Simplify your stack and build anything. Or everything.
Build tomorrow’s web with a modern solution you truly own.
AGENCY TESTIMONIAL
"Payload has transformed the way our clients manage content. It's an indispensable tool for any modern agency."
Code-based nature means you can build on top of it to power anything.
Resources for Developers
Get the resources you need to start building today
It’s time to take back your content infrastructure.
Featured Customer Story
Microsoft chose Payload to tell the world about AI.
Payload 3.87.1 bumps mongoose, undici, and the MCP SDK to resolve upstream security advisories, and fixes dev-server HMR, rich text link drawers, and the Cloudflare D1 template.
Highlights
This patch release pulls in security fixes from upstream dependencies — bumping mongoose, undici, and the MCP SDK to resolve published advisories — alongside a handful of targeted fixes. Upgrading is recommended.
Also in this release:
- Security dependencies: mongoose is bumped to
8.24.1, theplugin-mcpMCP SDK to1.30.0andundiciis updated to pick up its latest patches - Dev server: Payload now connects to the correct Next.js HMR endpoint per version
- Rich text: the link drawer preserves its form state
- Templates: the
with-cloudflare-d1template build is fixed and its dependencies bumped
As always, you can review the complete changelog on GitHub.