What's Changed
- fix(next): do not crash sub manage on canceled sub by @StaberindeZA in #19503
- fix(next): update form-action csp with paypal by @StaberindeZA in #19505
- fix(sessions): Add env var for unverified session state + bandaid FE fix by @LZoog in #19501
- fix(tests): update functional tests to wait for pairing page by @vbudhram in #19510
- chore(auth): Define default rate-limit policies for the MFA dialog and fix error banner. by @dschom in #19506
- feat(payments-next): Remove card display for digital wallets by @david1alvarez in #19511
- task(settings): Add MFA guard to remove 2FA SMS backup by @dschom in #19458
- bug(functional-tests): Clear JWT cache after session destroy by @nshirley in #19514
- chore(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in #19396
- chore(deps): bump actions/stale from 9 to 10 by @dependabot[bot] in #19397
- chore(deps): bump axios from 1.8.4 to 1.12.0 in /packages/fxa-event-broker in the npm_and_yarn group across 1 directory by @dependabot[bot] in #19445
- chore(deps): bump google-github-actions/auth from 2 to 3 by @dependabot[bot] in #19370
- fix(email): Send signin code for sign in with password unverified session case by @LZoog in #19512
- fix(settings): General app error with invalid jwt on ARK delete by @vpomerleau in #19521
- chore(yarn): Update yarn.lock from dependabot axios 1.8.4 to 1.12.0 upgrade by @LZoog in #19525
- chore(functional-tests): Add test duration to ci reporter by @nshirley in #19523
- fix(mfa): fix can't dismiss mfa guard for ARK delete by @MagentaManifold in #19519
- fix(stories): Add Sync signin without password story by @LZoog in #19524
- chore(functional-tests): Speed up test account destroy by @nshirley in #19528
- feat(payments-next):Redirect old Subscription Management page to new page by @elizabeth-ilina in #19480
- bug(settings): Fix rate-limit rule on mfa verify code by @dschom in #19526
- fix(emails): Fix subscription management link in emails by @david1alvarez in #19515
- bug(settings): Add pre-check for JWT expiration by @dschom in #19527
- feat(pocket): Remove Pocket front-end code by @LZoog in #19520
- bug(settings): isInvalidJwtError not check when invoking confirmReplaceTotp by @dschom in #19529
- feat(mfa): add Glean metrics for MFA by @MagentaManifold in #19509
- cleanup(settings): Remove MonitorPlus promo by @vpomerleau in #19522
- feat(skip): Skip confirmation code for a seen device user agent by @vbudhram in #19517
- polish(fxa-react): Fix eslint in fxa-react by @dschom in #19534
- task(auth): Expose more detailed session status info by @dschom in #19488
- task(auth): Add verified session checks to mfa strategy by @dschom in #19535
- bug(settings): Make sure session is verified before starting key stretching upgrade by @dschom in #19538
- chore(skip): Add metrics for skip by seen device, security event by @vbudhram in #19541
- feat(functional-tests): Make password change more resilient by @nshirley in #19543
- feat(settings): Add MFA guard to 2FA setup from settings by @vpomerleau in #19432
- fix(admin-panel): fix incorrect bounce types by @MagentaManifold in #19516
- task(auth): Add metrics to session/reauth by @dschom in #19539
- polish(settings): Provide hint about what to do in invalid session state by @dschom in #19531
- chore(script): Add Pocket oauth access token pruning script by @LZoog in #19536
- feat(pocket): Remove Pocket back-end code by @LZoog in #19530
- Revert "feat(pocket): Remove Pocket back-end code" by @LZoog in #19549
- fix(payments-next): [Payments-Next Subscription] Error message not dismissed when selecting another card by @elizabeth-ilina in #19533
- fix(auth): Remove invoice line item if zero by @xlisachan in #19532
- Revert "feat(pocket): Remove Pocket front-end code" by @LZoog in #19550
- fix(settings): Redirect users from /settings if session is unverified by @LZoog in #19546
- feat(strapi): move statsd logging to strapi client by @StaberindeZA in #19537
- fix(auth): Account signup email used in change 2fa endpoint by @vpomerleau in #19552
- chore(mfa): Remove redudant checks for mfa by @vbudhram in #19518
- fix(payments-next): [Payments-Next Subscription] The Card section borders are cut off by @elizabeth-ilina in #19502
Full Changelog: v1.320.7...v1.321.2