All pull requests

Pull requests

• fix(settings): Prevent pairing when the mobile browser is signed in

  #21433·dschom opened Oct 9, 2026Contributor·5 tasks·

  ·
  1

• fix(settings): send a signed-out desktop off the v2 pairing QR page

  #21432·dschom opened Oct 8, 2026Contributor·5 tasks·

  ·

• fix(payments-cart): Prevent page crash when creating subscription with single-use code

  #21428·xlisachan opened Oct 8, 2026Contributor·2 tasks done·

  ·

• fix(payments): guard subscription writes on Stripe event time

  #21427·StaberindeZA opened Oct 8, 2026Contributor·5 tasks done·

  ·
  4

• fix(functional-tests): fix untrusted relier WAF bypass and pair race

  auto
  #21424·fxa-agent[bot] opened Oct 8, 2026Bot·1 of 5 tasks·

  ·
  

• feat(auth): emit passkey wrap_invalidated on stale replace and reset

  auto
  #21423·fxa-agent[bot] opened Oct 7, 2026Bot·1 of 5 tasks·

  ·
  4

  

• fix(passkey): consume challenge before credential lookup

  auto
  #21422·fxa-agent[bot] opened Oct 7, 2026Bot·1 of 5 tasks·

  ·
  1

  

• fix(settings): strip PRF results on passkey registration and step-up

  auto
  #21421·fxa-agent[bot] opened Oct 7, 2026Bot·1 of 5 tasks·

  ·
  1

  

• chore(docs): require migrations to survive a code rollback

  #21420·LZoog opened Oct 7, 2026Contributor·5 tasks·

  ·
  13

• fix(auth): decouple login.complete from flow events, fix Sync and reset

  auto
  #21418·fxa-agent[bot] opened Oct 7, 2026Bot·2 of 5 tasks·

  ·

• feat(auth): count device pairings with StatsD

  #21410·dschom opened Oct 7, 2026Contributor·3 of 5 tasks·

  ·
  2

• chore(deps): bump @opentelemetry/instrumentation-mongoose to >=0.67.0

  #21403·mozilla-blender[bot] opened Oct 7, 2026Bot·

  ·
  1

• chore(deps): bump @opentelemetry/instrumentation-pg to >=0.73.0

  #21402·mozilla-blender[bot] opened Oct 7, 2026Bot·

  ·

• chore(deps): bump smol-toml to >=1.9.0

  #21401·mozilla-blender[bot] opened Oct 7, 2026Bot·

  ·
  1

• chore(deps): bump shell-quote from 1.8.3 to 1.12.0

  dependenciesmaintenance
  #21398·dependabot[bot] opened Oct 7, 2026Bot·

  ·
  2

• fix(auth): honor Retry-After and harden Recorded Future lookups

  auto
  #21391·fxa-agent[bot] opened Oct 6, 2026Bot·1 of 5 tasks·

  ·

• feat(settings): remove Mozilla logo header from mobile pairing screens

  #21383·chelisejacobson opened Oct 6, 2026Contributor·5 tasks·

  ·

• chore(deps): bump @fastify/busboy from 3.1.1 to 3.2.2

  dependenciesmaintenance
  #21375·dependabot[bot] opened Oct 5, 2026Bot·

  ·
  3

• fix(payments-ui): fix displayed invoice amounts during upgrade

  #21374·xlisachan opened Oct 5, 2026Contributor·1 task done·

  ·

• fix(auth): store session location on last-access updates

  auto
  #21348·fxa-agent[bot] opened Sep 30, 2026Bot·2 of 5 tasks·

  ·
  1

  

• refactor(content-server): retire Backbone email-verification link routes

  auto
  #21303·vbudhram opened Sep 23, 2026Contributor·1 of 5 tasks·

  ·
  11

  

• chore(deps): bump @apollo/client from 3.13.8 to 4.2.10

  dependenciesmaintenance
  #21161·dependabot[bot] opened Sep 8, 2026Bot·

  ·
  7

• fix(subscriptions): prepare for the Stripe webhook version cutover

  #21122·david1alvarez opened Aug 31, 2026Contributor·5 tasks done·

  ·
  12

• feat(auth): require MFA JWT for TOTP enrolment

  #21037·StaberindeZA opened Aug 14, 2026Contributor·2 of 5 tasks·

  ·