Starstruk Logo MarkStarstruk

v3.68.4

payloadcms/payloadv3.68.4Dec 14, 2025by denolfe

AI Summary

Addresses a critical security vulnerability (CVE) in Next.js and fixes several UI and lexical block issues.

Key Highlights

  • Enforces Next.js 15.4.10 to fix CVE-2025-67779.
  • Fixes lexical block previous value population.
  • Fixes localized locale names and relationship button permissions.

Breaking Changes

  • deps: enforce Next.js 15.4.10

New Features

  • PreviousValue from hooks populated within lexical blocks
  • Localized locale name for publish specific locale button
  • Fix relationship add button unsafe permissions property access
  • Fix Next.js build version check for canaries

Full Release Notes

## [v3.68.4](https://github.com/payloadcms/payload/compare/v3.68.3...v3.68.4) (2025-12-14)


### 🐛 Bug Fixes

* previousValue from hooks should be populated within lexical blocks ([#14856](https://github.com/payloadcms/payload/issues/14856)) ([bb1501e](https://github.com/payloadcms/payload/commit/bb1501e))
* **deps:** enforce Next.js 15.4.10 ([#14908](https://github.com/payloadcms/payload/issues/14908)) ([7c675fa](https://github.com/payloadcms/payload/commit/7c675fa))
* **next:** properly construct local req url ([#14907](https://github.com/payloadcms/payload/issues/14907)) ([471cd1b](https://github.com/payloadcms/payload/commit/471cd1b))
* **ui:** show localized locale name for publish specific locale button ([#14906](https://github.com/payloadcms/payload/issues/14906)) ([848ea65](https://github.com/payloadcms/payload/commit/848ea65))
* **ui:** relationship add button unsafe permissions property access ([#14903](https://github.com/payloadcms/payload/issues/14903)) ([127e41a](https://github.com/payloadcms/payload/commit/127e41a))

### 📚 Documentation

* remove unused variable from custom field label translation ([#14911](https://github.com/payloadcms/payload/issues/14911)) ([77f96a4](https://github.com/payloadcms/payload/commit/77f96a4))
* update collection access control reference link on collection config page ([#14905](https://github.com/payloadcms/payload/issues/14905)) ([3a1eb77](https://github.com/payloadcms/payload/commit/3a1eb77))

### ⚠️ BREAKING CHANGES

* **deps:** enforce Next.js 15.4.10 ([#14908](https://github.com/payloadcms/payload/issues/14908)) ([7c675fa](https://github.com/payloadcms/payload/commit/7c675fa))

  Address
  [CVE-2025-67779](https://www.cve.org/CVERecord?id=CVE-2025-67779).



### 🤝 Contributors

- Jake (@jacobsfletch)
- Riley Langbein (@rilrom)
- Jeffery To (@jefferyto)
- Aaron Claes (@AaronClaes)
- kat (@puzzlesremixed)
- Jessica Rynkar (@jessrynkar)