payloadcms

Files

Jacob Fletcher 8113d3bdef fix(next): exclude permissions from page response when unauthenticated (#13796 )

Similar spirit as #13714.

Permissions are embedded into the page response, exposing some field
names to unauthenticated users.

For example, when setting `read: () => false` on a field, that field's
name is now included in the response due to its presence in the
permissions object.

We now search the HTML source directly in the test, similar to "view
source" in the browser, which will be much effective at preventing
regression going forward.

---
- To see the specific tasks where the Asana app for GitHub is being
used, see below:
  - https://app.asana.com/0/0/1211347942663256

2025-09-12 20:57:03 +00:00

_community

perf(ui): opt-in to the select api in the list view (#13697 )

2025-09-08 16:38:00 -04:00

access-control

fix: client config context inheritance (#13790 )

2025-09-12 17:43:03 +00:00

admin

fix(next): resolve filterOptions by path (#13779 )

2025-09-11 13:24:16 -07:00

admin-bar

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

admin-root

fix: client config context inheritance (#13790 )

2025-09-12 17:43:03 +00:00

app

feat: deprecates getPayloadHMR in favor of simpler getPayload (#9249 )

2024-11-16 15:30:05 -05:00

array-update

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

auth

fix(next): exclude permissions from page response when unauthenticated (#13796 )

2025-09-12 20:57:03 +00:00

auth-basic

chore: run dev:generate-types (#11994 )

2025-04-08 17:25:29 -03:00

benchmark-blocks

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

bulk-edit

fix(next): resolve filterOptions by path (#13779 )

2025-09-11 13:24:16 -07:00

collections-graphql

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

collections-rest

feat: expose multipart/form-data parsing options (#13766 )

2025-09-11 09:14:56 -04:00

config

feat: allow multiple, different payload instances using getPayload in same process (#13603 )

2025-08-27 10:24:37 -07:00

create-payload-app

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

custom-graphql

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

database

feat(db-*): support atomic array $push db updates (#13453 )

2025-08-27 14:11:08 -04:00

dataloader

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

email-nodemailer

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

email-resend

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

endpoints

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

field-error-states

test: add array field helpers (#13493 )

2025-08-19 19:44:59 +00:00

field-perf

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

fields

fix(next): resolve filterOptions by path (#13779 )

2025-09-11 13:24:16 -07:00

fields-relationship

fix(next): resolve filterOptions by path (#13779 )

2025-09-11 13:24:16 -07:00

folders

feat(ui): save collection folder tab preferences (#13702 )

2025-09-09 11:43:00 -04:00

folders-browse-by-disabled

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

form-state

fix(ui): use consistent row ids when duplicating array and block rows (#13679 )

2025-09-03 14:29:39 -04:00

globals

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

graphql

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

graphql-schema-gen

fix(graphql): invalid enum names when values include brackets (#13597 )

2025-08-26 11:03:26 -07:00

group-by

fix(next): resolve filterOptions by path (#13779 )

2025-09-11 13:24:16 -07:00

helpers

fix: client config context inheritance (#13790 )

2025-09-12 17:43:03 +00:00

hooks

feat: global beforeOperation hook (#13768 )

2025-09-10 20:46:49 +00:00

i18n

fix(next): resolve filterOptions by path (#13779 )

2025-09-11 13:24:16 -07:00

import-test

feat: adds jobs queue (#8228 )

2024-10-30 17:56:50 +00:00

joins

fix(next): resolve filterOptions by path (#13779 )

2025-09-11 13:24:16 -07:00

lexical

fix(richtext-lexical): toolbar dropdown items are disabled when selecting via double-click (#13544 )

2025-08-22 09:44:55 +01:00

lexical-mdx

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

live-preview

fix(live-preview): reset cache per subscription and ignore invalid preview messages (#13793 )

2025-09-12 18:40:24 +00:00

loader

…

localization

feat: adds new experimental.localizeStatus option (#13207 )

2025-09-03 10:27:08 +01:00

localization-rtl

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

locked-documents

fix(next): richtext field is read-only for expired lock (#13789 )

2025-09-12 07:46:51 -07:00

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

migrations-cli

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

nested-fields

chore: fix all lint errors and add mechanisms to prevent them from appearing again (#12401 )

2025-05-19 12:36:40 -03:00

payload-cloud

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-cloud-storage

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-form-builder

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-import-export

feat(plugin-import-export): use groupBy as SortBy when present and sort is unset (#13491 )

2025-08-15 11:56:58 -07:00

plugin-multi-tenant

fix: client config context inheritance (#13790 )

2025-09-12 17:43:03 +00:00

plugin-nested-docs

fix(plugin-nested-docs): prevent phantom breadcrumb row (#13628 )

2025-08-28 16:12:47 -04:00

plugin-redirects

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-search

perf(plugin-search): reindex collections in parallel, up to 80% faster (#13608 )

2025-08-28 16:12:35 -04:00

plugin-sentry

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-seo

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugin-stripe

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

plugins

docs: improve jobs autorun docs, adds e2e test (#12196 )

2025-06-05 09:19:19 -07:00

query-presets

fix(next): resolve filterOptions by path (#13779 )

2025-09-11 13:24:16 -07:00

queues

feat: support parallel job queue tasks, speed up task running (#13614 )

2025-08-27 20:32:42 +00:00

relationships

fix: filtering by polymorphic relationships inside other fields (#13265 )

2025-07-25 09:10:21 -04:00

scripts

…

select

chore: add new int test verifying that select *improves* performance of new optimization (#13254 )

2025-07-23 16:48:25 -07:00

server-functions

feat: auth sessions (#12483 )

2025-06-27 09:13:52 -04:00

sort

test: fix flaky sorting test (#13303 )

2025-07-29 03:25:09 +00:00

storage-azure

feat(storage-*): include modified headers into the response headers of files when using adapters (#12096 )

2025-07-10 08:00:26 -07:00

storage-gcs

feat(storage-*): include modified headers into the response headers of files when using adapters (#12096 )

2025-07-10 08:00:26 -07:00

storage-s3

feat(storage-*): include modified headers into the response headers of files when using adapters (#12096 )

2025-07-10 08:00:26 -07:00

storage-uploadthing

feat(storage-*): include modified headers into the response headers of files when using adapters (#12096 )

2025-07-10 08:00:26 -07:00

storage-vercel-blob

feat(storage-*): include modified headers into the response headers of files when using adapters (#12096 )

2025-07-10 08:00:26 -07:00

trash

fix(next): resolve filterOptions by path (#13779 )

2025-09-11 13:24:16 -07:00

types

fix: strict custom view paths (#12968 )

2025-06-29 14:20:54 -04:00

uploads

fix(next): resolve filterOptions by path (#13779 )

2025-09-11 13:24:16 -07:00

versions

fix(next): version diff view not handling all field permissions correctly (#13721 )

2025-09-09 11:31:15 -04:00

.prettierignore

…

.swcrc

…

buildConfigWithDefaults.ts

chore: fix various e2e test setup issues (#12670 )

2025-06-04 17:34:37 -03:00

credentials.ts

…

CustomDashboard.tsx

…

dev.ts

chore: enable turbopack by default in monorepo (#12684 )

2025-06-05 22:01:55 -03:00

docker-compose.yml

fix(plugin-cloud-storage): actually deprecate adapters (#9640 )

2024-12-31 09:14:56 -05:00

eslint.config.js

test: stabilize frequent fails (#13318 )

2025-07-30 05:52:01 -07:00

generateDatabaseAdapter.ts

fix(db-mongodb): disable join aggregations in DocumentDB compatibility mode (#13270 )

2025-08-20 16:31:19 +00:00

generateDatabaseSchema.ts

fix(db-mongodb): improve compatibility with Firestore database (#12763 )

2025-07-16 15:17:43 -04:00

generateGraphQLSchema.ts

…

generateImportMap.ts

feat: payload admin bar (#3684 )

2025-03-05 19:14:35 +00:00

generateTypes.ts

chore: gitignore test/databaseAdapter (#8235 )

2024-09-16 17:02:08 +00:00

helpers.ts

fix: client config context inheritance (#13790 )

2025-09-12 17:43:03 +00:00

initDevAndTest.ts

feat: scheduling jobs (#12863 )

2025-07-18 06:48:27 -04:00

jest-spec-reporter.cjs

feat!: on demand rsc (#8364 )

2024-11-11 13:59:05 -05:00

jest.config.js

chore: use custom jest reporter to achieve sane jest logs (#8607 )

2024-10-11 18:54:39 +00:00

jest.setup.js

fix: localized fields within block references were not handled properly if any parent is localized (#11207 )

2025-02-17 19:50:32 +00:00

jestreporter.cjs

chore: use custom jest reporter to achieve sane jest logs (#8607 )

2024-10-11 18:54:39 +00:00

next-env.d.ts

fix: fully sanitize unauthenticated client config (#13785 )

2025-09-12 14:52:50 -04:00

next.config.mjs

fix(plugin-multi-tenant): selector could become hidden (#13134 )

2025-07-11 16:34:55 -04:00

package.json

feat: expose multipart/form-data parsing options (#13766 )

2025-09-11 09:14:56 -04:00

playwright.bail.config.ts

…

playwright.config.ts

chore: fix flaky lexical test (#11035 )

2025-02-07 03:24:49 +00:00

runE2E.ts

chore: enable turbopack by default in monorepo (#12684 )

2025-06-05 22:01:55 -03:00

runInit.ts

feat: scheduling jobs (#12863 )

2025-07-18 06:48:27 -04:00

runInitSeparateProcess.ts

…

safelyRunScript.ts

chore: when dev server restarts, ensure exiting the parent process kills child process (#8703 )

2024-10-14 20:02:26 +00:00

setupProd.ts

feat: payload admin bar (#3684 )

2025-03-05 19:14:35 +00:00

test.env

chore: bump node version in monorepo and add new flag for node 23.6+ (#12328 )

2025-05-12 09:41:18 -04:00

testEmailAdapter.ts

…

testHooks.ts

perf: deduplicate blocks used in multiple places using new config.blocks property (#10905 )

2025-02-14 00:08:20 +00:00

tsconfig.eslint.json

…

tsconfig.json

chore: make TypeScript strict in test folder. Simplify tsconfig (#10582 )

2025-01-14 20:00:00 -03:00

tsconfig.typecheck.json

feat: payload admin bar (#3684 )

2025-03-05 19:14:35 +00:00