v3.87.1

HavocFramework/Havocv3.87.1Aug 6, 2026by denolfe

AI Summary

This patch release focuses on bug fixes and dependency updates, specifically correcting the Next.js dev HMR endpoint connection and patching security vulnerabilities in mongoose and MCP SDK. It also fixes the Rich Text Lexical link drawer form state and the Cloudflare D1 template build.

Key Highlights

Fixed connection to the correct Next.js dev HMR endpoint
Security patches for mongoose, undici, and @modelcontextprotocol/sdk
Fixed Rich Text Lexical link drawer form state preservation
Fixed Cloudflare D1 template build

Full Release Notes

## [v3.87.1](https://github.com/payloadcms/payload/compare/v3.87.0...v3.87.1) (2026-08-06)


### 🐛 Bug Fixes

* connect to the correct Next.js dev HMR endpoint per version ([#17644](https://github.com/payloadcms/payload/issues/17644)) ([291ac66](https://github.com/payloadcms/payload/commit/291ac66))
* **db-mongodb:** bump mongoose to 8.24.1 for GHSA-664h-wqgq-64gw (3.x backport of #17609) ([#17608](https://github.com/payloadcms/payload/issues/17608)) ([f039324](https://github.com/payloadcms/payload/commit/f039324))
* **deps:** bump undici ([#17630](https://github.com/payloadcms/payload/issues/17630)) ([9e2c11e](https://github.com/payloadcms/payload/commit/9e2c11e))
* **plugin-mcp:** bump @modelcontextprotocol/sdk to 1.30.0 for GHSA-frvp-7c67-39w9 (3.x) ([#17611](https://github.com/payloadcms/payload/issues/17611)) ([0cb605d](https://github.com/payloadcms/payload/commit/0cb605d))
* **richtext-lexical:** preserve link drawer form state ([#17586](https://github.com/payloadcms/payload/issues/17586)) ([90fb9e1](https://github.com/payloadcms/payload/commit/90fb9e1))
* **templates:** fix with-cloudflare-d1 build and bump dependencies ([#17577](https://github.com/payloadcms/payload/issues/17577)) ([ca3e899](https://github.com/payloadcms/payload/commit/ca3e899))

### 📚 Documentation

* update admin panel location link in custom components docs ([#17624](https://github.com/payloadcms/payload/issues/17624)) ([57178e3](https://github.com/payloadcms/payload/commit/57178e3))

### ⚙️ CI

* allow changes job to check out repository ([#17643](https://github.com/payloadcms/payload/issues/17643)) ([ec4f979](https://github.com/payloadcms/payload/commit/ec4f979))

### 🤝 Contributors

- Nate Lentz (@nathanlentz)
- Jarrod Flesch (@JarrodMFlesch)
- Elliot DeNolf (@denolfe)
- Sean Zubrickas (@zubricks)
- Patrik (@PatrikKozak)