5.52.3 (2026-09-02)

🔥 Bug fix

• admin: preserve special characters in filter and search values (#27440)
• content-manager: relation picker loses locale in nested entries (#27487)
• content-manager: relation fields display document ids when main fields are empty (#27488)
• content-type-builder: remove unused runtime import of @strapi/types (#27452)
• review-workflows: guard release-action service call when cms-content-releases is disabled (#27312)
• upload: sniff file bytes in admin when browser MIME is generic (#27363)
• upload: show each asset as soon as its upload completes (#27456)
• upload: various fixes and adjustments of new media library (#27477)
• upload: repair the typecheck on develop after two merges collided (#27497)
• upload: disable the folder tree chevron when a folder has no children (#27495)
• upload: keep the asset name when replacing its file (#27501)
• users-permissions,core: use path.posix.normalize for route matching and path sanitization (#27158)

⚙️ Chore

• strapi: remove unused nodemon dependencies (#27479)

❤️ Thank You

• Adrien L @Adzouz
• Andrei L @unrevised6419
• Bassel Kanso
• Ben Irvin
• Kushal Rathod @KushalXCoder
• Lovepreet Singh @singhlovepreet9
• Nico André
• Valentin @valfur03

Fixes

• Issue compact browser session cookies instead of the larger ML-DSA access JWT — df7c24c85e9d4fa9d380532db928ecc3aa13dc17 (@kmendell); e874390f6b4ca611a4b5f733868cca1e01138aca / #3813 (@kmendell).
• Fall back to the username when the display name is unset in the sidebar user menu — 0c7174f1089079d79535563ac2d54b032ea6914a (@kmendell).

Dependencies

• Bump github.com/shirou/gopsutil/v4, including 4.26.7 to 4.26.8 — c9ad2e6f9f9751764e5608128b7e55abf9349b88 (@dependabot[bot]); dd02c011c575c298dbd3f3167e4ba291edc06c59 / #3798 (@kmendell).
• Bump zod from 4.4.3 to 4.5.4 — d95764cf15a2867e2ac573f8cf6f78654da597d7 / #3812 (@dependabot[bot]).

2.10.1

2.10.1

2.10.1