Skip to content

build(deps): bump the strapi group across 1 directory with 4 updates#243

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/strapi-07bd92011e
Open

build(deps): bump the strapi group across 1 directory with 4 updates#243
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/strapi-07bd92011e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the strapi group with 4 updates in the / directory: @strapi/plugin-cloud, @strapi/plugin-graphql, @strapi/plugin-users-permissions and @strapi/strapi.

Updates @strapi/plugin-cloud from 5.46.1 to 5.50.1

Release notes

Sourced from @​strapi/plugin-cloud's releases.

v5.50.1

5.50.1 (2026-07-08)

🚀 New feature

  • i18n: complete Japanese (ja) translations (#26855)
  • i18n: update Polish translation (#26592)

🔥 Bug fix

  • give the ability to open a list item in a new tab (#26853)
  • admin: translate enumeration option labels in the content manager (#26837)
  • admin: seat limit billing links (#26728)
  • cloud: hide deploy menu in production using currentEnvironment (#26733)
  • content-manager: allow reading hidden content types for relation targets (#26844)
  • content-manager: preserve i18n locale on navigation and guard component schema race condition (#26167)
  • core: preserve self-referential relation order on child publish (#26838)
  • core: preserve published self-referential relation state (#26932)
  • database: prevent crash when reordering and removing a relation in the same save (#26210)
  • documentation: allow array populate parameter (#26358)
  • examples: enable strict TypeScript in dev sandboxes (#26780)
  • generators: detect plugin language from output path (#26750)
  • review-workflows: add server eslint config and declare server deps (#26800)
  • strapi: resolve admin Vite aliases from @​strapi/admin closure (#26756)
  • typescript-utils: emit namespace keyword instead of deprecated module (#26195)
  • upload: accept single-file arrays on replacement (#26405)
  • utils: align polymorphic populate validation with conversion (#26848)
  • utils: return 400 instead of 500 for invalid sort order/params (#26907)

📚 Documentation Changes

  • Highlight destructive operation in transfer engine (#25081)

⚙️ Chore

  • fix lint warnings (#26818)
  • deps: bump nodemailer from 8.0.9 to 9.0.1 (#26721)
  • deps: bump qs from 6.15.2 to 6.15.3 (#26846)
  • deps: bump tar from 7.5.16 to 7.5.17 (#26847)
  • deps: bump js-yaml from 3.14.2 to 3.15.0 (#26888)
  • deps: bump tar from 7.5.17 to 7.5.18 (#26887)
  • deps-dev: bump eslint-plugin-prettier in the eslint group (#26828)
  • deps-dev: bump @​rollup/plugin-swc in the rollup group (#26906)
  • deps-dev: align @babel/* family to 7.29.7 (#26911)

💅 Enhancement

  • ci: block community PRs targeting main (#26854)
  • content-manager: keep sidebar primary actions and search bar fixed… (#26867)

... (truncated)

Commits
  • e2c7129 release: 5.50.1
  • 21ac8a7 chore: fix lint warnings (#26818)
  • 247678d Merge branch 'main' into develop
  • ed422a8 release: 5.50.0
  • f2c81ee fix(cloud): hide deploy menu in production using currentEnvironment (#26733)
  • 12fff51 feat(i18n): update Polish translation (#26592)
  • 2214f6f chore: cloud plugin updates (#26801)
  • a8fd91b feat(translations): comprehensive Japanese (ja) translation update for admin ...
  • e0029a9 chore(deps): upgrade lint-staged to 16 and scope linting to staged files (#26...
  • 65fc2ce chore(deps): bump design-system to v2.2.1 (#26788)
  • Additional commits viewable in compare view

Updates @strapi/plugin-graphql from 5.46.1 to 5.50.1

Release notes

Sourced from @​strapi/plugin-graphql's releases.

v5.50.1

5.50.1 (2026-07-08)

🚀 New feature

  • i18n: complete Japanese (ja) translations (#26855)
  • i18n: update Polish translation (#26592)

🔥 Bug fix

  • give the ability to open a list item in a new tab (#26853)
  • admin: translate enumeration option labels in the content manager (#26837)
  • admin: seat limit billing links (#26728)
  • cloud: hide deploy menu in production using currentEnvironment (#26733)
  • content-manager: allow reading hidden content types for relation targets (#26844)
  • content-manager: preserve i18n locale on navigation and guard component schema race condition (#26167)
  • core: preserve self-referential relation order on child publish (#26838)
  • core: preserve published self-referential relation state (#26932)
  • database: prevent crash when reordering and removing a relation in the same save (#26210)
  • documentation: allow array populate parameter (#26358)
  • examples: enable strict TypeScript in dev sandboxes (#26780)
  • generators: detect plugin language from output path (#26750)
  • review-workflows: add server eslint config and declare server deps (#26800)
  • strapi: resolve admin Vite aliases from @​strapi/admin closure (#26756)
  • typescript-utils: emit namespace keyword instead of deprecated module (#26195)
  • upload: accept single-file arrays on replacement (#26405)
  • utils: align polymorphic populate validation with conversion (#26848)
  • utils: return 400 instead of 500 for invalid sort order/params (#26907)

📚 Documentation Changes

  • Highlight destructive operation in transfer engine (#25081)

⚙️ Chore

  • fix lint warnings (#26818)
  • deps: bump nodemailer from 8.0.9 to 9.0.1 (#26721)
  • deps: bump qs from 6.15.2 to 6.15.3 (#26846)
  • deps: bump tar from 7.5.16 to 7.5.17 (#26847)
  • deps: bump js-yaml from 3.14.2 to 3.15.0 (#26888)
  • deps: bump tar from 7.5.17 to 7.5.18 (#26887)
  • deps-dev: bump eslint-plugin-prettier in the eslint group (#26828)
  • deps-dev: bump @​rollup/plugin-swc in the rollup group (#26906)
  • deps-dev: align @babel/* family to 7.29.7 (#26911)

💅 Enhancement

  • ci: block community PRs targeting main (#26854)
  • content-manager: keep sidebar primary actions and search bar fixed… (#26867)

... (truncated)

Commits

Updates @strapi/plugin-users-permissions from 5.46.1 to 5.50.1

Release notes

Sourced from @​strapi/plugin-users-permissions's releases.

v5.50.1

5.50.1 (2026-07-08)

🚀 New feature

  • i18n: complete Japanese (ja) translations (#26855)
  • i18n: update Polish translation (#26592)

🔥 Bug fix

  • give the ability to open a list item in a new tab (#26853)
  • admin: translate enumeration option labels in the content manager (#26837)
  • admin: seat limit billing links (#26728)
  • cloud: hide deploy menu in production using currentEnvironment (#26733)
  • content-manager: allow reading hidden content types for relation targets (#26844)
  • content-manager: preserve i18n locale on navigation and guard component schema race condition (#26167)
  • core: preserve self-referential relation order on child publish (#26838)
  • core: preserve published self-referential relation state (#26932)
  • database: prevent crash when reordering and removing a relation in the same save (#26210)
  • documentation: allow array populate parameter (#26358)
  • examples: enable strict TypeScript in dev sandboxes (#26780)
  • generators: detect plugin language from output path (#26750)
  • review-workflows: add server eslint config and declare server deps (#26800)
  • strapi: resolve admin Vite aliases from @​strapi/admin closure (#26756)
  • typescript-utils: emit namespace keyword instead of deprecated module (#26195)
  • upload: accept single-file arrays on replacement (#26405)
  • utils: align polymorphic populate validation with conversion (#26848)
  • utils: return 400 instead of 500 for invalid sort order/params (#26907)

📚 Documentation Changes

  • Highlight destructive operation in transfer engine (#25081)

⚙️ Chore

  • fix lint warnings (#26818)
  • deps: bump nodemailer from 8.0.9 to 9.0.1 (#26721)
  • deps: bump qs from 6.15.2 to 6.15.3 (#26846)
  • deps: bump tar from 7.5.16 to 7.5.17 (#26847)
  • deps: bump js-yaml from 3.14.2 to 3.15.0 (#26888)
  • deps: bump tar from 7.5.17 to 7.5.18 (#26887)
  • deps-dev: bump eslint-plugin-prettier in the eslint group (#26828)
  • deps-dev: bump @​rollup/plugin-swc in the rollup group (#26906)
  • deps-dev: align @babel/* family to 7.29.7 (#26911)

💅 Enhancement

  • ci: block community PRs targeting main (#26854)
  • content-manager: keep sidebar primary actions and search bar fixed… (#26867)

... (truncated)

Commits
  • e2c7129 release: 5.50.1
  • 21ac8a7 chore: fix lint warnings (#26818)
  • ed422a8 release: 5.50.0
  • db2e4ce fix(admin): stop storing IP addresses in session metadata (#26873)
  • a4723b4 security(users-permissions): default legacy JWT verify to HS256 (#26752)
  • 881a998 test(users-permissions): add coverage for missing refresh token (#25144)
  • 36a03ae fix(users-permissions): correct "occured" → "occurred" typo in error notifica...
  • d5ee93d fix(users-permissions): accept documentId for the role relation on user creat...
  • a8fd91b feat(translations): comprehensive Japanese (ja) translation update for admin ...
  • 6cf483a feat(admin): add active devices session management (#26628)
  • Additional commits viewable in compare view

Updates @strapi/strapi from 5.46.1 to 5.50.1

Release notes

Sourced from @​strapi/strapi's releases.

v5.50.1

5.50.1 (2026-07-08)

🚀 New feature

  • i18n: complete Japanese (ja) translations (#26855)
  • i18n: update Polish translation (#26592)

🔥 Bug fix

  • give the ability to open a list item in a new tab (#26853)
  • admin: translate enumeration option labels in the content manager (#26837)
  • admin: seat limit billing links (#26728)
  • cloud: hide deploy menu in production using currentEnvironment (#26733)
  • content-manager: allow reading hidden content types for relation targets (#26844)
  • content-manager: preserve i18n locale on navigation and guard component schema race condition (#26167)
  • core: preserve self-referential relation order on child publish (#26838)
  • core: preserve published self-referential relation state (#26932)
  • database: prevent crash when reordering and removing a relation in the same save (#26210)
  • documentation: allow array populate parameter (#26358)
  • examples: enable strict TypeScript in dev sandboxes (#26780)
  • generators: detect plugin language from output path (#26750)
  • review-workflows: add server eslint config and declare server deps (#26800)
  • strapi: resolve admin Vite aliases from @​strapi/admin closure (#26756)
  • typescript-utils: emit namespace keyword instead of deprecated module (#26195)
  • upload: accept single-file arrays on replacement (#26405)
  • utils: align polymorphic populate validation with conversion (#26848)
  • utils: return 400 instead of 500 for invalid sort order/params (#26907)

📚 Documentation Changes

  • Highlight destructive operation in transfer engine (#25081)

⚙️ Chore

  • fix lint warnings (#26818)
  • deps: bump nodemailer from 8.0.9 to 9.0.1 (#26721)
  • deps: bump qs from 6.15.2 to 6.15.3 (#26846)
  • deps: bump tar from 7.5.16 to 7.5.17 (#26847)
  • deps: bump js-yaml from 3.14.2 to 3.15.0 (#26888)
  • deps: bump tar from 7.5.17 to 7.5.18 (#26887)
  • deps-dev: bump eslint-plugin-prettier in the eslint group (#26828)
  • deps-dev: bump @​rollup/plugin-swc in the rollup group (#26906)
  • deps-dev: align @babel/* family to 7.29.7 (#26911)

💅 Enhancement

  • ci: block community PRs targeting main (#26854)
  • content-manager: keep sidebar primary actions and search bar fixed… (#26867)

... (truncated)

Commits
  • e2c7129 release: 5.50.1
  • 247678d Merge branch 'main' into develop
  • ed422a8 release: 5.50.0
  • 882fe40 fix(strapi): resolve admin Vite aliases from @​strapi/admin closure (#26756)
  • 1f96978 chore(deps): remove unused @​strapi/ts-zen dev dependency (#26759)
  • e0029a9 chore(deps): upgrade lint-staged to 16 and scope linting to staged files (#26...
  • c9eeaf7 chore(deps): upgrade TypeScript to 5.9.3 (#26782)
  • 9b02ea9 Merge branch 'main' into develop
  • 97b6a6c release: 5.49.0
  • 4126e93 chore(deps): hoist @​types/node to root and align with 20, min supported engin...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 15, 2026
Bumps the strapi group with 4 updates in the / directory: [@strapi/plugin-cloud](https://github.com/strapi/strapi/tree/HEAD/packages/plugins/cloud), [@strapi/plugin-graphql](https://github.com/strapi/strapi/tree/HEAD/packages/plugins/graphql), [@strapi/plugin-users-permissions](https://github.com/strapi/strapi/tree/HEAD/packages/plugins/users-permissions) and [@strapi/strapi](https://github.com/strapi/strapi/tree/HEAD/packages/core/strapi).


Updates `@strapi/plugin-cloud` from 5.46.1 to 5.50.1
- [Release notes](https://github.com/strapi/strapi/releases)
- [Commits](https://github.com/strapi/strapi/commits/v5.50.1/packages/plugins/cloud)

Updates `@strapi/plugin-graphql` from 5.46.1 to 5.50.1
- [Release notes](https://github.com/strapi/strapi/releases)
- [Commits](https://github.com/strapi/strapi/commits/v5.50.1/packages/plugins/graphql)

Updates `@strapi/plugin-users-permissions` from 5.46.1 to 5.50.1
- [Release notes](https://github.com/strapi/strapi/releases)
- [Commits](https://github.com/strapi/strapi/commits/v5.50.1/packages/plugins/users-permissions)

Updates `@strapi/strapi` from 5.46.1 to 5.50.1
- [Release notes](https://github.com/strapi/strapi/releases)
- [Commits](https://github.com/strapi/strapi/commits/v5.50.1/packages/core/strapi)

---
updated-dependencies:
- dependency-name: "@strapi/plugin-cloud"
  dependency-version: 5.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: strapi
- dependency-name: "@strapi/plugin-graphql"
  dependency-version: 5.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: strapi
- dependency-name: "@strapi/plugin-users-permissions"
  dependency-version: 5.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: strapi
- dependency-name: "@strapi/strapi"
  dependency-version: 5.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: strapi
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the strapi group with 4 updates build(deps): bump the strapi group across 1 directory with 4 updates Jul 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/strapi-07bd92011e branch from d23fe9c to aec8280 Compare July 13, 2026 20:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants