Starstruk Logo MarkStarstruk

v3.46.0

payloadcms/payloadv3.46.0Jul 7, 2025by denolfe

AI Summary

Focuses on security with the addition of restricted file checks and hostname validation for upload URLs, alongside various UI and database interaction fixes.

Key Highlights

  • Restricted file check feature
  • Hostname validation for upload URLs
  • UI fixes for relationship inputs and password visibility
  • Fix for MongoDB updateOne mutation

New Features

  • Restricted file check
  • Respect collection-level live preview config

Full Release Notes

## [v3.46.0](https://github.com/payloadcms/payload/compare/v3.45.0...v3.46.0) (2025-07-07)


### 🚀 Features

* adds restricted file check ([#12989](https://github.com/payloadcms/payload/issues/12989)) ([ba660fd](https://github.com/payloadcms/payload/commit/ba660fd))

### 🐛 Bug Fixes

* deduplicate custom array id fields ([#13064](https://github.com/payloadcms/payload/issues/13064)) ([e6f8ca6](https://github.com/payloadcms/payload/commit/e6f8ca6))
* check hostname of upload url ([#13018](https://github.com/payloadcms/payload/issues/13018)) ([30fc7e3](https://github.com/payloadcms/payload/commit/30fc7e3))
* **db-mongodb:** updateOne mutates the data object and does not transform it for read ([#13065](https://github.com/payloadcms/payload/issues/13065)) ([6d5cc84](https://github.com/payloadcms/payload/commit/6d5cc84))
* **next:** adds token to reset password initialState ([#13067](https://github.com/payloadcms/payload/issues/13067)) ([f4f13a2](https://github.com/payloadcms/payload/commit/f4f13a2))
* **next:** respect collection-level live preview config ([#13036](https://github.com/payloadcms/payload/issues/13036)) ([f49eeb1](https://github.com/payloadcms/payload/commit/f49eeb1))
* **plugin-redirects:** make 'from' field unique to prevent errors in redirect logic ([#12964](https://github.com/payloadcms/payload/issues/12964)) ([50c2f8b](https://github.com/payloadcms/payload/commit/50c2f8b))
* **ui:** increase timeout for opening list drawer in RelationshipInput ([#13031](https://github.com/payloadcms/payload/issues/13031)) ([2650eb7](https://github.com/payloadcms/payload/commit/2650eb7))
* **ui:** change password button is hidden when user has full field access ([#12988](https://github.com/payloadcms/payload/issues/12988)) ([1d9ad6f](https://github.com/payloadcms/payload/commit/1d9ad6f))

### 🧪 Tests

* fix tests that rely on remote urls ([#13073](https://github.com/payloadcms/payload/issues/13073)) ([34920a7](https://github.com/payloadcms/payload/commit/34920a7))

### ⚙️ CI

* analyze bundle size ([#13071](https://github.com/payloadcms/payload/issues/13071)) ([af9837d](https://github.com/payloadcms/payload/commit/af9837d))

### 🤝 Contributors

- Patrik (@PatrikKozak)
- Kendell (@kendelljoseph)
- Alessio Gravili (@AlessioGr)
- Jessica Rynkar (@jessrynkar)
- Jarrod Flesch (@JarrodMFlesch)
- Germán Jabloñski (@GermanJablo)
- Jacob Fletcher (@jacobsfletch)