v5.47.0

## 5.47.0 (2026-05-28)

### 🚀 New feature

- **BETA:** MCP server ([#26371](https://github.com/strapi/strapi/pull/26371))
- publicationFilter param in REST and document service ([#25793](https://github.com/strapi/strapi/pull/25793))
- **admin-tokens:** remove adminTokens future flag ([#26391](https://github.com/strapi/strapi/pull/26391))
- **admin:** add documentation helper link in HeaderLayout ([#26422](https://github.com/strapi/strapi/pull/26422))

### 🔥 Bug fix

- Relation Search in Nested Components ([#26023](https://github.com/strapi/strapi/pull/26023))
- unable to access content manager page with required and private … ([#24101](https://github.com/strapi/strapi/pull/24101))
- **admin:** gate expiresIn deprecation on user auth options ([#26298](https://github.com/strapi/strapi/pull/26298))
- **admin:** redirect active tab to login on session expiry ([#26165](https://github.com/strapi/strapi/pull/26165))
- **admin:** avoid serving extensionless admin paths as static files ([#26368](https://github.com/strapi/strapi/pull/26368))
- **content-manager:** content history crash on deleted relations ([#26245](https://github.com/strapi/strapi/pull/26245))
- **core:** preserve createdBy/updatedBy on drafts created by discard-drafts migration ([#26461](https://github.com/strapi/strapi/pull/26461))
- **core/core:** codeBlockValidator uses language instead of syntax ([#26392](https://github.com/strapi/strapi/pull/26392))
- **graphql:** inherit publicationFilter into populated relations ([#26400](https://github.com/strapi/strapi/pull/26400))

### ⚙️ Chore

- dedupe yarn.lock file ([#26376](https://github.com/strapi/strapi/pull/26376))
- fix dependabot cooldown config for github-actions ([#26438](https://github.com/strapi/strapi/pull/26438))
- **ci:** improve dependabot security grouping and version update policy ([#26408](https://github.com/strapi/strapi/pull/26408))
- **commitlint:** disable body-max-line-length rule ([#26406](https://github.com/strapi/strapi/pull/26406))
- **deps:** bump simple-git from 3.32.3 to 3.36.0 ([#26220](https://github.com/strapi/strapi/pull/26220))
- **deps:** bump sanitize-html from 2.13.0 to 2.17.4 ([#26342](https://github.com/strapi/strapi/pull/26342))
- **deps:** bump ws from 8.17.1 to 8.20.1 in @strapi/data-transfer ([#26379](https://github.com/strapi/strapi/pull/26379))
- **examples:** remove sdk-plugin from todo-example plugin ([#26341](https://github.com/strapi/strapi/pull/26341))
- **strapi:** upgrade webpack ecosystem dependencies ([#26385](https://github.com/strapi/strapi/pull/26385))

### 💅 Enhancement

- **db:** migration performance improvements ([#25988](https://github.com/strapi/strapi/pull/25988))
- **provider-amazon-ses:** replace node-ses with AWS SDK SESClient ([#26054](https://github.com/strapi/strapi/pull/26054))
- **i18n:** update and create Slovak translations ([#25831](https://github.com/strapi/strapi/pull/25831))

### ❤️ Thank You

- Adrien L @Adzouz
- Andrei L @unrevised6419
- Arav Menon @Arav-Menon
- bartsmartshore @bartsmartshore
- Bassel Kanso @Bassel17
- Ben Irvin @innerdvations 
- Dhruv Chheda @chhedadhruv
- DMehaffy @derrickmehaffy 
- Filip Ónodi @fonodi
- Nico André @nclsndr
- Sjouke de Vries @sjoukedv
- Vishal Kumar Singh @singhvishalkr