Merge branch 'master' into development

* master:
  Bug 1989605 - Don't allow brand-new accounts to use the Triage Request Form to self-grant
  Bug 1988243 - When a bot account is in the duo_excluded group it is still required to setup Duo only as 2FA and not TOTP
  Bug 1988707 - Clarify the User Statistics is updated daily
  Bug 1987016 - Apply better styling for disabled checkboxes
  Bumped version to 20250903.1
  Bug 1986495 - Optimize bug updates in Phabbugz by converting to a single update
  Bug 1985621: trigger uplift changes when hash of last form changes

Author: dklawren

Bugzilla.pm

@@ -13,7 +13,7 @@ use warnings;
 
 use Bugzilla::Logging;
 
-our $VERSION = '20250825.1';
+our $VERSION = '20250903.1';
 
 use Bugzilla::Auth;
 use Bugzilla::Auth::Persist::Cookie;

extensions/BMO/Extension.pm

@@ -417,7 +417,7 @@ sub parse_bounty_attachment_description {
 sub triage_request {
   my ($vars) = @_;
   my $user = Bugzilla->login(LOGIN_REQUIRED);
-  if (Bugzilla->input_params->{update}) {
+  if (!$user->is_new && Bugzilla->input_params->{update}) {
     Bugzilla->set_user(Bugzilla::User->super_user);
     $user->set_groups({add => ['canconfirm']});
     Bugzilla->set_user($user);

extensions/BMO/template/en/default/pages/get_permissions.html.tmpl

@@ -12,10 +12,12 @@
 
 <h3>How to apply for upgraded permissions</h3>
 
-<p>
-  If you want <kbd>canconfirm</kbd>, you can add it yourself using
-  the <a href="[% basepath FILTER none %]page.cgi?id=triage_request.html">triage request form</a>.
-</p>
+[% IF !user.is_new %]
+  <p>
+    If you want <kbd>canconfirm</kbd>, you can add it yourself using
+    the <a href="[% basepath FILTER none %]page.cgi?id=triage_request.html">triage request form</a>.
+  </p>
+[% END %]
 
 [% editbugs = basepath _ "enter_bug.cgi?assigned_to=nobody%40mozilla.org&bug_file_loc=http%3A%2F%2F&bug_ignored=0&bug_type=task&bug_severity=--&bug_status=NEW&cf_fx_iteration=---&cf_fx_points=---&component=Editbugs%20Requests&contenttypemethod=autodetect&contenttypeselection=text%2Fplain&defined_groups=1&flag_type-4=X&flag_type-607=X&flag_type-791=X&flag_type-800=X&flag_type-803=X&flag_type-916=X&form_name=enter_bug&maketemplate=Remember%20values%20as%20bookmarkable%20template&op_sys=Unspecified&priority=--&product=bugzilla.mozilla.org&rep_platform=Unspecified&target_milestone=---&version=Production" %]
 

extensions/BMO/template/en/default/pages/triage_request.html.tmpl

@@ -47,6 +47,13 @@
       faster.
     </p>
 
+  [% ELSIF user.is_new %]
+
+    <p>
+      Your account is still too new to request the ability to triage [% terms.bugs %].
+      Please check back at a later time to see when you will become eligible.
+    </p>
+
   [% ELSE %]
 
     <p>

extensions/UserProfile/template/en/default/pages/user_profile.html.tmpl

@@ -204,7 +204,7 @@
   <td colspan="4" class="separator"><hr></td>
 </tr>
 <tr>
-  <td>User Statistics</td>
+  <td>User Statistics (Updated daily)</td>
 </tr>
 
 <tr>

skins/standard/global.css

@@ -779,6 +779,19 @@ input[type="checkbox"]:checked {
   background-size: 18px 18px;
 }
 
+input[type="checkbox"]:disabled {
+  border-color: var(--disabled-button-foreground-color);
+  background-color: var(--disabled-button-background-color);
+  border-width: 1px;
+  cursor: default;
+}
+
+input[type="checkbox"]:disabled:checked {
+  border-color: var(--disabled-control-foreground-color);
+  background-color: var(--disabled-control-foreground-color);
+  cursor: default;
+}
+
 input[type="radio"] {
   border-radius: 50%;
 }

template/en/default/account/prefs/mfa.html.tmpl

@@ -56,7 +56,7 @@
     </iframe>
 
   [% ELSIF user.mfa %]
-    [% IF user.mfa != 'Duo' && user.in_duo_required_group %]
+    [% IF user.mfa != 'Duo' && user.in_duo_required_group && !user.in_duo_excluded_group %]
       <p class="mfa-warning-msg">
         You are in a group requiring Duo Security for two-factor authentication. You must
         first disabled your current two-factor authentication and then select Duo Security
@@ -77,9 +77,9 @@
     <input type="hidden" name="mfa_action" id="mfa-action" value="disable">
 
     <div class="mfa-buttons">
-      [% IF user.mfa == 'Duo' && user.in_duo_required_group %]
+      [% IF user.mfa == 'Duo' && user.in_duo_required_group && !user.in_duo_excluded_group %]
         <p class="mfa-warning-msg">
-          You are in a group requiring Duo Security for two-factor authentication and 
+          You are in a group requiring Duo Security for two-factor authentication and
           therefore it cannot be disabled. Talk to an admin on Slack (#bmo) if you need assistance.
         </p>
       [% ELSIF user.mfa != 'Duo' || (user.mfa == 'Duo' && !user.in_duo_required_group) %]