2026.08.20

This week's push hero is @diox

Previous Release: 2026.08.06

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

https://github.com/mozilla/addons-frontend/releases/tag/2026.08.20

Addons Server Changelog:

Notable things shipping

• Remove Redundant and Breaking Error on Enterprise Upload by @chrstinalin in #25254
• Roll back transactions on unhandled API exceptions by @willdurand in #25220
• Make sure we run actions after scanners have finished by @willdurand in #25249
• Remove the enable-scanner-webhooks waffle switch by @willdurand in #25253
• Remove run-action-in-auto-approve waffle switch by @willdurand in #25252
• Set die-on-term to true in uWSGI config by @willdurand in #25227
• Show radio inputs for non-negative policies by @eviljeff in #25259
• Expose more detail about enforcement actions with delays by @eviljeff in #25269
• convert all permission string literals in tests to permission constant by @eviljeff in #25226
• Group dependabot updates for ssdlc-actions together by @diox in #25284
• create activity and send email when overriding to same enforcement action by @eviljeff in #25214
• update failing test by @eviljeff in #25287
• Add option to run scanner query rules on versions created after a specific date by @diox in #25268
• Add enterprise review link to admin by @chrstinalin in #25286
• Skip describe version on new version enterprise upload by @chrstinalin in #25257
• use ruff's default rule selection and apply it by @eviljeff in #25288
• Prevent Scanner Actions on Enterprise Versions by @chrstinalin in #25258
• Create SECURITY.md, replacing existing ./githhub/SECURITY.md by @eviljeff in #25311
• Handle overriding a reject_version to a reject_version properly by @eviljeff in #25298

Dependendabots

• Bump brace-expansion by @dependabot[bot] in #25244
• Bump undici from 7.28.0 to 7.29.0 by @dependabot[bot] in #25247
• Bump fast-uri from 3.1.4 to 3.1.5 by @dependabot[bot] in #25246
• Bump cryptography from 49.0.0 to 50.0.0 in /requirements by @dependabot[bot] in #25245
• Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #25188
• Bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in #25163
• Bump time-machine from 3.2.0 to 3.3.1 by @dependabot[bot] in #25283
• Bump ruff from 0.16.0 to 0.16.1 by @dependabot[bot] in #25263
• Bump mozilla/ssdlc-actions/.github/workflows/code-security-analysis-public-repo.yml from 1 to 1.1 by @dependabot[bot] in #25239
• Bump the google group across 1 directory with 5 updates by @dependabot[bot] in #25267
• Bump globals from 17.7.0 to 17.9.0 by @dependabot[bot] in #25271
• Bump drf-nested-routers from 0.95.0 to 0.95.3 by @dependabot[bot] in #25277
• Bump js-yaml from 4.3.0 to 4.3.1 by @dependabot[bot] in #25279
• Bump the ssdlc-actions group with 2 updates by @dependabot[bot] in #25285
• Bump django from 5.2.16 to 5.2.17 by @dependabot[bot] in #25289
• Bump djangorestframework from 3.17.1 to 3.17.2 by @dependabot[bot] in #25292
• Bump mozilla/addons-frontend from 2026.07.23 to 2026.08.06 by @dependabot[bot] in #25293
• Bump pip from 26.1.2 to 26.2.1 by @dependabot[bot] in #25291
• Bump pytz from 2026.2 to 2026.3.post1 by @dependabot[bot] in #25237
• Bump rpds-py from 2026.5.1 to 2026.6.3 by @dependabot[bot] in #25119
• Bump mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml to 1.2 by @dependabot[bot] in #25231
• Bump asttokens from 3.0.1 to 3.0.2 by @dependabot[bot] in #25166
• Bump eslint-plugin-simple-import-sort from 13.0.0 to 14.0.0 by @dependabot[bot] in #25189
• Bump eslint from 10.7.0 to 10.8.0 by @dependabot[bot] in #25228
• Bump less from 4.6.7 to 4.8.1 by @dependabot[bot] in #25238
• Bump prettier from 3.9.5 to 3.9.6 by @dependabot[bot] in #25205
• Bump asgiref from 3.11.1 to 3.12.1 by @dependabot[bot] in #25170
• Bump source-map from 0.7.6 to 0.8.0 by @dependabot[bot] in #25197
• Bump actions/setup-python from 6.3.0 to 7.0.0 by @dependabot[bot] in #25199
• Bump sentry-sdk from 2.63.0 to 2.66.1 by @dependabot[bot] in #25218
• Bump prompt-toolkit from 3.0.52 to 3.0.53 by @dependabot[bot] in #25234
• Bump mysql from 8.4.10 to 8.4.11 by @dependabot[bot] in #25240
• Bump pyquery from 2.0.1 to 2.1.0 by @dependabot[bot] in #25241
• Bump wrapt from 2.2.2 to 2.3.0 by @dependabot[bot] in #25242
• Bump traitlets from 5.15.1 to 5.16.1 by @dependabot[bot] in #25273
• Bump drf-spectacular-sidecar from 2026.7.1 to 2026.8.1 by @dependabot[bot] in #25278
• Bump django-admin-rangefilter from 0.13.5 to 0.14.0 by @dependabot[bot] in #25275
• Bump @vitest/eslint-plugin from 1.6.20 to 1.6.26 by @dependabot[bot] in #25270
• Bump jsdom from 29.1.1 to 30.0.1 by @dependabot[bot] in #25250
• Bump markdown from 3.10.2 to 3.10.3 by @dependabot[bot] in #25264
• Bump cffi from 2.1.0 to 2.1.1 by @dependabot[bot] in #25282
• Bump elasticsearch from 8.19.19 to 8.19.19 by @dependabot[bot] in #25281
• Bump nginx from 1.31.3 to 1.31.3 by @dependabot[bot] in #25294
• Bump vite from 8.1.5 to 8.2.0 by @dependabot[bot] in #25260
• Bump sqlparse from 0.5.5 to 0.6.0 in /requirements by @dependabot[bot] in #25313

Full Changelog: 2026.08.06...2026.08.20