August 2025 - tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser-build][maint-13.5] Bug 41543: Update Ubuntu version used to run mmdebstrap to 24.04.3
by Pier Angelo Vendrame (＠pierov) 20 Aug '25

20 Aug '25

Pier Angelo Vendrame pushed to branch maint-13.5 at The Tor Project / Applications / tor-browser-build Commits: d15a7ca4 by NoisyCoil at 2025-08-20T14:27:02+02:00 Bug 41543: Update Ubuntu version used to run mmdebstrap to 24.04.3 - - - - - 1 changed file: - projects/mmdebstrap-image/config Changes: ===================================== projects/mmdebstrap-image/config ===================================== @@ -7,7 +7,7 @@ container: use_container: 1 var: - ubuntu_version: 22.04.3 + ubuntu_version: 24.04.3 pre: | #!/bin/sh @@ -68,4 +68,4 @@ input_files: name: mmdebstrap - URL: 'https://cdimage.ubuntu.com/ubuntu-base/releases/[% c("var/ubuntu_version") %]/release/ubuntu-base-[% c("var/ubuntu_version") %]-base-amd64.tar.gz' filename: 'container-image_ubuntu-base-[% c("var/ubuntu_version") %]-base-amd64.tar.gz' - sha256sum: ad33b7ae47b75c92c2e2fe21fd4612e15357e67679d8751d6ce892a475be24fe + sha256sum: 6bc2cde3930ad088b3bb46fa45279e96d25bc3810f209850ecbe4722711874f9 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-14.5] Bug 41543: Update Ubuntu version used to run mmdebstrap to 24.04.3
by Pier Angelo Vendrame (＠pierov) 20 Aug '25

20 Aug '25

Pier Angelo Vendrame pushed to branch maint-14.5 at The Tor Project / Applications / tor-browser-build Commits: aee4bf4a by NoisyCoil at 2025-08-19T18:07:27+02:00 Bug 41543: Update Ubuntu version used to run mmdebstrap to 24.04.3 - - - - - 1 changed file: - projects/mmdebstrap-image/config Changes: ===================================== projects/mmdebstrap-image/config ===================================== @@ -7,7 +7,7 @@ container: use_container: 1 var: - ubuntu_version: 22.04.3 + ubuntu_version: 24.04.3 pre: | #!/bin/sh @@ -68,4 +68,4 @@ input_files: name: mmdebstrap - URL: 'https://cdimage.ubuntu.com/ubuntu-base/releases/[% c("var/ubuntu_version") %]/release/ubuntu-base-[% c("var/ubuntu_version") %]-base-amd64.tar.gz' filename: 'container-image_ubuntu-base-[% c("var/ubuntu_version") %]-base-amd64.tar.gz' - sha256sum: ad33b7ae47b75c92c2e2fe21fd4612e15357e67679d8751d6ce892a475be24fe + sha256sum: 6bc2cde3930ad088b3bb46fa45279e96d25bc3810f209850ecbe4722711874f9 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.2.0esr-15.0-1] fixup! Firefox preference overrides.
by brizental (＠brizental) 20 Aug '25

20 Aug '25

brizental pushed to branch tor-browser-140.2.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: b66d9c97 by Beatriz Rizental at 2025-08-20T10:31:16+02:00 fixup! Firefox preference overrides. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -282,6 +282,8 @@ pref("privacy.trackingprotection.annotate_channels", false); pref("privacy.trackingprotection.cryptomining.enabled", false); pref("privacy.trackingprotection.fingerprinting.enabled", false); pref("privacy.trackingprotection.socialtracking.enabled", false); +// tor-browser#43986: Explicitly disable bounce tracking protection +pref("privacy.bounceTrackingProtection.mode", 0); pref("privacy.socialtracking.block_cookies.enabled", false); pref("privacy.annotate_channels.strict_list.enabled", false); // tor-browser#43178: for defense-in-depth, avoid remote overrides to FPP. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/b66d9c9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/b66d9c9… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.2.0esr-15.0-1] fixup! Firefox preference overrides.
by brizental (＠brizental) 20 Aug '25

20 Aug '25

brizental pushed to branch mullvad-browser-140.2.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 98035f31 by Beatriz Rizental at 2025-08-20T10:42:16+02:00 fixup! Firefox preference overrides. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -251,6 +251,9 @@ pref("security.xfocsp.errorReporting.enabled", false); // Added in tor-browser#41496 even though it shuld be already always disabled // since we disable MOZ_CRASHREPORTER. pref("breakpad.reportURL", "data:"); +// tor-browser#43985: Disable captcha detector code that is just used upstream +// for identifying captchas with the purpose of sending telemetry about it. +pref("captchadetection.actor.enabled", false); #ifdef XP_WIN // Defense-in-depth: ensure that the Windows default browser agent will // not ping Mozilla if it is somehow present (we omit it at build time). View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/980… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/980… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-140.2.0esr-15.0-1] fixup! Firefox preference overrides.
by brizental (＠brizental) 20 Aug '25

20 Aug '25

brizental pushed to branch base-browser-140.2.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 35774dc9 by Beatriz Rizental at 2025-08-20T10:37:12+02:00 fixup! Firefox preference overrides. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -251,6 +251,9 @@ pref("security.xfocsp.errorReporting.enabled", false); // Added in tor-browser#41496 even though it shuld be already always disabled // since we disable MOZ_CRASHREPORTER. pref("breakpad.reportURL", "data:"); +// tor-browser#43985: Disable captcha detector code that is just used upstream +// for identifying captchas with the purpose of sending telemetry about it. +pref("captchadetection.actor.enabled", false); #ifdef XP_WIN // Defense-in-depth: ensure that the Windows default browser agent will // not ping Mozilla if it is somehow present (we omit it at build time). View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/35774dc… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/35774dc… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.2.0esr-15.0-1] fixup! Firefox preference overrides.
by brizental (＠brizental) 20 Aug '25

20 Aug '25

brizental pushed to branch tor-browser-140.2.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: e98acd8f by Beatriz Rizental at 2025-08-20T10:10:37+02:00 fixup! Firefox preference overrides. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -251,6 +251,9 @@ pref("security.xfocsp.errorReporting.enabled", false); // Added in tor-browser#41496 even though it shuld be already always disabled // since we disable MOZ_CRASHREPORTER. pref("breakpad.reportURL", "data:"); +// tor-browser#43985: Disable captcha detector code that is just used upstream +// for identifying captchas with the purpose of sending telemetry about it. +pref("captchadetection.actor.enabled", false); #ifdef XP_WIN // Defense-in-depth: ensure that the Windows default browser agent will // not ping Mozilla if it is somehow present (we omit it at build time). View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/e98acd8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/e98acd8… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40551: Remove our patch for the Go compiler.
by Pier Angelo Vendrame (＠pierov) 19 Aug '25

19 Aug '25

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: b484354a by Pier Angelo Vendrame at 2025-08-19T18:44:06+02:00 Bug 40551: Remove our patch for the Go compiler. - - - - - 4 changed files: - − projects/go/0001-Use-fixed-go-build-tmp-directory.patch - projects/go/README.md - projects/go/build - projects/go/config Changes: ===================================== projects/go/0001-Use-fixed-go-build-tmp-directory.patch deleted ===================================== @@ -1,36 +0,0 @@ -From 2c1c98d6404284df744a194dd23bd3660f365387 Mon Sep 17 00:00:00 2001 -From: Georg Koppen <gk(a)torproject.org> -Date: Fri, 17 Apr 2020 10:24:23 +0000 -Subject: [PATCH] Use fixed go-build tmp directory - -Use fixed go-build tmp directory, when the directory does not exist, in -order to avoid some reproducibility issues where build directory gets -embedded in generated binaries. ---- - src/cmd/go/internal/work/action.go | 10 +++++++--- - 1 file changed, 7 insertions(+), 3 deletions(-) - -diff --git a/src/cmd/go/internal/work/action.go b/src/cmd/go/internal/work/action.go -index 8beb1345d0..dccf39c1c1 100644 ---- a/src/cmd/go/internal/work/action.go -+++ b/src/cmd/go/internal/work/action.go -@@ -279,9 +279,13 @@ func NewBuilder(workDir string) *Builder { - if !buildInitStarted { - panic("internal error: NewBuilder called before BuildInit") - } -- tmp, err := os.MkdirTemp(cfg.Getenv("GOTMPDIR"), "go-build") -- if err != nil { -- base.Fatalf("go: creating work dir: %v", err) -+ tmp := filepath.Join(cfg.Getenv("GOTMPDIR"), "go-build-workdir") -+ _, err := os.Stat(tmp) -+ if !os.IsNotExist(err) { -+ tmp, err = os.MkdirTemp(cfg.Getenv("GOTMPDIR"), "go-build") -+ if err != nil { -+ base.Fatalf("go: creating work dir: %v", err) -+ } - } - if !filepath.IsAbs(tmp) { - abs, err := filepath.Abs(tmp) --- -2.39.2 - ===================================== projects/go/README.md ===================================== @@ -7,7 +7,5 @@ We use it to build the various pluggable transports. We have another project (`go-bootstrap`) to provide it, and we make all targets use the `linux-x86_64` bootstrapper, since we don't need to cross-compile anything with it. -- On Android, we include a patch to fix a temporary directory whose path might - end up on binaries under some circumstances. - We create a compiler wrapper to include our custom arguments on macOS and on Windows because the `make.bash` script seems to lose our arguments. ===================================== projects/go/build ===================================== @@ -43,7 +43,6 @@ cd /var/tmp/dist/go/src chmod +x "$CC_FOR_TARGET" CGO_ENABLED=1 CC_FOR_TARGET="$CC_FOR_TARGET" CC= CFLAGS= LDFLAGS= ./make.bash [% ELSIF c("var/android") -%] - patch -p2 < $rootdir/0001-Use-fixed-go-build-tmp-directory.patch CGO_ENABLED=1 CC_FOR_TARGET=[% c("var/CC") %] CC= CFLAGS= LDFLAGS= ./make.bash [% END -%] ===================================== projects/go/config ===================================== @@ -92,5 +92,3 @@ input_files: name: go-bootstrap target_replace: '^.*browser-(?!testbuild).*': 'basebrowser-linux-x86_64' - - filename: 0001-Use-fixed-go-build-tmp-directory.patch - enable: '[% c("var/android") %]' View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] 7 commits: release: new version, 14.5.6 (linux-i686)
by ma1 (＠ma1) 19 Aug '25

19 Aug '25

ma1 pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 596b78fe by hackademix at 2025-08-19T19:29:29+02:00 release: new version, 14.5.6 (linux-i686) - - - - - e2740434 by hackademix at 2025-08-19T19:29:29+02:00 release: new version, 14.5.6 (linux-x86_64) - - - - - 77a900e4 by hackademix at 2025-08-19T19:29:29+02:00 release: new version, 14.5.6 (macos) - - - - - b87e16a5 by hackademix at 2025-08-19T19:29:30+02:00 release: new version, 14.5.6 (windows-i686) - - - - - 6fad930b by hackademix at 2025-08-19T19:29:30+02:00 release: new version, 14.5.6 (windows-x86_64) - - - - - 9e5b15f6 by hackademix at 2025-08-19T19:29:31+02:00 release: new version, 14.5.6 (android) - - - - - c913ee8f by hackademix at 2025-08-19T19:29:31+02:00 release: new version, 14.5.6 - - - - - 73 changed files: - update_3/release/download-android-aarch64.json - update_3/release/download-android-armv7.json - update_3/release/download-android-x86.json - update_3/release/download-android-x86_64.json - update_3/release/download-linux-i686.json - update_3/release/download-linux-x86_64.json - update_3/release/download-macos.json - update_3/release/download-windows-i686.json - update_3/release/download-windows-x86_64.json - update_3/release/downloads.json - update_3/release/linux-i686/.htaccess - − update_3/release/linux-i686/update-14.5.2-14.5.5+13.5.20-linux-i686.xml - − update_3/release/linux-i686/update-14.5.3-14.5.5+13.5.20-linux-i686.xml - + update_3/release/linux-i686/update-14.5.3-14.5.6+13.5.21-linux-i686.xml - − update_3/release/linux-i686/update-14.5.4-14.5.5+13.5.20-linux-i686.xml - + update_3/release/linux-i686/update-14.5.4-14.5.6+13.5.21-linux-i686.xml - − update_3/release/linux-i686/update-14.5.5+13.5.20-linux-i686.xml - + update_3/release/linux-i686/update-14.5.5-14.5.6+13.5.21-linux-i686.xml - + update_3/release/linux-i686/update-14.5.6+13.5.21-linux-i686.xml - update_3/release/linux-x86_64/.htaccess - − update_3/release/linux-x86_64/update-14.5.2-14.5.5+13.5.20-linux-x86_64.xml - − update_3/release/linux-x86_64/update-14.5.3-14.5.5+13.5.20-linux-x86_64.xml - + update_3/release/linux-x86_64/update-14.5.3-14.5.6+13.5.21-linux-x86_64.xml - − update_3/release/linux-x86_64/update-14.5.4-14.5.5+13.5.20-linux-x86_64.xml - + update_3/release/linux-x86_64/update-14.5.4-14.5.6+13.5.21-linux-x86_64.xml - − update_3/release/linux-x86_64/update-14.5.5+13.5.20-linux-x86_64.xml - + update_3/release/linux-x86_64/update-14.5.5-14.5.6+13.5.21-linux-x86_64.xml - + update_3/release/linux-x86_64/update-14.5.6+13.5.21-linux-x86_64.xml - update_3/release/macos/.htaccess - − update_3/release/macos/update-13.5.17-14.5.5+13.5.20-macos.xml - − update_3/release/macos/update-13.5.18-14.5.5+13.5.20-macos.xml - + update_3/release/macos/update-13.5.18-14.5.6+13.5.21-macos.xml - − update_3/release/macos/update-13.5.19-14.5.5+13.5.20-macos.xml - + update_3/release/macos/update-13.5.19-14.5.6+13.5.21-macos.xml - + update_3/release/macos/update-13.5.20-14.5.6+13.5.21-macos.xml - − update_3/release/macos/update-14.5.2-14.5.5+13.5.20-macos.xml - − update_3/release/macos/update-14.5.3-14.5.5+13.5.20-macos.xml - + update_3/release/macos/update-14.5.3-14.5.6+13.5.21-macos.xml - − update_3/release/macos/update-14.5.4-14.5.5+13.5.20-macos.xml - + update_3/release/macos/update-14.5.4-14.5.6+13.5.21-macos.xml - − update_3/release/macos/update-14.5.5+13.5.20-macos.xml - + update_3/release/macos/update-14.5.5-14.5.6+13.5.21-macos.xml - + update_3/release/macos/update-14.5.6+13.5.21-macos.xml - update_3/release/windows-i686/.htaccess - − update_3/release/windows-i686/update-13.5.17-14.5.5+13.5.20-windows-i686.xml - − update_3/release/windows-i686/update-13.5.18-14.5.5+13.5.20-windows-i686.xml - + update_3/release/windows-i686/update-13.5.18-14.5.6+13.5.21-windows-i686.xml - − update_3/release/windows-i686/update-13.5.19-14.5.5+13.5.20-windows-i686.xml - + update_3/release/windows-i686/update-13.5.19-14.5.6+13.5.21-windows-i686.xml - + update_3/release/windows-i686/update-13.5.20-14.5.6+13.5.21-windows-i686.xml - − update_3/release/windows-i686/update-14.5.2-14.5.5+13.5.20-windows-i686.xml - − update_3/release/windows-i686/update-14.5.3-14.5.5+13.5.20-windows-i686.xml - + update_3/release/windows-i686/update-14.5.3-14.5.6+13.5.21-windows-i686.xml - − update_3/release/windows-i686/update-14.5.4-14.5.5+13.5.20-windows-i686.xml - + update_3/release/windows-i686/update-14.5.4-14.5.6+13.5.21-windows-i686.xml - − update_3/release/windows-i686/update-14.5.5+13.5.20-windows-i686.xml - + update_3/release/windows-i686/update-14.5.5-14.5.6+13.5.21-windows-i686.xml - + update_3/release/windows-i686/update-14.5.6+13.5.21-windows-i686.xml - update_3/release/windows-x86_64/.htaccess - − update_3/release/windows-x86_64/update-13.5.17-14.5.5+13.5.20-windows-x86_64.xml - − update_3/release/windows-x86_64/update-13.5.18-14.5.5+13.5.20-windows-x86_64.xml - + update_3/release/windows-x86_64/update-13.5.18-14.5.6+13.5.21-windows-x86_64.xml - − update_3/release/windows-x86_64/update-13.5.19-14.5.5+13.5.20-windows-x86_64.xml - + update_3/release/windows-x86_64/update-13.5.19-14.5.6+13.5.21-windows-x86_64.xml - + update_3/release/windows-x86_64/update-13.5.20-14.5.6+13.5.21-windows-x86_64.xml - − update_3/release/windows-x86_64/update-14.5.2-14.5.5+13.5.20-windows-x86_64.xml - − update_3/release/windows-x86_64/update-14.5.3-14.5.5+13.5.20-windows-x86_64.xml - + update_3/release/windows-x86_64/update-14.5.3-14.5.6+13.5.21-windows-x86_64.xml - − update_3/release/windows-x86_64/update-14.5.4-14.5.5+13.5.20-windows-x86_64.xml - + update_3/release/windows-x86_64/update-14.5.4-14.5.6+13.5.21-windows-x86_64.xml - − update_3/release/windows-x86_64/update-14.5.5+13.5.20-windows-x86_64.xml - + update_3/release/windows-x86_64/update-14.5.5-14.5.6+13.5.21-windows-x86_64.xml - + update_3/release/windows-x86_64/update-14.5.6+13.5.21-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.2.0esr-15.0-1] fixup! BB 18905: Hide unwanted items from help menu
by morgan (＠morgan) 19 Aug '25

19 Aug '25

morgan pushed to branch mullvad-browser-140.2.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 518cccfe by Henry Wilkes at 2025-08-19T12:53:57+00:00 fixup! BB 18905: Hide unwanted items from help menu TB 43903: Hide "Report broken site" items. - - - - - 1 changed file: - browser/components/reportbrokensite/ReportBrokenSite.sys.mjs Changes: ===================================== browser/components/reportbrokensite/ReportBrokenSite.sys.mjs ===================================== @@ -452,9 +452,8 @@ export var ReportBrokenSite = new (class ReportBrokenSite { // Altering the disabled attribute on the command does not propagate // the change to the related menuitems (see bug 805653), so we change them all. const cmd = document.getElementById("cmd_reportBrokenSite"); - const allowedByPolicy = Services.policies.isAllowed( - "DisableFeedbackCommands" - ); + // Hide the items in base-browser. tor-browser#43903. + const allowedByPolicy = false; if (allowedByPolicy) { cmd.setAttribute("hidden", "false"); // see bug 805653 } else { View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/518… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/518… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-140.2.0esr-15.0-1] fixup! BB 18905: Hide unwanted items from help menu
by morgan (＠morgan) 19 Aug '25

19 Aug '25

morgan pushed to branch base-browser-140.2.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 836e8132 by Henry Wilkes at 2025-08-19T12:52:18+00:00 fixup! BB 18905: Hide unwanted items from help menu TB 43903: Hide "Report broken site" items. - - - - - 1 changed file: - browser/components/reportbrokensite/ReportBrokenSite.sys.mjs Changes: ===================================== browser/components/reportbrokensite/ReportBrokenSite.sys.mjs ===================================== @@ -452,9 +452,8 @@ export var ReportBrokenSite = new (class ReportBrokenSite { // Altering the disabled attribute on the command does not propagate // the change to the related menuitems (see bug 805653), so we change them all. const cmd = document.getElementById("cmd_reportBrokenSite"); - const allowedByPolicy = Services.policies.isAllowed( - "DisableFeedbackCommands" - ); + // Hide the items in base-browser. tor-browser#43903. + const allowedByPolicy = false; if (allowedByPolicy) { cmd.setAttribute("hidden", "false"); // see bug 805653 } else { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/836e813… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/836e813… You're receiving this email because of your account on gitlab.torproject.org.

1 0