Payload v3.87.1

v3.87.1
Fixed 3
  • Connect to the correct Next.js dev HMR endpoint per version
  • Preserve link drawer form state in richtext-lexical
  • Fix with-cloudflare-d1 build and bump dependencies
Security 3
  • Bump mongoose to 8.24.1 for GHSA-664h-wqgq-64gw
  • Bump undici for security vulnerability
  • Bump @modelcontextprotocol/sdk to 1.30.0 for GHSA-frvp-7c67-39w9
v3.87.1 (2026-08-06)
🐛 Bug Fixes
  • connect to the correct Next.js dev HMR endpoint per version (#17644) (291ac66)
  • db-mongodb: bump mongoose to 8.24.1 for GHSA-664h-wqgq-64gw (3.x backport of #17609) (#17608) (f039324)
  • deps: bump undici (#17630) (9e2c11e)
  • plugin-mcp: bump @modelcontextprotocol/sdk to 1.30.0 for GHSA-frvp-7c67-39w9 (3.x) (#17611) (0cb605d)
  • richtext-lexical: preserve link drawer form state (#17586) (90fb9e1)
  • templates: fix with-cloudflare-d1 build and bump dependencies (#17577) (ca3e899)
📚 Documentation
  • update admin panel location link in custom components docs (#17624) (57178e3)
⚙️ CI
🤝 Contributors
  • Nate Lentz (@nathanlentz)
  • Jarrod Flesch (@JarrodMFlesch)
  • Elliot DeNolf (@denolfe)
  • Sean Zubrickas (@zubricks)
  • Patrik (@PatrikKozak)
View original

Upgraded? How did it go?

Discussion