Change8

v5.50.2

📦 strapiView on GitHub →
2 features🐛 20 fixes🔧 5 symbols

Summary

This release introduces configurable admin authentication cookie names and completes Korean translations. It also includes numerous bug fixes across various modules, dependency updates, and improvements to the upgrade tool.

Migration Steps

  1. If you have a custom `status` field in a content type with Draft & Publish enabled, Strapi will now log a warning instead of failing on startup. The Content-Type Builder will continue to block adding a `status` field or enabling D&P if `status` already exists.
  2. Consider pinning ranged `@strapi/*` dependencies (e.g., `^5.50.0`) before upgrading to avoid potential issues where `node_modules` might resolve to a newer version than `package.json` indicates.

✨ New Features

  • Make admin auth cookie name configurable via `admin.auth.cookie.name` in admin config.
  • Complete Korean (ko) translation.

🐛 Bug Fixes

  • Prevent deprecated CJS Vite Node API warning on startup.
  • Fix pre-commit hook failing when staging files ignored by ESLint.
  • Show plan label instead of edition in the dashboard.
  • Restore runtime default for context helper.
  • Reduce false positives in the issue template checker.
  • Use npm install in the issue template checker workflow.
  • Clear stale Blocks editor selection on external value change.
  • Backward compatibility: Reject 'status' attribute when draftAndPublish is enabled.
  • Validate license registry responses with zod.
  • Preserve duplicate form relation edits when cloning.
  • Bump `ws` to 8.21.0 to fix CVE-2026-48779.
  • Include status sort expression in SELECT when using DISTINCT.
  • Fix lint script not running type check.
  • Only warn about sendmail provider in development.
  • Add bearerAuth and bracket pagination query parameters to OpenAPI.
  • Auto-exclude pre-built plugin UI libs from Vite optimizeDeps.
  • Fix develop blank admin caused by optimizeDeps auto-exclude.
  • Prompt to pin ranged `@strapi/*` dependencies before upgrading.
  • Load remote asset thumbnails with `crossOrigin` to prevent CORS preview failures.
  • Align remaining convert-query-params errors with ValidationError.

Affected Symbols