Pull Request Explorer

Summary

Return 400 for invalid survey image URLs

Fixes error handling for survey image URLs, ensuring invalid inputs return 400 instead of 500, improving API reliability and reducing Sentry noise.

Health Assessment

• • Quick turnaround with minimal rework; AI-assisted code generation streamlined bug fix.

Summary

Enforce workspace scoping for personal survey links

This PR tightens security by ensuring personal link generation for contacts is scoped to the same workspace, preventing unauthorized cross‑workspace data access.

Health Assessment

• • Fast cycle time with minimal rework; review was quick and approvals were straightforward.

Summary

Fix multi-language response category split

Corrects analytics grouping by ensuring choice labels are canonicalized, preventing duplicate categories across languages and improving data accuracy for bilingual surveys.

Health Assessment

• • The PR required several iterations after the initial review, indicating moderate complexity in handling multi-language logic and Hub integration, but the final approval was swift, suggesting the changes were well-contained and well-tested.

Summary

Fix mobile preview button layout

Corrects the positioning of preview and restart controls in the survey editor's mobile preview, ensuring they stay within the preview panel for a consistent user experience.

Health Assessment

• • Quick fix with minimal changes, no review required, merged within an hour.

Summary

Add sentiment and emotion fields to charts

Enables sentiment and emotion enrichment in the chart builder, providing richer analytics and user insights for the XM Suite.

Health Assessment

• • The PR was reviewed quickly (under an hour) and AI-assisted review comments were incorporated, but the change set is large (over 2,400 lines across 20 files), indicating a significant feature addition with moderate risk.

Summary

Add Contact Sales card and A/B experiments

Enhances billing page with a Contact Sales card and a new plan comparison table, improving user decision-making and enabling A/B testing for subscription redesign.

Health Assessment

• • Rapid iteration after a brief review led to many commits, indicating proactive issue resolution but the large scope and multiple changes raise risk.

Summary

Reject scheme-relative callback URLs in login

Prevents open redirect attacks after login by rejecting unsafe callback URLs, enhancing security for users.

Health Assessment

• • Quick fix with minimal changes, single review, no rework, low risk.

Summary

Suppress Better Auth warning

Adds config to silence Better Auth warning about oauthAuthServerConfig, improving startup logs and ensuring correct OAuth metadata route.

Health Assessment

• • Quick fix with minimal changes, resolved in under 2 days, minimal review friction.

Summary

Add composite FK for FeedbackSource directory-workspace

Enforces database-level integrity between feedback sources and their assigned directories, preventing orphaned records and improving data consistency.

Health Assessment

• • The PR introduced a composite foreign key and related business logic, requiring multiple commits and AI-assisted review; while the review cycle was quick, the large scope and database changes elevate risk.

Summary

Generate 20 AI example responses for surveys

Doubling synthetic responses from 10 to 20 provides richer dashboards, enhancing user experience. The change incurs modest LLM cost but delivers fuller analytics.

Health Assessment

• • Quick turnaround with minimal rework; AI-generated code was reviewed and approved within hours.

Summary

Fix privilege escalation in organization‑users API

Prevents managers from escalating privileges or demoting owners via the API, securing user management and protecting against unauthorized role changes.

Health Assessment

• • The PR was reviewed quickly (0.1h) and approved in a single round, but the changes span 360 lines across four files, indicating a substantial security fix with moderate risk.

Summary

Move runtime-only env vars to passThroughEnv

Reduces build cache invalidation by separating build‑affecting env vars from runtime secrets, improving CI efficiency. Ensures only necessary variables trigger rebuilds, speeding up development and CI pipelines.

Health Assessment

• • Fast review and merge within 22 hours, minimal rework, efficient process.

Summary

Fix email embed rating stars rendering

Ensures rating stars display correctly in email clients by replacing inline SVG with hosted PNG, improving user experience.

Health Assessment

• • Quick fix with minimal changes, fast review, no blockers.

Summary

Prevent Turbo Cache from Growing Unbounded

Stops local disk usage from exploding by limiting Turbo cache size and excluding large Next.js directories, improving developer experience and preventing build failures.

Health Assessment

• • Quick review and merge within 24 hours, minimal changes, low risk

Summary

Add Playwright Axe integration for accessibility tests

Adds accessibility testing with Axe to Playwright, improving UI compliance and reducing manual QA effort.

Health Assessment

• • The PR took 12 days to merge, with a long delay between initial review and subsequent commits, indicating significant rework. The large number of added lines and multiple review rounds suggest high complexity and potential risk.

Summary

Bump SonarQube scan action to fix Java 17 deprecation

By bumping the SonarQube scan action to v8.2.0 and dropping the skipJreProvisioning flag, the workflow now provisions Java 21, eliminating the CI break caused by Java 17 deprecation. This ensures all PRs pass the SonarQube quality gate without manual intervention.

Health Assessment

• • Quick fix with minimal changes, resolved in under an hour with no rework.

Summary

Scope Tailwind CSS to prevent host page pollution

Ensures survey UI CSS is fully scoped to avoid leaking global styles into host pages, protecting host app styling and preventing visual regressions.

Health Assessment

• • PR had a quick initial review but required multiple iterations over a long cycle, indicating moderate friction and a slow overall timeline.

Summary

Add translation env to Hub and document config

Ensures translation environment variables are passed to Hub services and documents enrichment settings for self-hosters, improving configuration clarity.

Health Assessment

• • Quick approval with minimal review, indicating a straightforward configuration update.

Summary

Merge main into epic/workflows-v1 to sync branches

Keeps the epic branch up to date with main, resolving conflicts and ensuring type checks and tests pass, improving stability and reducing merge friction.

Health Assessment

• • Fast cycle time and review, but large code churn indicates high risk of regressions.

Summary

Revamp Unify Feedback UI and taxonomy gating

Redesigns the Unify Feedback experience, renaming UI elements, adding new navigation, improving source management, and gating topics based on record counts and embeddings, enhancing user experience and data handling.

Health Assessment

• • Fast review cycle with minimal rework, but large code changes indicate significant impact.

Summary

Fix Sentry org-not-found error on landing page

Eliminates false Sentry alerts for missing organization on the zero-workspaces onboarding page, improving monitoring accuracy and reducing noise for ops teams.

Health Assessment

• • Fast review with a single AI‑assisted comment, minimal code changes, and no regression risk.

Summary

Validate userId length before teardown

Ensures the SDK retains the current user when a new userId exceeds the maximum length, preventing accidental user loss.

Health Assessment

• • Quick fix with minimal changes, fast review, no rework.

Summary

Normalize signup email token creation

Fixes mixed‑case email token lookup errors, improving signup reliability and user experience.

Health Assessment

• • Quick review cycle with AI assistance, minimal rework, and no major risk.

Summary

Enable workflow-run retries and reconcile orphaned runs

Adds retry logic for transient failures and a background reconciler to recover orphaned workflow runs, improving reliability and reducing manual intervention.

Health Assessment

• • The PR received a quick initial review but required several iterations to refine retry and reconciliation logic, leading to a large code change and a 137‑hour cycle time.

Summary

Reconcile stuck running workflow runs

Adds execution‑side crash recovery for workflow runs stuck in the running state, preventing infinite loops and improving reliability.

Health Assessment

• • Fast review and merge (17 h cycle, 0.4 h to first review) with minimal rework indicates a well‑tested, low‑risk feature addition.

Summary

Bump dependency to fix security vulnerability

This update patches a low‑severity vulnerability in a transitive dependency, preventing potential hangs in promise handling for consumers.

Health Assessment

• • Quick fix with minimal changes and fast review, indicating low risk and efficient process.

Summary

Fix GitHub release fetch with auth and fallback

Improve GitHub release fetching to handle rate limits and errors, reducing Sentry 500s and improving user experience.

Health Assessment

• • The PR had a relatively fast cycle time and low review friction, indicating a well-structured and well-reviewed change.

Summary

Make chart filter case-insensitive and add value pickers

Improves chart filtering accuracy by enabling case‑insensitive exact matches and introduces value pickers, reducing errors and enhancing user experience for data segmentation.

Health Assessment

• • The PR had a large scope and a long cycle time, but the review was quick and required minimal rework, indicating efficient collaboration.

Summary

Fix: drop responses from queue on 400 error

Prevents infinite retry loops by dropping permanently failed responses, improving user experience and reducing server load.

Health Assessment

• • The PR had a long cycle time but minimal review friction; AI review helped streamline feedback.

Summary

Improve survey accessibility to WCAG AA

Enhance survey rendering for better accessibility and usability

Health Assessment

• • The PR has a large scope with many files changed, indicating significant updates to the survey package. The review process was iterative, with multiple comments and changes requested, suggesting some friction in the review process.

Summary

Canonicalize legacy language codes to BCP-47

Standardizes language tags across the stack to a single canonical BCP‑47 format, improving consistency, preventing mismatches, and ensuring backward compatibility for legacy SDKs.

Health Assessment

• • PR had a fast initial review but required extensive rework across many commits, indicating complex changes. The large scope and many files suggest high risk, but the quick review time shows reviewers were efficient.

Summary

Sync epic with main to resolve locale conflicts

Ensures main and epic branches stay in sync, preventing merge conflicts on locale files and maintaining consistent translations.

Health Assessment

• • Quick sync with minimal changes, resolved locale conflicts efficiently.

Summary

Merge main into epic to resolve conflicts

Synchronizes the epic branch with main, ensuring conflict-free integration and maintaining language code consistency.

Health Assessment

• • Fast merge with minimal review time; large diff due to many files but no functional changes; low friction in review process.

