Skip to content

Release v2026.3.0 - #2104

Merged
matthew-white merged 31 commits into
masterfrom
next
Sep 11, 2026
Merged

Release v2026.3.0#2104
matthew-white merged 31 commits into
masterfrom
next

Conversation

@matthew-white

@matthew-white matthew-white commented Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

This PR prepares the release of v2026.3. It should only contain changes from other PRs that have already been approved and merged (and possibly merge commits from the master branch).

alxndrsn and others added 6 commits August 4, 2026 14:05
@alxndrsn
nginx: buffer responses in nginx, not application layer (#2036)
2ce18ad 
Closes #2029
@alxndrsn
nginx: make selfsign cert generation more robust (#2097)
097bb4f 
Protect against failure between privkey generation and fullchain generation.
@alxndrsn
nginx: don't regenerate bad host SSL cert if exists (#2096)
736344e 
* consistent with surrounding code: other keys are only generated if they don't exist
* generation is fast, but repeating every startup is still a waste of effort
@alxndrsn
nginx: remove ssl_trusted_certificate (#2033)
60503c4 
This setting is only relevant if either `ssl_verify_client` or `ssl_stapling` is enabled.  Neither setting is.

See: https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_trusted_certificate

Any deployer who does require client certificate verification is likely sophisticated enough to re-enable themselves.

Closes #831
@garethbowen
chore: update client and server for v2026.2.2
4b24698
@matthew-white
Merge branch 'master' into next
6dc2fbf
@matthew-white

matthew-white commented Aug 13, 2026

Copy link
Copy Markdown
Member Author

@alxndrsn I just noticed that CI failed here with a timeout. The test is about Sentry + CSP, so I thought it might interest you.

@alxndrsn

alxndrsn commented Aug 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

@alxndrsn I just noticed that CI failed here with a timeout. The test is about Sentry + CSP, so I thought it might interest you.

Failing job: https://github.com/getodk/central/actions/runs/31661302771/job/94326512906?pr=2104

Network nginx_default  Removed
      1) "after all" hook for "should generated expected CSP for SENTRY_DSN_FRONTEND='https://abcdef0123456789abcdef0123456789@some-dsn.ingest.sentry.io/'"

[mocha-setup] Cleaning up HTTP(S) Response objects whose bodies have not been read...
[mocha-setup] Cleanup complete.

  1140 passing (30s)
  1 failing

  1) setup-odk.sh
       SENTRY_DSN_FRONTEND
         "after all" hook for "should generated expected CSP for SENTRY_DSN_FRONTEND='https://abcdef0123456789abcdef0123456789@some-dsn.ingest.sentry.io/'":
     Error: Timeout of 2000ms exceeded. For async tests and hooks, ensure "done()" is called; if returning a Promise, ensure it resolves. (/home/runner/work/central/central/test/nginx/src/mocha/setup-odk.spec.js)
      at process.processImmediate (node:internal/timers:504:21)

This was referenced Aug 14, 2026
Merged
Merged
@alxndrsn

alxndrsn commented Aug 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

@alxndrsn I just noticed that CI failed here with a timeout.

Looks like it just took longer than expected. PR to increase the timeout at #2130.

alxndrsn and others added 17 commits August 14, 2026 10:02
@alxndrsn
test/nginx/setup-odk: increase global teardown timeout (#2130)
75ea809 
Seen to timeout after 2.1 seconds: https://github.com/getodk/central/actions/runs/31661302771/job/94326512906?pr=2104

Ref #2104
@alxndrsn
test/nginx/setup-odk: fix typo in test name (#2129)
11ee00b
@matthew-white
Merge branch 'master' into next
040ad86
@lognaturel
Update Enketo Docker image to version 7.6.4
9ecacf5
@lognaturel
Add referrerPolicy to config.json.template
33b25be
@alxndrsn
nginx/csp: add tests for frame-src & frame-ancestors (#2159)
2b253d9 
Setup for #2080
@alxndrsn
nginx/csp: allow backend to be framed by frontend (#2155)
6f90929 
Closes #2080
@sadiqkhoja
Merge pull request #2167 from getodk/enketo-7.6.4
5b5262a 
Upgrade Enketo to 7.6.4
@sadiqkhoja
Upgraded node to 24.20
1bad887
@sadiqkhoja
Upgraded nginx to 1.31.5
c7ebce4
@sadiqkhoja
Upgraded postgres to 14.24
81416b6
@sadiqkhoja
Upgraded redis to 8.10.1
cdf59f6
@sadiqkhoja
ran npm audit fix in test directories
e914217
@sadiqkhoja
updated mail image to 2.0.7
7ae5819
@sadiqkhoja
Merge pull request #2196 from sadiqkhoja/chores/infra-upgrade-for-2026.3
19b8224 
Chores/infra upgrade for 2026.3
@matthew-white
Adjust form-action of Backend CSP (#2197)
50c85fe
@alxndrsn
ci: skip npm audit (#2201)
bc46bbc 
* avoid extra network calls
* slightly faster normally; much faster when npm audit is struggling
* audit output is informational only

Ref getodk/central-frontend#1879
@matthew-white

matthew-white commented Sep 10, 2026

Copy link
Copy Markdown
Member Author

The only thing this PR needs are changes to the server submodule and the FRONTEND_VERSION. Given that, I'm going to go ahead and mark it as ready for review. The main thing to review is that this PR only contains commits from other approved PRs.

@matthew-white
matthew-white marked this pull request as ready for review September 10, 2026 06:37
@matthew-white
matthew-white removed the request for review from ktuite September 10, 2026 18:32
@matthew-white
matthew-white merged commit c008e69 into master Sep 11, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sadiqkhoja sadiqkhoja sadiqkhoja approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@matthew-white @alxndrsn @sadiqkhoja @garethbowen @lognaturel