April 2026 - tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser] Pushed new branch tor-browser-140.9.1esr-15.0-1
by Pier Angelo Vendrame (＠pierov) 04 Apr '26

04 Apr '26

Pier Angelo Vendrame pushed new branch tor-browser-140.9.1esr-15.0-1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser] Pushed new tag FIREFOX_140_9_1esr_BUILD1
by Pier Angelo Vendrame (＠pierov) 04 Apr '26

04 Apr '26

Pier Angelo Vendrame pushed new tag FIREFOX_140_9_1esr_BUILD1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/FIREFOX_1… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][main] add jwilde to list of taggers in relevant projects
by morgan (＠morgan) 02 Apr '26

02 Apr '26

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 00c62224 by Morgan at 2026-04-02T18:32:05+00:00 add jwilde to list of taggers in relevant projects - - - - - 4 changed files: - + keyring/jwilde.gpg - projects/application-services/config - projects/firefox/config - projects/geckoview/config Changes: ===================================== keyring/jwilde.gpg ===================================== Binary files /dev/null and b/keyring/jwilde.gpg differ ===================================== projects/application-services/config ===================================== @@ -9,6 +9,7 @@ gpg_keyring: - clairehurst.gpg - dan_b.gpg - henry.gpg + - jwilde.gpg - ma1.gpg - morgan.gpg - pierov.gpg ===================================== projects/firefox/config ===================================== @@ -10,6 +10,7 @@ gpg_keyring: - clairehurst.gpg - dan_b.gpg - henry.gpg + - jwilde.gpg - ma1.gpg - morgan.gpg - pierov.gpg ===================================== projects/geckoview/config ===================================== @@ -10,6 +10,7 @@ gpg_keyring: - clairehurst.gpg - dan_b.gpg - henry.gpg + - jwilde.gpg - ma1.gpg - morgan.gpg - pierov.gpg View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-149.0a1-16.0-2] fixup! TB 42891: Set the bundled search engine for Tor Browser.
by Pier Angelo Vendrame (＠pierov) 02 Apr '26

02 Apr '26

Pier Angelo Vendrame pushed to branch tor-browser-149.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: 7c57b7a0 by Pier Angelo Vendrame at 2026-04-02T17:34:01+02:00 fixup! TB 42891: Set the bundled search engine for Tor Browser. TB 44648: Drop some unwanted changes in SearchService. - - - - - 1 changed file: - toolkit/components/search/SearchService.sys.mjs Changes: ===================================== toolkit/components/search/SearchService.sys.mjs ===================================== @@ -2794,10 +2794,10 @@ export const SearchService = new (class SearchService { // called in test_remove_engine_notification_box.js async _fetchEngineSelectorEngines() { let searchEngineSelectorProperties = { - locale: "en-US", + locale: Services.locale.appLocaleAsBCP47, region: lazy.Region.home || "unknown", channel: lazy.SearchUtils.MODIFIED_APP_CHANNEL, - experiment: this._experimentPrefValue, + experiment: this.#lazyPrefs.experimentPrefValue, distroID: lazy.SearchUtils.distroID ?? "", javascriptEnabled: lazy.SecurityLevelPrefs.javascriptEnabled, }; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7c57b7a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7c57b7a… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][main] 7 commits: Bug 41759: Remove var/torbrowser_legacy_version from rbm.conf
by boklm (＠boklm) 02 Apr '26

02 Apr '26

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: f11c6a41 by Nicolas Vigier at 2026-04-02T16:02:11+02:00 Bug 41759: Remove var/torbrowser_legacy_version from rbm.conf And var/torbrowser_legacy_platform_version. - - - - - 8d52f71d by Nicolas Vigier at 2026-04-02T16:02:11+02:00 Bug 41759: Remove legacy channel from gitlab templates - - - - - 00735068 by Nicolas Vigier at 2026-04-02T16:02:11+02:00 Revert "Bug 41373: Add support for old from mar filenames (with `_ALL`)" This reverts commit 98191f1547eff98955ea53a294e458e68033f72f. - - - - - f8e22809 by Nicolas Vigier at 2026-04-02T16:02:11+02:00 Bug 41759: Remove legacy channel support from tools/signing/do-all-signing - - - - - 2b885eeb by Nicolas Vigier at 2026-04-02T16:02:11+02:00 Bug 41759: Remove legacy channel support from tools/browser - - - - - 3e7a89e1 by Nicolas Vigier at 2026-04-02T16:02:11+02:00 Bug 41759: Remove legacy channel support from projects/release/update_responses_config.yml - - - - - a9325827 by Nicolas Vigier at 2026-04-02T16:02:11+02:00 Bug 41476: Remove tools/signing/wrappers/sign-rcodesign And related files. This was used to sign 13.5 releases. - - - - - 14 changed files: - .gitlab/issue_templates/010 Backport.md - .gitlab/issue_templates/041 Release Prep - Tor Browser Stable.md - .gitlab/merge_request_templates/relprep.md - projects/release/update_responses_config.yml - rbm.conf - tools/browser/README.md - tools/browser/sign-tag - − tools/signing/alpha.entitlements.xml - tools/signing/do-all-signing - tools/signing/machines-setup/setup-signing-machine - − tools/signing/machines-setup/sudoers.d/sign-rcodesign - − tools/signing/release.entitlements.xml - − tools/signing/wrappers/sign-rcodesign - tools/update-responses/update_responses Changes: ===================================== .gitlab/issue_templates/010 Backport.md ===================================== @@ -20,7 +20,6 @@ This is an issue for tracking back-porting a patch-set (e.g. from main to maint- ### Target Channels - [ ] maint-15.0 -- [ ] maint-13.5 ## Notes ===================================== .gitlab/issue_templates/041 Release Prep - Tor Browser Stable.md ===================================== @@ -68,8 +68,6 @@ Tor Browser Stable is on the `maint-${TOR_BROWSER_MAJOR}.${TOR_BROWSER_MINOR}` b - [ ] ***(Desktop Only)*** `var/torbrowser_incremental_from`: updated to previous Desktop version - **NOTE**: We try to build incrementals for the previous 3 desktop versions - **⚠️ WARNING**: Really *actually* make sure this is the previous Desktop version or else the `make torbrowser-incrementals-*` step will fail - - [ ] `var/torbrowser_legacy_version`: updated to latest legacy Tor Browser version - - [ ] `var/torbrowser_legacy_platform_version`: updated to latest legacy Tor Browser ESR version - [ ] `projects/firefox/config` - [ ] `var/browser_build`: updated to match `tor-browser` tag - [ ] ***(Optional)*** `var/firefox_platform_version`: updated to latest `${ESR_VERSION}` if rebased @@ -211,9 +209,6 @@ Tor Browser Stable is on the `maint-${TOR_BROWSER_MAJOR}.${TOR_BROWSER_MINOR}` b Changelog: # paste changelog as quote here ``` -- [ ] Verify the associated legacy `maint-13.5` release has been signed and deployed - - **⚠️ WARNING**: Do not continue if the legacy channel has not been fully signed and published yet; it is needed for update-response generation! - - **NOTE** Stable releases without a corresponding legacy release may ignore this - [ ] On `${STAGING_SERVER}`, ensure updated: - **NOTE** Having a local git branch with `maint-15.0` as the upstream branch with these values saved means you only need to periodically `git pull --rebase` - [ ] `tor-browser-build` is on the right commit: `git tag -v tbb-${TOR_BROWSER_VERSION}-${TOR_BROWSER_BUILD_N} && git checkout tbb-${TOR_BROWSER_VERSION}-${TOR_BROWSER_BUILD_N}` ===================================== .gitlab/merge_request_templates/relprep.md ===================================== @@ -20,8 +20,6 @@ - [ ] `var/torbrowser_build`: should be `build1`, unless bumping a previous release preparation - [ ] `var/browser_release_date`: must not be in the future when we start building - [ ] `var/torbrowser_incremental_from` (not needed for Android-only releases) - - [ ] `var/torbrowser_legacy_version` (For Tor Browser 14.0.x stable releases only) - - [ ] `var/torbrowser_legacy_platform_version` (For Tor Browser 14.0.x stable releases only) - [ ] Tag updates: - [ ] [Firefox](https://gitlab.torproject.org/tpo/applications/tor-browser/-/tags) - [ ] Geckoview - should match Firefox ===================================== projects/release/update_responses_config.yml ===================================== @@ -32,9 +32,6 @@ build_targets: channels: [% c('var/channel') %]: - [% c("var/torbrowser_version") %] -[% IF c("var/tor-browser") && c("var/torbrowser_legacy_version") -%] - - [% c("var/torbrowser_legacy_version") %] -[% END -%] versions: [% c("var/torbrowser_version") %]: [% IF c("var/create_unsigned_incrementals") -%] @@ -70,25 +67,6 @@ versions: minSupportedOSVersion: 10.0 linux-x86_64: minSupportedInstructionSet: SSE2 -[% IF c("var/tor-browser") && c("var/torbrowser_legacy_version") -%] - [% c("var/torbrowser_legacy_version") %]: - mar_channel_id: [% c('var/mar_channel_id') %] - platformVersion: [% c('var/torbrowser_legacy_platform_version') %] - detailsURL: https://blog.torproject.org/new[% IF c("var/alpha") %]-alpha[% END %]-release-tor-browser-[% c("var/torbrowser_legacy_version") FILTER remove('\.') %] - # minSupportedOsVersion on macOS corresponds to the Darwin version ( https://en.wikipedia.org/wiki/Darwin_(operating_system) ) - macos: - # macOS v10.12.0 - minSupportedOSVersion: 16.0.0 - # minSupportedOsVersion on Windows corresponds to the operating system version ( https://docs.microsoft.com/en-us/windows/win32/sysinfo/operating-system-ver… ) - windows-i686: - # Windows 7 - minSupportedOSVersion: 6.1 - minSupportedInstructionSet: SSE2 - windows-x86_64: - # Windows 7 - minSupportedOSVersion: 6.1 - minSupportedInstructionSet: SSE2 -[% END -%] mar_compression: xz [% IF c("var/tor-browser") -%] tag: 'tbb-[% c("var/torbrowser_version") %]-[% c("var/torbrowser_build") %]' ===================================== rbm.conf ===================================== @@ -136,9 +136,6 @@ var: - 16.0a2 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' -# torbrowser_legacy_version: 13.5.22 -# torbrowser_legacy_platform_version: 115.28.0 - # By default, we sort the list of installed packages. This allows sharing # containers with identical list of packages, even if they are not listed # in the same order. In the cases where the installation order is ===================================== tools/browser/README.md ===================================== @@ -50,8 +50,7 @@ This script gpg signs a git tag associated with a particular browser commit in t usage: ./tools/browser/sign-tag.