Last 7 days
0
Features: 0
Changes: 0
Fixes: 0
Deprecations: 0
Payload
TypeScript headless CMS and managed cloud application platform.
Latest Payload changelog updates, official release notes, breaking changes, security patches, pricing changes, and developer reactions in one product feed.
Follow this Payload release-notes page to spot useful features, risky migrations, noisy announcements, and source links before they hit your backlog.
Where Payload updates are checked
Changes.Watch links back to official changelog and release-note sources so summaries stay easy to verify.
Related changelog channels
Use channels to follow groups of tools around a stack, workflow, or topic.
Payload updates by type
Rolling windows show how many product updates landed in the last 7, 30, 90, and 365 days, grouped by existing changelog semantics.
0
3
7
52
Latest Payload changelog updates
Fix multipart content type backtracking bug
Connect to the correct Next.js dev HMR endpoint per version.
Added Azure storage support for large file uploads (>5 GB) via chunkLargeFiles.
Added collection‑level `disableBulkDelete`, translation support for plugin form builder v3, and UI `livePreview.openByDefault` config option.
Fixed multiple bugs: payload bin TSX failure on Node 23.5+, MongoDB duplicate IDs in nested queries, UI draft title handling, and reordering that unpublished newer drafts
Fixed multiple bugs including draft save/duplicate handling, bin script module imports, CSV array import, and MIME type detection redirects
Feature: Plugin import/export leaves beta and now supports collection‑level and field‑level hooks.
Updated the create payload app to pull from the 3.x branch
Added new features: client components can be used as custom collection views, email recipient override config, locale‑aware currency formatting, multipart upload support, and server‑instruction handling for MCP.
Expanded Plugin API with definePlugin helper, internal priority/slug system, and profiling utilities for dev performance analysis
Fixed config key for disabling turbo server fast refresh and corrected nested docs plugin breadcrumb handling.
Added media file disambiguation via query‑parameter prefix, a new TypeScript post‑process hook, exported drag‑and‑drop UI components, Portuguese translation for redirects, and collection slug support in search hooks.
Introduce LLM evaluation suite and add field‑level access control for internal auth fields.
Added `disableUnique` option to slug fields for multi‑tenant plugin support and updated docs and templates to Next.js 16.2.0.
Fixed numerous bugs across validation, UI interactions, and Azure storage handling, including text field validation and duplicate ID errors on paste.
Added separate block icon configuration for Lexical blocks, deprecating the old imageURL property
Added @payloadcms/typescript plugin for IDE validation of component import paths and new UI enhancements: widget fields, editable query presets, and dashed button style.
Local API now forwards the `depth` option to `req.query.depth`, aligning its behavior with REST/GraphQL calls.
Use optional chaining for adminThumbnail size lookup to prevent crashes.
Added import/export plugin limits (exportLimit, importLimit, per‑collection control).
Added beforeNav and afterNav component slots; passed full initReq context to Next.js server functions and dashboard widgets, exported SlugField from client dir, and synced modular dashboard widgets on re‑render
Added overrideAccess support in collection and global hooks and extended strictDraftTypes enforcement to all draft operations
Added full Next.js 16 compatibility with Turbopack HMR and build support (requires canary 16.1.1+).
Added experimental localized status with per‑locale publish/unpublish and a required migration for existing version data
Removed stray console.log debugging statement from Form component
Added exclusive job queue concurrency controls, job cancellation from handlers, and custom status component for docs, plus new bulk‑operation transaction mode and expanded IANA timezone support.
Added multi‑column sorting via array syntax in the REST API, aligning it with Local API behavior.
- Introduced modular admin dashboards with draggable, resizable widgets and full keyboard accessibility for reordering and resizing.
Omit server URL from route matching to prevent false positives (bug fix).
Fixed previousValue population within lexical blocks and corrected local request URL construction
High severity DoS (CVE‑2025‑55184) and medium severity source code exposure (CVE‑2025‑55183) affect React 19 and Next.js; upgrade React/Next.js to the patched versions (minimum Next 15.4.9) immediately.
Fixed Windows ENOENT errors on dev startup by using fileURLToPath for cross-platform path resolution.
Updated turbopack build error message to stop suggesting a vulnerable Next.js release
Added automatic Turbopack build support for Next.js ≥ 16.1.0 canaries and new build:all:force command, plus internal debug release mode.
Added GroupBy state saving/restoring to query presets, preventing unwanted persistence across preset switches.
Critical security vulnerabilities in React Server Components (CVE‑2025‑55182) and Next.js (CVE‑2025‑66478) – upgrade React to ≥19.2.1 and Next.js to ≥15.4.8 immediately.
Breaking change – Turbopack build support removed; use Webpack via pnpm build for Next.js 15/16.
Added UTC timezone support for date fields and full Turbopack build support; introduced MCP context detection, custom auth configuration, and redirect plugin translation support.
Add polymorphic upload support, allowing fields to reference multiple upload collections and work with bulk and hasMany options.
Fix KV implementation so Postgres users no longer need to create a new migration
Added role‑based access control for job queue and cancel operations with overrideAccess support.
Fixed UI bugs: added confirmation before closing doc drawer with edits, corrected preview button behavior, and handled array values in query translation
🚀 Added @payloadcms/plugin-mcp (beta) – a new plugin that turns Payload into an MCP server, enabling AI models to interact with collections via a standardized CRUD protocol.
Added support for multiple fallback locales, a new admin Settings menu, and multiple multi‑tenant plugin enhancements (collection access overrides, hasMany tenant field overrides, user access overrides).
Fixed multiple bugs: reverted drizzle ORM changes, corrected multi‑tenant plugin cookie handling on login, and updated UI memory user when autoLogin is enabled.
Add extensive new query and admin UI capabilities including slug field, deep relationship support in findDistinct, disableGroupBy prop, bundle types, readReplicas for D1, and atomic array operations for relational fields
Beta Ecommerce plugin and template released, with one‑click Cloudflare deployment option.
Added admin.formatDocURL for list‑view linking, conditional blocks, virtual hasMany relationships, and plugin form builder to create submissions from the admin panel
Added new task callback arguments, a global beforeOperation hook, multipart/form parsing options, and exported FieldPathContext; introduced crons for all bin scripts and a more reliable job system.
Fixed presentational field type hook exposure and UI searchable fields duplication issues
Added new admin UI and client configuration features such as disableListColumn/disableListFilter, admin.autoRefresh, experimental.localizeStatus, folder tab preferences, select‑API opt‑in, client‑side live preview enhancements, and rich‑...
Introduced parallel job‑queue task execution, configurable toast notifications, multi‑payload support, atomic array $push updates, and multi‑tenant enhancements.
Added Icelandic translations and several new features such as enhanced import/export sorting controls, visible tenant field on documents, radio field export, S3 content‑length validation and streaming support.
Add limit and page options to the import/export plugin, enhance CSV export/preview for hasMany relationships, and improve autosave form state predictability.
Added multi‑tenant plugin support with tenant field overrides and cross‑tenant document visibility, plus UI/UX upgrades such as query preset updates, improved autosave handling, and searchable select fields.
Added restoreVersion hooks, trash support for count, GraphQL count flag for joins, and Indonesian translations.
Fixed multiple bugs including Next.js 15.4.4 compatibility, API key encryption during refresh, cookie filtering, login attempts handling, and UI crashes in list views.
Adds trash support (soft deletes), group‑by queries, job scheduling, and UI method to refresh list drawer.
Added findDistinct operation, atomic number field updates, and support for collection‑scoped folders
Added joins, select, populate, depth and draft support to the /me REST API and introduced a new sanitizeUserDataForEmail utility.
Added restricted file check feature
🚀 Added live preview mounting to document root and extended drizzle support with half‑precision, binary, and sparse vector column types.
Introduced secure auth sessions that store a unique session ID in the database, requiring a migration for projects using the local auth strategy with Postgres or SQLite (can be disabled via auth.useSessions:false).
Added admin upload controls and exposed data argument in afterChange hook for collections and globals.
Added importmap generation and custom CSV export functions, plus debug logging and DateField export support in plugins
Added UI and query enhancements such as optional exclusion of collection documents in folder browse, document drawer for folder edit/create, custom editMenuItems component, polymorphic join querying, and improved Turbopack compatibility.
Added canSetHeaders prop to auth strategies and moved getSafeRedirect into the payload package, plus new before/after hooks for resetPassword.
Fixed folder export path issues
Introduce per‑collection Folder support with admin UI and API for organizing documents
Added Latvian language support and optional naming for group fields, plus multi‑tenant tenant‑change confirmation and S3 presigned download URLs.
Fix filter state resetting when removing a condition in WhereBuilder.
Added several UI enhancements such as document links in drawers, option to open related documents in a new tab, configurable field placeholders, and array‑field filtering in list views
Fixed multiple bugs including duplicate handling with orderable, virtual relationship select fields, email regex support for special characters, Postgres count crashes with subqueries, CSV export column order, and richtext state restorat...
Added beforeDocumentControls slot and showSaveDraftButton option for UI customization
Fix missing @payloadcms/next/auth export
Added queriable, sortable, and useAsTitle virtual fields linked to relationship fields, plus UI options for list‑drawer rendering and defaultDepth in API view.
Added support for querying by join fields, time format config on scheduled publish, and new UI multi‑select inputs and orderable tables in the admin UI.
Added multiple features: drizzle export helpers, GraphQL non‑nullability, Next.js rich‑text diffing, configurable UploadThing router input, UI drag overlay for orderable tables, and enhanced MongoDB/Postgres query handling.
Added orderable collections and configurable job queue processing order (LIFO/FIFO) with sequential execution support.
Introduce Query Presets to save and share collection filters, columns, and sort orders.
Bumped Next.js peer dependency to 15.2.3 to patch a security vulnerability (affects custom Next.js middleware).
Upgrade lexical to 0.28.0 with migration guidance and several rich‑text enhancements (markdown escaping, TabNode disabling, new converters).
- Updated project dependencies to their latest versions.
- Fixed bundling optimization exclusions for cloud storage, Sentry, and Stripe plugins and corrected image height rounding, field type definitions, and S3 socket cleanup.
Added an opt‑in flag that can halve development compilation times by skipping server‑only packages, delivering ~50% faster builds.
Added new features such as a payload admin bar, ability to hide blockName in headers, thread path support in field conditions, compound indexes, import‑map override, and initial plugin import/export functionality.
Introduced job cancellation, enhanced DB with `updateMany` supporting limits, added richtext lexical helpers (htmlToLexical, editorConfigFactory) and UI auto‑close navigation on small screens.
Added large file upload support on Vercel, new "not like" query operator, extensive multi‑tenant plugin enhancements (custom selector labels, filtered user/tenant lists, exported hook), and rich‑text lexical improvements (import‑map comp...
Introduced reusable top‑level types and expanded join capabilities (interfaceName on radio/select, cross‑collection join fields, page query param, siblingFields hook arg, view component types, route transitions).
Added timezone support for date fields, UI scheduled publishing, and relative live preview URLs; introduced jobs.shouldAutoRun property and multi‑tenant tenant array config options.
Added UI filtering configuration option and improved hasMany TextField UX.
Added TS schema generation args, auto‑resize textarea, and opt‑out for tenant ACL merge; enhanced multi‑tenant and search plugin capabilities
Added customizable version diff UI with server‑side rendering and locale‑specific publish button swapping; introduced query params (limit, page, sort, where, joins) and deferred field validation until form submission.
Added rich‑text lexical enhancements (selectable decorator nodes/blocks, improved URL auto‑linking, fixed table menu placement) and UI improvements such as bulk edit option and typed custom field examples.
Added client‑side and server‑side remote URL upload support, JPEG XL image size calculation, and a new multi‑tenant plugin with example projects (Remix, Astro, Payload).
