Releases: mozilla/addons-server
Releases · mozilla/addons-server
2026.01.08
This week's push hero is @diox
Previous Release: 2025.12.15
Blockers:
Cherry-picks:
Before we push:
Before we start:
Before we promote:
After we're done:
- run a full ES reindex
Addons-Frontend Changelog:
mozilla/addons-frontend@2025.12.11...2026.01.08
Addons Server Changelog:
What's Changed
Notable things shipping
- Upgrade to Python 3.13 by @diox in #24235
- drop logic that routes some abuse reports to reviewers directly by @eviljeff in #24240
- Adjust documentation about JWT reuse by @diox in #24243
- Compute hotness even if previous week is 0 by @diox in #24246
- Remove old Promoted group constants by @eviljeff in #24236
- drop localized strings from reviewer tools by @eviljeff in #24251
- Add command to fake cinder webhook request in local environments by @diox in #24245
Dependendabots
- Bump prettier from 3.7.3 to 3.7.4 by @dependabot[bot] in #24237
- Bump knip from 5.71.0 to 5.72.0 by @dependabot[bot] in #24249
- Bump pytest from 9.0.1 to 9.0.2 in /requirements by @dependabot[bot] in #24248
- Bump @vitest/eslint-plugin from 1.5.1 to 1.5.2 by @dependabot[bot] in #24247
- Bump knip from 5.72.0 to 5.73.0 by @dependabot[bot] in #24255
- Bump google-cloud-storage from 3.6.0 to 3.7.0 in /requirements in the google group by @dependabot[bot] in #24254
- Bump knip from 5.73.0 to 5.73.3 by @dependabot[bot] in #24257
- Bump knip from 5.73.3 to 5.73.4 by @dependabot[bot] in #24266
- Bump @eslint/js from 9.39.1 to 9.39.2 by @dependabot[bot] in #24263
- Bump less from 4.4.2 to 4.5.1 by @dependabot[bot] in #24262
- Bump django-admin-rangefilter from 0.13.3 to 0.13.5 in /requirements by @dependabot[bot] in #24260
- Bump ruff from 0.14.7 to 0.14.9 in /requirements by @dependabot[bot] in #24258
- Bump sentry-sdk from 2.46.0 to 2.47.0 in /requirements by @dependabot[bot] in #24241
- Bump networkx from 3.6 to 3.6.1 in /requirements by @dependabot[bot] in #24253
- Bump eslint from 9.39.1 to 9.39.2 by @dependabot[bot] in #24259
- Bump jsdom from 27.2.0 to 27.3.0 by @dependabot[bot] in #24252
- Bump mysql from 8.0 to 8.0 by @dependabot[bot] in #24269
Full Changelog: 2025.12.11...2026.01.08
Contributors
diox, eviljeff, and dependabot
Assets 2
2025.12.15
faed3e6
This commit was signed with the committer’s verified signature.
willdurand
William Durand
Full Changelog: 2025.12.11...2025.12.15
2025.12.11
This week's push hero is @eviljeff
Previous Release: 2025.11.27
Blockers:
Cherry-picks:
Before we push:
Before we start:
Before we promote:
After we're done:
Addons-Frontend Changelog:
Addons Server Changelog:
What's Changed
Notable things shipping
- Avoid raising exceptions when parsing invalid manifests by @diox in #24185
- add link to source builder by @eviljeff in #24180
- Call source builder API when source code is provided by @willdurand in #24131
- Fix tests intermittently failing with time-machine by @diox in #24196
- store reason for automatic reject and block action in activity log by @eviljeff in #24189
- Add a way to use the source-builder project locally by @willdurand in #24197
- Add api key to source-builder by @willdurand in #24217
- Do not call the source builder when the version doesn't have a license by @willdurand in #24222
- Fix broken nn-NO locale (dash vs underscore in folder name), and warnings for ko/ja by @diox in #24233
Dependendabots
- Bump knip from 5.69.1 to 5.70.0 by @dependabot[bot] in #24187
