2025.10.02

This week's push hero is @eviljeff

Previous Release: 2025.09.18

Blockers:

Cherry-picks:

• mozilla/addons-frontend@a104788

Before we push:

Before we start:

Before we promote:

After we're done:

• Deploy customs 5.4.1

Addons-Frontend Changelog:

mozilla/addons-frontend@2025.09.18...2025.10.02-1

Addons Server Changelog:

What's Changed

Notable things shipping

• Add 7 days cooldown to dependabot by @diox in #23917
• Only send API key user part in email, not string representation of object by @diox in #23933
• ci: only persist credentials for the locales job on the main branch by @willdurand in #23934
• Make various fields in django admin read-only by @wagnerand-moz in #23926
• Collect and expose where held decisions originate by @eviljeff in #23935
• Remove dependabot cooldown for docker/docker-compose/github-actions by @diox in #23938
• Fix NARC scanning for add-ons w/ multiple authors including one with display_name=None by @diox in #23943
• Update prod locales - drop id, enable ro. by @eviljeff in #23936
• Revert "Bump mozilla/addons-frontend from 2025.09.04-1 to 2025.09.19" by @diox in #23945
• Run scanner query rules using replica, not primary db by @diox in #23944
• set NHR when we're rolling back to unreviewed by @eviljeff in #23921
• Normalize emails before restricting them automatically in a scanner action by @diox in #23947
• Update DEV_AGREEMENT_CHANGE_FALLBACK following policies update by @wagnerand in #23769
• Add is_signed to django admin FileInline by @wagnerand-moz in #23946
• tidy up and add more django admin permissions by @eviljeff in #23942
• Fix versions not being flagged for review after 2nd level approval requeue by @diox in #23948
• Fix potential IntegrityError exception in EmailUserRestriction admin by @diox in #23956

Dependendabots

• Bump mozilla/addons-frontend from 2025.09.04-1 to 2025.09.19 by @dependabot[bot] in #23939
• Bump addons-linter from 7.20.0 to 8.0.0 by @dependabot[bot] in #23949

New Contributors

• @wagnerand-moz made their first contribution in #23926

Full Changelog: 2025.09.18...2025.10.02

2025.09.18

This week's push hero is @KevinMind @diox

Previous Release: 2025.09.04

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

enable rollback waffle switch
./manage.py waffle_switch version-rollback on

Addons-Frontend Changelog:

mozilla/addons-frontend@2025.09.04...2025.09.18-2

Addons Server Changelog:

2025.09.04

This week's push hero is @eviljeff

Previous Release: 2025.08.29-1

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

mozilla/addons-frontend@2025.08.07...2025.09.04

Addons Server Changelog:

What's Changed

Notable things shipping

• Handle additional homoglyphs by @diox in #23850
• allow addons viewer permission holder to download disabled files by @eviljeff in #23846
• Bump minimum should match for trigrams in search to 75% by @diox in #23852
• Add NARC to available scanners for ScannerQueryRule by @diox in #23851
• Allow product pages to be noindex'ed temporarily by @willdurand in #23853
• Expose add-on listing info to the django admin by @willdurand in #23866
• Fix default_locale erroneously set to lowercase for spanish add-ons&collections by @diox in #23865

Full Changelog: 2025.08.29...2025.09.04

2025.08.29-1

This week's push hero is @diox

Previous Release: 2025.08.21-2

What's Changed

Notable things shipping

• Remove "Not Promoted" from PromotedGroup by @chrstinalin in #23818
• Apply more aggressive normalization to trademark checks and NARC by @diox in #23833
• update version rollback messaging by @eviljeff in #23761
• Allow scanner rule definition to wrap if necessary in readonly view by @diox in #23823
• Display narc scanner results in review page by @diox in #23840
• increase REVIEWER_DELAYED_REJECTION_PERIOD_DAYS_DEFAULT to 30 by @eviljeff in #23841
• Pass homoglyph variants of names to trademark checks and NARC by @diox in #23842
• Handle additional homoglyphs #23850

Full Changelog: 2025.08.21-2...2025.08.29-1

2025.08.29

This week's push hero is @diox

Previous Release: 2025.08.21-2

What's Changed

Notable things shipping

• Remove "Not Promoted" from PromotedGroup by @chrstinalin in #23818
• Apply more aggressive normalization to trademark checks and NARC by @diox in #23833
• update version rollback messaging by @eviljeff in #23761
• Allow scanner rule definition to wrap if necessary in readonly view by @diox in #23823
• Display narc scanner results in review page by @diox in #23840
• increase REVIEWER_DELAYED_REJECTION_PERIOD_DAYS_DEFAULT to 30 by @eviljeff in #23841
• Pass homoglyph variants of names to trademark checks and NARC by @diox in #23842

Full Changelog: 2025.08.21-2...2025.08.29

2025.08.21-2

• Call run_action() even on initial match when scanning for narc outside auto_approve #23820
• Allow automated disable&block action to be appealed (and handle such appeals) #23832

Full Changelog: 2025.08.21...2025.08.21-2

2025.08.21-1

• Call run_action() even on initial match when scanning for narc outside auto_approve #23820

Full Changelog: 2025.08.21...2025.08.21-1

2025.08.21

This week's push hero is @diox

Previous Release: 2025.08.19

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons Server Changelog:

2025.08.19

This week's push hero is @diox

Previous Release: 2025.08.07-3

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons Server Changelog:

What's Changed

Notable things shipping

• Pin version of zizmor by @diox in #23764
• soft-block versions on delete by @eviljeff in #23768
• use primary_db with duplicate_addon_version_for_rollback task by @eviljeff in #23774
• Introduce new scanner: Name Add-on Regexp Checker, NARC by @diox in #23775
• Fix permission for 2nd level approval queue by @wagnerand in #23796
• Re-run scanner actions if results changed when running narc scanner on version by @diox in #23793
• Add UsageTier checks for ratings ratio, and disable thresholds by @eviljeff in #23794
• Handle average_daily_users of 0 in UsageTier threshold-based rules by @diox in #23805
• Change NARC scanner to run on versions rather than uploads by @diox in #23801
• Handle manifest parsing errors caused by narc in auto_approve by @diox in #23806

Dependendabots

• Bump click from 8.1.8 to 8.2.1 in /requirements by @dependabot[bot] in #23483
• Bump python from 0175d8f to e55523f by @dependabot[bot] in #23636
• Bump click-plugins from 1.1.1 to 1.1.1.2 in /requirements by @dependabot[bot] in #23620
• Bump eslint from 9.28.0 to 9.32.0 by @dependabot[bot] in #23741
• Bump source-map from 0.7.4 to 0.7.6 by @dependabot[bot] in #23729
• Bump mozilla/addons-frontend from 2025.05.29 to 2025.08.07 by @dependabot[bot] in #23789

Full Changelog: 2025.08.05...2025.08.19

2025.08.07-3

Cherry pick release
Push hero is @diox

Previous Release: 2025.08.07-2

Blockers:

Cherry-picks:

• fec2a97

Before we push:

Before we start:

Before we promote:

After we're done:

Full Changelog: 2025.08.07-2...2025.08.07-3