January 2026 - tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser-build][maint-15.0] Bug 41681: Keep public suffixes up-to-date on 140esr-based Tor Browser for Android.
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build Commits: 5d84e9bf by hackademix at 2026-01-12T11:45:22+01:00 Bug 41681: Keep public suffixes up-to-date on 140esr-based Tor Browser for Android. - - - - - 4 changed files: - projects/browser/build.android - projects/browser/config - tools/relprep.py - + tools/update_fenix_nightly_apk.py Changes: ===================================== projects/browser/build.android ===================================== @@ -29,6 +29,8 @@ unzip $rootdir/[% c('input_files_by_name/noscript') %] }) %] popd +unzip -o "$rootdir"/[% c('input_files_by_name/fenix-nightly-apk') %] assets/publicsuffixes + [%IF c("var/tor-browser") -%] tar -xaf "$rootdir/[% c('input_files_by_name/tor-expert-bundle') %]/tor-expert-bundle.tar.gz" tor/pluggable_transports/pt_config.json tar -xf "$rootdir/[% c('input_files_by_name/moat-settings') %]" ===================================== projects/browser/config ===================================== @@ -113,6 +113,10 @@ input_files: enable: '[% ! c("var/android") %]' - filename: dmg-root enable: '[% ! c("var/android") %]' + - name: fenix-nightly-apk + URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/01/2026-01-11-21-42-32-fenix… + enable: '[% c("var/android") %]' + sha256sum: c39056d428bf573aa9df1d4be11493064f867bc247bda1e8b7e1836d5aae7a31 - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.2.1984.xpi name: noscript sha256sum: 4579c70b69e3198ea0bf064f9912b9341696b9ad4ed177cb19994208872425fd ===================================== tools/relprep.py ===================================== @@ -18,7 +18,7 @@ import ruamel.yaml import fetch_changelogs from update_manual import update_manual - +from update_fenix_nightly_apk import update_fenix_nightly_apk logger = logging.getLogger(__name__) @@ -140,6 +140,7 @@ class ReleasePreparation: self.update_zlib() if self.android: self.update_zstd() + update_fenix_nightly_apk(self.base_path) self.update_go() self.update_manual() self.update_moat_settings() ===================================== tools/update_fenix_nightly_apk.py ===================================== @@ -0,0 +1,78 @@ +#!/usr/bin/env python3 +import hashlib +import re +from pathlib import Path + +import requests +import ruamel.yaml + + +def find_apk_url(): + base_url = "https://ftp.mozilla.org" + path = "/pub/fenix/nightly/" + while True: + url = f"{base_url}{path}" + r = requests.get(url) + r.raise_for_status() + match = re.match(f'.*"({re.escape(path)}.*)"', r.text, re.DOTALL) + if not match: + raise Exception(f"Could not find apk url from {url}!") + # we want to get the smallest apk, which is arm64-v8a + path = match.group(1).replace("-android/", "-android-arm64-v8a/") + if path.endswith(".apk"): + return f"{base_url}{path}" + + +def update_config(base_path, url): + yaml = ruamel.yaml.YAML() + yaml.indent(mapping=2, sequence=4, offset=2) + yaml.width = 150 + yaml.preserve_quotes = True + + config_path = base_path / "projects/browser/config" + config_name = "fenix-nightly-apk" + config = yaml.load(config_path) + + for input_file in config["input_files"]: + if input_file.get("name") == config_name: + apk_file_path = base_path / "out/browser" / url.split("/")[-1] + if url == input_file["URL"]: + if apk_file_path.exists(): + print(f"{apk_file_path} exists, checking hash...") + sha256 = hashlib.sha256() + with apk_file_path.open("rb") as f: + while chunk := f.read(16384): + sha256.update(chunk) + sha256sum = sha256.hexdigest() + if sha256sum == input_file["sha256sum"]: + print(f"{config_name}/URL is up-to-date, nothing to do.") + return False + sha256sum = download_apk(url, apk_file_path) + input_file["sha256sum"] = sha256sum + input_file["URL"] = url + with config_path.open("w") as f: + yaml.dump(config, f) + print(f"Updated input_files/{config_name} in {config_path}.") + return True + raise Exception(f"Cannot find input_files/{config_name} in {config_path}!") + + +def download_apk(url, dest): + print(f"Downloading {url} to {dest}....") + r = requests.get(url, stream=True) + r.raise_for_status() + sha256 = hashlib.sha256() + with dest.open("wb") as f: + for chunk in r.iter_content(chunk_size=8192): + f.write(chunk) + sha256.update(chunk) + return sha256.hexdigest() + + +def update_fenix_nightly_apk(base_path): + url = find_apk_url() + return update_config(base_path, url) + + +if __name__ == "__main__": + update_fenix_nightly_apk(Path(__file__).parent.parent) View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/5… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/5… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-140.7.0esr-15.0-1-build2
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed new tag mullvad-browser-140.7.0esr-15.0-1-build2 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-140.7.0esr-15.0-1-build2
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed new tag tor-browser-140.7.0esr-15.0-1-build2 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.7.0esr-15.0-1] Bug 1996718 - Check whether BrowserChild has not yet been destroyed in each...
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed to branch tor-browser-140.7.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: bd9b3c0d by Hiroyuki Ikezoe at 2026-01-08T23:37:39+01:00 Bug 1996718 - Check whether BrowserChild has not yet been destroyed in each function of ContentProcessController. r=botond Differential Revision: https://phabricator.services.mozilla.com/D270278 - - - - - 1 changed file: - gfx/layers/apz/util/ContentProcessController.cpp Changes: ===================================== gfx/layers/apz/util/ContentProcessController.cpp ===================================== @@ -32,7 +32,7 @@ void ContentProcessController::NotifyLayerTransforms( void ContentProcessController::RequestContentRepaint( const RepaintRequest& aRequest) { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { mBrowser->UpdateFrame(aRequest); } } @@ -56,7 +56,7 @@ void ContentProcessController::NotifyPinchGesture( void ContentProcessController::NotifyAPZStateChange( const ScrollableLayerGuid& aGuid, APZStateChange aChange, int aArg, Maybe<uint64_t> aInputBlockId) { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { mBrowser->NotifyAPZStateChange(aGuid.mScrollId, aChange, aArg, aInputBlockId); } @@ -64,13 +64,13 @@ void ContentProcessController::NotifyAPZStateChange( void ContentProcessController::NotifyMozMouseScrollEvent( const ScrollableLayerGuid::ViewID& aScrollId, const nsString& aEvent) { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { APZCCallbackHelper::NotifyMozMouseScrollEvent(aScrollId, aEvent); } } void ContentProcessController::NotifyFlushComplete() { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { RefPtr<PresShell> presShell = mBrowser->GetTopLevelPresShell(); APZCCallbackHelper::NotifyFlushComplete(presShell); } @@ -113,7 +113,7 @@ void ContentProcessController::DispatchToRepaintThread( } PresShell* ContentProcessController::GetTopLevelPresShell() const { - if (!mBrowser) { + if (!mBrowser || mBrowser->IsDestroyed()) { return nullptr; } return mBrowser->GetTopLevelPresShell(); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bd9b3c0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bd9b3c0… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-13.5.27-build1
by Pier Angelo Vendrame (＠pierov) 12 Jan '26

12 Jan '26

Pier Angelo Vendrame pushed new tag tbb-13.5.27-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-13.5] Bug 41659: Prepare Tor Browser 13.5.27.
by Pier Angelo Vendrame (＠pierov) 12 Jan '26

12 Jan '26

Pier Angelo Vendrame pushed to branch maint-13.5 at The Tor Project / Applications / tor-browser-build Commits: c6dd99c6 by Pier Angelo Vendrame at 2026-01-12T11:50:08+01:00 Bug 41659: Prepare Tor Browser 13.5.27. - - - - - 5 changed files: - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,16 @@ +Tor Browser 13.5.27 - January 13 2026 + * All Platforms + * Updated Firefox to 115.32.0esr + * Updated NoScript to 13.5.7.1984 + * Bug 44418: Update built-in obfs4 bridges [tor-browser] + * Bug 44433: Weird §:domain.com label in the Blocked Objects window [tor-browser] + * Bug 44471: Rebase Tor Browser legacy onto 115.32.0esr [tor-browser] + * Bug 44474: Backport Security Fixes from Firefox 147 [tor-browser] + * Bug 44482: (H1) Script execution in Safest mode via data URI navigation [tor-browser] + * Build System + * All Platforms + * Bug 41682: relprep.py should fail when a GitHub release is not found [tor-browser-build] + Tor Browser 13.5.26 - December 09 2025 * All Platforms * Updated Firefox to 115.31.0esr ===================================== projects/browser/config ===================================== @@ -103,9 +103,9 @@ input_files: enable: '[% ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.2.1984.xpi + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.7.1984.xpi name: noscript - sha256sum: 4579c70b69e3198ea0bf064f9912b9341696b9ad4ed177cb19994208872425fd + sha256sum: 502cba045cc36f813adce8931e13d7f8f3962f8ba855173f4ba19bc82a6cfb59 - URL: https://addons.mozilla.org/firefox/downloads/file/4359936/ublock_origin-1.6… name: ublock-origin sha256sum: e2cda9b2a1b0a7f6e5ef0da9f87f28df52f8560587ba2e51a3003121cfb81600 ===================================== projects/firefox/config ===================================== @@ -16,7 +16,7 @@ container: use_container: 1 var: - firefox_platform_version: 115.31.0 + firefox_platform_version: 115.32.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '13.5' browser_rebase: 1 ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: d366318349af0977ff23b492fa87e436e8672fdd + git_hash: fca1605a06b1a9b24cac7de6afb23aa896864e3e targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 45b67d3be52f79e8a4b361fd04ab12f342ab0016 + git_hash: 579dafc751edf73f98da66e548b87d85474104ea targets: nightly: git_hash: 'tor-browser' ===================================== rbm.conf ===================================== @@ -73,11 +73,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '13.5.26' + torbrowser_version: '13.5.27' torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2025/12/07 18:15:20' + browser_release_date: '2026/01/12 10:30:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_platforms: # is_android_release and is_desktop_release are used to quickly @@ -115,9 +115,9 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 13.5.26 - 13.5.25 - 13.5.24 - - 13.5.23 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-115.32.0esr-13.5-1-build2
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed new tag tor-browser-115.32.0esr-13.5-1-build2 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-15.0] Bug 41682: relprep.py: raise when a matching release is not found.
by Pier Angelo Vendrame (＠pierov) 12 Jan '26

12 Jan '26

Pier Angelo Vendrame pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build Commits: 81cd9db3 by Pier Angelo Vendrame at 2026-01-12T11:21:58+01:00 Bug 41682: relprep.py: raise when a matching release is not found. - - - - - 1 changed file: - tools/relprep.py Changes: ===================================== tools/relprep.py ===================================== @@ -79,6 +79,9 @@ def get_github_release(project, regex=""): return m.group(1) else: return tag + raise RuntimeError( + f"Could find a release for {project} that matches the regex." + ) class ReleasePreparation: View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/8… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-13.5] Bug 41682: relprep.py: raise when a matching release is not found.
by Pier Angelo Vendrame (＠pierov) 12 Jan '26

12 Jan '26

Pier Angelo Vendrame pushed to branch maint-13.5 at The Tor Project / Applications / tor-browser-build Commits: c246a9b5 by Pier Angelo Vendrame at 2026-01-12T11:21:20+01:00 Bug 41682: relprep.py: raise when a matching release is not found. - - - - - 1 changed file: - tools/relprep.py Changes: ===================================== tools/relprep.py ===================================== @@ -79,6 +79,9 @@ def get_github_release(project, regex=""): return m.group(1) else: return tag + raise RuntimeError( + f"Could find a release for {project} that matches the regex." + ) class ReleasePreparation: View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41682: relprep.py: raise when a matching release is not found.
by Pier Angelo Vendrame (＠pierov) 12 Jan '26

12 Jan '26

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 530b732c by Pier Angelo Vendrame at 2026-01-12T11:08:47+01:00 Bug 41682: relprep.py: raise when a matching release is not found. - - - - - 1 changed file: - tools/relprep.py Changes: ===================================== tools/relprep.py ===================================== @@ -79,6 +79,9 @@ def get_github_release(project, regex=""): return m.group(1) else: return tag + raise RuntimeError( + f"Could find a release for {project} that matches the regex." + ) class ReleasePreparation: View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/5… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/5… You're receiving this email because of your account on gitlab.torproject.org.

1 0