Repository navigation

[DNM]v5.10.0 20260325 - #3044

Open

FrankApiyo wants to merge 54 commits into

v5.10.0-20260128from

v5.10.0-20260325

Commits on Feb 25, 2026
- fix: delayed media submission causes decryption failure (#2979)
  kelvin-muchiri
  committed
  fd9f7f5
- fix: decryption fails for data collected before encryption was disabled (#2983)
  kelvin-muchiri
  committed
  507556b
Commits on Mar 25, 2026
- chore: update requirements
  
  ukanga
  authored and
  FrankApiyo
  committed
  d55594a
- fix: update test for pyxform 4.3.1 error message
  
  ukanga
  authored and
  FrankApiyo
  committed
  50cd155
- fix: update entity validation test for pyxform error message change
  
  ukanga
  authored and
  FrankApiyo
  committed
  edbf8bf
- fix: sanitize CSV/XLSX exports to prevent formula injection (CWE-1236)
  FrankApiyo
  committed
  36452bc
- fix: move sanitize_for_export to common_tools to avoid cyclic import
  FrankApiyo
  committed
  9758e1f
- fix: skip sanitization for negative numbers and sanitize zipped CSV path
  FrankApiyo
  committed
  60a775d
- fix: add line feed (0x0A) to formula injection prefix list per OWASP
  FrankApiyo
  committed
  4952a7c
- fix: use float() parsing for negative number detection in sanitizer
  FrankApiyo
  committed
  299fe9e
- fix: sanitize header, label, and HXL rows in CSV/XLSX exports
  FrankApiyo
  committed
  4847dc7
- Fix prospector issues
  FrankApiyo
  committed
  4567597
- fix: add +numeric carve-out, label sanitization test, and review comments
  FrankApiyo
  committed
  a4a0f49
- fix: add % prefix trigger and inner pipe escaping to sanitize_for_export
  FrankApiyo
  committed
  641c1aa
- fix: pin GitHub Actions to commit SHAs and update trivy to v0.35.0
  FrankApiyo
  committed
  4080672
- fix: pin Debian unstable repo to prevent openssl package conflict
  FrankApiyo
  committed
  43981f5
- fix: revert pyxform to git fork to match setup.cfg dependency
  FrankApiyo
  committed
  780eb34
- fix: upgrade runtime base to Debian Trixie for GLIBC 2.38 compatibility
  FrankApiyo
  committed
  3e04474
- fix: update runtime packages for Debian Trixie compatibility
  FrankApiyo
  committed
  437c066
- chore: update pip requirements
  FrankApiyo
  committed
  2736437
- chore: switch to dhi.io hardened image for runtime
  FrankApiyo
  committed
  d89357d
- chore: update pip requirements
  FrankApiyo
  committed
  29842e7
- chore: use native Trivy HTML reports, fix yamllint
  FrankApiyo
  committed
  1959cc9
- chore: pin Trivy scanner version
  FrankApiyo
  committed
  4844b5a
- fix: download Trivy HTML template for binary mode
  FrankApiyo
  committed
  3fcd012
- fix: handle empty Fixed Version in Trivy details
  FrankApiyo
  committed
  b521f53
- chore: suppress false-positive CVEs via DHI VEX
  FrankApiyo
  committed
  cc981c0
- chore: use dhi.io hardened Python 3.13 images
  FrankApiyo
  committed
  b955126
- chore: remove this project from the pip files
  FrankApiyo
  committed
  2df858a
- chore: docker linting
  FrankApiyo
  committed
  0b9e133
- chore: use BuildKit secret for GitHub token auth
  FrankApiyo
  committed
  6751e96
- chore: remove docker aspects from update requirements skill
  FrankApiyo
  committed
  593e55d
- chore: remove claude code skill
  FrankApiyo
  committed
  21cc11c
- chore: update supervisor from 4.2.5 to 4.3.0
  FrankApiyo
  committed
  69b0e3b
- fix: update dependencies to fix CVE-2026-1312, CVE-2026-1287, CVE-2026-1285, CVE-2026-26007, CVE-2026-25990
  FrankApiyo
  committed
  d328de2
- fix: install Java in runtime stage for pyxform ODK Validate
  FrankApiyo
  committed
  252bb8d
- fix: add Java JRE to Docker image for pyxform ODK Validate
  FrankApiyo
  committed
  10235a0
- fix: stage Java config in base and copy to runtime without RUN
  FrankApiyo
  committed
  c7a953a
- fix: add /usr/bin/env to runtime image
  FrankApiyo
  committed
  6d8abfd
- fix: add /bash to runtime image
  FrankApiyo
  committed
  764e716
- fix: fix CI docker build error
  FrankApiyo
  committed
  b93d89a
- fix: bump valigetta to v0.2.2 to resolve cryptography>=46 conflict
  FrankApiyo
  committed
  887dfc0
- fix: pin setup-trivy to commit SHA for v0.2.6 in CI workflow
  FrankApiyo
  committed
  fb2e839
- fix: update test_survey_preview_endpoint to match pyxform error format
  FrankApiyo
  committed
  660361c
Commits on Apr 29, 2026
- Fix failing tests
  FrankApiyo
  committed
  0170df3
- Update trivy workflow
  FrankApiyo
  committed
  21b0fdc
- Update django version to 5.2.13
  FrankApiyo
  committed
  4071066
- Add /usr/bin/env
  FrankApiyo
  committed
  d791c8e
- fix: remove hardcoded ioLocale from SavWriter to fix locale error
  FrankApiyo
  committed
  637a2b9
- fix: handle pyxform Itemset objects in SAV export value labels
  FrankApiyo
  committed
  8ecc325
- fix: set explicit fileLabel for SavWriter to avoid getpass.getuser() call
  FrankApiyo
  committed
  2799970
- test: add regression test for SavWriter fileLabel option
  FrankApiyo
  committed
  092f0ad
- Build image with python3.10
  FrankApiyo
  committed
  1e0764f
Commits on May 27, 2026
- Update pillow and lxml versions
  FrankApiyo
  committed
  714e33e

Commits

Commits on Feb 25, 2026

Commits on Mar 25, 2026

Commits on Apr 29, 2026

Commits on May 27, 2026