Strapi Release: 5.12.7

TL;DR

Strapi v5.12.7 is a maintenance release that focuses on improving the widget system, fixing UI issues in repeatable components, and addressing bugs in the data transfer CLI. This release enhances permission checks for widgets, improves widget registration tracking, and reorganizes widget-related code structure for better maintainability.

Highlight of the Release

• Permission checks added before rendering widgets for improved security
• Fixed widget type export from core to resolve import issues
• Added widget link button for better navigation
• Improved UI for repeatable components with proper disabled states
• Enhanced tracking of registered widgets

Migration Guide

No significant migration steps are required for this release. This is a maintenance release that primarily includes bug fixes and enhancements to existing functionality.

If you're actively developing with the widget system, note that widget types are now properly exported from core, and permission checks have been added before rendering widgets.

Upgrade Recommendations

This release is recommended for all Strapi users, especially those using:

1. Widget functionality on the homepage
2. Repeatable components in their content types
3. The data-transfer CLI tool

The upgrade process should be straightforward with minimal risk, as this is primarily a maintenance release with bug fixes and minor enhancements.

Bug Fixes

UI and Component Fixes

• Fixed widget type not being exported from core, resolving import issues in custom code
• Updated icon button to include disabled flag for repeatable components
• Added proper disabled state for drag icons in repeatable components when in published mode
• Fixed missing addTagTypes issue that was resulting in stale data for homepage widgets

CLI and Data Management

• Fixed typo in data-transfer CLI for better developer experience
• Improved uniqueness of deviceId + userId for better security and user tracking

New Features

Widget System Enhancements

• Permission Checks for Widgets: Added permission verification before rendering widgets, ensuring users only see widgets they have access to
• Widget Link Button: Added a new link button for widgets to improve navigation
• Widget Registration Tracking: Implemented tracking for registered widgets to improve debugging and development experience

Code Organization

• Moved widget controllers, services, and routes from admin to content-manager for better code organization and maintainability

Security Updates

Authentication and Authorization

• Enhanced permission checking system for widgets, ensuring proper access control
• Improved uniqueness of deviceId + userId combination for better security in authentication processes

Performance Improvements

Data Management

• Improved handling of widget data to prevent stale data issues
• Enhanced widget registration system for better performance tracking

Authentication

• Improved uniqueness of deviceId + userId combination, which can lead to better performance in authentication processes and session management

Impact Summary

Strapi v5.12.7 brings important improvements to the widget system with proper permission checks and better code organization. The release fixes several bugs including widget type exports, UI issues in repeatable components, and a typo in the data-transfer CLI.

For developers, this release improves the development experience with better widget tracking and proper type exports. Content editors will benefit from UI improvements in repeatable components and enhanced widget functionality. Administrators gain better security with improved permission checks and enhanced user identification.

This maintenance release focuses on stability and quality-of-life improvements rather than introducing major new features, making it a recommended upgrade for all Strapi users.

Full Release Notes