Skip to content

fix(deps): update dependency create-strapi-app to v5#125

Open
renovate[bot] wants to merge 1 commit intodevelopfrom
renovate/major-npm-dependencies-updates
Open

fix(deps): update dependency create-strapi-app to v5#125
renovate[bot] wants to merge 1 commit intodevelopfrom
renovate/major-npm-dependencies-updates

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 27, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
create-strapi-app (source) 4.6.* → 5.40.* age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

strapi/strapi (create-strapi-app)

v5.40.0

Compare Source

5.40.0 (2026-03-18)

🚀 New feature
  • add package manager dropdown before version in bug report template (#​25679)
🔥 Bug fix
  • add maxwidth to documentactions menu (#​25664)
  • formatErrorMessages array values formatting (#​24196)
  • admin: alias singleton frontend deps in vite (#​25682)
  • content-manager: reduce excessive rerendering in components and dynamic zones (#​25631)
  • content-manager: skip non-draftAndPublish relations in countDraftRelations (#​25453)
  • i18n: show locale key in disabled select when editing locale (#​25124)
📚 Documentation Changes
⚙️ Chore
  • use https instead of git url in package.repository.url (#​25698)
  • content-manager: optimize relations handling in EditView component (#​25683)
  • core: parallelize and cache dynamic zone populate (#​25685)
💅 Enhancement
  • resolved filter editability on clicking filter tag (#​24057)
  • core: remove beta on Document API, enforce deprecation on EntityService API (#​25744)
❤️ Thank You

v5.39.0

Compare Source

5.39.0 (2026-03-11)

🚀 New feature
  • expand accordion by default when inserting a new component in a document (#​24230)
  • content-manager: filter list view by publication status (#​25510)
🔥 Bug fix
  • added shift+tab to blocks editors (#​24122)
  • single type publish permission error (#​24754)
  • es translations (#​25655)
  • typo 'compatability' to 'compatibility' in error messages (#​25535)
  • content-manager: export ContentManagerPlugin type for plugin dev… (#​24149)
  • content-manager: reduce excessive rerendering in relation fields (#​25623)
  • content-manager: reduce rerenders for conditional fields (#​25617)
  • content-releases: publish in right order to preserve relations (#​25551)
  • guided-tour: no overlay in dark mode (#​25485)
  • openapi: correctly merge plugin router prefix with route paths (#​25616)
  • types: fix document findOne params (#​25613)
  • upload: add crossOrigin attribute to image preview (#​24946)
⚙️ Chore
  • upgrade to glob 13 (#​25610)
  • upgrade better-sqlite3 to 12.6.2 (#​25611)
  • remove eslint-plugin-rxjs (#​25612)
  • upgrade koa to 20.8.4 and minimatch to 10.2.4 (#​25624)
  • eslintignore coverage (#​25649)
  • stop adding issues to GitHub projects in issues_handleLabel workflow (#​25677)
  • update package metadata (#​25599)
  • *: register vitest dependency in Yarn catalog (#​25400)
  • core/permissions: ensure engine properly merges conditions (#​25569)
  • deps: bump js-yaml from 3.14.1 to 3.14.2 (#​24858)
  • deps: bump qs from 6.14.2 to 6.15.0 (#​25555)
  • deps: bump jws from 3.2.2 to 3.2.3 (#​24981)
  • deps: bump elliptic from 6.5.7 to 6.6.1 (#​24803)
  • deps: bump serialize-javascript from 6.0.1 to 6.0.2 (#​24841)
  • deps: bump mdast-util-to-hast from 13.2.0 to 13.2.1 (#​24950)
  • deps: bump jws from 3.2.2 to 3.2.3 (#​25652)
  • deps: bump tar from 7.5.9 to 7.5.10 (#​25642)
  • deps: bump serialize-javascript from 6.0.1 to 6.0.2 (#​25653)
🚨 Security
  • upload: improve mimetype detection for uploads (#​25177)
❤️ Thank You

v5.38.1

Compare Source

5.38.1 (2026-03-11)

Superseded on March 11, 2026 by v5.39.0 due to versioning mistake.
Please use v5.39.0.

v5.38.0

Compare Source

5.38.0 (2026-03-04)

🚀 New feature
  • content-manager: add relationOpenMode setting (modal/page/newTab) (#​25433)
  • email-nodemailer: upgrade to Nodemailer v8 with advanced email features and Admin UI capabilities (#​25392)
  • i18n: add missing french translations (#​23093)
🔥 Bug fix
  • typo 'recieved' to 'received' across codebase (#​25541)
  • markdown editor number list is created with wrong numbers (#​24631)
  • add i18n for boolean cell values (#​22314)
  • folder subtitles for folders without assets or subfolders (#​22694)
  • vite and webpack config when linking ds locally (#​25530)
  • types: add missing typing for proxy.koa config (#​25575)
⚙️ Chore
❤️ Thank You

v5.37.1

Compare Source

5.37.1 (2026-02-26)

