2026.03.12

What's Changed

• Fix email ownership check by @st3fan in #6505
• fix(syncBreaches): only upload logos that do not exist in s3 by @kschelonka in #6479

New Contributors

• @st3fan made their first contribution in #6505

Full Changelog: 2026.03.11...2026.03.12

2026.03.11

What's Changed

• MNTOR-4285 - Fix Popover layout issues on mobile orientation change by @codemist in #6512
• chore(deps): bump immutable from 5.1.4 to 5.1.5 by @dependabot[bot] in #6532
• MNTOR-5209 - Fix scan cta alignment in Sign Up Form component by @codemist in #6528
• chore(deps): bump @types/node from 25.3.0 to 25.3.3 by @dependabot[bot] in #6536
• chore(deps-dev): bump lint-staged from 16.2.7 to 16.3.1 by @dependabot[bot] in #6539
• chore(deps-dev): bump eslint-plugin-storybook from 10.2.10 to 10.2.13 in the storybook group by @dependabot[bot] in #6534
• Import translations from l10n repository (2026-03-09) by @mozilla-pontoon in #6524
• chore(deps): bump @types/jsdom from 21.1.7 to 28.0.0 by @dependabot[bot] in #6538
• fix(breach-alerts): subscribe to updated primary email address by @kschelonka in #6540
• chore(deps): bump @opentelemetry/auto-instrumentations-node from 0.70.0 to 0.70.1 in the otel group by @dependabot[bot] in #6535
• chore(deps-dev): bump globals from 17.3.0 to 17.4.0 by @dependabot[bot] in #6537
• chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #6533
• feat(one-click): implement RFC 8058 one-click unsubscribe by @kschelonka in #6541

Full Changelog: 2026.03.05...2026.03.11

2026.03.05

What's Changed

• Import translations from l10n repository (2026-02-25) by @mozilla-pontoon in #6509
• chore(deps): bump minimatch by @dependabot[bot] in #6508
• chore(deps): bump react-intersection-observer from 10.0.0 to 10.0.2 by @dependabot[bot] in #6494
• chore(deps): update nodemailer, s3 clients by @kschelonka in #6510
• chore(deps-dev): bump @playwright/test from 1.57.0 to 1.58.2 by @dependabot[bot] in #6496
• Import translations from l10n repository (2026-02-27) by @mozilla-pontoon in #6513
• chore(deps): bump rollup from 4.57.0 to 4.59.0 by @dependabot[bot] in #6511
• MNTOR-5217 - Remove Shutdown banner by @codemist in #6514
• chore(test): move from jest to vitest by @kschelonka in #6501
• chore(deps-dev): bump @faker-js/faker from 9.9.0 to 10.3.0 by @dependabot[bot] in #6520
• chore(deps-dev): bump eslint-plugin-storybook from 10.2.8 to 10.2.10 in the storybook group by @dependabot[bot] in #6516
• chore(deps): bump @types/node from 24.10.15 to 25.3.0 by @dependabot[bot] in #6519
• chore(deps): bump the otel group with 4 updates by @dependabot[bot] in #6517
• feat(fx-api): add create user api contract by @kschelonka in #6521
• chore(cleanup): remove unused code paths by @kschelonka in #6522
• fix(subscribers): update sha1 when primary email address is updated by @kschelonka in #6523
• MNTOR-5221: Implement security guidelines for Github actions by @fkiriakos07 in #6525
• Fix CLI argument syntax for Vitest by @Vinnl in #6526
• fix(auth): validate iss, kid, and aud for fxa rp events by @kschelonka in #6442
• feat(unsubscribe): add unsubscribe footer and audit/tracking by @kschelonka in #6527
• chore(deps-dev): bump esbuild from 0.27.0 to 0.27.3 by @dependabot[bot] in #6518

New Contributors

• @fkiriakos07 made their first contribution in #6525

Full Changelog: 2026.02.25...2026.03.05

${CURRENT_DATE}

Daily pre-release for ${CURRENT_DATE}.

What's Changed

• chore(deps-dev): bump @faker-js/faker from 9.9.0 to 10.3.0 by @dependabot[bot] in #6520
• chore(deps-dev): bump eslint-plugin-storybook from 10.2.8 to 10.2.10 in the storybook group by @dependabot[bot] in #6516
• chore(deps): bump @types/node from 24.10.15 to 25.3.0 by @dependabot[bot] in #6519
• chore(deps): bump the otel group with 4 updates by @dependabot[bot] in #6517
• feat(fx-api): add create user api contract by @kschelonka in #6521
• chore(cleanup): remove unused code paths by @kschelonka in #6522
• fix(subscribers): update sha1 when primary email address is updated by @kschelonka in #6523
• MNTOR-5221: Implement security guidelines for Github actions by @fkiriakos07 in #6525
• Fix CLI argument syntax for Vitest by @Vinnl in #6526
• fix(auth): validate iss, kid, and aud for fxa rp events by @kschelonka in #6442

New Contributors

• @fkiriakos07 made their first contribution in #6525

Full Changelog: 2026.03.02...${CURRENT_DATE}

2026.03.02

Daily pre-release for 2026.03.02.

What's Changed

• Import translations from l10n repository (2026-02-27) by @mozilla-pontoon in #6513
• chore(deps): bump rollup from 4.57.0 to 4.59.0 by @dependabot[bot] in #6511
• MNTOR-5217 - Remove Shutdown banner by @codemist in #6514
• chore(test): move from jest to vitest by @kschelonka in #6501

Full Changelog: 2026.02.27...2026.03.02

2026.02.27

Daily pre-release for 2026.02.27.

What's Changed

• chore(deps-dev): bump @playwright/test from 1.57.0 to 1.58.2 by @dependabot[bot] in #6496

Full Changelog: 2026.02.26...2026.02.27

2026.02.26

Daily pre-release for 2026.02.26.

What's Changed

• Import translations from l10n repository (2026-02-25) by @mozilla-pontoon in #6509
• chore(deps): bump minimatch by @dependabot[bot] in #6508
• chore(deps): bump react-intersection-observer from 10.0.0 to 10.0.2 by @dependabot[bot] in #6494
• chore(deps): update nodemailer, s3 clients by @kschelonka in #6510

Full Changelog: 2026.02.25...2026.02.26

2026.02.25

Daily pre-release for 2026.02.25.

What's Changed

• chore(deps): bump bn.js by @dependabot[bot] in #6506
• MNTOR-5189 - Fix breaking announcement images by @codemist in #6507

Full Changelog: 2026.02.24...2026.02.25

What's Changed

• Import translations from l10n repository (2026-02-11) by @mozilla-pontoon in #6483
• Fix failing e2e tests: Don't prefix a locale to the logout handler by @Vinnl in #6482
• chore(deps): bump fast-xml-parser, @aws-sdk/xml-builder and @aws-sdk/client-sesv2 by @dependabot[bot] in #6485
• feat(fx-api): api contract for firefox clients by @kschelonka in #6484
• chore(docs): update dependency instructions for otel by @kschelonka in #6467
• Import translations from l10n repository (2026-02-18) by @mozilla-pontoon in #6487
• chore(deps): bump the aws-sdk group with 2 updates by @dependabot[bot] in #6489
• chore(deps-dev): bump stylelint from 17.1.0 to 17.1.1 in the stylelint group by @dependabot[bot] in #6492
• fix(notify): stop making exists check on breach notification topic by @kschelonka in #6499
• chore(deps): bump the react-aria group with 2 updates by @dependabot[bot] in #6491
• chore(deps): bump ajv from 6.12.6 to 6.14.0 by @dependabot[bot] in #6502
• chore(deps-dev): bump the storybook group across 1 directory with 6 updates by @dependabot[bot] in #6504
• Import translations from l10n repository (2026-02-23) by @mozilla-pontoon in #6500
• chore(deps-dev): bump qs from 6.14.1 to 6.15.0 by @dependabot[bot] in #6497
• chore(deps): bump pg from 8.16.3 to 8.18.0 by @dependabot[bot] in #6493
• chore(deps): bump bn.js by @dependabot[bot] in #6506
• MNTOR-5189 - Fix breaking announcement images by @codemist in #6507

Full Changelog: 2026.02.11...2026.02.25

What's Changed

• chore(deps): bump bn.js by @dependabot[bot] in #6506
• MNTOR-5189 - Fix breaking announcement images by @codemist in #6507

Full Changelog: 2026.02.24...2026.02.25

2026.02.24

Daily pre-release for 2026.02.24.

What's Changed

• chore(deps): bump the react-aria group with 2 updates by @dependabot[bot] in #6491
• chore(deps): bump ajv from 6.12.6 to 6.14.0 by @dependabot[bot] in #6502
• chore(deps-dev): bump the storybook group across 1 directory with 6 updates by @dependabot[bot] in #6504
• Import translations from l10n repository (2026-02-23) by @mozilla-pontoon in #6500
• chore(deps-dev): bump qs from 6.14.1 to 6.15.0 by @dependabot[bot] in #6497
• chore(deps): bump pg from 8.16.3 to 8.18.0 by @dependabot[bot] in #6493

Full Changelog: 2026.02.20...2026.02.24

2026.02.23

Daily pre-release for 2026.02.23.

What's Changed

• fix(notify): stop making exists check on breach notification topic by @kschelonka in #6499

Full Changelog: 2026.02.19...2026.02.23