Skip to content

wip: remove breach info#7244

Open
jo wants to merge 1 commit intomozilla:mainfrom
jo:remove-breach-info
Open

wip: remove breach info#7244
jo wants to merge 1 commit intomozilla:mainfrom
jo:remove-breach-info

Conversation

@jo
Copy link
Contributor

@jo jo commented Feb 25, 2026

In #7127, we added breach alerts support.

However, in further discussions, we came to the conclusion that the column time_of_last_breach is not directly necessary, as this information can also be pulled from the Remote Settings during runtime. Performance optimizations should be subordinate to the principle of data spareness.

Therefore, this PR removes the time_of_last_breach column introduced in #7127, along with their accessors. Since this column is not yet used in Mobile, no data migration is necessary.

  • BREAKING: Removed time_of_last_breach field from LoginMeta and Login. This can be derived from Remote Settings during runtime instead.
  • BREAKING: Removed record_breach(id, timestamp) API method.
  • BREAKING: Removed is_potentially_breached(id) API method.
  • BREAKING: Removed is_breach_alert_dismissed(id) API method.
  • BREAKING: reset_all_breaches() now clears the breachesL password table instead of resetting time_of_last_breach timestamps.
  • Schema migrated to version 5: timeOfLastBreach column dropped from loginsL and loginsM.

A Phab Patch will be created to adapt LoginsStorage.kt and Types.kt.

Pull Request checklist

  • Breaking changes: This PR follows our breaking change policy
    • This PR follows the breaking change policy:
      • This PR has no breaking API changes, or
      • There are corresponding PRs for our consumer applications that resolve the breaking changes and have been approved
  • Quality: This PR builds and tests run cleanly
    • Note:
      • For changes that need extra cross-platform testing, consider adding [ci full] to the PR title.
      • If this pull request includes a breaking change, consider cutting a new release after merging.
  • Tests: This PR includes thorough tests or an explanation of why it does not
  • Changelog: This PR includes a changelog entry in CHANGELOG.md or an explanation of why it does not need one
    • Any breaking changes to Swift or Kotlin binding APIs are noted explicitly
  • Dependencies: This PR follows our dependency management guidelines
    • Any new dependencies are accompanied by a summary of the due diligence applied in selecting them.

@jo jo force-pushed the remove-breach-info branch from 716dd3f to 6a1f361 Compare February 25, 2026 16:19
@bendk bendk mentioned this pull request Feb 26, 2026
5 tasks
@jo jo force-pushed the remove-breach-info branch 2 times, most recently from 696c897 to 402c728 Compare February 26, 2026 11:04
In mozilla#7127, we added breach alerts support.

However, in further discussions, we came to the conclusion that the
column `time_of_last_breach` is not directly necessary, as this
information can also be pulled from the Remote Settings during runtime.
Performance optimizations should be subordinate to the principle of data
spareness.

Therefore, this PR removes the `time_of_last_breach` column introduced
in mozilla#7127. Since this column is not yet used in Mobile, no data migration
is necessary.
@jo jo force-pushed the remove-breach-info branch from 402c728 to 080247f Compare February 26, 2026 15:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant