2026.05.26

What's Changed

• chore(deps-dev): bump the vitest group with 3 updates by @dependabot[bot] in #6614
• fix(dataclasses): add missing dataclasses and new update script by @joeherm in #6613
• fix(icons): making caching last step of syncBreaches job by @joeherm in #6623
• fix(ci): stop leaking secrets in Playwright artifacts by @groovecoder in #6624
• chore(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 by @dependabot[bot] in #6627
• chore(deps): bump fast-uri from 3.1.0 to 3.1.2 by @dependabot[bot] in #6628
• chore(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.4 by @dependabot[bot] in #6629
• Import translations from l10n repository (2026-05-11) by @mozilla-pontoon in #6625
• chore(deps-dev): bump the stylelint group with 2 updates by @dependabot[bot] in #6620
• chore(deps): bump next from 16.2.0 to 16.2.6 by @dependabot[bot] in #6631
• chore(deps): bump the otel group with 6 updates by @dependabot[bot] in #6638
• chore(deps): bump the aws-sdk group with 2 updates by @dependabot[bot] in #6635
• chore(deps): bump slackapi/slack-github-action from 3.0.2 to 3.0.3 by @dependabot[bot] in #6634
• chore(deps-dev): bump stylelint from 17.9.0 to 17.10.0 in the stylelint group by @dependabot[bot] in #6637
• chore(deps): bump the nextjs group across 1 directory with 3 updates by @dependabot[bot] in #6632
• chore(deps): bump the sentry group across 1 directory with 4 updates by @dependabot[bot] in #6633
• chore(deps-dev): bump the storybook group across 1 directory with 6 updates by @dependabot[bot] in #6636
• chore(deps): bump @protobufjs/utf8 from 1.1.0 to 1.1.1 by @dependabot[bot] in #6639
• Import translations from l10n repository (2026-05-13) by @mozilla-pontoon in #6640
• chore(deps): bump the react group across 1 directory with 2 updates by @dependabot[bot] in #6616
• chore(deps): bump @opentelemetry/exporter-prometheus, @opentelemetry/auto-instrumentations-node and @opentelemetry/sdk-node by @dependabot[bot] in #6630
• chore(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 by @dependabot[bot] in #6588
• chore(deps): bump protobufjs, @opentelemetry/auto-instrumentations-node, @opentelemetry/exporter-trace-otlp-http and @opentelemetry/sdk-node by @dependabot[bot] in #6641
• Import translations from l10n repository (2026-05-14) by @mozilla-pontoon in #6642
• MNTOR-5269 - Update breach alert email by @codemist in #6626
• Revamp admin/emails UI and add trigger buttons with Storybook references by @codemist in #6643
• chore(deps): bump knex from 3.2.9 to 3.2.10 by @dependabot[bot] in #6656
• chore(deps-dev): bump the stylelint group with 2 updates by @dependabot[bot] in #6653
• chore(deps): bump @opentelemetry/resource-detector-gcp from 0.51.0 to 0.52.0 in the otel group by @dependabot[bot] in #6654
• chore(deps-dev): bump sass from 1.97.3 to 1.99.0 by @dependabot[bot] in #6655
• chore(deps): bump the nextjs group with 3 updates by @dependabot[bot] in #6652
• chore(deps): bump the aws-sdk group with 2 updates by @dependabot[bot] in #6651
• chore(deps-dev): bump @vitest/eslint-plugin from 1.6.16 to 1.6.17 in the vitest group by @dependabot[bot] in #6648
• chore(deps): bump the sentry group with 4 updates by @dependabot[bot] in #6650
• MNTOR-5282 - Swap email logos for dark-mode variants by @codemist in #6658
• Generate Software Bill of Materials by @Vinnl in #6657
• MNTOR-5282 - Add email dark mode per guide by @codemist in #6663
• chore(deps): bump brace-expansion to 5.0.6 by @mozilla-blender[bot] in #6659
• chore(deps): bump @tootallnate/once to 3.0.1 by @mozilla-blender[bot] in #6664
• MNTOR-5282 - Strip down image switching logic and use linear gradient instead by @codemist in #6668
• Import translations from l10n repository (2026-05-21) by @mozilla-pontoon in #6644
• chore(deps): bump js-cookie from 3.0.5 to 3.0.7 by @dependabot[bot] in #6669
• chore(deps): bump minimatch to 9.0.7 by @mozilla-blender[bot] in #6666
• chore(deps): bump postcss to 8.5.10 by @mozilla-blender[bot] in #6665
• chore(deps-dev): bump qs from 6.15.0 to 6.15.2 by @dependabot[bot] in #6673
• chore(deps-dev): bump the stylelint group with 2 updates by @dependabot[bot] in #6680
• chore(deps): bump the otel group with 2 updates by @dependabot[bot] in #6681
• chore(deps): bump the aws-sdk group with 2 updates by @dependabot[bot] in #6678
• chore(deps): bump the sentry group across 1 directory with 4 updates by @dependabot[bot] in #6676
• chore(deps-dev): bump the vitest group with 4 updates by @dependabot[bot] in #6675
• chore(deps-dev): bump the storybook group across 1 directory with 6 updates by @dependabot[bot] in #6679
• MNTOR-5282 - Enforce background for breach alert email images by @codemist in #6686

Full Changelog: 2026.05.06...2026.05.26

2026.05.06

What's Changed

• chore(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #6606
• chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #6607
• chore(deps): bump protobufjs from 7.5.4 to 7.5.5 by @dependabot[bot] in #6604
• chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #6599
• chore(deps): bump the sentry group with 4 updates by @dependabot[bot] in #6589
• chore(deps): bump docker/metadata-action from 5.10.0 to 6.0.0 by @dependabot[bot] in #6577
• Import translations from l10n repository (2026-04-23) by @mozilla-pontoon in #6573
• Add BLEnder config by @mozilla-blender[bot] in #6609
• chore(deps): bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in #6612
• chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by @dependabot[bot] in #6611
• chore(deps-dev): bump the storybook group across 1 directory with 6 updates by @dependabot[bot] in #6600
• chore(deps): bump knex from 3.1.0 to 3.2.9 by @dependabot[bot] in #6601
• chore(deps): bump the aws-sdk group across 1 directory with 2 updates by @dependabot[bot] in #6580
• chore(deps): bump uuid from 11.1.0 to 14.0.0 by @dependabot[bot] in #6608
• chore(deps-dev): bump the vitest group across 1 directory with 5 updates by @dependabot[bot] in #6576
• chore(deps): bump the sentry group with 4 updates by @dependabot[bot] in #6617
• chore(deps): bump the aws-sdk group with 2 updates by @dependabot[bot] in #6618
• chore(deps): bump slackapi/slack-github-action from 3.0.1 to 3.0.2 by @dependabot[bot] in #6615
• chore(deps): bump the react-aria group with 2 updates by @dependabot[bot] in #6619
• fix(e2e): bypass Fastly CAPTCHA on FxA stage with fxa-ci header by @groovecoder in #6621
• fix(getBreaches): don't cache breaches in variable by @joeherm in #6622
• Import translations from l10n repository (2026-05-06) by @mozilla-pontoon in #6610

New Contributors

• @joeherm made their first contribution in #6622

Full Changelog: 2024.04.15...2026.05.06

2026.04.15

What's Changed

• chore(deps): bump lodash from 4.17.23 to 4.18.1 by @dependabot[bot] in #6596
• chore(deps-dev): bump stylelint from 17.5.0 to 17.6.0 in the stylelint group by @dependabot[bot] in #6591
• chore(deps-dev): bump the storybook group with 5 updates by @dependabot[bot] in #6590
• chore(deps): bump the otel group with 6 updates by @dependabot[bot] in #6592
• chore(deps): bump nodemailer from 8.0.4 to 8.0.5 by @dependabot[bot] in #6597
• MNTOR-5264: add active user filter to subscriber queries by @mansaj in #6602

Full Changelog: 2026.04.07...2024.04.15

2026.04.07

What's Changed

• fix(syncBreaches): fix job entrypoint path by @kschelonka in #6594

Full Changelog: 2026.04.01...2026.04.07

2026.04.01

What's Changed

• chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #6549
• chore(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #6551
• Import translations from l10n repository (2026-03-26) by @mozilla-pontoon in #6569
• chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in #6568
• Update volta project pin to Node 20.20.2 by @codemist in #6571
• chore(deps): bump nodemailer from 8.0.1 to 8.0.3 by @dependabot[bot] in #6584
• chore(deps): bump serialize-javascript and terser-webpack-plugin by @dependabot[bot] in #6587
• chore(deps-dev): bump stylelint from 17.4.0 to 17.5.0 in the stylelint group by @dependabot[bot] in #6583
• chore(deps-dev): bump the storybook group with 5 updates by @dependabot[bot] in #6581
• chore(deps): bump the sentry group with 4 updates by @dependabot[bot] in #6579
• chore(deps): bump brace-expansion by @dependabot[bot] in #6574
• chore(deps-dev): bump yaml from 2.8.2 to 2.8.3 by @dependabot[bot] in #6570
• chore(deps): bump actions/cache from 5.0.3 to 5.0.4 by @dependabot[bot] in #6578
• chore(deps): bump nodemailer from 8.0.3 to 8.0.4 by @dependabot[bot] in #6572
• chore(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.1 by @dependabot[bot] in #6575

Full Changelog: 2026.03.25...2026.04.01

2026.03.25

What's Changed

• chore(deps): bump next from 16.1.6 to 16.2.0 by @dependabot[bot] in #6564
• chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 by @dependabot[bot] in #6565
• chore(deps): bump @types/node from 25.3.3 to 25.3.5 by @dependabot[bot] in #6560
• chore(deps): bump pg from 8.19.0 to 8.20.0 by @dependabot[bot] in #6559
• chore(deps-dev): bump undici from 7.22.0 to 7.24.4 by @dependabot[bot] in #6562
• chore(deps-dev): bump @eslint/eslintrc from 3.3.4 to 3.3.5 by @dependabot[bot] in #6561
• chore(deps): bump the otel group with 6 updates by @dependabot[bot] in #6558
• chore(deps): bump the aws-sdk group with 2 updates by @dependabot[bot] in #6555
• chore(deps): bump the sentry group with 4 updates by @dependabot[bot] in #6553
• Import translations from l10n repository (2026-03-24) by @mozilla-pontoon in #6547
• chore(deps): bump the react-aria group with 2 updates by @dependabot[bot] in #6557
• chore(deps): bump fast-xml-parser and @aws-sdk/xml-builder by @dependabot[bot] in #6567
• chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in #6554
• chore(deps-dev): bump the storybook group with 6 updates by @dependabot[bot] in #6556
• chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #6552
• chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #6550

Full Changelog: 2026.03.18...2026.03.25

2026.03.18

What's Changed

• Import translations from l10n repository (2026-03-12) by @mozilla-pontoon in #6543
• Import translations from l10n repository (2026-03-13) by @mozilla-pontoon in #6545
• Remove daily release job by @Vinnl in #6542

Full Changelog: 2026.03.12...2026.03.18

2026.03.12

What's Changed

• Fix email ownership check by @st3fan in #6505
• fix(syncBreaches): only upload logos that do not exist in s3 by @kschelonka in #6479

New Contributors

• @st3fan made their first contribution in #6505

Full Changelog: 2026.03.11...2026.03.12

2026.03.11

What's Changed

• MNTOR-4285 - Fix Popover layout issues on mobile orientation change by @codemist in #6512
• chore(deps): bump immutable from 5.1.4 to 5.1.5 by @dependabot[bot] in #6532
• MNTOR-5209 - Fix scan cta alignment in Sign Up Form component by @codemist in #6528
• chore(deps): bump @types/node from 25.3.0 to 25.3.3 by @dependabot[bot] in #6536
• chore(deps-dev): bump lint-staged from 16.2.7 to 16.3.1 by @dependabot[bot] in #6539
• chore(deps-dev): bump eslint-plugin-storybook from 10.2.10 to 10.2.13 in the storybook group by @dependabot[bot] in #6534
• Import translations from l10n repository (2026-03-09) by @mozilla-pontoon in #6524
• chore(deps): bump @types/jsdom from 21.1.7 to 28.0.0 by @dependabot[bot] in #6538
• fix(breach-alerts): subscribe to updated primary email address by @kschelonka in #6540
• chore(deps): bump @opentelemetry/auto-instrumentations-node from 0.70.0 to 0.70.1 in the otel group by @dependabot[bot] in #6535
• chore(deps-dev): bump globals from 17.3.0 to 17.4.0 by @dependabot[bot] in #6537
• chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #6533
• feat(one-click): implement RFC 8058 one-click unsubscribe by @kschelonka in #6541

Full Changelog: 2026.03.05...2026.03.11

2026.03.05

What's Changed

• Import translations from l10n repository (2026-02-25) by @mozilla-pontoon in #6509
• chore(deps): bump minimatch by @dependabot[bot] in #6508
• chore(deps): bump react-intersection-observer from 10.0.0 to 10.0.2 by @dependabot[bot] in #6494
• chore(deps): update nodemailer, s3 clients by @kschelonka in #6510
• chore(deps-dev): bump @playwright/test from 1.57.0 to 1.58.2 by @dependabot[bot] in #6496
• Import translations from l10n repository (2026-02-27) by @mozilla-pontoon in #6513
• chore(deps): bump rollup from 4.57.0 to 4.59.0 by @dependabot[bot] in #6511
• MNTOR-5217 - Remove Shutdown banner by @codemist in #6514
• chore(test): move from jest to vitest by @kschelonka in #6501
• chore(deps-dev): bump @faker-js/faker from 9.9.0 to 10.3.0 by @dependabot[bot] in #6520
• chore(deps-dev): bump eslint-plugin-storybook from 10.2.8 to 10.2.10 in the storybook group by @dependabot[bot] in #6516
• chore(deps): bump @types/node from 24.10.15 to 25.3.0 by @dependabot[bot] in #6519
• chore(deps): bump the otel group with 4 updates by @dependabot[bot] in #6517
• feat(fx-api): add create user api contract by @kschelonka in #6521
• chore(cleanup): remove unused code paths by @kschelonka in #6522
• fix(subscribers): update sha1 when primary email address is updated by @kschelonka in #6523
• MNTOR-5221: Implement security guidelines for Github actions by @fkiriakos07 in #6525
• Fix CLI argument syntax for Vitest by @Vinnl in #6526
• fix(auth): validate iss, kid, and aud for fxa rp events by @kschelonka in #6442
• feat(unsubscribe): add unsubscribe footer and audit/tracking by @kschelonka in #6527
• chore(deps-dev): bump esbuild from 0.27.0 to 0.27.3 by @dependabot[bot] in #6518

New Contributors

• @fkiriakos07 made their first contribution in #6525

Full Changelog: 2026.02.25...2026.03.05