Pull Request Explorer

Summary

Remove timestamps from client responses API

This backport removes timestamps from client responses, improving data consistency and reducing payload size.

Health Assessment

• • Quick backport with minimal changes, fast review and merge.

Summary

Backport Excel Injection Fix

Fixes a security vulnerability related to Excel injection by backporting the latest patch.

Health Assessment

• • Rapid review and merge with minimal changes, indicating low complexity and risk.

Summary

Fix copy icon and duplicate survey action

Fixes UI issues in survey dropdown and restores duplicate survey action for legacy environments, improving user experience and consistency.

Health Assessment

• • Rapid review and merge indicates low complexity and high confidence in the fix.

Summary

Fix responseId client API 404 with legacy environmentId

This fix resolves a 404 error when the client API is called with an environmentId instead of a workspaceId, ensuring reliable response retrieval for legacy environments.

Health Assessment

• • Quick fix with minimal changes, resolved in under 2 hours with no review friction.

Summary

Fix hardening of Helm env value rendering

Improves security by ensuring environment values are properly rendered in Helm charts, preventing potential injection or misconfiguration.

Health Assessment

• • Fast review and merge with minimal changes, indicating low complexity and risk.

Summary

Fix responseId client API bug

Corrects responseId handling in the client API, ensuring accurate data retrieval and preventing errors for end users.

Health Assessment

• • Quick fix with minimal changes, fast review and merge, indicating low complexity and risk.

Summary

Update Helm chart default image tag

Ensures Helm chart uses the correct image tag for deployments, maintaining consistency across releases.

Health Assessment

• • Quick merge with no review comments, indicating a straightforward change.

Summary

Require Cube API secret in compose

Ensures Cube API secret is required in Docker compose, improving security for self-hosted deployments.

Health Assessment

• • Quick fix with minimal changes, merged within minutes, indicating low complexity and high confidence.

Summary

Fix scheduled plan change description placeholders

Backport of #8064 to release/5.0, ensuring placeholders render correctly in billing pricing table.

Health Assessment

• • Quick AI‑assisted fix with minimal changes, fast review and merge.

Summary

Fix copy icon and duplicate survey action

Restores copy affordance for legacy environment IDs and reintroduces the duplicate survey feature, improving user workflow and reducing confusion.

Health Assessment

• • Quick, single‑review fix with minimal code churn, merged within 18 hours of opening.

Summary

Fix AI chart generation gating

Ensures AI chart generation is gated by the smartTools feature flag, preventing unintended data analysis usage and maintaining correct feature boundaries.

Health Assessment

• • Quick, single-commit fix with fast review and minimal changes, indicating low complexity and risk.

Summary

Fix routing for Teams and OAuth callbacks

Ensures Teams management and OAuth integration callbacks correctly route to settings, improving user flow and stability.

Health Assessment

• • Quick AI-assisted fix merged within minutes with minimal code changes and no review friction.

Summary

Update Helm chart default image tag

Ensures Helm chart deploys the correct image version, preventing accidental use of outdated images and improving deployment reliability.

Health Assessment

• • The PR was reviewed quickly with only two actionable comments and no subsequent commits, indicating a smooth review process.
• • Despite the large number of lines changed, the change was straightforward and did not introduce significant risk.

Summary

Require Cube API secret in Docker Compose

Ensures production Docker Compose requires a non‑empty Cube API secret, preventing runtime failures.

Health Assessment

• • Quick fix with minimal changes, resolved in under 15 hours, indicating efficient review and low complexity.

Summary

Fix harden Helm env value rendering

Ensures scalar values supplied via Helm are quoted as strings, preventing Kubernetes validation errors and improving deployment reliability.

Health Assessment

• • Single commit, quick review, fast merge; minimal risk.

Summary

Backport client environment API SDK fixes

Fixes compatibility issues for client environment API with older mobile SDKs, ensuring backward compatibility and passing tests.

Health Assessment

• • Quick backport with minimal changes, resolved compatibility issues, low risk.

Summary

Fix placeholder rendering in billing alert

Corrects the billing page alert to display the actual plan name and date instead of raw placeholders, improving user clarity and preventing confusion.

Health Assessment

• • Resolved in under 24 hours with a single commit and minimal code changes, indicating a straightforward fix with low complexity and risk.

Summary

Fix AI chart generation gating to smartTools

Ensures AI chart generation uses the correct permission, improving compliance and user experience by removing unnecessary PII gating.

Health Assessment

• • Quick fix with a single commit and minimal review, indicating low complexity and high confidence in correctness.

Summary

Fix routing for Manage Teams and OAuth callbacks

Corrects 404 errors caused by settings route restructure, ensuring users reach correct settings pages for team management and integration callbacks.

Health Assessment

• • Quick fix with minimal changes, resolved 404 bugs in a single commit, demonstrating efficient issue resolution.

Summary

Sanitize CSV/XLSX exports to prevent formula injection

Prevents malicious spreadsheet formulas from executing when admins export survey responses, protecting data integrity and security. Ensures exported files display literal strings, mitigating potential data exfiltration or execution attacks.

Health Assessment

• • Quick review and minimal rework; security fix merged within two days.

Summary

Fix Cube API secret injection in Helm defaults

Ensures Cube API secret is generated and mounted by default in Helm-managed deployments, preventing missing secrets in self-hosted setups.

Health Assessment

• • Quick fix with single commit and approval, minimal review friction.

Summary

Scope display contact lookup to workspace

Ensures displays are only linked to contacts within the same workspace, preventing cross‑workspace data leakage.

Health Assessment

• • Quick AI‑assisted fix with minimal review, resolved in under two days.

Summary

Scope display contact lookup to workspace

Prevents cross‑workspace display binding by scoping contact lookup to workspace, enhancing data isolation and security.

Health Assessment

• • Quick fix with single commit, minimal review, fast merge.

Summary

Backport Cube feedback schema fix to release 5.0

Fixes Cube feedback schema to ensure compatibility with release 5.0, improving data consistency for charting features.

Health Assessment

• • Fast review and merge within 15 hours, minimal changes, low risk.

Summary

Fix staging AI chart Cube schema

Synchronizes Cube schemas so AI-generated charts can query all feedback metrics, preventing failures in staging.

Health Assessment

• • Quick single-commit fix with one review, minimal rework, fast merge

Summary

Preserve legacy SDK shape with placeholders

Ensures older SDKs continue to function after API changes, preventing customer breakage and maintaining service reliability.

Health Assessment

• • Quick fix with minimal review cycles, maintaining backward compatibility for existing SDK users.

Summary

Add CSAT and CES summary filter icons

Adds missing icons for filter select in survey UI, improving user experience.

Health Assessment

• • Quick fix with minimal changes, fast review and merge.

Summary

Fix settings sidebar back navigation behavior

Improves user navigation by ensuring the back button returns to the previous non‑settings page, reducing confusion and streamlining workflow.

Health Assessment

• • Quick resolution with minimal rework, indicating a straightforward bug fix with low impact on overall system stability.

Summary

Enforce billing-only settings access

Prevents billing users from accessing restricted settings via direct URLs and aligns sidebar UX.

Health Assessment

• • Fast 14.8‑hour cycle with minimal rework; AI‑assisted code generation accelerated the fix and a single review round resolved all comments.

Summary

Add CSAT and CES summary filter icons

Adds missing CSAT and CES icons to the survey summary filter, improving user experience by making rating metrics more visible.

Health Assessment

• • Quick fix with minimal changes, approved within an hour, indicating a smooth review process.

Summary

Fix client timestamps in response API

Prevents respondents from manipulating submission timestamps, protecting analytics integrity.

Health Assessment

• • Single commit, no review iterations, quick merge, minimal risk.

Summary

Improve blocked state explanations across UI

Provides clearer inline explanations for blocked actions, reducing user confusion and support tickets.

Health Assessment

• • PR resolved UI clarity issues quickly with a fast initial review, but required several follow‑up commits to address feedback, indicating moderate iteration but overall efficient process.

Summary

Bump npm_and_yarn dependencies across directories

Updates multiple npm and yarn dependencies to newer versions, improving security and stability.

Health Assessment

• • The PR had a long review time (~67h) but only one rework commit, indicating moderate friction but low risk.

Summary

Make Cube a mandatory baseline dependency in v5

Cube is now part of the Formbricks v5 baseline stack, simplifying deployment and reducing edge-case code paths.

Health Assessment

• • The PR had a fast cycle time and received prompt reviews, but its large scope and multiple commits suggest potential complexity and risk.

Summary

Translate footer links to survey language

Ensures footer links on survey link pages display in the survey's selected language, improving user experience for international respondents.

Health Assessment

• • PR took 77 hours to merge with a single review and minor rework, indicating moderate complexity but efficient resolution.

Summary

Harden storage presigned URL issuance

Improves security by restricting presigned URL generation to surveys that allow file uploads and validating file extensions against stored configuration, reducing risk of unauthorized uploads.

Health Assessment

• • The PR was reviewed quickly but required several commits to address test coverage and type errors, indicating moderate iteration before merge.

Summary

Fix SSO redirect after account deletion

Ensures users are redirected to the correct post‑deletion page after confirming deletion via Google SSO, preventing confusion and potential data loss.

Health Assessment

• • Quick, single‑commit fix with minimal code changes resolved a redirect bug affecting SSO users.

Summary

Backport SSO deletion redirect fix

Fixes redirect after SSO account deletion in release 4.9, ensuring users land on intended post‑deletion page instead of the setup flow.

Health Assessment

• • Rapid review and merge indicate a straightforward, low‑risk fix with minimal scope.

Summary

Simplify SSO account deletion flow

Streamlines the SSO account deletion process, removing provider‑specific complexity and improving user experience while maintaining security controls.

Health Assessment

• • The PR had a long cycle time but a quick initial review, indicating a fast response to feedback. Multiple commits and a large number of files suggest significant rework and a high‑risk change.

Summary

Backport SSO deletion simplification to 4.9

Backports simplified SSO account deletion to release 4.9, streamlining the deletion flow and reducing friction for SSO users. It removes unnecessary redirects and tightens confirmation steps.

Health Assessment

• • The PR had a long review cycle and large code changes, indicating a significant effort to backport a feature to an older release. The slow turnaround may reflect limited urgency or resource constraints.

Summary

Fix default contact attribute keys seeding on workspace creation

Ensures new workspaces have essential contact attribute keys seeded, restoring functionality for contact ingestion and identification flows.

Health Assessment

• • Quick fix with minimal changes, fast review and merge, low risk.

Summary

Update conditional logic docs to block terminology

Documentation updated to use block terminology for conditional logic, improving consistency and clarity for users.

Health Assessment

• • Long cycle time indicates delayed review; minimal changes suggest low risk.

Summary

Add A/B test for hidden fields layout

Enables A/B testing to move hidden fields and variables to the settings tab, reducing cognitive load for users.

Health Assessment

• • The PR had an 11.5‑day cycle time and over 200 lines of changes, indicating a slow feedback loop and significant scope. Multiple commits after the first review suggest iterative refinement, raising the risk of integration issues.

Summary

Fix flag ID for onboarding A/B test

Corrects the feature flag identifier to align with new naming conventions, ensuring accurate A/B testing during onboarding and preventing mis‑targeted user experiences.

Health Assessment

• • Quick fix with minimal changes, resolved within a single review cycle.

Summary

Add custom CSS guide for surveys

Provides developers with guidance to avoid CSS collisions in surveys, improving integration quality.

Health Assessment

• • PR took over two days to review, but only one review round and no rework, indicating a straightforward docs update.

Summary

Refactor unifyFeedback to feedbackDirectories flag

Simplifies license gating by consolidating unifyFeedback into feedbackDirectories, reducing duplicate flags and improving user experience.

Health Assessment

• • Quick review and approval within 18 hours, minimal rework, small to medium scope refactor.

Summary

Add A/B experiment for reverse trial copy

Test reverse-trial copy to improve conversion on the onboarding plan page, enabling data-driven copy optimization.

Health Assessment

• • The PR required multiple iterations after a single review, indicating significant rework on a large codebase, but the review was quick and the merge was completed within a day.

Summary

Add A/B test for trial upgrade banner

Enables a PostHog A/B experiment to show a richer trial banner with usage progress and payment CTA, improving trial user experience.

Health Assessment

• • The PR required extensive iteration after a single review, with multiple commits and a large number of files changed, indicating significant rework and a high scope of changes.

Summary

Add A/B test to skip onboarding theme step

Introduces a PostHog A/B experiment that skips the theme selection step during onboarding, aiming to reduce friction and improve completion rates.

Health Assessment

• • The PR had a long cycle time due to merge conflict resolution, but the review was quick and only a few commits were needed after the initial review.

Summary

Update license request links to direct form

Ensures self-hosted users are directed to the correct license request form, improving user experience and reducing confusion.

Health Assessment

• • Quick change with minimal code churn, merged within a day, indicating a smooth review process.