Bumped the lexical peer dependency from 0.20.0 to 0.21.0 and advise using the re‑exported version
- Added and enhanced Rich Text Lexical editor: new paragraph button, imageURL support, upgrade to v0.21.0, placeholder fixes, and related bug resolutions
Consolidated REST API handling and decoupled it from Next.js, added auto‑run job support and Payload Cloud cron initialization.
Added export for the CheckboxInput component
Add admin prop `forceRenderAllFields` to render all edit‑view fields immediately
Fixed false positive warning in Vercel upload adapter
- Added ability to run sub‑tasks from tasks, warn on Vercel deployments missing storage adapters, and support resetting preferences; next.js now passes query params to find operations
Added Estonian language support.
Add granular GraphQL disabling for collections and new placeholder override for Lexical rich‑text, plus Catalan translations and onMount hook for CodeField.
Implemented scheduled publish/unpublish and expanded richtext lexical support (multiline strings, lenient JSON parsing, newline handling, selection restoration, server block exports)
Added autoIncrement option for SQLite and introduced MongoDB performance optimizations.
Added JSDoc generation for types, polymorphic join fields, full drizzle schema generation for Postgres/SQLite, and UUID id support for SQLite
Added new features: shouldRestore config for job queue tasks, join field support inside arrays, customizable Mongoose schema options, browser‑based caching via ETags, and PostgreSQL query enhancements.
Introduced multiple new features: request object passed to defaultValue functions, admin defaultColumns for join fields, local Postgres support via pg, GraphQL custom field complexity and validation rules, Vercel Blob fallback to disk, h...
Added new features such as pagination control, waitUntil property for job queues, loading predefined migrations, the ability to exclude entities from the navigation/sidebar, and customizable code‑editor min‑height.
Added migration session/db exposure for active transactions, new job query features (where clause, runByID) and a suppressHydrationWarning config option.
Upgrade core stack to React 19 stable and Next.js 15.0.4, removing the need for pnpm.overrides keys
Add configurable expiration property for password reset tokens, enhancing security flexibility
Added disableLocalStrategy, built‑in field validations, and new UI props (beforeInput/afterInput) plus exported CodeEditor and Tabs components.
Added fully typed blocks to the Richtext Lexical JSX serializer and keyboard exit support in Firefox
Fixed plugin search failure caused by a missing copyfiles script.
Added cross‑locale data copy, on‑demand collection reindexing, and new RichText Lexical helpers (hasText export, JSX converter); plugin form builder now supports payment‑field overrides and SEO plugin enforces readonly client.
Improved website template performance and image loading optimizations, plus added a /payload jobs/run endpoint for queue execution without workflows.
Added skip and force‑accept flags to migration commands and introduced multiple RichText Lexical enhancements (custom block RSCs, toolbar config, export hooks, slash‑menu fixes, indent/align preservation on HTML conversion)
Fixed self‑referencing relationships when adding new collections and corrected document ID type handling for Postgres
Reduced HTML payload size by up to 4x, improving client performance.
Re‑architected Payload for Next.js App Router with server components, ESM, modular packages and server‑less deployment support.
Added Turkish translation to the SEO plugin
Fix migrate:create errors in PostgreSQL when using previous schemas
Fixed resize after cropping when resizeOptions are set and corrected aspect ratio calculations for Sharp-based images.
Fixed MongoDB filter to correctly exclude documents where a numeric field is missing using the $exists operator.
Export toast component from react-toastify in the payload.
Added option to disable JOI validation.
Added support for collections to use custom database operations.
Added support for custom image size file names.
Added className support for edit and list views, introduced upload relationship thumbnails, and exposed custom errors in bulk delete UI.
Added support for appending metadata to output media files
Added jsonParse flag to mongooseAdapter to preserve untracked MongoDB data types.
Fixed hook type aliases (AfterMe, AfterLogout, AfterRefresh) and added fallback exports for backward compatibility
Add support for uploading files directly from a remote URL
Removed an unused `refresh` argument that was causing issues in `me/refresh` hooks.
