v5.52.0
Added 3
- Record MCP actions in audit logs
- Add locale codes for Corsican in i18n
- Enhance Koa app configuration with proxy settings
Changed 4
- Replace umzug with internal migration runner in database
- Memoize private attributes in sanitizeOutput
- Stop using a thrown Error to test for boolean-like populate keys
- Memoize scope decisions and keep the relation visitor sync
Fixed 13
- Fix typescript pipeline issue
- Dedupe react-dnd in the admin bundle
- Address filter entries by position so duplicate filter chips behave correctly
- Merge query populate paths to preserve nested populate
- Prevent editing relations from removing inverse field conditions
- Clear stale validation errors when the form data is replaced
- Skip orphaned links and isolate FK failures on restore in data-transfer
- Skip unregistered RBAC conditions during ability generation in permissions
- Allowlist Vite optimizeDeps.exclude for plugin UI kits
- Refresh folder header count on upload and delete in upload
- Guard cache-buster on signed URLs in new-ML AssetCropEditor
- Target current asset in drawer actions in upload
- Keep infinite scroll loading when the sentinel stays visible in upload
Security 2
- Bump @modelcontextprotocol/sdk to 1.30.0
- Bump sharp to 0.35.3 for libvips CVEs in upload
5.52.0 (2026-08-12)
🚀 New feature
- record MCP actions in audit logs (#27151)
- i18n: add locale codes for Corsican (#27099)
- server: enhance Koa app configuration with proxy settings (#26409)
🔥 Bug fix
- typescript pipeline issue (99a723d024)
- admin: dedupe react-dnd in the admin bundle (#27217)
- admin: address filter entries by position so duplicate filter chips behave (#27188)
- content-manager: merge query populate paths to preserve nested populate (#27236)
- content-type-builder: editing relations removes inverse field conditions (#27226)
- content-type-builder: clear stale validation errors when the form data is replaced (#27222)
- data-transfer: skip orphaned links and isolate FK failures on restore (#26852)
- permissions: skip unregistered RBAC conditions during ability generation (#27282)
- strapi: allowlist Vite optimizeDeps.exclude for plugin UI kits (#27264)
- upload: refresh folder header count on upload & delete (CMS-1563) (#27231)
- upload: guard cache-buster on signed URLs in new-ML AssetCropEditor (#27228)
- upload: target current asset in drawer actions (#27259)
- upload: keep infinite scroll loading when the sentinel stays visible (CMS-1562) (#27230)
⚙️ Chore
- release v5.51.2 update develop (101643bcfb)
- bump design system version (#27292)
- cloud-cli: migrate unit tests from jest to vitest (#27218)
- database: replace umzug with internal migration runner (#26824)
- deps: bump ip-address from 10.2.0 to 10.4.0 (#27238)
- deps: bump ws from 8.21.1 to 8.21.2 (#27239)
- deps: bump hono from 4.12.27 to 4.13.0 (#27243)
- deps: bump prettier from 3.3.3 to 3.6.2 (#27244)
- deps: bump direct deps and yarn dedupe (#27291)
- deps: bump nanoid from 3.3.16 to 3.3.18 (#27329)
- permissions: migrate unit tests from jest to vitest (#27219)
- sentry: migrate unit tests from jest to vitest (#27252)
- tooling: add admin translation verification (#26960)
- upload-aws-s3: migrate unit tests from jest to vitest (#27216)
💅 Enhancement
- utils: memoize private attributes in sanitizeOutput (#27140)
- utils: stop using a thrown Error to test for boolean-like populate keys (#27234)
- utils: memoize scope decisions and keep the relation visitor sync (#27145)
🚨 Security
- deps: bump @modelcontextprotocol/sdk to 1.30.0 (#27301)
- upload: bump sharp to 0.35.3 for libvips CVEs (#27255)
❤️ Thank You
- Adrien L @Adzouz
- Adrien Lepoutre @Adzouz
- Ayoub Hidri @ayhid
- Bassel Kanso
- Ben Irvin
- DMehaffy
- Giulio Montagner @giu1io
- Gonzalo Andres Garcia @gonbaum
- Lazizbek Ergashev @lazerg
- Markus @MarkusAbtion
- PetruMagdeleine
- Sjouke de Vries @sjoukedv
- Ziyi @butcherZ