typescript-utils: bump internal deps to 5.50.1 (#26946)
⚠️ Changes to be aware of
Admin auth cookie name
You can set admin.auth.cookie.name in admin config to rename the access-token cookie (default remains jwtToken). Useful when another app on a shared parent domain sets a jwtToken cookie and breaks admin login.
In v5, status is reserved for draft/published filtering. If a content type has Draft & Publish enabled and a custom status field, Strapi now logs a startup warning instead of failing boot. The Content-Type Builder still blocks adding status or enabling D&P when status already exists.
@strapi/upgrade now warns and offers to pin ranged @strapi/* dependencies (e.g. ^5.50.0) before upgrading, so upgrades don't silently report "already up-to-date" when node_modules resolved ahead of package.json.
This PR contains the following updates:
| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@strapi/plugin-cloud](https://strapi.io) ([source](https://github.com/strapi/strapi/tree/HEAD/packages/plugins/cloud)) | [`5.50.1` → `5.50.2`](https://renovatebot.com/diffs/npm/@strapi%2fplugin-cloud/5.50.1/5.50.2) |  |  |
| [@strapi/plugin-users-permissions](https://strapi.io) ([source](https://github.com/strapi/strapi/tree/HEAD/packages/plugins/users-permissions)) | [`5.50.1` → `5.50.2`](https://renovatebot.com/diffs/npm/@strapi%2fplugin-users-permissions/5.50.1/5.50.2) |  |  |
| [@strapi/strapi](https://strapi.io) ([source](https://github.com/strapi/strapi/tree/HEAD/packages/core/strapi)) | [`5.50.1` → `5.50.2`](https://renovatebot.com/diffs/npm/@strapi%2fstrapi/5.50.1/5.50.2) |  |  |
| [@strapi/typescript-utils](https://strapi.io) ([source](https://github.com/strapi/strapi/tree/HEAD/packages/utils/typescript)) | [`5.50.1` → `5.50.2`](https://renovatebot.com/diffs/npm/@strapi%2ftypescript-utils/5.50.1/5.50.2) |  |  |
---
### Release Notes
<details>
<summary>strapi/strapi (@​strapi/plugin-cloud)</summary>
### [`v5.50.2`](https://github.com/strapi/strapi/releases/tag/v5.50.2)
[Compare Source](https://github.com/strapi/strapi/compare/v5.50.1...v5.50.2)
##### 5.50.2 (2026-07-15)
##### 🚀 New feature
- **admin:** make admin auth cookie name configurable ([#​26931](https://github.com/strapi/strapi/pull/26931))
- **i18n:** complete Korean (ko) translation ([#​26941](https://github.com/strapi/strapi/pull/26941))
##### 🔥 Bug fix
- **admin:** prevent deprecated CJS Vite Node API warning on startup ([#​26947](https://github.com/strapi/strapi/pull/26947))
- **admin:** pre-commit fails when staging files ignored by ESLint ([#​26958](https://github.com/strapi/strapi/pull/26958))
- **admin:** show plan label instead of edition in dashboard ([#​26891](https://github.com/strapi/strapi/pull/26891))
- **admin:** restore runtime default for context helper ([#​26809](https://github.com/strapi/strapi/pull/26809))
- **ci:** reduce false positives in issue template checker ([#​26955](https://github.com/strapi/strapi/pull/26955))
- **ci:** use npm install in issue template checker workflow ([#​26974](https://github.com/strapi/strapi/pull/26974))
- **content-manager:** clear stale Blocks editor selection on external value change ([#​26959](https://github.com/strapi/strapi/pull/26959))
- **core:** backward compat - reject 'status' attribute when draftAndPublish is enabled ([#​26890](https://github.com/strapi/strapi/pull/26890))
- **core:** validate license registry responses with zod ([#​26935](https://github.com/strapi/strapi/pull/26935))
- **core:** preserve duplicate form relation edits when cloning ([#​26961](https://github.com/strapi/strapi/pull/26961))
- **data-transfer:** bump ws to 8.21.0 to fix CVE-2026-48779 ([#​26898](https://github.com/strapi/strapi/pull/26898))
- **database:** include status sort expression in SELECT when using DISTINCT ([#​26751](https://github.com/strapi/strapi/pull/26751))
- **database:** lint script does not run type check ([#​26819](https://github.com/strapi/strapi/pull/26819))
- **email:** only warn about sendmail provider in development ([#​26893](https://github.com/strapi/strapi/pull/26893))
- **openapi:** add bearerAuth and bracket pagination query params ([#​26948](https://github.com/strapi/strapi/pull/26948))
- **strapi:** auto-exclude pre-built plugin UI libs from Vite optimizeDeps ([#​26944](https://github.com/strapi/strapi/pull/26944))
- **strapi:** fix develop blank admin from optimizeDeps auto-exclude ([#​27014](https://github.com/strapi/strapi/pull/27014))
- **upgrade:** prompt to pin ranged @​strapi/\* dependencies before upgrading ([#​26929](https://github.com/strapi/strapi/pull/26929))
- **upload:** load remote asset thumbnails with crossOrigin to prevent CORS preview failures ([#​26581](https://github.com/strapi/strapi/pull/26581), [#​26901](https://github.com/strapi/strapi/pull/26901))
- **utils:** align remaining convert-query-params errors with ValidationError ([#​26908](https://github.com/strapi/strapi/pull/26908))
##### ⚙️ Chore
- **ai-tooling:** sync skills when cursor sets up a new worktree ([#​26954](https://github.com/strapi/strapi/pull/26954))
- **data-transfer:** clarify --exclude files CLI messaging ([#​26914](https://github.com/strapi/strapi/pull/26914))
- **deps:** patch/minor dependency bumps ([#​26823](https://github.com/strapi/strapi/pull/26823))
- **deps:** bump [@​xhmikosr/decompress](https://github.com/xhmikosr/decompress) from 10.2.0 to 10.2.1 ([#​26928](https://github.com/strapi/strapi/pull/26928))
- **deps:** bump sharp from 0.33.5 to 0.34.5 ([#​26993](https://github.com/strapi/strapi/pull/26993))
- **deps:** bump [@​internationalized/date](https://github.com/internationalized/date) from 3.5.4 to 3.12.1 ([#​26994](https://github.com/strapi/strapi/pull/26994))
- **deps:** bump design-system and icons to v2.2.3 ([#​27002](https://github.com/strapi/strapi/pull/27002))
- **eslint:** enforce zero warnings in package lint scripts ([#​26922](https://github.com/strapi/strapi/pull/26922))
- **husky:** run git hooks through yarn exec ([#​27006](https://github.com/strapi/strapi/pull/27006))
- **tooling:** remove unused find-up after lint-staged 16 ([#​26792](https://github.com/strapi/strapi/pull/26792))
- **types:** drop CommonJS tsconfig overrides, build JS via rollup ([#​26934](https://github.com/strapi/strapi/pull/26934))
- **typescript:** scope tsconfig types per workspace ([#​26699](https://github.com/strapi/strapi/pull/26699))
- **typescript-utils:** migrate to typescript ([#​26811](https://github.com/strapi/strapi/pull/26811))
- **typescript-utils:** bump internal deps to 5.50.1 ([#​26946](https://github.com/strapi/strapi/pull/26946))
##### ⚠️ Changes to be aware of
##### Admin auth cookie name
You can set `admin.auth.cookie.name` in admin config to rename the access-token cookie (default remains `jwtToken`). Useful when another app on a shared parent domain sets a `jwtToken` cookie and breaks admin login.
([#​26931](https://github.com/strapi/strapi/pull/26931))
##### `status` attribute with Draft & Publish
In v5, `status` is reserved for draft/published filtering. If a content type has Draft & Publish enabled and a custom `status` field, Strapi now logs a startup warning instead of failing boot. The Content-Type Builder still blocks adding `status` or enabling D\&P when `status` already exists.
([#​26890](https://github.com/strapi/strapi/pull/26890))
##### Upgrade tool and ranged `@strapi/*` versions
`@strapi/upgrade` now warns and offers to pin ranged `@strapi/*` dependencies (e.g. `^5.50.0`) before upgrading, so upgrades don't silently report "already up-to-date" when `node_modules` resolved ahead of `package.json`.
([#​26929](https://github.com/strapi/strapi/pull/26929))
##### ❤️ Thank You
- Abdallah M. [@​abdallahmz](https://github.com/abdallahmz)
- akash-dabhi-qed [@​akash-dabhi-qed](https://github.com/akash-dabhi-qed)
- Ali Ataf [@​aliataf](https://github.com/aliataf)
- Andrei L [@​unrevised6419](https://github.com/unrevised6419)
- arun [@​aun009](https://github.com/aun009)
- Bassel Kanso
- Ben Irvin
- Giulio Montagner [@​giu1io](https://github.com/giu1io)
- Jamie Howard [@​jhoward1994](https://github.com/jhoward1994)
- jasleenkaur-qed42
- moduvoice
- Monu Meena [@​Monu01123](https://github.com/Monu01123)
- Nico André
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNjMuMyIsInVwZGF0ZWRJblZlciI6IjQzLjE2My4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tYXRlZCIsImRlcGVuZGVuY2llcyJdfQ==-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
5.50.1→5.50.25.50.1→5.50.25.50.1→5.50.25.50.1→5.50.2Release Notes
strapi/strapi (@strapi/plugin-cloud)
v5.50.2Compare Source
5.50.2 (2026-07-15)
🚀 New feature
🔥 Bug fix
⚙️ Chore
⚠️ Changes to be aware of
Admin auth cookie name
You can set
admin.auth.cookie.namein admin config to rename the access-token cookie (default remainsjwtToken). Useful when another app on a shared parent domain sets ajwtTokencookie and breaks admin login.(#26931)
statusattribute with Draft & PublishIn v5,
statusis reserved for draft/published filtering. If a content type has Draft & Publish enabled and a customstatusfield, Strapi now logs a startup warning instead of failing boot. The Content-Type Builder still blocks addingstatusor enabling D&P whenstatusalready exists.(#26890)
Upgrade tool and ranged
@strapi/*versions@strapi/upgradenow warns and offers to pin ranged@strapi/*dependencies (e.g.^5.50.0) before upgrading, so upgrades don't silently report "already up-to-date" whennode_modulesresolved ahead ofpackage.json.(#26929)
❤️ Thank You
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate.