kobotoolbox · olive-KTB · Dec 8, 2025 · Dec 8, 2025 · Dec 9, 2025 · Dec 9, 2025
@@ -21,7 +21,7 @@ jobs:
 
       # Cache: Use cache for node_modules
       #        Keyed on os, node version, package-lock, and patches
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         name: Check for cached node_modules
         id: cache-nodemodules
         env:

@@ -42,7 +42,8 @@ jobs:
     steps:
     - uses: actions/checkout@v6
       with:
-        fetch-depth: "0"
+        fetch-depth: 0
+        fetch-tags: true
     - name: Find next release tag and branch
       id: version
       run: |

@@ -21,11 +21,16 @@ jobs:
       packages: write
     env:
        CI_REGISTRY_IMAGE: ghcr.io/kobotoolbox/kpi
-
+    outputs:
+      kpi_image_sha: ${{ steps.sha.outputs.sha }}
     steps:
       - name: Checkout code
         uses: actions/checkout@v6
 
+      - name: Store commit SHA
+        id: sha
+        run: echo "sha=${GITHUB_SHA}" >> $GITHUB_OUTPUT
+
       - name: Configure AWS Credentials
         uses: aws-actions/[email protected]
         with:
@@ -70,15 +75,36 @@ jobs:
           BRANCH_TITLE=${GITHUB_REF_NAME#feature/}
           helm -n kobo-dev upgrade --install $BRANCH_TITLE oci://ghcr.io/kobotoolbox/kobo --atomic --set-string kpi.version=${GITHUB_SHA} --set kpi.image.repository=$CI_REGISTRY_IMAGE --reuse-values
 
-      - name: Deploy main
-        if:  github.ref_name == 'main'
-        run: |
-          helm -n kobo-dev upgrade staging-main oci://ghcr.io/kobotoolbox/kobo --atomic --set-string kpi.version=${GITHUB_SHA} --set kpi.image.repository=$CI_REGISTRY_IMAGE --reuse-values
-          helm -n kobo-dev upgrade staging-nobill oci://ghcr.io/kobotoolbox/kobo --atomic --set-string kpi.version=${GITHUB_SHA} --set kpi.image.repository=$CI_REGISTRY_IMAGE --reuse-values
+  trigger-main-deploy:
+    needs: deploy
+    runs-on: ubuntu-latest
+    if: github.ref_name == 'main'
+    steps:
+      - name: Generate GitHub App Token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.KOBO_BOT_APP_ID }}
+          private-key: ${{ secrets.KOBO_BOT_PRIVATE_KEY }}
+          owner: kobotoolbox
+          repositories: "devops"
+
+      - name: Trigger kfmain deploy build
+        uses: benc-uk/workflow-dispatch@v1
+        with:
+          workflow: deploy-kfmain.yml
+          repo: kobotoolbox/devops
+          ref: instance/kfmain
+          token: ${{ steps.app-token.outputs.token }}
+          inputs: |
+            {
+              "kpi_image_sha": "${{ needs.deploy.outputs.kpi_image_sha }}"
+            }
 
   notify-success:
     needs:
       - deploy
+      - trigger-main-deploy
     if: ${{ !cancelled() && !failure() }}
     uses: './.github/workflows/zulip.yml'
     secrets: inherit
@@ -89,6 +115,7 @@ jobs:
   notify-failure:
     needs:
       - deploy
+      - trigger-main-deploy
     if: ${{ !cancelled() && failure() }}
     uses: './.github/workflows/zulip.yml'
     secrets: inherit

@@ -42,7 +42,7 @@ jobs:
 
       # Cache: Use cache for node_modules
       #        Keyed on os, node version, package-lock, and patches
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         name: Check for cached node_modules
         id: cache-nodemodules
         env:
@@ -94,7 +94,7 @@ jobs:
 
       # Install Playwright (with cache) for Storybook tests
       - name: "Playwright: cache binaries"
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         id: playwright-cache
         with:
           path: ~/.cache/ms-playwright

@@ -101,7 +101,7 @@ jobs:
 
       # Cache: Use cache for node_modules
       #        Keyed on os, node version, package-lock, and patches
-      - uses: actions/cache@v4
+      - uses: actions/cache@v5
         name: Check for cached node_modules
         id: cache-nodemodules
         env:

@@ -104,14 +104,10 @@ jobs:
 
     - name: draft a changelog
       run: |
-        set -xe
-        npx git-cliff -u $(git log --format=format:%H origin/$PREV_BRANCH..origin/$CURRENT_BRANCH | tail -1)..origin/$CURRENT_BRANCH --tag $CURRENT_PATCH
+        npx git-cliff -u --tag $CURRENT_PATCH
 
     - name: commit the changelog to a dedicated branch
       run: |
-        set -xe
-        git config user.name '${{ steps.app-token.outputs.app-slug }}[bot]'
-        git config user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com'
         git checkout -B changelog/$CURRENT_PATCH
         git add -f CHANGELOG.md
         git commit -m "chore(releases): generate CHANGELOG.md for $CURRENT_PATCH"
@@ -140,7 +136,6 @@ jobs:
 
     - name: deploy to beta
       run: |
-        set -xe
         git checkout -B public-beta
         git push -f --set-upstream origin public-beta
 
@@ -221,7 +216,7 @@ jobs:
             && format(':warning: failed to update changelog: @*devs* please investigate [run #{0}]({1}/{2}/actions/runs/{3})!', github.run_number, github.server_url, github.repository, github.run_id)
             || needs.changelog.result == 'skipped'
               && ':skip_forward: changelog update skipped due failed automated tests.'
-              || format(':check: updated [changelog](https://github.com/kobotoolbox/kpi/blob/changelog/{0}/CHANGELOG.md)', needs.version.outputs.current_patch)
+              || format(':check: updated [changelog](https://github.com/kobotoolbox/kpi/blob/changelog/{0}/CHANGELOG.md) for `{1}..{0}`', needs.version.outputs.current_patch, needs.version.outputs.prev_patch)
           }}
         - ${{ (needs.deploy-to-beta.result == 'failure' || needs.deploy-to-beta.result == 'timed_out')
             && format(':warning: failed to queue to deploy to beta: @*devs* please investigate [run #{0}]({1}/{2}/actions/runs/{3})!', github.run_number, github.server_url, github.repository, github.run_id)

@@ -1,6 +1,6 @@
 # Endpoint deprecation as of release 2.025.29
 
-⚠️ The deprecated endpoints listed below will be permanently removed with the first release of 2026, scheduled for the week of **January 19, 2026**.
+⚠️ The deprecated endpoints listed below will be permanently removed with the first release of June 2026, scheduled for **June 2, 2026**.
 
 We strongly encourage all developers and users with integrations to update their systems as soon as possible to avoid disruption.
 A new support article will be available soon to guide users through the migration from KoboCAT `v1` to KPI `v2`.

@@ -139,7 +139,7 @@ filter_commits = false
 ## An array of link parsers for extracting external references, and turning them into URLs, using regex.
 link_parsers = []
 ## Include only the tags that belong to the current branch.
-use_branch_tags = false
+use_branch_tags = true
 ## Order releases topologically instead of chronologically.
 topo_order = false
 ## Order releases topologically instead of chronologically.

@@ -2,6 +2,7 @@
  * exports related actions
  */
 
+import * as Sentry from '@sentry/react'
 import Reflux from 'reflux'
 import { dataInterface } from '#/dataInterface'
 import { notify } from '#/utils'
@@ -51,8 +52,14 @@ exportsActions.createExport.listen((assetUid, data) => {
     .done(exportsActions.createExport.completed)
     .fail(exportsActions.createExport.failed)
 })
-exportsActions.createExport.failed.listen(() => {
-  notify(t('Failed to create export'), 'error')
+
+exportsActions.createExport.failed.listen((response) => {
+  let errorMessage = t('Failed to create export')
+  if (typeof response === 'object' && response.responseJSON?.error) {
+    errorMessage = response.responseJSON.error
+  }
+  notify(errorMessage, 'error')
+  Sentry.captureMessage(errorMessage)
 })
 
 /**

@@ -411,14 +411,12 @@ const MFAModals = class MFAModals extends React.Component<MFAModalsProps, MFAMod
             <strong>
               {/*This is safe as this step only shows if not on qr step*/}
               {this.props.modalType === 'regenerate' &&
-                t('Please enter your ##number##-digit authenticator token to regenerate your backup codes.').replace(
-                  '##number##',
-                  String(envStore.data.mfa_code_length),
-                )}
-
+                t(
+                  'Please enter your ##number##-digit authenticator token or one of your recovery codes to regenerate your backup codes.',
+                ).replace('##number##', String(envStore.data.mfa_code_length))}
               {this.props.modalType !== 'regenerate' &&
                 t(
-                  'Please enter your ##number##-digit authenticator token to deactivate two-factor authentication.',
+                  'Please enter your ##number##-digit authenticator token or one of your recovery codes to deactivate two-factor authentication.',
                 ).replace('##number##', String(envStore.data.mfa_code_length))}
             </strong>
           </bem.MFAModal__p>

@@ -17,3 +17,6 @@ export type FormGalleryAction =
   | { type: 'setFilterQuestion'; question: string }
   | { type: 'setStartDate'; value: string }
   | { type: 'toggleFullscreen' }
+  | { type: 'openModal'; index: number }
+  | { type: 'closeModal' }
+  | { type: 'setModalImageIndex'; index: number }