kobotoolbox/kpi 2.026.33a

on GitHub

Submissions now record every form version they have been exposed to,
when those differ from the current one.

A submission is recorded with a single form version, the one it was
collected with. A record can nevertheless be exposed to more than one:
when it is edited after the form has been redeployed, or when it was
filled in offline with an older version and only sent once a newer one
was deployed.

Submissions now record all of those versions, in order, whenever they
differ from the current one. This prepares the ground for future
improvements so that data no longer goes missing from exports or from
the table view when versions differ. Records that only ever involved a
single version are unchanged, and exports themselves are not changed by
this pull request.

assetFile: validate redirect_url at serve time before redirecting (#7535)

Media files hosted at a web address now only redirect to that address
when it is a normal http or https link.

When a form uses a media file hosted elsewhere, downloading it from
KoboToolbox sends you to that address. Until now the address was
followed without any check, so a broken or unwanted one stored on a
project could send people anywhere. KoboToolbox now checks it first and
refuses to redirect when it is not a plain http or https address, or
when it points inside the server's own network. Media hosted on ordinary
public web addresses keeps working as before.

designSystem: change project top tabs to old component (#7540)

subsequences: skip unconfigured actions when reading supplement data (#7552)

The Data table and submission data now load normally for projects that
have leftover transcript or translation data from a question or feature
that was later removed.

When a submission holds transcript or translation data but the matching
advanced feature configuration was later removed (question renamed or
deleted, or the feature turned off), opening the Data table or fetching
that submission's supplemental data failed with a server error. Reading
now skips the leftover entries and returns everything else. Editing
supplemental data is unchanged: writing to an unconfigured action is
still rejected.