2026.03.05

What's Changed

• Import translations from l10n repository (2026-02-25) by @mozilla-pontoon in #6509
• chore(deps): bump minimatch by @dependabot[bot] in #6508
• chore(deps): bump react-intersection-observer from 10.0.0 to 10.0.2 by @dependabot[bot] in #6494
• chore(deps): update nodemailer, s3 clients by @kschelonka in #6510
• chore(deps-dev): bump @playwright/test from 1.57.0 to 1.58.2 by @dependabot[bot] in #6496
• Import translations from l10n repository (2026-02-27) by @mozilla-pontoon in #6513
• chore(deps): bump rollup from 4.57.0 to 4.59.0 by @dependabot[bot] in #6511
• MNTOR-5217 - Remove Shutdown banner by @codemist in #6514
• chore(test): move from jest to vitest by @kschelonka in #6501
• chore(deps-dev): bump @faker-js/faker from 9.9.0 to 10.3.0 by @dependabot[bot] in #6520
• chore(deps-dev): bump eslint-plugin-storybook from 10.2.8 to 10.2.10 in the storybook group by @dependabot[bot] in #6516
• chore(deps): bump @types/node from 24.10.15 to 25.3.0 by @dependabot[bot] in #6519
• chore(deps): bump the otel group with 4 updates by @dependabot[bot] in #6517
• feat(fx-api): add create user api contract by @kschelonka in #6521
• chore(cleanup): remove unused code paths by @kschelonka in #6522
• fix(subscribers): update sha1 when primary email address is updated by @kschelonka in #6523
• MNTOR-5221: Implement security guidelines for Github actions by @fkiriakos07 in #6525
• Fix CLI argument syntax for Vitest by @Vinnl in #6526
• fix(auth): validate iss, kid, and aud for fxa rp events by @kschelonka in #6442
• feat(unsubscribe): add unsubscribe footer and audit/tracking by @kschelonka in #6527
• chore(deps-dev): bump esbuild from 0.27.0 to 0.27.3 by @dependabot[bot] in #6518

New Contributors

• @fkiriakos07 made their first contribution in #6525

Full Changelog: 2026.02.25...2026.03.05