Pull Request Explorer

Summary

Remove hardcoded plan names from upgrade banners

Fixes UI copy to avoid coupling to specific plan tiers, improving maintainability and reducing future patch releases.

Health Assessment

• • Quick fix with minimal changes, no rework, low risk.

Summary

Fix broken migration link

Corrects broken documentation and in-app link for workspace ID migration, ensuring users can navigate to the migration guide without encountering 404 errors.

Health Assessment

• • Quick fix with minimal changes, resolved in a single round of review and merged within 17 hours.

Summary

Restore 'Label Color' rename in styling settings locales

Fixes UI string rename that was reverted during a merge, ensuring consistent labeling across all locales.

Health Assessment

• • Quick fix with minimal changes, no code modifications, low risk to production.

Summary

Unify upgrade UI in settings

Improves layout and organization of upgrade prompts across billing, feedback directory, and workspace feedback sources pages by integrating a SettingsCard component, enhancing user experience.

Health Assessment

• • Long review time indicates delayed feedback; small scope suggests low risk.

Summary

Fix Hungarian translation strings

Corrects informal wording and missing translations in Hungarian locale, improving user experience for Hungarian-speaking customers.

Health Assessment

• • Quick, single-commit fix with minimal changes and no rework, indicating a straightforward resolution of a localization issue.

Summary

Bind storage uploads to survey elements

Ensures file uploads are scoped to the correct survey element, improving security and data integrity while maintaining backward compatibility with legacy URLs.

Health Assessment

• • The PR had a long cycle time and required multiple review rounds, indicating significant rework, but the review process itself was quick once changes were submitted.

Summary

Fix read-only webhook authorization issue

Prevents read‑only workspace members from triggering outbound HTTP requests via the webhook test endpoint, tightening security and protecting against SSRF attacks.

Health Assessment

• • The PR required over 90 hours from creation to merge, with a single review request and two follow‑up commits, indicating a slow review cycle but limited code changes.

Summary

Drop unused exports to improve HMR

Removing unnecessary export statements from component files eliminates Fast Refresh HMR skips, improving developer experience during local development.

Health Assessment

• • Quick review and merge, minimal changes, low risk

Summary

fix: clean up setTimeout schedules in contact-attribute effects

Fixes stale state issues in the contacts UI by adding cleanup to setTimeout callbacks, preventing errors when components unmount or re-render.

Health Assessment

• • Minimal code changes (4 lines added, 2 removed) with AI assistance; review took over 56 hours but required only a single approval, indicating low complexity and low risk.

Summary

Add missing JSX key props in segment-filter

Fixes React key warnings in device filter, ensuring correct rendering. Prevents potential UI glitches that could confuse users.

Health Assessment

• • PR addressed a minor UI bug with a single commit and quick approval after a single review round, indicating a straightforward fix with minimal risk.

Summary

Add CSRF protection to OAuth integration flows

Secures OAuth flows for Google Sheets, Slack, Notion, and Airtable by replacing readable state with opaque Redis‑backed state, preventing CSRF and exposing workspace IDs.

Health Assessment

• • Security‑critical changes required extensive refactoring and test coverage; the PR had a slow cycle time and multiple rework commits, but the initial review was quick and only one round of comments.

Summary

Remove invalid placeholder ARIA roles

This change removes invalid ARIA role attributes that were placeholders, ensuring proper accessibility for screen readers. It improves compliance and user experience for visually impaired users.

Health Assessment

• • Single commit, quick approval after review, minimal changes, low risk.

Summary

Honor prefers-reduced-motion in framer-motion previews

Adds accessibility compliance by respecting user reduced motion preferences in preview components, preventing motion-triggered vestibular issues.

Health Assessment

• • Fast review and approval with minimal changes, low risk.

Summary

Move SAML opts into init to avoid shared state

This change eliminates a hidden shared state bug in SAML authentication. It ensures that future request‑level mutations cannot inadvertently affect all users, maintaining reliable login flows.

Health Assessment

• • Single commit after review, quick turnaround, minimal scope, low risk.

Summary

Pin Dockerfile package versions for reproducible builds

Pin global package versions in Dockerfile to guarantee reproducible builds and protect against upstream tag swaps, reducing build instability.

Health Assessment

• • Quick review and merge after a single comment, indicating a straightforward change with minimal risk.

Summary

Restore logout and profile access for billing users

Billing‑role users can now log out and view their profile pages, improving usability and compliance.

Health Assessment

• • Quick turnaround with minimal review, indicating a straightforward bug fix.

Summary

Restore logout and profile access for billing users

Billing-role users can now log out and access their profile page. This fixes a critical usability issue that prevented billing users from managing their accounts.

Health Assessment

• • Fast turnaround with single review and merge, indicating a straightforward bug fix.

Summary

Fix hardening of Helm secret lookups

Ensures Helm chart releases handle secret lookups safely, preventing failures during CI and improving stability for deployments.

Health Assessment

• • Quick fix with minimal changes and fast review, indicating low complexity and high confidence.

Summary

Fix harden Helm release secret lookups

This fix prevents Helm chart release failures caused by secret lookup errors, ensuring reliable deployments and reducing potential downtime for users.

Health Assessment

• • Quick turnaround with minimal rework indicates a straightforward bug fix with low complexity.

Summary

Cascade delete Hub feedback records on org deletion

Ensures external Hub data stays consistent when an organization is removed, preventing orphaned records and reducing storage costs.

Health Assessment

• • Fast review cycle (6 min) and single commit indicate a straightforward, low‑risk change with minimal rework.

Summary

Backport cascade delete Hub feedback records

Ensures that deleting an organization also removes related Hub feedback records, preventing orphaned data and maintaining data integrity across services.

Health Assessment

• • Fast review and merge with minimal changes, quickly addressing data integrity concerns.

Summary

Restructure docs into Platform, Surveys, Unify Feedback tabs

Reorganizes documentation to align with product structure, improving navigation and clarity for users and developers.

Health Assessment

• • Fast review and merge with minimal rework, indicating clear documentation changes and low impact on production code.

Summary

Fix JSON payload size limit

Prevents large JSON requests from overwhelming the server, improving stability and security.

Health Assessment

• • The PR was merged quickly with minimal review time, but required several commits after the initial review, indicating some iterative refinement.

Summary

Limit JSON request body size to prevent DoS

Adds a 2 MiB limit on JSON/raw API payloads, updates all API routes to enforce the limit before validation, and introduces comprehensive tests to ensure safe handling.

Health Assessment

• • The PR quickly resolved a DoS risk with a single review and minimal rework, but the changes span many API routes, resulting in a large code footprint.

Summary

Return 404 on mid-update response deletion

The API now returns a 404 when a response is deleted during an update race, preventing misleading error responses. This improves reliability and clarity for clients.

Health Assessment

• • The PR addressed a race condition with minimal changes and was merged after a single review, indicating a straightforward fix.

Summary

Order Helm Hub migrations after Prisma

Ensures database migrations run in the correct order during Helm installs, preventing race conditions and data integrity issues for Formbricks users.

Health Assessment

• • Fast review (0.1h) and minimal rework indicate a straightforward bugfix with low risk to production.

Summary

Replace bundled Redis with Valkey in Helm chart

Ensures the Formbricks Helm chart uses a supported Valkey image, eliminating a broken Bitnami dependency and improving reliability for deployments.

Health Assessment

• • The PR was reviewed and merged within 22.6 hours, with a single AI‑generated review comment that was addressed in one follow‑up commit, indicating a smooth and efficient process.

Summary

Fix bundled Helm Redis to use Valkey

Updates the Helm chart to replace bundled Redis with Valkey, ensuring compatibility with release/5.0 and improving performance for deployments.

Health Assessment

• • The PR was reviewed and merged within 17 hours, with only one follow‑up commit, indicating a smooth review process and minimal rework.

Summary

Pin DNS and block redirects in webhook delivery

Hardens webhook delivery against SSRF attacks by pinning DNS and blocking redirects, improving security and compliance.

Health Assessment

• • Fast review and single round of changes indicate efficient process; security fix delivered quickly with minimal friction.

Summary

Backport DNS pinning fix

Fixes DNS pinning issue for improved security and reliability.

Health Assessment

• • Quick review and merge, minimal rework, straightforward bug fix.

Summary

Remove isAIDataAnalysisEnabled flag in v5

Eliminates unused AI data analysis flag, cleans up database, UI, tests, and translations, improving codebase clarity and reducing maintenance overhead.

Health Assessment

• • Quick turnaround with minimal review, indicating a straightforward fix and strong test coverage.

Summary

Remove AI Data Analysis Flag

Eliminates unused AI data analysis flag, simplifying billing, UI, and database schema, reducing complexity and potential confusion.

Health Assessment

• • Quick fix with minimal review, indicating low complexity and high confidence in removal.

Summary

Backport CSAT and CES summary filter icons

Adds missing CSAT and CES icons to the survey summary filter combobox, improving user experience and consistency across versions.

