2026.02.19

This week's push hero is @diox

Previous Release: 2026.02.05-1

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

mozilla/addons-frontend@2026.02.05...2026.02.19

Addons Server Changelog:

What's Changed

Notable things shipping

• reviewer tools listing content approval and rejection by @eviljeff in #24386
• Display metadata and link to detail page in scanner admin query results by @diox in #24387
• Fix fake FxA user auth for local environments by @diox in #24419
• Remove broken urlconf_decorator - it hasn't worked in 10 years by @diox in #24421
• Update elasticsearch client libraries to 8.x by @diox in #24370
• Fix CSP in admin to allow django's jsi18n admin view as a script by @diox in #24422
• Increase uwsgi buffer-size in local environments to match prod by @diox in #24438
• Replace last_content_review_pass with content_review_status by @eviljeff in #24437
• Fix admin CSP: need to use SITE_URL, not INTERNAL_SITE_URL in admin CSP by @diox in #24446
• Add links to user admin page in reviewer tools review & developer profile pages by @diox in #24425
• Add actions to block add-ons / view authors in scanner results admin by @diox in #24424
• Allow developer requests for new content review by @eviljeff in #24420
• Add yara-x behind a waffle switch by @willdurand in #24439
• Developer can request a new listing content review via the API by @eviljeff in #24454
• Add links to authors of add-ons in blocklist submission page by @diox in #24459
• Add a new group for the service accounts created for the scanners by @willdurand in #24462
• Additional confusable characters by @diox in #24468
• Allow scanners to run asynchronously and send their results later by @willdurand in #24447

Dependendabots

• Bump django from 4.2.27 to 4.2.28 in /requirements by @dependabot[bot] in #24412
• Bump protobuf from 6.33.4 to 6.33.5 in /requirements by @dependabot[bot] in #24404
• Bump sentry-sdk from 2.50.0 to 2.51.0 in /requirements by @dependabot[bot] in #24415
• Bump cssselect from 1.3.0 to 1.4.0 in /requirements by @dependabot[bot] in #24417
• Bump globals from 17.1.0 to 17.2.0 by @dependabot[bot] in #24413
• Bump wcwidth from 0.5.0 to 0.5.2 in /requirements by @dependabot[bot] in #24423
• Bump zod from 3.24.2 to 4.3.6 by @dependabot[bot] in #24391
• Bump myst-parser from 4.0.1 to 5.0.0 in /requirements by @dependabot[bot] in #24352
• Bump cryptography from 46.0.3 to 46.0.4 in /requirements by @dependabot[bot] in #24416
• Bump knip from 5.82.1 to 5.83.0 by @dependabot[bot] in #24443
• Bump addons-linter from 9.6.0 to 9.7.0 by @dependabot[bot] in #24440
• Bump globals from 17.2.0 to 17.3.0 by @dependabot[bot] in #24434
• Bump stylelint from 17.0.0 to 17.1.0 by @dependabot[bot] in #24430
• Bump @eslint/compat from 2.0.1 to 2.0.2 by @dependabot[bot] in #24427
• Bump babel from 2.17.0 to 2.18.0 in /requirements by @dependabot[bot] in #24428
• Bump cryptography from 46.0.4 to 46.0.5 in /requirements by @dependabot[bot] in #24448
• Bump @babel/preset-env from 7.28.6 to 7.29.0 by @dependabot[bot] in #24426
• Bump proto-plus from 1.27.0 to 1.27.1 in /requirements by @dependabot[bot] in #24445
• Bump pytest-split from 0.10.0 to 0.11.0 in /requirements by @dependabot[bot] in #24444
• Bump wrapt from 2.0.1 to 2.1.1 in /requirements by @dependabot[bot] in #24442
• Bump pyjwt from 2.10.1 to 2.11.0 in /requirements by @dependabot[bot] in #24436
• Bump jquery-ui from 1.14.1 to 1.14.2 by @dependabot[bot] in #24418
• Bump rich from 14.3.1 to 14.3.2 in /requirements by @dependabot[bot] in #24435
• Bump wcwidth from 0.5.2 to 0.5.3 in /requirements by @dependabot[bot] in #24431
• Bump dennis from 1.1.0 to 1.2.0 in /requirements by @dependabot[bot] in #24453
• Bump glob from 13.0.0 to 13.0.1 by @dependabot[bot] in #24452
• Bump asgiref from 3.11.0 to 3.11.1 in /requirements by @dependabot[bot] in #24451
• Bump stylelint from 17.1.0 to 17.1.1 by @dependabot[bot] in #24450
• Bump ipython from 9.9.0 to 9.10.0 in /requirements by @dependabot[bot] in #24429
• Bump pillow from 12.1.0 to 12.1.1 in /requirements by @dependabot[bot] in #24455
• Bump setuptools from 80.9.0 to 80.10.2 in /requirements by @dependabot[bot] in #24398
• Bump pip from 26.0 to 26.0.1 in /requirements by @dependabot[bot] in #24457
• Bump knip from 5.83.0 to 5.83.1 by @dependabot[bot] in #24465
• Bump grpcio from 1.76.0 to 1.78.0 in /requirements by @dependabot[bot] in #24461
• Bump sentry-sdk from 2.51.0 to 2.52.0 in /requirements by @dependabot[bot] in #24456
• Bump mysql from 8.0 to 8.0 by @dependabot[bot] in #24287
• Bump pycparser from 2.23 to 3.0 in /requirements by @dependabot[bot] in #24383
• Bump markdown from 3.10.1 to 3.10.2 in /requirements by @dependabot[bot] in #24475
• Bump dockerflow from 2024.4.2 to 2026.1.26 in /requirements by @dependabot[bot] in #24405
• Bump addons-linter from 9.7.0 to 9.8.0 by @dependabot[bot] in #24470
• Bump parso from 0.8.5 to 0.8.6 in /requirements by @dependabot[bot] in #24472

Full Changelog: 2026.02.05...2026.02.19