Strapi release roundup: everything that changed between June and August 2026

Strapi releases v5.49 through v5.52 introduce major extensibility, security, content-management, upload, and developer-experience improvements, including typed MCP builders for plugins, audit logs for MCP agent actions, and active-device session management with revocation support for password and SSO logins. Security updates add expiring admin password-reset tokens, safer SVG defaults for new projects, required environment-variable validation, improved cookie configuration, and resilience for permission roles containing missing or conditional permission rules. Content Manager changes improve publishing warnings for unpublished relations, relation ordering and unsaved-form preservation, accessible list links, dynamic-zone component previews, and revised keyboard shortcuts, while a redesigned Media Library beta adds folder navigation, search and filtering, asset editing, persistent upload queues, and mobile support. Upload handling now supports cache-aware file replacement, replacement size-limit enforcement, low-memory file-type detection, and rotating S3 credentials. Notable behavior changes include empty media galleries returning empty arrays rather than null, literal handling of percent and underscore filter characters, 400 responses for invalid sorting, and default string length limits. Developer-focused updates enforce required relations and media on publishing when enabled, resolve MySQL admin-query issues, add SendGrid EU support, and expand TypeScript, data-transfer, GraphQL, lifecycle-event, and OpenAPI capabilities, alongside translation contributions and 366 merged pull requests.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.