v4.12.1

⚠️ Security Warning and Notice ⚠️

Strapi was made aware of a few vulnerabilities that were patched in this release, for now we are going to delay the detailed disclosure of the exact details on how to exploit it and how it was patched to give time for users to upgrade before we do public disclosure.

For now the delay timeline looks like we will release the detailed information in the next four (4) weeks, we expect to do public disclosure (via a blog post) on Wednesday Aug 30th, 2023.

⚙️ Chore

• [core:admin] Chore: Drop getRequestUrl from the admin app (#17439) @gu-stav
• [core:admin] Chore: Move marketplace and plugins hooks into their page contexts (#17533) @gu-stav
• [core:content-manager] Chore: Inline fetch functions and drop getRequestUrl from content-manager (#17437) @gu-stav
• [core:content-manager] Chore: Drop lodash from configure the view page (#17438) @gu-stav
• [core:content-manager] Chore: Cleanup configure the view styles (#17440) @gu-stav
• [core:strapi] Drop Node 14 support, add Node 20 (#16557) @innerdvations
• [dependencies] chore(deps): bump winston from 3.9.0 to 3.10.0 (#17268) @dependabot
• [dependencies] Update semver to remove audit warnings (#17449) @derrickmehaffy
• [dependencies] chore(deps-dev): bump the eslint group with 3 updates (#17507) @dependabot
• [dependencies] chore(deps-dev): bump core-js from 3.31.0 to 3.32.0 (#17508) @dependabot
• [docs] Fix some spelling and standardiZe regional usages (#17491) @innerdvations
• [tooling] tests(e2e): init playwright, add small test suite & cli (#14807) @alexandrebodin

💅 Enhancement

• [core:content-manager] Add case insensitive filters to content manager (#16960) @marob
• [core:content-manager] Feat: Add creator fields as filter options (#17043) @Feranchz
• [core:data-transfer] [DTS] Add detail to ws upgrade error (#17452) @innerdvations
• [core:utils] Wildcard populate performance optimizations (#16507) @Convly
• [generators:app] fix: Update env.example (#16570) @xiaotiandada

🔥 Bug fix

• [core:admin] Fix: Registration - Send null for lastname instead of empty string (#17462) @gu-stav
• [core:data-transfer] Fix data transfer relations (#17475) @christiancp100
• [core:review-workflows] fix: reorder rw permissions so they appear as CRUD (#17493) @Marc-Roig
• [core:review-workflows] fix: Content API partial update fails when not populating stage field (#17512) @Marc-Roig
• [core:upload] fixed: Media Library - Can`t delete empty folder #17263 (#17280) @noobCode-69
• [core:upload] Update media thumbnails on replace (#17455) @jhoward1994
• [core:upload] Fix: Upload assets from url (#17459) @Feranchz
• [tooling] Fix intermittently failing API tests by using consistent versions of sqlite packages (#17490) @innerdvations

---

📚 Update and Migration Guides

• General update guide can be found here
• Migration guides can be found here 📚