Update payloadcms monorepo to v3.58.0

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Change	Age	Confidence
@payloadcms/db-mongodb (source)	3.37.0 -> 3.58.0
@payloadcms/db-postgres (source)	3.37.0 -> 3.58.0
@payloadcms/db-sqlite (source)	3.37.0 -> 3.58.0
@payloadcms/email-nodemailer (source)	3.37.0 -> 3.58.0
@payloadcms/richtext-lexical (source)	3.37.0 -> 3.58.0
@payloadcms/storage-s3 (source)	3.37.0 -> 3.58.0
@payloadcms/ui (source)	3.37.0 -> 3.58.0

---

Release Notes

payloadcms/payload (@​payloadcms/db-mongodb)

v3.58.0

Compare Source

🚀 Features

Ecommerce plugin and template (#​8297) (ef4874b)

The Ecommerce Template and Plugin is now ready in beta, you can get started by running the Payload CPA command below

pnpx create-payload-app my-project -t ecommerce

Full docs are available on our website

Payload SDK package (#​9463) (92a5f07)

Allows querying Payload REST API in a fully type safe way. Has support for all necessary operations, including auth, type safe select, populate, joins properties and simplified file uploading. Its interface is very similar to the Local API.

import { PayloadSDK } from '@​payloadcms/sdk'
import type { Config } from './payload-types'

// Pass your config from generated types as generic
const sdk = new PayloadSDK<Config>({
  baseURL: 'https://example.com/api',
})

// Find operation
const posts = await sdk.find({
  collection: 'posts',
  draft: true,
  limit: 10,
  locale: 'en',
  page: 1,
  where: { _status: { equals: 'published' } },
})

New Cloudflare D1 SQLite adapter, R2 storage adapter and Cloudflare template (#​12537) (99043ee)

You can now deploy directly to Cloudflare using our 1-click template or click the deployment button below

🐛 Bug Fixes

• ensure blocks filterOptions are awaited (#​13960) (41aa201)
• sanitize collection labels to inherit defaults when only a partial config is provided (#​13944) (1752043)
• avoid relying on Function.prototype.name to detect react components (#​13931) (4652bd0)
• next: static live preview url corrupt after save (#​13949) (3c4f8a3)
• plugin-multi-tenant: properly localize labels (#​13943) (2cc34d1)
• richtext-lexical: editor re-mounting on save due to json key order not being preserved in postgres (#​13962) (6a2e814)
• ui: query preset where field not displaying array values (#​13961) (9248fc4)
• ui: move collection description below title in document view (#​13946) (ae34b6d)

⚙️ CI

• add @payloadcms/sdk to publish list (#​13964) (f9743b4)
• add cron to activity notifications [skip ci] (#​13959) (6d995ff)
• proper path for activity notifications [skip ci] (2514e4d)
• activity-notifications debug inputs (ba33f2f)
• github activity slack notifications (#​13955) (4562df7)

🏡 Chores

• update templates and docs links (#​13971) (d7888df)
• rename activity notifications workflow (f7b1b7b)
• sdk: add README (#​13975) (2e1fb57)

🤝 Contributors

• Elliot DeNolf (@​denolfe)
• Sasha (@​r1tsuu)
• Paul (@​paulpopus)
• Patrik (@​PatrikKozak)
• Alessio Gravili (@​AlessioGr)
• Jacob Fletcher (@​jacobsfletch)
• Jarrod Flesch (@​JarrodMFlesch)
• Luke Sandberg (@​lukesandberg)

v3.57.0

Compare Source

🚀 Features

• adds admin.formatDocURL function to control list view linking (#​13773) (1d1240f)
• conditional blocks (#​13801) (d8dace6)
• support hasMany virtual relationship fields (#​13879) (1072171)
• next: regenerate live preview url on save (#​13631) (00a673e)
• plugin-form-builder: allow creating form submissions from the admin panel (#​11222) (104a5fc)
• plugin-multi-tenant: improves tenant assignment flow (#​13881) (fcb8b5a)
• richtext-lexical: support copy & pasting and drag & dopping files/images into the editor (#​13868) (59414bd)
• richtext-lexical: utility render lexical field on-demand (#​13657) (1c89291)
• translations: add Tamil translations (#​13788) (7975fe3)

