🗓️ Release date:
This release of PocketQuery is a bug fix and security release.
Bug Fixes
-
When Confluence cannot confirm a user's permissions, PocketQuery now asks them to try again instead of showing a generic error.
-
Anonymous visitors now get the correct notice for live queries instead of a prompt to try again.
Security
-
Queries, datasources, templates and converters are now checked on the server every time they are saved, including during imports.
-
Query details are now only shared with viewers on pages in the query's allowed spaces.
-
The query list in the macro settings is now only available to signed-in users and shows query names only.
-
Pages with snapshot or cached results keep showing them even when the query itself cannot be loaded.
-
Added automated checks that keep earlier protections for query parameters and database connections in place.
-
Removed outdated backend services that the app no longer used.
Compatibility notes
-
Datasources: A JDBC URL that sets a connection property PocketQuery does not allow, such as allowLoadLocalInfile, is now refused when the datasource is saved, even if only its name changes. Such datasources already could not connect; remove the property from the URL to edit them.
-
Queries: New or changed values are limited to 40,000 characters per statement, 20 parameters and 100 characters per parameter name. Existing queries above these limits stay editable as long as those values are not changed.
-
Macro settings: Users without the PocketQuery editor or admin role can no longer save a macro with a space-restricted query on a page outside the query's spaces; the settings show "This query is not available on this page."
Internal version number: 2026-10-26