chore: bump to 1.3.0

[pandeymangg]

What & why

Was: formbricks 1.2.0 on pub.dev, released 2026-09-21. Now: 1.3.0, so a release can be cut with what has landed on main since. The CHANGELOG gets the 1.3.0 entry.

Minor, not patch: Formbricks.setAppearance() is new public API and nothing existing changes shape. Dependency floors moved by patch versions only (clock ^1.1.3, url_launcher ^6.3.3, connectivity_plus ^7.3.2).

Ships in this release

• feat: add setAppearance for dark mode and forward custom CSS [ENG-3647] #61 setAppearance for dark mode, and custom CSS forwarded to the survey renderer
• fix: take the survey card rect from the renderer instead of scraping the DOM [ENG-3155] #56 survey card position comes from the renderer (onCardRectChange) instead of a DOM scrape; needs the server side of feat(surveys): report the survey card's rect to native hosts formbricks#9242, which is deployed
• chore(deps): bump clock from 1.1.2 to 1.1.3 #54, chore(deps): bump url_launcher from 6.3.2 to 6.3.3 #59, chore(deps): bump connectivity_plus from 7.3.1 to 7.3.2 #60 dependency floors
• chore(deps): bump step-security/harden-runner from 2.20.1 to 2.21.1 #51, chore(deps): bump dart-lang/setup-dart from 1.8.0 to 1.8.1 #52, chore(deps): bump melos from 8.6.0 to 8.9.0 #55, chore(deps): bump SonarSource/sonarqube-scan-action from 8.2.1 to 8.3.0 #57, chore(deps): bump cupertino_icons from 1.0.9 to 2.0.0 #58, ci: submit Android release runtime dependencies to the dependency graph #63 CI pins and playground-only updates; no SDK change

Release

After merge, push the tag 1.3.0 on main. release.yml publishes on a semver tag push (pub.dev OIDC trusts push events, not release events) and requires the tag to equal the pubspec version.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 945f5955-4f0c-4beb-a644-81bf06d494e6

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud