Pull Request Explorer

Summary

Track flagsmith-php-sdk 5.1.1

Adds the latest flagsmith-php-sdk version to the known SDK list, ensuring compatibility tracking.

Health Assessment

• • Automated PR with a single line change, merged quickly with no review needed.

Summary

Update pytest dependency to v9 for security

This PR updates the pytest library to address a critical temporary directory handling vulnerability, ensuring safer test execution. The update mitigates CVE-2025-71176, protecting the test environment from potential denial-of-service attacks.

Health Assessment

• • Quick merge with minimal changes and no review needed, indicating low risk and high confidence in the update.

Summary

Run MCP server from OpenAPI specs

Adds an MCP server that serves OpenAPI specs, enabling integration with FastMCP and expanding Flagsmith’s API tooling.

Health Assessment

• • The PR closed in under 16 hours with a fast cycle time, but required several commits after the initial review, indicating some rework on a large code addition.

Summary

Add authentication, configuration, and HTTP transport

Adds authentication support, config via pydantic, and HTTP transport to the MCP server, improving security and flexibility.

Health Assessment

• • Fast review and merge with minimal rework, indicating a healthy and efficient process.

Summary

Update Sentry Webpack Plugin to Remove UUID

This PR updates the Sentry Webpack plugin to address a CVE by removing the uuid dependency, improving security and reducing bundle size. The change is automatically tested by CI and requires no manual intervention.

Health Assessment

• • Fast turnaround with minimal review, indicating low complexity and high confidence in the change.

Summary

Update python-dotenv and idna dependencies

Fixes CVE-2026-45409 and CVE-2026-28684 by updating transitive dependencies.

Health Assessment

• • Quick security patch with minimal changes and immediate merge.

Summary

Run flagsmith-private test suites inline

Integrates new private test suites into core API testing, improving coverage and reducing integration risk.

Health Assessment

• • Fast cycle time, single review, minimal rework, moderate scope, low risk.

Summary

Update track event calls to new interface

This PR updates the event tracking API to the new signature, enabling events at init and adding a custom event for Experiments beta signups, improving analytics accuracy.

Health Assessment

• • PR completed quickly with minimal review iterations, indicating straightforward dependency update and code migration.

Summary

Release Flagsmith 2.238.0

Updates project version and changelog for new release, enabling users to benefit from recent bug fixes and feature improvements.

Health Assessment

• • Release PR merged quickly with minimal review, indicating smooth release process.

Summary

Add experiments beta signup page

Enables early user interest measurement for the Experiments feature, allowing data‑driven rollout decisions and improving product adoption.

Health Assessment

• • The PR was reviewed and merged within 3.3 hours, indicating a smooth review process and high confidence in the implementation.

Summary

Upgrade ws dependency to fix CVE-2026-45736

This PR updates frontend dependencies, including rspack and related packages, to address a critical CVE in ws, ensuring secure builds and compatibility with latest tooling.

Health Assessment

• • The PR involved extensive dependency upgrades and lockfile regeneration across multiple environments, leading to a long cycle time and multiple review iterations. The large diff and dependency changes increase risk, but the security fix is critical.

Summary

Add unique event names from ClickHouse

Provides a service to fetch distinct event names per environment from ClickHouse, improving experimentation analytics.

Health Assessment

• • Rapid review and merge with minimal rework, indicating clear intent and solid test coverage.

Summary

Use native OpenAPI fields and consolidate private deps

Standardizes API documentation, improves compatibility with self‑hosted MCP v3, and simplifies dependency management, reducing maintenance overhead.

Health Assessment

• • Fast review and merge with minimal back‑and‑forth, indicating clear scope and well‑tested changes.

Summary

Update Renovate config for dependency commits

Ensures Renovate uses semantic commit type for all dependency updates, improving CI consistency.

Health Assessment

• • PR merged immediately with no review, indicating minimal complexity and low risk.

Summary

Fix Renovate config, enable dashboard, add linter

Ensures Renovate dependency management works correctly and adds validation to prevent future configuration errors.

Health Assessment

• • Rapid review and merge with minimal changes; low risk to production.

Summary

Track flagsmith-python-sdk 5.4.0

Adds a constant for flagsmith-python-sdk 5.4.0 to enable SDK version tracking.

Health Assessment

• • Automated PR with a single line addition, merged within minutes with no review friction.