Add “me” and “refresh” hooks to the API
Fixed missing expiration (exp) field in auth responses
Fix concurrency issues in GraphQL queries
Pass previous value to validation functions
Added draft validation feature
Updated UI with draft/published version pills and enabled the Save Draft button when creating new documents.
Fixed uploadEdits scope to correctly target documents
Fix cascading draft argument issue when querying globals via GraphQL
Fixed payload/bundler webpack issue by overriding ajv version to 8.14.0.
Added updated Turkish translations and new userEmailAlreadyRegistered translation entries.
Fixed PostgreSQL query issue with LIKE on ID columns (issue 6416).
Fixed issue allowing focal point to be set when no image sizes are defined
Restores explicit crop X and Y values in the image processing pipeline.
Added support for storing focal points on uploaded assets
Added miscellaneous translations to API view and React Select components
Added a `maxDepth` property to multiple richtext lexical features for better nesting control.
Added new admin field props `disableListColumn` and `disableListFilter`
Added isSortable flag for arrays and blocks and introduced filterOptions support in list relationship filters.
Deduplicate React in project dependencies
Fixes cumulative PostgreSQL database update failures (c31b8dc).
Add count operation to collections
Added configurable headers for external file fetch and new DB capabilities such as custom table/enum names, JSON field schemas, and enhanced MongoDB/Postgres query support
Fix parsing when operator is 'exist' (issue #5404)
- Added Norwegian translation to the SEO plugin and extended the richtext plugin with custom field and error component support.
Added configurable custom schema support for PostgreSQL databases
Added PostgreSQL idType support (uuid/serial) and reconnection handling; extended plugin search API with transaction argument.
Added a collapsible provider component.
Fix clearable cells to correctly handle null values.
Added options to addFieldStatePromise for field flattening and extended transaction hooks (after/beforeOperation) with new beforeChange args (previousValue, previousSiblingDoc);
Added the *forceAcceptWarning* migration argument for accept prompts
Added drizzle logging config support for Postgres, form ID validation in the form builder, and SEO plugin support for interfaceName and fieldOverrides.
Added custom config properties in blocks, local time in logger, and switched cloud plugin to use Resend SMTP; SEO plugin now includes French translations
Enhanced transaction support for MongoDB and Postgres migrations by passing request context
Added MongoDB transaction options and extended locale support with fallback locales
Add Chinese Traditional translation and extensive RichText Lexical enhancements (new actions, lazy‑loaded React components, link validation, TreeViewFeature rename, blockquote conversion, upload serializer updates).
Added Traditional Chinese translation, async live preview URLs, path support for FieldDescription, and enhanced richtext lexical with lazy-loaded React components and configurable relationship fields.
Fixed doc controls being obscured by lexical field
Adds numerous features: Serbian (Latin & Cyrillic) translations, intelligent migration directory search for MongoDB and Postgres, live preview request batching, relationship sortOptions, JS migration support, OAuth 2.0 Bearer token handl...
Added Korean translation support to i18n module
Made outputSchema optional in the richtext configuration to prevent errors when omitted
Added extensive RichText Lexical enhancements, including new position property, block validation fixes, toolbar interaction fixes, and HTML conversion improvements.
Fixed UI and editor bugs: conditional dot‑menu hiding, disabled SVG editing, hidden empty image sizes, and rich‑text lexical saving/toolbar caret issues
Added i18n support for locales and new custom field components (Error, Label, before/after);
Fixed autosave corruption and improved error handling in parseCookies, plus ensured dataloader runs serially.
Fixed numerous bugs including null handling in non‑required unions, preferences update checks, duplicate document issues, and rich‑text type errors.
Fixed UI and GraphQL issues: component props now accept components, collapsible alignment corrected, named tabs appear in GQL mutation input, live preview messages parsed only for same origin, and document sidebar collapse prevented.
Added global and field properties to hooks, fixed request context initialization, and introduced an HTML serializer for richtext lexical.
- Added ability to opt out of type‑gen declare statements and expanded TypeScript typings (e.g., filesRequiredOnCreate, multiple slug types, hideAPIURL handling).