5.39.0 (2026-03-11)
🚀 New feature
- expand accordion by default when inserting a new component in a document (#24230)
- content-manager: filter list view by publication status (#25510)
🔥 Bug fix
- added shift+tab to blocks editors (#24122)
- single type publish permission error (#24754)
- es translations (#25655)
- typo 'compatability' to 'compatibility' in error messages (#25535)
- content-manager: export ContentManagerPlugin type for plugin dev… (#24149)
- content-manager: reduce excessive rerendering in relation fields (#25623)
- content-manager: reduce rerenders for conditional fields (#25617)
- content-releases: publish in right order to preserve relations (#25551)
- guided-tour: no overlay in dark mode (#25485)
- openapi: correctly merge plugin router prefix with route paths (#25616)
- types: fix document findOne params (#25613)
- upload: add crossOrigin attribute to image preview (#24946)
⚙️ Chore
- upgrade to glob 13 (#25610)
- upgrade better-sqlite3 to 12.6.2 (#25611)
- remove eslint-plugin-rxjs (#25612)
- upgrade koa to 20.8.4 and minimatch to 10.2.4 (#25624)
- eslintignore coverage (#25649)
- stop adding issues to GitHub projects in issues_handleLabel workflow (#25677)
- update package metadata (#25599)
- *: register vitest dependency in Yarn catalog (#25400)
- core/permissions: ensure engine properly merges conditions (#25569)
- deps: bump js-yaml from 3.14.1 to 3.14.2 (#24858)
- deps: bump qs from 6.14.2 to 6.15.0 (#25555)
- deps: bump jws from 3.2.2 to 3.2.3 (#24981)
- deps: bump elliptic from 6.5.7 to 6.6.1 (#24803)
- deps: bump serialize-javascript from 6.0.1 to 6.0.2 (#24841)
- deps: bump mdast-util-to-hast from 13.2.0 to 13.2.1 (#24950)
- deps: bump jws from 3.2.2 to 3.2.3 (#25652)
- deps: bump tar from 7.5.9 to 7.5.10 (#25642)
- deps: bump serialize-javascript from 6.0.1 to 6.0.2 (#25653)
🚨 Security
- upload: improve mimetype detection for uploads (#25177)
❤️ Thank You
- Adrien L
- Akash Santra @Akash504-ai
- akash-dabhi-qed @akash-dabhi-qed
- Ayoub Hidri @ayhid
- Bassel Kanso @Bassel17
- Ben Irvin
- Brandon Aaron @brandonaaron
- Daniel Garcia @dagadevelop
- Gouttfi @Gouttfi
- jeanvier
- markkaylor
- Nico André
- Nikolas Rimikis @Leptopoda
- Owen Rossi-Keen @Smoke3785