2023.12.05

Planned for release to relay.firefox.com on December 12th, 2023.

Other changes

• MPP-3390: Set test database name with TEST_DB_NAME by @jwhitlock in #4175
• MPP-3390: Fix profile API PATCH tests by @jwhitlock in #4174

User-facing changes:

• MPP-3598: Avoid iOS autozooming on input focus by @rafeerahman in #4181
• MPP-3624: Remove invisible container in second step of free onboarding on mobile screens by @rafeerahman in #4182
• MPP-3621: Handle mask generation error for free onboarding by @rafeerahman in #4176
• MPP-3597: Fix mobile sizing of step two in free user onboarding by @rafeerahman in #4178
• Free user onboarding changes from readiness meeting by @lloan in #4198

Dependency updates

• Bump @adobe/css-tools from 4.3.1 to 4.3.2 by @dependabot in #4180
• Bump @types/react from 18.2.38 to 18.2.41 by @dependabot in #4197
• Bump @testing-library/jest-dom from 6.1.4 to 6.1.5 by @dependabot in #4195
• Bump the eslint group with 3 updates by @dependabot in #4191
• Bump @types/jest-axe from 3.5.8 to 3.5.9 by @dependabot in #4192
• Bump msw from 2.0.9 to 2.0.10 by @dependabot in #4194
• Bump lint-staged from 15.1.0 to 15.2.0 by @dependabot in #4196
• Bump the typing-stubs group with 3 updates by @dependabot in #4185
• Bump drf-spectacular-sidecar from 2023.10.1 to 2023.12.1 by @dependabot in #4190
• Bump cryptography from 41.0.6 to 41.0.7 by @dependabot in #4187
• Bump twilio from 8.10.2 to 8.10.3 by @dependabot in #4188
• Bump sentry-sdk from 1.37.1 to 1.38.0 by @dependabot in #4186
• Bump boto3 from 1.29.7 to 1.33.6 by @dependabot in #4189

Full Changelog: 2023.11.30...2023.12.05

2023.11.30

Released to relay.firefox.com on December 5th, 2023 with SVCSE-1640.

User-facing changes:

Bug fixes which are under the flag free_user_onboarding

• MPP-3579: Welcome email cta button string update by @rafeerahman in #4093
• MPP-3599 & MPP-3602: Free user onboarding bug fixes by @lloan in #4170
• MPP-3600 Use email UTM params to trigger free user onboarding. by @lloan in #4171
• MPP-3618 Update L10N string names to remove usage of "--" by @lloan in #4172
• MPP-3594: Fix long masks overflow in free onboarding by @rafeerahman in #4173

Other changes

• Bump cryptography from 41.0.5 to 41.0.6 by @dependabot in #4169

Full Changelog: 2023.11.28...2023.11.30

2023.11.28

User-facing changes

• MPP-3578 - Implement refined upsell banner logic by @lloan in #4143
• MPP-3578 - Make FF banner dismissible by @lloan in #4147

2023.11.27

• MPP-3601: In free user onboarding, no onBlur for modal by @jwhitlock in #4167

PRs that are behind feature flag holiday_promo_2023

• MPP-3588: 2023 Holiday promo banner by @rafeerahman in #4146
• MPP-3589 - Show news item for the holiday discount promo by @lloan in #4144
• MPP-3589 - Show news item only to free users by @lloan in #4148

2023.11.27

• Holiday promo banner ga ping and UTM params by @rafeerahman in #4165
• Add GA Ping for holiday promo news item by @lloan alas in #4166

2023.11.28

• Implement feedback for telemetry by @lloan in #4168

Other Changes

• MPP-3547: e2e readme note addition. by @rafeerahman in #4164

Dependency updates

• Bump eslint-config-next from 13.5.6 to 14.0.3 by @dependabot in #4141
• Bump the testing-library group with 1 update by @dependabot in #4134
• Bump @types/jest-axe from 3.5.7 to 3.5.8 by @dependabot in #4140
• Bump stylelint-scss from 5.3.0 to 5.3.1 by @dependabot in #4135
• Bump the eslint group with 3 updates by @dependabot in #4133
• Bump react-intersection-observer from 9.5.2 to 9.5.3 by @dependabot in #4136
• Bump next from 14.0.2 to 14.0.3 by @dependabot in #4138
• Bump @next/bundle-analyzer from 14.0.2 to 14.0.3 by @dependabot in #4139
• Bump react-aria from 3.29.1 to 3.30.0 by @dependabot in #4137
• MPP-3568: Added tracker removal argument for first forwarded email onboarding by @rafeerahman in #4142
• Bump sentry-sdk from 1.34.0 to 1.35.0 by @dependabot in #4131
• Bump phonenumbers from 8.13.24 to 8.13.25 by @dependabot in #4132
• Bump the testing-libraries group with 1 update by @dependabot in #4126
• Bump django-cors-headers from 4.3.0 to 4.3.1 by @dependabot in #4130
• Bump boto3 from 1.28.85 to 1.29.3 by @dependabot in #4128
• Bump the typing-stubs group with 3 updates by @dependabot in #4127
• Bump twilio from 8.10.1 to 8.10.2 by @dependabot in #4129

2023.11.27

• Bump @types/react from 18.2.37 to 18.2.38 by @dependabot in #4160
• Bump fast-check from 3.13.2 to 3.14.0 by @dependabot in #4158
• Bump the eslint group with 3 updates by @dependabot in #4155
• Bump typescript from 5.2.2 to 5.3.2 by @dependabot in #4156
• Bump msw from 2.0.6 to 2.0.9 by @dependabot in #4162
• Bump @stripe/stripe-js from 2.1.11 to 2.2.0 by @dependabot in #4161
• Bump prettier from 3.0.3 to 3.1.0 by @dependabot in #4159
• Bump the typing-stubs group with 2 updates by @dependabot in #4149
• Bump phonenumbers from 8.13.25 to 8.13.26 by @dependabot in #4150
• Bump django-filter from 23.3 to 23.4 by @dependabot in #4154
• Bump mypy from 1.7.0 to 1.7.1 by @dependabot in #4151
• Bump boto3 from 1.29.3 to 1.29.7 by @dependabot in #4163
• Bump sentry-sdk from 1.35.0 to 1.37.1 by @dependabot in #4152

Full Changelog: 2023.11.17...2023.11.28

Released to relay.firefox.com on November 28th, 2023 with SVCSE-1630.

2023.11.27

Duplicate to 2023.11.22.2 that @rafeerahman created to trigger Jenkins build.

User-facing changes

• MPP-3588: 2023 Holiday promo banner by @rafeerahman in #4146
• MPP-3578 - Implement refined upsell banner logic by @lloan in #4143
• MPP-3589 - Show news item for the holiday discount promo by @lloan in #4144
• MPP-3578 - Make FF banner dismissible by @lloan in #4147
• MPP-3589 - Show news item only to free users by @lloan in #4148

2023.11.27

• Holiday promo banner ga ping and UTM params by @rafeerahman in #4165
• Add GA Ping for holiday promo news item by @lloan alas in #4166
• MPP-3601: In free user onboarding, no onBlur for modal by @jwhitlock in #4167

Dependency updates

• Bump eslint-config-next from 13.5.6 to 14.0.3 by @dependabot in #4141
• Bump the testing-library group with 1 update by @dependabot in #4134
• Bump @types/jest-axe from 3.5.7 to 3.5.8 by @dependabot in #4140
• Bump stylelint-scss from 5.3.0 to 5.3.1 by @dependabot in #4135
• Bump the eslint group with 3 updates by @dependabot in #4133
• Bump react-intersection-observer from 9.5.2 to 9.5.3 by @dependabot in #4136
• Bump next from 14.0.2 to 14.0.3 by @dependabot in #4138
• Bump @next/bundle-analyzer from 14.0.2 to 14.0.3 by @dependabot in #4139
• Bump react-aria from 3.29.1 to 3.30.0 by @dependabot in #4137
• MPP-3568: Added tracker removal argument for first forwarded email onboarding by @rafeerahman in #4142
• Bump sentry-sdk from 1.34.0 to 1.35.0 by @dependabot in #4131
• Bump phonenumbers from 8.13.24 to 8.13.25 by @dependabot in #4132
• Bump the testing-libraries group with 1 update by @dependabot in #4126
• Bump django-cors-headers from 4.3.0 to 4.3.1 by @dependabot in #4130
• Bump boto3 from 1.28.85 to 1.29.3 by @dependabot in #4128
• Bump the typing-stubs group with 3 updates by @dependabot in #4127
• Bump twilio from 8.10.1 to 8.10.2 by @dependabot in #4129

2023.11.27

• Bump @types/react from 18.2.37 to 18.2.38 by @dependabot in #4160
• Bump fast-check from 3.13.2 to 3.14.0 by @dependabot in #4158
• Bump the eslint group with 3 updates by @dependabot in #4155
• Bump typescript from 5.2.2 to 5.3.2 by @dependabot in #4156
• Bump msw from 2.0.6 to 2.0.9 by @dependabot in #4162
• Bump @stripe/stripe-js from 2.1.11 to 2.2.0 by @dependabot in #4161
• Bump prettier from 3.0.3 to 3.1.0 by @dependabot in #4159
• Bump the typing-stubs group with 2 updates by @dependabot in #4149
• Bump phonenumbers from 8.13.25 to 8.13.26 by @dependabot in #4150
• Bump django-filter from 23.3 to 23.4 by @dependabot in #4154
• Bump mypy from 1.7.0 to 1.7.1 by @dependabot in #4151
• Bump boto3 from 1.29.3 to 1.29.7 by @dependabot in #4163
• Bump sentry-sdk from 1.35.0 to 1.37.1 by @dependabot in #4152

Full Changelog: 2023.11.17...2023.11.27

2023.11.23

Duplicate to 2023.11.22.2 that @rafeerahman created to trigger Jenkins build.

User-facing changes

• MPP-3588: 2023 Holiday promo banner by @rafeerahman in #4146
• MPP-3578 - Implement refined upsell banner logic by @lloan in #4143
• MPP-3589 - Show news item for the holiday discount promo by @lloan in #4144
• MPP-3578 - Make FF banner dismissible by @lloan in #4147
• MPP-3589 - Show news item only to free users by @lloan in #4148

Dependency updates

• Bump eslint-config-next from 13.5.6 to 14.0.3 by @dependabot in #4141
• Bump the testing-library group with 1 update by @dependabot in #4134
• Bump @types/jest-axe from 3.5.7 to 3.5.8 by @dependabot in #4140
• Bump stylelint-scss from 5.3.0 to 5.3.1 by @dependabot in #4135
• Bump the eslint group with 3 updates by @dependabot in #4133
• Bump react-intersection-observer from 9.5.2 to 9.5.3 by @dependabot in #4136
• Bump next from 14.0.2 to 14.0.3 by @dependabot in #4138
• Bump @next/bundle-analyzer from 14.0.2 to 14.0.3 by @dependabot in #4139
• Bump react-aria from 3.29.1 to 3.30.0 by @dependabot in #4137
• MPP-3568: Added tracker removal argument for first forwarded email onboarding by @rafeerahman in #4142
• Bump sentry-sdk from 1.34.0 to 1.35.0 by @dependabot in #4131
• Bump phonenumbers from 8.13.24 to 8.13.25 by @dependabot in #4132
• Bump the testing-libraries group with 1 update by @dependabot in #4126
• Bump django-cors-headers from 4.3.0 to 4.3.1 by @dependabot in #4130
• Bump boto3 from 1.28.85 to 1.29.3 by @dependabot in #4128
• Bump the typing-stubs group with 3 updates by @dependabot in #4127
• Bump twilio from 8.10.1 to 8.10.2 by @dependabot in #4129

Full Changelog: 2023.11.17...2023.11.23

2023.11.22.2

Minor bug fixes to match the criteria for Firefox banner dismissal and showing a news item to strictly free users.

What's Changed

• MPP-3578 - Make FF banner dismissible by @lloan in #4147
• MPP-3589 - Show news item only to free users by @lloan in #4148

Full Changelog: 2023.11.22...2023.11.22.2

2023.11.22

Planned for release to relay.firefox.com on November 28th, 2023.

User-facing changes

• MPP-3588: 2023 Holiday promo banner by @rafeerahman in #4146
• MPP-3578 - Implement refined upsell banner logic by @lloan in #4143
• MPP-3589 - Show news item for the holiday discount promo by @lloan in #4144

Dependency updates

• Bump eslint-config-next from 13.5.6 to 14.0.3 by @dependabot in #4141
• Bump the testing-library group with 1 update by @dependabot in #4134
• Bump @types/jest-axe from 3.5.7 to 3.5.8 by @dependabot in #4140
• Bump stylelint-scss from 5.3.0 to 5.3.1 by @dependabot in #4135
• Bump the eslint group with 3 updates by @dependabot in #4133
• Bump react-intersection-observer from 9.5.2 to 9.5.3 by @dependabot in #4136
• Bump next from 14.0.2 to 14.0.3 by @dependabot in #4138
• Bump @next/bundle-analyzer from 14.0.2 to 14.0.3 by @dependabot in #4139
• Bump react-aria from 3.29.1 to 3.30.0 by @dependabot in #4137
• MPP-3568: Added tracker removal argument for first forwarded email onboarding by @rafeerahman in #4142
• Bump sentry-sdk from 1.34.0 to 1.35.0 by @dependabot in #4131
• Bump phonenumbers from 8.13.24 to 8.13.25 by @dependabot in #4132
• Bump the testing-libraries group with 1 update by @dependabot in #4126
• Bump django-cors-headers from 4.3.0 to 4.3.1 by @dependabot in #4130
• Bump boto3 from 1.28.85 to 1.29.3 by @dependabot in #4128
• Bump the typing-stubs group with 3 updates by @dependabot in #4127
• Bump twilio from 8.10.1 to 8.10.2 by @dependabot in #4129

Full Changelog: 2023.11.17...2023.11.22

2023.11.17

Released to relay.firefox.com on November 21st, 2023 with SVCSE-1620.

User-facing Changes

• MPP-3478, MPP-3455, MPP-3479: Updates for custom mask creation by @rafeerahman in #4070
• Fixes in 2023.11.08.8, further changes for CSS sourcemap URLs by @jwhitlock in #4121
• MPP-3577: String update for free onboarding by @rafeerahman in #4091

Other Changes

• Sort welcome emails by user_id by @jwhitlock in #4092
• MPP-3390: Auto-verify emails by @jwhitlock in #4111
• MPP-3583: Test header read exception, allow multiple headers with same name by @jwhitlock in #4110

Dependency Updates

• Bump @next/eslint-plugin-next from 14.0.1 to 14.0.2 by @dependabot in #4106
• Bump msw from 2.0.3 to 2.0.6 by @dependabot in #4107
• Bump @types/react from 18.2.35 to 18.2.37 by @dependabot in #4103
• Bump the testing-library group with 1 update by @dependabot in #4101
• Bump the eslint group with 3 updates by @dependabot in #4100
• Bump @next/bundle-analyzer from 13.5.6 to 14.0.2 by @dependabot in #4104
• Bump next from 14.0.1 to 14.0.2 by @dependabot in #4108
• Bump lint-staged from 15.0.2 to 15.1.0 by @dependabot in #4105
• Bump react-stately from 3.27.1 to 3.28.0 by @dependabot in #4102
• Bump the testing-libraries group with 1 update by @dependabot in #4094
• Bump the typing-stubs group with 2 updates by @dependabot in #4095
• Bump black from 23.10.1 to 23.11.0 by @dependabot in #4096
• Bump mypy from 1.6.1 to 1.7.0 by @dependabot in #4097
• Bump twilio from 8.10.0 to 8.10.1 by @dependabot in #4098
• Update to Node 18.18 by @Vinnl in #4109
• Bump boto3 from 1.28.78 to 1.28.85 by @dependabot in #4113

Full Changelog: 2023.11.08.8...2023.11.17

2023.11.08.8

This is a bugfix release for an incident in production on 2023.11.08. When navigating between pages on the single page app, the content is un-styled due to CSP rejecting the inline styles. This release fixes the issue. It was deployed on November 15, 2023 with SVCSE-1604.

• next updated to 14.0.2 (still reformats the map comment when injecting CSS)
• node updated to 18.18.2
• npm updated to 9.8.1
• Django remains at 4.2.7
• CSP rules for style sheets have several changes:
  • Rules are now sha256 hashes, because Chrome prints the sha256 hash for rejected inline content.
  • A rule is added when the map comment ends in ...css.map*/ (when served as file) and ...css.map */ (when injected as inline content).
  • A rule is added for the empty string, since next injects empty <style> elements before adding content.
• MPP-3583 is fixed

What's Changed

• Downgrade to Django 3.2.22 by @jwhitlock in #4114
• Downgrade next from 14.0.1 to 14.0.0 by @jwhitlock in #4115
• Add up to two hashes per CSS by @jwhitlock in #4116
• Downgrade to next 14.0.0 (for real) by @jwhitlock in #4117
• Add hashes for content with comment space by @jwhitlock in #4118
• Further production fixex - empty hash, upgrade Django by @jwhitlock in #4119
• Further prod fixes - Update next, node, and fix MPP-3583 by @jwhitlock in #4120

Full Changelog: 2023.11.08...2023.11.08.8

2023.11.08.6

This is a bugfix release for an incident in production on 2023.11.08. When navigating between pages on the single page app, the content is un-styled due to CSP rejecting the inline styles. This fixed the issue.

What's Changed

• Downgrade to Django 3.2.22 by @jwhitlock in #4114
• Downgrade next from 14.0.1 to 14.0.0 by @jwhitlock in #4115
• Add up to two hashes per CSS by @jwhitlock in #4116
• Downgrade to next 14.0.0 (for real) by @jwhitlock in #4117
• Add hashes for content with comment space by @jwhitlock in #4118

Full Changelog: 2023.11.08...2023.11.08.6