Backport 2.14.0 changelog to develop

admin/debian/changelog

@@ -1,8 +1,14 @@
-securedrop-admin (2.14.0~rc1) unstable; urgency=medium
+securedrop-admin (2.15.0~rc1) unstable; urgency=medium
 
-  * 
+  *
 
- -- SecureDrop Team <securedrop@freedom.press>  Fri, 05 Dec 2025 10:56:36 -0500
+ -- SecureDrop Team <securedrop@freedom.press>  Fri, 20 Feb 2026 11:43:01 -0500
+
+securedrop-admin (2.14.0) unstable; urgency=medium
+
+  * see changelog.md
+
+ -- SecureDrop Team <securedrop@freedom.press>  Thu, 19 Feb 2026 12:03:17 -0500
 
 securedrop-admin (2.13.0) unstable; urgency=medium
 

changelog.md

@@ -1,9 +1,55 @@
 # Changelog
 
-## 2.14.0~rc1
+## 2.15.0~rc1
 
 
 
+## 2.14.0
+
+### Web Applications and API
+
+* Update Source Interface warning banner to refer to modern mobile browsers (#7751)
+
+* v2 Journalist API:
+  * Support conversation truncation via source\_conversation\_truncated event (#7723)
+  * Document synchronization behaviour with multiple clients (#7734)
+  * Strengthen binding between Event.type and Event.target (#7744)
+
+* Dependency updates:
+  * cffi from 1.16.0 to 2.0.0 (#7774)
+  * cryptography from 41.0.7 to 46.0.5 (#7774)
+
+### Operations
+
+* Ensure KeePassXC is installed with securedrop-admin (#7762)
+
+### Development
+
+* Update image build automation to drop redundant tag prep jobs (#7742)
+* Remove current year from messages.pot (#7753)
+* Have ruff lint against Python 3.12 as its baseline (#7764)
+
+* Use uv to update admin requirements (#7774)
+* Dependency updates:
+  * Github actions/checkout from 5 to 6 (#7724)
+  * Github actions/cache from 4 to 5 (#7739)
+  * Github actions/download-artifact from 5 to 7 (#7738)
+  * Github actions/upload-artifact from 5 to 6 (#7740)
+  * urllib3 from 2.5.0 to 2.6.3 (#7736, #7754)
+  * filelock from 3.19.1 to 3.20.3 (#7743, #7765)
+  * wheel from 0.45.1 to 0.46.3 (#7760)
+  * python-multipart from 0.0.20 to 0.0.22 (#7761)
+  * virtualenv from 20.34.0 to 20.36.1 (#7765)
+  * pynacl from 1.5.* to 1.6.2 (#7765)
+  * protobuf from 6.33.0 to 6.33.5 (#7765)
+  * pip from 25.0 to 26.0 (#7766)
+  * cffi from 1.16.0 to 2.0.0 (#7774)
+  * cryptography from 41.0.7 to 46.0.5 (#7774)
+
+* Ignores:
+  * CVE-2025-67897 in Sequoia-PGP (7741)
+
+
 ## 2.13.0
 
 ### Web Applications and API

install_files/ansible-base/group_vars/all/securedrop

@@ -2,7 +2,7 @@
 # Variables that apply to both the app and monitor server go in this file
 # If the monitor or app server need different values define the variable in
 # hosts_vars/app.yml or host_vars/mon.yml
-securedrop_version: "2.14.0~rc1"
+securedrop_version: "2.15.0~rc1"
 securedrop_app_code_sdist_name: "securedrop-app-code-{{ securedrop_version | replace('~', '-') }}.tar.gz"
 
 grsecurity: true

molecule/shared/stable.ver

@@ -1 +1 @@
-2.13.0
+2.14.0

securedrop/debian/changelog

@@ -1,8 +1,14 @@
-securedrop (2.14.0~rc1) unstable; urgency=medium
+securedrop (2.15.0~rc1) unstable; urgency=medium
 
   * 
 
- -- SecureDrop Team <securedrop@freedom.press>  Fri, 05 Dec 2025 10:56:53 -0500
+ -- SecureDrop Team <securedrop@freedom.press>  Fri, 20 Feb 2026 11:43:21 -0500
+
+securedrop (2.14.0) unstable; urgency=medium
+
+  * see changelog.md
+
+ -- SecureDrop Team <securedrop@freedom.press>  Thu, 19 Feb 2026 12:03:54 -0500
 
 securedrop (2.13.0) unstable; urgency=medium
 

securedrop/setup.py

@@ -4,7 +4,7 @@
 
 setuptools.setup(
     name="securedrop-app-code",
-    version="2.14.0~rc1",
+    version="2.15.0~rc1",
     author="Freedom of the Press Foundation",
     author_email="securedrop@freedom.press",
     description="SecureDrop Server",

securedrop/version.py

@@ -1 +1 @@
-__version__ = "2.14.0~rc1"
+__version__ = "2.15.0~rc1"