Skip to content

chore(deps): Bump the payload group across 1 directory with 5 updates - #128

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/payload-f14afe65bd
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/payload-f14afe65bd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the payload group with 5 updates in the / directory:

Package From To
@payloadcms/db-postgres 3.89.0 3.91.0
@payloadcms/next 3.89.0 3.91.0
@payloadcms/richtext-lexical 3.89.0 3.91.0
@payloadcms/ui 3.89.0 3.91.0
payload 3.89.0 3.91.0

Updates @payloadcms/db-postgres from 3.89.0 to 3.91.0

Release notes

Sourced from @​payloadcms/db-postgres's releases.

v3.91.0

v3.91.0 (2026-10-15)

🚀 Features

  • plugin-mcp: add missing properties to find tools, clean up object inputs (#18436) (0f6c5b0)

🐛 Bug Fixes

  • return 404 for version operations when versions are disabled (#18057) (d72c669)
  • prevent join field where mutation during query validation (#18511) (5060fee)
  • bump minimum node version to 20.18.1 (#18467) (fe030c5)
  • dev HMR reload not working when Next.js basePath is set (#18485) (f56e92e)
  • prevent silent CLI exits (#18398) (1fcb220)
  • backport v4 fix to render custom block views on initial load (#18188) (5eb5471)
  • save job logs when runHooks is enabled (#18365) (26731e6)
  • check draft read access against the latest version in findByID (#18000) (9106bf8)
  • drizzle: size sqlite batch inserts by table column count (#17235) (d4c81bb)
  • email-nodemailer: upgrade to nodemailer 10 to resolve security advisories (#18736) (e93b7f2)
  • graphql: backport nested select projections to 3.x (#18366) (231634a)
  • plugin-cloud-storage: hide storage metadata from list controls (#18356) (52fadda)
  • plugin-import-export: filter disabled export fields (#18434) (b65335c)
  • plugin-seo: authorize generation for manual fields (#18428) (451dd68)
  • richtext-lexical: handle pasting unsupported blocks (#18368) (3cfa97b)
  • storage-azure: bump @​azure/storage-blob to 12.34.0 to fix chunked uploads over 256 MiB (#18469) (99f0fcd)
  • ui: show image thumbnails in folder list view (#17980) (c1569dc)
  • ui: preserve default block types when conditions reveal rows (#18299) (2554a34)
  • ui: backport activity-aware auth sessions (#17854) (7691ba3)

⚡ Performance

  • db-mongodb: reduce referenced block schema memory usage significantly (#18367) (7defbc6)
  • drizzle: add _parent_id index to localized tables (#18724) (e3559cd)
  • ui: build the client field schema map in linear time for rich text fields (#18697) (000093d)

📚 Documentation

⚙️ CI

🏡 Chores

⚠️ BREAKING CHANGES

... (truncated)

Commits

Updates @payloadcms/next from 3.89.0 to 3.91.0

Release notes

Sourced from @​payloadcms/next's releases.

v3.91.0

v3.91.0 (2026-10-15)

🚀 Features

  • plugin-mcp: add missing properties to find tools, clean up object inputs (#18436) (0f6c5b0)

🐛 Bug Fixes

  • return 404 for version operations when versions are disabled (#18057) (d72c669)
  • prevent join field where mutation during query validation (#18511) (5060fee)
  • bump minimum node version to 20.18.1 (#18467) (fe030c5)
  • dev HMR reload not working when Next.js basePath is set (#18485) (f56e92e)
  • prevent silent CLI exits (#18398) (1fcb220)
  • backport v4 fix to render custom block views on initial load (#18188) (5eb5471)
  • save job logs when runHooks is enabled (#18365) (26731e6)
  • check draft read access against the latest version in findByID (#18000) (9106bf8)
  • drizzle: size sqlite batch inserts by table column count (#17235) (d4c81bb)
  • email-nodemailer: upgrade to nodemailer 10 to resolve security advisories (#18736) (e93b7f2)
  • graphql: backport nested select projections to 3.x (#18366) (231634a)
  • plugin-cloud-storage: hide storage metadata from list controls (#18356) (52fadda)
  • plugin-import-export: filter disabled export fields (#18434) (b65335c)
  • plugin-seo: authorize generation for manual fields (#18428) (451dd68)
  • richtext-lexical: handle pasting unsupported blocks (#18368) (3cfa97b)
  • storage-azure: bump @​azure/storage-blob to 12.34.0 to fix chunked uploads over 256 MiB (#18469) (99f0fcd)
  • ui: show image thumbnails in folder list view (#17980) (c1569dc)
  • ui: preserve default block types when conditions reveal rows (#18299) (2554a34)
  • ui: backport activity-aware auth sessions (#17854) (7691ba3)

