2025.11.27

This week's push hero is @diox

Previous Release: 2025.11.13-1

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

mozilla/addons-frontend@2025.11.13...2025.11.27

Addons Server Changelog:

What's Changed

Notable things shipping

• Return a 414 if the url we'd redirect to for locale and app is too long by @eviljeff in #24145
• Don't create fake CinderJob for requeues; expose notes in log by @eviljeff in #24155
• Create activitylogs for Collection and UserProfile property changes by @eviljeff in #24151
• add dedicated source permission (& extra django admin view perms) by @eviljeff in #24168
• Add JA4-based restrictions and display JA4s in user admin by @diox in #24162
• Add additional custom confusable characters to normalization code by @diox in #24181

Dependendabots

• Bump eslint from 9.39.0 to 9.39.1 by @dependabot[bot] in #24126
• Bump markdown from 3.9 to 3.10 in /requirements by @dependabot[bot] in #24128
• Bump the google group in /requirements with 2 updates by @dependabot[bot] in #24133
• Bump @vitest/eslint-plugin from 1.4.0 to 1.4.1 by @dependabot[bot] in #24132
• Bump rabbitmq from 3.12 to 3.13.6 by @dependabot[bot] in #23931
• Bump addons-linter from 8.4.0 to 9.0.0 by @dependabot[bot] in #24138
• Bump googleapis-common-protos from 1.71.0 to 1.72.0 in /requirements by @dependabot[bot] in #24139
• Bump knip from 5.67.1 to 5.68.0 by @dependabot[bot] in #24137
• Bump ruff from 0.14.3 to 0.14.4 in /requirements by @dependabot[bot] in #24141
• Bump jsdom from 26.1.0 to 27.1.0 by @dependabot[bot] in #24115
• Bump rpds-py from 0.19.0 to 0.28.0 in /requirements by @dependabot[bot] in #24086
• Bump jsonschema-specifications from 2025.4.1 to 2025.9.1 in /requirements by @dependabot[bot] in #23884
• Bump js-yaml from 4.1.0 to 4.1.1 by @dependabot[bot] in #24144
• Bump addons-linter from 9.0.0 to 9.1.0 by @dependabot[bot] in #24148
• Bump @vitest/eslint-plugin from 1.4.1 to 1.4.2 by @dependabot[bot] in #24146
• Bump mozilla/addons-frontend from 2025.10.30 to 2025.11.13 by @dependabot[bot] in #24149
• Bump sentry-sdk from 2.43.0 to 2.44.0 in /requirements by @dependabot[bot] in #24153
• Bump knip from 5.68.0 to 5.69.0 by @dependabot[bot] in #24152
• Bump glob from 11.0.3 to 11.1.0 by @dependabot[bot] in #24156
• Bump pillow from 11.3.0 to 12.0.0 in /requirements by @dependabot[bot] in #24055
• Bump pytest from 8.4.2 to 9.0.0 in /requirements by @dependabot[bot] in #24154
• Bump pytest-reportlog from 0.4.0 to 1.0.0 in /requirements by @dependabot[bot] in #24161
• Bump certifi from 2025.10.5 to 2025.11.12 in /requirements by @dependabot[bot] in #24160
• Bump jsdom from 27.1.0 to 27.2.0 by @dependabot[bot] in #24159
• Bump execnet from 2.1.1 to 2.1.2 in /requirements by @dependabot[bot] in #24158
• Bump addons-linter from 9.1.0 to 9.2.0 by @dependabot[bot] in #24157
• Bump pytest from 9.0.0 to 9.0.1 in /requirements by @dependabot[bot] in #24164
• Bump knip from 5.69.0 to 5.69.1 by @dependabot[bot] in #24163
• Bump ruff from 0.14.4 to 0.14.5 in /requirements by @dependabot[bot] in #24167
• Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #24037
• Bump google-cloud-storage from 3.5.0 to 3.6.0 in /requirements in the google group by @dependabot[bot] in #24169
• Bump lxml from 5.4.0 to 6.0.2 in /requirements by @dependabot[bot] in #23960
• Bump cryptography from 45.0.7 to 46.0.3 in /requirements by @dependabot[bot] in #24056
• Bump cffi from 1.17.1 to 2.0.0 in /requirements by @dependabot[bot] in #23895

Full Changelog: 2025.11.13...2025.11.27