Merge branch 'main' into session-limit

.github/workflows/release_cron_daily.yml

@@ -30,13 +30,41 @@ jobs:
       run: |
         curl -X POST \
           -H "Authorization: token $GITHUB_TOKEN" \
-          -H "Accept: application/vnd.github.v3+json" \
-          https://api.github.com/repos/${{ github.repository }}/releases \
+          -H "Accept: application/vnd.github+json" \
+          -H "X-GitHub-Api-Version: 2022-11-28" \
+            https://api.github.com/repos/${{ github.repository }}/releases \
           -d '{
             "tag_name": "${{ env.CURRENT_DATE }}",
             "target_commitish": "main",
             "name": "${{ env.CURRENT_DATE }}",
             "body": "Daily pre-release for ${{ env.CURRENT_DATE }}.",
             "prerelease": true,
+            "draft": false,
             "generate_release_notes": true
           }'
+
+    # We cannot rely on the release_retag.yaml workflow because of the 
+    # auth scope of the default github token. It's a good security practice
+    # to prevent a github action being triggered by another.
+    # So we will deliberately push to dockerhub below
+    - name: Log in to Docker Hub
+      uses: docker/login-action@v3
+      with:
+        username: ${{ secrets.DOCKER_USERNAME }}
+        password: ${{ secrets.DOCKER_PASSWORD }}
+
+    - name: Extract metadata (tags, labels) for Docker
+      id: meta
+      uses: docker/metadata-action@v5
+      with:
+        images: mozilla/blurts-server
+        tags: type=sha,format=short,prefix=
+
+    - name: Pull Docker image with commit tag
+      run: docker pull ${{ steps.meta.outputs.tags }}
+
+    - name: Tag Docker image with release tag
+      run: docker tag ${{ steps.meta.outputs.tags }} mozilla/blurts-server:${{ env.CURRENT_DATE }}
+
+    - name: Push Docker image with release tag
+      run: docker push mozilla/blurts-server:${{ env.CURRENT_DATE }}

.github/workflows/unittests.yaml

@@ -29,6 +29,7 @@ jobs:
       - run: npm test -- --coverageThreshold='{"global":{"branches":80,"functions":80,"lines":80,"statements":80}}'
         if: github.event_name == 'schedule'
       - uses: actions/upload-artifact@v4
+        if: always()
         with:
           name: coverage-report
           path: coverage/

docs/dependency-updates.md

@@ -243,7 +243,7 @@ Used to compile cronjob scripts. You can test this by running
 ### `tsx`
 
 Used to run cronjobs locally and compile them on the fly. You can verify this by
-running a cronjob like `npm run dev:cron:monthly-activity`; if the cronjobs run
+running a cronjob like `npm run dev:cron:monthly-activity-plus`; if the cronjobs run
 like in `main`, it's still working.
 
 ### `yaml`

jest.config.cjs

@@ -113,7 +113,10 @@ const customJestConfig = {
   // ],
 
   // A map from regular expressions to module names or to arrays of module names that allow to stub out resources with a single module
-  // moduleNameMapper: {},
+  moduleNameMapper: {
+    // Force module uuid to resolve with the CJS entry point, because Jest does not support package.json.exports. See https://github.com/uuidjs/uuid/issues/451
+    uuid: require.resolve("uuid"),
+  },
 
   // An array of regexp pattern strings, matched against all module paths before considered 'visible' to the module loader
   modulePathIgnorePatterns: ["e2e/"],

locales/cs/app.ftl

@@ -345,8 +345,6 @@ mozilla = { -brand-mozilla }
 terms-of-service = Podmínky služby
 privacy-notice = Zásady ochrany osobních údajů
 github = { -brand-github }
-# Deprecated
-footer-nav-all-breaches = Všechny úniky
 footer-nav-recent-breaches = Nedávné úniky dat
 footer-external-link-faq-label = FAQ
 footer-external-link-faq-tooltip = Často kladené otázky
@@ -364,7 +362,7 @@ error-page-error-other-title = Něco se pokazilo. Chyba: { $errorCode }
 
 ## Breach overview page
 
-all-breaches-headline-2 = Všechny úniky zjištěné pomocí { -brand-fx-monitor(case: "gen") }
+all-breaches-headline-3 = Databáze úniků dat
 all-breaches-lead = Monitorujeme všechny známé úniky údajů, abysme zjistili, zda nedošlo k ohrožení vašich osobních údajů. Zde je úplný seznam všech úniků, které byly nahlášeny od roku 2007.
 search-breaches = Prohledat úniky dat
 # the kind of user data exposed to hackers in data breach.

locales/cs/breaches.ftl

@@ -2,21 +2,17 @@
 # License, v. 2.0. If a copy of the MPL was not distributed with this
 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
 
-breach-all-meta-title = { -brand-fx-monitor } - Všechny úniky dat
+breach-all-meta-page-title = Databáze úniků dat - { -brand-fx-monitor }
 breach-all-meta-social-title = Všechny úniky dat detekované { -brand-fx-monitor(case: "ins") }
 breach-all-meta-social-description = Podívejte se na úplný seznam známých úniků údajů zjištěných službou { -brand-fx-monitor }. Následně zjistěte, zda nebyly vaše údaje odhaleny.
-
+# Variables:
+#   $company (String) - Name of the company that was breached, e.g. "PHP Freaks"
+breach-detail-meta-page-title = Únik dat z { $company } – { -brand-fx-monitor }
 # Variables:
 #   $company (String) - Name of the company that was breached, e.g. "PHP Freaks"
 breach-detail-meta-social-title = Dotýká se vás únik údajů společnosti { $company }?
 breach-detail-meta-social-description = Pomocí služby { -brand-fx-monitor } zjistíte, zda byly při tomto úniku odhaleny vaše osobní údaje a dozvíte se, co máte dělat dále.
 
-## Breaches header
-
-## Breaches resolved filter
-
-## Breaches table
-
 ## Links that we might refer to when prompting the user to make changes after a breach
 
 breach-checklist-link-firefox-relay = { -brand-relay }
@@ -26,7 +22,6 @@ breach-checklist-link-mozilla-vpn = { -brand-mozilla-vpn }
 ## Prompts the user for changes when there is a breach detected of password
 
 breach-checklist-pw-header-text = Aktualizujte svá hesla a povolte dvoufázové ověření (2FA).
-
 # The `breached-company-link` tags will be replaced with link tags or stripped if no link is available.
 # Variables:
 #   $passwordManagerLink (string) - a link to the password manager documentation, with { -breach-checklist-link-password-manager } as the label
@@ -95,7 +90,6 @@ breach-checklist-phone-header-2 = Chraňte své telefonní číslo pomocí masko
 ## Prompts the user for changes when there is a breach detected of security questions
 
 breach-checklist-sq-header-text = Aktualizujte své bezpečnostní otázky.
-
 # The `breached-company-link` tags will be replaced with link tags or stripped if no link is available.
 breach-checklist-sq-body-text = Ve většině případů doporučujeme aktualizovat bezpečnostní otázky na webu společnosti. Ale <b>jejich webové stránky mohou být nefunkční nebo mohou obsahovat škodlivý obsah</b>, takže pokud <breached-company-link>navštívíte stránky</breached-company-link>, buďte opatrní. Pro větší ochranu aktualizujte tyto bezpečnostní otázky u všech důležitých účtů, kde jste je používali, a pro všechny účty vytvořte jedinečná hesla.
 

locales/cy/app.ftl

@@ -198,8 +198,6 @@ mozilla = { -brand-mozilla }
 terms-of-service = Amodau Gwasanaeth
 privacy-notice = Hysbysiad Preifatrwydd
 github = { -brand-github }
-# Deprecated
-footer-nav-all-breaches = Pob Tor-data
 footer-nav-recent-breaches = Tor-data Diweddar
 footer-external-link-faq-label = Cwestiynau Cyffredin
 footer-external-link-faq-tooltip = Cwestiynau cyffredin
@@ -217,7 +215,7 @@ error-page-error-other-title = { $errorCode } Aeth rhywbeth o'i le
 
 ## Breach overview page
 
-all-breaches-headline-2 = Pob tor-data wedi'i ganfod gan { -brand-fx-monitor }
+all-breaches-headline-3 = Cronfa Ddata Tor-data
 all-breaches-lead = Rydym yn monitro'r holl achosion hysbys o dor-data i ganfod a gafodd eich manylion personol eu peryglu. Dyma restr lawn o’r holl dor-data sydd wedi’u hadrodd ers 2007.
 search-breaches = Chwilio am Dor-data
 # the kind of user data exposed to hackers in data breach.

locales/cy/breaches.ftl

@@ -2,21 +2,17 @@
 # License, v. 2.0. If a copy of the MPL was not distributed with this
 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
 
-breach-all-meta-title = { -brand-fx-monitor } - Pob Tor-data
+breach-all-meta-page-title = Cronfa Ddata Tor-data — { -brand-fx-monitor }
 breach-all-meta-social-title = Pob Tor-data Wedi ei Ganfod gan { -brand-fx-monitor }
 breach-all-meta-social-description = Porwch y rhestr lawn o dor-data hysbys a ganfuwyd gan { -brand-fx-monitor }, yna gweld a ddatgelwyd eich manylion chi.
-
+# Variables:
+#   $company (String) - Name of the company that was breached, e.g. "PHP Freaks"
+breach-detail-meta-page-title = Tor-data { $company } - { -brand-fx-monitor }
 # Variables:
 #   $company (String) - Name of the company that was breached, e.g. "PHP Freaks"
 breach-detail-meta-social-title = A oedd y Tor-data { $company } wedi effeithio arnoch chi?
 breach-detail-meta-social-description = Defnyddiwch { -brand-fx-monitor } i ddarganfod a gafodd eich manylion personol chi eu datgelu yn y tor-data hwn, a chael gwybod beth i'w wneud nesaf.
 
-## Breaches header
-
-## Breaches resolved filter
-
-## Breaches table
-
 ## Links that we might refer to when prompting the user to make changes after a breach
 
 breach-checklist-link-firefox-relay = { -brand-relay }
@@ -26,7 +22,6 @@ breach-checklist-link-mozilla-vpn = { -brand-mozilla-vpn }
 ## Prompts the user for changes when there is a breach detected of password
 
 breach-checklist-pw-header-text = Diweddarwch eich cyfrineiriau a galluogi dilysu dau ffactor (2FA).
-
 # The `breached-company-link` tags will be replaced with link tags or stripped if no link is available.
 # Variables:
 #   $passwordManagerLink (string) - a link to the password manager documentation, with { -breach-checklist-link-password-manager } as the label
@@ -95,7 +90,6 @@ breach-checklist-phone-header-2 = Diogelwch eich rhif ffôn gyda gwasanaeth cudd
 ## Prompts the user for changes when there is a breach detected of security questions
 
 breach-checklist-sq-header-text = Diweddarwch eich cwestiynau diogelwch.
-
 # The `breached-company-link` tags will be replaced with link tags or stripped if no link is available.
 breach-checklist-sq-body-text = Yn y rhan fwyaf o achosion, byddem yn argymell eich bod yn diweddaru eich cwestiynau diogelwch ar wefan y cwmni. Ond <b>efallai bod eu gwefan wedi torri neu'n cynnwys cynnwys maleisus</b>, felly byddwch yn ofalus os byddwch <breached-company-link>yn ymweld â'r wefan</breached-company-link>. I gael diogelwch ychwanegol, diweddarwch y cwestiynau diogelwch hyn ar unrhyw gyfrifon pwysig lle rydych chi wedi'u defnyddio, a chreu cyfrineiriau unigryw ar gyfer pob cyfrif.
 

locales/de/app.ftl

@@ -184,8 +184,6 @@ mozilla = { -brand-mozilla }
 terms-of-service = Nutzungsbedingungen
 privacy-notice = Datenschutzhinweis
 github = { -brand-github }
-# Deprecated
-footer-nav-all-breaches = Alle Datenlecks
 footer-nav-recent-breaches = Neueste Datenlecks
 footer-external-link-faq-label = Häufig gestellte Fragen
 footer-external-link-faq-tooltip = Häufig gestellte Fragen
@@ -203,7 +201,7 @@ error-page-error-other-title = { $errorCode } Ein Fehler ist aufgetreten
 
 ## Breach overview page
 
-all-breaches-headline-2 = Alle von { -brand-fx-monitor } erkannten Datenlecks
+all-breaches-headline-3 = Datenbank für Datenlecks
 all-breaches-lead = Wir überwachen alle bekannten Datenlecks, um herauszufinden, ob Ihre persönlichen Daten kompromittiert wurden. Hier ist eine vollständige Liste aller Lecks, die seit 2007 gemeldet wurden.
 search-breaches = Datenlecks suchen
 # the kind of user data exposed to hackers in data breach.

locales/de/breaches.ftl

@@ -2,11 +2,14 @@
 # License, v. 2.0. If a copy of the MPL was not distributed with this
 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
 
-breach-all-meta-title = { -brand-fx-monitor } – Alle Datenlecks
+breach-all-meta-page-title = Datenbank für Datenlecks – { -brand-fx-monitor }
 breach-all-meta-social-title = Alle von { -brand-fx-monitor } erkannten Datenlecks
 breach-all-meta-social-description = Durchsuchen Sie die vollständige Liste der bekannten und von { -brand-fx-monitor } erkannten Datenlecks und finden Sie heraus, ob Ihre Daten offengelegt wurden.
 # Variables:
 #   $company (String) - Name of the company that was breached, e.g. "PHP Freaks"
+breach-detail-meta-page-title = { $company }-Datenleck – { -brand-fx-monitor }
+# Variables:
+#   $company (String) - Name of the company that was breached, e.g. "PHP Freaks"
 breach-detail-meta-social-title = Waren Sie vom Datenleck bei { $company } betroffen?
 breach-detail-meta-social-description = Verwenden Sie { -brand-fx-monitor }, um herauszufinden, ob Ihre persönlichen Daten bei diesem Datenleck offengelegt wurden, und verstehen Sie, was als nächstes zu tun ist.
 

locales/el/app.ftl

@@ -233,8 +233,6 @@ mozilla = { -brand-mozilla }
 terms-of-service = Όροι υπηρεσίας
 privacy-notice = Σημείωση απορρήτου
 github = { -brand-github }
-# Deprecated
-footer-nav-all-breaches = Όλες οι παραβιάσεις
 footer-nav-recent-breaches = Πρόσφατες παραβιάσεις δεδομένων
 footer-external-link-faq-label = Συχνές ερωτήσεις
 footer-external-link-faq-tooltip = Συχνές ερωτήσεις
@@ -252,7 +250,7 @@ error-page-error-other-title = { $errorCode }: Κάτι πήγε στραβά
 
 ## Breach overview page
 
-all-breaches-headline-2 = Όλες οι παραβιάσεις που εντοπίστηκαν από το { -brand-fx-monitor }
+all-breaches-headline-3 = Βάση δεδομένων παραβιάσεων
 all-breaches-lead = Παρακολουθούμε όλες τις γνωστές παραβιάσεις δεδομένων για να διαπιστώσουμε εάν τα προσωπικά σας στοιχεία παραβιάστηκαν. Ακολουθεί μια πλήρης λίστα με όλες τις παραβιάσεις που έχουν αναφερθεί από το 2007.
 search-breaches = Αναζήτηση παραβιάσεων
 # the kind of user data exposed to hackers in data breach.

locales/el/breaches.ftl

@@ -2,21 +2,17 @@
 # License, v. 2.0. If a copy of the MPL was not distributed with this
 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
 
-breach-all-meta-title = { -brand-fx-monitor } - Όλες οι παραβιάσεις δεδομένων
+breach-all-meta-page-title = Βάση δεδομένων παραβιάσεων — { -brand-fx-monitor }
 breach-all-meta-social-title = Όλες οι παραβιάσεις που εντοπίστηκαν από το { -brand-fx-monitor }
 breach-all-meta-social-description = Περιηγηθείτε στην πλήρη λίστα των γνωστών παραβιάσεων που εντοπίστηκαν από το { -brand-fx-monitor } και μάθετε εάν αποκαλύφθηκαν οι πληροφορίες σας.
-
+# Variables:
+#   $company (String) - Name of the company that was breached, e.g. "PHP Freaks"
+breach-detail-meta-page-title = Παραβίαση δεδομένων { $company } – { -brand-fx-monitor }
 # Variables:
 #   $company (String) - Name of the company that was breached, e.g. "PHP Freaks"
 breach-detail-meta-social-title = Επηρεαστήκατε από την παραβίαση δεδομένων { $company };
 breach-detail-meta-social-description = Χρησιμοποιήστε το { -brand-fx-monitor } για να μάθετε εάν τα προσωπικά σας δεδομένα εκτέθηκαν σε αυτήν την παραβίαση και να κατανοήσετε τι πρέπει να κάνετε στη συνέχεια.
 
-## Breaches header
-
-## Breaches resolved filter
-
-## Breaches table
-
 ## Links that we might refer to when prompting the user to make changes after a breach
 
 breach-checklist-link-firefox-relay = { -brand-relay }
@@ -26,7 +22,6 @@ breach-checklist-link-mozilla-vpn = { -brand-mozilla-vpn }
 ## Prompts the user for changes when there is a breach detected of password
 
 breach-checklist-pw-header-text = Ενημερώστε τους κωδικούς πρόσβασής σας και ενεργοποιήστε την ταυτοποίηση δύο παραγόντων (2FA).
-
 # The `breached-company-link` tags will be replaced with link tags or stripped if no link is available.
 # Variables:
 #   $passwordManagerLink (string) - a link to the password manager documentation, with { -breach-checklist-link-password-manager } as the label
@@ -95,7 +90,6 @@ breach-checklist-phone-header-2 = Προστατέψτε τον αριθμό τ
 ## Prompts the user for changes when there is a breach detected of security questions
 
 breach-checklist-sq-header-text = Ενημερώστε τις ερωτήσεις ασφαλείας σας.
-
 # The `breached-company-link` tags will be replaced with link tags or stripped if no link is available.
 breach-checklist-sq-body-text = Στις περισσότερες περιπτώσεις, θα συνιστούσαμε να ενημερώσετε τις ερωτήσεις ασφαλείας σας στον ιστότοπο της εταιρείας. Ωστόσο, <b>ο ιστότοπός της ενδέχεται να είναι εκτός λειτουργίας ή να περιέχει κακόβουλο περιεχόμενο</b>, επομένως <breached-company-link>επισκεφτείτε τον ιστότοπο</breached-company-link> με προσοχή. Για πρόσθετη προστασία, ενημερώστε αυτές τις ερωτήσεις ασφαλείας στους σημαντικούς λογαριασμούς όπου τις έχετε χρησιμοποιήσει και δημιουργήστε μοναδικούς κωδικούς πρόσβασης για όλους τους λογαριασμούς.
 

locales/en-GB/app.ftl

@@ -199,8 +199,6 @@ mozilla = { -brand-mozilla }
 terms-of-service = Terms of Service
 privacy-notice = Privacy Notice
 github = { -brand-github }
-# Deprecated
-footer-nav-all-breaches = All Breaches
 footer-nav-recent-breaches = Recent Data Breaches
 footer-external-link-faq-label = FAQs
 footer-external-link-faq-tooltip = Frequently asked questions
@@ -218,7 +216,7 @@ error-page-error-other-title = { $errorCode } Something went wrong
 
 ## Breach overview page
 
-all-breaches-headline-2 = All breaches detected by { -brand-fx-monitor }
+all-breaches-headline-3 = Data Breach Database
 all-breaches-lead = We monitor all known data breaches to find out if your personal information was compromised. Here’s a complete list of all of the breaches that have been reported since 2007.
 search-breaches = Search Breaches
 # the kind of user data exposed to hackers in data breach.