04ac8c3e90
release: 5.46.1
2026-05-20 09:09:00 +00:00
6ed22b5cfa
security(deps): upgrade multiple dependencies ( #26326 )
...
* chore: upgrade simple-git
* chore: upgrade axios
* chore: upgrade docusaurus
* chore: upgrade docusaurus family
* chore: yarn.lock
* chore: upgrade styled-components
* chore: upgrade yaml
* chore: bump fast-uri in pinned deps
* chore: bump axios in cloud plugin
* chore: remove unnecessary ts error suppression
* chore: align docusaurus packages
* chore: yarn.lock
---------
Co-authored-by: Cursor <cursoragent@cursor.com >
Co-authored-by: Jamie Howard <jhoward1994@gmail.com >
2026-05-15 08:52:31 +01:00
49b96fcfdc
chore(deps): bump axios from 1.15.1 to 1.15.2 ( #26177 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.15.1 to 1.15.2.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.15.1...v1.15.2 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.15.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-14 11:52:04 +02:00
83fec11da9
Merge remote-tracking branch 'origin/main' into develop
2026-05-13 19:12:11 +02:00
7f34c4b7d9
release: 5.46.0
2026-05-13 13:39:32 +00:00
b5452ab89f
chore(eslint): migrate .eslintrc + .eslintignore to .eslintrc.cjs ( #26216 )
...
* chore(eslint): migrate .eslintrc + .eslintignore to .eslintrc.cjs
Consolidates the per-package ESLint setup into a single typed
`.eslintrc.cjs` file across the monorepo (177 files touched).
Why
- `.eslintignore` is removed in ESLint v9/v10. Folding ignore patterns
into `ignorePatterns` inside the rc file is the supported migration
path and unblocks future ESLint upgrades (which will likely be needed
alongside the in-flight TypeScript 6 migration).
- `.cjs` extension is explicit about module format, so the configs keep
working if any package later adopts `"type": "module"` (no CJS/ESM
surprises).
- Wrapping each config in `// @ts-check` + a `Linter.Config`-typed
`const config` block gives editor autocomplete and catches typos.
Surfaced two real duplicates in
`eslint-config-custom/back/typescript.js`
(`node/no-unsupported-features/es-syntax`,
`node/no-missing-import`), now deduplicated.
- `extends` references switched from the `custom/*` shorthand to the
explicit `eslint-config-custom/*` package name. ESLint resolves both,
but the explicit form makes the source unambiguous.
- Added `coverage/` to `ignorePatterns` so coverage output produced
inside a workspace is not linted.
Misc
- `examples/kitchensink` had ESLint configured but no `lint` script;
added one so the config actually runs.
- `nx.json` hash inputs updated:
- removed `.eslintignore` (no longer exists)
- replaced `{projectRoot}/.eslintrc.js` with
`{projectRoot}/**/.eslintrc.cjs` so nested package configs are also
part of the cache key (the previous glob missed them).
- `packages/utils/upgrade/tsconfig.eslint.json` include path updated
from `.eslintrc.js` to `.eslintrc.cjs`.
Verification
- `eslint --print-config` resolves cleanly on sampled back/front
packages (admin, users-permissions, upload).
- Full `pnpm -r lint` is clean.
* chore(eslint): set tsconfigRootDir for vscode-eslint typed linting
CLI lint resolved tsconfig paths via cwd, but vscode-eslint runs from
the workspace root and could not locate per-package tsconfigs. Set
parserOptions.tsconfigRootDir to __dirname in each package's
.eslintrc.cjs so the editor resolves typed-lint configs correctly.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
* chore(eslint): self-ignore configs, scope coverage to jest packages
- Replace `env: { es6: true }` workaround with `.eslintrc.cjs` in
ignorePatterns so eslint never lints the config file itself
(root cause of the "const is not a keyword" parse error in es5)
- Add `.eslintrc.cjs` to ignorePatterns across all configs that
were missing it
- Restrict `coverage/` ignorePatterns to workspace roots that
actually run jest; drop from non-test packages and admin/server
subdir configs (tests run from the workspace root)
2026-05-12 07:32:12 +00:00
9300041094
release: 5.45.1
2026-05-11 10:41:36 +00:00
c5bc749fee
release: 5.45.0
2026-05-06 10:06:46 +00:00
11554fe43e
release: 5.44.0
2026-04-29 13:06:31 +00:00
765bd19a3a
Merge branch 'develop' of github.com:strapi/strapi
2026-04-24 15:40:44 +02:00
ac6cd0063c
chore(deps): bump multiple dependencies ( #26103 )
...
dotenv: 16.4.5 → 16.6.1
fs-extra: 11.2.0 → 11.3.4
semver: 7.5.4 → 7.7.4
typescript: 5.4.4 → 5.4.5
esbuild-loader: 4.3.0 → 4.4.3
esbuild-register: 3.5.0 → 3.6.0
grant: ^5.4.8 → 5.4.24 (pinned)
markdown-it: ^13.0.2 → 14.1.1
2026-04-24 13:11:54 +01:00
14628987b5
release: 5.43.0
2026-04-22 14:30:40 +00:00
6722bec700
security: upgrade to axios 1.15.1 ( #26072 )
...
* security: upgrade to axios 1.15.1
* chore: update follow-redirects
* chore: update pinned lodash
* fix: mime type typings
2026-04-20 21:19:33 +02:00
4709832272
release: 5.42.1
2026-04-15 11:13:30 +00:00
a159fc53b5
chore(deps): bump axios from 1.13.5 to 1.15.0 ( #25980 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.13.5 to 1.15.0.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.13.5...v1.15.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.15.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 11:00:10 +02:00
68e20493cc
chore(deps): bump lodash from 4.17.23 to 4.18.1 ( #25919 )
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 10:50:59 +02:00
e86a5190a5
release: 5.42.0
2026-04-08 12:14:52 +00:00
b35ea93f83
Merge branch 'main' into develop
2026-04-01 13:29:10 +03:00
5ae36e382d
release: 5.41.1
2026-04-01 09:48:47 +00:00
056df8eaec
Merge branch 'main' into develop
2026-04-01 12:30:46 +03:00
967175a13b
release: 5.41.0
2026-04-01 09:10:30 +00:00
1f49d2a423
chore(deps): bump minimatch from 10.2.4 to 10.2.5 ( #25879 )
...
Bumps [minimatch](https://github.com/isaacs/minimatch ) from 10.2.4 to 10.2.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v10.2.4...v10.2.5 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 10.2.5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 10:50:43 +02:00
353a86a60d
security: package upgrades to remove deprecated versions of boolean, tar, and glob ( #25776 )
...
* chore: upgrade tar, global-agent, dedupe yarn.lock
This removes the deprecated packages: boolean, tar<7, node-gyp<12, and others
* chore: upgrade inquirer, file-type, jscodeshift, supertest
* chore: update better-sqlite3
* chore: upgrade pg and mysql2
* fix: use dynamic imports for inquirer esm only
* test(cli): add create-strapi-app test
* test(cli): add scaffold cases
* chore: upgrade to rimraf 6.1.3
* chore: dedupe yarn.lock
* security: update jwk-to-pem
* chore: dedupe yarn.lock
* chore: align inquirer version
* chore: yarn.lock
* test: fix inquirer imports
* test(cli): support zero apps
* test: fix back-end
* test(cli): fix inquirer and fs
* chore: remove accidental file
* chore: dedupe and upgrade pinned deps
2026-03-19 13:44:02 +01:00
e1cdebd2a5
release: 5.40.0
2026-03-18 13:25:35 +00:00
ea3b700d6d
Merge branch 'main' into develop
2026-03-11 16:37:26 +02:00
243c96ff4a
release: 5.39.0
2026-03-11 10:13:31 +00:00
cd12da721d
release: 5.38.1
2026-03-11 09:56:28 +00:00
a0a18654b2
chore: use https instead of git url in package.repository.url ( #25698 )
...
Signed-off-by: Nikolas Rimikis <leptopoda@users.noreply.github.com >
Co-authored-by: Nikolas Rimikis <leptopoda@users.noreply.github.com >
2026-03-10 12:42:42 +00:00
f2a8048761
chore: update package metadata ( #25599 )
...
Add homepage, bugs and repository information to every public package
Signed-off-by: Nikolas Rimikis <leptopoda@users.noreply.github.com >
Co-authored-by: Nikolas Rimikis <leptopoda@users.noreply.github.com >
2026-03-09 15:34:48 +01:00
f4b925f298
fix: typo 'compatability' to 'compatibility' in error messages ( #25535 )
2026-03-09 10:18:58 +00:00
6c0c05abe3
chore(deps): bump tar from 7.5.9 to 7.5.10 ( #25642 )
...
Bumps [tar](https://github.com/isaacs/node-tar ) from 7.5.9 to 7.5.10.
- [Release notes](https://github.com/isaacs/node-tar/releases )
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md )
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.9...v7.5.10 )
---
updated-dependencies:
- dependency-name: tar
dependency-version: 7.5.10
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-05 16:54:30 +01:00
12c801db9e
chore: upgrade koa to 20.8.4 and minimatch to 10.2.4 ( #25624 )
2026-03-05 12:25:36 +00:00
29f5741e96
release: 5.38.0
2026-03-04 13:09:53 +00:00
d0a4d6e1fd
Merge branch 'main' into develop
2026-02-26 17:03:26 +02:00
e7bb15d0fd
release: 5.37.1
2026-02-26 14:50:27 +00:00
bf7eb824dc
Merge main into develop (sync with release 5.37.0)
2026-02-26 10:04:24 +01:00
c18dbf7892
release: 5.37.0
2026-02-26 08:27:53 +00:00
edcdb4221b
fix: typo 'recieved' to 'received' across codebase ( #25541 )
2026-02-24 14:06:13 +00:00
8cc8ea6020
chore(deps): bump minimatch from 9.0.3 to 10.2.1 ( #25494 )
...
Bumps [minimatch](https://github.com/isaacs/minimatch ) from 9.0.3 to 10.2.1.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.3...v10.2.1 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 10.2.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-24 11:15:38 +01:00
90dab7c990
security(deps): upgrade multiple dependencies ( #25506 )
...
* security: upgrade minimatch to 10.2.1
* security: update pinned elliptic
* security: update ajv to 8.18.0
* chore: update octokit
* security: upgrade fast-xml-parser
2026-02-24 09:17:24 +01:00
b55bcef826
security: upgrade to tar 7.5.9 ( #25504 )
2026-02-23 15:55:55 +01:00
6187e8a9d7
release: 5.36.1
2026-02-18 14:16:09 +00:00
6fd755451d
security(deps): upgrade axios from v1.12.2 to v1.13.5 ( #25427 )
...
* fix: yarn.lock
---------
Co-authored-by: Ben Irvin <ben@innerdvations.com >
2026-02-16 12:29:35 +00:00
9ecfab0e5d
Merge branch 'main' of github.com:strapi/strapi into develop
2026-02-11 17:13:52 +01:00
23a521fab4
release: 5.36.0
2026-02-11 14:05:28 +00:00
1500b7cec6
security: upgrade to tar 7 ( #25380 )
2026-02-11 11:59:03 +02:00
ec17c9e1ed
release: 5.35.0
2026-02-04 12:48:11 +00:00
47cff8e767
release: 5.34.0
2026-01-28 14:54:52 +00:00
168539f2ee
chore: update lodash to 4.17.23 ( #25244 )
2026-01-23 17:30:28 +01:00
2437d69089
release: 5.33.4
2026-01-21 11:43:11 +00:00
Bassel17
Ben Irvin
dependabot[bot]
Mark Kaylor
markkaylor
Andrei L
jhoward1994
Adzouz
nclsndr
nclsndr
Bassel Kanso
Nikolas Rimikis
Ayoub Hidri
Ben Irvin
innerdvations
Jonas Thelemann