<browser> <channel> <build-number> [commit] browser one of basebrowser, torbrowser, or mullvadbrowser -channel the release channel of the commit to sign (e.g. alpha, stable, - or legacy) +channel the release channel of the commit to sign (e.g. alpha, or stable) build-number the build number portion of a browser build tag (e.g. build2) commit optional git commit, HEAD is used if argument not present ``` @@ -71,18 +70,6 @@ Invoke the relevant soft-link'd version of this script to sign a particular brow message: Tagging build1 for 128.4.0esr-based alpha ``` - - ##### `tor-browser-115.17.0esr-13.5-1-build2` - After checking out `tor-browser-115.17.0esr-13.5-1` branch in linked tor-browser.git - ```bash - ./sign-tag.torbrowser legacy build2 8e9e58fe400291f20be5712d057ad0b5fc4d70c1 - ``` - **output**: - ``` - Tag commit 8e9e58fe4002 in tor-browser-115.17.0esr-13.5-1 - tag: tor-browser-115.17.0esr-13.5-1-build2 - message: Tagging build2 for 115.17.0esr-based legacy - ``` - - ##### `mullvad-browser-128.4.0esr-14.0-1-build2` After checking out `mullvad-browser-128.4.0esr-14.0-1` branch in linked mullvad-browser.git ```bash ===================================== tools/browser/sign-tag ===================================== @@ -80,11 +80,10 @@ commit=$(git rev-parse --short ${3:-HEAD}) # channel validation if [[ "${project}" == "mullvad-browser" ]]; then repo="$project" - valid_channels=("rapid" "alpha" "stable") else repo="tor-browser" - valid_channels=("rapid" "alpha" "stable" "legacy") fi +valid_channels=("alpha" "stable") channel_valid=false for value in "${valid_channels[@]}"; do if [[ "${channel}" == "${value}" ]]; then ===================================== tools/signing/alpha.entitlements.xml deleted ===================================== @@ -1,26 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - -<plist version="1.0"> - <dict> -  - <key>com.apple.security.cs.allow-unsigned-executable-memory</key><true/> - -  - <key>com.apple.security.cs.disable-library-validation</key><true/> - -  - <key>com.apple.security.device.audio-input</key><true/> - -  - <key>com.apple.security.device.camera</key><true/> - -  - <key>com.apple.security.personal-information.location</key><true/> - -  - <key>com.apple.security.smartcard</key><true/> - </dict> -</plist> ===================================== tools/signing/do-all-signing ===================================== @@ -19,21 +19,10 @@ if [[ $1 = "-p" ]]; then shift fi -function is_legacy { - [[ "$tbb_version" = 13.* ]] -} - -if is_legacy; then - platform_android= - platform_desktop=1 - platform_macos=1 - platform_windows=1 -else - platform_android=$(rbm_showconf_boolean var/browser_platforms/signing_android) - platform_desktop=$(rbm_showconf_boolean var/browser_platforms/signing_desktop) - platform_macos=$(rbm_showconf_boolean var/browser_platforms/macos) - platform_windows=$(rbm_showconf_boolean var/browser_platforms/signing_windows) -fi +platform_android=$(rbm_showconf_boolean var/browser_platforms/signing_android) +platform_desktop=$(rbm_showconf_boolean var/browser_platforms/signing_desktop) +platform_macos=$(rbm_showconf_boolean var/browser_platforms/macos) +platform_windows=$(rbm_showconf_boolean var/browser_platforms/signing_windows) is_project torbrowser && nssdb=torbrowser-nssdb7 is_project mullvadbrowser && nssdb=mullvadbrowser-nssdb1 @@ -293,6 +282,6 @@ do_step download-unsigned-sha256sums-gpg-signatures-from-people-tpo do_step sync-local-to-staticiforme do_step sync-scripts-to-staticiforme do_step staticiforme-prepare-cdn-dist-upload -[ "$SIGNING_PROJECTNAME" != 'torvpn' ] && ! is_legacy && \ +[ "$SIGNING_PROJECTNAME" != 'torvpn' ] && \ do_step upload-update_responses-to-staticiforme do_step finished-signing-clean-linux-signer ===================================== tools/signing/machines-setup/setup-signing-machine ===================================== @@ -41,6 +41,12 @@ function authorized_keys { chmod 600 "$authkeysfile" } +function remove_sudoers_file { + # Remove a sudoers file that previously existed but is no longer used + sfile="$1" + rm -f "/etc/sudoers.d/$sfile" +} + function sudoers_file { sfile="$1" cp "$script_dir/sudoers.d/$sfile" "/etc/sudoers.d/$sfile" @@ -91,7 +97,8 @@ sudoers_file sign-mar sudoers_file sign-exe sudoers_file sign-apk sudoers_file sign-aab -sudoers_file sign-rcodesign +# sign-rcodesign is removed - tor-browser-build#41476 +remove_sudoers_file sign-rcodesign sudoers_file sign-rcodesign-128 sudoers_file sign-rcodesign-146 sudoers_file set-date ===================================== tools/signing/machines-setup/sudoers.d/sign-rcodesign deleted ===================================== @@ -1,2 +0,0 @@ -Defaults>signing-macos env_keep += "SIGNING_PROJECTNAME tbb_version_type RCODESIGN_PW" -%signing ALL = (signing-macos) NOPASSWD: /signing/tor-browser-build/tools/signing/wrappers/sign-rcodesign ===================================== tools/signing/release.entitlements.xml deleted ===================================== @@ -1,26 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - -<plist version="1.0"> - <dict> -  - <key>com.apple.security.cs.allow-unsigned-executable-memory</key><true/> - -  - <key>com.apple.security.cs.disable-library-validation</key><true/> - -  - <key>com.apple.security.device.audio-input</key><true/> - -  - <key>com.apple.security.device.camera</key><true/> - -  - <key>com.apple.security.personal-information.location</key><true/> - -  - <key>com.apple.security.smartcard</key><true/> - </dict> -</plist> ===================================== tools/signing/wrappers/sign-rcodesign deleted ===================================== @@ -1,106 +0,0 @@ -#!/bin/bash -set -e - -function exit_error { - for msg in "$@" - do - echo "$msg" >&2 - done - exit 1 -} - -test $# -eq 2 || exit_error "Wrong number of arguments" -dmg_file="$1" -display_name="$2" - -output_file="/home/signing-macos/last-signed-$display_name.tar.zst" -rm -f "$output_file" - -rcodesign_signing_p12_file=/home/signing-macos/keys/key-1.p12 -test -f "$rcodesign_signing_p12_file" || exit_error "$rcodesign_signing_p12_file is missing" - -tmpdir=$(mktemp -d) -trap "rm -Rf $tmpdir" EXIT -cd "$tmpdir" -7z x "$dmg_file" - -# Fix permission on files: -# https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/2… -# FIXME: Maybe we should extract the .mar file instead of the .dmg to -# preserve permissions -chmod ugo+x "$display_name/$display_name.app/Contents/MacOS"/* \ - "$display_name/$display_name.app/Contents/MacOS/updater.app/Contents/MacOS"/* \ - "$display_name/$display_name.app/Contents/MacOS/plugin-container.app/Contents/MacOS"/* -test -d "$display_name/$display_name.app/Contents/MacOS/Tor" && \ - chmod -R ugo+x "$display_name/$display_name.app/Contents/MacOS/Tor" - -pwdir=/run/lock/rcodesign-pw -trap "rm -Rf $pwdir" EXIT -rm -Rf "$pwdir" -mkdir "$pwdir" -chmod 700 "$pwdir" -cat > "$pwdir/rcodesign-pw-2" << EOF -$RCODESIGN_PW -EOF -tr -d '\n' < "$pwdir/rcodesign-pw-2" > "$pwdir/rcodesign-pw" -rm "$pwdir/rcodesign-pw-2" - -rcodesign_opts=" - --code-signature-flags runtime - --timestamp-url http://timestamp.apple.com:8080/ts01 - --p12-file $rcodesign_signing_p12_file - --p12-password-file $pwdir/rcodesign-pw - " - -# sign updater.app and plugin-container.app separately -echo '**** Signing updater.app ****' -/signing/rcodesign/rcodesign sign \ - $rcodesign_opts \ - --info-plist-path "$display_name/$display_name.app/Contents/MacOS/updater.app/Contents/Info.plist" \ - -- \ - "$display_name/$display_name.app/Contents/MacOS/updater.app" -echo '**** Signing plugin-container.app ****' -/signing/rcodesign/rcodesign sign \ - $rcodesign_opts \ - --entitlements-xml-path /signing/tor-browser-build/tools/signing/${tbb_version_type}.entitlements.xml \ - -- \ - "$display_name/$display_name.app/Contents/MacOS/plugin-container.app" - -# Setting binary-identifier on some files, to avoid signature errors. See: -# https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/2… -pushd "$display_name/$display_name.app/Contents/MacOS/" -for lib in *.dylib -do - binident=$(echo $lib | sed 's/\.dylib$//') - binident="--binary-identifier Contents/MacOS/$lib:$binident" - echo "Adding option $binident" - rcodesign_opts="$rcodesign_opts $binident" -done -popd - -if test -d "$display_name/$display_name.app/Contents/MacOS/Tor/PluggableTransports/" -then - pushd "$display_name/$display_name.app/Contents/MacOS/Tor/PluggableTransports/" - for file in echo * - do - binident="--binary-identifier Contents/MacOS/Tor/PluggableTransports/$file:$file" - echo "Adding option $binident" - rcodesign_opts="$rcodesign_opts $binident" - done - popd -fi - -echo "**** Signing main bundle ($display_name.app) ****" -# We use `--exclude '**'` to avoid re-signing nested bundles -/signing/rcodesign/rcodesign sign \ - $rcodesign_opts \ - --entitlements-xml-path /signing/tor-browser-build/tools/signing/${tbb_version_type}.entitlements.xml \ - --exclude '**' \ - -- \ - "$display_name/$display_name.app" - -rm -f "$pwdir/rcodesign-pw" -rmdir "$pwdir" -tar -C "$display_name" -caf "$output_file" "$display_name.app" -cd - -rm -Rf "$tmpdir" ===================================== tools/update-responses/update_responses ===================================== @@ -87,33 +87,6 @@ sub get_sha512_hex_of_file { return $sha->hexdigest; } -# With release 15.0 _ALL is being removed from mar file names. -# However we need to be able to generate incrementals from versions -# using the old filenames. As a workaround, if the old filename is -# found we create a symlink to the new file name. -# The symlinks are used in `create_incremental_mar` and `get_buildinfos`, -# where supporting both file names would complexify things. The symlinks -# are ignored in `get_version_files` where the regexp used support both -# old and new filenames. -# We can remove this once we don't need to generate incrementals from -# versions with the old file names. -sub symlink_ALL { - my ($config, $version) = @_; - my $vdir = version_dir($config, $version); - opendir(my $d, $vdir) or exit_error "Error opening directory $vdir"; - foreach my $file (readdir $d) { - next unless -f "$vdir/$file"; - if ($file =~ m/^(.+)_ALL\.mar$/) { - next if -f "$vdir/$1.mar"; - symlink $file, "$vdir/$1.mar"; - } - if ($file =~ m/^(.+)_ALL\.incremental\.mar$/) { - next if -f "$vdir/$1.incremental.mar"; - symlink $file, "$vdir/$1.incremental.mar"; - } - } -} - sub get_version_files { my ($config, $version) = @_; return if $config->{versions}{$version}{files}; @@ -124,13 +97,8 @@ sub get_version_files { opendir(my $d, $vdir) or exit_error "Error opening directory $vdir"; foreach my $file (readdir $d) { next unless -f "$vdir/$file"; - # Ignore the symlinks created by `symlink_ALL` to avoid adding the files - # twice. - # We can remove this line once we don't need to support the legacy channel with - # with the old file names. - next if -l "$vdir/$file"; if ($file !~ m/incremental\.mar$/ && - $file =~ m/^$appname-(.+)-${version}(_ALL)?\.mar$/) { + $file =~ m/^$appname-(.+)-${version}\.mar$/) { my $os = $1; $files->{$os}{complete} = { type => 'complete', @@ -143,7 +111,7 @@ sub get_version_files { }; next; } - if ($file =~ m/^$appname-(.+)--(.+)-${version}(_ALL)?\.incremental\.mar$/) { + if ($file =~ m/^$appname-(.+)--(.+)-${version}\.incremental\.mar$/) { my ($os, $from_version) = ($1, $2); $files->{$os}{partial}{$from_version} = { type => 'partial', @@ -320,7 +288,6 @@ sub create_incremental_mars_for_version { my $v = $config->{versions}{$version}; foreach my $from_version (@{$v->{incremental_from}}) { $config->{versions}{$from_version} //= {}; - symlink_ALL($config, $from_version); get_version_files($config, $from_version); my $from_v = $config->{versions}{$from_version}; foreach my $os (keys %{$v->{files}}) { @@ -430,7 +397,6 @@ sub write_responses { my (%oses, %from_versions); foreach my $version (@$versions) { get_version_files($config, $version); - symlink_ALL($config, $version); get_buildinfos($config, $version); my $files = $config->{versions}{$version}{files}; foreach my $os (keys %$files) { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-149.0a1-16.0-2] fixup! Add CI for Base Browser
by Pier Angelo Vendrame (＠pierov) 02 Apr '26

02 Apr '26

Pier Angelo Vendrame pushed to branch mullvad-browser-149.0a1-16.0-2 at The Tor Project / Applications / Mullvad Browser Commits: dc01c45f by Beatriz Rizental at 2026-04-02T13:15:36+02:00 fixup! Add CI for Base Browser Bug 44402: Move mozilla/no-browser-refs-in-toolkit back to an error - - - - - 1 changed file: - eslint.config.mjs Changes: ===================================== eslint.config.mjs ===================================== @@ -434,7 +434,7 @@ let config = [ ignores: ["toolkit/**/test/**", "toolkit/**/tests/**"], plugins: { mozilla }, rules: { - "mozilla/no-browser-refs-in-toolkit": "warn", + "mozilla/no-browser-refs-in-toolkit": "error", }, }, { View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/dc0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/dc0… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-149.0a1-16.0-2] 2 commits: fixup! TB 27476: Implement about:torconnect captive portal within Tor Browser
by Pier Angelo Vendrame (＠pierov) 02 Apr '26

02 Apr '26

Pier Angelo Vendrame pushed to branch tor-browser-149.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: b4debcd4 by Pier Angelo Vendrame at 2026-04-02T12:33:13+02:00 fixup! TB 27476: Implement about:torconnect captive portal within Tor Browser TB 44828: Change the registry for about:torconnect's actor. - - - - - 61e5d36f by Beatriz Rizental at 2026-04-02T12:33:24+02:00 fixup! Add CI for Base Browser Bug 44402: Move mozilla/no-browser-refs-in-toolkit back to an error - - - - - 3 changed files: - browser/components/DesktopActorRegistry.sys.mjs - eslint.config.mjs - toolkit/modules/ActorManagerParent.sys.mjs Changes: ===================================== browser/components/DesktopActorRegistry.sys.mjs ===================================== @@ -822,6 +822,20 @@ let JSWINDOWACTORS = { messageManagerGroups: ["browsers"], }, + TorConnect: { + parent: { + esModuleURI: "resource:///actors/TorConnectParent.sys.mjs", + }, + child: { + esModuleURI: "resource:///actors/TorConnectChild.sys.mjs", + events: { + DOMWindowCreated: {}, + }, + }, + + matches: ["about:torconnect", "about:torconnect?*"], + }, + UITour: { parent: { esModuleURI: "moz-src:///browser/components/uitour/UITourParent.sys.mjs", ===================================== eslint.config.mjs ===================================== @@ -434,7 +434,7 @@ let config = [ ignores: ["toolkit/**/test/**", "toolkit/**/tests/**"], plugins: { mozilla }, rules: { - "mozilla/no-browser-refs-in-toolkit": "warn", + "mozilla/no-browser-refs-in-toolkit": "error", }, }, { ===================================== toolkit/modules/ActorManagerParent.sys.mjs ===================================== @@ -546,20 +546,6 @@ let JSWINDOWACTORS = { allFrames: true, }, - TorConnect: { - parent: { - esModuleURI: "resource:///actors/TorConnectParent.sys.mjs", - }, - child: { - esModuleURI: "resource:///actors/TorConnectChild.sys.mjs", - events: { - DOMWindowCreated: {}, - }, - }, - - matches: ["about:torconnect", "about:torconnect?*"], - }, - // This actor is available for all pages that one can // view the source of, however it won't be created until a // request to view the source is made via the message View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/7bb908… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/7bb908… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41770: Updated Go to 1.26.1.
by Pier Angelo Vendrame (＠pierov) 02 Apr '26

02 Apr '26

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: f1625549 by Pier Angelo Vendrame at 2026-04-01T18:11:38+02:00 Bug 41770: Updated Go to 1.26.1. - - - - - 3 changed files: - projects/go-bootstrap/README.md - projects/go-bootstrap/config - projects/go/config Changes: ===================================== projects/go-bootstrap/README.md ===================================== @@ -10,6 +10,10 @@ However, starting with Go 1.21, So, we checked that the Go 1.23.6 binaries we produced with our old procedure at 80f16f97e7c2973e9aa4458606c9afd2c63c2d60 matched the official binaries. +Then, we checked that the Go 1.25.8 binaries produced in tor-browser-build at +7760e4679974e64d1087a98ec34324faf02bcf35 matched the official binaries, except +for the known `go.env`, which we are changing in the build script. + ## How to update 1. In `projects/go/config`, update version to the version we want to be the new ===================================== projects/go-bootstrap/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 # Make sure we can reproduce the official binaries before updating. # Check README.md for more information before updating this version. -version: 1.23.6 +version: 1.25.8 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 0 @@ -11,4 +11,4 @@ input_files: name: go # Make sure we can reproduce the official binaries before updating. # Check README.md for more information before updating this hash. - sha256sum: 9379441ea310de000f33a4dc767bd966e72ab2826270e038e78b2c53c2e7802d + sha256sum: ceb5e041bbc3893846bd1614d76cb4681c91dadee579426cf21a63f2d7e03be6 ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.25.8' +version: '1.26.1' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: e988d4a2446ac7fe3f6daa089a58e9936a52a381355adec1c8983230a8d6c59e + source_sha256: 3172293d04b209dc1144698e7ba13f0477f6ba8c5ffd0be66c20fdbc9785dfbb no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-149.0a1-16.0-2] fixup! TB 41089: Add tor-browser build scripts + Makefile to tor-browser
by brizental (＠brizental) 01 Apr '26

01 Apr '26

brizental pushed to branch tor-browser-149.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: 7bb908ff by Beatriz Rizental at 2026-04-01T14:19:31-03:00 fixup! TB 41089: Add tor-browser build scripts + Makefile to tor-browser Bug 44359: Delete deprecated android build tools - - - - - 10 changed files: - − tools/geckoview/.gitignore - − tools/geckoview/Makefile - − tools/geckoview/android-env-linux-template.sh - − tools/geckoview/android-env-macos-template.sh - − tools/geckoview/build-fenix.sh - − tools/geckoview/build-geckoview.sh - − tools/geckoview/clobber.sh - − tools/geckoview/config.sh - − tools/geckoview/install-fenix.sh - − tools/geckoview/jslint.sh Changes: ===================================== tools/geckoview/.gitignore deleted ===================================== @@ -1 +0,0 @@ -android-env.sh ===================================== tools/geckoview/Makefile deleted ===================================== @@ -1,60 +0,0 @@ -.DEFAULT_GOAL := all - -# one of armv7 aarch64 x86 x86_64 -ARCH := aarch64 -ANDROID_ARCH := $(ARCH) -ifeq ($(ANDROID_ARCH),aarch64) - ANDROID_ARCH := arm64-v8a -endif -ifeq ($(ANDROID_ARCH),armv7) - ANDROID_ARCH := armeabi-v7a -endif - -OS="${shell uname}" - -# https://stackoverflow.com/questions/18136918/how-to-get-current-relative-di… -mkfile_path := "$(shell dirname $(realpath $(firstword $(MAKEFILE_LIST))))" - -DEV_ROOT = "$(mkfile_path)/../.." - -clobber: env - ./clobber.sh $(DEV_ROOT) $(ARCH) - -config: env - ./config.sh $(DEV_ROOT) $(ARCH) - -geckoview: env - ./build-geckoview.sh $(DEV_ROOT) $(ARCH) - -# These targets do not depend on GeckoView so that you can build only Fenix if -# you are not changing GV code. -fenix-release: env - ./build-fenix.sh $(DEV_ROOT) $(ARCH) Release -fenix-beta: env - ./build-fenix.sh $(DEV_ROOT) $(ARCH) Beta -fenix-nightly: env - ./build-fenix.sh $(DEV_ROOT) $(ARCH) Nightly -fenix-debug: env - ./build-fenix.sh $(DEV_ROOT) $(ARCH) Debug - -env: - test -e android-env.sh || { echo "copy android-env-...-template.sh to android-env.sh and edit appropriatly"; exit 1; } - -install-release: - ./install-fenix.sh $(DEV_ROOT) $(ARCH) $(ANDROID_ARCH) release -install-beta: - ./install-fenix.sh $(DEV_ROOT) $(ARCH) $(ANDROID_ARCH) beta -install-nightly: - ./install-fenix.sh $(DEV_ROOT) $(ARCH) $(ANDROID_ARCH) nightly -install-debug: - ./install-fenix.sh $(DEV_ROOT) $(ARCH) $(ANDROID_ARCH) debug - -all: env geckoview fenix-nightly install-nightly -all-release: env geckoview fenix-release install-release -all-beta: env geckoview fenix-beta install-beta - -jslint: - ./jslint.sh $(DEV_ROOT) $(JS) - -clean: - rm -rf $(BUILD_OUTPUT) ===================================== tools/geckoview/android-env-linux-template.sh deleted ===================================== @@ -1,6 +0,0 @@ -export JAVA_HOME=/usr/lib/jvm/java-17-openjdk-amd64 -export ANDROID_HOME=$HOME/.mozbuild/android-sdk-linux/ # or $HOME/Android/Sdk/ # Or .../android-toolchain/android-sdk-linux if you extract android-toolchain from tor-browser-build -export ANDROID_NDK_HOME=$HOME/.mozbuild/android-ndk-r28b/ # for 140esr -export GRADLE_HOME=$HOME/.mozbuild/gradle-8.14.3 # not included by default, need to download from https://gradle.org/releases/ and put the extracted directory "gradle-8.14.3" into ~/.mozbuild/ -export LOCAL_DEV_BUILD=1 -export PATH=/FULL/PATH/TO/tor-browser-build/out/clang/clang-16.x.y-arm/bin/:$PATH # prepend our newly built and assembled clang to the path so it gets used to build geckoview ===================================== tools/geckoview/android-env-macos-template.sh deleted ===================================== @@ -1,6 +0,0 @@ -export JAVA_HOME=/opt/homebrew/opt/openjdk(a)17/libexec/openjdk.jdk/Contents/Home # for arm64. Or JAVA_HOME=/usr/local/opt/openjdk(a)17/libexec/openjdk.jdk/Contents/Home for x86_64. -export ANDROID_HOME=$HOME/.mozbuild/android-sdk-macosx -export ANDROID_NDK_HOME=$HOME/.mozbuild/android-ndk-r28b # for ESR140 -export GRADLE_HOME=$HOME/.mozbuild/gradle-8.14.3 # not included by default, need to download from https://gradle.org/releases/ and put the extracted directory "gradle-8.14.3" into ~/.mozbuild/ -export LOCAL_DEV_BUILD=1 -export PATH=$ANDROID_NDK_HOME/toolchains/llvm/prebuilt/darwin-x86_64/bin:$PATH # prepend mozbuilds NDK to the PATH so it's clang gets used to build geckoview ===================================== tools/geckoview/build-fenix.sh deleted ===================================== @@ -1,13 +0,0 @@ -#!/bin/bash -set -e -DEV_ROOT=$1 -ARCH=$2 -VARIANT=$3 - -source android-env.sh - -cd $DEV_ROOT -OBJ_DIR=$(MOZCONFIG=mozconfig-android-$ARCH ./mach environment --format json --verbose | jq -r .topobjdir) -cd mobile/android/fenix -MOZCONFIG=mozconfig-android-$ARCH $GRADLE_HOME/bin/gradle --no-daemon -Dorg.gradle.jvmargs=-Xmx20g -PdisableOptimization assemble$VARIANT -tools/tba-sign-devbuilds.sh "$OBJ_DIR" ===================================== tools/geckoview/build-geckoview.sh deleted ===================================== @@ -1,9 +0,0 @@ -#!/bin/bash -set -e -DEV_ROOT=$1 -ARCH=$2 - -source android-env.sh - -cd $DEV_ROOT -MOZCONFIG=mozconfig-android-$ARCH ./mach build ===================================== tools/geckoview/clobber.sh deleted ===================================== @@ -1,9 +0,0 @@ -#!/bin/bash -set -e -DEV_ROOT=$1 -ARCH=$2 - -source android-env.sh - -cd $DEV_ROOT -MOZCONFIG=mozconfig-android-$ARCH ./mach clobber ===================================== tools/geckoview/config.sh deleted ===================================== @@ -1,9 +0,0 @@ -#!/bin/bash -set -e -DEV_ROOT=$1 -ARCH=$2 - -source android-env.sh - -cd $DEV_ROOT -MOZCONFIG=mozconfig-android-$ARCH ./mach configure --without-wasm-sandboxed-libraries ===================================== tools/geckoview/install-fenix.sh deleted ===================================== @@ -1,16 +0,0 @@ -#!/bin/bash -set -e -DEV_ROOT=$1 -ARCH=$2 -ANDROID_ARCH=$3 -VARIANT=$4 - -cd $DEV_ROOT -OBJ_DIR=$(MOZCONFIG=mozconfig-android-$ARCH ./mach environment --format json --verbose | jq -r .topobjdir) - -if [ $VARIANT == "debug" ] -then - adb install "$OBJ_DIR/gradle/build/mobile/android/fenix/app/outputs/apk/fenix/$VARIANT/app-fenix-$ANDROID_ARCH-$VARIANT.apk" -else - adb install "$OBJ_DIR/gradle/build/mobile/android/fenix/app/outputs/apk/fenix/$VARIANT/app-fenix-$ANDROID_ARCH-$VARIANT-signed.apk" -fi ===================================== tools/geckoview/jslint.sh deleted ===================================== @@ -1,9 +0,0 @@ -#!/bin/bash -set -e -DEV_ROOT=$1 -JS_FILE=$2 - -source android-env.sh - -cd $DEV_ROOT -./mach lint -l eslint --fix $JS_FILE View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7bb908f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7bb908f… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-update-responses][main] 6 commits: alpha: new version, 16.0a5 (linux-aarch64)
by ma1 (＠ma1) 01 Apr '26

01 Apr '26

ma1 pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 271bfb66 by hackademix at 2026-04-01T19:07:14+02:00 alpha: new version, 16.0a5 (linux-aarch64) - - - - - d1b83116 by hackademix at 2026-04-01T19:07:14+02:00 alpha: new version, 16.0a5 (linux-x86_64) - - - - - 659dd57a by hackademix at 2026-04-01T19:07:14+02:00 alpha: new version, 16.0a5 (macos) - - - - - a9e58c80 by hackademix at 2026-04-01T19:07:14+02:00 alpha: new version, 16.0a5 (windows-i686) - - - - - d114f4e6 by hackademix at 2026-04-01T19:07:15+02:00 alpha: new version, 16.0a5 (windows-x86_64) - - - - - 63bafc60 by hackademix at 2026-04-01T19:07:15+02:00 alpha: new version, 16.0a5 - - - - - 34 changed files: - update_3/alpha/download-android-aarch64.json - update_3/alpha/download-android-armv7.json - update_3/alpha/download-android-x86_64.json - update_3/alpha/download-linux-aarch64.json - update_3/alpha/download-linux-x86_64.json - update_3/alpha/download-macos.json - update_3/alpha/download-windows-i686.json - update_3/alpha/download-windows-x86_64.json - update_3/alpha/downloads.json - update_3/alpha/linux-aarch64/.htaccess - update_3/alpha/linux-aarch64/update-16.0a1-16.0a4-linux-aarch64.xml → update_3/alpha/linux-aarch64/update-16.0a2-16.0a5-linux-aarch64.xml - update_3/alpha/linux-aarch64/update-16.0a2-16.0a4-linux-aarch64.xml → update_3/alpha/linux-aarch64/update-16.0a3-16.0a5-linux-aarch64.xml - update_3/alpha/linux-aarch64/update-16.0a3-16.0a4-linux-aarch64.xml → update_3/alpha/linux-aarch64/update-16.0a4-16.0a5-linux-aarch64.xml - update_3/alpha/linux-aarch64/update-16.0a4-linux-aarch64.xml → update_3/alpha/linux-aarch64/update-16.0a5-linux-aarch64.xml - update_3/alpha/linux-x86_64/.htaccess - update_3/alpha/linux-x86_64/update-16.0a1-16.0a4-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-16.0a2-16.0a5-linux-x86_64.xml - update_3/alpha/linux-x86_64/update-16.0a2-16.0a4-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-16.0a3-16.0a5-linux-x86_64.xml - update_3/alpha/linux-x86_64/update-16.0a3-16.0a4-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-16.0a4-16.0a5-linux-x86_64.xml - update_3/alpha/linux-x86_64/update-16.0a4-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-16.0a5-linux-x86_64.xml - update_3/alpha/macos/.htaccess - update_3/alpha/macos/update-16.0a1-16.0a4-macos.xml → update_3/alpha/macos/update-16.0a2-16.0a5-macos.xml - update_3/alpha/macos/update-16.0a2-16.0a4-macos.xml → update_3/alpha/macos/update-16.0a3-16.0a5-macos.xml - update_3/alpha/macos/update-16.0a3-16.0a4-macos.xml → update_3/alpha/macos/update-16.0a4-16.0a5-macos.xml - update_3/alpha/macos/update-16.0a4-macos.xml → update_3/alpha/macos/update-16.0a5-macos.xml - update_3/alpha/windows-i686/.htaccess - update_3/alpha/windows-i686/update-16.0a1-16.0a4-windows-i686.xml → update_3/alpha/windows-i686/update-16.0a2-16.0a5-windows-i686.xml - update_3/alpha/windows-i686/update-16.0a2-16.0a4-windows-i686.xml → update_3/alpha/windows-i686/update-16.0a3-16.0a5-windows-i686.xml - update_3/alpha/windows-i686/update-16.0a3-16.0a4-windows-i686.xml → update_3/alpha/windows-i686/update-16.0a4-16.0a5-windows-i686.xml - update_3/alpha/windows-i686/update-16.0a4-windows-i686.xml → update_3/alpha/windows-i686/update-16.0a5-windows-i686.xml - update_3/alpha/windows-x86_64/.htaccess - update_3/alpha/windows-x86_64/update-16.0a1-16.0a4-windows-x86_64.xml → update_3/alpha/windows-x86_64/update-16.0a2-16.0a5-windows-x86_64.xml - update_3/alpha/windows-x86_64/update-16.0a2-16.0a4-windows-x86_64.xml → update_3/alpha/windows-x86_64/update-16.0a3-16.0a5-windows-x86_64.xml - update_3/alpha/windows-x86_64/update-16.0a3-16.0a4-windows-x86_64.xml → update_3/alpha/windows-x86_64/update-16.0a4-16.0a5-windows-x86_64.xml - update_3/alpha/windows-x86_64/update-16.0a4-windows-x86_64.xml → update_3/alpha/windows-x86_64/update-16.0a5-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0