2025.01.08

Planned for release to relay.firefox.com on January 14, 2025.

There are no user-facing changes in this release.

Dependency updates

• Bump the boto group with 5 updates by @dependabot in #5292
• Bump ruff from 0.8.4 to 0.8.6 by @dependabot in #5294
• Bump react-intersection-observer from 9.14.0 to 9.14.1 by @dependabot in #5295
• Bump sass from 1.83.0 to 1.83.1 by @dependabot in #5297
• Bump mypy from 1.14.0 to 1.14.1 by @dependabot in #5293
• Bump typescript from 5.4.5 to 5.7.2 by @dependabot in #5296

Full Changelog: 2025.01.07...2025.01.08

2025.01.07

What's Changed

User-facing changes

None

Other changes

• Fix types, CSS import in frontend by @jwhitlock in #5257

Dependency updates

• Bump the boto group with 4 updates by @dependabot in #5259
• Bump phonenumbers from 8.13.51 to 8.13.52 by @dependabot in #5261
• Bump ruff from 0.8.2 to 0.8.3 by @dependabot in #5263
• Bump @playwright/test from 1.49.0 to 1.49.1 by @dependabot in #5265
• Bump stylelint from 16.11.0 to 16.12.0 by @dependabot in #5266
• Bump react-intersection-observer from 9.13.1 to 9.14.0 by @dependabot in #5269
• Bump lint-staged from 15.2.10 to 15.2.11 by @dependabot in #5270
• Bump djangorestframework-stubs from 3.15.1 to 3.15.2 in the typing-stubs group by @dependabot in #5260
• Bump twilio from 9.3.8 to 9.4.1 by @dependabot in #5262
• Bump @stripe/stripe-js from 5.2.0 to 5.3.0 by @dependabot in #5267
• Bump sass from 1.82.0 to 1.83.0 by @dependabot in #5268
• Bump the nextjs group with 4 updates by @dependabot in #5264
• Bump ruff from 0.8.3 to 0.8.4 by @dependabot in #5280
• Bump vobject from 0.9.8 to 0.9.9 by @dependabot in #5282
• Bump @stripe/stripe-js from 5.3.0 to 5.4.0 by @dependabot in #5276
• Bump coverage from 7.6.9 to 7.6.10 in the testing-libraries group by @dependabot in #5283
• Bump msw from 2.6.8 to 2.7.0 by @dependabot in #5278
• Bump swr from 2.2.5 to 2.3.0 by @dependabot in #5287
• Bump lint-staged from 15.2.11 to 15.3.0 by @dependabot in #5286
• Bump react-confetti from 6.1.0 to 6.2.2 by @dependabot in #5288
• Bump the boto group across 1 directory with 4 updates by @dependabot in #5284
• Bump the nextjs group across 1 directory with 4 updates by @dependabot in #5289
• Bump django-allauth[socialaccount] from 65.3.0 to 65.3.1 by @dependabot in #5285
• Manual npm updates - npm dedupe, remove typescript pin, update nanoid by @jwhitlock in #5271
• Bump react-toastify from 10.0.6 to 11.0.2 by @dependabot in #5277
• Bump mypy from 1.13.0 to 1.14.0 by @dependabot in #5281

Full Changelog: 2024.12.09...2025.01.07

2024.12.09

Released to relay.firefox.com on December 11, 2024, with SVCSE-2371.

This tag replaces 2024.12.05, to ensure we ship Python 3.11 vs updating to Python 3.12.

There are no user-facing changes in this release.

Other changes

• Use docs version of probe-scraper by @jwhitlock in #5233
• MPP-3852: Test verify_from_sns by @jwhitlock in #5234
• MPP-3852: Use cryptography for SNS signature validation, remove pyopenssl and pem by @jwhitlock in #5235

Dependency updates

• Bump coverage from 7.6.7 to 7.6.8 in the testing-libraries group by @dependabot in #5218
• Bump sentry-sdk from 2.18.0 to 2.19.0 by @dependabot in #5220
• Bump ruff from 0.7.4 to 0.8.0 by @dependabot in #5219
• Bump the boto group with 6 updates by @dependabot in #5217
• Bump msw from 2.6.5 to 2.6.6 by @dependabot in #5216
• Bump husky from 9.1.6 to 9.1.7 by @dependabot in #5211
• Bump @stripe/stripe-js from 4.10.0 to 5.2.0 by @dependabot in #5214
• Bump @playwright/test from 1.48.2 to 1.49.0 by @dependabot in #5212
• Bump stylelint-scss from 6.9.0 to 6.10.0 by @dependabot in #5213
• Bump eslint-plugin-testing-library from 6.4.0 to 7.0.0 in the eslint group by @dependabot in #5209
• Bump react-aria from 3.35.1 to 3.36.0 by @dependabot in #5210
• Bump react-stately from 3.33.0 to 3.34.0 by @dependabot in #5215
• Bump the boto group with 4 updates by @dependabot in #5222
• Bump glean-parser from 15.2.1 to 16.1.0 by @dependabot in #5224
• Bump pyjwt from 2.10.0 to 2.10.1 by @dependabot in #5225
• Bump drf-spectacular from 0.27.2 to 0.28.0 by @dependabot in #5229
• Bump django-allauth[socialaccount] from 65.2.0 to 65.3.0 by @dependabot in #5227
• Bump stylelint from 16.10.0 to 16.11.0 by @dependabot in #5232
• Bump prettier from 3.3.3 to 3.4.1 by @dependabot in #5230
• Bump ruff from 0.8.0 to 0.8.1 by @dependabot in #5231
• Bump drf-spectacular-sidecar from 2024.11.1 to 2024.12.1 by @dependabot in #5226
• Bump the boto group with 4 updates by @dependabot in #5237
• Bump eslint-plugin-testing-library from 7.0.0 to 7.1.0 in the eslint group by @dependabot in #5236
• Bump django from 4.2.16 to 4.2.17 by @dependabot in #5238
• Bump @types/react from 18.3.12 to 18.3.13 by @dependabot in #5239
• Bump phonenumbers from 8.13.50 to 8.13.51 by @dependabot in #5240
• Bump sass from 1.81.0 to 1.82.0 by @dependabot in #5241
• Bump prettier from 3.4.1 to 3.4.2 by @dependabot in #5242
• Bump dotenv from 16.4.5 to 16.4.7 by @dependabot in #5243
• Bump cryptography from 43.0.3 to 44.0.0 by @dependabot in #5223
• Bump the nextjs group with 4 updates by @dependabot in #5247
• Bump eslint-plugin-testing-library from 7.1.0 to 7.1.1 in the eslint group by @dependabot in #5246
• Bump @testing-library/react from 16.0.1 to 16.1.0 in the testing-library group by @dependabot in #5249
• Bump msw from 2.6.6 to 2.6.8 by @dependabot in #5250
• MPP-3487: Revert Python 3.12.7 to 3.11.8 by @jwhitlock in #5245
• Bump the boto group with 4 updates by @dependabot in #5251
• Bump ruff from 0.8.1 to 0.8.2 by @dependabot in #5253
• Bump twilio from 9.3.7 to 9.3.8 by @dependabot in #5254
• Bump sentry-sdk from 2.19.0 to 2.19.2 by @dependabot in #5255
• Bump coverage from 7.6.8 to 7.6.9 in the testing-libraries group by @dependabot in #5252
• Update cross-spawn from 7.0.3 to 7.0.6 by @jwhitlock in #5256

Full Changelog: 2024.11.21...2024.12.09

2024.11.21.1 - Revert to Python 3.11

Release fix for 2024.11.21, that reverts from Python 3.12 to 3.11. Released to relay.firefox.com on December 6, 2024 with SVCSE-2366.

Release fix

• MPP-3487: Revert Python 3.12.7 to 3.11.8 by @jwhitlock in #5244

Previous Release - Dependabot updates

• MPP-3487: Update to Python 3.12 by @jwhitlock in #5180
• Bump slackapi/slack-github-action from 1.27.0 to 2.0.0 by @dependabot in #5191
• Bump coverage from 7.6.4 to 7.6.7 in the testing-libraries group by @dependabot in #5197
• Bump ruff from 0.7.3 to 0.7.4 by @dependabot in #5198
• Bump twilio from 9.3.6 to 9.3.7 by @dependabot in #5200
• Bump django-waffle from 4.1.0 to 4.2.0 by @dependabot in #5199
• Bump pyjwt from 2.9.0 to 2.10.0 by @dependabot in #5202
• Bump phonenumbers from 8.13.49 to 8.13.50 by @dependabot in #5201
• Bump the boto group with 4 updates by @dependabot in #5196
• Bump msw from 2.6.4 to 2.6.5 by @dependabot in #5195
• Bump eslint-plugin-jest-dom from 5.4.0 to 5.5.0 in the eslint group by @dependabot in #5192
• Bump stylelint-scss from 6.8.1 to 6.9.0 by @dependabot in #5193
• Bump sass from 1.80.6 to 1.81.0 by @dependabot in #5194

Full Changelog: 2024.11.13...2024.11.21.1

2024.12.05

This tag was cancelled, because the Python 3.12 upgrade in 2024.11.21 caused a slowdown in email processing. 2024.12.09 is the replacement.

There are no user-facing changes in this release.

Other changes

• Use docs version of probe-scraper by @jwhitlock in #5233
• MPP-3852: Test verify_from_sns by @jwhitlock in #5234
• MPP-3852: Use cryptography for SNS signature validation, remove pyopenssl and pem by @jwhitlock in #5235

Dependency Updates

• Bump coverage from 7.6.7 to 7.6.8 in the testing-libraries group by @dependabot in #5218
• Bump sentry-sdk from 2.18.0 to 2.19.0 by @dependabot in #5220
• Bump ruff from 0.7.4 to 0.8.0 by @dependabot in #5219
• Bump the boto group with 6 updates by @dependabot in #5217
• Bump msw from 2.6.5 to 2.6.6 by @dependabot in #5216
• Bump husky from 9.1.6 to 9.1.7 by @dependabot in #5211
• Bump @stripe/stripe-js from 4.10.0 to 5.2.0 by @dependabot in #5214
• Bump @playwright/test from 1.48.2 to 1.49.0 by @dependabot in #5212
• Bump stylelint-scss from 6.9.0 to 6.10.0 by @dependabot in #5213
• Bump eslint-plugin-testing-library from 6.4.0 to 7.0.0 in the eslint group by @dependabot in #5209
• Bump react-aria from 3.35.1 to 3.36.0 by @dependabot in #5210
• Bump react-stately from 3.33.0 to 3.34.0 by @dependabot in #5215
• Bump the boto group with 4 updates by @dependabot in #5222
• Bump glean-parser from 15.2.1 to 16.1.0 by @dependabot in #5224
• Bump pyjwt from 2.10.0 to 2.10.1 by @dependabot in #5225
• Bump drf-spectacular from 0.27.2 to 0.28.0 by @dependabot in #5229
• Bump django-allauth[socialaccount] from 65.2.0 to 65.3.0 by @dependabot in #5227
• Bump stylelint from 16.10.0 to 16.11.0 by @dependabot in #5232
• Bump prettier from 3.3.3 to 3.4.1 by @dependabot in #5230
• Bump ruff from 0.8.0 to 0.8.1 by @dependabot in #5231
• Bump drf-spectacular-sidecar from 2024.11.1 to 2024.12.1 by @dependabot in #5226
• Bump the boto group with 4 updates by @dependabot in #5237
• Bump eslint-plugin-testing-library from 7.0.0 to 7.1.0 in the eslint group by @dependabot in #5236
• Bump django from 4.2.16 to 4.2.17 by @dependabot in #5238
• Bump @types/react from 18.3.12 to 18.3.13 by @dependabot in #5239
• Bump phonenumbers from 8.13.50 to 8.13.51 by @dependabot in #5240
• Bump sass from 1.81.0 to 1.82.0 by @dependabot in #5241
• Bump prettier from 3.4.1 to 3.4.2 by @dependabot in #5242
• Bump dotenv from 16.4.5 to 16.4.7 by @dependabot in #5243
• Bump cryptography from 43.0.3 to 44.0.0 by @dependabot in #5223

Full Changelog: 2024.11.21...2024.12.05

2024.11.21

Released to relay.firefox.com on December 4th, 2024 with SVCSE-2355.

