Skip to content

chore(deps-dev): bump @strapi/utils from 5.34.0 to 5.53.0 - #92

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/strapi/utils-5.53.0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/strapi/utils-5.53.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026 •

Copy link
Copy Markdown

Bumps @strapi/utils from 5.34.0 to 5.53.0.

Release notes

Sourced from @​strapi/utils's releases.

v5.53.0

5.53.0 (2026-09-09)

🚀 New feature

  • Add an export audit logs button (#27427)
  • content-releases: record release actions in audit logs (#27436, #27436)

🔥 Bug fix

  • close the drawer on click on interactive elements (4573d58806)
  • transfer configuration import discards the error that caused it (#27565)
  • misc users-permissions and admin (2f3595fe61)
  • content-type-builder: default new private fields to not searchable (#27482)
  • email-sendmail: disable file and URL access for attachments (#27430)
  • mcp: bump mcp sdk@2 to stop clients droping advertised tools (#27505)
  • strapi: --sourcemap flag has no effect on the admin build (#27545)
  • upload: reserve list space for the bulk actions bar (#27509)
  • upload: filter the row replace picker by the asset's mime (#27508)
  • upload: bound the focal point fields to the crop area (#27496)
  • upload: folder navigation resets media library list scroll and p… (#27449)
  • upload: keep the drawer open when a control behind is pressed (3ebdde0965)
  • upload: only a primary-button press dismisses the drawer (3b81103657)
  • upload: contain fast provider rejections in upload batches (#27543)

⚙️ Chore

  • release v5.52.3 update develop (2695ff53ff)
  • .github/draft-release: run the workflow more than once per release (#27573)
  • ci: pin all GitHub Actions to latest versions by commit SHA (37d9438606)
  • ci: add the draft-release action and workflow (#27562)
  • deps: bump undici from 6.28.0 to 6.28.1 (#27568)
  • lint: make oxlint a blocking ci gate (#27450)

⚠️ Changes to be aware of

MCP clients no longer drop advertised tools

The built-in MCP server now advertises tools as JSON Schema 2020-12, so strict clients that previously dropped every tool keep the full list. If you register custom MCP tools or prompts: unknown or unauthorized tool calls now return JSON-RPC error -32602 instead of isError: true; extra.sendNotification and extra.sendRequest are gone; and one prompt argsSchema that cannot become JSON Schema (for example z.date()) hides every prompt from prompts/list.

(#27505)

❤️ Thank You

... (truncated)

Commits
  • 99800b1 release: 5.53.0
  • 2f3595f fix: misc users-permissions and admin
  • 6cfe189 release: 5.52.3
  • 953534b release: 5.52.2
  • 9c29e4e chore(deps): migrate first-party zod to 4.4.3 (#27428)
  • a292a53 release: 5.52.1
  • bed4477 release: 5.52.0
  • 0a8a9b4 enhancement(utils): memoize scope decisions and keep the relation visitor syn...
  • 5c2aa5a enhancement(utils): stop using a thrown Error to test for boolean-like popula...
  • 3bb5bda Merge remote-tracking branch 'origin/main' into chore/merge-main-5.51.2-into-...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@strapi/utils](https://github.com/strapi/strapi/tree/HEAD/packages/core/utils) from 5.34.0 to 5.53.0.
- [Release notes](https://github.com/strapi/strapi/releases)
- [Commits](https://github.com/strapi/strapi/commits/v5.53.0/packages/core/utils)

---
updated-dependencies:
- dependency-name: "@strapi/utils"
  dependency-version: 5.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Author

Dependabot attempted to update this pull request, but because the branch dependabot/npm_and_yarn/strapi/utils-5.53.0 is protected it was unable to do so.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants