v3.47.0
payloadcms/payloadv3.47.0Jul 11, 2025by denolfe
AI Summary
Adds API enhancements to the `/me` endpoint, improves security with SSRF checks and mimetype validation, and introduces UI features like API key visibility toggles and copy-paste support for complex fields.
Key Highlights
- Enhanced `/me` REST API with joins and select options
- Security improvements (SSRF checks, mimetype validation)
- UI: API key visibility toggle
- UI: Copy-paste support for complex fields
New Features
- Allow joins/select/populate/depth/draft to `/me` REST API
- Exports `sanitizeUserDataForEmail` function
- API key visibility toggle
- Support for copy-pasting complex fields
- Include modified headers in file responses
Full Release Notes
## [v3.47.0](https://github.com/payloadcms/payload/compare/v3.46.0...v3.47.0) (2025-07-11)
### 🚀 Features
* allow joins, select, populate, depth and draft to /me REST API operation ([#13116](https://github.com/payloadcms/payload/issues/13116)) ([2d91cb6](https://github.com/payloadcms/payload/commit/2d91cb6))
* exports new sanitizeUserDataForEmail function ([#13029](https://github.com/payloadcms/payload/issues/13029)) ([9f1bff5](https://github.com/payloadcms/payload/commit/9f1bff5))
* **next:** redirect non-existent documents to list view with banner ([#13062](https://github.com/payloadcms/payload/issues/13062)) ([5e82f9f](https://github.com/payloadcms/payload/commit/5e82f9f))
* **next:** add redirect from `${adminRoute}/collections` to `${adminRoute}` ([#13061](https://github.com/payloadcms/payload/issues/13061)) ([a7a0501](https://github.com/payloadcms/payload/commit/a7a0501))
* **plugin-import-export:** show delayed toast when export download takes time ([#13126](https://github.com/payloadcms/payload/issues/13126)) ([b3a994e](https://github.com/payloadcms/payload/commit/b3a994e))
* **storage-*:** include modified headers into the response headers of files when using adapters ([#12096](https://github.com/payloadcms/payload/issues/12096)) ([cb6a73e](https://github.com/payloadcms/payload/commit/cb6a73e))
* **ui:** add API key visibility toggle ([#13110](https://github.com/payloadcms/payload/issues/13110)) ([8a3b97c](https://github.com/payloadcms/payload/commit/8a3b97c))
* **ui:** adds support for copy pasting complex fields ([#11513](https://github.com/payloadcms/payload/issues/11513)) ([1d6ffcb](https://github.com/payloadcms/payload/commit/1d6ffcb))
### 🐛 Bug Fixes
* execute mimetype validation on the file buffer data ([#13117](https://github.com/payloadcms/payload/issues/13117)) ([5695d22](https://github.com/payloadcms/payload/commit/5695d22))
* login operation not returning collection and _strategy ([#13119](https://github.com/payloadcms/payload/issues/13119)) ([0c2b105](https://github.com/payloadcms/payload/commit/0c2b105))
* ensure we perform ssrf check within dispatcher ([#13078](https://github.com/payloadcms/payload/issues/13078)) ([e99c67f](https://github.com/payloadcms/payload/commit/e99c67f))
* ensure default values are not shown when value is hidden ([#13074](https://github.com/payloadcms/payload/issues/13074)) ([855a320](https://github.com/payloadcms/payload/commit/855a320))
* correctly reset login attempts ([#13075](https://github.com/payloadcms/payload/issues/13075)) ([aa97f3c](https://github.com/payloadcms/payload/commit/aa97f3c))
* payload auth api-key algorithm compatibility ([#13076](https://github.com/payloadcms/payload/issues/13076)) ([9c45321](https://github.com/payloadcms/payload/commit/9c45321))
* **next:** prevent live preview url functions from firing unnecessarily ([#13088](https://github.com/payloadcms/payload/issues/13088)) ([0b88466](https://github.com/payloadcms/payload/commit/0b88466))
* **plugin-import-export:** sync export field selection with list view columns from query columns ([#13131](https://github.com/payloadcms/payload/issues/13131)) ([c1bad01](https://github.com/payloadcms/payload/commit/c1bad01))
