2025.12.11

This week's push hero is @eviljeff

Previous Release: 2025.11.27

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

Addons Server Changelog:

What's Changed

Notable things shipping

• Avoid raising exceptions when parsing invalid manifests by @diox in #24185
• add link to source builder by @eviljeff in #24180
• Call source builder API when source code is provided by @willdurand in #24131
• Fix tests intermittently failing with time-machine by @diox in #24196
• store reason for automatic reject and block action in activity log by @eviljeff in #24189
• Add a way to use the source-builder project locally by @willdurand in #24197
• Add api key to source-builder by @willdurand in #24217
• Do not call the source builder when the version doesn't have a license by @willdurand in #24222
• Fix broken nn-NO locale (dash vs underscore in folder name), and warnings for ko/ja by @diox in #24233

Dependendabots

• Bump knip from 5.69.1 to 5.70.0 by @dependabot[bot] in #24187
• Bump sentry-sdk from 2.44.0 to 2.45.0 in /requirements by @dependabot[bot] in #24186
• Bump google-resumable-media from 2.7.2 to 2.8.0 in /requirements in the google group by @dependabot[bot] in #24182
• Bump drf-spectacular from 0.28.0 to 0.29.0 in /requirements by @dependabot[bot] in #24123
• Bump click from 8.3.0 to 8.3.1 in /requirements by @dependabot[bot] in #24172
• Bump rpds-py from 0.28.0 to 0.29.0 in /requirements by @dependabot[bot] in #24171
• Bump asgiref from 3.10.0 to 3.11.0 in /requirements by @dependabot[bot] in #24195
• Bump knip from 5.70.0 to 5.70.1 by @dependabot[bot] in #24192
• Bump billiard from 4.2.2 to 4.2.3 in /requirements in the celery group by @dependabot[bot] in #24170
• Bump @vitest/eslint-plugin from 1.4.2 to 1.4.3 by @dependabot[bot] in #24178
• Bump @eslint/compat from 1.4.1 to 2.0.0 by @dependabot[bot] in #24177
• Bump django-environ from 0.11.2 to 0.12.0 in /requirements by @dependabot[bot] in #22989
• Bump rhysd/actionlint from 1.7.8 to 1.7.9 by @dependabot[bot] in #24174
• Bump mozilla/autograph from 7.5.3 to 7.5.4 by @dependabot[bot] in #24175
• Bump asttokens from 3.0.0 to 3.0.1 in /requirements by @dependabot[bot] in #24173
• Bump mozilla/addons-frontend from 2025.11.13 to 2025.11.27 by @dependabot[bot] in #24200
• Bump mozilla/autograph from 7.5.4 to 7.5.5 by @dependabot[bot] in #24201
• Bump sentry-sdk from 2.45.0 to 2.46.0 in /requirements by @dependabot[bot] in #24204
• Bump ruff from 0.14.5 to 0.14.6 in /requirements by @dependabot[bot] in #24206
• Bump exceptiongroup from 1.3.0 to 1.3.1 in /requirements by @dependabot[bot] in #24207
• Bump @vitest/eslint-plugin from 1.4.3 to 1.5.0 by @dependabot[bot] in #24209
• Bump stylelint from 16.25.0 to 16.26.0 by @dependabot[bot] in #24211
• Bump networkx from 3.5 to 3.6 in /requirements by @dependabot[bot] in #24210
• Bump knip from 5.70.1 to 5.70.2 by @dependabot[bot] in #24213
• Bump addons-linter from 9.2.0 to 9.3.0 by @dependabot[bot] in #24205
• Bump time-machine from 2.19.0 to 3.1.0 in /requirements by @dependabot[bot] in #24212
• Bump django from 4.2.26 to 4.2.27 in /requirements by @dependabot[bot] in #24216
• Bump kombu from 5.6.0 to 5.6.1 in /requirements in the celery group by @dependabot[bot] in #24214
• Bump prettier from 3.6.2 to 3.7.0 by @dependabot[bot] in #24218
• Bump deprecated from 1.2.18 to 1.3.1 in /requirements by @dependabot[bot] in #24108
• Bump sqlparse from 0.5.3 to 0.5.4 in /requirements by @dependabot[bot] in #24221
• Bump prettier from 3.7.0 to 3.7.1 by @dependabot[bot] in #24219
• Bump stylelint from 16.26.0 to 16.26.1 by @dependabot[bot] in #24220
• Bump prettier from 3.7.1 to 3.7.3 by @dependabot[bot] in #24224
• Bump @vitest/eslint-plugin from 1.5.0 to 1.5.1 by @dependabot[bot] in #24227
• Bump knip from 5.70.2 to 5.71.0 by @dependabot[bot] in #24225
• Bump ruff from 0.14.6 to 0.14.7 in /requirements by @dependabot[bot] in #24226
• Bump rpds-py from 0.29.0 to 0.30.0 in /requirements by @dependabot[bot] in #24228
• Bump zizmorcore/zizmor from 1.12.1 to 1.18.0 by @dependabot[bot] in #24202
• Bump drf-spectacular-sidecar from 2025.10.1 to 2025.12.1 in /requirements by @dependabot[bot] in #24232
• Bump elasticsearch/elasticsearch from 8.18.2 to 8.19.8 by @dependabot[bot] in #24231

Full Changelog: 2025.11.27...2025.12.11