Summary

Experiments UX improvements

Enhances experiments UI with improved variant tables, scrollbar, cache invalidation, and wizard behavior, improving user experience and data accuracy.

Health Assessment

• • The PR was reviewed quickly but required several iterations, indicating moderate complexity and a healthy review process.

Summary

Replace Dependabot with Renovate

Switches dependency update tool to Renovate for improved Python support, ensuring continuous security updates.

Health Assessment

• • Fast review and minimal rework; AI assistance helped streamline the migration to Renovate.

Summary

Add Gemini PR review configuration

Adds configuration file for Gemini code reviews, enabling automated review workflow.

Health Assessment

• • PR took 10 days to merge but involved only a single review and minimal changes, indicating a straightforward configuration update.

Summary

Add CVE and vulnerability guidance documentation

Provides customers with guidance on interpreting security scan results and handling CVEs, improving security awareness.

Health Assessment

• • Quick turnaround with minimal review, indicating straightforward documentation update.

Summary

Consolidate PR playbook to AGENTS.md

Centralizes PR collaboration guidelines, simplifying contributor onboarding and enabling consistent review agent usage.

Health Assessment

• • Fast review and merge with minimal changes, indicating low complexity and risk.

Summary

Prevent SSRF in webhooks

Adds validation to webhook URLs to prevent SSRF attacks and hides exception details from webhook test responses, improving security and user experience.

Health Assessment

• • Security fix required multiple iterations; review was immediate but code required several commits to satisfy tests and validation logic.

Summary

Reduce admin API trace sample rates to control costs

Lower Sentry tracing sample rates for the admin API to stay within the monthly quota, preventing overage charges and cost spikes.

Health Assessment

• • Rapid review and merge with minimal changes; low risk and high confidence in configuration update.

Summary

Fix missing feature_segment key in versioning

Prevents 500 errors by safely handling missing feature_segment key and returning a 400 response.

Health Assessment

• • Quick fix with minimal changes, AI-assisted review, no rework needed.

Summary

Use backend filter for multivariate experiment features

Ensures only multivariate flags appear in the experiment wizard, fixing pagination and race conditions to improve user experience.

Health Assessment

• • Fast 22‑hour cycle with a single review and minimal comments; moderate scope but no significant rework required.

Summary

Fix GitLab issue/MR status sync

Synchronizes GitLab issue and merge request metadata with Flagsmith when updated in GitLab.

Health Assessment

• • The PR had a fast review time and a relatively small scope, indicating a well-focused change.

Summary

Release Flagsmith v2.237.0

Bumps project version and updates changelog for new release.

Health Assessment

• • Release was approved quickly with minimal changes, indicating a smooth process.

Summary

Return experiment status counts in paginated list

Adds status counts to experiment list endpoint, enabling clients to see counts of experiments by status without extra queries.

Health Assessment

• • Quick review and merge within 20 hours, minimal rework, indicates straightforward enhancement.

Summary

Add experiments list page with filtering and pagination

Provides users with a searchable, paginated list of experiments, enabling efficient management and status tracking.

Health Assessment

• • Rapid review and merge with minimal rework, but large scope and multiple review comments suggest moderate risk.

Summary

Downgrade uv to supported version

Aligns dependency tool with Dependabot, preventing CVE issues and ensuring secure builds.

Health Assessment

• • Fast review cycle, AI-assisted review helped unblock CVE patching.

Summary

Add experiment creation wizard frontend

Enables users to create experiments via a guided wizard, improving onboarding and reducing configuration errors.

Health Assessment

• • The PR introduced a comprehensive experiment creation wizard with multiple steps and API integration, received quick initial review but required a single round of changes, indicating moderate complexity but efficient resolution.

Summary

Rewrite Sizing and Scaling docs as a workload-driven guide

Expands self-hosted Flagsmith sizing documentation with workload-driven patterns, examples, and guidance to help customers optimize deployments.

Health Assessment

• • The PR was reviewed quickly with minimal comments, indicating straightforward documentation updates. The small scope and single-file change contributed to a short cycle time.

Summary

Add pagination and deletion guard to experiments

Enhances API reliability by paginating experiment listings and preventing deletion of running experiments, reducing errors and improving user experience.

Health Assessment

• • Fast initial review but multiple commits indicate iterative refinement; overall low risk due to small scope and quick cycle time.

Summary

Add search query to experiment endpoints

Enables users to filter experiments by name or feature, improving API usability and reducing data retrieval overhead.

Health Assessment

• • Fast review and merge with minimal changes; AI review helped expedite approval.

Summary

Return feature object with experiment entity

Clients can now fetch experiment details and associated feature data in a single API call, reducing round-trips and improving performance.

Health Assessment

• • Fast review and minimal rework indicate a well-structured PR.

Summary

Add custom event tracking for feature creation

Enables analytics by tracking custom events when new features are created, improving visibility into feature lifecycle.

Health Assessment

• • PR was reviewed immediately and merged within 40 hours with minimal back‑and‑forth, indicating a straightforward change.

Summary

Bump flagsmith-sql-flag-engine to 0.1.1

Updates a critical dependency to resolve an AssertionError crash in segment rule translation, enhancing stability for production segment‑count refresh tasks.

Health Assessment

• • Quick dependency bump with no rework, minimal review friction.

Summary

Add Experiment model and CRUD endpoints

Introduces an Experiment model and RESTful API endpoints, enabling users to create, manage, and track experiments for feature flags, thereby expanding the platform’s experimentation capabilities.

Health Assessment

• • The PR received a quick review but required several subsequent commits to address feedback, indicating moderate iteration intensity and a sizable code change.

Summary

Replace Axios with Fetch for Slack Messaging

Eliminates vulnerable Axios dependency while preserving Slack messaging and file upload functionality.

Health Assessment

• • Quick review and merge after a single commit, minimal code changes, and no functional impact, indicating a low-risk, low-friction PR.

Summary

Release 2.236.0

Bumps the version to 2.236.0, updating release manifest, changelog, and version file.

Health Assessment

• • Release completed in under 18 hours with AI review, minimal changes, no blockers.

Summary

Add ClickHouse URL to production task definitions

Adds ClickHouse connection to production ECS tasks, enabling data migrations and segment endpoints to function correctly.

Health Assessment

• • Fast review and merge with minimal changes; no blockers.

Summary

Ensure new WarehouseConnection always inserts

Guarantees that recreating a warehouse connection triggers the necessary Redis updates, preventing data loss after deletion and recreation.

Health Assessment

• • Fast review and merge with minimal changes; no significant rework or contention.

Summary

Zero out stale segment-environment pairs

Ensures segment membership counts are accurate by removing stale data, improving data integrity and preventing incorrect analytics.

Health Assessment

• • Quick fix with minimal changes, reviewed immediately by AI, no major rework.

Summary

Fix segment membership count rendering

Corrects badge rendering by aligning response field names, improving UI accuracy.

Health Assessment

• • Quick, single‑commit fix with AI‑assisted review; minimal scope and fast turnaround.

Summary

Fix code reference count after unchanged rescan

Ensures accurate code reference counts after rescans, preventing false zero counts and improving data integrity for feature flag usage.

Health Assessment

• • Quick review and merge within 2 hours, minimal rework.

Summary

Add type filter to feature query API

Allows clients to filter features by type, improving API efficiency and enabling targeted experimentation.

Health Assessment

• • Quick review and merge with minimal changes, indicating low complexity and risk.

Summary

Bump clickhouse-driver to b33d5e7

Updates the clickhouse-driver dependency to the latest commit on the newjson branch, ensuring consistency with pyproject.toml.

Health Assessment

• • The PR was reviewed and merged quickly, with no significant discussion or rework needed.

Summary

Release version 2.235.0

This PR publishes a new release, updating changelog and version metadata.

Health Assessment

• • Release PR merged quickly with minimal review, indicating a straightforward release process.

Summary

Rework warehouse connection UI to card-based selection

Simplifies warehouse connection setup by replacing modal flow with an inline card-based interface, reducing configuration friction and improving user experience.

Health Assessment

• • The PR received a review immediately but took over 90 hours to merge, indicating possible scheduling or blocker delays. The UI refactor is a medium-large change with a single review round, suggesting straightforward implementation but extended cycle time.

Summary

Fix identity backfill JSON support issue

Restores daily identity backfill and per-project refresh on staging by adding JSON support to ClickHouse driver and updating ECS task definition.

Health Assessment

• • Quick fix with minimal rework; AI-assisted review helped resolve issue promptly.