🔥 Bug fix
  • core: preserve component clone integrity in discard-drafts migration
❤️ Thank You

v5.37.0

Compare Source

5.37.0 (2026-02-26)

🔥 Bug fix
  • improve subnav on mobile so it works with banner (#​25450)
  • layout page broken (#​25501)
  • add design-system to config (#​25435)
  • radix ui dialog dependency version (#​25549)
📚 Documentation Changes
  • fix typos in content-releases frontend intro (#​25471)
⚙️ Chore
  • add bot and contributor detection to community-label workflow (#​25497)
    (#​25494))
  • docs: revise README for AWS S3 provider updates (#​25449)
💅 Enhancement
🚨 Security
  • feature: add strictParam, addQueryParams, addInputParams (#​25528)
  • deps: upgrade to tar 7.5.9 (#​25504)
  • deps: upgrade multiple dependencies (#​25506)
  • deps: bump bn.js from 4.12.0 to 4.12.3 (#​25521)
  • deps: bump minimatch from 9.0.3 to 10.2.1 ([#​25494]
❤️ Thank You

v5.36.1

Compare Source

5.36.1 (2026-02-18)

🔥 Bug fix
  • handle undefined tours property (#​25290)
  • core: handle negative and zero min/max validation for number fields (#​25409)
  • history: improve error handling and batch deletion in cron jobs (#​25425)
  • migrations: speed up discard-drafts with bulk batches (#​25293)
  • ts: ignore generated .strapi folder (#​25086)
  • utils: bump preferred-pm to fix npm workspace detection (#​25406)
⚙️ Chore
  • add --no-build-admin option to 'strapi develop' command (#​25415)
  • */vitest: introduce Vitest and vitest-config package (#​25286)
  • ci: redirect question issues to GitHub Discussions (#​25441)
  • deps: bump @​casl/ability from 6.5.0 to 6.7.5 (#​25430)
  • deps: bump qs from 6.14.1 to 6.14.2 (#​25444)
🚨 Security
❤️ Thank You

v5.36.0

Compare Source

5.36.0 (2026-02-11)

🚀 New feature
  • persistent list view settings (#​24246)
  • strapi/create: type strapi configs (#​21859)
  • upload-aws-s3: add extended configuration for S3-compatible providers (#​25263)
🔥 Bug fix
  • responsive drawer for content history (#​25344)
  • scrolling in sidenav also scroll content (#​25379)
  • match database package version (#​25389)
  • content-manager: preserve origin id when cloning, to fetch relations so they are corrected re-populated (#​25307)
  • preview-config: allow and await for async handler (#​25396)
  • upload-aws-s3: use baseUrl even if upload location lacks protocol (#​23400)
💅 Enhancement
  • improve mobile design for edit view forms (#​25320)
  • create-strapi-app: add --non-interactive mode for CI and scripts (#​25373)
🚨 Security
❤️ Thank You

v5.35.0

Compare Source

5.35.0 (2026-02-04)

🚀 New feature
  • upload: add focal point picker for images (#​25267)
🔥 Bug fix
  • prevent bulk publish modal from closing during API refetch (#​24632)
  • update ko.json (#​23501)
  • mobile actions drawer in content manager edit view (#​25243)
  • upload: prevent asset deletion when clicking cancel on EditAssetDialog (#​25318)
⚙️ Chore
💅 Enhancement
  • improve mobile design for content history forms (#​25338)
🚨 Security
  • update multiple subdependencies (#​25337)
❤️ Thank You

v5.34.0

Compare Source

5.34.0 (2026-01-28)

🚀 New feature
  • update german translations for various components (#​24143)
  • upload: add retroactive ai metadata generation (#​25066)
🔥 Bug fix
  • add missing labels to IT locale (#​25217)
  • form elements mobile adjustments (#​25202)
  • responsive cm header (#​25203)
  • run orphan removal for the 'related_type' column (#​24833)
  • adjust padding for cm subnav (#​25253)
  • admin: format input error message with values (#​23932)
  • i18n: ai translation losing unsupported fields (#​25247)
  • menu: render external links as anchors (#​25269)
📚 Documentation Changes
  • clarify strapi installation instructions in README (#​25016)
  • CONTRIBUTING: set link to latest version of .commitlintrc.ts (#​25224)
⚙️ Chore
💅 Enhancement
  • responsiveness consistency for subnav (#​25107)
🚨 Security
  • update pinned mdast-utils (#​25227)
  • update pinned js-yaml, node-forge, tmp, and more (#​25228)
❤️ Thank You

v5.33.4

Compare Source

5.33.4 (2026-01-21)

🔥 Bug fix
  • await the async map inside v5 release actions migration (#​25125)
  • paste multi line code in blocks editor (#​25184)
  • reorder components and dz on mobile (#​25197)
  • missing property breaking build (#​25205)
  • added multiple prop for medialibrarydialog (#​25069)
  • handle component structure properly for conditional fields (#​25219)
⚙️ Chore
  • refactor blocks editor block api (#​25176)
  • bump design-system to v2.1.2 (#​25174)
  • remove all occurances of aiLicenseKey (#​24908)
  • refining the API request tracker to record success and statusCode (#​24906)
  • update pinned undici (#​25211)
  • integrate subscription info in backend trackers (#​24909)
  • deps: bump undici from 6.21.2 to 6.23.0 (#​25193)
💅 Enhancement
  • responsiveness consistency for main nav (#​25104)
❤️ Thank You

v5.33.3

Compare Source

5.33.3 (2026-01-14)

🔥 Bug fix
  • add token refresh logic for react query (#​25053)
  • env helper default and generic types (#​24881)
  • documentation: align with Data.ID (#​24976)
  • upload: content-api does not check file type restriction config (#​25167)
  • users-permissions: implement session revocation on password changes (#​25168)
📚 Documentation Changes
  • add blocks editor contributor docs (#​25135)
  • add live preview contributor docs (#​25152)
  • fix typo 'recieve' -> 'receive' in layouts documentation (#​25170)
⚙️ Chore
  • update multiple packages to resolve vuln warnings (#​25137)
  • update security policy for strapi version 4 (#​24751)
❤️ Thank You

v5.33.2

Compare Source

⚠️ Security Warning and Notice ⚠️

Strapi was made aware of a vulnerably that were patched in this release, for now we are going to delay the detailed disclosure of the exact details on how to exploit it and how it was patched to give time for users to upgrade before we do public disclosure.

5.33.2 (2026-01-08)

🔥 Bug fix
  • content-type-builder: make write APIs accessible in devMode only (#​25132)
⚙️ Chore
  • remove unused media lib files (115aba1855)
  • use design-system variables for preview (#​25064)
❤️ Thank You

v5.33.1

Compare Source

5.33.1 (2025-12-29)

🔥 Bug fix
  • update cloud request limit (#​25040)
  • adapt header height when title changes (#​25028)
  • excessive rerenders on edit view (#​25029)
  • dynamically replace favicon if provided in app config (#​25012)
  • update iso-locales.json with en-mm (#​24261)
  • subnav height cutting list when too many elements (#​24753)
  • globe icon is shown even if field is not localized (#​24890)
  • validation issue in hidden fields when publishing (#​24482)
  • optimize images (#​25047)
  • types: adding missing config types (#​24905)
⚙️ Chore
  • add i18 languages (#​23845)
  • add Bosnian and Mongolian Cyrillic language support (#​23928)
💅 Enhancement
  • make the publishedAt attribute visible (#​24619)
❤️ Thank You

v5.33.0

Compare Source

5.33.0 (2025-12-17)

🚀 New feature
  • update iso-locales.json with pap & regional variants (#​25000)
  • core/core: content-type id schema is number | string (#​24978)
  • i18n: add Russian translations for all admin components (#​24077)
  • plugins/i18n: add missing locale for Luxembourgish (lb-LU) (#​22551)
🔥 Bug fix
  • added scrollbar in media modal (#​24856)
  • layout header to properly handle long text without breaking the layout (#​24191)
  • edit views configuration not clear (#​24980)
  • admin: guidedTourMeta can be undefined and error (#​25021)
  • graphql: precompute built-in query fields at schema build (#​25017)
  • tests/scripts: disable gpgsign for e2e commits (#​24959)
⚙️ Chore
  • .cursor: add worktrees support (#​25025)
  • docs: reference contributor docs link (#​25026)
❤️ Thank You

v5.32.0

Compare Source

5.32.0 (2025-12-10)

🚀 New feature
  • core: adding clear button to boolean toggle (#​24836)
  • users-permissions: add refresh and logout actions to default permissions (#​24877)
🔥 Bug fix
  • playwright storage state (416a81b44e)
  • don't translate enums with ai (#​24965)
  • change several file field types from string to text (#​24931)
  • added media to list of non localized fields (#​24967)
  • content-manager: blocks editor state always contains at least a paragraph block (#​24990)
  • content-type-builder: disable display of invisible content types (#​24970)
  • core/upload: rollback file name to string (#​25004)
  • graphql: graphql performance regression (#​25017)
📚 Documentation Changes
⚙️ Chore
❤️ Thank You

v5.31.3

Compare Source

5.31.3 (2025-12-03)

🔥 Bug fix
  • enter key trigger in edit view form (#​24744)
  • cli: transfer command ignores CLI flags and prompts unnecessarily (#​24879)
  • content-type-builder: ai chat message width and submit behavior (#​24918)
  • docs: enable contributor docs website to build locally (#​24878)
  • graphql: scope status filter inheritance to query tree (#​24826)
⚙️ Chore
  • update DS version to stable (18948ab6b4)
  • update new Vietnamese keys and translations for the admin panel (#​23710)
  • replace deprecated Buffer.slice() with subarray() in encryption utils (#​24904)
  • admin: isolate ai apis to ee folder (#​24834)
❤️ Thank You

v5.31.2

Compare Source

5.31.2 (2025-11-20)

🔥 Hotfix
  • revert: discard drafts migration (#​24895)

v5.31.1

Compare Source

5.31.1 (2025-11-19)

🚀 New feature
  • media-library: add aria-selected and click handlers for better … (#​23475)
🔥 Bug fix
  • accessible responsive left menu (8f6b0444b7)
  • bulk unpublish when creating a new locale (#​24821)
  • modifying&publishing locale should only update that locale (#​24648)
  • include locales to get last modified entries in widgets (#​24647)
  • optional chaining in getRetentionDays function (#​24830)
  • edit view dialog ui (#​23353)
  • show relations per locale in listview (#​24805)
  • global translation keys for bulk move modal (#​22773)
  • missing translations (#​22800)
  • added fix for not performing bulk actions when it is disabled (#​21792)
  • warn user on page reload/close if edit view has unsaved data (3c9d7923b3)
  • add error notification when AI metadata save fails (#​24611)
  • unable to customize cors settings in graphql plugin (#​22852)
  • typescript error front test (#​24845)
  • contentTypes generation fails on negative number (#​24056)
  • unable to clear and save time only fields in the content manager… (#​24675)
  • add missing semicolon to core-contoller ts template (#​24079)
  • prevent list from jumping to top when selecting checkbox (#​24146)
  • admin: ai admin config can be set to true for non growth license (#​24835)
  • admin: ai disabled by default for growth license (#​24868)
  • content-manager: preserve fields with visible:false during form submission (#​24849)
  • core: max length on short text (#​24794)
  • core: allow description and placeholder be empty (#​24799)
  • db: replace discardDrafts calls in v5 migration with queries (#​24798)
  • upload: file-type does not support commonjs (#​24848)
⚙️ Chore
  • improve combobox to add new locale (#​24806)
  • replace act() calls with the right testing library api when it is necessary (b5ed02af8c)
  • content-manager: fix deprecation in Tooltip usage (#​23029)
  • deps: bump cloudinary from 1.41.0 to 2.7.0 (#​24831)
  • deps: bump tar-fs from 2.1.1 to 2.1.4 (#​24844)
💅 Enhancement
  • improve package registry URL determination during Strapi upgrade (#​22913)
❤️ Thank You

Please note, this version has been deprecated on npm due to a data loss issue found within a bug fix.

v5.31.0

Compare Source

5.31.0 (2025-11-12)

🚀 New feature
  • upload: upload file type restriction (#​24573)
🔥 Bug fix
  • hint for min and max value add characters word to text fields only (#​24772)
  • get draft relations count from document with locale (#​24785)
⚙️ Chore
❤️ Thank You

v5.30.1

Compare Source

5.30.1 (2025-11-05)

🚀 New feature
  • add support for new icon components that are already in the design system (8c44e3ecce)
🔥 Bug fix
  • rerendering and flickering issue on i18n fields (#​24605)
  • nps survey responsiveness (c422f70d19)
  • unable to click on the last row in media library modal (#​24633)
  • reset and publish enum default value (#​24708)
  • add script to configure husky on setup (#​24714)
  • prefill non translatable fields when creating new document locale (#​24659)
  • pagination count on query with locale=* (#​24699)
  • double go back button on mobile (6d6d78f1c4)
  • navigate reset on query param change (93242b3945)
  • update pt-br translations (#​22400)
  • prevent admins from deleting themselves (#​24739)
  • --no-verify flag on release commit (ef538d66b1)
  • TypeScript: allow documentId as value in fields for document api (#​22738)
⚙️ Chore
💅 Enhancement
❤️ Thank You

v5.30.0

Compare Source

5.30.0 (2025-10-30)

