Strapi Release: 3.0.0

TL;DR

Strapi 3.0.0 has been released, marking the transition from beta to stable. This release includes significant configuration changes, UI improvements, and various bug fixes. Key updates include a new logo, enhanced JWT configurations, and improved user management features. The release also addresses several security and performance issues, making it a recommended upgrade for all users.

Highlight of the Release

• Official stable release (v3.0.0) after beta phase
• New Strapi logo and UI improvements
• Enhanced JWT configuration options
• New configuration dump and restore CLI commands
• Users count endpoint for better user management
• Improved security with sanitized user responses

Migration Guide

Migrating from v3.0.0-beta.20.3 to v3.0.0

Configuration Structure Changes

The configuration structure has been significantly updated. You'll need to:

1. Update Email Configuration: Email settings have been moved from the database to configuration files.

   // config/plugins.js
   module.exports = ({ env }) => ({
     email: {
       provider: 'sendmail',
       settings: {
         defaultFrom: '[email protected]',
         defaultReplyTo: '[email protected]',
       },
     },
   });
   

2. JWT Configuration: If you need to customize JWT settings, create or update your configuration:

   // config/plugins.js
   module.exports = ({ env }) => ({
     'users-permissions': {
       jwtSecret: env('JWT_SECRET'),
       jwt: {
         expiresIn: '7d',
       },
     },
   });
   

3. Clean Up Old Configuration: Remove any deprecated configuration options that are no longer used.

4. Update Proxy Configuration: If you're using a proxy, update your configuration according to the new structure.

For a complete migration guide, refer to the official documentation.

Upgrade Recommendations

Urgency: Medium-High

This is a major stable release that marks the transition from beta to production-ready. All users are recommended to upgrade, especially those using beta versions.

Steps to Upgrade:

1. Backup your project before upgrading
2. Update your dependencies in package.json:

   {
     "dependencies": {
       "strapi": "3.0.0",
       "strapi-admin": "3.0.0",
       "strapi-connector-bookshelf": "3.0.0",
       "strapi-plugin-content-manager": "3.0.0",
       "strapi-plugin-content-type-builder": "3.0.0",
       "strapi-plugin-email": "3.0.0",
       "strapi-plugin-graphql": "3.0.0",
       "strapi-plugin-upload": "3.0.0",
       "strapi-plugin-users-permissions": "3.0.0",
       "strapi-utils": "3.0.0"
     }
   }
   

3. Run npm install or yarn install
4. Follow the migration guide to update your configuration files
5. Run npm run build or yarn build to rebuild the admin panel
6. Start your application with npm run develop or yarn develop

For projects with custom modifications, test thoroughly in a development environment before deploying to production.

Bug Fixes

Core Framework

• Fixed case sensitivity issue with global policies, now matching is case-insensitive
• Fixed MongoDB error when trying to cast from empty array
• Fixed configuration loading and structure issues

Content Management

• Fixed React-select UI issues in content type builder
• Fixed issues with URL encoding for local upload provider
• Fixed various front-end UI issues

User Permissions

• Fixed security issue by preventing user registration with confirmed status
• Sanitized user object in user plugin update method return value
• Fixed GraphQL password mutation naming inconsistencies

Upload Plugin

• Improved error messages for upload proxy
• Fixed URL encoding for local upload provider
• Optimized Header object usage in upload proxy

New Features

Configuration Management

• Added new configuration dump and restore CLI commands for easier configuration management
• Moved email settings from database to configuration files
• Added support for JWT configurations with customizable options

User Management

• Added Users count endpoint for better user management capabilities
• Added support for private field in UID fields
• Improved GraphQL password mutations for better naming consistency

UI Improvements

• New Strapi logo introduced
• Repositioned header logo to the left for better visual alignment

Security Updates

User Authentication

• Added JWT configurations for better security control
• Prevented user registration with confirmed status to avoid security bypasses
• Sanitized user object in API responses to prevent sensitive data exposure

Data Protection

• Fixed URL encoding for local upload provider to prevent potential path traversal issues
• Improved policy handling with case-insensitive matching to ensure consistent security enforcement

Performance Improvements

Database Operations

• Improved MongoDB handling to prevent errors when casting from empty arrays
• Optimized configuration loading process

API Responses

• Enhanced user object sanitization to reduce unnecessary data transfer
• Improved header handling in upload proxy using built-in entries function

Impact Summary

Strapi 3.0.0 represents a significant milestone as the first stable release after the beta phase. This release brings important configuration structure changes, requiring migration from previous beta versions. The update includes enhanced security features with improved JWT configurations and user management, UI improvements with a new logo and better visual alignment, and various bug fixes across the framework.

For developers, the most impactful changes are the configuration structure updates and new CLI commands for configuration management. Content managers will benefit from UI improvements and fixed issues in the content type builder. Administrators gain better user management capabilities with the new users count endpoint and improved security measures.

The release also addresses several security concerns by preventing user registration with confirmed status, sanitizing user objects in API responses, and fixing URL encoding issues in the upload provider. Performance improvements include better MongoDB handling and optimized configuration loading.

Overall, this stable release provides a more secure, performant, and user-friendly experience, making it a recommended upgrade for all Strapi users.

Full Release Notes