Skip to content

fix(deps): update strapi monorepo to v5.61.0 - #57

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/strapi-monorepo
Open

fix(deps): update strapi monorepo to v5.61.0#57
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/strapi-monorepo

Conversation

@renovate

@renovate renovate Bot commented Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@strapi/plugin-cloud (source) 5.56.0 → 5.61.0 age confidence
@strapi/plugin-users-permissions (source) 5.56.0 → 5.61.0 age confidence
@strapi/provider-upload-aws-s3 (source) 5.56.0 → 5.61.0 age confidence
@strapi/strapi (source) 5.56.0 → 5.61.0 age confidence

Release Notes

strapi/strapi (@​strapi/plugin-cloud)

v5.61.0

Compare Source

5.61.0 (2026-11-04)
🚀 New feature
  • audit-logs: record history restores, discarded drafts, settings updates and media events (#​28178)
🔥 Bug fix
  • admin: add missing english keys and french translations (#​28354)
  • admin: package exports point to source files that do not exist (#​28326)
  • admin: make action provider registerMany all-or-nothing (#​28324)
  • content-manager: offscreen required uids lose their default value when saving after load (35ce71beb2)
  • content-manager: edit view rows mounted for an error unmount once the errors are cleared (26272dd9c6)
  • content-manager: send a single relation search when the combobox first opens (be34c0e8ff)
  • content-manager: only replace a single relation once its saved relation is loaded (0886987f6f)
  • content-manager: list view crashes when a content type has an attribute named ref (cf1cffdbcc)
  • content-manager: history version restore answers 500 for an unknown version id (#​28198)
  • content-manager: relations return 500 instead of 403 on field read denial (#​28194)
  • content-manager: publish actions return 500 on content types without draft and publish (#​28189)
  • content-manager: findContentTypesByKind type rejects the kind string it needs (#​28187)
  • content-manager: history versions declare a componentsSchemas field they never store (#​28255)
  • content-manager: relation endpoints return 500 for morph-to fields (#​28270)
  • content-manager: update, clone and publish return 200 with empty data for a deleted document (#​28269)
  • content-manager: history restore fails when a component id no longer belongs to the document (#​28195)
  • content-releases: action validity not refreshed after attribute change (#​28126)
  • content-releases: sync entry validation awaited inside Promise.all (#​28256)
  • content-releases: duplicate webhooks when publishing a release (#​27909)
  • content-type-builder: changes to a component named admin are not saved (#​28200)
  • content-type-builder: count documents, not rows, before switching to single type (#​28278)
  • content-type-builder: content type update without draftAndPublish disables draft and publish (#​28203)
  • content-type-builder: editing an unknown content type throws a TypeError (#​28260)
  • content-type-builder: kind change does not emit the content-type.update event (#​28205)
  • content-type-builder: log a failing schema event listener instead of crashing (#​28279)
  • content-type-builder: create content type honours options.draftAndPublish (#​28287)
  • content-type-builder: guard update-schema against switching to single type with many documents (#​28284)
  • content-type-builder: keep stored schema options keys on content type edit (#​28285)
  • content-type-builder: is-development-mode middleware crashes when referenced by name (#​28323)
  • content-type-builder: stop waiting for schema event listeners after a timeout (#​28329)
  • content-type-builder: count rows without documentId in the single type guard (#​28333)
  • core: required fields of a new component are not enforced on update (#​28236)
  • core: limit MCP tool input elements (#​28179)
  • create-strapi-app: example seed uploads files without their original name (#​28325)
  • database: moving a relation to the start fails on MySQL/MariaDB (#​28289)
  • documentation: login answers 500 when no password hash is stored (#​28249)
  • documentation: bootstrap crashes when users-permissions is not installed (#​28186)
  • documentation: override service registers yaml that is not an object (#​28259)
  • graphql: named resolver middlewares do not run as registered strapi middlewares (#​28257)
  • i18n: locales content api response schema rejects region codes and real document ids (#​28252)
  • i18n: return not found when a locale disappears during update (#​28275)
  • review-workflows: assigning a workflow drops other content manager configuration options (#​27864)
  • review-workflows: workflows can be created or renamed with a name that already exists (#​28201)
  • review-workflows: stage lookup returns a stage from another workflow (#​28193)
  • review-workflows: locale created through an update has no review stage (#​28202)
  • review-workflows: assigned documents widget shows an empty stage after its workflow is deleted (#​28273)
  • review-workflows: deleting a stage can leave its entries without a stage (#​28271)
  • review-workflows: deleting or unassigning a workflow with an orphaned content type returns 500 (#​28237)
  • tooling: jest unit preset runs test helper files as test suites (#​28248)
  • types: allow null on optional document input attributes (#​27902)
  • upload: replacing an image with a non-image file keeps the image width, height and formats (#​28233)
  • upload: avif images are stored without dimensions or responsive formats (#​28170)
  • utils: concurrent provider registrations of one key bypass the duplicate check (#​28322)
📚 Documentation Changes
  • document edit view progressive mounting, lazy validation schema and createContext re-renders (386d4f0a20)
⚙️ Chore
  • drop Node 20 support (#​26631)
  • merge back release 5.60.0 (#​28330)
  • link v5.60.0 tag into develop history (5ba94ee6b4)
  • link main 5.60.0 squash into develop history (cdf4309ab6)
  • admin: remove the unused use-context-selector dependency (eedc2d144b)
  • admin: type the meta argument the list view passes to cellFormatter (ec09de346c)
  • admin: migrate backend unit tests from jest to vitest (#​28055)
  • core: migrate backend unit tests from jest to vitest (067374ca4a)
  • core: migrate tests added on develop to vitest (fd7e0c9388)
  • create-strapi-app: migrate backend unit tests from jest to vitest (#​28057)
  • create-strapi-app: align template typescript lib with node 22 (#​28328)
  • deps: bump qs from 6.16.0 to 6.16.1 (#​28316)
  • deps: bump webpack-dev-middleware to 7.4.6 (#​28208)
  • documentation: migrate backend unit tests from jest to vitest (#​28056)
💅 Enhancement
  • admin: only re-render context consumers whose selected value changed (302021fb0b)
  • content-manager: build the document validation schema once, when it is needed (619e402016)
  • content-manager: render edit view rows progressively (591419942c)
  • content-manager: only fetch relations of fields near the viewport (5ca1e44e4e)
  • upload: new asset picker and image drop in the rich text editors (#​28176)
  • upload: content manager asset details drawer (#​28283)
❤️ Thank You