🐛 Bug Fixes

• server component readonly state issues with document locking (#​13878) (512a8fa)
• make input/output encoding explicit in auth/crypto's encrypt/decrypt (#​13710) (7f35213)
• pagination returning duplicate results when timestamps: false (#​13920) (062c1d7)
• add missing translation key (#​13902) (39143c9)
• findDistinct with polymorphic relationships (#​13875) (e99e054)
• admin.hidden not respected for RSCs, render-field server function not respecting field-overrides client-side (#​13869) (228e8f2)
• exits handlers loop if response is returned (#​13866) (425172c)
• support hasMany: true relationships in findDistinct (#​13840) (d0543a4)
• removes select argument from create operation db calls (#​13841) (a26d8d9)
• db-postgres: localized relationships inside blocks (#​13760) (22ae9fa)
• db-sqlite: exists operator in createJSONQuery (#​13907) (f980a86)
• graphql: graphql tab schema not handling tabs correctly (#​13850) (83b6e37)
• next: clear bfcache on forward/back (#​13913) (f868ed9)
• next: groupBy for polymorphic relationships (#​13781) (9c20eb3)
• plugin-import-export: collectionSlug field regression from hidden field changes (#​13917) (96c6612)
• plugin-multi-tenant: ensure relationship filter filters based on doc.tenant (#​13925) (cbbf98e)
• plugin-multi-tenant: improve Norwegian translation for "tenant" (#​13923) (dea91f3)
• plugin-search: transaction state errors in parallel reindex operations (#​13915) (79b2557)
• plugin-search: returns doc instead of empty return (#​13916) (68882aa)
• plugin-seo: allow number ids & resolved relations for image auto-generation (#​13906) (abbe38f)
• richtext-lexical: remove unexpected spaces in link html converter (#​13924) (c230005)
• richtext-lexical: richtext field duplicates description custom component (#​13880) (66f5d14)
• richtext-lexical: prevent disallowed headings to be pasted (#​13765) (207caa5)
• translations: adjust some zh translations (#​13867) (ae7b75a)
• translations: correct Ukrainian language translations (#​13639) (5b5eaeb)
• translations: missing noLabelGroup translation key for Tamil translations (#​13896) (cb23aaf)
• ui: opening relationship field with appearance: "drawer" inside rich text inline block closes drawer (#​13830) (7bbd07c)
• ui: corrects url for publish specific url (#​13922) (662bab2)
• ui: array field state to return empty array instead of 0 (#​11283) (3f5c989)
• ui: folder filters hidden behind results (#​13908) (5c81342)
• ui: custom folder slug in browse-by (#​13909) (4975b8d)
• ui: query folder children with depth and select (#​13910) (984f1b3)
• ui: revert-to-published button showing on new drafts (#​13897) (82d98ab)
• ui: bulk upload with locale param (#​13865) (667c4f1)
• ui: ensures visible list view thumbnails with enableListViewSelectAPI (#​13864) (82aade2)
• ui: respect editorOptions, prevent field from flashing on save (#​13848) (5241113)
• ui: set prefetch false on Link buttons (#​13846) (33228d9)

⚡ Performance

• graphql: use depth 0 in auth/apiKey for graphQL requests (#​13895) (9a59562)
• ui: use select API in RelationshipProvider to speed up load times in RelationshipCell (#​13832) (77cac30)

🛠 Refactors

• richtext-lexical: new upload node design (#​13901) (bea77f2)
• translations: correct i18n translation for Norwegian (#​13854) (b7f6e3c)

📚 Documentation

• corrects link for experimental features topic (#​13862) (b1e5bd9)
• clarify JWT token encryption / decryption in configuration docs (#​13816) (0a5b7b0)

⚙️ CI

• remove v2 issue template (f39c7bf)

🏡 Chores

• revert docs label change (c33c037)
• update documentation issue template (ae95d58)
• consolidate canAccessAdmin logic (#​13849) (42b5935)
• deps: bump @​faceless-ui/modal to v3.0.0 (#​13842) (9a8e3f8)

🤝 Contributors

• Alessio Gravili (@​AlessioGr)
• Elliot DeNolf (@​denolfe)
• Dan Ribbens (@​DanRibbens)
• roboin (@​Robot-Inventor)
• Jacob Fletcher (@​jacobsfletch)
• Anders Semb Hermansen (@​andershermansen)
• Jie Wang (@​escwxyz)
• aptt (@​apttx)
• Ricardo Tavares (@​rjgtav)
• Patrik (@​PatrikKozak)
• Jarrod Flesch (@​JarrodMFlesch)
• Sasha (@​r1tsuu)
• Jessica Rynkar (@​jessrynkar)
• Паламар Роман (@​VeiaG)
• Anil Shebin S J (@​AnilShebin)
• German Jablonski (@​GermanJablo)
• Jens Becker (@​jhb-dev)
• Sean Zubrickas (@​zubricks)
• Kwan Jun Wen (@​junwen-k)

v3.56.0

Compare Source

🚀 Features

• pass args to task onSuccess and onFail callbacks (#​13269) (3acdbf6)
• crons for all bin scripts, new jobs:handle-schedules script, more reliable job system crons (#​13564) (cdeb828)
• expose multipart/form-data parsing options (#​13766) (8282031)
• global beforeOperation hook (#​13768) (3af546e)
• ui: export FieldPathContext (#​13806) (a3acfeb)

