Catalog / PocketBase

0.22.57

v0.22.57 Release

todaysecuritychangedOriginal notes
  • (Backported from v0.40.6) Added a global restriction for the max WxH pixels size when generating a thumb to reduce the risk of excessive memory usage. The default limit is pretty generous and currently set to max 250<<20 (262144000) pixels and can be changed with the env PB_THUMBS_MAX_SOURCE_PIXELS.

  • (Backported from v0.40.6) Bumped golang.org/x/ dependencies (#7865).

  • (Backported from v0.40.6) Bumped the min Go GitHub action version to 1.27.3 as it includes a security fix related to the recent eMudhra CA compromise. I didn't rush a fix 2 days ago as the impact for most PocketBase servers is not that serious and requires to already have a MiTM, but nonetheless it is recommended to update. Please make sure to also check for OS/Docker image updates to make sure that you have the latest ca-certificates bundle.