🚀 New feature
  • added additional attributes for link in richtext json blocks (#​23431)
  • i18n: update all translatable content (#​24658)
🔥 Bug fix
  • extending csp configs (#​24571)
  • input types (7a90cbc400)
  • clean-component-join-table to fix non-DP entries not removing published relations (#​24467)
  • ios input zoom on focus (06dbbbd829)
  • re-enable component cleanup script (#​24652)
  • don't trigger translations with no translateable content (#​24718)
  • i18n: locale picker not showing all authorized locales (#​24325)
  • i18n: use query engine to avoid marking published as modified (#​24716)
  • i18n: locale selector does not sort default locale first (#​24722)
  • i18n: revert query engine to use document service (#​24726)
⚙️ Chore
  • restore complex attributes (b278fe35b6)
  • add dynamic zone to about schema (09f2d1f056)
  • remove unstableAILocalizations future flag (#​24704)
  • i18n: populate media fields (#​24705)
  • i18n: dispatch tracking event for ai feature (#​24707)
  • upload: add isAIMediaLibraryConfigured to every tracking event (#​24671)
💅 Enhancement
❤️ Thank You

v5.29.0

Compare Source

5.29.0 (2025-10-22)

🚀 New feature
🔥 Bug fix
  • improve keyboard accessibility in Content-Type Builder (44b76c127c)
  • added fix for i18n tooltips are not working (#​21978)
  • locales in localpicker component not order alphabetically (#​22417)
  • add await to prevent redirect during test (#​24581)
  • available locales when creating new lang entry (#​24577)
  • missing description field when configuring dynamic zones (#​21738)
  • number and boolean values in JSON fields break admin panel (#​22737)
  • fixed the margin issue for displayed field list in collection types setting (#​22422)
  • search in Content Type Builder and Content Manager doesn't return all results (#​24173)
  • display error details when loading email provider (#​24588)
  • add missing translation for email template title (#​24589)
  • pass context to cookie options in authentication and session-auth utilities (#​24602)
  • misleading error message when publish empty required components (#​24608)
  • responsive subnav (def6f0caab)
  • fill from other locale creates empty components (6477a820a0)
  • behaviour of i18n "Available In" column (#​24620)
  • show error notification when upload settings save fails (c1592b8bd8)
  • invalidate all documents cache after a release publish (#​24618)
  • content-manager: non-unique keys for Dynamic Zone add above/below menu items (#​22270)
⚙️ Chore
💅 Enhancement
❤️ Thank You

v5.28.0

Compare Source

5.28.0 (2025-10-15)

🚀 New feature
🔥 Bug fix
  • reset selection when folder changes to hide bulk actions (#​24533)
  • find published relations on components (6a5663977e)
  • remove extra 'x' in the template (9360ca44a8)
  • display name of admin user instead of id in filters (#​24532)
  • ci: correct message from "close-inactive" job (#​24391)
  • upload: disable the edit button on media input if disabled (#​24267)
  • upload: broken link in breadcrumb for deeply nested folders (#​22914)
📚 Documentation Changes

Configuration

📅 Schedule: Branch creation - "before 8am on monday" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch 3 times, most recently from 552df15 to 631b146 Compare November 5, 2025 19:38
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch 2 times, most recently from 4e1aa45 to c9da5af Compare November 18, 2025 22:53
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch 2 times, most recently from 1d13147 to e3b2bd3 Compare November 20, 2025 14:08
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch from e3b2bd3 to c87fe97 Compare December 3, 2025 17:37
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch 2 times, most recently from 05acf37 to aba4860 Compare December 17, 2025 20:55
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch from aba4860 to 1c50fe0 Compare December 29, 2025 12:04
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch 2 times, most recently from a4a36d6 to 740ae4c Compare January 14, 2026 13:12
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch 3 times, most recently from 3157106 to 917ab47 Compare January 23, 2026 18:36
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch from 917ab47 to c929600 Compare January 28, 2026 17:58
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch 2 times, most recently from 3082488 to c872031 Compare February 11, 2026 18:00
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch from c872031 to 75a273a Compare February 18, 2026 18:51
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch 3 times, most recently from 84b5bb7 to 20d2e0c Compare March 4, 2026 16:47
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch 2 times, most recently from e4b459c to fe7c266 Compare March 11, 2026 13:21
@renovate renovate bot force-pushed the renovate/major-npm-dependencies-updates branch from fe7c266 to 9b59465 Compare March 18, 2026 17:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants