v5.47.1
This release includes bug fixes for deleteMany filters with relations, i18n plugin translations, ajv ReDoS vulnerability, and various admin and content-manager fixes. It also includes dependency upgrades and performance improvements through lazy-loading optimizations.
5.47.1 (2026-06-03)
🔥 Bug fix
- deleteMany respects filters combined with relation (#25420)
- improve i18n plugin translations (#22714)
- resolve ajv ReDoS vulnerability by forcing ajv@8.18.0 (#26141)
- admin: use ISO 639-1 da for Danish admin locale (#26322)
- content-manager: documentId(s) shown for relation when entry title set to numeric field (#25622)
- content-manager: guard repeatable field .map() crash on relation… (#26421)
- content-manager: fix frontend validation if not using "draft and publish" (#25300)
- core: skip session secret check for API-only apps (#26390)
- data-transfer: preserve core store when config stage is excluded (#26484)
- deps: upgrade
koa-sessionto v7.0.2 (#26140) - homepage: homepage count-documents slow on large D&P tables (#26370)
- i18n: preserve non-localized field inheritance (#26367)
- strapi: preserve tsbuildinfo across develop restarts (#26264)
- upgrade: simplify registry URL resolution (#25027)
📚 Documentation Changes
- security: overhaul vulnerability reporting policy (#26393)
⚙️ Chore
- admin: remove punycode dependency (#26189)
- deps: bump axios from 1.16.0 to 1.16.1 (#26456)
- deps: bump express-rate-limit from 8.2.1 to 8.5.2 (#26457)
- deps: bump @hono/node-server from 1.19.9 to 1.19.14 (#26458)
- deps: bump qs from 6.15.0 to 6.15.2 (#26417)
- deps: bump @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4 (#26256)
- deps: bump hono from 4.11.9 to 4.12.23 (#26455)
- deps: bump @tootallnate/once from 2.0.0 to 2.0.1 (#26218)
- docs: migrate docusaurus config to typescript (#26471)
- mcp: clarify registration lifecycle and simplify error messages (#26517)
- upload: remove aiMetadataJobsCleanup cron job (#26442)
💅 Enhancement
- core: lazy-load node-schedule and umzug at boot (#26267)
- core: eliminate @strapi/typescript-utils from boot path (#26270)
- core/core: lazy-load typescript-utils in Strapi and compile (#26266)
- strapi: hash-cache peer-dep check; demote env-vars log to debug (#26269)
- strapi: lazy-require worker-only deps in dev primary (#26268)
❤️ Thank You
- Andrei L @unrevised6419
- Aurélien GEORGET
- Ben Irvin @innerdvations
- DMehaffy @derrickmehaffy
- Jamie Howard @jhoward1994
- Jayesh Patel @itsmejay80
- Jonas Thelemann
- José Luis @SalahAdDin
- markkaylor @markkaylor
- mehmet turac @mturac
- Michael Olund
- Nico André @nclsndr
- Paul Bratslavsky @PaulBratslavsky
- pksr @pksr
- Subh aush singh
- Vishal Kumar Singh @singhvishalkr
- Weijie Sun @swjcpy
Source: original entry ↗
More from Strapi
Follow Strapi to get its new changes in your feed and email digest.
v5.57.0 Release
Strapi 5.57.0 introduces new CLI enterprise install command, preserves data when renaming attributes, records workflow actions in audit logs, and fixes numerous bugs across admin, content manager, media library, and core components including performance improvements and security patches.
v5.56.0
Strapi 5.56.0 adds audit logging for admin account and password actions, improves webhook auditing, and fixes multiple bugs in content management and relations. This release also updates dependencies, enhances the upload module with custom AI provider support, and includes various UI and performance improvements.
v5.55.1 — Documentation plugin performance hotfix
Hotfix release that reverts a change causing performance degradation in projects using the documentation plugin. Restores properties for repeated relation targets.