- Bump sentry-sdk from 2.44.0 to 2.45.0 in /requirements by @dependabot[bot] in #24186
- Bump google-resumable-media from 2.7.2 to 2.8.0 in /requirements in the google group by @dependabot[bot] in #24182
- Bump drf-spectacular from 0.28.0 to 0.29.0 in /requirements by @dependabot[bot] in #24123
- Bump click from 8.3.0 to 8.3.1 in /requirements by @dependabot[bot] in #24172
- Bump rpds-py from 0.28.0 to 0.29.0 in /requirements by @dependabot[bot] in #24171
- Bump asgiref from 3.10.0 to 3.11.0 in /requirements by @dependabot[bot] in #24195
- Bump knip from 5.70.0 to 5.70.1 by @dependabot[bot] in #24192
- Bump billiard from 4.2.2 to 4.2.3 in /requirements in the celery group by @dependabot[bot] in #24170
- Bump @vitest/eslint-plugin from 1.4.2 to 1.4.3 by @dependabot[bot] in #24178
- Bump @eslint/compat from 1.4.1 to 2.0.0 by @dependabot[bot] in #24177
- Bump django-environ from 0.11.2 to 0.12.0 in /requirements by @dependabot[bot] in #22989
- Bump rhysd/actionlint from 1.7.8 to 1.7.9 by @dependabot[bot] in #24174
- Bump mozilla/autograph from 7.5.3 to 7.5.4 by @dependabot[bot] in #24175
- Bump asttokens from 3.0.0 to 3.0.1 in /requirements by @dependabot[bot] in #24173
- Bump mozilla/addons-frontend from 2025.11.13 to 2025.11.27 by @dependabot[bot] in #24200
- Bump mozilla/autograph from 7.5.4 to 7.5.5 by @dependabot[bot] in #24201
- Bump sentry-sdk from 2.45.0 to 2.46.0 in /requirements by @dependabot[bot] in #24204
- Bump ruff from 0.14.5 to 0.14.6 in /requirements by @dependabot[bot] in #24206
- Bump exceptiongroup from 1.3.0 to 1.3.1 in /requirements by @dependabot[bot] in #24207
- Bump @vitest/eslint-plugin from 1.4.3 to 1.5.0 by @dependabot[bot] in #24209
- Bump stylelint from 16.25.0 to 16.26.0 by @dependabot[bot] in #24211
- Bump networkx from 3.5 to 3.6 in /requirements by @dependabot[bot] in #24210
- Bump knip from 5.70.1 to 5.70.2 by @dependabot[bot] in #24213
- Bump addons-linter from 9.2.0 to 9.3.0 by @dependabot[bot] in #24205
- Bump time-machine from 2.19.0 to 3.1.0 in /requirements by @dependabot[bot] in #24212
- Bump django from 4.2.26 to 4.2.27 in /requirements by @dependabot[bot] in #24216
- Bump kombu from 5.6.0 to 5.6.1 in /requirements in the celery group by @dependabot[bot] in #24214
- Bump prettier from 3.6.2 to 3.7.0 by @dependabot[bot] in #24218
- Bump deprecated from 1.2.18 to 1.3.1 in /requirements by @dependabot[bot] in #24108
- Bump sqlparse from 0.5.3 to 0.5.4 in /requirements by @dependabot[bot] in #24221
- Bump prettier from 3.7.0 to 3.7.1 by @dependabot[bot] in #24219
- Bump stylelint from 16.26.0 to 16.26.1 by @dependabot[bot] in #24220
- Bump prettier from 3.7.1 to 3.7.3 by @dependabot[bot] in #24224
- Bump @vitest/eslint-plugin from 1.5.0 to 1.5.1 by @dependabot[bot] in #24227
- Bump knip from 5.70.2 to 5.71.0 by @dependabot[bot] in #24225
- Bump ruff from 0.14.6 to 0.14.7 in /requirements by @dependabot[bot] in #24226
- Bump rpds-py from 0.29.0 to 0.30.0 in /requirements by @dependabot[bot] in #24228
- Bump zizmorcore/zizmor from 1.12.1 to 1.18.0 by @dependabot[bot] in #24202
- Bump drf-spectacular-sidecar from 2025.10.1 to 2025.12.1 in /requirements by @dependabot[bot] in #24232
- Bump elasticsearch/elasticsearch from 8.18.2 to 8.19.8 by @dependabot[bot] in #24231
Full Changelog: 2025.11.27...2025.12.11
Contributors
diox, willdurand, and 2 other contributors
Assets 2
2025.11.27
This week's push hero is @diox
Previous Release: 2025.11.13-1
Blockers:
Cherry-picks:
Before we push:
Before we start:
Before we promote:
After we're done:
Addons-Frontend Changelog:
mozilla/addons-frontend@2025.11.13...2025.11.27
Addons Server Changelog:
What's Changed
Notable things shipping
- Return a 414 if the url we'd redirect to for locale and app is too long by @eviljeff in #24145
- Don't create fake CinderJob for requeues; expose notes in log by @eviljeff in #24155
- Create activitylogs for Collection and UserProfile property changes by @eviljeff in #24151
- add dedicated source permission (& extra django admin view perms) by @eviljeff in #24168
- Add JA4-based restrictions and display JA4s in user admin by @diox in #24162
- Add additional custom confusable characters to normalization code by @diox in #24181
Dependendabots
- Bump eslint from 9.39.0 to 9.39.1 by @dependabot[bot] in #24126
- Bump markdown from 3.9 to 3.10 in /requirements by @dependabot[bot] in #24128
- Bump the google group in /requirements with 2 updates by @dependabot[bot] in #24133
- Bump @vitest/eslint-plugin from 1.4.0 to 1.4.1 by @dependabot[bot] in #24132
- Bump rabbitmq from 3.12 to 3.13.6 by @dependabot[bot] in #23931
- Bump addons-linter from 8.4.0 to 9.0.0 by @dependabot[bot] in #24138
- Bump googleapis-common-protos from 1.71.0 to 1.72.0 in /requirements by @dependabot[bot] in #24139
- Bump knip from 5.67.1 to 5.68.0 by @dependabot[bot] in #24137
- Bump ruff from 0.14.3 to 0.14.4 in /requirements by @dependabot[bot] in #24141
- Bump jsdom from 26.1.0 to 27.1.0 by @dependabot[bot] in #24115
- Bump rpds-py from 0.19.0 to 0.28.0 in /requirements by @dependabot[bot] in #24086
- Bump jsonschema-specifications from 2025.4.1 to 2025.9.1 in /requirements by @dependabot[bot] in #23884
- Bump js-yaml from 4.1.0 to 4.1.1 by @dependabot[bot] in #24144
- Bump addons-linter from 9.0.0 to 9.1.0 by @dependabot[bot] in #24148
- Bump @vitest/eslint-plugin from 1.4.1 to 1.4.2 by @dependabot[bot] in #24146
- Bump mozilla/addons-frontend from 2025.10.30 to 2025.11.13 by @dependabot[bot] in #24149
- Bump sentry-sdk from 2.43.0 to 2.44.0 in /requirements by @dependabot[bot] in #24153
- Bump knip from 5.68.0 to 5.69.0 by @dependabot[bot] in #24152
- Bump glob from 11.0.3 to 11.1.0 by @dependabot[bot] in #24156
- Bump pillow from 11.3.0 to 12.0.0 in /requirements by @dependabot[bot] in #24055
- Bump pytest from 8.4.2 to 9.0.0 in /requirements by @dependabot[bot] in #24154
- Bump pytest-reportlog from 0.4.0 to 1.0.0 in /requirements by @dependabot[bot] in #24161
- Bump certifi from 2025.10.5 to 2025.11.12 in /requirements by @dependabot[bot] in #24160
- Bump jsdom from 27.1.0 to 27.2.0 by @dependabot[bot] in #24159
- Bump execnet from 2.1.1 to 2.1.2 in /requirements by @dependabot[bot] in #24158
- Bump addons-linter from 9.1.0 to 9.2.0 by @dependabot[bot] in #24157
- Bump pytest from 9.0.0 to 9.0.1 in /requirements by @dependabot[bot] in #24164
- Bump knip from 5.69.0 to 5.69.1 by @dependabot[bot] in #24163
- Bump ruff from 0.14.4 to 0.14.5 in /requirements by @dependabot[bot] in #24167
- Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #24037
- Bump google-cloud-storage from 3.5.0 to 3.6.0 in /requirements in the google group by @dependabot[bot] in #24169
- Bump lxml from 5.4.0 to 6.0.2 in /requirements by @dependabot[bot] in #23960
- Bump cryptography from 45.0.7 to 46.0.3 in /requirements by @dependabot[bot] in #24056
- Bump cffi from 1.17.1 to 2.0.0 in /requirements by @dependabot[bot] in #23895
Full Changelog: 2025.11.13...2025.11.27
Contributors
diox, eviljeff, and dependabot
Assets 2
2025.11.13-1
This week's push hero is @eviljeff
Cherry-pick release
Previous Release: 2025.11.13
Blockers:
Cherry-picks:
Before we push:
Before we start:
Before we promote:
After we're done:
- Deploy customs update to prod
Full Changelog: 2025.11.13...2025.11.13-1
Contributors
eviljeff
Assets 2
2025.11.13
This week's push hero is @eviljeff
Previous Release: 2025.10.30
Blockers:
Cherry-picks:
Before we push:
Before we start:
Before we promote:
After we're done:
Addons-Frontend Changelog:
mozilla/addons-frontend@2025.10.30...2025.11.13
Addons Server Changelog:
What's Changed
Notable things shipping
- Remove waffle flag '2fa-enforcement-for-developers-and-special-users' by @wagnerand-moz in #24018
- raise exception after 7 retries (~1 hour) for retryable_task by @eviljeff in #24076
- Change locales completion email to use pontoon REST api by @eviljeff in #24097
- store waf headers by @eviljeff in #24087
- set 2FA for account shortcuts on fake fxa login by @eviljeff in #24105
- Convert hardcoded strings to constants by @willdurand in #24111
- expand homoglyph protection to UserProfile.display_name and Collection.name by @eviljeff in #24091
Dependendabots
- Bump ruff from 0.14.0 to 0.14.2 in /requirements by @dependabot[bot] in #24089
- Bump @babel/preset-env from 7.28.3 to 7.28.5 by @dependabot[bot] in #24088
- Bump knip from 5.66.1 to 5.66.2 by @dependabot[bot] in #24077
- Bump pip from 25.2 to 25.3 in /requirements by @dependabot[bot] in #24075
- Bump googleapis-common-protos from 1.70.0 to 1.71.0 in /requirements by @dependabot[bot] in #24078
- Bump rich from 14.1.0 to 14.2.0 in /requirements by @dependabot[bot] in #24031
- Bump @vitest/eslint-plugin from 1.3.23 to 1.3.25 by @dependabot[bot] in #24093
- Bump knip from 5.66.2 to 5.66.3 by @dependabot[bot] in #24092
- Bump @vitest/eslint-plugin from 1.3.25 to 1.3.26 by @dependabot[bot] in #24102
- Bump google-api-core[grpc] from 2.26.0 to 2.27.0 in /requirements in the google group by @dependabot[bot] in #24082
- Bump knip from 5.66.3 to 5.66.4 by @dependabot[bot] in #24098
- Bump mozilla/addons-frontend from 2025.10.16-1 to 2025.10.30 by @dependabot[bot] in #24095
- Bump attrs from 25.3.0 to 25.4.0 in /requirements by @dependabot[bot] in #24014
- Bump sentry-sdk from 2.30.0 to 2.42.1 in /requirements by @dependabot[bot] in #24079
- Bump click from 8.2.1 to 8.3.0 in /requirements by @dependabot[bot] in #23955
- Bump django from 4.2.25 to 4.2.26 in /requirements by @dependabot[bot] in #24104
- Bump sentry-sdk from 2.42.1 to 2.43.0 in /requirements by @dependabot[bot] in #24110
- Bump grpcio from 1.75.1 to 1.76.0 in /requirements by @dependabot[bot] in #24080
- Bump iniconfig from 2.1.0 to 2.3.0 in /requirements by @dependabot[bot] in #24072
- Bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #24070
- Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #23890
- Bump ruff from 0.14.2 to 0.14.3 in /requirements by @dependabot[bot] in #24114
- Bump django-debug-toolbar from 6.0.0 to 6.1.0 in /requirements by @dependabot[bot] in #24112
- Bump @vitest/eslint-plugin from 1.3.26 to 1.4.0 by @dependabot[bot] in #24113
- Bump actions/download-artifact from 4 to 6 by @dependabot[bot] in #24069
- Bump certifi from 2025.8.3 to 2025.10.5 in /requirements by @dependabot[bot] in #24006
- Bump actions/upload-pages-artifact from 3 to 4 by @dependabot[bot] in #23829
