10
    • Added expand, filter, fields, custom query and headers parameters support for the realtime subscriptions.

      pb.collection("example").subscribe("*", (e) => {
        ...
      }, { filter: "someField > 10" });

      This works only with PocketBase v0.20.0+.

    • Changes to the logs service methods in relation to the logs generalization in PocketBase v0.20.0+:

      pb.logs.getRequestsList(...)  -> pb.logs.getList(...)
      pb.logs.getRequest(...)       -> pb.logs.getOne(...)
      pb.logs.getRequestsStats(...) -> pb.logs.getStats(...)
    • Added missing SchemaField.presentable field.

    • Added new AuthProviderInfo.displayName string field.

    • Added new AuthMethodsList.onlyVerified bool field.

  • 0.20.0-rc3 - 2023-11-29
  • 0.20.0-rc2 - 2023-11-26
  • 0.20.0-rc - 2023-10-24
    • Added experimental expand, filter, fields, custom query and headers parameters support for the realtime subscriptions.
      pb.collection("example").subscribe("*", (e) => {
        ...
      }, { filter: "someField > 10" });
      This works only with PocketBase v0.20.0-rc.
  • 0.19.0 - 2023-10-18
    • Added pb.filter(rawExpr, params?) helper to construct a filter string with placeholder parameters populated from an object.

      const record = await pb.collection("example").getList(1, 20, {
        // the same as: "title ~ 'te\\'st' && (totalA = 123 || totalB = 123)"
        filter: pb.filter("title ~ {:title} && (totalA = {:num} || totalB = {:num})", { title: "te'st", num: 123 })
      })

      The supported placeholder parameter values are:

      • string (single quotes will be autoescaped)
      • number
      • boolean
      • Date object (will be stringified into the format expected by PocketBase)
      • null
      • anything else is converted to a string using JSON.stringify()
from pocketbase GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade pocketbase from 0.19.0 to 0.21.2.

See this package in npm:
pocketbase

See this project in Snyk:
https://app.snyk.io/org/melvinchia3636/project/3be203cf-4b72-473d-bc95-0685366ad415?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

vercel bot commented Jun 18, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
lifeforge ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 18, 2024 6:24am

Copy link

cloudflare-workers-and-pages bot commented Jun 18, 2024

Deploying personalmanagementsystem with  Cloudflare Pages  Cloudflare Pages

Latest commit: 4ef06e3
Status:🚫  Build failed.

View logs

@melvinchia3636 melvinchia3636 deleted the snyk-upgrade-964c1cebe6c910e1aa4bc0ec5e3ab481 branch September 12, 2024 07:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants