the following changes have been pushed to bugzilla.mozilla.org:
-  change firstname.lastname@example.org to email@example.com
-  Add whoami endpoint
-  security not being mailed when bugs change core-security-release state
-  add printable recovery 2fa codes
-  timestamp on flags should reference the latest updated activity, not the first
-  Update get_permissions.html.tmpl to reflect new self-canconfirm process
discuss these changes on mozilla.tools.bmo.