fix(deps): update strapi monorepo to v5.42.1 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@strapi/plugin-cloud (source)	5.40.0 → 5.42.1
@strapi/plugin-users-permissions (source)	5.40.0 → 5.42.1
@strapi/provider-upload-aws-s3 (source)	5.40.0 → 5.42.1
@strapi/strapi (source)	5.40.0 → 5.42.1

---

Release Notes

strapi/strapi (@​strapi/plugin-cloud)

v5.42.1

Compare Source

5.42.1 (2026-04-15)

🔥 Bug fix

• typo in Russian translation for upload button (#​25946)
• fixed 9 typos, spelling errors, and duplicate words. (#​25936)
• skip form onChange when markdown updates come from setValue (#​25955)
• adjust typo in test (#​25960)
• update snapshot (9b2501ceeb)
• increase test timeout (f50134dbae)
• preserve relations in fill from another locale (#​25703)
• enable save button when re-ordering components or dynamic zones (#​25959)
• made changes to resolve Firefox timepicker issue (#​25129, #​25438)
• admin: batch content manager permission checks and reuse session ability (#​25911)
• core: add firstPublishedAt field to draft (#​25947)
• document-service: preserve relations during publish (#​25909)
• tests: type errors cause build to fail which cause tests to fail (072ad0d801)
• upload: cache busting for cross-origin images in crop (#​25950)
• upload-aws-s3: trust S3 response Location URL for compatible providers (#​25939)

⚙️ Chore

• fix typos in comments and docs (12dfbe97c9)
• adding finnish translation to Strapi Admin (#​25620)
• fix typos in comments and docs (91407798c4)
• update Polish language translations (#​23762)
• deps: bump lodash from 4.17.23 to 4.18.1 (#​25919)
• deps: bump lodash-es from 4.17.23 to 4.18.1 (#​25906)
• deps: bump nodemailer from 8.0.4 to 8.0.5 (#​25963)
• deps: bump axios from 1.13.5 to 1.15.0 (#​25980)
• deps: bump path-to-regexp from 8.4.1 to 8.4.2 (#​25901)
• examples: delete config.server.url to restore port override capability (#​26011)

❤️ Thank You

• Adrien L @​Adzouz
• akash-dabhi-qed @​akash-dabhi-qed
• Antti Tuppurainen
• Bassel Kanso @​Bassel17
• Jamie Howard @​jhoward1994
• Mark Kaylor @​markkaylor
• mathildeleg @​mathildeleg
• Michał Kleszczyński @​Magiczne
• Nico André @​nclsndr
• Shalabh Gupta @​coding-shalabh
• Tony @​tonytkachenko
• Yohaan Narayanan @​yohaann196
• Yohei Yamamoto @​NAM-MAN

v5.42.0

Compare Source

5.42.0 (2026-04-08)

🚀 New feature

• removing A/B testing from the prompt Currently A/B testing opt-in isn't used, so removing it from the CLI (8d5b04ece4)
• changing sonar variable (0d822ade04)
• data-transfer: add directory export/import format (#​25867)

🔥 Bug fix

• change return to continue in deleteRelations when using foreign keys (#​25857)
• hide legacy options (da9cdfc640)
• contains filter no longer returns empty data (#​25810)
• typos in documentation plugin README (4ff54bff36)
• admin: p is not function error (#​25663)
• content-manager: pass component schemas when rebuilding list view headers (#​25872)
• content-manager: wrap single type displayName with formatMessage (#​25880)
• core: relation handling preserves order during unpublish/republish cycles (#​25764)
• create-strapi-app: generate .yarnrc.yml for Yarn projects (#​25869)
• documentation: use dist extensions path in production (#​25863)

📚 Documentation Changes

• fix typos in documentation plugin README (8e11e41247)

⚙️ Chore

• add .claude directory to gitignore (e85aa81cdf)
• sonarqube variables like in their docs (40f9ecd6c7)
• deps: bump minimatch from 10.2.4 to 10.2.5 (#​25879)
• deps: bump @​xmldom/xmldom from 0.8.6 to 0.8.12 (#​25877)
• deps: bump path-to-regexp from 8.2.0 to 8.4.0 (#​25850)
• deps: bump undici from 6.24.0 to 6.24.1 (#​25785)
• deps: bump handlebars from 4.7.7 to 4.7.9 (#​25841)
• deps: bump yauzl from 3.2.0 to 3.2.1 (#​25729)
• deps: bump bn.js from 4.12.0 to 4.12.3 (#​25691)
• deps: bump js-yaml from 3.14.1 to 3.14.2 (#​25680)
• deps: bump mdast-util-to-hast from 13.2.0 to 13.2.1 (#​25681)
• deps: bump path-to-regexp from 8.4.0 to 8.4.1 (#​25888)
• deps: bump simple-git from 3.21.0 to 3.32.3 (#​25704)
• deps: bump file-type from 21.0.0 to 21.3.2 (#​25728)
• deps: bump @​octokit/plugin-paginate-rest from 9.2.1 to 9.2.2 (#​25693)
• deps: bump @​octokit/request from 8.4.0 to 8.4.1 (#​25694)
• deps: bump picomatch from 2.3.1 to 2.3.2 (#​25828)
• deps: bump nodemailer from 8.0.1 to 8.0.4 (#​25848)

❤️ Thank You

• Adrien L @​Adzouz
• Adrien Lepoutre @​Adzouz
• Alexandre BODIN
• Bassel Kanso @​Bassel17
• Ben Irvin
• guoyangzhen
• Jamie Howard @​jhoward1994
• Joshua Klinesmith
• Simon Norris

v5.41.1

Compare Source

5.41.1 (2026-04-01)

🔥 Bug fix

• load inquirer async (043798dbe8)

❤️ Thank You

• Ben Irvin

v5.41.0

Compare Source

5.41.0 (2026-04-01)

🔥 Bug fix

• use strapi.fetch for remote uploads (#​25661)
• Content types with attributes named filters, sort, fields, or populate no longer cause 400 validation errors on populate queries and countDraftRelations (#​21338, #​25762)
• check devDependencies when resolving required admin deps (#​22130)
• use max batch sizes per dialect (#​25390)
• content-type-builder: default draftAndPublish to true in AI CTB (#​25781)
• document-service: re-insert cascade-deleted bidirectional relations (#​25725)
• graphql: expose status and hasPublishedVersion on non–D&P root queries for nested relations (#​25763)
• homepage: render widgets progressively and batch permission checks (#​25846)
• upload: allow removal of file type filter in media library (#​25399)
• upload: row duplicate-key warning (#​25670)
• upload: allow upload of files with empty MIME type (#​25844)

⚙️ Chore

• deps: bump undici from 6.23.0 to 6.24.0 (#​25731)
• deps: bump effect from 3.19.19 to 3.21.0 (#​25796)
• scripts/check-package-versions: support Yarn catalog (#​25625)

💅 Enhancement

• add customField parameter to extendFields (#​22521)
• content-manager: add documentid in listview and editview (#​25759)

🚨 Security

• package upgrades to remove deprecated versions of boolean, tar, and glob (#​25776)

❤️ Thank You

• Adrien Foulon @​Tofandel
• akash-dabhi-qed @​akash-dabhi-qed
• Bassel Kanso @​Bassel17
• Ben Irvin
• Daniil Barkov @​giollord
• Kai Gritun
• mathildeleg @​mathildeleg
• Nico André
• Shuhrat Dehkanov
• Ziyi @​butcherZ

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.