May 2026 - tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser] Pushed new tag base-browser-151.0a1-16.0-1-build1
by ma1 (＠ma1) 27 May '26

27 May '26

ma1 pushed new tag base-browser-151.0a1-16.0-1-build1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/base-brow… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-151.0a1-16.0-1] 4 commits: fixup! Add CI for Base Browser
by brizental (＠brizental) 27 May '26

27 May '26

brizental pushed to branch tor-browser-151.0a1-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 67ead9ef by Beatriz Rizental at 2026-05-27T12:11:12-03:00 fixup! Add CI for Base Browser Bug 44990: Fix dubious ownership CI issue - - - - - 80fcd6c6 by Beatriz Rizental at 2026-05-27T12:11:13-03:00 fixup! Add CI for Tor Browser Bug 44990: Fix permissions issues in container - - - - - 1d1ea9c7 by Beatriz Rizental at 2026-05-27T12:11:14-03:00 fixup! Add CI for Base Browser No bug: Drop logic that fetches pipelines from forks. That is not supported anymore after https://gitlab.torproject.org/tpo/tpa/team/-/work_items/42594#note_3411352 - - - - - 2efc5699 by Beatriz Rizental at 2026-05-27T12:11:15-03:00 fixup! Add CI for Tor Browser Update build-image container - - - - - 3 changed files: - .gitlab/ci/containers/base/Containerfile - .gitlab/ci/jobs/update-containers.yml - .gitlab/ci/mixins.yml Changes: ===================================== .gitlab/ci/containers/base/Containerfile ===================================== @@ -22,18 +22,27 @@ RUN cd tor-browser && \ yes | MOZBUILD_STATE_PATH=/var/tmp/mozbuild ./mach bootstrap --application-choice "$APPLICATION_CHOICE" && \ cd .. -ENV PATH="/var/tmp/mozbuild/clang/bin:/root/.cargo/bin:$PATH" +RUN rm -rf tor-browser && \ + rm -rf /var/lib/apt/lists/* && \ + apt-get clean && \ + rm -rf /var/tmp/mozbuild/toolchains && \ + rm -rf /var/tmp/mozbuild/indices && \ + rm -rf /var/tmp/mozbuild/android-device && \ + rm -rf /var/root/.cargo && \ + rm -rf /var/root/.rustup + +RUN adduser --uid 1000 --disabled-password --gecos "" gitlab-runner && \ + chown -R 1000:1000 /var/tmp/mozbuild/ + +USER gitlab-runner +WORKDIR /home/gitlab-runner +# Install Rust for the gitlab-runner user. +RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y +ENV PATH="/var/tmp/mozbuild/clang/bin:/home/gitlab-runner/.cargo/bin:$PATH" RUN echo "$APPLICATION_CHOICE" | grep -qi android && \ rustup target add armv7-linux-androideabi \ aarch64-linux-android \ i686-linux-android \ x86_64-linux-android \ || true - -RUN rm -rf tor-browser && \ - apt-get clean && \ - rm -rf /var/lib/apt/lists/* && \ - rm -rf /var/tmp/mozbuild/toolchains && \ - rm -rf /var/tmp/mozbuild/indices && \ - rm -rf /var/tmp/mozbuild/android-device ===================================== .gitlab/ci/jobs/update-containers.yml ===================================== @@ -1,7 +1,7 @@ build-image: stage: update-container-images interruptible: true - image: containers.torproject.org/tpo/tpa/base-images/podman:bookworm + image: containers.torproject.org/tpo/tpa/base-images/podman:trixie parallel: matrix: - PLATFORM: desktop ===================================== .gitlab/ci/mixins.yml ===================================== @@ -2,7 +2,12 @@ variables: GIT_STRATEGY: "none" FETCH_TIMEOUT: 180 # 3 minutes + + GIT_CONFIG_GLOBAL: "/tmp/gitconfig" before_script: + - | + echo "[safe]" > "$GIT_CONFIG_GLOBAL" + echo " directory = *" >> "$GIT_CONFIG_GLOBAL" - git init - git remote add local "$LOCAL_REPO_PATH" - | @@ -47,12 +52,8 @@ return $fetch_exit } - if ! fetch_with_timeout origin "${CI_COMMIT_BRANCH:-$CI_MERGE_REQUEST_SOURCE_BRANCH_NAME}"; then - echo "Fetching failed for branch ${CI_COMMIT_BRANCH:-$CI_MERGE_REQUEST_SOURCE_BRANCH_NAME}." - echo "Attempting to fetch the merge request branch, assuming this pipeline is not running in a fork." + fetch_with_timeout origin "merge-requests/${CI_MERGE_REQUEST_IID}/head" || exit 1 - fetch_with_timeout origin "merge-requests/${CI_MERGE_REQUEST_IID}/head" || exit 1 - fi - git checkout FETCH_HEAD .with-local-repo-pwsh: View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/16fb8e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/16fb8e… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41779: Update toolchains for Firefox 151.
by Pier Angelo Vendrame (＠pierov) 27 May '26

27 May '26

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 5a5a6ad3 by Pier Angelo Vendrame at 2026-05-27T16:50:52+02:00 Bug 41779: Update toolchains for Firefox 151. - - - - - 17 changed files: - Makefile - doc/how-to-update-glean-parser.txt - projects/application-services/config - projects/application-services/gradle-dependencies-list.txt - projects/firefox/build - projects/firefox/config - − projects/firefox/firefoxbrowser-0001-Bug-2024724-Fix-PowerCounters.h-because-we-do-not-co.patch - projects/geckoview/config - projects/geckoview/gradle-dependencies-list.txt - projects/glean-parser/build - projects/glean-parser/config - projects/glean/config - projects/glean/gradle-dependencies-list.txt - projects/libtapi/config - projects/macosx-toolchain/config - projects/mingw-w64-clang/config - projects/mingw-w64-clang/mingw-webrtc.patch The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/5… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/5… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-151.0a1-16.0-1] 2 commits: fixup! [android] Implement Android-native Connection Assist UI
by Dan Ballard (＠dan) 27 May '26

27 May '26

Dan Ballard pushed to branch tor-browser-151.0a1-16.0-1 at The Tor Project / Applications / Tor Browser Commits: a3680ba7 by clairehurst at 2026-05-26T17:10:05-06:00 fixup! [android] Implement Android-native Connection Assist UI Fix colors and bold text - - - - - 16fb8e0e by clairehurst at 2026-05-26T17:10:06-06:00 fixup! TB 40026 [android]: Implement Security Level settings on Android. - - - - - 4 changed files: - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/tor/TorConnectionAssistFragment.kt - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/tor/TorSecurityLevelFragment.kt - mobile/android/fenix/app/src/main/res/layout/fragment_tor_security_level_preferences.xml - mobile/android/fenix/app/src/main/res/values/colors.xml Changes: ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/tor/TorConnectionAssistFragment.kt ===================================== @@ -6,6 +6,7 @@ package org.mozilla.fenix.tor import android.content.Intent import android.graphics.Color +import android.graphics.Typeface import android.os.Build import android.os.Bundle import android.text.SpannableString @@ -82,6 +83,9 @@ class TorConnectionAssistFragment : Fragment(), UserInteractionHandler, SystemIn override fun onViewCreated(view: View, savedInstanceState: Bundle?) { super.onViewCreated(view, savedInstanceState) + binding.torBootstrapButton1.setTypeface(null, Typeface.BOLD) + binding.torBootstrapButton2.setTypeface(null, Typeface.BOLD) + viewLifecycleOwner.lifecycleScope.launch { repeatOnLifecycle(Lifecycle.State.STARTED) { torConnectionAssistViewModel.torConnectScreen.collect { screen -> ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/tor/TorSecurityLevelFragment.kt ===================================== @@ -5,6 +5,7 @@ package org.mozilla.fenix.tor import android.content.Context +import android.graphics.Typeface import android.os.Bundle import android.util.Log import android.view.LayoutInflater @@ -44,6 +45,9 @@ class TorSecurityLevelFragment : Fragment(), SystemInsetsPaddedFragment { binding.description.text = getString(R.string.tor_security_level_warning, getString(R.string.app_name)) + binding.saveAndRestartButton.setTypeface(null, Typeface.BOLD) + binding.cancelButton.setTypeface(null, Typeface.BOLD) + updateSaveAndRestartButtonUI() val currentLevel: Int = requireContext().components.core.engine.settings.torSecurityLevel @@ -79,6 +83,11 @@ class TorSecurityLevelFragment : Fragment(), SystemInsetsPaddedFragment { updateSaveAndRestartButtonUI() } + binding.saveAndRestartButton.backgroundTintList = AppCompatResources.getColorStateList( + requireContext(), + R.color.disabled_connect_button_purple, + ) + binding.saveAndRestartButton.setOnClickListener { Toast.makeText( @@ -111,6 +120,10 @@ class TorSecurityLevelFragment : Fragment(), SystemInsetsPaddedFragment { (requireActivity() as HomeActivity).restartApplication() } + binding.cancelButton.backgroundTintList = AppCompatResources.getColorStateList( + requireContext(), + R.color.settings_button_white, + ) binding.cancelButton.setOnClickListener { @Suppress("DEPRECATION") requireActivity().onBackPressed() ===================================== mobile/android/fenix/app/src/main/res/layout/fragment_tor_security_level_preferences.xml ===================================== @@ -82,7 +82,6 @@ android:layout_marginEnd="24dp" android:layout_marginBottom="8dp" android:background="@drawable/rounded_corners" - android:backgroundTint="@color/connect_button_purple" android:enabled="false" android:minWidth="360dp" android:text="@string/tor_security_level_save_and_restart_tor_browser" @@ -103,7 +102,6 @@ android:layout_marginEnd="24dp" android:layout_marginBottom="8dp" android:background="@drawable/rounded_corners" - android:backgroundTint="@color/configure_connection_button_white" android:minWidth="360dp" android:text="@string/btn_cancel" android:textAlignment="center" ===================================== mobile/android/fenix/app/src/main/res/values/colors.xml ===================================== @@ -141,9 +141,9 @@ <color name="fx_mobile_private_on_tertiary">@color/photonDarkGrey90</color> <color name="fx_mobile_private_tertiary_container">@color/photonPink80</color> <color name="fx_mobile_private_on_tertiary_container">@color/photonLightGrey05</color> - <color name="fx_mobile_private_background">#FF342B4A</color> + <color name="fx_mobile_private_background">#321C64</color> <color name="fx_mobile_private_on_background">@color/photonLightGrey05</color> - <color name="fx_mobile_private_surface">#FF342B4A</color> + <color name="fx_mobile_private_surface">#321C64</color> <color name="fx_mobile_private_on_surface">@color/photonLightGrey05</color> <color name="fx_mobile_private_surface_variant">#FF413857</color> <color name="fx_mobile_private_on_surface_variant">@color/photonLightGrey40</color> @@ -325,9 +325,9 @@ <color name="mozac_ui_lock_slash_fill_critical" tools:ignore="UnusedResources">@color/fx_mobile_icon_color_critical</color>  - <color name="connect_button_purple">#9059FF</color> - <color name="disabled_connect_button_purple">#5C42A9</color> - <color name="disabled_text_gray_purple">#8782A9</color> + <color name="connect_button_purple">#7542E5</color> + <color name="disabled_connect_button_purple">#542FA4</color> + <color name="disabled_text_gray_purple">#9781C8</color> <color name="configure_connection_button_white">#E1E0E7</color> <color name="warning_yellow">#FFA436</color> <color name="progress_background_tint">#55148C</color> View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/641330… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/641330… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-151.0a1-16.0-1] 3 commits: fixup! [android] Disable features and functionality
by Dan Ballard (＠dan) 26 May '26

26 May '26

Dan Ballard pushed to branch tor-browser-151.0a1-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 11e16f5f by Dan Ballard at 2026-05-26T10:22:18-07:00 fixup! [android] Disable features and functionality TB 44323: Audit prefs 128-140 in android - - - - - 17a120e3 by Dan Ballard at 2026-05-26T10:22:26-07:00 fixup! TB 41972: [android] Disable Mozilla onboarding TB 44323: Audit prefs 128 to 140 - - - - - 641330aa by Dan Ballard at 2026-05-26T10:22:34-07:00 fixup! TB 44027 [android]: Update PBM lockscreen TB 44323: Audit prefs 2128 to 140 - - - - - 2 changed files: - mobile/android/fenix/app/nimbus.fml.yaml - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/utils/Settings.kt Changes: ===================================== mobile/android/fenix/app/nimbus.fml.yaml ===================================== @@ -43,27 +43,27 @@ features: type: Map<HomeScreenSection, Boolean> default: { - "top-sites": true, - "jump-back-in": true, + "top-sites": false, + "jump-back-in": false, "bookmarks": true, - "recent-explorations": true, - "pocket": true, - "pocket-sponsored-stories": true, - "synced-tabs": true, - "collections": true, + "recent-explorations": false, + "pocket": false, + "pocket-sponsored-stories": false, + "synced-tabs": false, + "collections": false, "privacy-report": false, } defaults: - channel: nightly value: { "sections-enabled": { - "top-sites": true, - "jump-back-in": true, + "top-sites": false, + "jump-back-in": false, "bookmarks": true, - "recent-explorations": true, - "pocket": true, - "synced-tabs": true, - "collections": true, + "recent-explorations": false, + "pocket": false, + "synced-tabs": false, + "collections": false, "privacy-report": false, } } @@ -221,7 +221,7 @@ features: glean: description: "A feature that provides server-side configurations for Glean metrics (aka Server Knobs)." - allow-coenrollment: true + allow-coenrollment: false variables: gleanMetricConfiguration: description: Configuration for Glean Server Knobs @@ -230,7 +230,7 @@ features: enable-event-timestamps: description: "Enables precise event timestamps for Glean events" type: Boolean - default: true + default: false delay-ping-lifetime-io: description: "Glean will delay io for ping lifetime metrics" type: Boolean @@ -308,7 +308,7 @@ features: defaults: - channel: developer value: - enabled: true + enabled: false template-message: sent_from_firefox_template download-link: "[Download Link]" show-snackbar: true @@ -384,11 +384,11 @@ features: defaults: - channel: developer value: - enabled: true - boost-amp-wiki: true + enabled: false + boost-amp-wiki: false - channel: nightly value: - enabled: true + enabled: false nimbus-is-ready: description: > @@ -455,10 +455,10 @@ features: defaults: - channel: developer value: - enabled: true + enabled: false - channel: nightly value: - enabled: true + enabled: false minimal-addressbar: description: Show a smaller height bottom addressbar with just the URL. @@ -510,7 +510,7 @@ features: show a "close" button for tabs that are currently open on other supported devices in the synced tabs tray. type: Boolean - default: true + default: false fission: description: The feature that controls whether fission is enabled or not in Gecko. @@ -575,7 +575,7 @@ features: description: > Enables / disables fingerprinting protection in private browsing mode. type: Boolean - default: true + default: false overrides: description: > The protection overrides to add or remove fingerprinting protection @@ -629,7 +629,7 @@ features: description: > Enables / disables third-party cookie blocking in private browsing mode. type: Boolean - default: true + default: false safe-browsing-v5: description: Control Safe Browsing V5. @@ -893,7 +893,7 @@ features: description: > Uses search configuration from remote servers . type: Boolean - default: true + default: false same-document-navigation-overrides-load-type: description: Control whether the same document navigation overrides the load type. variables: @@ -914,7 +914,7 @@ features: description: > When `true`, include DoH settings in the settings UI. type: Boolean - default: true + default: false autoselect-enabled: description: > Controls the network.android_doh.autoselect_enabled pref and automatically chooses a DoH provider when Default Protection mode is selected. @@ -928,7 +928,7 @@ features: description: > Whether or not to enable private browsing mode lock. type: Boolean - default: true + default: false app-links: description: Control behavior of app links handling in the browser. ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/utils/Settings.kt ===================================== @@ -552,7 +552,7 @@ class Settings( var privateBrowsingLockedFeatureEnabled by booleanPreference( key = appContext.getPreferenceKey(R.string.pref_key_private_browsing_locked_enabled), - default = { false }, + default = { FxNimbus.features.privateBrowsingLock.value().enabled }, ) var privateBrowsingModeLocked by booleanPreference( @@ -2378,7 +2378,7 @@ class Settings( */ var shouldShowMarketingOnboarding by booleanPreference( appContext.getPreferenceKey(R.string.pref_key_should_show_marketing_onboarding), - default = true, + default = false, ) val shouldUseComposableToolbar = true @@ -2691,7 +2691,7 @@ class Settings( */ var isFirstTimeEngagingWithSignup: Boolean by booleanPreference( appContext.getPreferenceKey(R.string.pref_key_first_time_engage_with_signup), - default = true, + default = false, ) /** View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/3bc02e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/3bc02e… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser] Pushed new branch tor-browser-152.0a1-16.0-1
by Pier Angelo Vendrame (＠pierov) 26 May '26

26 May '26

Pier Angelo Vendrame pushed new branch tor-browser-152.0a1-16.0-1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.11.0esr-15.0-1] 2 commits: TB 44361: Notification for dropped support for 32-bit Linux.
by henry (＠henry) 26 May '26

26 May '26

henry pushed to branch tor-browser-140.11.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 195ccc07 by Henry Wilkes at 2026-05-26T17:24:40+01:00 TB 44361: Notification for dropped support for 32-bit Linux. - - - - - c5648252 by Henry Wilkes at 2026-05-26T17:24:41+01:00 fixup! Tor Browser strings TB 44361: Strings for dropped support notification. - - - - - 4 changed files: - browser/base/content/browser-main.js - + browser/base/content/droppedSupportNotification.js - browser/base/jar.mn - toolkit/locales/en-US/toolkit/global/tor-browser.ftl Changes: ===================================== browser/base/content/browser-main.js ===================================== @@ -29,6 +29,7 @@ Services.scriptloader.loadSubScript("chrome://browser/content/places/places-menupopup.js", this); Services.scriptloader.loadSubScript("chrome://browser/content/search/autocomplete-popup.js", this); Services.scriptloader.loadSubScript("chrome://browser/content/search/searchbar.js", this); + Services.scriptloader.loadSubScript("chrome://browser/content/droppedSupportNotification.js", this); Services.scriptloader.loadSubScript("chrome://browser/content/languageNotification.js", this); } ===================================== browser/base/content/droppedSupportNotification.js ===================================== @@ -0,0 +1,69 @@ +"use strict"; + +// Show a prompt that a user's system will no longer be supported. +window.addEventListener("load", () => { + let labelId; + + if ( + AppConstants.platform === "linux" && + Services.appinfo.XPCOMABI === "x86-gcc3" + ) { + labelId = "dropped-support-notification-linux-32-bit"; + // TODO: switch to the expired label for the final version 15 release. + // labelId = "dropped-support-notification-linux-32-bit-expired"; + } + + const dismissedPref = + "browser.dropped_support_notification_v16.dismiss_version"; + + if (!labelId) { + // Avoid setting any preferences for supported versions, and clean up any + // old values if the user ported their profile. + Services.prefs.clearUserPref(dismissedPref); + return; + } + + if ( + Services.prefs.getStringPref(dismissedPref, "") === + AppConstants.BASE_BROWSER_VERSION + ) { + // Already dismissed since the last update. + return; + } + + let locale = Services.locale.appLocaleAsBCP47; + if (locale === "ja-JP-macos") { + // Convert quirk-locale to the locale used for tor project. + locale = "ja"; + } + // NOTE: The support page only covers a subset of locales. But they should + // redirect to the default en-US page if the locale is not supported. + // Locales that have support pages. + // NOTE: /es-ES/ will redirect to /es/. + const link = `https://support.torproject.org/${locale}/tor-browser/security/legacy-os/`; + + const buttons = [ + { + "l10n-id": "notification-learnmore-default-label", + link, + }, + { + "l10n-id": "dropped-support-notification-dismiss-button", + callback: () => { + Services.prefs.setStringPref( + dismissedPref, + AppConstants.BASE_BROWSER_VERSION + ); + }, + }, + ]; + + gNotificationBox.appendNotification( + "dropped-support-notification", + { + label: { "l10n-id": labelId }, + priority: gNotificationBox.PRIORITY_WARNING_HIGH, + }, + buttons + ); +}); ===================================== browser/base/jar.mn ===================================== @@ -104,4 +104,5 @@ browser.jar: content/browser/spotlight.js (content/spotlight.js) * content/browser/default-bookmarks.html (content/default-bookmarks.html) + content/browser/droppedSupportNotification.js (content/droppedSupportNotification.js) content/browser/languageNotification.js (content/languageNotification.js) ===================================== toolkit/locales/en-US/toolkit/global/tor-browser.ftl ===================================== @@ -722,6 +722,19 @@ onion-site-saved-keys-dialog-remove-all-button = Remove all onion-site-saved-keys-dialog-fetch-keys-error-message = Unable to retrieve keys from Tor onion-site-saved-keys-dialog-remove-keys-error-message = Unable to remove key +## Notification for dropped support for 32-bit Linux. + +# Shown before support has ended. +# "{ -brand-product-name }" will be replaced with the localized name of the browser, e.g. "Tor Browser". +# "16.0" refers to the browser versions number: Tor Browser 16.0. +# "32-bit" and "64-bit" refer to CPU types: en.wikipedia.org/wiki/32-bit_computing . +dropped-support-notification-linux-32-bit = The next major version of { -brand-product-name } (16.0) will no longer support 32-bit Linux. Please install { -brand-product-name } on a 64-bit Linux operating system to continue receiving important security updates. +# Shown after support has ended. +# "{ -brand-product-name }" will be replaced with the localized name of the browser, e.g. "Tor Browser". +# "32-bit" and "64-bit" refer to CPU types: en.wikipedia.org/wiki/32-bit_computing . +dropped-support-notification-linux-32-bit-expired = { -brand-product-name } no longer supports 32-bit Linux. Please install { -brand-product-name } on a 64-bit Linux operating system to continue receiving important security updates. +dropped-support-notification-dismiss-button = Got it + ## Year end campaign. yec-donate-button = Donate now View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/5fef0f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/5fef0f… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-151.0a1-16.0-1-build2
by Pier Angelo Vendrame (＠pierov) 26 May '26

26 May '26

Pier Angelo Vendrame pushed new tag tor-browser-151.0a1-16.0-1-build2 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-151.0a1-16.0-1] fixup! TB 40933: Add tor-launcher functionality
by Pier Angelo Vendrame (＠pierov) 26 May '26

26 May '26

Pier Angelo Vendrame pushed to branch tor-browser-151.0a1-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 3bc02e6b by Pier Angelo Vendrame at 2026-05-26T16:54:01+02:00 fixup! TB 40933: Add tor-launcher functionality TB 44991: Improve the no-authentication handling on the control port. - - - - - 2 changed files: - toolkit/components/tor-launcher/TorControlPort.sys.mjs - toolkit/components/tor-launcher/TorProvider.sys.mjs Changes: ===================================== toolkit/components/tor-launcher/TorControlPort.sys.mjs ===================================== @@ -672,6 +672,8 @@ export class TorController { /** * Authenticate to the tor daemon. * Notice that a failure in the authentication makes the connection close. + * This function tolerates empty and false-ish passwords because a client + * needs to authenticate even when all authentication methods are disabled. * * @param {Uint8Array} password The password for the control port, as an array * of bytes @@ -680,7 +682,11 @@ export class TorController { const passwordString = Array.from(password ?? [], b => b.toString(16).padStart(2, "0") ).join(""); - await this.#sendCommandSimple(`authenticate ${passwordString}`); + let command = "AUTHENTICATE"; + if (passwordString) { + command += ` ${passwordString}`; + } + await this.#sendCommandSimple(command); } // Information ===================================== toolkit/components/tor-launcher/TorProvider.sys.mjs ===================================== @@ -834,6 +834,9 @@ export class TorProvider extends TorProviderBase { this.#controlPortSettings.cookieFilePath ); } + // As per the spec, we must always authenticate to the control port, even + // when all authentication methods are disabled. + // https://spec.torproject.org/control-spec/commands.html#authenticate await controlPort.authenticate(password); } catch (e) { try { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3bc02e6… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3bc02e6… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-151.0a1-16.0-1-build1
by ma1 (＠ma1) 26 May '26

26 May '26

ma1 pushed new tag tor-browser-151.0a1-16.0-1-build1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0