🐛 Bug Fixes

• add missed pagination property to findVersions and findGlobalVersions and handle it properly (#​13763) (a955392)
• skip validation when trashing documents with empty required fields (#​13807) (3b13867)
• versions created with incomplete data when using select parameter (#​13809) (faed3aa)
• error accessing sanitizedPermissions during docAccess operation: "Cannot read properties of undefined" (#​13800) (c7795fa)
• typo in the description of the isTemp field of query presets (#​13728) (e75bfb0)
• fully sanitize unauthenticated client config (#​13785) (e2632c8)
• client config context inheritance (#​13790) (dfb0021)
• db-mongodb: support 2x and more relationship sorting (#​13819) (24ace70)
• db-mongodb: localized arrays inside blocks with versions (#​13804) (09dec43)
• examples: secure mt example users collection (#​13810) (9a841df)
• live-preview: client-side live preview failed to populate localized fields (#​13794) (b34e5ea)
• live-preview: reset cache per subscription and ignore invalid preview messages (#​13793) (b62a30a)
• next: unnamed, unlabeled groups displayed without label in version view (#​13831) (8d3b146)
• next: sparse block and arrays diffs were not rendered correctly (#​13829) (433c513)
• next: exclude permissions from page response when unauthenticated (#​13796) (8113d3b)
• next: richtext field is read-only for expired lock (#​13789) (4278e72)
• next: login redirect crashes page (#​13786) (13af91f)
• next: resolve filterOptions by path (#​13779) (8a7124a)
• translations: use correct Dutch terms for "clear" and "close" (#​13748) (fce94d6)
• ui: pass locale arg in query params for folder operations (#​13837) (c0684e3)
• ui: correct field path in inline create drawer for auth fields (#​13815) (91e7f0c)
• ui: populate nested fields for enableListViewSelectAPI (#​13827) (dc732b8)
• ui: cross-domain server-side live preview throws postMessage error (#​13825) (731c4fb)
• ui: undefined operators for virtual field with unsupported field types (#​13820) (5c02d17)
• ui: prevent form validation after draft submit error (#​12918) (a2c31fa)
• ui: show loading state in relationship field during search and pagination (#​13805) (555228b)
• ui: safely access preferences when loading list view (#​13771) (4482eaf)

📚 Documentation

• improvements and fixes to blocks documentation (#​13782) (3c5aa1b)

📝 Templates

• fix experimental-build-mode compile generating invalid code (#​13828) (ba2ab2f)

⚙️ CI

• adjust audit-dependencies cron time (898e937)

🤝 Contributors

• Jarrod Flesch (@​JarrodMFlesch)
• Alessio Gravili (@​AlessioGr)
• Jonathan Elmgren (@​jonathanelmgren)
• Sasha (@​r1tsuu)
• Jacob Fletcher (@​jacobsfletch)
• Patrik (@​PatrikKozak)
• Slava Nossar (@​slavanossar)
• Philipp Schneider (@​philipp-tailor)
• Elliot DeNolf (@​denolfe)
• Amelia (@​LimChorngUan)
• BrannanKovachev (@​BrannanKovachev)
• Robbe Vaes (@​Robbe95)
• Robbert Stevens (@​robbertstevens)
• Anders Semb Hermansen (@​andershermansen)
• German Jablonski (@​GermanJablo)

v3.55.1

Compare Source

🐛 Bug Fixes

• presentational-field types incorrectly exposing hooks (#​11514) (285fc8c)
• graphql: pass collectionSlug to nested join fields in tabs, collapsible and group resolvers (#​13752) (e52b757)
• next: error after logging in and navigating to different page in production (#​13758) (e40c821)
• ui: listSearchableFields can resolve to multiple fields with the same name when using tabs (#​13668) (ffed540)

📝 Templates

• ensure blank template installs matching react-dom version (#​13757) (15e462b)

🤝 Contributors

• Dallas Opelt (@​DallasO)
• Alessio Gravili (@​AlessioGr)
• German Jablonski (@​GermanJablo)
• timeo-schmidt (@​timeo-schmidt)
• Elliot DeNolf (@​denolfe)

v3.55.0

Compare Source

🚀 Features

• adds disableListColumn and disableListFilter to imageSize admin props (#​13699) (e1ea074)
• unauthenticated client config (#​13714) (e49005f)
• adds new experimental.localizeStatus option (#​13207) (0f6d748)
• live-preview: client-side live preview: simplify population, support hooks and lexical block population (#​13619) (6e203db)
• richtext-lexical: upgrade lexical from 0.34.0 to 0.35.0 (#​13715) (7a8bcdf)
• richtext-lexical: upgrade lexical from 0.28.0 to 0.34.0 (#​13622) (1a1696d)
• richtext-lexical: add options to hide block handles (#​13647) (fdab271)
• ui: save collection folder tab preferences (#​13702) (6a0637e)
• ui: adds admin.autoRefresh root config property (#​13682) (f288cf6)

🐛 Bug Fixes

• ensure client-side live preview correctly updates for globals (#​13718) (03f7102)
• set X-Payload-HTTP-Method-Override as allowed cross origin header (#​13717) (a4a0298)
• update user session on reset (#​13667) (d9e1832)
• prevent enabling trash on folders (#​13675) (be47f65)
• db-sqlite: convert Date to ISO 8601 string in queries (#​11694) (917c66f)
• next: version diff view not handling all field permissions correctly (#​13721) (911f17a)
• next: display deleted relations and uploads in version diff views (#​12955) (bbcdea5)
• next: version diff view shows correct document title in step nav (#​13713) (794bf82)
• plugin-multi-tenant: hide watchTenant column field (#​13740) (a0112d7)
• plugin-multi-tenant: skip baseFilter if user has access to all tenants (#​13633) (65b3845)
• plugin-nested-docs: prevent phantom breadcrumb row (#​13628) (a231a05)
• plugin-nested-docs: crumbs not syncing on non-versioned collections (#​13629) (4600c94)
• plugin-search: update with db adapter on create (#​13670) (1293019)
• richtext-lexical: fix picture closing tag in html converter (#​13100) (24e436b)
• richtext-lexical: add internationalization support for default style label in textStateFeature (#​13662) (0c44c3b)
• storage-vercel-blob: filename is incorrectly stored encoded when addRandomSuffix is true (#​13746) (b2f9d4e)
• templates: URI encode the cacheTag in getMediaUrl utility - Website template (#​13558) (008a52d)
• ui: consistent searchbar across folders and lists (#​13712) (09e3174)
• ui: cannot filter by virtual relationship fields in WhereBuilder (#​13686) (7e98fbf)
• ui: undefined permissions passed in create-first-user view (#​13671) (5146fc8)
• ui: don't populate on auto save (#​13649) (7794541)
• ui: use consistent row ids when duplicating array and block rows (#​13679) (b8d7ccb)
• ui: field.admin.condition data attribute missing document ID when document is being edited (#​13676) (a115868)
• ui: await for publish success to update the UI (#​13673) (9b10933)
• ui: sidebar missing sticky top offset (#​13652) (1c68ed5)
• ui: should not show publish specific locale button when no localized fields exist (#​13459) (ac691b6)
• ui: json field type ignoring editorOptions (#​13630) (426f99c)

⚡ Performance

• plugin-search: reindex collections in parallel, up to 80% faster (#​13608) (b99c324)
• ui: opt-in to the select api in the list view (#​13697) (d2d2df4)

📚 Documentation

• missing comma in custom-strategies example (#​13701) (27cfe77)
• plugin-form-builder: add RadioField documentation (#​13529) (4e972c3)

🧪 Tests

• increase timeout in uploads cors test (#​13743) (a528a55)

⚙️ CI

• deps: bump the github_actions group across 3 directories with 4 updates (#​13654) (cfb70f0)

🏡 Chores

• add AGENTS.md (#​13688) (d109b44)
• ui: prevent loading orphaned documents when viewing root collection folders (#​13684) (9f0573d)

🤝 Contributors

• Patrik (@​PatrikKozak)
• Jarrod Flesch (@​JarrodMFlesch)
• Alessio Gravili (@​AlessioGr)
• Jacob Fletcher (@​jacobsfletch)
• Ilham Saputrajati (@​ilhamsj)
• Cedric Delacombaz (@​cdelacombaz)
• Said Akhrarov (@​akhrarovsaid)
• Aapo Laakkio (@​ApsiV11)
• Anders Semb Hermansen (@​andershermansen)
• German Jablonski (@​GermanJablo)
• Yazal Ulloa (@​yazalulloa)
• Elliot DeNolf (@​denolfe)
• Jessica Rynkar (@​jessrynkar)
• reiv (@​reiv)
• Riley Langbein (@​rilrom)

v3.54.0

Compare Source

🚀 Features

• support parallel job queue tasks, speed up task running (#​13614) (e0ffada)
• configurable toast notifications (#​13609) (0a18306)
• allow multiple, different payload instances using getPayload in same process (#​13603) (13c24af)
• db-*: support atomic array $push db updates (#​13453) (5ded64e)
• plugin-multi-tenant: allow custom tenant field per collection (#​13553) (6db07f0)
• plugin-multi-tenant: re-enable global selector on all views (#​13575) (f260d0a)

🐛 Bug Fixes

• restore as draft function was passing a published status (#​13599) (a670438)
• hide jobs stats global by default (#​13566) (a92c251)
• deeply merge array and block rows from server form state (#​13551) (1e13474)
• ensure updates to createdAt and updatedAt are respected (#​13335) (5c16443)
• db-*: add delete version id for non-mongodb (#​10613) (ddb8ca4)
• graphql: invalid enum names when values include brackets (#​13597) (1dc346a)
• next: richtext fields not read-only for locked documents (#​13579) (344ad69)
• next: update rest route handler types for Next.js 15.5 compatibility (#​13521) (763cb61)
• plugin-multi-tenant: prevent duplicate filters on referenced blocks (#​13607) (03a00ca)
• plugin-multi-tenant: autosave global documents not rendering (#​13552) (409dd56)
• richtext-lexical: toolbar dropdown items are disabled when selecting via double-click (#​13544) (3bc1d08)
• ui: prevent infinite redirect if no user (#​13615) (303381e)
• ui: bulk edit overwriting fields within named tabs (#​13600) (138938e)
• ui: autosave in document drawer overwrites local changes (#​13587) (bd81936)
• ui: multiple logout requests being made in parallel (#​13595) (cf37433)
• ui: auth-fields container renders despite no visible auth/API key/verify content (#​13554) (8101842)
• ui: correctly pass query params to locked document requests (#​10802) (598ff4c)

🛠 Refactors

• deprecate job queue runHooks property (#​13617) (97c41ce)

📚 Documentation

• adds default populate video (#​13586) (ded8ec4)
• blank-template-url-fix (#​13580) (45c3be2)
• fix small typo in documentation (#​13545) (3408d7b)

⚙️ CI

• remove run-e2e-turbo flow (#​13611) (5c41966)
• ignore template bump commits in release notes [skip ci] (60cfc31)

🤝 Contributors

• Alessio Gravili (@​AlessioGr)
• Jarrod Flesch (@​JarrodMFlesch)
• Jacob Fletcher (@​jacobsfletch)
• Jessica Rynkar (@​jessrynkar)
• Sean Zubrickas (@​zubricks)
• Elliot DeNolf (@​denolfe)
• Patrik (@​PatrikKozak)
• Rodrigo Solís (@​sorodrigo)
• Logan Stellway (@​lstellway)
• Yunsup Sim (@​SimYunSup)
• Vincent Vu (@​rubixvi)

v3.53.0

Compare Source

🚀 Features

• add icelandic translations (#​13423) (2bdd669)
• plugin-import-export: use groupBy as SortBy when present and sort is unset (#​13491) (a7ed88b)
• plugin-import-export: adds sort order control and sync with sort-by field (#​13478) (efdf002)
• plugin-multi-tenant: visible tenant field on documents (#​13379) (5cf215d)

🐛 Bug Fixes

• server edit view components don't receive document id prop (#​13526) (9607453)
• uploads update unnecessarily resizing with sharp (#​13528) (a94cd95)
• accept computed array and block rows from server form state (#​13501) (f382c39)
• 'front-end' spelling typo in JSDocs for overrideAccess (#​13515) (f44e276)
• imports (part 2/2) (#​13520) (cf427e5)
• select field component value prop type does not support array values (#​13510) (4f6d0d8)
• unable to query versions on latest key (#​13512) (73ba4d1)
• avoid re-uploading the file unless changed (#​13500) (92d459e)
• copy to locale with localized fields inside tabs (#​13456) (ec5b673)
• omit trashed documents from appearing in folder results (#​13492) (1909063)
• update docker base image in templates (#​13020) (64f4b0a)
• db-mongodb: disable join aggregations in DocumentDB compatibility mode (#​13270) (c7b9f0f)
• db-postgres: camelCase point fields (#​13519) (aa90271)
• next: no client field found error when accessing version view in some configurations (#​13339) ([393b4a0](https://redir

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.