There are no user-facing changes in this release.

Dependency updates

• MPP-3487: Update to Python 3.12 by @jwhitlock in #5180
• Bump slackapi/slack-github-action from 1.27.0 to 2.0.0 by @dependabot in #5191
• Bump coverage from 7.6.4 to 7.6.7 in the testing-libraries group by @dependabot in #5197
• Bump ruff from 0.7.3 to 0.7.4 by @dependabot in #5198
• Bump twilio from 9.3.6 to 9.3.7 by @dependabot in #5200
• Bump django-waffle from 4.1.0 to 4.2.0 by @dependabot in #5199
• Bump pyjwt from 2.9.0 to 2.10.0 by @dependabot in #5202
• Bump phonenumbers from 8.13.49 to 8.13.50 by @dependabot in #5201
• Bump the boto group with 4 updates by @dependabot in #5196
• Bump msw from 2.6.4 to 2.6.5 by @dependabot in #5195
• Bump eslint-plugin-jest-dom from 5.4.0 to 5.5.0 in the eslint group by @dependabot in #5192
• Bump stylelint-scss from 6.8.1 to 6.9.0 by @dependabot in #5193
• Bump sass from 1.80.6 to 1.81.0 by @dependabot in #5194

Full Changelog: 2024.11.13...2024.11.21

2024.11.13

Released to relay.firefox.com on November 21st, 2024 with SVCSE-2341
No user-facing changes

Other changes

• MPP-3927: Pre-fetch profile for domain address by @jwhitlock in #5179
• MPP-3946: Fix warnings for mixed_decls, imports by @jwhitlock in #5176

Dependency updates

• Bump the boto group with 3 updates by @dependabot in #5182
• Bump sentry-sdk from 2.17.0 to 2.18.0 by @dependabot in #5184
• Bump phonenumbers from 8.13.48 to 8.13.49 by @dependabot in #5183
• Bump django-allauth[socialaccount] from 65.1.0 to 65.2.0 by @dependabot in #5185
• Bump ruff from 0.7.2 to 0.7.3 by @dependabot in #5186
• Bump glean-parser from 15.2.0 to 15.2.1 by @dependabot in #5187
• Bump msw from 2.5.2 to 2.6.4 by @dependabot in #5189
• Bump the nextjs group with 4 updates by @dependabot in #5188

Full Changelog: 2024.11.07...2024.11.13

2024.11.07

Released to relay.firefox.com on November 12, 2024 with SVCSE-2324.

There are no user-facing changes in this release.

Other Changes

• MPP-3946: Silence deprecation warnings added in sass 1.80, fix division by @jwhitlock in #5166
• MPP-3942: Fix log_group_id in developer_mode log by @jwhitlock in #5175
• MPP-3948: complaintFeedbackType is not required by @jwhitlock in #5177

Dependency Updates

• Bump the boto group with 3 updates by @dependabot in #5168
• Bump markus[datadog] from 5.0.0 to 5.1.0 by @dependabot in #5169
• MPP-3487: Update to Python 3.11.10, prepare for Python 3.12, 3.13 by @jwhitlock in #5167
• Bump drf-spectacular-sidecar from 2024.7.1 to 2024.11.1 by @dependabot in #5170
• Bump ruff from 0.7.1 to 0.7.2 by @dependabot in #5171
• Bump @testing-library/jest-dom from 6.6.2 to 6.6.3 by @dependabot in #5172
• Bump sass from 1.80.4 to 1.80.6 by @dependabot in #5173

Full Changelog: 2024.10.30...2024.11.07

2024.10.30

Released to relay.firefox.com on 🇺🇸 November 5, 2024 with SVCSE-2309.

