PayloadsAllTheThings Releases

This release introduces transparent hook support for the Mistral Vibe CLI and enhances multiline block rewriting capabilities. It also includes several bug fixes to improve legacy configuration healing and Copilot permission handling.

Aug 7, 2026

This release refines authentication workflows with universal 2FA guidance and improved passkey handling. It also introduces a browser extension for security questionnaires and bulk policy migration capabilities.

Jul 29, 2026

A minor patch addressing navigation issues during sign-in flows and ensuring proper connection prompts for automations.

Jul 28, 2026

A patch release that fixes critical audit log security issues regarding plaintext secrets and read endpoint logging, alongside new notification features for access requests.

Jul 27, 2026

This release introduces custom file processors that allow running external commands on files before packing, an interactive confirmation prompt before trusting a remote repository's configuration, and per-file inclusion levels for MCP pack tools. It also includes improvements for handling oversized directories, fixing markdown output fences, correcting Windows output file ignoring, and skipping legacy config migration for remote repositories.

Jul 21, 2026

A bug-fix patch that resolves a WebAssembly memory leak and fixes token counting and directory tree rendering issues on Windows.

Jul 11, 2026

This release enhances trust management across git worktrees and adds support for npm 12, normalizing version listings. It also updates the `codex` registry to prefer the npm package over the aqua asset.

Jul 9, 2026

`mise bootstrap` and `mise dotfiles` graduate to stable status, and the installer gains a flag to skip re-downloads. Rust component reconciliation is also improved.

Jul 9, 2026

This release introduces system dependency checks for source compilation plugins and adds lifecycle hooks for Homebrew casks. It also fixes lockfile metadata loss during upgrades.

Jul 8, 2026

A small bug-fix release focused on restoring Tera v2 template helpers, fixing archive extraction issues, and correcting tool-specific binary installations.

Jul 7, 2026

This release upgrades the template engine to Tera v2 and introduces safer pruning logic, along with a variety of fixes for environments, package installations, and registry handling.

Jul 7, 2026

This release introduces a fully customizable admin dashboard layout via a new drag-and-drop Layout Composer and adds support for asynchronous payment methods. It also enhances pricing capabilities with tiered options and improves navigation with contextual browser tab titles.

Jul 1, 2026

This release adds granular control over file packing via per-file inclusion levels, introduces a cwd-relative output path style, and adds a `--skill-project-name` option. It also improves compression robustness to handle parsing errors gracefully.

Jun 29, 2026

This release fixes a critical regression in the Redis Event Bus worker that caused application startup to hang indefinitely. It also completes the Japanese (ja) dashboard translations.

Jun 25, 2026

Introduces global product options for store-level reuse, a revamped provider-agnostic auth verification system, and a new official ESLint plugin. Note: This version contains a regression that was fixed in v2.17.1.

Jun 24, 2026

Adds Watch Mode for continuous repacking, GitHub shorthand auto-detection, and a token budget guard for CI pipelines, along with fixes for ignore handling and duplicate paths.

Jun 18, 2026

Focuses on security updates, including a MikroORM security fix and a defensive update to `react-router-dom`, alongside the introduction of the official ESLint plugin and significant breaking changes to email verification and secret management.

Jun 18, 2026

This release focuses on security hardening and version compatibility updates. It raises minimum supported versions for Node.js and Deno, deprecates Bun, and addresses multiple CVEs regarding cookie leaks, arbitrary code execution, and unsafe command templates.

Jun 9, 2026

This update enhances transport security and operational flexibility for CoreDNS. It introduces support for the loong64 architecture, improves DoH3 and DoQ configurations, and refines DNSSEC signing and caching behaviors.

Jun 9, 2026

The release introduces Multi-Factor Authentication (MFA) capabilities to the Medusa admin dashboard, including a full UI for setup and management. It also includes various bug fixes and documentation updates.

Jun 1, 2026