v5.53.0
Release includes new audit logs export functionality, content-release action tracking, and numerous bug fixes across content-type-builder, upload, email, and MCP components. MCP clients now properly advertise tools as JSON Schema 2020-12 instead of dropping them.
5.53.0 (2026-09-09)
🚀 New feature
- Add an export audit logs button (#27427)
- content-releases: record release actions in audit logs (#27436, #27436)
🔥 Bug fix
- close the drawer on click on interactive elements (4573d58806)
- transfer configuration import discards the error that caused it (#27565)
- misc users-permissions and admin (2f3595fe61)
- content-type-builder: default new private fields to not searchable (#27482)
- email-sendmail: disable file and URL access for attachments (#27430)
- mcp: bump mcp sdk@2 to stop clients droping advertised tools (#27505)
- strapi: --sourcemap flag has no effect on the admin build (#27545)
- upload: reserve list space for the bulk actions bar (#27509)
- upload: filter the row replace picker by the asset's mime (#27508)
- upload: bound the focal point fields to the crop area (#27496)
- upload: folder navigation resets media library list scroll and p… (#27449)
- upload: keep the drawer open when a control behind is pressed (3ebdde0965)
- upload: only a primary-button press dismisses the drawer (3b81103657)
- upload: contain fast provider rejections in upload batches (#27543)
⚙️ Chore
- release v5.52.3 update develop (2695ff53ff)
- .github/draft-release: run the workflow more than once per release (#27573)
- ci: pin all GitHub Actions to latest versions by commit SHA (37d9438606)
- ci: add the draft-release action and workflow (#27562)
- deps: bump undici from 6.28.0 to 6.28.1 (#27568)
- lint: make oxlint a blocking ci gate (#27450)
⚠️ Changes to be aware of
MCP clients no longer drop advertised tools
The built-in MCP server now advertises tools as JSON Schema 2020-12, so strict clients that previously dropped every tool keep the full list. If you register custom MCP tools or prompts: unknown or unauthorized tool calls now return JSON-RPC error -32602 instead of isError: true; extra.sendNotification and extra.sendRequest are gone; and one prompt argsSchema that cannot become JSON Schema (for example z.date()) hides every prompt from prompts/list.
(#27505)
❤️ Thank You
- Adrien L @Adzouz
- Adrien Lepoutre @Adzouz
- Andrei L @unrevised6419
- Arthur Moreau
- Bassel Kanso
- Gonzalo Andres Garcia @gonbaum
- Jamie Howard @jhoward1994
- Jan Kahmen @kah-ja
- Moutaz-homsi
- Nico André
- Simon Norris
Source: original entry ↗
More from Strapi
Follow Strapi to get its new changes in your feed and email digest.
v5.58.0 Release
Strapi 5.58.0 includes new audit logging for failed admin logins and SSO auto-registration, license details in the admin panel, and numerous bug fixes across content management, upload handling, and core services. Multiple dependency updates address security advisories in axios and handlebars.
v5.57.0 Release
Strapi 5.57.0 introduces new CLI enterprise install command, preserves data when renaming attributes, records workflow actions in audit logs, and fixes numerous bugs across admin, content manager, media library, and core components including performance improvements and security patches.
v5.56.0
Strapi 5.56.0 adds audit logging for admin account and password actions, improves webhook auditing, and fixes multiple bugs in content management and relations. This release also updates dependencies, enhances the upload module with custom AI provider support, and includes various UI and performance improvements.