- Bump actions/checkout from 4 to 5 by @dependabot[bot] in #23826
- Bump eslint from 9.38.0 to 9.39.0 by @dependabot[bot] in #24116
- Bump globals from 16.4.0 to 16.5.0 by @dependabot[bot] in #24117
- Bump knip from 5.66.4 to 5.67.1 by @dependabot[bot] in #24124
- Bump the google group across 1 directory with 3 updates by @dependabot[bot] in #24107
- Bump kombu from 5.5.4 to 5.6.0 in /requirements in the celery group by @dependabot[bot] in #24121
- Bump idna from 3.10 to 3.11 in /requirements by @dependabot[bot] in #24035
- Bump @eslint/compat from 1.4.0 to 1.4.1 by @dependabot[bot] in #24109
- Bump nginx from 1.29-bookworm to 1.29-bookworm by @dependabot[bot] in #23940
Full Changelog: 2025.10.30...2025.11.13
Contributors
willdurand, eviljeff, and 2 other contributors
Assets 2
2025.10.30-1
Cherry pick release to test infrastructure we have deployed on addons stage
Previous Release: 2025.10.30
Blockers:
Cherry-picks:
Before we push:
Before we start:
Before we promote:
After we're done:
Addons-Frontend Changelog:
Addons Server Changelog:
Full Changelog: 2025.10.30...2025.10.30-1
2025.10.30
This week's push hero is @eviljeff
Previous Release: 2025.10.16-1
Blockers:
Cherry-picks:
Before we push:
Before we start:
Disable DB replication because we have an expensive migration to run on the versions table. Support requested in https://mozilla-hub.atlassian.net/browse/SVCSE-3884
Before we promote:
After we're done:
Re-enable DB replication
Addons-Frontend Changelog:
mozilla/addons-frontend@2025.10.16...2025.10.30
Addons Server Changelog:
What's Changed
Notable things shipping
- handle celery.group results being a list by @eviljeff in #24021
- Convert the MISSING_DATA_COLLECTION_PERMISSIONS linter notice into an error for new add-ons by @willdurand in #24022
- Pass a boolean value to the --enable-data-collection-permissions linter CLI option by @willdurand in #24023
- Adds select All|None + expand/collapse to cinder jobs list on review page by @eviljeff in #24028
- Temporarily trust the MySQL apt repo since the MySQL GPG key has expired on 2025-10-22 by @willdurand in #24054
- Revert "Temporarily trust the MySQL apt repo since the MySQL GPG key has expired on 2025-10-22" by @willdurand in #24057
- Temporarily trust the MySQL apt repo since the MySQL GPG key has expired on 2025-10-22 by @willdurand in #24058
- migrations to drop MAD related columns from the database by @eviljeff in #24029
- Only enforce data collection for new add-ons uploaded via DevHub by @willdurand in #24053
- all successful developer appeals should prevent subsequent auto blocks by @eviljeff in #24052
- Update MySQL GPG key by @willdurand in #24059
- replace freezegun with time-machine by @eviljeff in #24020
- send related Addon entity data with Rating report by @eviljeff in #24043
Dependendabots
- Bump less from 4.4.1 to 4.4.2 by @dependabot[bot] in #24015
- Bump the google group across 1 directory with 4 updates by @dependabot[bot] in #23999
- Bump billiard from 4.2.1 to 4.2.2 in /requirements in the celery group by @dependabot[bot] in #23962
- Bump ruff from 0.12.4 to 0.13.3 in /requirements by @dependabot[bot] in #24001
- Bump addons-linter from 8.1.0 to 8.2.0 by @dependabot[bot] in #24042
- Bump mozilla/addons-frontend from 2025.10.02-1 to 2025.10.16-1 by @dependabot[bot] in #24040
- Bump pytest-env from 1.1.5 to 1.2.0 in /requirements by @dependabot[bot] in #24033
- Bump ruff from 0.13.3 to 0.14.0 in /requirements by @dependabot[bot] in #24025
- Bump addons-linter from 8.2.0 to 8.3.0 by @dependabot[bot] in #24049
- Bump the google group in /requirements with 2 updates by @dependabot[bot] in #24024
- Bump referencing from 0.36.2 to 0.37.0 in /requirements by @dependabot[bot] in #24045
- Bump tomli from 2.2.1 to 2.3.0 in /requirements by @dependabot[bot] in #24026
- Bump drf-spectacular-sidecar from 2025.9.1 to 2025.10.1 in /requirements by @dependabot[bot] in #23996
- Bump mmh3 from 5.1.0 to 5.2.0 in /requirements by @dependabot[bot] in #23745
- Bump addons-linter from 8.3.0 to 8.4.0 by @dependabot[bot] in #24060
- Bump vite from 6.3.6 to 6.4.1 by @dependabot[bot] in #24044
- Bump @rollup/plugin-babel from 6.0.4 to 6.1.0 by @dependabot[bot] in #24038
- Bump charset-normalizer from 3.4.3 to 3.4.4 in /requirements by @dependabot[bot] in #24047
- Bump feedparser from 6.0.11 to 6.0.12 in /requirements by @dependabot[bot] in #23904
- Bump pycparser from 2.22 to 2.23 in /requirements by @dependabot[bot] in #23901
- Bump globals from 16.3.0 to 16.4.0 by @dependabot[bot] in #23899
- Bump wcwidth from 0.2.13 to 0.2.14 in /requirements by @dependabot[bot] in #23971
- Bump @vitest/eslint-plugin from 1.3.16 to 1.3.20 by @dependabot[bot] in #24048
- Bump @babel/preset-env from 7.27.2 to 7.28.3 by @dependabot[bot] in #23802
- Bump pyparsing from 3.2.3 to 3.2.5 in /requirements by @dependabot[bot] in #23959
- Bump markupsafe from 3.0.2 to 3.0.3 in /requirements by @dependabot[bot] in #23986
- Bump drf-yasg from 1.21.10 to 1.21.11 in /requirements by @dependabot[bot] in #23985
- Bump dotenv from 16.4.7 to 17.2.3 by @dependabot[bot] in #23992
- Bump parsy from 2.1 to 2.2 in /requirements by @dependabot[bot] in #23909
- Bump pyyaml from 6.0.2 to 6.0.3 in /requirements by @dependabot[bot] in #23979
- Bump drf-nested-routers from 0.94.2 to 0.95.0 in /requirements by @dependabot[bot] in #23896
- Bump django-cors-headers from 4.7.0 to 4.9.0 in /requirements by @dependabot[bot] in #23953
- Bump markdown from 3.8.2 to 3.9 in /requirements by @dependabot[bot] in #23880
- Bump grpcio from 1.74.0 to 1.75.1 in /requirements by @dependabot[bot] in #23982
- Bump knip from 5.64.2 to 5.66.0 by @dependabot[bot] in #24061
- Bump asgiref from 3.9.1 to 3.10.0 in /requirements by @dependabot[bot] in #24005
- Bump knip from 5.66.0 to 5.66.1 by @dependabot[bot] in #24074
- Bump eslint from 9.37.0 to 9.38.0 by @dependabot[bot] in #24067
- Bump @vitest/eslint-plugin from 1.3.20 to 1.3.23 by @dependabot[bot] in #24065
Full Changelog: 2025.10.16...2025.10.30
Contributors
willdurand, eviljeff, and dependabot
Assets 2
2025.10.16-1
This week's push hero is @eviljeff
Previous Release: 2025.10.16
Blockers:
Cherry-picks:
ca0cdd3
mozilla/addons-frontend@6f1da4f
Before we push:
Before we start:
- deploy customs to prod https://github.com/mozilla-sre-deploy/deploy-amo/actions/runs/18535215363
Before we promote:
After we're done:
Addons-Frontend Changelog:
mozilla/addons-frontend@2025.10.02-1...2025.10.16-1
Addons Server Changelog:
What's Changed
Notable things shipping
- rm Kevin from push hero list in draft_release.yml by @eviljeff in #23977
- Fix deletion of ScannerQueryRule with a lot of results by @diox in #23978
- create missing migrations by @eviljeff in #23973
- Remove dead JavaScript code and strings from statistics by @diox in #23975
- rm MAD scanner by @eviljeff in #23991
- Remove 'What are daily users?' link/popup in stats page by @willdurand in #24019
- Add exclusion of promoted to Scanner[Query]Rules and add admin filter by @eviljeff in #24013
- Add additional filters to scanner query rules/results by @diox in #23984
Dependendabots
- Bump django from 4.2.24 to 4.2.25 in /requirements by @dependabot[bot] in #23974
- Bump addons-linter from 8.0.0 to 8.1.0 by @dependabot[bot] in #23983
- Bump eslint from 9.32.0 to 9.37.0 by @dependabot[bot] in #24012
- Bump @vitest/eslint-plugin from 1.1.42 to 1.3.16 by @dependabot[bot] in #24011
- Bump rhysd/actionlint from 1.7.7 to 1.7.8 by @dependabot[bot] in #24010
- Bump knip from 5.46.2 to 5.64.2 by @dependabot[bot] in #24003
- Bump mozilla/addons-frontend from 2025.09.04-1 to 2025.10.02-1 by @dependabot[bot] in #23990
- Bump stylelint from 16.24.0 to 16.25.0 by @dependabot[bot] in #23998
- Bump mozilla/autograph from 7.5.2 to 7.5.3 by @dependabot[bot] in #23965
- Bump @eslint/compat from 1.3.2 to 1.4.0 by @dependabot[bot] in #23970
- Bump pytest from 8.4.1 to 8.4.2 in /requirements by @dependabot[bot] in #23881
- Bump django-dbbackup from 4.3.0 to 5.0.0 in /requirements by @dependabot[bot] in #23861
- Bump django-debug-toolbar from 4.4.6 to 6.0.0 in /requirements by @dependabot[bot] in #23746
- Bump stylelint-config-standard from 37.0.0 to 39.0.1 by @dependabot[bot] in #24004
Full Changelog: 2025.10.02...2025.10.16-1
Contributors
diox, willdurand, and 2 other contributors
Assets 2
2025.10.16
This week's push hero is @eviljeff
Previous Release: 2025.10.02-1
Blockers:
Cherry-picks:
Before we push:
Before we start:
Before we promote:
After we're done:
Addons-Frontend Changelog:
mozilla/addons-frontend@2025.10.02-1...2025.10.16
Addons Server Changelog:
What's Changed
Notable things shipping
- rm Kevin from push hero list in draft_release.yml by @eviljeff in #23977
- Fix deletion of ScannerQueryRule with a lot of results by @diox in #23978
- create missing migrations by @eviljeff in #23973
- Remove dead JavaScript code and strings from statistics by @diox in #23975
- rm MAD scanner by @eviljeff in #23991
- Remove 'What are daily users?' link/popup in stats page by @willdurand in #24019
- Add exclusion of promoted to Scanner[Query]Rules and add admin filter by @eviljeff in #24013
- Add additional filters to scanner query rules/results by @diox in #23984
Dependendabots
- Bump django from 4.2.24 to 4.2.25 in /requirements by @dependabot[bot] in #23974
- Bump addons-linter from 8.0.0 to 8.1.0 by @dependabot[bot] in #23983
- Bump eslint from 9.32.0 to 9.37.0 by @dependabot[bot] in #24012
- Bump @vitest/eslint-plugin from 1.1.42 to 1.3.16 by @dependabot[bot] in #24011
- Bump rhysd/actionlint from 1.7.7 to 1.7.8 by @dependabot[bot] in #24010
- Bump knip from 5.46.2 to 5.64.2 by @dependabot[bot] in #24003
- Bump mozilla/addons-frontend from 2025.09.04-1 to 2025.10.02-1 by @dependabot[bot] in #23990
- Bump stylelint from 16.24.0 to 16.25.0 by @dependabot[bot] in #23998
- Bump mozilla/autograph from 7.5.2 to 7.5.3 by @dependabot[bot] in #23965
- Bump @eslint/compat from 1.3.2 to 1.4.0 by @dependabot[bot] in #23970
- Bump pytest from 8.4.1 to 8.4.2 in /requirements by @dependabot[bot] in #23881
- Bump django-dbbackup from 4.3.0 to 5.0.0 in /requirements by @dependabot[bot] in #23861
- Bump django-debug-toolbar from 4.4.6 to 6.0.0 in /requirements by @dependabot[bot] in #23746
- Bump stylelint-config-standard from 37.0.0 to 39.0.1 by @dependabot[bot] in #24004
Full Changelog: 2025.10.02...2025.10.16
Contributors
diox, willdurand, and 2 other contributors