⚡ Performance

  • db-mongodb: reduce referenced block schema memory usage significantly (#18367) (7defbc6)
  • drizzle: add _parent_id index to localized tables (#18724) (e3559cd)
  • ui: build the client field schema map in linear time for rich text fields (#18697) (000093d)

📚 Documentation

⚙️ CI

🏡 Chores

⚠️ BREAKING CHANGES

... (truncated)

Commits
  • 297205f chore(release): v3.91.0 [skip ci]
  • fe030c5 fix!: bump minimum node version to 20.18.1 (#18467)
  • 6254c3b chore(release): v3.90.2 [skip ci]
  • 972a4fb fix(next): remove invalid libsql tracing include (#18238)
  • 05e49da fix(next): support next.config trailingSlash (#18207)
  • 93111ff chore(release): v3.90.1 [skip ci]
  • e10b602 chore(release): v3.90.0 [skip ci]
  • 22eb924 fix: enforce read access for authenticated users
  • e947fc4 fix: restrict public admin verification routes
  • 1f1cd4c fix: enforce access during autosave draft creation
  • Additional commits viewable in compare view

Updates @payloadcms/richtext-lexical from 3.89.0 to 3.91.0

Release notes

Sourced from @​payloadcms/richtext-lexical's releases.

v3.91.0

v3.91.0 (2026-10-15)

🚀 Features

  • plugin-mcp: add missing properties to find tools, clean up object inputs (#18436) (0f6c5b0)

🐛 Bug Fixes

  • return 404 for version operations when versions are disabled (#18057) (d72c669)
  • prevent join field where mutation during query validation (#18511) (5060fee)
  • bump minimum node version to 20.18.1 (#18467) (fe030c5)
  • dev HMR reload not working when Next.js basePath is set (#18485) (f56e92e)
  • prevent silent CLI exits (#18398) (1fcb220)
  • backport v4 fix to render custom block views on initial load (#18188) (5eb5471)
  • save job logs when runHooks is enabled (#18365) (26731e6)
  • check draft read access against the latest version in findByID (#18000) (9106bf8)
  • drizzle: size sqlite batch inserts by table column count (#17235) (d4c81bb)
  • email-nodemailer: upgrade to nodemailer 10 to resolve security advisories (#18736) (e93b7f2)
  • graphql: backport nested select projections to 3.x (#18366) (231634a)
  • plugin-cloud-storage: hide storage metadata from list controls (#18356) (52fadda)
  • plugin-import-export: filter disabled export fields (#18434) (b65335c)
  • plugin-seo: authorize generation for manual fields (#18428) (451dd68)
  • richtext-lexical: handle pasting unsupported blocks (#18368) (3cfa97b)
  • storage-azure: bump @​azure/storage-blob to 12.34.0 to fix chunked uploads over 256 MiB (#18469) (99f0fcd)
  • ui: show image thumbnails in folder list view (#17980) (c1569dc)
  • ui: preserve default block types when conditions reveal rows (#18299) (2554a34)
  • ui: backport activity-aware auth sessions (#17854) (7691ba3)

⚡ Performance

  • db-mongodb: reduce referenced block schema memory usage significantly (#18367) (7defbc6)
  • drizzle: add _parent_id index to localized tables (#18724) (e3559cd)
  • ui: build the client field schema map in linear time for rich text fields (#18697) (000093d)

📚 Documentation

⚙️ CI

🏡 Chores

⚠️ BREAKING CHANGES

... (truncated)

Commits
  • 297205f chore(release): v3.91.0 [skip ci]
  • fe030c5 fix!: bump minimum node version to 20.18.1 (#18467)
  • 3cfa97b fix(richtext-lexical): handle pasting unsupported blocks (#18368)
  • 5eb5471 fix: backport v4 fix to render custom block views on initial load (#18188)
  • 6254c3b chore(release): v3.90.2 [skip ci]
  • 93111ff chore(release): v3.90.1 [skip ci]
  • e10b602 chore(release): v3.90.0 [skip ci]
  • 6b5d213 fix(richtext-lexical): validate heading and list tags (3.x)
  • dab4fdc fix(richtext-lexical): enforce collection restrictions for nodes (3.x)
  • e3b47cd fix(richtext-lexical): escape and validate list item values (3.x)
  • Additional commits viewable in compare view

Updates @payloadcms/ui from 3.89.0 to 3.91.0

Release notes

Sourced from @​payloadcms/ui's releases.

v3.91.0

v3.91.0 (2026-10-15)

🚀 Features

  • plugin-mcp: add missing properties to find tools, clean up object inputs (#18436) (0f6c5b0)

🐛 Bug Fixes

  • return 404 for version operations when versions are disabled (#18057) (d72c669)
  • prevent join field where mutation during query validation (#18511) (5060fee)
  • bump minimum node version to 20.18.1 (#18467) (fe030c5)
  • dev HMR reload not working when Next.js basePath is set (#18485) (f56e92e)
  • prevent silent CLI exits (#18398) (1fcb220)
  • backport v4 fix to render custom block views on initial load (#18188) (5eb5471)
  • save job logs when runHooks is enabled (#18365) (26731e6)
  • check draft read access against the latest version in findByID (#18000) (9106bf8)
  • drizzle: size sqlite batch inserts by table column count (#17235) (d4c81bb)
  • email-nodemailer: upgrade to nodemailer 10 to resolve security advisories (#18736) (e93b7f2)
  • graphql: backport nested select projections to 3.x (#18366) (231634a)
  • plugin-cloud-storage: hide storage metadata from list controls (#18356) (52fadda)
  • plugin-import-export: filter disabled export fields (#18434) (b65335c)
  • plugin-seo: authorize generation for manual fields (#18428) (451dd68)
  • richtext-lexical: handle pasting unsupported blocks (#18368) (3cfa97b)
  • storage-azure: bump @​azure/storage-blob to 12.34.0 to fix chunked uploads over 256 MiB (#18469) (99f0fcd)
  • ui: show image thumbnails in folder list view (#17980) (c1569dc)
  • ui: preserve default block types when conditions reveal rows (#18299) (2554a34)
  • ui: backport activity-aware auth sessions (#17854) (7691ba3)

⚡ Performance

  • db-mongodb: reduce referenced block schema memory usage significantly (#18367) (7defbc6)
  • drizzle: add _parent_id index to localized tables (#18724) (e3559cd)
  • ui: build the client field schema map in linear time for rich text fields (#18697) (000093d)

📚 Documentation

⚙️ CI

🏡 Chores

⚠️ BREAKING CHANGES

... (truncated)

Commits
  • 297205f chore(release): v3.91.0 [skip ci]
  • 000093d perf(ui): build the client field schema map in linear time for rich text fiel...
  • fe030c5 fix!: bump minimum node version to 20.18.1 (#18467)
  • c1569dc fix(ui): show image thumbnails in folder list view (#17980)
  • 2554a34 fix(ui): preserve default block types when conditions reveal rows (#18299)
  • 7691ba3 fix(ui): backport activity-aware auth sessions (#17854)
  • 6254c3b chore(release): v3.90.2 [skip ci]
  • 05e49da fix(next): support next.config trailingSlash (#18207)
  • b382576 fix(ui): prevent client upload handler rerenders (#18184)
  • 93111ff chore(release): v3.90.1 [skip ci]
  • Additional commits viewable in compare view

Updates payload from 3.89.0 to 3.91.0

Release notes

Sourced from payload's releases.

v3.91.0

v3.91.0 (2026-10-15)

🚀 Features

  • plugin-mcp: add missing properties to find tools, clean up object inputs (#18436) (0f6c5b0)

🐛 Bug Fixes

  • return 404 for version operations when versions are disabled (#18057) (d72c669)
  • prevent join field where mutation during query validation (#18511) (5060fee)
  • bump minimum node version to 20.18.1 (#18467) (fe030c5)
  • dev HMR reload not working when Next.js basePath is set (#18485) (f56e92e)
  • prevent silent CLI exits (#18398) (1fcb220)
  • backport v4 fix to render custom block views on initial load (#18188) (5eb5471)
  • save job logs when runHooks is enabled (#18365) (26731e6)
  • check draft read access against the latest version in findByID (#18000) (9106bf8)
  • drizzle: size sqlite batch inserts by table column count (#17235) (d4c81bb)
  • email-nodemailer: upgrade to nodemailer 10 to resolve security advisories (#18736) (e93b7f2)
  • graphql: backport nested select projections to 3.x (#18366) (231634a)
  • plugin-cloud-storage: hide storage metadata from list controls (#18356) (52fadda)
  • plugin-import-export: filter disabled export fields (#18434) (b65335c)
  • plugin-seo: authorize generation for manual fields (#18428) (451dd68)
  • richtext-lexical: handle pasting unsupported blocks (#18368) (3cfa97b)
  • storage-azure: bump @​azure/storage-blob to 12.34.0 to fix chunked uploads over 256 MiB (#18469) (99f0fcd)
  • ui: show image thumbnails in folder list view (#17980) (c1569dc)
  • ui: preserve default block types when conditions reveal rows (#18299) (2554a34)
  • ui: backport activity-aware auth sessions (#17854) (7691ba3)

⚡ Performance

  • db-mongodb: reduce referenced block schema memory usage significantly (#18367) (7defbc6)
  • drizzle: add _parent_id index to localized tables (#18724) (e3559cd)
  • ui: build the client field schema map in linear time for rich text fields (#18697) (000093d)

📚 Documentation

⚙️ CI

🏡 Chores

⚠️ BREAKING CHANGES

... (truncated)

Commits
  • 297205f chore(release): v3.91.0 [skip ci]
  • d72c669 fix: return 404 for version operations when versions are disabled (#18057)
  • c1e959f chore: bump undici to 7.29.1 (#18514)
  • 5060fee fix: prevent join field where mutation during query validation (#18511)
  • fe030c5 fix!: bump minimum node version to 20.18.1 (#18467)
  • f56e92e fix: dev HMR reload not working when Next.js basePath is set (#18485)
  • 1fcb220 fix: prevent silent CLI exits (#18398)
  • 7defbc6 perf(db-mongodb): reduce referenced block schema memory usage significantly (...
  • 26731e6 fix: save job logs when runHooks is enabled (#18365)
  • 9106bf8 fix: check draft read access against the latest version in findByID (#18000)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 7, 2026
@coderabbitai

coderabbitai Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: c360b52e-98f4-432f-bb1b-88ba87423c85

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot dependabot Bot changed the title chore(deps): Bump the payload group with 5 updates chore(deps): Bump the payload group across 1 directory with 5 updates Oct 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/payload-f14afe65bd branch 4 times, most recently from b54cd18 to a79da86 Compare October 14, 2026 12:24
Bumps the payload group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@payloadcms/db-postgres](https://github.com/payloadcms/payload/tree/HEAD/packages/db-postgres) | `3.89.0` | `3.91.0` |
| [@payloadcms/next](https://github.com/payloadcms/payload/tree/HEAD/packages/next) | `3.89.0` | `3.91.0` |
| [@payloadcms/richtext-lexical](https://github.com/payloadcms/payload/tree/HEAD/packages/richtext-lexical) | `3.89.0` | `3.91.0` |
| [@payloadcms/ui](https://github.com/payloadcms/payload/tree/HEAD/packages/ui) | `3.89.0` | `3.91.0` |
| [payload](https://github.com/payloadcms/payload/tree/HEAD/packages/payload) | `3.89.0` | `3.91.0` |



Updates `@payloadcms/db-postgres` from 3.89.0 to 3.91.0
- [Release notes](https://github.com/payloadcms/payload/releases)
- [Commits](https://github.com/payloadcms/payload/commits/v3.91.0/packages/db-postgres)

Updates `@payloadcms/next` from 3.89.0 to 3.91.0
- [Release notes](https://github.com/payloadcms/payload/releases)
- [Commits](https://github.com/payloadcms/payload/commits/v3.91.0/packages/next)

Updates `@payloadcms/richtext-lexical` from 3.89.0 to 3.91.0
- [Release notes](https://github.com/payloadcms/payload/releases)
- [Commits](https://github.com/payloadcms/payload/commits/v3.91.0/packages/richtext-lexical)

Updates `@payloadcms/ui` from 3.89.0 to 3.91.0
- [Release notes](https://github.com/payloadcms/payload/releases)
- [Commits](https://github.com/payloadcms/payload/commits/v3.91.0/packages/ui)

Updates `payload` from 3.89.0 to 3.91.0
- [Release notes](https://github.com/payloadcms/payload/releases)
- [Commits](https://github.com/payloadcms/payload/commits/v3.91.0/packages/payload)

---
updated-dependencies:
- dependency-name: "@payloadcms/db-postgres"
  dependency-version: 3.90.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: payload
- dependency-name: "@payloadcms/next"
  dependency-version: 3.90.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: payload
- dependency-name: "@payloadcms/richtext-lexical"
  dependency-version: 3.90.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: payload
- dependency-name: "@payloadcms/ui"
  dependency-version: 3.90.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: payload
- dependency-name: payload
  dependency-version: 3.90.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: payload
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/payload-f14afe65bd branch from a79da86 to d1459b4 Compare October 23, 2026 09:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants