2026.02.05

This week's push hero is @diox

Previous Release: 2026.01.22-2

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

• Apply webservices-infra plan from PR

Addons-Frontend Changelog:

mozilla/addons-frontend@2026.01.22...2026.02.05

Addons Server Changelog:

What's Changed

Notable things shipping

• Generate service accounts when registering scanner webhooks by @willdurand in #24325
• Prefer fxa_id over email when logging in, while allowing multiple accounts to have the same email by @diox in #24326
• docs: update private docs to run customs as a scanner by @willdurand in #24318
• Fix formatted scanner column in django admin by @willdurand in #24351
• Alter field api_key on scannerwebhook to have a max length of 255 chars by @willdurand in #24357
• Fix user admin page slowness for users with lots of activities by @diox in #24349
• Treat 201 and 202 responses as successful when calling webhooks by @willdurand in #24359
• docs: describe how to write new Node.js based scanners by @willdurand in #24358
• Use HMAC-SHA256 auth scheme when calling webhooks by @willdurand in #24342
• Improve NARC homoglyph handling and use faster/more powerful regex module by @diox in #24369
• Replace django-extended-choices with python/django Enum classes by @eviljeff in #24360
• Prevent listed versions submissions while the listing is rejected by @diox in #24367
• add support for Approve marking listing content as approved by @eviljeff in #24366
• Clean narc rules using regex module now that what's the task is using by @diox in #24380
• Automatically hard-block add-ons an user is an author of when banning them by @diox in #24356
• Add filter by webhook scanners in the scanner results Django admin by @willdurand in #24374
• Stop requiring wheel anymore by @diox in #24395
• Add a migration to duplicate the customs scanner rules for webhook by @willdurand in #24373
• move addon_important_change to a property of the activity _LOG class by @eviljeff in #24396
• Remove unused cachetools dependency by @diox in #24409
• Make NARC rules configurable by @diox in #24388

Dependendabots

• Bump vitest from 4.0.16 to 4.0.17 by @dependabot[bot] in #24339
• Bump eslint-plugin-prettier from 5.5.4 to 5.5.5 by @dependabot[bot] in #24348
• Bump knip from 5.80.2 to 5.81.0 by @dependabot[bot] in #24347
• Bump google-cloud-storage from 3.7.0 to 3.8.0 in /requirements in the google group by @dependabot[bot] in #24346
• Bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in #24350
• Bump drf-yasg from 1.21.11 to 1.21.12 in /requirements by @dependabot[bot] in #24355
• Bump prettier from 3.7.4 to 3.8.0 by @dependabot[bot] in #24353
• Bump elasticsearch from 7.17.12 to 7.17.13 in /requirements by @dependabot[bot] in #24345
• Bump tomli from 2.3.0 to 2.4.0 in /requirements by @dependabot[bot] in #24340
• Bump sphinx-rtd-theme from 3.0.2 to 3.1.0 in /requirements by @dependabot[bot] in #24343
• Bump wheel from 0.45.1 to 0.46.2 in /requirements by @dependabot[bot] in #24361
• Bump ruff from 0.14.11 to 0.14.13 in /requirements by @dependabot[bot] in #24365
• Bump addons-linter from 9.4.0 to 9.5.0 by @dependabot[bot] in #24364
• Bump drf-yasg from 1.21.12 to 1.21.14 in /requirements by @dependabot[bot] in #24363
• Bump stylelint and stylelint-config-standard by @dependabot[bot] in #24362
• Bump knip from 5.81.0 to 5.82.0 by @dependabot[bot] in #24371
• Bump django-csp from 3.8 to 4.0 in /requirements by @dependabot[bot] in #23572
• Bump knip from 5.82.0 to 5.82.1 by @dependabot[bot] in #24375
• Bump certifi from 2025.11.12 to 2026.1.4 in /requirements by @dependabot[bot] in #24314
• Bump prettier from 3.8.0 to 3.8.1 by @dependabot[bot] in #24381
• Bump markdown from 3.10 to 3.10.1 in /requirements by @dependabot[bot] in #24384
• Bump ruff from 0.14.13 to 0.14.14 in /requirements by @dependabot[bot] in #24390
• Bump pyparsing from 3.3.1 to 3.3.2 in /requirements by @dependabot[bot] in #24379
• Bump sentry-sdk from 2.49.0 to 2.50.0 in /requirements by @dependabot[bot] in #24378
• Bump drf-spectacular-sidecar from 2025.12.1 to 2026.1.1 in /requirements by @dependabot[bot] in #24305
• Bump globals from 17.0.0 to 17.1.0 by @dependabot[bot] in #24392
• Bump vitest from 4.0.17 to 4.0.18 by @dependabot[bot] in #24389
• Bump packaging from 25.0 to 26.0 in /requirements by @dependabot[bot] in #24385
• Bump pip from 25.3 to 26.0 in /requirements by @dependabot[bot] in #24401
• Bump protobuf from 4.25.8 to 6.33.4 in /requirements by @dependabot[bot] in #24408
• Bump rich from 14.2.0 to 14.3.1 in /requirements by @dependabot[bot] in #24400
• Bump addons-linter from 9.5.0 to 9.6.0 by @dependabot[bot] in #24402
• Bump wcwidth from 0.2.14 to 0.5.0 in /requirements by @dependabot[bot] in #24406

Full Changelog: 2026.01.22...2026.02.05