Summary

Fix language alias preservation in canonicalization

Ensures user language settings remain accurate after migration, preventing default language fallbacks and editor lockouts, improving user experience and data integrity.

Health Assessment

• • Rapid review and minimal rework, AI-assisted comments helped streamline the process.

Summary

Validate i18n lockfile synchronization in scan-translations

Adds offline validation for the i18n.lock file to prevent out‑of‑sync commits, improving translation consistency and CI reliability.

Health Assessment

• • Fast cycle time (1.2h) and minimal review comments indicate a smooth process; AI‑assisted review helped catch linting and type issues early.

Summary

Simplify AI Survey Dialog

Streamlines the AI survey creation flow by removing unnecessary options, improving accessibility and consistency, and reducing cognitive load for users.

Health Assessment

• • Fast review and merge cycle (under 2 hours) with no rework or blockers, indicating a straightforward refactor with minimal impact on the codebase.

Summary

Fix translation files for multiple locales

Corrects translation keys and removes unused entries, improving internationalization accuracy.

Health Assessment

• • Quick fix with minimal changes, approved in under two hours.

Summary

Persist endingId on natural survey finishes

Ensures that surveys completed without explicit jumps correctly record the ending ID, enabling follow‑ups and workflow triggers to fire as intended.

Health Assessment

• • The PR was reviewed and merged within 69 hours, with a single review comment and minimal rework, indicating a smooth process and low risk.

Summary

Fix dead XM & Surveys doc links

Ensures users can navigate to XM & Surveys documentation without encountering 404 errors, improving user experience and reducing support tickets.

Health Assessment

• • PR addressed widespread broken links across docs and app, requiring coordinated updates across many files; review was quick but required significant rework to image assets.

Summary

Add A/B experiment UI for trial ending, response limit, app-connection, templates

Introduces new UI components behind feature flags to improve trial conversion and reduce friction.

Health Assessment

• • The PR took 12 days to merge, with multiple commits and review rounds, but was gated behind PostHog flags to mitigate risk. The large scope and many changes suggest significant effort and potential for bugs if not carefully tested.

Summary

Add marketing attribution to auth flows

Captures UTM and page parameters during signup and login, attaching them to PostHog events to enable acquisition analysis.

Health Assessment

• • The PR added marketing attribution tracking, required several iterations after an AI review, but was merged quickly with minimal friction.

Summary

Fix language code immutability on update

Ensures language codes remain canonical, preventing accidental changes and maintaining data integrity across the platform.

Health Assessment

• • Quick, single-commit fix with minimal review, indicating low complexity and risk.

Summary

Add MCP OAuth setup guides for Claude and Codex

Adds user‑facing documentation for setting up MCP OAuth with Claude and Codex, improving onboarding and reducing support queries.

Health Assessment

• • Docs update completed quickly with minimal review, indicating an efficient process.

Summary

Add workflow runner to send emails

Enables automated email notifications from workflows, improving user engagement and reducing manual follow‑ups.

Health Assessment

• • The PR had a quick review turnaround but required several iterations to address retry logic and tenant integrity, indicating moderate complexity.

Summary

Surface Vertex 429 quota errors instead of silent failure

Adds clear error handling for Vertex AI quota exhaustion, improving user feedback and ops visibility.

Health Assessment

• • PR required a single review after a long review time, with moderate rework; user‑facing error handling improved; moderate scope and no immediate production impact.

Summary

Remove trial banner button and create new A/B experiment

Users can now click the entire trial banner to navigate to billing, improving consistency of event tracking across variants and enabling better measurement of billing-page intent.

Health Assessment

• • The PR involved multiple translation rollbacks and a new A/B experiment, leading to several commits and a moderate review cycle. The changes are frontend UI and experiment flag updates, with no backend or devops impact.

Summary

Add PostHog events for AI survey creation

Adds analytics events to track AI-generated surveys and key product actions, improving insight into user engagement.

Health Assessment

• • PR received a single quick review but had a long cycle time due to merge conflicts and integration with the main branch.

Summary

Update dead XM & Surveys link

Corrects a broken link on the platform introduction page, ensuring users reach the correct surveys overview.

Health Assessment

• • Fast turnaround with a single commit and approval, indicating a straightforward fix with minimal risk.

Summary

Fix language codes migration feedback

Ensures safe, reliable migration of language codes, preventing timeouts and supporting new canonical tags, improving system stability.

Health Assessment

• • Quick review cycle with AI assistance, addressing critical migration logic and adding comprehensive tests.

Summary

Add OAuth support for MCP server

Enables OAuth authentication for the MCP server, allowing third‑party clients to securely access Formbricks APIs with JWT tokens and dynamic client registration.

Health Assessment

• • Rapid iteration with AI‑assisted review and code generation added a large OAuth feature in under 10 hours, but required multiple commits to address feedback, indicating moderate review friction and high implementation risk.