Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[pull] master from mozilla:master #4802

Open
wants to merge 642 commits into
base: master
Choose a base branch
from
Open

[pull] master from mozilla:master #4802

wants to merge 642 commits into from

Conversation

pull[bot]
Copy link

@pull pull bot commented Feb 29, 2024

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull bot added the ⤵️ pull label Feb 29, 2024
milupo and others added 29 commits April 10, 2024 12:41
Co-authored-by: Michael Wolf <milupo@sorbzilla.de>
Co-authored-by: Michael Wolf <milupo@sorbzilla.de>
Co-authored-by: Michael Köhler <michael.koehler1@gmx.de>
Co-authored-by: wladow <valastiak@mozilla.sk>
Co-authored-by: Fabio Tomat <dark.tmtfx@gmail.com>
Co-authored-by: Fabio Tomat <dark.tmtfx@gmail.com>
Co-authored-by: Fabio Tomat <dark.tmtfx@gmail.com>
Co-authored-by: Fabio Tomat <dark.tmtfx@gmail.com>
Co-authored-by: Fabio Tomat <dark.tmtfx@gmail.com>
Co-authored-by: Fabio Tomat <dark.tmtfx@gmail.com>
Co-authored-by: Fabio Tomat <dark.tmtfx@gmail.com>
Co-authored-by: Fabio Tomat <dark.tmtfx@gmail.com>
Co-authored-by: Fabio Tomat <dark.tmtfx@gmail.com>
Co-authored-by: Fjoerfoks <fryskefirefox@gmail.com>
* show disabled addons with needshumanreview in manual queue

* migration to clear existing disabled add-ons of their due dates
Co-authored-by: Melo46 <melo@carmu.com>
Co-authored-by: Melo46 <melo@carmu.com>
Co-authored-by: Melo46 <melo@carmu.com>
* Update task that resigns add-ons without a COSE signature

This is the main task we are going to use to resign add-ons
without a COSE signature, to prepare for SHA-1 deprecation.

When ran, it will:
- Pick up publicly available add-ons for which the latest listed
  version (`current_version` internally) was created before the
  threshold date, then for each of them:
  - Clone this version into an entirely new one with a new version
    number considered higher than the existing one
  - Approve and sign that cloned version, replacing the existing one
    as the latest public listed version for each add-on
  - Notify affected developers
Co-authored-by: Google Translate <pontoon-gt@example.com>
Co-authored-by: Google Translate <pontoon-gt@example.com>
Co-authored-by: Google Translate <pontoon-gt@example.com>
Co-authored-by: Google Translate <pontoon-gt@example.com>
Co-authored-by: Francesco Lodolo [:flod] <flod+pontoon@mozilla.com>
Co-authored-by: Michael Wolf <milupo@sorbzilla.de>
Co-authored-by: Michael Wolf <milupo@sorbzilla.de>
diox and others added 30 commits May 16, 2024 14:53
* Upgrade to python 3.11
Bumps [uwsgi](https://uwsgi-docs.readthedocs.io/en/latest/) from 2.0.24 to 2.0.25.1.

---
updated-dependencies:
- dependency-name: uwsgi
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.1.1 to 8.2.0.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.1.1...8.2.0)

---
updated-dependencies:
- dependency-name: pytest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [setuptools](https://github.com/pypa/setuptools) from 69.2.0 to 69.5.1.
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v69.2.0...v69.5.1)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [cryptography](https://github.com/pyca/cryptography) from 42.0.5 to 42.0.7.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@42.0.5...42.0.7)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [kombu](https://github.com/celery/kombu) from 5.3.5 to 5.3.7.
- [Release notes](https://github.com/celery/kombu/releases)
- [Changelog](https://github.com/celery/kombu/blob/main/Changelog.rst)
- [Commits](celery/kombu@v5.3.5...v5.3.7)

---
updated-dependencies:
- dependency-name: kombu
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Artem Polivanchuk <a.polivanchuk@outlook.com>
Bumps [celery](https://github.com/celery/celery) from 5.3.6 to 5.4.0.
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst)
- [Commits](celery/celery@v5.3.6...v5.4.0)

---
updated-dependencies:
- dependency-name: celery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Add high-level overview to search docs

* Link to test scenarios

* Rephrase scoring a little bit to make it more obvious scoring factors multiply
Co-authored-by: Michael Wolf <milupo@sorbzilla.de>
Co-authored-by: Michael Wolf <milupo@sorbzilla.de>
Co-authored-by: chutten <chutten@mozilla.com>
Co-authored-by: Fabio Tomat <dark.tmtfx@gmail.com>
Co-authored-by: Håvar Henriksen <havar@firefox.no>
Co-authored-by: Bjørn I. <bjorni.svindseth@yahoo.com>
* only sync AMO policies (+ delete unused)

* delete unused CinderPolicy instances by current datetime instead
* TMP: verify pip dependencies in CI

* TMP: Use pip freeze with more granular check for name and version matching
Co-authored-by: Google Translate <pontoon-gt@example.com>
* Refactor unified setup script to manage .env and version.json files in readable python

* Support using digest to run docker image

* Update scripts/setup.py

Co-authored-by: Mathieu Pillard <diox@users.noreply.github.com>

* TMP: build image

* TMP: better logs

---------

Co-authored-by: Mathieu Pillard <diox@users.noreply.github.com>
Bumps [pygments](https://github.com/pygments/pygments) from 2.17.2 to 2.18.0.
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.17.2...2.18.0)

---
updated-dependencies:
- dependency-name: pygments
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [lxml](https://github.com/lxml/lxml) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-5.2.1...lxml-5.2.2)

---
updated-dependencies:
- dependency-name: lxml
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… from Hero SVGs (#22267)

This was preventing them from being displayed when loaded as <img> in Chrome
and some image viewers. We are not using them as masks so that shouldn't matter.
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Olvcpr423 <oliverchan86@outlook.com>
* Fix Docker build:
- get correct Image ID from the build.
- set docker tag correctly supporting tag and digest
- add concurrency limit to github action ci jobs

* TMP: remove easy way to get build digest as it is not really intended for local dev

* Update .circleci/config.yml

Co-authored-by: Mathieu Pillard <diox@users.noreply.github.com>

* TMP: recomment build

---------

Co-authored-by: Mathieu Pillard <diox@users.noreply.github.com>
Co-authored-by: Pavel Cvrček <jasnapaka@jasnapaka.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet