Skip to content

Release v2026.3.0 - #2104

Draft
matthew-white wants to merge 8 commits into
masterfrom
next
Draft

Release v2026.3.0#2104
matthew-white wants to merge 8 commits into
masterfrom
next

Conversation

@matthew-white

@matthew-white matthew-white commented Aug 4, 2026

Copy link
Copy Markdown
Member

This PR prepares the release of v2026.3. It should only contain changes from other PRs that have already been approved and merged (and possibly merge commits from the master branch).

alxndrsn and others added 6 commits August 4, 2026 14:05
Protect against failure between privkey generation and fullchain generation.
* consistent with surrounding code: other keys are only generated if they don't exist
* generation is fast, but repeating every startup is still a waste of effort
This setting is only relevant if either `ssl_verify_client` or `ssl_stapling` is enabled.  Neither setting is.

See: https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_trusted_certificate

Any deployer who does require client certificate verification is likely sophisticated enough to re-enable themselves.

Closes #831
@matthew-white

Copy link
Copy Markdown
Member Author

@alxndrsn I just noticed that CI failed here with a timeout. The test is about Sentry + CSP, so I thought it might interest you.

@alxndrsn

alxndrsn commented Aug 14, 2026

Copy link
Copy Markdown
Contributor

@alxndrsn I just noticed that CI failed here with a timeout. The test is about Sentry + CSP, so I thought it might interest you.

Failing job: https://github.com/getodk/central/actions/runs/31661302771/job/94326512906?pr=2104

Network nginx_default  Removed
      1) "after all" hook for "should generated expected CSP for SENTRY_DSN_FRONTEND='https://[email protected]/'"

[mocha-setup] Cleaning up HTTP(S) Response objects whose bodies have not been read...
[mocha-setup] Cleanup complete.

  1140 passing (30s)
  1 failing

  1) setup-odk.sh
       SENTRY_DSN_FRONTEND
         "after all" hook for "should generated expected CSP for SENTRY_DSN_FRONTEND='https://[email protected]/'":
     Error: Timeout of 2000ms exceeded. For async tests and hooks, ensure "done()" is called; if returning a Promise, ensure it resolves. (/home/runner/work/central/central/test/nginx/src/mocha/setup-odk.spec.js)
      at process.processImmediate (node:internal/timers:504:21)

@alxndrsn

alxndrsn commented Aug 14, 2026

Copy link
Copy Markdown
Contributor

@alxndrsn I just noticed that CI failed here with a timeout.

Looks like it just took longer than expected. PR to increase the timeout at #2130.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants