What's Changed

User-facing changes

None

Other changes

• update (allowlist) MPP-4240: Update allowlist domains July 2025 by @groovecoder in #5744
• update (GHA) SVCSE-3320: Add GHA that pushes Docker image to MozCloud by @joeherm in #5776
• fix(k8s) MPP-4320: update Relay email app default arguments by @joeherm

Dependency updates

• build(deps): bump coverage from 7.10.1 to 7.10.2 in the testing-libraries group by @dependabot[bot] in #5770
• build(deps): bump mypy from 1.17.0 to 1.17.1 by @dependabot[bot] in #5771
• build(deps): bump ruff from 0.12.5 to 0.12.7 by @dependabot[bot] in #5775
• build(deps): bump the boto group with 6 updates by @dependabot[bot] in #5773
• build(deps): bump sentry-sdk from 2.33.2 to 2.34.1 by @dependabot[bot] in #5774
• build(deps): bump drf-spectacular-sidecar from 2025.7.1 to 2025.8.1 by @dependabot[bot] in #5772
• build(deps-dev): bump stylelint from 16.22.0 to 16.23.0 by @dependabot[bot] in #5764
• build(deps): bump @stripe/stripe-js from 7.6.1 to 7.8.0 by @dependabot[bot] in #5766
• build(deps-dev): bump lint-staged from 16.1.2 to 16.1.4 by @dependabot[bot] in #5769
• build(deps): bump the react group with 3 updates by @dependabot[bot] in #5763
• build(deps-dev): bump typescript from 5.8.3 to 5.9.2 by @dependabot[bot] in #5768
• build(deps-dev): bump eslint-plugin-testing-library from 7.6.1 to 7.6.3 in the eslint group by @dependabot[bot] in #5762
• build(deps): bump the nextjs group with 4 updates by @dependabot[bot] in #5767
• build(deps-dev): bump @playwright/test from 1.54.1 to 1.54.2 by @dependabot[bot] in #5765

Full Changelog: 2025.07.30...2025.08.06

What's Changed

User-facing changes

• None

Other changes

• docs (email): update e2e email local testing docs by @joeherm in #5760

Dependency updates

• build(deps): bump ruff from 0.12.4 to 0.12.5 by @dependabot[bot] in #5751
• build(deps-dev): bump @testing-library/dom from 10.4.0 to 10.4.1 in the testing-library group by @dependabot[bot] in #5755
• build(deps-dev): bump dotenv from 17.2.0 to 17.2.1 by @dependabot[bot] in #5756
• build(deps-dev): bump @testing-library/jest-dom from 6.6.3 to 6.6.4 by @dependabot[bot] in #5759
• build(deps): bump sentry-sdk from 2.33.0 to 2.33.2 by @dependabot[bot] in #5748
• build(deps): bump twilio from 9.6.5 to 9.7.0 by @dependabot[bot] in #5750
• build(deps): bump coverage from 7.9.2 to 7.10.1 in the testing-libraries group by @dependabot[bot] in #5747
• build(deps-dev): bump eslint-plugin-testing-library from 7.6.0 to 7.6.1 in the eslint group by @dependabot[bot] in #5749
• build(deps-dev): bump the jest group with 3 updates by @dependabot[bot] in #5752
• build(deps): bump the boto group with 3 updates by @dependabot[bot] in #5745
• build(deps): bump the nextjs group with 4 updates by @dependabot[bot] in #5754
• build(deps): bump @stripe/stripe-js from 7.5.0 to 7.6.1 by @dependabot[bot] in #5753
• build(deps): bump react-aria from 3.41.1 to 3.42.0 by @dependabot[bot] in #5757
• build(deps): bump react-stately from 3.39.0 to 3.40.0 by @dependabot[bot] in #5758
• build(deps): bump django-debug-toolbar from 5.2.0 to 6.0.0 by @dependabot[bot] in #5746

Full Changelog: 2025.07.24...2025.07.30

What's Changed

User-facing Changes

• MPP-4236: fix(news) dont show megabundle ad for current megabundle users by @vpremamozilla in #5700
• MPP-4033: Fix Relay user replies to be case insensitve to their stored email by @joeherm in #5742

Other Changes

• e2e test subscription flows fix by @vpremamozilla in #5731
• MPP-4282: (bugfix) Removed Hardcoded Domain in PROD by @vpremamozilla in #5730

Dependency Updates

• build(deps): bump sentry-sdk from 2.32.0 to 2.33.0 by @dependabot[bot] in #5741
• build(deps): bump ruff from 0.12.3 to 0.12.4 by @dependabot[bot] in #5740
• build(deps): bump the typing-stubs group with 2 updates by @dependabot[bot] in #5739
• build(deps): bump mypy from 1.16.1 to 1.17.0 by @dependabot[bot] in #5737
• build(deps): bump phonenumbers from 9.0.9 to 9.0.10 by @dependabot[bot] in #5736
• build(deps): bump the nextjs group with 4 updates by @dependabot[bot] in #5735
• build(deps-dev): bump stylelint from 16.21.1 to 16.22.0 by @dependabot[bot] in #5733
• build(deps-dev): bump eslint-plugin-testing-library from 7.5.4 to 7.6.0 in the eslint group by @dependabot[bot] in #5732
• build(deps): bump the boto group with 3 updates by @dependabot[bot] in #5738
• build(deps): bump @stripe/stripe-js from 7.4.0 to 7.5.0 by @dependabot[bot] in #5734
• build(deps): bump django-allauth[socialaccount] from 65.9.0 to 65.10.0 by @dependabot[bot] in #5724

New Contributors

• @joeherm made their first contribution in #5742

Full Changelog: 2025.07.16...2025.07.24

What's Changed

Dependency updates

• build(deps): bump slackapi/slack-github-action from 2.1.0 to 2.1.1 by @dependabot[bot] in #5729
• build(deps): bump glean-parser from 17.2.0 to 17.3.0 by @dependabot[bot] in #5728
• build(deps): bump msw from 2.10.3 to 2.10.4 by @dependabot[bot] in #5727
• build(deps): bump the boto group with 6 updates by @dependabot[bot] in #5703
• build(deps): bump twilio from 9.6.4 to 9.6.5 by @dependabot[bot] in #5720
• build(deps): bump ruff from 0.12.2 to 0.12.3 by @dependabot[bot] in #5721
• build(deps-dev): bump eslint-plugin-testing-library from 7.5.3 to 7.5.4 in the eslint group by @dependabot[bot] in #5722
• build(deps-dev): bump @playwright/test from 1.53.1 to 1.54.1 by @dependabot[bot] in #5726
• build(deps): bump phonenumbers from 9.0.8 to 9.0.9 by @dependabot[bot] in #5723
• build(deps-dev): bump dotenv from 17.0.0 to 17.2.0 by @dependabot[bot] in #5725

Full Changelog: 2025.07.14...2025.07.16

What's Changed

Dependency updates

• build(deps): bump swr from 2.3.3 to 2.3.4 by @dependabot in #5714
• build(deps): bump msw from 2.10.2 to 2.10.3 by @dependabot in #5715
• build(deps): bump the nextjs group with 4 updates by @dependabot in #5712
• build(deps-dev): bump the jest group with 3 updates by @dependabot in #5710
• build(deps-dev): bump stylelint from 16.21.0 to 16.21.1 by @dependabot in #5709
• build(deps): bump cryptography from 45.0.4 to 45.0.5 by @dependabot in #5708
• build(deps): bump drf-spectacular-sidecar from 2025.6.1 to 2025.7.1 by @dependabot in #5707
• build(deps): bump dj-database-url from 3.0.0 to 3.0.1 by @dependabot in #5706
• build(deps): bump ruff from 0.12.1 to 0.12.2 by @dependabot in #5701
• build(deps): bump twilio from 9.6.3 to 9.6.4 by @dependabot in #5705
• build(deps): bump coverage from 7.9.1 to 7.9.2 in the testing-libraries group by @dependabot in #5702