Health Assessment

• • Quick, single‑commit fix merged within a day, indicating low complexity and minimal review friction.

Summary

Fix DNS pinning and redirect blocking on webhook delivery

Ensures webhook delivery uses pinned DNS and blocks redirects, improving security and reliability for webhook integrations.

Health Assessment

• • Quick AI‑assisted fix with minimal changes, fast review and merge, low risk.

Summary

Order Helm Hub migrations after Prisma

Ensures Helm Hub migrations run after Prisma migrations complete, preventing race conditions.

Health Assessment

• • Quick fix with minimal changes, fast review and merge, low risk.

Summary

Validate displayId ownership on response creation

Adds ownership checks for displayId in response creation endpoints, preventing cross-workspace linking and ensuring data integrity.

Health Assessment

• • The PR fixed a security vulnerability with quick initial review but required multiple commits to refine validation logic and tests.

Summary

Reserve future contact keys and improve segment errors

Prevents key collisions and provides clearer error messages for users, improving data integrity and user experience.

Health Assessment

• • Quick turnaround with minimal rework; AI-assisted code generation accelerated development.

Summary

Backport reserved contact keys and segment errors

Ensures safe contact key usage and clearer validation errors, reducing data conflicts and improving user experience during migration.

Health Assessment

• • Fast turnaround with minimal review iterations indicates an efficient process and low complexity for the changes.

Summary

Fix chart date range toggle and preset inclusion

Corrects chart editor behavior when switching date ranges and ensures presets include current day, improving user experience and data accuracy.

Health Assessment

• • Quick resolution with minimal rework; AI review provided actionable feedback, leading to a fast merge within 2 hours.

Summary

Allow enterprise OAuth display names

Enterprise users can now use display names containing commas and parentheses, ensuring Azure AD OAuth claims pass validation. The change also tightens whitespace rules to reject tabs and newlines, improving data consistency.

Health Assessment

• • Fast cycle time and single review round indicate smooth integration.

Summary

Allow enterprise OAuth display names

Enables enterprise OAuth users to have display names with commas and parentheses, improving compatibility with Azure AD and tightening whitespace validation.

Health Assessment

• • Quick fix with minimal changes, approved in under an hour, indicating smooth review and low risk.

Summary

Fix chart date range type switch and presets include today

Corrects chart editor behavior when toggling date ranges and ensures preset ranges include current day, improving data accuracy and user experience.

Health Assessment

• • Fast turnaround with minimal changes; single review cycle and quick merge.

Summary

Add close button to error screen

Adds a close button to the response error screen, improving user experience by allowing users to dismiss error messages.

Health Assessment

• • Quick fix merged within 1.1 hours, indicating efficient review and low complexity.

Summary

Fix AI translation editor remount logic

Ensures AI-generated translations populate rich‑text editors correctly, improving user experience and progress tracking.

Health Assessment

• • Quick fix with minimal changes, resolved in under 5 hours, low review friction.

Summary

Fix AI translation rich-text editors empty

Ensures AI-generated translations appear correctly in rich-text editors, improving multilingual survey creation and user experience.

Health Assessment

• • Quick, single-file fix with minimal changes; fast review and merge cycle indicates low complexity and risk.

Summary

Add close button to error screen

Adds a close button to the survey response error UI, improving user experience by allowing users to exit error screens quickly.

Health Assessment

• • Quick fix with minimal changes, AI‑assisted review helped catch issues early.

Summary

Add typecheck command and fix formatting

Introduces a workspace‑wide TypeScript typecheck command and resolves formatting and type errors, improving developer workflow and code quality.

Health Assessment

• • The PR added a new typecheck command and fixed formatting, requiring several iterations after the initial review, but the review was quick and the changes were largely straightforward, resulting in a moderate risk and a large scope.

Summary

Backport billing-only settings access to 5.0

Ensures billing users are correctly redirected and restricted, improving security and user experience.

Health Assessment

• • Fast review and merge with minimal rework, indicating a straightforward bug fix.

Summary

Backport settings navigation fix to 5.0

Fixes navigation behavior in the settings sidebar to prevent users from getting stuck, improving user experience and reducing support tickets.

Health Assessment

• • Quick, single-commit fix with minimal code changes, AI-assisted, and fast review cycle.

Summary

Backport Cube API secret Helm defaults

Ensures Cube API secret is generated and preserved in Helm-managed secrets for version 5.0, improving deployment reliability.

Health Assessment

• • Quick, single-commit fix with fast review and merge, indicating low complexity and minimal risk.