What's Changed

• Add missing alt attribute by @maureenlholland in #17218
• feat: add a GHA to trigger migrating DB content from one environment to another by @stevejalim in #17213
• chore(security): dep bumps, partic wagtail, uv, idna by @stevejalim in #17219

Full Changelog: 2026-06-08...2026-06-09

What's Changed

• Drop MitreCVE table via migration by @janriokrause in #17143

Full Changelog: 2026-06-04.2...2026-06-08

What's Changed

• fix high severity vulnerabilities by @wen-2018 in #17214
• fix: include new foundation-fundraiser template on CMS homepage by @slightlyoffbeat in #17217

Full Changelog: 2026-06-04...2026-06-04.2

What's Changed

• fix high severity vulnerabilities by @wen-2018 in #17214
• fix: include new foundation-fundraiser template on CMS homepage by @slightlyoffbeat in #17217

Full Changelog: 2026-06-04...2026-06-04.1

What's Changed

• chore(deps): bump launch-editor from 2.6.1 to 2.14.1 by @dependabot[bot] in #17211
• chore(deps-dev): bump concurrently from 9.2.1 to 10.0.3 by @dependabot[bot] in #17203
• chore(deps): bump the frontend group across 1 directory with 7 updates by @dependabot[bot] in #17204
• chore(deps): bump sass-loader from 16.0.7 to 17.0.0 by @dependabot[bot] in #17193
• chore(deps-dev): bump sinon from 21.1.2 to 22.0.0 by @dependabot[bot] in #17192
• WT-1191 update CMS components and static sections to use the same UTMs by @wen-2018 in #17202
• [UITour] Adds ability to pin to taskbar/dock by @mimizillaa in #17212
• WT 1131 june fundraiser by @bluewave41 in #17194

New Contributors

• @mimizillaa made their first contribution in #17212

Full Changelog: 2026-06-03...2026-06-04

What's Changed

• chore(deps-dev): bump tmp from 0.2.5 to 0.2.6 by @dependabot[bot] in #17190
• Bump playwright version to fix playwright install by @bluewave41 in #17209
• Remove obsolete l10n strings and ftl files by @stephaniehobson in #17207
• Bug bounty collision is now 2 days (was 3) by @simon-friedberger in #17208
• Add some architecture notes to AGENTS.md by @stephaniehobson in #17206
• fix static springboard items' link attributes by @wen-2018 in #17210

Full Changelog: 2026-05-27...2026-06-03

What's Changed

• Port over of WT-1217 from Springfield: Drop HTML comments from sanitized output by @stevejalim in #17183
• chore(deps-dev): bump webpack-dev-server from 5.2.3 to 5.2.4 by @dependabot[bot] in #17182
• WT-547 updates CMS common components by @wen-2018 in #17153
• chore(deps): bump @babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.4 by @dependabot[bot] in #17167
• chore(deps): bump qs and express by @dependabot[bot] in #17187
• chore(deps): bump fast-uri from 3.1.0 to 3.1.2 by @dependabot[bot] in #17165
• chore(deps-dev): bump globals from 16.5.0 to 17.6.0 by @dependabot[bot] in #17111
• chore(deps-dev): bump dotenv-webpack from 8.1.1 to 9.0.0 by @dependabot[bot] in #17106
• chore(deps): bump wagtail from 7.3.1 to 7.3.2 in /requirements by @dependabot[bot] in #17164
• chore(deps): bump idna from 3.13 to 3.15 in /requirements by @dependabot[bot] in #17181
• chore(deps): bump pymdown-extensions from 10.21.2 to 10.21.3 in /requirements by @dependabot[bot] in #17180
• chore(deps): bump webpack-cli from 6.0.1 to 7.0.2 by @dependabot[bot] in #17107
• Update from Node 20 to Node 24 by @maureenlholland in #17168

Full Changelog: 2026-05-19...2026-05-27

What's Changed

• fix: repair Smartling CAT visual context by @stevejalim in #17179

Full Changelog: 2026-05-14...2026-05-19

What's Changed

• Preserve HTML entities in remove_p_tag output (WT-1133) by @janriokrause in #17176

Full Changelog: 2026-05-13...2026-05-14

What's Changed

• fix: explicitly set git remote URL with PAT before pushing in release workflow by @stevejalim in #17171
• fix: deploy-to-prod should not be blocked by new commits landing on main by @stevejalim in #17172
• fix: clearer error messages when preflight CI runs are cancelled by a new main commit by @stevejalim in #17173
• fix: check out release SHA directly in deploy-to-stage by @stevejalim in #17175

Full Changelog: 2026-05-12.1...2026-05-13