User-facing changes

• MPP-3932: Disable masks on complaints, round 2 by @jwhitlock in #5115 (behind waffle flags disable_mask_on_complaint and developer_mode)
• MPP-3901: update disabled mask email content by @groovecoder in #5156 (behind waffle flag disable_mask_on_complaint)

Other changes

• Create CONTRIBUTING.md by @EMMLynch in #5154
• Small documentation updates by @jwhitlock in #5155
• group nextjs dependencies by @groovecoder in #5157

Dependency Updates

• Bump sass from 1.79.5 to 1.80.3 by @dependabot in #5121
• Bump actions/setup-python from 5.2.0 to 5.3.0 by @dependabot in #5134
• Bump actions/setup-node from 4.0.4 to 4.1.0 by @dependabot in #5135
• Bump django-stubs from 5.1.0 to 5.1.1 in the typing-stubs group by @dependabot in #5137
• Bump phonenumbers from 8.13.47 to 8.13.48 by @dependabot in #5138
• Bump dj-database-url from 2.2.0 to 2.3.0 by @dependabot in #5139
• Bump ruff from 0.7.0 to 0.7.1 by @dependabot in #5141
• Bump mypy from 1.12.1 to 1.13.0 by @dependabot in #5142
• Bump glean-parser from 15.0.1 to 15.2.0 by @dependabot in #5144
• Bump django-allauth[socialaccount] from 65.0.2 to 65.1.0 by @dependabot in #5140
• Bump twilio from 9.3.4 to 9.3.6 by @dependabot in #5143
• Bump sass from 1.80.3 to 1.80.4 by @dependabot in #5147
• Bump @stripe/stripe-js from 4.8.0 to 4.9.0 by @dependabot in #5150
• Bump @types/react from 18.3.11 to 18.3.12 by @dependabot in #5151
• Bump the boto group with 4 updates by @dependabot in #5136
• Bump msw from 2.4.11 to 2.5.2 by @dependabot in #5148
• Bump @playwright/test from 1.48.1 to 1.48.2 by @dependabot in #5153
• Bump @next/eslint-plugin-next from 14.2.15 to 15.0.1 by @dependabot in #5149
• Bump @next/third-parties from 14.2.15 to 15.0.1 by @dependabot in #5145
• Bump next from 14.2.15 to 15.0.1 by @dependabot in #5152
• Bump eslint-config-next from 14.2.15 to 15.0.1 by @dependabot in #5146
• Bump the boto group with 3 updates by @dependabot in #5158
• Bump django-cors-headers from 4.5.0 to 4.6.0 by @dependabot in #5160
• Bump pytest-cov from 5.0.0 to 6.0.0 in the testing-libraries group by @dependabot in #5159
• Bump whitenoise from 6.7.0 to 6.8.2 by @dependabot in #5161
• Unpin typescript, update to 5.6.x by @jwhitlock in #5165
• Bump the nextjs group with 4 updates by @dependabot in #5162
• Bump msw from 2.5.2 to 2.6.0 by @dependabot in #5163
• Bump sass from 1.80.4 to 1.80.5 by @dependabot in #5164

Full Changelog: 2024.10.24...2024.10.30

2024.10.24

Released to relay.firefox.com on October 29th, 2024 with SVCSE-2298.

There are no user-facing changes in this release.

Other changes

• Add setting for Redis TLS with self-signed certs by @jwhitlock in #5131

Dependency updates

• Bump sentry-sdk from 2.16.0 to 2.17.0 by @dependabot in #5129
• Bump cryptography from 43.0.1 to 43.0.3 by @dependabot in #5128
• Bump ruff from 0.6.9 to 0.7.0 by @dependabot in #5126
• Bump coverage from 7.6.3 to 7.6.4 in the testing-libraries group by @dependabot in #5124
• Bump types-requests from 2.32.0.20240914 to 2.32.0.20241016 in the typing-stubs group by @dependabot in #5125
• Bump twilio from 9.3.3 to 9.3.4 by @dependabot in #5130
• Bump react-aria from 3.35.0 to 3.35.1 by @dependabot in #5119
• Bump stylelint-scss from 6.7.0 to 6.8.1 by @dependabot in #5122
• Bump @playwright/test from 1.48.0 to 1.48.1 by @dependabot in #5120
• Bump the boto group across 1 directory with 4 updates by @dependabot in #5132
• Bump mypy from 1.11.2 to 1.12.1 by @dependabot in #5127
• Bump @testing-library/jest-dom from 6.5.0 to 6.6.2 by @dependabot in #5118
• Bump eslint-plugin-testing-library from 6.3.0 to 6.4.0 in the eslint group by @dependabot in #5117

Full Changelog: 2024.10.17...2024.10.24