* **plugin-import-export:** flattening logic for polymorphic relationships in CSV exports ([#13094](https://github.com/payloadcms/payload/issues/13094)) ([c6105f1](https://github.com/payloadcms/payload/commit/c6105f1))
* **plugin-import-export:** selectionToUse field to dynamically show valid export options ([#13092](https://github.com/payloadcms/payload/issues/13092)) ([0806ee1](https://github.com/payloadcms/payload/commit/0806ee1))
* **plugin-import-export:** sync field select dropdown with form value ([#13103](https://github.com/payloadcms/payload/issues/13103)) ([1c6a79b](https://github.com/payloadcms/payload/commit/1c6a79b))
* **ui:** disabled and styles add row button correctly ([#13140](https://github.com/payloadcms/payload/issues/13140)) ([2cafe49](https://github.com/payloadcms/payload/commit/2cafe49))
* **ui:** ensure buildFormStateHandler throws error instead of returning null for unauthorized requests ([#13123](https://github.com/payloadcms/payload/issues/13123)) ([06ef798](https://github.com/payloadcms/payload/commit/06ef798))
* **ui:** monomorphic joins tables not fetching draft documents ([#13139](https://github.com/payloadcms/payload/issues/13139)) ([19a3367](https://github.com/payloadcms/payload/commit/19a3367))
* **ui:** ensure that schedule publishing time picker can only be in the future ([#13128](https://github.com/payloadcms/payload/issues/13128)) ([f63dfad](https://github.com/payloadcms/payload/commit/f63dfad))
* **ui:** hidden input should wait for form initialization ([#13114](https://github.com/payloadcms/payload/issues/13114)) ([c77b39c](https://github.com/payloadcms/payload/commit/c77b39c))
* **ui:** improve alignment of clear and dropdown indicator buttons in select based fields ([#12995](https://github.com/payloadcms/payload/issues/12995)) ([4c25357](https://github.com/payloadcms/payload/commit/4c25357))
* **ui:** prevent error crashing UI when relationship assigned as useAsTitle ([#12981](https://github.com/payloadcms/payload/issues/12981)) ([8a5cb27](https://github.com/payloadcms/payload/commit/8a5cb27))
### ⚡ Performance
* **db-postgres:** simplify `db.updateOne` to a single DB call with if the passed data doesn't include nested fields ([#13060](https://github.com/payloadcms/payload/issues/13060)) ([055cc4e](https://github.com/payloadcms/payload/commit/055cc4e))
### 📚 Documentation
* **richtext-lexical:** add documentation page about official features ([#13132](https://github.com/payloadcms/payload/issues/13132)) ([576644d](https://github.com/payloadcms/payload/commit/576644d))
* **templates:** fix grammar in README ([#13027](https://github.com/payloadcms/payload/issues/13027)) ([96c24a2](https://github.com/payloadcms/payload/commit/96c24a2))
### ⚙️ CI
* use .tool-versions file in setup ([#13093](https://github.com/payloadcms/payload/issues/13093)) ([dde9681](https://github.com/payloadcms/payload/commit/dde9681))
* audit-dependencies workflow ([#13090](https://github.com/payloadcms/payload/issues/13090)) ([c876ddf](https://github.com/payloadcms/payload/commit/c876ddf))
* blank audit-dependencies workflow [skip ci] ([fee33b5](https://github.com/payloadcms/payload/commit/fee33b5))
### 🏡 Chores
* **deps:** bump deps to resolve all high severity ([#13002](https://github.com/payloadcms/payload/issues/13002)) ([417b70e](https://github.com/payloadcms/payload/commit/417b70e))
### 🤝 Contributors
- Jarrod Flesch (@JarrodMFlesch)
- German Jablonski (@GermanJablo)
- Aaron Claes (@AaronClaes)
- Patrik (@PatrikKozak)
- Jessica Rynkar (@jessrynkar)
- Paul (@paulpopus)
- Sasha (@r1tsuu)
- Alessio Gravili (@AlessioGr)
- Said Akhrarov (@akhrarovsaid)
- Elliot DeNolf (@denolfe)
- Jacob Fletcher (@jacobsfletch)
- Dani Calero (@danicaleroo)
- Dan Ribbens (@DanRibbens)
- Adam Klingbaum (@adamklingbaum)