the following changes have been pushed to bugzilla.mozilla.org:
- [1433993] Outdated FreeOTP link in user preferences
- [1433833] Add index to email_rates.message_ts
- [1436301] Exempt bot accounts from idle group removal
- [1430259] Update policy code in BMO PhabBugz extension to update custom policy if a private bugs groups have changed.
- [1343248] Migrate secbugstats scripts to bmo production
- [1434064] Refactor Project.pm to use Moo for better type checking
- [1434438] Refactor Revision.pm to use Moo for cleaner type checking
- [1424363] securemail help page recommends getting a certificate from StartCom
- [1433400] Prevent cross-site image requests from leaking contents of certain fields due to regex search
- [1435735] Add script to add email job to jobqueue
- [1211377] needinfo from someone not in sec group shows warning message even when bug is being removed from sec group
- [1432296] Prevent bugzilla static assets from being blocked by overly long request URIs
discuss these changes on mozilla.tools.bmo.