chore: bump version to v5.26.0

[kelvin-muchiri]

Changes

Bump version to v5.26.0

Features

• feat(entities): support restoring a soft-deleted EntityList #3179
• feat(entities): create/update Entities from repeats #3186
• feat(entities): create/update Entities in multiple lists #3187
• feat(messaging): audit log profile changes #3217
• feat(api): send instance_attachments with enketo edit URL requests #3212

Bug fixes

• fix: preserve managed encryption status when rebuilding survey from XLSForm #3191
• Fix UserActivity creation with read replicas #3189
• fix: record submitting user on decrypted attachments #3194
• fix: wrap entity mutations in a transaction #3195
• Enforce PKCE S256 for authorization code flows #3192
• Sign Azure original image attachment URLs #3198
• fix: coerce trigger lists to tuples when rebuilding survey from JSON #3197
• Publish security fixes #3203
• Fix CSV import delimiter detection #3199
• Enforce active organization visibility for projects and forms #3178
• fix: preserve encrypted submission ciphertext when form encryption is off #3206
• Fix AttributeError during CSV import with legacy XLSForm JSON #3202
• Fix flaky test in test_abstract_viewset.py #3204
• fix: soft delete suffix handling and name reuse for EntityList and XForm #3183
• fix(exports): make SAV locale independent of host #3210
• fix(messaging): record audit events for encryption keys and entity lists #3219
• test: fix the ordering and encoding assumptions failing CI #3220
• Preserve metadata filenames in signed URLs #3218
• fix: scope submission edit URLs to the submission #3222

Performance

• perf: add composite xform_id date indexes to Instance #3209

Maintenance

• ci: run checks for security branch pull requests #3208
• chore: bump pre-commit hooks for Python 3.13 #3213
• chore(ci): bump docker/login-action from 3.7.0 to 4.2.0 #3147
• chore(ci): bump actions/cache from 4.3.0 to 6.1.0 #3150
• chore(ci): bump actions/setup-python from 5.6.0 to 7.0.0 #3148
• chore(ci): bump aws-actions/configure-aws-credentials from ff717079ee2060e4bcee96c4779b553acc87447c to 7474bc4690e29a8392af63c5b98e7449536d5c3a #3151
• chore(deps): update pinned dependencies #3232

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}