CiviForm version 3.26.0 is now available

[Melanie Barker]

v3.26.0

What's Changed

This week's release adds Application.originalApplicantId to the database to support upcoming account merging work.

Notable bug fixes:

• Closing a loophole in which applicants could submit without going through address correction even when it was necessary.
• Fixing an issue when the user stayed on the login page beyond the session timeout window.

Lastly, this release includes in-progress work on file upload and enumerator improvements, and session timeout, as well as multiple dependency updates.

Database Changes

• [Account Merge] Add Application.originalApplicantId and use it in export by @shane-exygy in #12779

Enhancements

• [Maps] display two locations in one popup if they have the same coordinate by @tallulahkay in #12953
• Reduce the amount of data returned from publishing. by @shane-exygy in #12946

Bug fixes

• Using USWDS disabled button styles by @melanie-exygy in #12991
• [Address Correction] Fix address correction bug by @tallulahkay in #13000
• Login only checkbox disabled for external programs by @swatkat1 in #12977
• fix same site login issue by @tallulahkay in #13021

Under Development

• [File upload] Create feature flag in experimental by @AlvieH in #12978
• [Enumerators] Create copies of non-repeated questions for repeated blocks by @AlvieH in #12955
• [Enumerators] Improving style and clarity of repeated screens by @CallaJune in #12958
• [ProgramSlugUrl] Allow passing program slug for internal edit routes by @rockycodes in #12934
• [File upload] create no-op htmx endpoint for streaming file upload by @tallulahkay in #13008
• [Session Replay] add missing active session for new program admins by @tallulahkay in #13019
• [File upload] Create base and test no-op streaming parsers by @AlvieH in #13003
• autofill entity of new repeated set by @CallaJune in #13016
• [File upload] Add AWS S3 upload sink by @AlvieH in #13039
• Simplifying admin view constructors and add environment to base view by @gwendolyngoetz in #13076

Dependencies

• Update dependency sass to v1.98.0 by @renovate[bot] in #12943
• Update dependency io.swagger.core.v3:swagger-core to v2.2.45 by @renovate[bot] in #12937
• Update awssdk to v2.42.15 by @renovate[bot] in #12941
• Update dependency com.googlecode.libphonenumber:libphonenumber to v9.0.26 by @renovate[bot] in #12951
• Update dependency maplibre-gl to v5.20.2 by @renovate[bot] in #12942
• Bump fast-xml-parser from 5.4.1 to 5.5.6 in /server by @dependabot[bot] in #12984
• Bump undici from 7.22.0 to 7.24.4 in /test-support by @dependabot[bot] in #12985
• Update dependency io.swagger.parser.v3:swagger-parser to v2.1.39 by @renovate[bot] in #12938
• Update dependency org.projectlombok:lombok to v1.18.44 by @renovate[bot] in #12944
• Update dependency dompurify to v3.3.3 by @renovate[bot] in #12945
• Update Node.js to latest commit by @renovate[bot] in #12988
• Bump fast-xml-parser from 5.5.6 to 5.5.7 in /server by @dependabot[bot] in #13005
• Update awssdk to v2.42.22 by @renovate[bot] in #12997
• Update postgres:16.13 Docker digest to latest commit by @renovate[bot] in #12989
• Update quay.io/keycloak/keycloak:26.5 Docker digest to latest commit by @renovate[bot] in #12995
• Update dependency com.google.cloud.sql:postgres-socket-factory to v1.28.2 by @renovate[bot] in #12999
• Update dependency @azure/storage-blob to v12.31.0 by @renovate[bot] in #12473
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /test-support by @dependabot[bot] in #13042
• Bump flatted from 3.3.3 to 3.4.2 in /server by @dependabot[bot] in #13037
• Bump flatted from 3.3.3 to 3.4.2 in /test-support by @dependabot[bot] in #13035
• Bump picomatch in /browser-test by @dependabot[bot] in #13030
• Bump picomatch from 4.0.3 to 4.0.4 in /formatter by @dependabot[bot] in #13032
• Update dependency maplibre-gl to v5.21.1 by @renovate[bot] in #13051
• Update dependency commons-net:commons-net to v3.13.0 by @renovate[bot] in #13048
• Update dependency com.googlecode.libphonenumber:libphonenumber to v9.0.27 by @renovate[bot] in #13047
• Update dependency jsdom to v29 by @renovate[bot] in #13054
• Update dependency oidc-provider to v9.7.1 by @renovate[bot] in #13058
• Update dependency msw to v2.12.14 by @renovate[bot] in #13057
• Update dependency swagger-ui-dist to v5.32.1 by @renovate[bot] in #13061
• Update grafana/grafana Docker tag to latest commit by @renovate[bot] in #13062
• Update jackson to v2.21.2 by @renovate[bot] in #13063
• Update dependency com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer to v20260313.1 by @renovate[bot] in #13065
• Bump flatted from 3.3.3 to 3.4.2 in /mock-web-services by @dependabot[bot] in #13009
• Bump flatted from 3.3.3 to 3.4.2 in /formatter by @dependabot[bot] in #13006
• Update vitest monorepo to v4.1.2 by @renovate[bot] in #13070

Other changes

• [Session Timeout] rename last activity time used for the session by @tallulahkay in #13004
• [Session Replay] remove session replay protection ff (merge after 3/24) by @tallulahkay in #12899

Full Changelog: v3.25.0...v3.26.0

--

Melanie Barker, (she/her) Senior Full Stack Engineer Exygy | B Corp Since 2010 cell: 206-419-1522 melanie...@exygy.com exygy.com/newsletter Seattle, WA