fix(fxa-settings): Fix l10n and a11y of confirm password input

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.1335.0 to 2.1397.0.
- [Release notes](https://github.com/aws/aws-sdk-js/releases)
- [Commits](aws/aws-sdk-js@v2.1335.0...v2.1397.0)

---
updated-dependencies:
- dependency-name: aws-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

…k-2.1397.0

chore(deps): bump aws-sdk from 2.1335.0 to 2.1397.0

Because:

* We need a way to bulk cancel subscriptions to a given plan

This commit:

* Creates a script that can cancel subscriptions to a given plan
* with a few configuration options

Closes FXA-7124

feat(auth): cancel subscriptions to plan script

fix(third-party-auth): Don't show Google/Apple login buttons in the Sync flow

fix(ipad): Reduce avatar size on mobileLandscape for iPad web view modal

Because:

* Credit card names are brands and have to follow proper capitalization and formatting as per their individual guidelines.

This commit:

* Corrects credit card capitalization and formatting in paymentProvider mjml partial.
* Corrects all references to "Mastercard" from "MasterCard" as that is the official branding.
* Adds additional translations for card name instead of type and unknown card.
* Updates applicable stories and tests.

Closes FXA-7134

Because:

* the invoice/preview endpoint is failing more often causing issues for users

This commit:

* adds some logging around the handler
* removes some env checks so that response validation errors are logged in production

Closes #FXA-7664

Because:

* We are aiming to launch VPN in 16 new countries in Europe.

This commit:

* Adds additional currencies to supportedPayPalCurrencies.

Closes FXA-7606

fix(l10n): Clarify recovery key hint explanation for l10n

feat(payments): update supported PayPal currencies list

fix(auth): add Logging To Invoice Previw Endpoint

Bumps [chalk](https://github.com/chalk/chalk) from 5.1.2 to 5.2.0.
- [Release notes](https://github.com/chalk/chalk/releases)
- [Commits](chalk/chalk@v5.1.2...v5.2.0)

---
updated-dependencies:
- dependency-name: chalk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

…password

test(functional): Convert Robots test, oauth webchannel tests

fix(ip): Set x-forwarded-for header from gql to auth-server

fix(text): Don't display `Step 1 of 2` when deleting account with no password set

Because:

* Localized plain text file is not rendering as expected on Android and Windows.
* Hidden directionality characters get copied with key, resulting in the key being marked as invalid during password reset.
* Reversal is temporary to prevent this issue from blocking deployment while next steps are determined.

This commit:

* Serve key only in the file download.
* Add an optional query param to test downloading a detailed file 1) with BOM (byte-order-mark), 2) with charset defined, or 3) with TextEncoder
* Add stories to download the 3 test options

Closes #FXA-7688

Because:

* Controlled components that used useWatch to obtain the current input value would reset to default (empty string) on submit or rerender
* We want to ensure that if the submit aborts due to an error or if the page rerenders, controlled components will display the current input value and not an string.

This commit:

* Use getValues to set the default input value for useWatch in both places where it is used in the codebase (FlowRecoveryKeyHint and ResetPassword)

Closes #FXA-7547

Because:

* The lightbulb image in account recovery key creation step 4 was mispositioned on mobile
* The focus outline was misplaced on the back button

This commit:

* Update sizing, rename and minify lightbulb svg
* Adjust styling for back button
* Remove background fill for security shield graphic

Closes #FXA-7542, #FXA-7553

task(fxa-settings): Revert localized content in key download file

fix(fxa-settings): Ensure useWatch uses current input value as default

fix(fxa-settings): Various UI tweaks related to recovery key

test(functional): rewrite sync v3 settings test

Because:

* we do not want to be inundated with request validation errors that are outside of our control

This commit:

* updates the reporting logic to only report response validation errors for all environments

Closes #FXA-7664

…ors-only

fix(auth): only Report Response Validation Errors

Bumps [type-fest](https://github.com/sindresorhus/type-fest) from 3.7.1 to 3.12.0.
- [Release notes](https://github.com/sindresorhus/type-fest/releases)
- [Commits](sindresorhus/type-fest@v3.7.1...v3.12.0)

---
updated-dependencies:
- dependency-name: type-fest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

…5.2.0

chore(deps): bump chalk from 5.1.2 to 5.2.0

fix(emails): correct credit card brand capitalization in invoice emails

Because:

* Subscription management date is localized to `en` locale, regardless
  of browser language.
* SecurityEvent created date is not being localized.

This commit:

* Pass FluentDate to Fluent localization libraries to correctly
  localize dates.
* Add localization string for SecurityEvent created date.

Closes FXA-7795

Bumps [mkdirp](https://github.com/isaacs/node-mkdirp) from 2.1.5 to 3.0.1.
- [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-mkdirp@v2.1.5...v3.0.1)

---
updated-dependencies:
- dependency-name: mkdirp
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

chore(docs) Latest legal PDFs

Because:

* stripe started returning an empty string for tax display name which causes our response validation to fail

This commit:

* ORs an empty string with undefined so that undefined is returned when display name is an empty string

Closes #

fix(auth): handle Empty String Tax Display Name

fix(l10n): fix date localization in sub management

fix(release): Fetch all git tags

…-3.0.1

chore(deps): bump mkdirp from 2.1.5 to 3.0.1

…sword reset

Because:
* The browser should be be notified when a PW reset occurs on a verified account through the Sync flow, as this logs the user in

This commit:
* Conditionally runs the fxaLogin command with required account data after a password reset with or without recovery key, when the flow is sync
* Receives other values off the account reset call needed for webchannel account data
* Temporarily checks for SyncBasic and SyncDesktop flows to run the check because we don't need to port over context in local storage logic (which would account for SyncDesktop only), since we are switching to codes soon
* Sends up `service` with the email request so we can append the param and check when link is received (causing the  SyncBasic integration)
* Removes resendResetPassword and calls resetPassword where needed since the code was duplicated

Fixes FXA-7172

feat(react): Send fxaLogin webchannel message conditionally after password reset

fix(apple): Fix few bugs with migration script and add ability to mock

…very key flow

Because:

* We want to prevent users from clicking on submit buttons multiple times while account updates are in progress, and also provide users with feedback that the form has been submitted.
* Clicking on the confirm password button multiple times would result in an error banner "Account recovery key already exists"
* Clicking multiple times on the "remove" button from the "delete account recovery key" modal would send multiple key deleted emails

This commit:

* Disable submit button while password confirmation and key creation are in progress
* Disable modal confirmation button while submit function is in progress

Closes #FXA-7551

Because:

* we want to use feature flags to enable/disable work

This commit:

* adds an env var for the stripe invoice immediately epic

Closes #FXA-7847

…nv-var

feat(invoice): add Env Vars for Stripe Invoice Immediately

Bumps [p-event](https://github.com/sindresorhus/p-event) from 4.2.0 to 6.0.0.
- [Release notes](https://github.com/sindresorhus/p-event/releases)
- [Commits](sindresorhus/p-event@v4.2.0...v6.0.0)

---
updated-dependencies:
- dependency-name: p-event
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

test(functional): rewrite signin and oauth reset password test

Because:
- We want to send fxaccounts:oauth_login events

This Commit:
- Adds new FirefoxCommand, OAuthLogin.
- Adds new type for OAuthLogins
- Adds ability to send command

…t-6.0.0

chore(deps-dev): bump p-event from 4.2.0 to 6.0.0

Because:

* There are no plans configured to support RSD and, currently, PayPal does not support it.

This commit:

* Removes RSD from approved currencies list.

Closes FXA-7815

Because:

* The subscription confirmation page shows the current date instead of
  the latest invoice date.

This commit:

* Shows the latest invoice date
* Does not show the Order details section if invoice number and date
  could not be found

Closes FXA-5805

fix(payments): on sub confirm show invoice date

task(settings): Support OAuth Login Event

Because:
* Users that have an account via third-party auth and have not yet set a password should be shown a login screen that shows the login button(s) relevant to them instead of the 'enter a password' view

This commit:
* Adds necessary conditional logic to sign_in_password
* Updates the accoun/status endpoint to return third party auth status data when requested

closes FXA-4776

feat(third-party-auth): Conditionally render login buttons on signin

Emit account event for Pocket Apple user migration

…ter checkbox w/two slugs

Because:
* We want to update the label text for two existing newsletters and add a new option to subscribe users to two new newsletter from one new checkbox

This commit:
* Updates labels per ticket
* Adds new checkbox with array of slugs for new newsletter option, does not HTML escape label due to ampersand
* Updates server validity check, tests

Closes FXA-7527

fix(fxa-settings): Disable double-clicking on buttons in account recovery key flow

chore(payments): remove RSD from approved currencies

Bumps [semver](https://github.com/npm/node-semver) from 7.3.5 to 7.5.3.
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.3.5...v7.5.3)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Because:

* objectToNVP converts object properties with undefined values to a
  string with value undefined. PayPal expects undefined values to be
  an empty string param.

This commit:

* Converts object properties with an undefined value to empty string.

fix(payments/paypal): convert undefined before request

Because:

* We want to make sure the password check is successful before deleting the key and creating a new one

This commit:
* Update the server-side "createRecoveryKey" method to handle new key creation when account already had a key enabled
* Use the client-side createRecoveryKey with reauth for both key creation and key change
* Send only "new key created" email when a key is changed (not "key deleted" email)
* Fix error with throttled error localization when localizedRetryAfter value is not available by adding a generic string
* Update tests and add more stories

Closes #FXA-7548

…-7.5.3

chore(deps): bump semver from 7.3.5 to 7.5.3

fix(fxa-settings): Do not allow key change if password incorrect

Because:

* We want to enable all reset password functional tests for both react and content-server

This commit:

* Add playwright test for content-server reset password "happy path"
* Add additional tests for react reset password route
* Add react reset password test for sync
* Move some react reset password tests to unit tests

Closes #FXA-7248

Bumps [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) from 7.21.0 to 7.22.5.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.22.5/packages/babel-preset-typescript)

---
updated-dependencies:
- dependency-name: "@babel/preset-typescript"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

…-tests

task(functional-tests): Add missing reset password tests in Playwright

feat(newsletters): Update newsletter checkbox labels, add new newsletter checkbox w/two slugs

Because:

* we want to invoice immediately when subscriptions are upgraded

This commit:

* passes in the parameter to stripe (conditionally on env var) to invoice immediately on sub upgrades

Closes #FXA-7438

Co-authored-by: Peter deHaan <[email protected]>

Co-authored-by: Peter deHaan <[email protected]>

…grade

feat(auth): pass In 'always_invoice' On Subscription Upgrade

test(functional) : rewrite sync sign up with CWTS tests

Because:

* Changes introduced in #15478 removed the return value from method
  resetPasswordHeader

This commit:

* Updates tests to no longer expect a return value from method
  resetPasswordHeader

fix(functional-tests): update forceAuth test

…est-3.12.0

chore(deps-dev): bump type-fest from 3.7.1 to 3.12.0

…preset-typescript-7.22.5

chore(deps): bump @babel/preset-typescript from 7.21.0 to 7.22.5

Because:

* Now that we are immediately invoicing on upgrades regardless of billing cycle, we want to revise copy throughout the checkout and email process to improve UX and be clear on payment dates and amounts.

This commit:

* Revises the acknowledgement copy on upgrades.
* Uses the stripeImmediatelyInvoice flag to show updated copy.
* Updates tests and stories when aforementioned flag is set to true, where applicable.

Closes FXA-7399

feat(payments): revise acknowledgement copy on upgrades

test(functional): rewrite fx desktop handshake tests

Because:

* Need to add Google Analytics to payments server.

This commit:

* Performs the necessary setup to run GA events on payments for specific
  products.

Closes #FXA-7670

feat(payments): Add GA to payments

Because:

* We want a user to be able to resume where they left off in the checkout process.

This commit:

* Creates a carts table to store subscription checkout state per [SubPlat 3.0 Cart DB Structure](https://docs.google.com/document/d/1hUx-lbymI8It_Cn5AeUkVmwdc2_pqCJDqs8G9X6ia8c/edit?usp=sharing).

Closes #FXA-7506

fix(logs): Fix issues with bigquery logs

feat(db): create carts table to store subscription checkout state