2025.08.19

This week's push hero is @diox

Previous Release: 2025.08.07-3

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons Server Changelog:

What's Changed

Notable things shipping

• Pin version of zizmor by @diox in #23764
• soft-block versions on delete by @eviljeff in #23768
• use primary_db with duplicate_addon_version_for_rollback task by @eviljeff in #23774
• Introduce new scanner: Name Add-on Regexp Checker, NARC by @diox in #23775
• Fix permission for 2nd level approval queue by @wagnerand in #23796
• Re-run scanner actions if results changed when running narc scanner on version by @diox in #23793
• Add UsageTier checks for ratings ratio, and disable thresholds by @eviljeff in #23794
• Handle average_daily_users of 0 in UsageTier threshold-based rules by @diox in #23805
• Change NARC scanner to run on versions rather than uploads by @diox in #23801
• Handle manifest parsing errors caused by narc in auto_approve by @diox in #23806

Dependendabots

• Bump click from 8.1.8 to 8.2.1 in /requirements by @dependabot[bot] in #23483
• Bump python from 0175d8f to e55523f by @dependabot[bot] in #23636
• Bump click-plugins from 1.1.1 to 1.1.1.2 in /requirements by @dependabot[bot] in #23620
• Bump eslint from 9.28.0 to 9.32.0 by @dependabot[bot] in #23741
• Bump source-map from 0.7.4 to 0.7.6 by @dependabot[bot] in #23729
• Bump mozilla/addons-frontend from 2025.05.29 to 2025.08.07 by @dependabot[bot] in #23789

Full Changelog: 2025.08.05...2025.08.19