2024.10.31-2

cherry pick release for f4da852

2024.10.31-1

cherry pick release for https://github.com/mozilla/addons-server/releases/tag/2024.10.17-2

2024.10.17-2

Fix for mozilla/addons#15116

Full Changelog: 2024.10.17-1...2024.10.17-2

2024.10.31

This week's push hero is @eviljeff

Previous Release: 2024.10.17

Blockers:

Cherry-picks:

11b2edd
f4da852

Before we push:

Before we start:

• Apply changes noted in https://mozilla-hub.atlassian.net/browse/SVCSE-2274 to prod.

Before we promote:

After we're done:

Addons-Frontend Changelog:

mozilla/addons-frontend@2024.10.17...2024.10.31

Addons Server Changelog:

What's Changed

Notable things shipping

• Force collation when comparing Denied Names to avoid unwanted collisions by @diox in #22767
• Tweak file upload limits: bump max uncompressed size, round down max upload size by @diox in #22773
• Allow URLs in developer replies to ratings by @diox in #22749
• expose blocked version as blocked and soft_blocked in the API by @eviljeff in #22750
• Add require_submissions_enabled decorator to FileUploadViewSet Create by @chrstinalin in #22774
• Implement APIKey as django form + recaptcha field by @KevinMind in #22759
• Hold actions on the back of decisions, rather than process them, if content is high profile by @eviljeff in #22766
• Use internal data object for MLBF to accommodate soft/hard block versions by @KevinMind in #22775
• Dev-mode by @KevinMind in #22748
• Make growth threshold before flagging relative instead of absolute by @diox in #22784
• stop requiring reason for positive reviewer action resolving jobs by @eviljeff in #22791
• Optimize number of queries made by devhub version list view & display block status by @diox in #22789
• add a queue for decision actions that are held by @eviljeff in #22788
• set CinderDecision.action_date before sending emails by @eviljeff in #22798
• Respond to cinder moving a job into the amo handled queue by @eviljeff in #22795
• record queue move notes; expose in reviewer tools by @eviljeff in #22799
• Allow adding, viewing information about and deleting soft-blocks in the admin by @diox in #22765

Dependendabots

• Bump jquery-ui from 1.13.3 to 1.14.0 by @dependabot in #22542
• Bump babel from 2.14.0 to 2.16.0 in /requirements by @dependabot in #22559
• Bump google-crc32c from 1.5.0 to 1.6.0 in /requirements by @dependabot in #22637
• Bump elasticsearch from 7.17.9 to 7.17.12 in /requirements by @dependabot in #22684
• Bump google-auth from 2.34.0 to 2.35.0 in /requirements by @dependabot in #22686
• Bump pytz from 2024.1 to 2024.2 in /requirements by @dependabot in #22659
• Bump pure-eval from 0.2.2 to 0.2.3 in /requirements by @dependabot in #22623
• Bump executing from 2.0.1 to 2.1.0 in /requirements by @dependabot in #22624
• Bump prompt-toolkit from 3.0.47 to 3.0.48 in /requirements by @dependabot in #22703
• Bump ipython from 8.26.0 to 8.28.0 in /requirements by @dependabot in #22733
• Bump protobuf from 4.25.3 to 4.25.5 in /requirements by @dependabot in #22685
• Bump tomli from 2.0.1 to 2.0.2 in /requirements by @dependabot in #22730
• Bump google-cloud-bigquery from 3.25.0 to 3.26.0 in /requirements by @dependabot in #22713
• Bump mdit-py-plugins from 0.4.1 to 0.4.2 in /requirements by @dependabot in #22655
• Bump kombu from 5.3.7 to 5.4.2 in /requirements by @dependabot in #22687
• Bump billiard from 4.2.0 to 4.2.1 in /requirements by @dependabot in #22694
• Bump grpcio from 1.66.1 to 1.67.0 in /requirements by @dependabot in #22772
• Bump sphinx-rtd-theme from 2.0.0 to 3.0.1 in /requirements by @dependabot in #22753
• Bump docutils from 0.20.1 to 0.21.2 in /requirements by @dependabot in #22178
• Bump google-api-core[grpc] from 2.19.1 to 2.21.0 in /requirements by @dependabot in #22752
• Bump pyparsing from 3.1.4 to 3.2.0 in /requirements by @dependabot in #22763
• Bump django-cors-headers from 4.4.0 to 4.5.0 in /requirements by @dependabot in #22761
• Bump terser from 5.32.0 to 5.36.0 by @dependabot in #22776
• Bump hashin from 1.0.1 to 1.0.2 in /requirements by @dependabot in #22714
• Bump pytest-split from 0.9.0 to 0.10.0 in /requirements by @dependabot in #22778
• Bump drf-yasg from 1.21.7 to 1.21.8 in /requirements by @dependabot in #22783
• Bump cryptography from 43.0.1 to 43.0.3 in /requirements by @dependabot in #22785
• Bump mmh3 from 4.1.0 to 5.0.1 in /requirements by @dependabot in #22695
• Bump charset-normalizer from 3.3.2 to 3.4.0 in /requirements by @dependabot in #22746
• Bump setuptools from 75.1.0 to 75.2.0 in /requirements by @dependabot in #22769
• Bump ruff from 0.6.4 to 0.7.1 in /requirements by @dependabot in #22792

Full Changelog: 2024.10.17-1...2024.10.31

2024.10.17-1

This week's push hero is @KevinMind

Previous Release: 2024.10.17

Blockers:

Cherry-picks:

• a26bf81
• ed750ff

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

Addons Server Changelog:

Addons Proxy Changelog:

• 85ac338
• 480f279
• 838335c
• 0e4749c

2024.10.17

This week's push hero is @KevinMind

Previous Release: 2024.10.03-2

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

mozilla/addons-frontend@2024.10.03...2024.10.17

Addons Server Changelog:

What's Changed

Notable things shipping

• Mention max allowable filesize on DevHub when uploading versions/sources by @chrstinalin in #22691
• Make initial auto approval delay for listed configurable by admins by @diox in #22725
• reset file.status_disabled_reason when rejecting too by @eviljeff in #22727
• Allow developers to download file attachments by @chrstinalin in #22726
• Hide attachment upload on force disable/enable by @chrstinalin in #22728
• Fix user-media loading in local environments by @diox in #22732
• Use Choices API for block_type choices + add by_block_type query set on BlockVersion by @KevinMind in #22734
• Make assets step in Dockerfile depend on locales, for jsi18n files by @diox in #22717
• Soft-block-tests by @KevinMind in #22738
• drop now unused abusereport.appellant_job and reporter_appeal_date by @eviljeff in #22754
• Remove initialize_docker: Integrate data initialization to make up by @KevinMind in #22663
• Add recaptcha for new addon submission upload by @KevinMind in #22755
• Remove .gitignore from .dockerignore by @KevinMind in #22758
• Add Waffle Flag for Submissions by @chrstinalin in #22729

Dependendabots

• Bump pyjwt from 2.8.0 to 2.9.0 in /requirements by @dependabot in #22534
• Bump setuptools from 74.0.0 to 75.1.0 in /requirements by @dependabot in #22672
• Bump addons-linter from 7.1.0 to 7.3.0 by @dependabot in #22764

Full Changelog: 2024.10.03...2024.10.17

2024.10.03-2

This week's push hero is @KevinMind

Previous Release: 2024.10.03-1

Blockers:

Cherry-picks:

5c6f86e

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

Addons Server Changelog:

Full Changelog: 2024.10.03-1...2024.10.03-2

2024.10.03-1

This week's push hero is @KevinMind

Previous Release: 2024.10.03

Blockers:

Cherry-picks:

• f38ba21
• 71bd888

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

Addons Server Changelog:

Full Changelog: 2024.10.03...2024.10.03-1

2024.10.03

This week's push hero is @KevinMind

Previous Release: 2024.09.19

Blockers:

• mozilla/addons#15023 needs either fixing or rolling back
  • #22727 <- fix

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

mozilla/addons-frontend@2024.09.19...2024.10.03

Addons Server Changelog:

What's Changed

Notable things shipping

• DevHub Pastebin Re-implementation by @chrstinalin in #22664
• Fix CinderPolicy plural name by @willdurand in #22675
• Minor license related fixes by @leoheitmannruiz in #22682
• Remove docker context switcher by @KevinMind in #22678
• rm sponsored, verified by @eviljeff in #22671
• clear REASONS.ABUSE_ADDON_VIOLATION if a forwarded job is combined by @eviljeff in #22683
• Introduce the concept of soft-blocked versions, expose in the admin by @diox in #22690
• Allow Zip Files to be Uploaded as Attachment by @chrstinalin in #22670
• Additional case handling for color parameter in search API by @chrstinalin in #22692
• Show "pending" activity in devhub for all versions and not just the latest one by @diox in #22681
• Small fixes to docker setup (logs, static file routing, healthcheck, dockerignore) by @KevinMind in #22679
• Handle Non-Alphanumerical Edge Cases When Searching Themes By Colour by @chrstinalin in #22699
• Use setCustomValidity for File Uploads by @chrstinalin in #22697
• Add basic documentation about the various types of logs that AMO has by @diox in #22702
• Use db_backup + management commands to implement data dump/load/seed by @KevinMind in #22693
• Allow autograph to pull config in prod mode by @KevinMind in #22700
• Rename "hard" BlockVersion to "soft" to unify the conceptual flow of "soft" blocks by @KevinMind in #22707
• Attachment Emails for Reviewer Attachments by @chrstinalin in #22704
• Fix sponsored/verified removal migration by @diox in #22709
• Only include locale stage in production image by @KevinMind in #22708
• reset File.original_status when rejected by @eviljeff in #22705
• Move assets stage to production only image by @KevinMind in #22710
• Revert "Move assets stage to production only image" by @diox in #22723
• Stop using our remote settings "test server mode" for dev, it's broken by @diox in #22724

Dependendabots

• Bump pytest-django from 4.8.0 to 4.9.0 in /requirements by @dependabot in #22629
• Bump lxml from 5.2.2 to 5.3.0 in /requirements by @dependabot in #22565
• Bump wheel from 0.43.0 to 0.44.0 in /requirements by @dependabot in #22538
• Bump idna from 3.8 to 3.10 in /requirements by @dependabot in #22667
• Bump cffi from 1.16.0 to 1.17.1 in /requirements by @dependabot in #22642
• Bump certifi from 2024.7.4 to 2024.8.30 in /requirements by @dependabot in #22620

Full Changelog: 2024.09.19...2024.10.03

2024.09.19

This week's push hero is @diox

Previous Release: 2024.09.05

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

mozilla/addons-frontend@2024.09.05...2024.09.19

Addons Server Changelog:

What's Changed

Notable things shipping

• Only run verify build metadata on upstream PRs by @KevinMind in #22633
• Create release with template and release notes by @KevinMind in #22622
• Remove obsolete validator caching by @diox in #22627
• rm AbuseReport.appeallant_job by @eviljeff in #22610
• Use default buildx builder for faster build by @KevinMind in #22631
• stop ignoring ruff rule B904 by @eviljeff in #22641
• Enable Production Mode via DEBUG or docker-compose.ci.yml by @KevinMind in #22613
• Don't send auto-approval email for langpacks by @eviljeff in #22645
• Update admin.py by @KevinMind in #22646
• dont report abuse reports for unlisted versions to cinder by @eviljeff in #22625
• License related fixes by @leoheitmannruiz in #22573
• Replace AMO favicon with Firefox logo by @diox in #22650
• Add glob to dependencies by @KevinMind in #22654
• aggregate abuse triggers exclude dsa handled reports by @eviljeff in #22653
• Remove data_deps from docker compose by @KevinMind in #22644
• Document 'app' query parameter in ratings API by @diox in #22648
• Reviewer Tools Pastebin Re-implementation by @chrstinalin in #22640
• Remove all reference to update_deps* by @KevinMind in #22662
• Allow reviewers and developers to reply to older versions by @diox in #22661
• l10n - add Saraiki (skr) to languages.py by @bcolsson in #22649
• Use Creative Commons v4 licenses instead of v3 for new AMO themes by @diox in #22665
• Notify Developer if an Attachment is Included in a Reviewer Action by @chrstinalin in #22669
• Ensure Creative Commons 4.0 Licenses migration doesn't create duplicates/rolls back cleanly by @diox in #22677
• Allow developer replies to activity emails of older versions by @diox in #22674

Dependendabots

• Bump django from 4.2.15 to 4.2.16 in /requirements by @dependabot in #22636
• Bump terser from 5.31.3 to 5.32.0 by @dependabot in #22652
• Bump ruff from 0.6.3 to 0.6.4 in /requirements by @dependabot in #22647
• Bump pytest from 8.3.2 to 8.3.3 in /requirements by @dependabot in #22657
• Bump cryptography from 43.0.0 to 43.0.1 in /requirements by @dependabot in #22635
• Bump addons-linter from 6.33.0 to 7.0.0 by @dependabot in #22651
• Bump addons-linter from 7.0.0 to 7.1.0 by @dependabot in #22676

New Contributors

• @leoheitmannruiz made their first contribution in #22573

Full Changelog: 2024.09.05...2024.09.19