User-facing changes

• MPP-4277: Fix Relay Logout on Firefox by @vpremamozilla in #5719

Full Changelog: 2025.07.07...2025.07.09

What's Changed

Dependency updates

• build(deps-dev): bump @playwright/test from 1.53.0 to 1.53.1 by @dependabot in #5680
• build(deps): bump the nextjs group with 4 updates by @dependabot in #5681
• build(deps): bump django-redis from 5.4.0 to 6.0.0 by @dependabot in #5688
• build(deps-dev): bump jest from 30.0.2 to 30.0.3 in the jest group by @dependabot in #5693
• build(deps-dev): bump prettier from 3.5.3 to 3.6.2 by @dependabot in #5694
• build(deps): bump phonenumbers from 9.0.7 to 9.0.8 by @dependabot in #5697
• build(deps): bump sentry-sdk from 2.30.0 to 2.32.0 by @dependabot in #5698
• build(deps): bump ruff from 0.12.0 to 0.12.1 by @dependabot in #5699
• build(deps): bump @stripe/stripe-js from 7.3.1 to 7.4.0 by @dependabot in #5692
• build(deps): bump the boto group with 4 updates by @dependabot in #5696
• build(deps-dev): bump dotenv from 16.5.0 to 17.0.0 by @dependabot in #5695

Other changes

• fix(whatsnewmenu): fix frontend test preventing deployment to stage by @vpremamozilla in #5717
• MPP-4153 - increase frontend test coverage for mask management by @vpremamozilla in #5647

Full Changelog: 2025.06.26...2025.07.07

What's Changed

User-facing changes

• MPP-4171 Megabundle In App Promo by @vpremamozilla in #5628
• MPP-4231 - fix(verbiage): update the verbiage on phone page by @vpremamozilla in #5644
• MPP-4175 - prompt=none Added to Monitor Url via Bento Box by @vpremamozilla in #5645
• MPP-4236 - fix(announcement): suppress megabundle announcment for relay phone users by @vpremamozilla in 9b2caa8

Other changes

None

Dependency updates

• build(deps): bump the boto group with 3 updates by @dependabot in #5637
• build(deps): bump types-requests from 2.32.0.20250515 to 2.32.0.20250602 in the typing-stubs group by @dependabot in #5638
• build(deps): bump model-bakery from 1.20.4 to 1.20.5 in the testing-libraries group by @dependabot in #5640
• build(deps): bump dj-database-url from 2.3.0 to 3.0.0 by @dependabot in #5641
• build(deps): bump ruff from 0.11.12 to 0.11.13 by @dependabot in #5639
• build(deps-dev): bump eslint-plugin-testing-library from 7.3.0 to 7.4.0 in the eslint group by @dependabot in #5633
• build(deps): bump msw from 2.9.0 to 2.10.2 by @dependabot in #5642
• build(deps): bump react-aria from 3.40.0 to 3.41.0 by @dependabot in #5634
• build(deps): bump react-stately from 3.38.0 to 3.39.0 by @dependabot in #5636
• build(deps): bump requests from 2.32.3 to 2.32.4 by @dependabot in #5646

Full Changelog: 2025.06.09...2025.06.16

What's Changed

User-facing changes

• fix MPP-4257 - fix(sp3): add production product keys to valid keys by @groovecoder in #5691

Other changes

None

Dependency updates

• build(deps): bump django-stubs from 5.2.0 to 5.2.1 in the typing-stubs group by @dependabot in #5685
• build(deps): bump mypy from 1.16.0 to 1.16.1 by @dependabot in #5689
• build(deps): bump the boto group with 3 updates by @dependabot in #5684
• build(deps): bump glean-parser from 17.1.0 to 17.2.0 by @dependabot in #5687
• build(deps-dev): bump stylelint from 16.20.0 to 16.21.0 by @dependabot in #5683
• build(deps-dev): bump the jest group with 3 updates by @dependabot in #5682
• build(deps): bump ruff from 0.11.13 to 0.12.0 by @dependabot in #5686

Full Changelog: 2025.06.24...2025.06.26

What's changed

User-facing changes

MPP-4257 - fix(sp3): add production product keys to valid keys 39a17a2

Other changes

None

Dependency updates

None

Full Changelog: 2025.06.16.1...2025.06.16.2

What's changed

User-facing changes

MPP-4236 - fix(announcement): show megabundle only to premium users 4d97242

Other changes

None

Dependency updates

None

Full Changelog: 2025.06.16...2025.06.16.1