Release to Production - 2026-01-22

[github-actions]

🎯 Production Release

Release Date: January 22, 2026
Commits ahead: 16

This automated PR promotes tested changes from staging to main for production deployment.

What's Included

All changes that have been verified in the staging environment.

Note: This PR is directly from staging, so new commits merged to staging will automatically appear here.

Pre-Deployment Checklist

• All staging tests passed
• QA sign-off received
• Stakeholder approval obtained
• Deployment plan reviewed
• Rollback plan confirmed

Deployment Notes

Merging this PR will trigger production deployment.

---

This PR was automatically created by the Release Calendar workflow on January 22, 2026

---

Note

Medium Risk
Introduces a new third-party KYC SDK and alters mobile build/permissions/privacy and verification flow routing, which can impact release behavior across iOS/Android; CI-only workflow changes are lower risk but wide-ranging.

Overview
Adds Sumsub/Idensic KYC integration wiring to the mobile app (new dependency + SUMSUB_TEE_URL env, fetchAccessToken + launchSumsub, dev test screen, navigation routes for fallback/failure/success flows, and Jest mocks), plus related Android/iOS build tweaks (new Sumsub Maven/CocoaPods sources, ML Kit dependency override, iOS privacy declaration for device ID, and E2E_TESTING conditional compilation to exclude NFC modules).

Hardens and speeds up CI by introducing composite cache actions for SDK builds, adding cache-miss fallbacks, updating circuits build runners/steps (including register_kyc), expanding mobile E2E diagnostics/caching around Maestro, and making npm publishing optionally strict with token checks.

Also includes app version bumps to 2.9.15, assorted dependency updates, and a feedback UX change to route users to an external support form; plus minor navigation typing refactor and iOS/Android UI/system bar adjustments.

^{Written by Cursor Bugbot for commit c5915d5. This will update automatically on new commits. Configure here.}

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}