2026.10.28

What's Changed

• Document Firefox API auth flows with FxA access tokens (mntor-5343) by @GregHilstonMozilla in #6852
• chore(deps): bump @opentelemetry/instrumentation-knex and @opentelemetry/auto-instrumentations-node by @dependabot[bot] in #6866
• feat(fx-api): gate Firefox API routes on an FxA token (MNTOR-5343) by @GregHilstonMozilla in #6862
• Add per account rate limiting to withFxaUser for Firefox API endpoints (mntor-5346) by @GregHilstonMozilla in #6869
• chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in #6871
• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #6870
• feat(fx-api): add GET /user/breaches for the Firefox API (MNTOR-5344) by @GregHilstonMozilla in #6873
• feat(fx-api): add POST /user/breaches/resolutions for the Firefox API (MNTOR-5345) by @GregHilstonMozilla in #6874
• feat(fx-api): log Firefox API errors with message and stack by @GregHilstonMozilla in #6876
• feat(fx-api): add request duration histogram by @GregHilstonMozilla in #6875
• docs(telemetry): add Firefox API alert policies by @GregHilstonMozilla in #6877
• chore(deps-dev): bump storybook from 10.5.5 to 10.6.4 by @dependabot[bot] in #6882
• chore(deps): bump fast-uri from 3.1.8 to 3.1.9 by @dependabot[bot] in #6883
• feat(fxa): revoke FxA tokens on account deletion (MNTOR-5390) by @GregHilstonMozilla in #6881
• feat(auth): request Monitor scope on web sign in (MNTOR-5389) by @GregHilstonMozilla in #6880
• feat(fxa): add reason for fxa delete user event by @rafee-r in #6878

New Contributors

• @rafee-r made their first contribution in #6878

Full Changelog: 2026.10.13...2026.10.28