2026.10.29

This week's push hero is @willdurand

Previous Release: 2026.10.15-4

Blockers:

Cherry-picks:

Before we push:

Before we start:

Before we promote:

After we're done:

Addons-Frontend Changelog:

https://github.com/mozilla/addons-frontend/releases/tag/2026.10.29

Addons Server Changelog:

What's Changed

Notable things shipping

• Add an on_version_entered_review_queue scanner webhook event by @willdurand in #25586
• define fxa actives table for addons-dev by @eviljeff in #25593
• Moves pinguino to /developers; adds a cookie switch and link to [un]set it by @eviljeff in #25592
• Simplify Pinguino install now that acorn-web-components is published on npm by @diox in #25610
• use existing table schema when loading data from json by @eviljeff in #25619
• Prevent name validation from accepting empty string by @chrstinalin in #25621
• Retry connecting to Elasticsearch on timeouts once by @diox in #25629
• Stop logging DECISION_CREATED for non-owner-notifying actions by @eviljeff in #25622
• docs: update scanner pipeline docs by @willdurand in #25624
• define fxa actives bigquery table url for stage and prod by @eviljeff in #25642
• Expose channels in addon API for Pinguino by @chrstinalin in #25648
• Localize the throttled API error message through AMO's catalog by @wassafshahzad in #25530
• feat: pinguino addon listing management by @nothingrandom in #25591
• Bump pip to 26.2.2 by @diox in #25668
• Bump Python to 3.13.17 explicitly by @diox in #25677
• Downgrade "Tried to validate non-theme upload %s using theme specific flow" to a warning by @diox in #25680
• Add Pinguino Version Submission Flow by @chrstinalin in #25623
• ci: fix pinguino test workflow by @nothingrandom in #25683
• fix: addon & version status mapping by @nothingrandom in #25663
• Run scanner actions after webhook results for non-blocking events by @willdurand in #25594
• feat: allow for clearing the EULA and Privacy Policy through the API by @nothingrandom in #25657
• Add restriction class based on interval since first content creation by @diox in #25685

Dependendabots

• Bump markupsafe from 3.0.3 to 3.0.4 by @dependabot[bot] in #25606
• Bump mmh3 from 5.3.0 to 5.3.1 by @dependabot[bot] in #25574
• Bump mysql from 8.4.11 to 8.4.11 by @dependabot[bot] in #25565
• Bump elasticsearch from 8.19.22 to 8.19.22 by @dependabot[bot] in #25585
• Bump eslint from 10.10.0 to 10.12.0 by @dependabot[bot] in #25595
• Bump amqp from 5.4.0 to 5.4.1 by @dependabot[bot] in #25607
• Bump redis from 6.2.24 to 6.2.24 by @dependabot[bot] in #25599
• Bump globals from 17.12.0 to 17.13.0 by @dependabot[bot] in #25570
• Bump click-repl from 0.4.0 to 0.4.1 by @dependabot[bot] in #25603
• Bump rpds-py from 2026.6.3 to 2026.9.1 by @dependabot[bot] in #25600
• Bump the google group across 1 directory with 4 updates by @dependabot[bot] in #25608
• Bump djangorestframework from 3.18.1 to 3.18.3 by @dependabot[bot] in #25615
• Bump pytz from 2026.3.post1 to 2026.5 by @dependabot[bot] in #25604
• Bump dotenv from 18.0.5 to 18.0.6 by @dependabot[bot] in #25613
• Bump elasticsearch from 8.19.22 to 8.19.23 by @dependabot[bot] in #25616
• Bump iniconfig from 2.3.0 to 2.3.1 by @dependabot[bot] in #25617
• Bump cssselect from 1.5.0 to 1.6.0 by @dependabot[bot] in #25639
• Bump zod from 4.6.5 to 4.6.6 by @dependabot[bot] in #25630
• Bump bitarray from 3.11.0 to 3.12.1 by @dependabot[bot] in #25634
• Bump justhtml from 3.13.0 to 3.13.1 by @dependabot[bot] in #25647
• Bump zod from 4.6.6 to 4.6.7 by @dependabot[bot] in #25643
• Bump mozilla/addons-frontend from 2026.10.01 to 2026.10.15 by @dependabot[bot] in #25654
• Bump sentry-sdk from 2.71.0 to 2.72.0 by @dependabot[bot] in #25645
• Bump ruff from 0.16.10 to 0.17.0 by @dependabot[bot] in #25638
• Bump prettier from 3.9.9 to 3.9.10 by @dependabot[bot] in #25632
• Bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in #25614
• Bump certifi from 2026.7.22 to 2026.10.19 in /requirements by @dependabot[bot] in #25655
• Bump pillow from 12.3.0 to 13.0.0 in /requirements by @dependabot[bot] in #25656
• Bump undici by @dependabot[bot] in #25671
• Bump ruff from 0.17.0 to 0.17.1 by @dependabot[bot] in #25665
• Bump fast-uri from 3.1.8 to 3.1.9 by @dependabot[bot] in #25681
• Bump dotenv from 18.0.6 to 18.0.8 by @dependabot[bot] in #25658
• Bump setuptools from 84.0.0 to 84.1.0 in /requirements by @dependabot[bot] in #25672
• Bump vite from 8.3.1 to 8.3.4 by @dependabot[bot] in #25626
• Bump addons-linter from 10.14.0 to 10.15.0 by @dependabot[bot] in #25687

New Contributors

• @wassafshahzad made their first contribution in #25530

Full Changelog: 2026.10.15...2026.10.29