This release includes breaking changes for platform teams planning a safe upgrade.
Published 18d
Productivity & Wikis
β No known CVEs patched
✓ No known CVEs patched in this version
Topics
api
cms
cms-framework
content-management
content-management-system
customizable
+12 more
web
graphql
headless-cms
jamstack
javascript
mysql
no-code
nodejs
posgresql
rest
strapi
typescript
Affected surfaces
deps
Summary
AI summaryUpdates π₯ Bug fix, β€οΈ Thank You, and βοΈ Chore across a mixed release.
Full changelog
5.50.1 (2026-07-08)
π New feature
π₯ Bug fix
- give the ability to open a list item in a new tab (#26853)
- admin: translate enumeration option labels in the content manager (#26837)
- admin: seat limit billing links (#26728)
- cloud: hide deploy menu in production using currentEnvironment (#26733)
- content-manager: allow reading hidden content types for relation targets (#26844)
- content-manager: preserve i18n locale on navigation and guard component schema race condition (#26167)
- core: preserve self-referential relation order on child publish (#26838)
- core: preserve published self-referential relation state (#26932)
- database: prevent crash when reordering and removing a relation in the same save (#26210)
- documentation: allow array populate parameter (#26358)
- examples: enable strict TypeScript in dev sandboxes (#26780)
- generators: detect plugin language from output path (#26750)
- review-workflows: add server eslint config and declare server deps (#26800)
- strapi: resolve admin Vite aliases from @strapi/admin closure (#26756)
- typescript-utils: emit namespace keyword instead of deprecated module (#26195)
- upload: accept single-file arrays on replacement (#26405)
- utils: align polymorphic populate validation with conversion (#26848)
- utils: return 400 instead of 500 for invalid sort order/params (#26907)
π Documentation Changes
- Highlight destructive operation in transfer engine (#25081)
βοΈ Chore
- fix lint warnings (#26818)
- deps: bump nodemailer from 8.0.9 to 9.0.1 (#26721)
- deps: bump qs from 6.15.2 to 6.15.3 (#26846)
- deps: bump tar from 7.5.16 to 7.5.17 (#26847)
- deps: bump js-yaml from 3.14.2 to 3.15.0 (#26888)
- deps: bump tar from 7.5.17 to 7.5.18 (#26887)
- deps-dev: bump eslint-plugin-prettier in the eslint group (#26828)
- deps-dev: bump @rollup/plugin-swc in the rollup group (#26906)
- deps-dev: align @babel/* family to 7.29.7 (#26911)
π Enhancement
- ci: block community PRs targeting main (#26854)
- content-manager: keep sidebar primary actions and search bar fixed⦠(#26867)
β€οΈ Thank You
- Adrien L @Adzouz
- Alexandre Noblet @AlexNbl27
- Andrei L @unrevised6419
- Aryan Katiyar @Kelpy2004
- Bassel Kanso
- Ben Irvin
- jasleenkaur-qed42
- Maksim Zhukau @MaksZhukov
- Mateusz Lesiak
- mathildeleg @mathildeleg
- mehmet turac @mturac
- Nico AndrΓ©
- santichausis @santichausis
- Shivam S @BIGSUS24
- Steven @compair-steven
- Zyggzz @Zyggzzz
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Strapi
The most advanced open-source Content Management Framework (headless-CMS) to build powerful API with no effort.
Beta — feedback welcome: [email protected]