[AC-144] Initial implementation of impression capping in MAC

.buildconfig-android.yml

@@ -63,13 +63,13 @@ projects:
     - name: rust-log-forwarder
       type: aar
     description: Forward logs from Rust
-  httpconfig:
+  viaduct:
     path: components/viaduct/android
-    artifactId: httpconfig
+    artifactId: viaduct
     publications:
-    - name: httpconfig
+    - name: viaduct
       type: aar
-    description: Component allowing the configuration of Rust HTTP stack.
+    description: Rust HTTP bridge.
   push:
     path: components/push/android
     artifactId: push

.cargo/config.toml

@@ -5,7 +5,7 @@ uniffi-bindgen = ["run", "--package", "embedded-uniffi-bindgen", "--"]
 uniffi-bindgen-library-mode = ["run", "--package", "uniffi-bindgen-library-mode", "--"]
 dev-install = ["install", "asdev"]
 verify_env = ["asdev", "verify_env"]
-fxa = ["run", "-p", "examples-fxa-client", "--"]
+fxa = ["run", "-p", "examples-fxa-client", "--example", "fxa-client", "--"]
 suggest-bench = ["bench", "-p", "suggest-bench"]
 suggest-debug-ingestion-sizes = ["run", "-p", "suggest-bench", "--bin", "debug_ingestion_sizes"]
 relevancy = ["run", "-p", "examples-relevancy-cli", "--"]

.circleci/config.yml

@@ -95,7 +95,7 @@ commands:
   build-desktop-libs:
     steps:
       - run: sudo apt-get update
-      - run: sudo apt-get install python tcl
+      - run: sudo apt-get install python3 tcl
       - run: sudo apt-get install python3-venv
       - run: sudo apt-get install libclang-dev
       - run:
@@ -196,7 +196,7 @@ executors:
   # Unfortunately some of our jobs can only run successfully on macos.
   docker:
     docker:
-      - image: cimg/rust:1.53.0
+      - image: cimg/rust:1.91.0
   macos:
     macos:
       xcode: "26.0"

CHANGELOG.md

@@ -1,12 +1,49 @@
-# v154.0 (In progress)
+# v155.0 (In progress)
+
+[Full Changelog](In progress)
+
+## ✨ What's Changed ✨
+
+### Ads-Client
+
+- Add `AdsClient::shutdown()`, which closes the database connection early so it happens before Firefox Desktop's late-write shutdown barrier rather than during GC. In addition, this drops all held UniFFI callbacks (held in the MozAdsTelemetryWrapper) to avoid crash on a Firefox Desktop quit.
+
+### Autofill
+
+- Add `Store::shutdown()`, which closes the database connection early so it happens before Firefox Desktop's late-write shutdown barrier rather than during GC. Operations after shutdown return `DatabaseClosed`. ([Bug 2050036](https://bugzilla.mozilla.org/show_bug.cgi?id=2050036))
+- Add address metadata APIs for importing records already persisted elsewhere: `add_address_with_meta`, `add_many_addresses_with_meta`, `update_address_with_meta` and `add_many_address_tombstones`, with the bulk variants isolating per-record failures. `AddressMeta` carries the guid, timestamps and `sync_change_counter`, so a record keeps whether it still has changes pending upload.
+- Add `Store::addresses_bridged_engine()`, exposing the existing address sync engine through `mozIBridgedSyncEngine` so Firefox Desktop can drive address sync.
+
+### Fxa Client
+- The `CheckAuthorizationStatus` and `Disconnect` events are now valid from all states except `Uninitialized`.
+  In the cases where the failed before, they're now no-ops.
+
+### Nimbus
+
+- `NimbusClient::get_available_firefox_labs()` now includes detailed debug level logging for each processed lab. ([#7482](https://github.com/mozilla/application-services/pull/7482))
+
+### Remote Settings
+- Replacing v1 routes with v2 routes, removing added v2 routes ([#7492](https://github.com/mozilla/application-services/pull/7339))
+- Verify signature of imported data when `.get()` is called with `sync_if_empty: true` ([#7518](https://github.com/mozilla/application-services/pull/7518)) 
+- Do not quote `_since` values with the v2 API ([#7523](https://github.com/mozilla/application-services/pull/7523))
+
+### Sync Manager
+
+- `SyncManager::sync()` now fails immediately with a new `SyncManagerError::Busy` when a sync is already in progress, instead of blocking until it finishes.
+
+# v154.0 (_2026-07-20_)
 
 ## ✨ What's Changed ✨
 
 ### Firefox Accounts
 
-- Session-token authenticated requests to the FxA auth-server now use the typed-Bearer token scheme (`Authorization: Bearer fxs_<token_id>`) instead of Hawk. This is an internal change with no consumer-facing API impact; production routes accept both schemes. See the [authentication schemes reference](https://mozilla.github.io/ecosystem-platform/reference/authentication-schemes). ([#PRNUM](https://github.com/mozilla/application-services/pull/PRNUM))
+- Session-token authenticated requests to the FxA auth-server now use the typed-Bearer token scheme (`Authorization: Bearer fxs_<token_id>`) instead of Hawk. This is an internal change with no consumer-facing API impact; production routes accept both schemes. See the [authentication schemes reference](https://mozilla.github.io/ecosystem-platform/reference/authentication-schemes). ([#7432](https://github.com/mozilla/application-services/pull/7432))
 
-[Full Changelog](In progress)
+### Remote Settings
+
+- Skip verification of signatures with unknown signature types ([Bug 2055147](https://bugzilla.mozilla.org/show_bug.cgi?id=2055147))
+
+[Full Changelog](https://github.com/mozilla/application-services/compare/v153.0...v154.0)
 
 ## ✨ What's New ✨
 
@@ -16,6 +53,21 @@
 ### Logins
 
 - Add `LoginStore.bridgedEngine()`, which exposes the logins sync engine to Desktop's Sync. ([bug 2049263](https://bugzilla.mozilla.org/show_bug.cgi?id=2049263))
+- Add `LoginStore.delete_all()`, which deletes all logins
+  and `delete_all_axcept_fxa()`, which deletes all logins preserving the FxA session-credentials login
+  and `LoginStore.wipe_local_except_fxa()`, a variant of `wipe_local()` that preserves the FxA session-credentials login
+  ([#7467](https://github.com/mozilla/application-services/pull/7467)) ([Bug 2053557](https://bugzilla.mozilla.org/show_bug.cgi?id=2053557))
+
+## 🔧 What's Fixed 🔧
+
+### Logins
+
+- The logins sync engine no longer holds its own long-lived clone of the `EncryptorDecryptor`, fetching it from the store on demand instead. This ensures no dangling reference keeps a foreign (e.g. JS) callback handle alive past `shutdown()`. ([#7478](https://github.com/mozilla/application-services/pull/7478))
+
+### Nimbus
+
+- Reasons are now reported in unenrollment events. ([#7480](https://github.com/mozilla/application-services/pull/7480))
+- The available Firefox Labs are now filtered by targeting and bucketing. ([#7481](https://github.com/mozilla/application-services/pull/7481))
 
 # v153.0 (_2026-06-15_)
 
@@ -31,6 +83,7 @@
 - init_backend and `viaduct_init_backend_hyper` no longer throw an error if they're called multiple times.
   Instead, we report the error via the Rust components error ping.
   This is a breaking change for iOS, since the functions no longer throw.
+- Renamed the Android package to `mozilla.appservices.viaduct`
 
 ## 🔧 What's Fixed 🔧