This release adds 2 notable features for engineering teams evaluating rollout.
Published 3d
Productivity & Wikis
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
api
cms
cms-framework
content-management
content-management-system
customizable
+12 more
web
graphql
headless-cms
jamstack
javascript
mysql
no-code
nodejs
posgresql
rest
strapi
typescript
Affected surfaces
auth
deps
Summary
AI summaryUpdates 🔥 Bug fix, ❤️ Thank You, and ⚙️ Chore across a mixed release.
Full changelog
5.51.0 (2026-07-23)
🚀 New feature
- data-transfer: add exclude/only content type CLI filters (#26915)
- i18n: add locale codes for Abkhazian and Circassian (Adyghe and Kabardian) (#26255)
🔥 Bug fix
- preserve order when reordering a relation to the start of a list (#26112)
- singleton modules for consistent runtime instances (#27064)
- admin: admin session token respects configured admin-cookie-path (#25478, #26300)
- admin: make plugin/setting "Select all" work in admin token permissions (#27027)
- admin: revalidate SPA shell to avoid stale chunk imports (#27039)
- admin: expire admin reset-password tokens (#27020)
- admin: improve SSO session metadata and logout revocation (#26872)
- admin: blank admin in develop from prism language prebundle (#27086)
- admin: SSO remote logout infinite redirect (cookie path) (#27100)
- content-manager: pre-bundle prism language plugins for all apps (#26978)
- content-manager: respect disconnected draft relations in publish warning (#26871)
- content-manager: validate items passed to plugin action APIs (#27008)
- content-manager: skip blocks editor remount on equal value echoes (#27042)
- content-manager: keep preview button mounted during document churn (#27043)
- core: enforce default maxLength 255 for string fields (#26128)
- core: preserve draft relation order in discard-drafts migration (#26851)
- core: propagate server updatedAt in addFirstPublishedAtToDraft to avoid false modified flag (#26525)
- create-strapi-app: npm ci fails on fresh npm scaffold (#27038)
- create-strapi-app: missing @strapi/database dependency breaks pnpm builds (#27083)
- database: apply MySQL dialect configure to resolved connection functions (#26646)
- graphql: include private fields in mutation inputs (#26489)
- types: update LoadedPlugin type to understand factories (#25298)
- upload: report real upload progress in the media library (#27045)
- users-permissions: use correct i18n ids for role notifications (#27044)
- users-permissions: fix role notification translations (#26933)
⚙️ Chore
- merge main into develop after 5.50.2 release (9d93244f7e)
- deps: bump ws from 8.21.0 to 8.21.1 (#27030)
- deps: bump tar from 7.5.18 to 7.5.20 (#27029)
- deps: bump linkify-it from 5.0.0 to 5.0.2 (#26886)
- email-mailgun: migrate unit tests from jest to vitest (#27069)
- types: per-client database connection types (#26949)
- users-permissions: replace grant/purest/jwk-to-pem with fetch and crypto (#26820)
- utils: upgrade preferred-pm to v5 with dynamic import (#26822)
❤️ Thank You
- Akash Santra @Akash504-ai
- akash-dabhi-qed @akash-dabhi-qed
- Akash! @Akash5908
- Andrei L @unrevised6419
- Andrew Bone
- Ben Irvin
- deferral-opium
- Dijedon @dijedontahiri
- Giulio Montagner @giu1io
- Jamie Howard @jhoward1994
- jasleenkaur-qed42 @jasleenkaur-qed42
- KaiNative
- Maher @abaza738
- Mohammad Arshid @Mohammadarshid
- Rowan-Paul
- Sami Waseem @AbdulSamiWaseem
- santichausis @santichausis
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Strapi
The most advanced open-source Content Management Framework (headless-CMS) to build powerful API with no effort.
Beta — feedback welcome: [email protected]