2025.11.26

What's Changed

Note: This release was skipped in production, instead see 2025.12.03.

User-facing changes

None

Other changes

• chore(docs): update deployment docs for more clarity by @joeherm in #6053
• fix(auth): enforce relay scope on bearer token auth by @joeherm in #6052
• fix: Fetch submodules in "prebuild_script" of build and push workflow by @grahamalama in #6056
• fix: add permissions to build and push workflow by @grahamalama in #6057
• Use reusable workflow for Mozcloud build and push by @jwhitlock in #6055
• MPP-4496: add cooldown to dependabot by @groovecoder in #6077

Dependency updates

• chore: Merge in latest l10n strings by @mozilla-pontoon in #6050
• MPP-4481: fix js-yaml dependency update by @groovecoder in #6051
• build(deps): bump psycopg[c] from 3.2.12 to 3.2.13 by @dependabot[bot] in #6076
• build(deps): bump sentry-sdk from 2.43.0 to 2.45.0 by @dependabot[bot] in #6074
• build(deps): bump django-allauth[socialaccount] from 65.13.0 to 65.13.1 by @dependabot[bot] in #6075
• build(deps): bump black from 25.9.0 to 25.11.0 by @dependabot[bot] in #6073
• build(deps): bump twilio from 9.8.5 to 9.8.7 by @dependabot[bot] in #6072
• build(deps): bump ruff from 0.14.4 to 0.14.5 by @dependabot[bot] in #6078
• build(deps): bump phonenumbers from 9.0.18 to 9.0.19 by @dependabot[bot] in #6071
• build(deps-dev): bump stylelint from 16.25.0 to 16.26.0 by @dependabot[bot] in #6061
• build(deps-dev): bump eslint-plugin-testing-library from 7.13.3 to 7.13.5 in the eslint group by @dependabot[bot] in #6059
• build(deps-dev): bump lint-staged from 16.2.6 to 16.2.7 by @dependabot[bot] in #6065
• build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #6070
• build(deps): bump glean-parser from 18.1.0 to 18.1.1 by @dependabot[bot] in #6069
• build(deps): bump @stripe/stripe-js from 8.3.0 to 8.4.0 by @dependabot[bot] in #6080
• build(deps): bump msw from 2.12.1 to 2.12.2 by @dependabot[bot] in #6081
• build(deps-dev): bump @types/react from 19.2.2 to 19.2.5 by @dependabot[bot] in #6082
• build(deps): bump the boto group across 1 directory with 3 updates by @dependabot[bot] in #6083
• chore: Merge in latest l10n strings by @mozilla-pontoon in #6084
• build(deps-dev): bump sass from 1.93.3 to 1.94.0 by @dependabot[bot] in #6079

New Contributors

• @grahamalama made their first contribution in #6056

Full Changelog: 2025.11.17...2025.11.26