v5.60.0

Compare Source

5.60.0 (2026-10-28)

🚀 New feature
  • admin: record SSO settings updates in audit logs (#​28135)
  • webhooks: select entry events per content type (#​27931)
🔥 Bug fix
  • admin: i18n tokens that were translated in 7 locales (#​27767)
  • admin: admin user updates and deletes crash when the super admin role does not exist (#​28149)
  • admin: webhook header input keeps stale text after clearing the last row (#​28168)
  • content-manager: preview URL accepts any status string (#​28148)
  • core: ctrl-c crashes strapi develop and build when the admin is not registered (#​28117)
  • core: document middleware and lifecycle subscriber removers remove the wrong entry (#​28047)
  • core: include meta in OpenAPI content-API response schemas (#​28114)
  • mcp: every request builds the schemas of all tools and exhausts the heap (#​28116)
  • review-workflows: stage update runs the document update twice (#​28120)
  • review-workflows: required stage update fails when stages are not sent (#​27868)
  • upload: media library nested folders sidebar (#​28159)
  • upload: the published file type does not match the rows the upload service returns (#​28190)
  • upload: isFaultyImage returns image stats or rejects for files without a filepath (#​28199)
  • upload: settings saved without aiMetadata lose its default value (#​28188)
⚙️ Chore
💅 Enhancement
  • fewer database queries per relation field and per write on relation-heavy entries (#​28092)
  • upload: add new content manager asset picker (#​28091)
  • upload: show status-aware rows and cards in the media field (#​28080)
❤️ Thank You

v5.59.0

Compare Source

5.59.0 (2026-10-21)

🚀 New feature
🔥 Bug fix
  • correcting linting after Codex review (13c317ddbd)
  • updating the spacing beween the lines (f6aa6e3b96)
  • trying the space in a different way (d6450b12ad)
  • admin: reject role name and description longer than 255 characters (#​28002)
  • admin: apply boolean false filters in list view (#​27938)
  • admin: custom RBAC conditions in a custom category are discarded (#​28020)
  • admin: derive the auth cookie path from admin.url (#​27619)
  • admin: reject token name and description longer than 255 characters (#​28004)
  • cli: remove the expiration date check (#​28076)
  • content-manager: keep list columns when an attribute is renamed (#​28036)
  • content-releases: deleting a non-localized entry leaves it in its releases (#​28023)
  • content-releases: await release cleanup inside its try/catch (#​27893)
  • content-releases: bootstrap fails when the core store has no saved schemas (#​28121)
  • core: close remaining clone relation edge cases (#​26970)
  • core: fetch requests setting their own content-length fail after loading undici 8 (8b5dea865d)
  • core: https requests through a proxy fail after loading undici 8 (29c762cd0d)
  • core: unhandled rejection when an entry event fails to emit after commit (#​28017)
  • core/core: event hub off() and once() remove the wrong listener (#​28051)
  • create-strapi-app: next-step cd command misreads folder names that start with - or ~ (31e16d56df)
  • create-strapi-app: bump better-sqlite3 pin to 12.11.1 for Node 26 support (#​27759)
  • database: populate relations sequentially inside a transaction (#​27644)
  • database: connection function holds a pool connection forever on postgres and mysql (#​27979)
  • document-service: publishing an entry linked from a widely reused component takes minutes (#​27942)
  • email-nodemailer: decodeRfc2047 ignores the charset of encoded words (#​27822)
  • i18n: restore ICU arguments in 68 admin locale strings (#​27908)
  • review-workflows: weekly telemetry sends metrics object as numberOfActiveWorkflows (#​27866)
  • review-workflows: hide review workflow panel on published tab (#​28009)
  • review-workflows: weekly metrics sendMetrics regression tests never run (#​28063)
  • upload: honor sharp limitInputPixels config in image manipulation (#​27161)
  • upload: rebuild the content manager media field (#​27848)
  • upload: add an Add asset menu to the media field (#​27856)
📚 Documentation Changes
⚙️ Chore
  • format files with prettier 3.9.9 (#​28043)
  • ai: add create-issue skill (#​27992)
  • database: upgrade knex from 3.0.1 to 3.3.0 (#​27982)
  • deps: bump prettier from 3.6.2 to 3.9.9 (f8ce51ac65)
  • deps: upgrade undici from 6.29.0 to 8.11.2 (bff2ccfc7f)
  • deps: upgrade undici from 8.11.2 to 8.12.1 (a78ad0d6de)
  • deps: bump browserslist from 4.28.8 to 4.28.9 (#​27851)
  • deps: bump markdown-it (#​28074)
  • docs: contributor docs are excluded from prettier checks (#​28062)
  • lint: eslint fails to parse vitest.config.ts in admin/server packages (#​28064)
  • lint: extra-policy oxlint perf on the blocking gate (#​27671)
  • review-workflows: migrate unit tests from jest to vitest (#​27388)
  • review-workflows: stop passing ignored populate to workflow create and update (#​27865)
  • types: centralise the window.strapi type in @​strapi/types (#​26213)
  • upload: enforce the media MCP ambient guard by construction (#​27617)
💅 Enhancement
  • database: describe connection pool timeouts (#​28000)
  • utils: avoid rebuilding curried traversal wrappers on every call (#​27947)
  • utils: remove per-key allocations from the query traversal (#​27233)
⚠️ Changes to be aware of
Database driver update (knex 3.3.0)

Custom code that uses strapi.db.connection and calls delete() with limit or having, or truncate() with where, having or limit, now throws on PostgreSQL and SQLite. MySQL now applies the LIMIT. Before, the limit was ignored and every matching row was deleted, so check plugins or scripts that build such queries. Connection pool timeout errors now include the underlying connection error, and knex warnings now appear in the Strapi log as [database] knex: ….

(#​27982)

Token and role names are limited to 255 characters

The name and description of API tokens, admin tokens, transfer tokens and admin roles now accept at most 255 characters. Longer values get a validation error under the field. Before, PostgreSQL returned a generic server error. Existing tokens with longer values keep working, but the admin rejects that long text on save until you shorten it.

(#​28004) (#​28002)

Node.js 22.19 or later is required

Strapi now uses undici 8, which requires Node.js 22.19.0 or later. The engines field still says >=20.0.0, so check your runtime: this release was only tested on Node 22.20 and later.

(#​27934)

limitInputPixels must be a number or a boolean

The upload plugin now applies sharp.limitInputPixels. Strapi refuses to start if the value is not true, false or an integer of 0 or more. A value read straight from an environment variable is a string, so use env.int().

(#​27161)

Known issue: deleting an entry changes past releases

When you delete an entry that belongs to a release that was already published, the entry is removed from that release, and the release status changes from "done" to "empty" or "ready". The published content is not affected. This already happened for localized entries, and it now happens for all entries.

(#​28023)

Known issue: editing webhook headers

In Settings > Webhooks, if you clear the last header row and type a new header name, the old text can stay in front of it (for example X-CX-D instead of X-D). Check the header names before you save.

(#​27671)

❤️ Thank You

v5.58.0

Compare Source

5.58.0 (2026-10-14)

🚀 New feature
  • admin: add License details and Support debug dump (#​27034)
  • admin: record failed admin logins and sso auto-registration in audit logs (#​27930)
🔥 Bug fix
  • removing firefox from the e2e test suite (3af89ee777)
  • cleaning up firefox inclusion in e2e tests (8580c0dbe1)
  • admin: render reset password strength feedback (#​27741)
  • admin: show unset boolean fields as neither true nor false (#​28014)
  • content-manager: relation fields share cached options across component instances (#​27732)
  • content-manager: relation fields hide available relations after a selection or a failed request (#​28006)
  • content-type-builder: make field conditions follow attribute renames (#​27953)
  • core: document-service query transform mutates the caller's fields array (#​27948)
  • core: treat only all-digit relation shorthand strings as numeric ids (#​27892)
  • deps: bump the pinned axios and handlebars past their advisories (#​28008)
  • e2e: webkit jobs fail in global setup without chromium (65067fc0c8)
  • upload: cancel does not abort in-flight uploads and asset edits (#​27896)
📚 Documentation Changes
  • contributor-docs: modernize the contributor docs site (#​27879)
  • e2e: install chromium and webkit for local e2e (1bfad16822)
  • upload: fix the stale JSDoc param on signEntityMedia (#​27720)
⚙️ Chore
  • merge back release 5.57.0 (#​27970)
  • deps: upgrade MCP SDK to 2.3.1 (#​27996)
  • deps: bump ip-address from 10.4.0 to 10.7.3 (#​27904)
  • deps: bump piscina from 4.9.3 to 4.9.4 (#​27905)
  • deps: bump http-cache-semantics from 4.1.1 to 4.3.0 (#​27918)
  • deps: bump @​fastify/busboy from 2.0.0 to 2.1.1 (#​27919)
  • deps: bump shell-quote from 1.10.0 to 1.12.0 (#​27957)
  • deps: bump axios from 1.19.0 to 1.20.0 (#​27883)
  • deps: bump proxy-addr from 2.0.7 to 2.0.8 (#​27958)
  • deps: bump dompurify from 3.4.13 to 3.4.16 (#​27903)
  • deps: bump source-map-js from 1.2.1 to 1.2.2 (#​27959)
  • deps: bump sharp from 0.35.4 to 0.35.5 (#​27954)
  • generators: migrate unit tests from jest to vitest (#​27221)
❤️ Thank You

v5.57.0

Compare Source

5.57.0 (2026-10-07)

🚀 New feature
  • cli: add strapi enterprise install command (#​27849)
  • content-type-builder: Preserve data on renaming attributes (#​26749)
  • review-workflows: record workflow and review actions in audit logs (#​27814)
🔥 Bug fix
  • updating xhmikosr/decompress (#​27885)
  • documentId upload in content API (#​27834)
  • admin: media library banner appears on every admin page instead of only the media library (9012e0ad5a)
  • admin: upsell banner stacked with the media library banner when both were shown (349aaea5ba)
  • admin: upsell banner briefly mounted and queried its trial data on the media library (ba5482ce21)
  • admin: guard RelativeTime against invalid dates (#​27472)
  • admin: enumeration placeholder shown twice in select trigger (#​27785)
  • admin: add strapi version to admin telemetry events (#​27922)
  • admin|upload: stamp legacy media events and send login telemetry once (#​27932)
  • content-manager: warn before discard removes relations to draft entries (#​27815)
  • content-manager: preview click-to-edit breaks when the preview script is injected twice (#​27796)
  • content-manager: relation list loses pages after opening the same document in a modal (#​27831)
  • content-manager: stop relation fields rendering a full page loader (#​27682)
  • core: strip empty documentId from create/update data to prevent … (#​27766)
  • documentation: prevent relation schema generation from exhausting memory (#​27780)
  • i18n: globe tooltip displays [object object] (#​27890)
  • lint: make oxlint override globs match repo paths (#​27863)
  • upload: add rotate to the media library image editor (#​27714)
  • upload: open asset and folder actions on right-click (#​27816)
  • upload: stamp mediaLibraryVersion v1 on legacy media library events (#​27900)
  • utils: explain that status is root-only when used in nested populate (#​27857)
📚 Documentation Changes
⚙️ Chore
💅 Enhancement
  • core: accept localization behavior from registered providers (#​27806)
  • strapi: stop loading the admin build toolchain on every cli command (#​27910)
🚨 Security
  • document DTS transfer-token trust model as a specific exclusion (#​27483)
  • deps: upgrade vite to fix server.fs.deny bypass on windows (eadb0c9d82)
  • deps: resolve every qs copy in the lockfile to 6.16.0 (3be284aab1)
❤️ Thank You

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/strapi-monorepo branch 2 times, most recently from 2f7ae8a to 068f05e Compare October 21, 2026 17:02
@renovate renovate Bot changed the title fix(deps): update strapi monorepo to v5.57.0 fix(deps): update strapi monorepo to v5.58.0 Oct 21, 2026
@renovate
renovate Bot force-pushed the renovate/strapi-monorepo branch 2 times, most recently from 6f737ab to 4a235f7 Compare October 28, 2026 13:41
@renovate renovate Bot changed the title fix(deps): update strapi monorepo to v5.58.0 fix(deps): update strapi monorepo to v5.59.0 Oct 28, 2026
@renovate
renovate Bot force-pushed the renovate/strapi-monorepo branch from 4a235f7 to e5e91e8 Compare November 4, 2026 16:12
@renovate renovate Bot changed the title fix(deps): update strapi monorepo to v5.59.0 fix(deps): update strapi monorepo to v5.60.0 Nov 4, 2026
@renovate
renovate Bot force-pushed the renovate/strapi-monorepo branch from e5e91e8 to 83707c8 Compare November 6, 2026 01:16
@renovate
renovate Bot force-pushed the renovate/strapi-monorepo branch from 83707c8 to 2f10be2 Compare November 11, 2026 19:06
@renovate renovate Bot changed the title fix(deps): update strapi monorepo to v5.60.0 fix(deps): update strapi monorepo to v5.61.0 Nov 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants