- tbb-commits - lists.torproject.org

[Git][tpo/applications/mullvad-browser-update-responses][main] alpha: new version, 14.0a1
by morgan (＠morgan) 30 Jul '24

30 Jul '24

morgan pushed to branch main at The Tor Project / Applications / mullvad-browser-update-responses Commits: 0d374960 by Morgan at 2024-07-30T21:26:49+00:00 alpha: new version, 14.0a1 - - - - - 29 changed files: - update_1/alpha/.htaccess - − update_1/alpha/13.5a6-13.5a9-linux-x86_64-ALL.xml - − update_1/alpha/13.5a6-13.5a9-macos-ALL.xml - − update_1/alpha/13.5a6-13.5a9-windows-x86_64-ALL.xml - − update_1/alpha/13.5a7-13.5a9-linux-x86_64-ALL.xml - − update_1/alpha/13.5a7-13.5a9-macos-ALL.xml - − update_1/alpha/13.5a7-13.5a9-windows-x86_64-ALL.xml - + update_1/alpha/13.5a7-14.0a1-linux-x86_64-ALL.xml - + update_1/alpha/13.5a7-14.0a1-macos-ALL.xml - + update_1/alpha/13.5a7-14.0a1-windows-x86_64-ALL.xml - − update_1/alpha/13.5a8-13.5a9-linux-x86_64-ALL.xml - − update_1/alpha/13.5a8-13.5a9-macos-ALL.xml - − update_1/alpha/13.5a8-13.5a9-windows-x86_64-ALL.xml - + update_1/alpha/13.5a8-14.0a1-linux-x86_64-ALL.xml - + update_1/alpha/13.5a8-14.0a1-macos-ALL.xml - + update_1/alpha/13.5a8-14.0a1-windows-x86_64-ALL.xml - + update_1/alpha/13.5a9-14.0a1-linux-x86_64-ALL.xml - + update_1/alpha/13.5a9-14.0a1-macos-ALL.xml - + update_1/alpha/13.5a9-14.0a1-windows-x86_64-ALL.xml - − update_1/alpha/13.5a9-linux-x86_64-ALL.xml - − update_1/alpha/13.5a9-macos-ALL.xml - − update_1/alpha/13.5a9-windows-x86_64-ALL.xml - + update_1/alpha/14.0a1-linux-x86_64-ALL.xml - + update_1/alpha/14.0a1-macos-ALL.xml - + update_1/alpha/14.0a1-windows-x86_64-ALL.xml - update_1/alpha/download-linux-x86_64.json - update_1/alpha/download-macos.json - update_1/alpha/download-windows-x86_64.json - update_1/alpha/downloads.json Changes: ===================================== update_1/alpha/.htaccess ===================================== @@ -1,22 +1,22 @@ RewriteEngine On -RewriteRule ^[^/]+/13.5a9/ no-update.xml [last] -RewriteRule ^Linux_x86_64-gcc3/13.5a6/ALL 13.5a6-13.5a9-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/13.5a7/ALL 13.5a7-13.5a9-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/13.5a8/ALL 13.5a8-13.5a9-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/[^/]+/ALL 13.5a9-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/ 13.5a9-linux-x86_64-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/13.5a6/ALL 13.5a6-13.5a9-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/13.5a7/ALL 13.5a7-13.5a9-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/13.5a8/ALL 13.5a8-13.5a9-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/[^/]+/ALL 13.5a9-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/ 13.5a9-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/13.5a6/ALL 13.5a6-13.5a9-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/13.5a7/ALL 13.5a7-13.5a9-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/13.5a8/ALL 13.5a8-13.5a9-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/[^/]+/ALL 13.5a9-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/ 13.5a9-macos-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/13.5a6/ALL 13.5a6-13.5a9-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/13.5a7/ALL 13.5a7-13.5a9-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/13.5a8/ALL 13.5a8-13.5a9-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/[^/]+/ALL 13.5a9-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/ 13.5a9-windows-x86_64-ALL.xml [last] +RewriteRule ^[^/]+/14.0a1/ no-update.xml [last] +RewriteRule ^Linux_x86_64-gcc3/13.5a7/ALL 13.5a7-14.0a1-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/13.5a8/ALL 13.5a8-14.0a1-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/13.5a9/ALL 13.5a9-14.0a1-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/[^/]+/ALL 14.0a1-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/ 14.0a1-linux-x86_64-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/13.5a7/ALL 13.5a7-14.0a1-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/13.5a8/ALL 13.5a8-14.0a1-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/13.5a9/ALL 13.5a9-14.0a1-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/[^/]+/ALL 14.0a1-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/ 14.0a1-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/13.5a7/ALL 13.5a7-14.0a1-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/13.5a8/ALL 13.5a8-14.0a1-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/13.5a9/ALL 13.5a9-14.0a1-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/[^/]+/ALL 14.0a1-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/ 14.0a1-macos-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/13.5a7/ALL 13.5a7-14.0a1-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/13.5a8/ALL 13.5a8-14.0a1-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/13.5a9/ALL 13.5a9-14.0a1-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/[^/]+/ALL 14.0a1-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/ 14.0a1-windows-x86_64-ALL.xml [last] ===================================== update_1/alpha/13.5a6-13.5a9-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-linux-x86_64-13.5a9_…" hashFunction="SHA512" hashValue="ea964e1c70154298a9d3cd66a5d4cce5176d9f6e53cc25faea1f76673402326faf904e7161804241c907287e69bb527b7829ecab98282042a2f9b3103b68e772" size="108381191" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-linux-x86_64--13.5a6…" hashFunction="SHA512" hashValue="b8439bd7d8fc7d4dc54d5601bf977b3df5a92e5ab372d32e99f1e36098a18bc2a3035f751a80f18676ff5eca6d25914dc71aedf034e1010c6ecb8e04e98bb00a" size="12957963" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a6-13.5a9-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedOSVersion="16.0.0"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-macos-13.5a9_ALL.mar" hashFunction="SHA512" hashValue="6b3a90edd197ed9b8d2ccaaaa354ca17896a19737f959d7be08a59e135a421d23bf7774ac678d8ece90320d1bc384a6fb1b32114155009f9f77d169f783c5dd9" size="115821315" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-macos--13.5a6-13.5a9…" hashFunction="SHA512" hashValue="7fc16b9cb76e70f2ff5a1d3a8fb603c173093b20a972166b9d3ba9712a67a733b182142ae8bb1d5a22b66ed094bca3c4330452bf2f249f411a07ffb1cdee36e0" size="16596794" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a6-13.5a9-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedOSVersion="6.1" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-windows-x86_64-13.5a…" hashFunction="SHA512" hashValue="247852ac9be916c09d82d8dcffee75b2d76938396f5ba24e0c31993711c860132da9774e01b6d95b230bcf2bf5ae672064d6dc6a846c4e25f38c6fbd61d06582" size="90023812" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-windows-x86_64--13.5…" hashFunction="SHA512" hashValue="cfa707518a0bb8dbfec4ac45bd82b907a44cddb9b09e968a1fe9516a0f2818952fe05ad90d66f78d60398d2017cb4901bd866d2670a06612c485082927e081b1" size="12513227" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a7-13.5a9-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-linux-x86_64-13.5a9_…" hashFunction="SHA512" hashValue="ea964e1c70154298a9d3cd66a5d4cce5176d9f6e53cc25faea1f76673402326faf904e7161804241c907287e69bb527b7829ecab98282042a2f9b3103b68e772" size="108381191" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-linux-x86_64--13.5a7…" hashFunction="SHA512" hashValue="8908fb6de7be2f7022c33a18f6c2e9e17a6c8ecc7a97a88ddee12bd314f840f930aa347f8ac08c7c43c11d1d702a86bbbc34f2386c691da2f48e03c45d4c7c06" size="10577807" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a7-13.5a9-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedOSVersion="16.0.0"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-macos-13.5a9_ALL.mar" hashFunction="SHA512" hashValue="6b3a90edd197ed9b8d2ccaaaa354ca17896a19737f959d7be08a59e135a421d23bf7774ac678d8ece90320d1bc384a6fb1b32114155009f9f77d169f783c5dd9" size="115821315" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-macos--13.5a7-13.5a9…" hashFunction="SHA512" hashValue="b9df73c6e2b018285032d7d156005289a3739e6727d0edb16db5565a8bb00d0de44d084c9d55f10d016af5801d13c459b309f5c52f1ab2c113cb3605257f3485" size="14268378" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a7-13.5a9-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedOSVersion="6.1" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-windows-x86_64-13.5a…" hashFunction="SHA512" hashValue="247852ac9be916c09d82d8dcffee75b2d76938396f5ba24e0c31993711c860132da9774e01b6d95b230bcf2bf5ae672064d6dc6a846c4e25f38c6fbd61d06582" size="90023812" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-windows-x86_64--13.5…" hashFunction="SHA512" hashValue="a0a317dbb83d297a33bc439f36756d7bbf6a216f3e7d3aed367f1a22cc7d14a04eb404d87ae9b8ed35bc7f872b4321e78397314fd8340bb7c5ac8a733868517a" size="10868439" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a7-14.0a1-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-linux-x86_64-14.0a1_…" hashFunction="SHA512" hashValue="df105cfef75974dd7b930e2e4cbb610a0f0891a2b35503fad7e1a059ef0a5ab2b7dde71f1ceff98e74deaf83f5c88f2fa4ed3a3d0ecc86ec8a1f2e2fc45eed32" size="113807865" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-linux-x86_64--13.5a7…" hashFunction="SHA512" hashValue="78b732b98d0920e434000ddee70680e320ef87932c7b1a35177393718f1c8cd1a7def57ecb7abffa3b8e69d8755262f409cb1b894f6ccc3537cb25819d9539bb" size="56057647" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a7-14.0a1-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-macos-14.0a1_ALL.mar" hashFunction="SHA512" hashValue="898ac7db9d918e655fbdf39b8f3df8864f558240dc9c70744a0e48a75df4d382b0e007caa30882ec9aa009a411009fd849204b5f990eaeaa7dec47d7b97699f7" size="128840182" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-macos--13.5a7-14.0a1…" hashFunction="SHA512" hashValue="99281166bef9ad6f9baed14e92e264b8851c4e518a91dca1faf6855420927a4f279cb0028d4a63eddcb3b990bb9729bd586f22850f52fe446bb9f72a205c190d" size="91223005" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a7-14.0a1-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-windows-x86_64-14.0a…" hashFunction="SHA512" hashValue="000875bacd206955e62b0bfb48a8ad2ad11204f3d962dabc68586752e9bf5075d5505fba58a133fe4cb0418892631ff265caf40a8117da96b0cbacaf40bad990" size="94818120" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-windows-x86_64--13.5…" hashFunction="SHA512" hashValue="04e156753f87f210d1346dadb14b22d283a35ff15452fc1942745c1aa15b7c090c0203a3b4dc8a1adb7dbe6d380643cc7eec8380daf76d9740d07237e54dc335" size="59970825" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a8-13.5a9-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-linux-x86_64-13.5a9_…" hashFunction="SHA512" hashValue="ea964e1c70154298a9d3cd66a5d4cce5176d9f6e53cc25faea1f76673402326faf904e7161804241c907287e69bb527b7829ecab98282042a2f9b3103b68e772" size="108381191" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-linux-x86_64--13.5a8…" hashFunction="SHA512" hashValue="6c0042b711c6757334fdbb5dbbbcc308200f4f5968c006fd58f3e715162964ca5ee420c9b2e802943c9cb0b6833f03308c8c858f4a32c9df69e2ba822cd107af" size="6737039" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a8-13.5a9-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedOSVersion="16.0.0"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-macos-13.5a9_ALL.mar" hashFunction="SHA512" hashValue="6b3a90edd197ed9b8d2ccaaaa354ca17896a19737f959d7be08a59e135a421d23bf7774ac678d8ece90320d1bc384a6fb1b32114155009f9f77d169f783c5dd9" size="115821315" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-macos--13.5a8-13.5a9…" hashFunction="SHA512" hashValue="ed1b173a8e24f9f08eed123e55f68f697ab58a2979767beb2f30b6af13cef60762e7029d7d729ec57f756d345ab081a97ebcebb5295c2f23a099cd0d302f08f4" size="10438919" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a8-13.5a9-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedOSVersion="6.1" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-windows-x86_64-13.5a…" hashFunction="SHA512" hashValue="247852ac9be916c09d82d8dcffee75b2d76938396f5ba24e0c31993711c860132da9774e01b6d95b230bcf2bf5ae672064d6dc6a846c4e25f38c6fbd61d06582" size="90023812" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-windows-x86_64--13.5…" hashFunction="SHA512" hashValue="6cb9a832900939f3b09e3c2e2c0df823b7df3f99a40ba452f9375e2014c297841c7a9d37740776a32afed0153aa2d4e9af927ae8ae45afde2091276f9392dfdf" size="6531391" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a8-14.0a1-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-linux-x86_64-14.0a1_…" hashFunction="SHA512" hashValue="df105cfef75974dd7b930e2e4cbb610a0f0891a2b35503fad7e1a059ef0a5ab2b7dde71f1ceff98e74deaf83f5c88f2fa4ed3a3d0ecc86ec8a1f2e2fc45eed32" size="113807865" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-linux-x86_64--13.5a8…" hashFunction="SHA512" hashValue="2dd798b00d14e30565f999f0b863c596aa748b91105d23a8d3e8d409c7b8cadfba41050b8db056cc9754adcca7d786c7124b1ce11fa2257e962c4a44d716e0e1" size="54500335" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a8-14.0a1-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-macos-14.0a1_ALL.mar" hashFunction="SHA512" hashValue="898ac7db9d918e655fbdf39b8f3df8864f558240dc9c70744a0e48a75df4d382b0e007caa30882ec9aa009a411009fd849204b5f990eaeaa7dec47d7b97699f7" size="128840182" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-macos--13.5a8-14.0a1…" hashFunction="SHA512" hashValue="ec8142025f31086993af14379f8d3dcf3a5768fda89b5ec86b90bc65de0f059b6efae3199a46b0d3c1d4866160294b5c18d76d77680022f0a046188c1f395603" size="89601570" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a8-14.0a1-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-windows-x86_64-14.0a…" hashFunction="SHA512" hashValue="000875bacd206955e62b0bfb48a8ad2ad11204f3d962dabc68586752e9bf5075d5505fba58a133fe4cb0418892631ff265caf40a8117da96b0cbacaf40bad990" size="94818120" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-windows-x86_64--13.5…" hashFunction="SHA512" hashValue="350ec0b933184ccb08268853498e146bfee058fa926474246e8f2df5052be852bd23065bdd1ce02e648de1f58cfe70ee852ce251b33b9206d9ca662231b704ed" size="58423277" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a9-14.0a1-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-linux-x86_64-14.0a1_…" hashFunction="SHA512" hashValue="df105cfef75974dd7b930e2e4cbb610a0f0891a2b35503fad7e1a059ef0a5ab2b7dde71f1ceff98e74deaf83f5c88f2fa4ed3a3d0ecc86ec8a1f2e2fc45eed32" size="113807865" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-linux-x86_64--13.5a9…" hashFunction="SHA512" hashValue="327e0ce3eeb3cbaa24c2d87a9646ccd1bdffe001e2ad2ad89b87dce736e510c1e623488b33aec7a9233c510970e03c8ce50971c109ad63497c66c91d16376cb3" size="52336601" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a9-14.0a1-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-macos-14.0a1_ALL.mar" hashFunction="SHA512" hashValue="898ac7db9d918e655fbdf39b8f3df8864f558240dc9c70744a0e48a75df4d382b0e007caa30882ec9aa009a411009fd849204b5f990eaeaa7dec47d7b97699f7" size="128840182" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-macos--13.5a9-14.0a1…" hashFunction="SHA512" hashValue="9d5ee6d9515c62d14ff7155e014a3b7a371469a55f9032a783f7ea0a9fcb15cee10c4c968da411990fc51943c7a9cc0d16598844c08b4315570c62565add92bb" size="87239905" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a9-14.0a1-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-windows-x86_64-14.0a…" hashFunction="SHA512" hashValue="000875bacd206955e62b0bfb48a8ad2ad11204f3d962dabc68586752e9bf5075d5505fba58a133fe4cb0418892631ff265caf40a8117da96b0cbacaf40bad990" size="94818120" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-windows-x86_64--13.5…" hashFunction="SHA512" hashValue="1cd64bdf6c2851c6378d5b747773931e0ee7d0256ca16f3a54735f1f309e3b8dba2c97c8435e30f67047d3d147c6ddaebcb7ad7cfdb4a17d3bf9c98882f9051b" size="56252387" type="partial"></patch></update></updates> ===================================== update_1/alpha/13.5a9-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-linux-x86_64-13.5a9_…" hashFunction="SHA512" hashValue="ea964e1c70154298a9d3cd66a5d4cce5176d9f6e53cc25faea1f76673402326faf904e7161804241c907287e69bb527b7829ecab98282042a2f9b3103b68e772" size="108381191" type="complete"></patch></update></updates> ===================================== update_1/alpha/13.5a9-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedOSVersion="16.0.0"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-macos-13.5a9_ALL.mar" hashFunction="SHA512" hashValue="6b3a90edd197ed9b8d2ccaaaa354ca17896a19737f959d7be08a59e135a421d23bf7774ac678d8ece90320d1bc384a6fb1b32114155009f9f77d169f783c5dd9" size="115821315" type="complete"></patch></update></updates> ===================================== update_1/alpha/13.5a9-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="13.5a9" appVersion="13.5a9" platformVersion="115.12.0" buildID="20240610063000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/13.5a9" minSupportedOSVersion="6.1" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-windows-x86_64-13.5a…" hashFunction="SHA512" hashValue="247852ac9be916c09d82d8dcffee75b2d76938396f5ba24e0c31993711c860132da9774e01b6d95b230bcf2bf5ae672064d6dc6a846c4e25f38c6fbd61d06582" size="90023812" type="complete"></patch></update></updates> ===================================== update_1/alpha/14.0a1-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-linux-x86_64-14.0a1_…" hashFunction="SHA512" hashValue="df105cfef75974dd7b930e2e4cbb610a0f0891a2b35503fad7e1a059ef0a5ab2b7dde71f1ceff98e74deaf83f5c88f2fa4ed3a3d0ecc86ec8a1f2e2fc45eed32" size="113807865" type="complete"></patch></update></updates> ===================================== update_1/alpha/14.0a1-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-macos-14.0a1_ALL.mar" hashFunction="SHA512" hashValue="898ac7db9d918e655fbdf39b8f3df8864f558240dc9c70744a0e48a75df4d382b0e007caa30882ec9aa009a411009fd849204b5f990eaeaa7dec47d7b97699f7" size="128840182" type="complete"></patch></update></updates> ===================================== update_1/alpha/14.0a1-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0a1" appVersion="14.0a1" platformVersion="128.0" buildID="20240724210000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0a1" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-windows-x86_64-14.0a…" hashFunction="SHA512" hashValue="000875bacd206955e62b0bfb48a8ad2ad11204f3d962dabc68586752e9bf5075d5505fba58a133fe4cb0418892631ff265caf40a8117da96b0cbacaf40bad990" size="94818120" type="complete"></patch></update></updates> ===================================== update_1/alpha/download-linux-x86_64.json ===================================== @@ -1 +1 @@ -{"binary":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-linux-x86_64-13.5a9.…","git_tag":"mb-13.5a9-build2","sig":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-linux-x86_64-13.5a9.…","version":"13.5a9"} \ No newline at end of file +{"binary":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-linux-x86_64-14.0a1.…","git_tag":"mb-14.0a1-build1","sig":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-linux-x86_64-14.0a1.…","version":"14.0a1"} \ No newline at end of file ===================================== update_1/alpha/download-macos.json ===================================== @@ -1 +1 @@ -{"binary":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-macos-13.5a9.dmg","git_tag":"mb-13.5a9-build2","sig":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-macos-13.5a9.dmg.asc","version":"13.5a9"} \ No newline at end of file +{"binary":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-macos-14.0a1.dmg","git_tag":"mb-14.0a1-build1","sig":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-macos-14.0a1.dmg.asc","version":"14.0a1"} \ No newline at end of file ===================================== update_1/alpha/download-windows-x86_64.json ===================================== @@ -1 +1 @@ -{"binary":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-windows-x86_64-porta…","git_tag":"mb-13.5a9-build2","sig":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-windows-x86_64-porta…","version":"13.5a9"} \ No newline at end of file +{"binary":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-windows-x86_64-14.0a…","git_tag":"mb-14.0a1-build1","sig":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-windows-x86_64-14.0a…","version":"14.0a1"} \ No newline at end of file ===================================== update_1/alpha/downloads.json ===================================== @@ -1 +1 @@ -{"downloads":{"linux-x86_64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-linux-x86_64-13.5a9.…","sig":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-linux-x86_64-13.5a9.…"}},"macos":{"ALL":{"binary":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-macos-13.5a9.dmg","sig":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-macos-13.5a9.dmg.asc"}},"win64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-windows-x86_64-porta…","sig":"https://cdn.mullvad.net/browser/13.5a9/mullvad-browser-windows-x86_64-porta…"}}},"tag":"mb-13.5a9-build2","version":"13.5a9"} \ No newline at end of file +{"downloads":{"linux-x86_64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-linux-x86_64-14.0a1.…","sig":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-linux-x86_64-14.0a1.…"}},"macos":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-macos-14.0a1.dmg","sig":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-macos-14.0a1.dmg.asc"}},"win64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-windows-x86_64-14.0a…","sig":"https://cdn.mullvad.net/browser/14.0a1/mullvad-browser-windows-x86_64-14.0a…"}}},"tag":"mb-14.0a1-build1","version":"14.0a1"} \ No newline at end of file View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41197: Modify nightly's update-responses to prevent upgrades on...
by boklm (＠boklm) 30 Jul '24

30 Jul '24

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: e5560888 by Morgan at 2024-07-30T21:05:34+00:00 Bug 41197: Modify nightly's update-responses to prevent upgrades on unsupported Windows and macOS versions - - - - - 1 changed file: - tools/signing/nightly/update-responses-base-config.yml Changes: ===================================== tools/signing/nightly/update-responses-base-config.yml ===================================== @@ -18,14 +18,17 @@ versions: nightly_version: platformVersion: 115.1.0 detailsURL: https://nightlies.tbb.torproject.org/ + # minSupportedOsVersion on macOS corresponds to the Darwin version ( https://en.wikipedia.org/wiki/Darwin_(operating_system) ) macos: - minSupportedOSVersion: 16.0.0 + # macOS v10.15.0 + minSupportedOSVersion: 19.0.0 + # minSupportedOsVersion on Windows corresponds to the operating system version ( https://docs.microsoft.com/en-us/windows/win32/sysinfo/operating-system-ver… ) windows-i686: - minSupportedOSVersion: 6.1 - minSupportedInstructionSet: SSE2 + # Windows 10 + minSupportedOSVersion: 10.0 windows-x86_64: - minSupportedOSVersion: 6.1 - minSupportedInstructionSet: SSE2 + # Windows v10 + minSupportedOSVersion: 10.0 linux-i686: minSupportedInstructionSet: SSE2 linux-x86_64: View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/e… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] alpha: new version, 14.0a1
by morgan (＠morgan) 30 Jul '24

30 Jul '24

morgan pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: de450633 by Morgan at 2024-07-30T21:03:39+00:00 alpha: new version, 14.0a1 - - - - - 30 changed files: - update_3/alpha/.htaccess - − update_3/alpha/13.5a6-13.5a9-linux-i686-ALL.xml - − update_3/alpha/13.5a6-13.5a9-linux-x86_64-ALL.xml - − update_3/alpha/13.5a6-13.5a9-macos-ALL.xml - − update_3/alpha/13.5a6-13.5a9-windows-i686-ALL.xml - − update_3/alpha/13.5a6-13.5a9-windows-x86_64-ALL.xml - − update_3/alpha/13.5a7-13.5a9-linux-i686-ALL.xml - − update_3/alpha/13.5a7-13.5a9-linux-x86_64-ALL.xml - − update_3/alpha/13.5a7-13.5a9-macos-ALL.xml - − update_3/alpha/13.5a7-13.5a9-windows-i686-ALL.xml - − update_3/alpha/13.5a7-13.5a9-windows-x86_64-ALL.xml - + update_3/alpha/13.5a7-14.0a1-linux-i686-ALL.xml - + update_3/alpha/13.5a7-14.0a1-linux-x86_64-ALL.xml - + update_3/alpha/13.5a7-14.0a1-macos-ALL.xml - + update_3/alpha/13.5a7-14.0a1-windows-i686-ALL.xml - + update_3/alpha/13.5a7-14.0a1-windows-x86_64-ALL.xml - − update_3/alpha/13.5a8-13.5a9-linux-i686-ALL.xml - − update_3/alpha/13.5a8-13.5a9-linux-x86_64-ALL.xml - − update_3/alpha/13.5a8-13.5a9-macos-ALL.xml - − update_3/alpha/13.5a8-13.5a9-windows-i686-ALL.xml - − update_3/alpha/13.5a8-13.5a9-windows-x86_64-ALL.xml - + update_3/alpha/13.5a8-14.0a1-linux-i686-ALL.xml - + update_3/alpha/13.5a8-14.0a1-linux-x86_64-ALL.xml - + update_3/alpha/13.5a8-14.0a1-macos-ALL.xml - + update_3/alpha/13.5a8-14.0a1-windows-i686-ALL.xml - + update_3/alpha/13.5a8-14.0a1-windows-x86_64-ALL.xml - + update_3/alpha/13.5a9-14.0a1-linux-i686-ALL.xml - + update_3/alpha/13.5a9-14.0a1-linux-x86_64-ALL.xml - + update_3/alpha/13.5a9-14.0a1-macos-ALL.xml - + update_3/alpha/13.5a9-14.0a1-windows-i686-ALL.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 4 commits: Bug 41199: Duplicate wrappers/sign-rcodesign as wrappers/sign-rcodesign-128
by morgan (＠morgan) 30 Jul '24

30 Jul '24

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 1ae99c2b by Nicolas Vigier at 2024-07-30T17:49:28+00:00 Bug 41199: Duplicate wrappers/sign-rcodesign as wrappers/sign-rcodesign-128 In order to modify the `sign-rcodesign` wrapper for 128esr changes, while keeping support for the 115esr branch, we duplicate the script. After the last 115esr based release we should remove it: * copying `sign-rcodesign-128` to `sign-rcodesign`, * reverting this commit, * removing tools/signing/*.entitlements.xml, * and adding instructions in `machines-setup/setup-signing-machine` to remove `/etc/sudoers.d/sign-rcodesign-128`. - - - - - 79c986b6 by Nicolas Vigier at 2024-07-30T17:49:28+00:00 Bug 40553: Use different entitlements files for parent and child processes We copy entitlements files from mozilla, from the esr128 branch, in directory `security/mac/hardenedruntime/v2/production`. In the file `taskcluster/config.yml`, `mac-signing/hardened-sign-config` lists the different entitlements files used for the different files. - - - - - 95ee823b by Nicolas Vigier at 2024-07-30T17:49:28+00:00 Bug 41199: Update rcodesign to 0.27.0 This also changes the installation directory to `rcodesign-128` instead of `rcodesign`, since we want to keep the old version for stable releases signing. - - - - - 45c352b1 by Nicolas Vigier at 2024-07-30T17:49:28+00:00 Bug 41199: Update sign-rcodesign-128 for esr128 changes - - - - - 12 changed files: - projects/rcodesign/build - projects/rcodesign/config - tools/signing/linux-signer-rcodesign-sign - tools/signing/machines-setup/setup-signing-machine - + tools/signing/machines-setup/sudoers.d/sign-rcodesign-128 - + tools/signing/macos-entitlements/firefox.browser.xml - + tools/signing/macos-entitlements/media-plugin-helper.xml - + tools/signing/macos-entitlements/plugin-container.xml - tools/signing/rcodesign-notary-submit - tools/signing/set-config.rcodesign - tools/signing/setup-rcodesign - + tools/signing/wrappers/sign-rcodesign-128 Changes: ===================================== projects/rcodesign/build ===================================== @@ -12,7 +12,7 @@ tar -C /var/tmp/build -xf [% project %]-[% c('version') %].tar.[% c('compress_ta tar -C $builddir -xf $rootdir/[% c('input_files_by_name/cargo_vendor') %] cd $builddir -mkdir .cargo +mkdir -p .cargo cat >> .cargo/config << 'EOF' [source.crates-io] ===================================== projects/rcodesign/config ===================================== @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 -version: 0.22.0 -git_hash: cb406b5feb1439131f36ec60375f607a7f82439d +version: 0.27.0 +git_hash: 703362f818272d43b3844105863739bcb6f1a11a git_url: https://github.com/indygreg/apple-platform-rs.git container: use_container: 1 @@ -16,4 +16,4 @@ steps: project: rcodesign pkg_type: cargo_vendor norec: - sha256sum: 04c21203d2948ebfa59f1039d4481e419e656ec636293b4846fdb7868cfd98f0 + sha256sum: c778deb784f68b48a51c6c54095c6cd45e37847d65e9db36ce39b4326874ae9c ===================================== tools/signing/linux-signer-rcodesign-sign ===================================== @@ -19,5 +19,5 @@ destdir=~/"$SIGNING_PROJECTNAME-$tbb_version-macos-signed" mkdir -p $destdir rm -f "$destdir/$output_file" -sudo -u signing-macos -- /signing/tor-browser-build/tools/signing/wrappers/sign-rcodesign ~/"$SIGNING_PROJECTNAME-$tbb_version"/$(project-name)-macos-${tbb_version}.dmg "$display_name" +sudo -u signing-macos -- /signing/tor-browser-build/tools/signing/wrappers/sign-rcodesign-128 ~/"$SIGNING_PROJECTNAME-$tbb_version"/$(project-name)-macos-${tbb_version}.dmg "$display_name" cp "/home/signing-macos/last-signed-$display_name.tar.zst" "$destdir/$output_file" ===================================== tools/signing/machines-setup/setup-signing-machine ===================================== @@ -91,6 +91,7 @@ sudoers_file sign-mar sudoers_file sign-exe sudoers_file sign-apk sudoers_file sign-rcodesign +sudoers_file sign-rcodesign-128 sudoers_file set-date authorized_keys boklm boklm-tb-release.pub boklm-yk1.pub ===================================== tools/signing/machines-setup/sudoers.d/sign-rcodesign-128 ===================================== @@ -0,0 +1,2 @@ +Defaults>signing-macos env_keep += "SIGNING_PROJECTNAME tbb_version_type RCODESIGN_PW" +%signing ALL = (signing-macos) NOPASSWD: /signing/tor-browser-build/tools/signing/wrappers/sign-rcodesign-128 ===================================== tools/signing/macos-entitlements/firefox.browser.xml ===================================== @@ -0,0 +1,34 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> + +<plist version="1.0"> + <dict> +  + <key>com.apple.security.cs.disable-library-validation</key><true/> + +  + <key>com.apple.security.cs.allow-jit</key><true/> + +  + <key>com.apple.security.device.audio-input</key><true/> + +  + <key>com.apple.security.device.camera</key><true/> + +  + <key>com.apple.security.personal-information.location</key><true/> + +  + <key>com.apple.security.smartcard</key><true/> + +  + <key>com.apple.application-identifier</key> + <string>43AQ936H96.org.mozilla.firefox</string> + +  + <key>com.apple.developer.web-browser.public-key-credential</key><true/> + </dict> +</plist> ===================================== tools/signing/macos-entitlements/media-plugin-helper.xml ===================================== @@ -0,0 +1,12 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> + +<plist version="1.0"> + <dict> +  + <key>com.apple.security.cs.disable-library-validation</key><true/> + </dict> +</plist> ===================================== tools/signing/macos-entitlements/plugin-container.xml ===================================== @@ -0,0 +1,12 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> + +<plist version="1.0"> + <dict> +  + <key>com.apple.security.cs.allow-jit</key><true/> + </dict> +</plist> ===================================== tools/signing/rcodesign-notary-submit ===================================== @@ -21,7 +21,7 @@ display_name=$(display_name) tar -C "$tmpdir" -xf "$macos_rcodesign_signed_tar_dir/$(project-name)-macos-${tbb_version}-rcodesign-signed.tar.zst" -"$script_dir/../local/rcodesign/rcodesign" notary-submit --api-key-path "$appstoreconnect_api_key_path" --staple "$tmpdir/$display_name.app" +"$script_dir/../local/rcodesign-128/rcodesign" notary-submit --api-key-path "$appstoreconnect_api_key_path" --staple "$tmpdir/$display_name.app" output_file="$(project-name)-${tbb_version}-notarized+stapled.tar.zst" tar -C "$tmpdir" -caf "$tmpdir/$output_file" "$display_name.app" ===================================== tools/signing/set-config.rcodesign ===================================== @@ -1,4 +1,4 @@ -rcodesign_version=0.22.0-bc8cc7 +rcodesign_version=0.27.0-e252fa rcodesign_filename=rcodesign-${rcodesign_version}.tar.gz -rcodesign_sha256sum=2a9eda016fff116c59f52b358e7a740f6fb5c039974f0acc8266c3605d24092a +rcodesign_sha256sum=c228c5fb06a088bc6c50a212d8d5a15425c2bcdf448bfa7f94ea5cc41321c533 rcodesign_url="https://build-sources.tbb.torproject.org/${rcodesign_filename}" ===================================== tools/signing/setup-rcodesign ===================================== @@ -35,8 +35,8 @@ function setup_rcodesign { tar -C "$tmpdir" -xf "$rcodesign_path" mv "$tmpdir/rcodesign" "$rcodesign_dir" chmod -R go+rX "$rcodesign_dir" - rm -f "$localdir/rcodesign" - ln -s "rcodesign-$rcodesign_version" "$localdir/rcodesign" + rm -f "$localdir/rcodesign-128" + ln -s "rcodesign-$rcodesign_version" "$localdir/rcodesign-128" } download_rcodesign ===================================== tools/signing/wrappers/sign-rcodesign-128 ===================================== @@ -0,0 +1,95 @@ +#!/bin/bash +set -e + +function exit_error { + for msg in "$@" + do + echo "$msg" >&2 + done + exit 1 +} + +test $# -eq 2 || exit_error "Wrong number of arguments" +dmg_file="$1" +display_name="$2" + +output_file="/home/signing-macos/last-signed-$display_name.tar.zst" +rm -f "$output_file" + +rcodesign=/signing/rcodesign-128/rcodesign +rcodesign_signing_p12_file=/home/signing-macos/keys/key-1.p12 +test -f "$rcodesign_signing_p12_file" || exit_error "$rcodesign_signing_p12_file is missing" + +tmpdir=$(mktemp -d) +trap "rm -Rf $tmpdir" EXIT +cd "$tmpdir" +7z x "$dmg_file" + +# Fix permission on files: +# https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/2… +# FIXME: Maybe we should extract the .mar file instead of the .dmg to +# preserve permissions +chmod ugo+x "$display_name/$display_name.app/Contents/MacOS"/* \ + "$display_name/$display_name.app/Contents/MacOS/updater.app/Contents/MacOS"/* \ + "$display_name/$display_name.app/Contents/MacOS/plugin-container.app/Contents/MacOS"/* \ + "$display_name/$display_name.app/Contents/MacOS/media-plugin-helper.app/Contents/MacOS"/* \ + "$display_name/$display_name.app/Contents/Frameworks/ChannelPrefs.framework/ChannelPrefs" \ + "$display_name/$display_name.app/Contents/MacOS/updater.app/Contents/Frameworks/UpdateSettings.framework/UpdateSettings" +test -d "$display_name/$display_name.app/Contents/MacOS/Tor" && \ + chmod -R ugo+x "$display_name/$display_name.app/Contents/MacOS/Tor" + +pwdir=/run/lock/rcodesign-pw +trap "rm -Rf $pwdir" EXIT +rm -Rf "$pwdir" +mkdir "$pwdir" +chmod 700 "$pwdir" +cat > "$pwdir/rcodesign-pw-2" << EOF +$RCODESIGN_PW +EOF +tr -d '\n' < "$pwdir/rcodesign-pw-2" > "$pwdir/rcodesign-pw" +rm "$pwdir/rcodesign-pw-2" + +# unset RCODESIGN_PW since it conflicts with rcodesign config +unset RCODESIGN_PW +rcodesign_opts=" + --code-signature-flags runtime + --timestamp-url http://timestamp.apple.com:8080/ts01 + --p12-file $rcodesign_signing_p12_file + --p12-password-file $pwdir/rcodesign-pw + " + +flags=() +for dir in Contents/MacOS Contents/MacOS/Tor Contents/MacOS/Tor/PluggableTransports +do + d="$display_name/$display_name.app/$dir" + test -d "$d" || continue + pushd "$d" + for file in * + do + test -f "$file" || continue + flags+=('--code-signature-flags' "$dir/$file:runtime") + done + popd +done +echo "code-signature-flags: ${flags[@]}" + +echo "**** Signing main bundle ($display_name.app) ****" +$rcodesign sign \ + $rcodesign_opts \ + "${flags[@]}" \ + --code-signature-flags Contents/MacOS/updater.app/Contents/Frameworks/UpdateSettings.framework:runtime \ + --code-signature-flags Contents/MacOS/updater.app:runtime \ + --code-signature-flags Contents/Frameworks/ChannelPrefs.framework:runtime \ + --code-signature-flags Contents/MacOS/plugin-container.app:runtime \ + --code-signature-flags Contents/MacOS/media-plugin-helper.app:runtime \ + --entitlements-xml-path Contents/MacOS/plugin-container.app:/signing/tor-browser-build/tools/signing/macos-entitlements/plugin-container.xml \ + --entitlements-xml-path Contents/MacOS/media-plugin-helper.app:/signing/tor-browser-build/tools/signing/macos-entitlements/media-plugin-helper.xml \ + --entitlements-xml-path /signing/tor-browser-build/tools/signing/macos-entitlements/firefox.browser.xml \ + -- \ + "$display_name/$display_name.app" + +rm -f "$pwdir/rcodesign-pw" +rmdir "$pwdir" +tar -C "$display_name" -caf "$output_file" "$display_name.app" +cd - +rm -Rf "$tmpdir" View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bumped Mullvad Browser and GeckoView to rebase 2 for nightly builds.
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: d54b0b7f by Pier Angelo Vendrame at 2024-07-30T18:30:58+02:00 Bumped Mullvad Browser and GeckoView to rebase 2 for nightly builds. - - - - - 2 changed files: - projects/firefox/config - projects/geckoview/config Changes: ===================================== projects/firefox/config ===================================== @@ -17,10 +17,8 @@ var: firefox_platform_version: 128.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '14.0' - # Note: In 14.0a1, mullvad-browser is on browser_rebase: 1! browser_rebase: 2 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - # Note: In 14.0a1, mullvad-browser is on browser_build: 2! browser_build: 1 branding_directory_prefix: 'tb' copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' @@ -109,10 +107,6 @@ targets: gitlab_project: https://gitlab.torproject.org/tpo/applications/mullvad-browser updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' nightly_updates_publish_dir_prefix: mullvadbrowser- - # TODO: Remove/update me for 14.0a2 when/if in-sync with tor-browser - browser_rebase: 1 - # TODO: Remove/update me for 14.0a2 when/if in-sync with tor-browser - browser_build: 2 linux-x86_64: var: ===================================== projects/geckoview/config ===================================== @@ -17,7 +17,7 @@ container: var: geckoview_version: 128.0esr - browser_branch: 14.0-1 + browser_branch: 14.0-2 browser_build: 1 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-128.0esr-14.0-2-build1
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed new tag mullvad-browser-128.0esr-14.0-2-build1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.0esr-14.0-2] 29 commits: MB 38: Mullvad Browser configuration
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch mullvad-browser-128.0esr-14.0-2 at The Tor Project / Applications / Mullvad Browser Commits: c973c48c by Pier Angelo Vendrame at 2024-07-30T14:45:53+02:00 MB 38: Mullvad Browser configuration - - - - - 2462093b by Pier Angelo Vendrame at 2024-07-30T14:45:54+02:00 MB 1: Mullvad Browser branding See also: mullvad-browser#5: Product name and directory customization mullvad-browser#12: Create new branding directories and integrate Mullvad icons+branding mullvad-browser#14: Remove Default Built-in bookmarks mullvad-browser#35: Add custom PDF icons for Windows builds mullvad-browser#48: Replace Mozilla copyright and legal trademarks in mullvadbrowser.exe metadata mullvad-browser#51: Update trademark string mullvad-browser#104: Update shipped dll metadata copyright/licensing info mullvad-browser#107: Add alpha and nightly icons - - - - - a0e6251a by Beatriz Rizental at 2024-07-30T15:01:08+02:00 fixup! MB 1: Mullvad Browser branding - - - - - 8d0e6099 by Pier Angelo Vendrame at 2024-07-30T15:01:09+02:00 MB 20: Allow packaged-addons in PBM. We install a few addons from the distribution directory, but they are not automatically enabled for PBM mode. This commit modifies the code that installs them to also add the PBM permission to the known ones. - - - - - 2b1dca6b by Pier Angelo Vendrame at 2024-07-30T15:01:13+02:00 MB 63: Customize some about pages for Mullvad Browser Also: mullvad-browser#57: Purge unneeded about: pages - - - - - 06b2c505 by Beatriz Rizental at 2024-07-30T15:01:19+02:00 fixup! MB 63: Customize some about pages for Mullvad Browser - - - - - ece4cf2f by Pier Angelo Vendrame at 2024-07-30T15:01:19+02:00 MB 37: Customization for the about dialog - - - - - 3816bdc6 by Beatriz Rizental at 2024-07-30T17:51:28+02:00 fixup! MB 37: Customization for the about dialog - - - - - 802a81b7 by Henry Wilkes at 2024-07-30T17:51:36+02:00 MB 39: Add home page about:mullvad-browser - - - - - eb3e9a4c by Beatriz Rizental at 2024-07-30T17:51:37+02:00 fixup! MB 39: Add home page about:mullvad-browser - - - - - 6c91f268 by hackademix at 2024-07-30T17:51:38+02:00 MB 97: Remove UI cues to install new extensions. - - - - - 5c428612 by hackademix at 2024-07-30T17:51:38+02:00 MB 47: uBlock Origin customization - - - - - 978ba4f0 by Beatriz Rizental at 2024-07-30T17:51:39+02:00 fixup! MB 47: uBlock Origin customization - - - - - ffc45078 by Pier Angelo Vendrame at 2024-07-30T17:51:40+02:00 MB 21: Disable the password manager This commit disables the about:login page and removes the "Login and Password" section of about:preferences. We do not do anything to the real password manager of Firefox, that is in toolkit: it contains C++ parts that make it difficult to actually prevent it from being built.. Finally, we modify the the function that opens about:login to report an error in the console so that we can quickly get a backtrace to the code that tries to use it. - - - - - 8df34002 by Beatriz Rizental at 2024-07-30T17:51:40+02:00 fixup! MB 21: Disable the password manager - - - - - d5685d80 by Pier Angelo Vendrame at 2024-07-30T17:51:41+02:00 MB 112: Updater customization for Mullvad Browser MB 71: Set the updater base URL to Mullvad domain - - - - - 4f52e254 by Beatriz Rizental at 2024-07-30T17:51:41+02:00 fixup! MB 112: Updater customization for Mullvad Browser - - - - - a72bde96 by Nicolas Vigier at 2024-07-30T17:51:42+02:00 MB 79: Add Mullvad Browser MAR signing keys MB 256: Add mullvad-browser nightly mar signing key - - - - - ac7a0cd1 by Pier Angelo Vendrame at 2024-07-30T17:51:42+02:00 MB 34: Hide unsafe and unwanted preferences UI about:preferences allow to override some of our defaults, that could be fingeprintable or have some other unwanted consequences. - - - - - 389150a5 by Pier Angelo Vendrame at 2024-07-30T17:51:43+02:00 MB 160: Disable the cookie exceptions button Besides disabling the "Delete on close checkbox", disable also the "Manage Exceptions" button when always using PBM. - - - - - ca83366e by hackademix at 2024-07-30T17:51:44+02:00 MB 163: prevent uBlock Origin from being uninstalled/disabled - - - - - ca262991 by Richard Pospesel at 2024-07-30T17:51:44+02:00 MB 188: Customize Gitlab Issue and Merge templates - - - - - 0b2c6394 by rui hildt at 2024-07-30T17:51:45+02:00 MB 213: Customize the search engines list - - - - - 8d319f53 by Beatriz Rizental at 2024-07-30T17:51:45+02:00 fixup! MB 213: Customize the search engines list - - - - - 35d1d01a by hackademix at 2024-07-30T17:51:46+02:00 MB 214: Enable cross-tab identity leak protection in "quiet" mode - - - - - ae34c89c by Pier Angelo Vendrame at 2024-07-30T17:51:46+02:00 MB 234: Disable OS spoofing in HTTP User-Agent. This commits makes it possible to disable OS spoofing in the HTTP User-Agent header, to see if matching header and JS property improve usability. - - - - - 85eaf2cc by Pier Angelo Vendrame at 2024-07-30T17:51:47+02:00 MB 80: Enable Mullvad Browser as a default browser - - - - - 6e132f09 by Beatriz Rizental at 2024-07-30T17:51:48+02:00 fixup! MB 80: Enable Mullvad Browser as a default browser - - - - - 054003a2 by Pier Angelo Vendrame at 2024-07-30T17:51:48+02:00 MB 320: Temporarily disable WebRTC and WDBA on Windows. WebRTC should be re-enabled when tor-browser#42758 is resolved, and and the default browser agent when in general we make this feature work again. - - - - - 30 changed files: - .gitlab/issue_templates/Emergency Security Issue.md - + .gitlab/issue_templates/Rebase Browser - Alpha.md - + .gitlab/issue_templates/Rebase Browser - Stable.md - .gitlab/merge_request_templates/default.md - browser/app/Makefile.in - browser/app/macbuild/Contents/Info.plist.in - browser/app/module.ver - browser/app/firefox.exe.manifest → browser/app/mullvadbrowser.exe.manifest - + browser/app/profile/000-mullvad-browser.js - browser/app/profile/001-base-profile.js - browser/base/content/aboutDialog.xhtml - browser/base/content/appmenu-viewcache.inc.xhtml - browser/base/content/browser-menubar.inc - browser/base/content/browser-places.js - browser/base/content/browser.js - browser/base/content/default-bookmarks.html - browser/base/content/nsContextMenu.js - browser/base/content/overrides/app-license.html - browser/base/content/pageinfo/pageInfo.xhtml - browser/base/content/utilityOverlay.js - browser/branding/branding-common.mozbuild - + browser/branding/mb-alpha/VisualElements_150.png - + browser/branding/mb-alpha/VisualElements_70.png - + browser/branding/mb-alpha/configure.sh - + browser/branding/mb-alpha/content/about-logo.png - + browser/branding/mb-alpha/content/about-logo.svg - + browser/branding/mb-alpha/content/about-logo(a)2x.png - + browser/branding/mb-alpha/content/about-wordmark.svg - + browser/branding/mb-alpha/content/about.png - + browser/branding/mb-alpha/content/aboutDialog.css The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/b9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/b9… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: Bug 41195: Simplify the go update in relprep.py.
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 1fb6aaae by Pier Angelo Vendrame at 2024-07-30T11:10:15+02:00 Bug 41195: Simplify the go update in relprep.py. Since we do not support Windows 7 anymore, we can use only one version of Go, and simplify the function that looks for updates in relprep.py. - - - - - f51f78b2 by Pier Angelo Vendrame at 2024-07-30T11:10:28+02:00 Bug 41200: Remove the tools for allowed_addons.json. For tor-browser#42618 and tor-browser#42619, we stopped using the allowed_addons.json, but initially we kept the tools to update it. However, the file creates some confusion, because it is used only for Andorid, but should be updated also when doing desktop-only releases when they update NoScript, or Android nightly builds might fail. So, since as a matter of fact we do not use that file anymore, we decided to stop updating it and remove the related tools. - - - - - 9 changed files: - − .gitattributes - .gitlab/issue_templates/Release Prep - Tor Browser Alpha.md - .gitlab/issue_templates/Release Prep - Tor Browser Stable.md - − projects/browser/allowed_addons.json - projects/browser/build.android - projects/browser/config - − projects/browser/verify_allowed_addons.py - − tools/fetch_allowed_addons.py - tools/relprep.py Changes: ===================================== .gitattributes deleted ===================================== @@ -1 +0,0 @@ -projects/browser/allowed_addons.json -diff ===================================== .gitlab/issue_templates/Release Prep - Tor Browser Alpha.md ===================================== @@ -59,8 +59,6 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - [ ] `fenix_version` : update to match alpha `firefox-android` build tag - [ ] `browser_branch` : update to match alpha `firefox-android` build tag - [ ] `browser_build` : update to match alpha `firefox-android` build tag - - [ ] Update allowed_addons.json by running (from `tor-browser-build` root): - - `./tools/fetch_allowed_addons.py > projects/browser/allowed_addons.json` - [ ] Update `projects/translation/config`: - [ ] run `make list_translation_updates-alpha` to get updated hashes - [ ] `steps/base-browser/git_hash` : update with `HEAD` commit of project's `base-browser` branch ===================================== .gitlab/issue_templates/Release Prep - Tor Browser Stable.md ===================================== @@ -60,8 +60,6 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE - [ ] `browser_branch` : update to match stable `firefox-android` build tag - [ ] `browser_build` : update to match stable `firefox-android` build tag variant: Beta - - [ ] Update allowed_addons.json by running (from `tor-browser-build` root): - - `./tools/fetch_allowed_addons.py > projects/browser/allowed_addons.json` - [ ] Update `projects/translation/config`: - [ ] run `make list_translation_updates-release` to get updated hashes - [ ] `steps/base-browser/git_hash` : update with `HEAD` commit of project's `base-browser` branch ===================================== projects/browser/allowed_addons.json deleted ===================================== The diff for this file was not included because it is too large. ===================================== projects/browser/build.android ===================================== @@ -39,15 +39,6 @@ unzip ../omni.ja }) %] popd - -[% IF c("var/verify_allowed_addons") %] - # Check that allowed_addons.json contains the right versions of our bundled extension(s). - # If so, replace the default allowed_addons.json by ours in the apk assets folder. - $rootdir/verify_allowed_addons.py "$rootdir/allowed_addons.json" "$noscript_path" -[% END %] - -mv $rootdir/allowed_addons.json $assets_dir/allowed_addons.json - mkdir apk pushd apk 7zz x "$apk" ===================================== projects/browser/config ===================================== @@ -49,7 +49,6 @@ targets: android: build: '[% INCLUDE build.android %]' var: - verify_allowed_addons: 1 arch_deps: - 7zip - openjdk-17-jdk-headless @@ -160,10 +159,6 @@ input_files: enable: '[% c("var/namecoin") %]' - filename: namecoin.patch enable: '[% c("var/namecoin") %]' - - filename: allowed_addons.json - enable: '[% c("var/android") %]' - - filename: verify_allowed_addons.py - enable: '[% c("var/android") && c("var/verify_allowed_addons") %]' - project: manual name: manual enable: '[% ! c("var/android") && c("var/tor-browser") %]' ===================================== projects/browser/verify_allowed_addons.py deleted ===================================== @@ -1,49 +0,0 @@ -#!/usr/bin/env python3 - -import json -import sys -import hashlib -import zipfile - -def find_addon(addons, addon_id): - results = addons['results'] - for x in results: - addon = x['addon'] - if addon['guid'] == addon_id: - return addon - sys.exit("Error: cannot find addon " + addon_id) - -def verify_extension_version(addons, addon_id, version): - addon = find_addon(addons, addon_id) - expected_version = addon['current_version']['version'] - if version != expected_version: - sys.exit("Error: version " + version + " != " + expected_version) - -def verify_extension_hash(addons, addon_id, hash): - addon = find_addon(addons, addon_id) - expected_hash = addon["current_version"]["files"][0]["hash"] - if hash != expected_hash: - sys.exit("Error: hash " + hash + " != " + expected_hash) - -def read_extension_manifest(path): - return json.loads(zipfile.ZipFile(path, 'r').read('manifest.json')) - -def main(argv): - allowed_addons_path = argv[0] - noscript_path = argv[1] - - addons = None - with open(allowed_addons_path, 'r') as file: - addons = json.loads(file.read()) - - noscript_hash = None - with open(noscript_path, 'rb') as file: - noscript_hash = "sha256:" + hashlib.sha256(file.read()).hexdigest() - - noscript_version = read_extension_manifest(noscript_path)["version"] - - verify_extension_hash(addons, '{73a6fe31-595d-460b-a920-fcc0f8843232}', noscript_hash) - verify_extension_version(addons, '{73a6fe31-595d-460b-a920-fcc0f8843232}', noscript_version) - -if __name__ == "__main__": - main(sys.argv[1:]) ===================================== tools/fetch_allowed_addons.py deleted ===================================== @@ -1,53 +0,0 @@ -#!/usr/bin/env python3 - -import urllib.request -import json -import base64 -import sys - -NOSCRIPT = "{73a6fe31-595d-460b-a920-fcc0f8843232}" - - -def fetch(x): - with urllib.request.urlopen(x) as response: - return response.read() - - -def find_addon(addons, addon_id): - results = addons["results"] - for x in results: - addon = x["addon"] - if addon["guid"] == addon_id: - return addon - - -def fetch_and_embed_icons(addons): - results = addons["results"] - for x in results: - addon = x["addon"] - icon_data = fetch(addon["icon_url"]) - addon["icon_url"] = "data:image/png;base64," + str( - base64.b64encode(icon_data), "utf8" - ) - - -def fetch_allowed_addons(amo_collection=None): - if amo_collection is None: - amo_collection = "83a9cccfe6e24a34bd7b155ff9ee32" - url = f"https://services.addons.mozilla.org/api/v4/accounts/account/mozilla/collect…" - data = json.loads(fetch(url)) - fetch_and_embed_icons(data) - data["results"].sort(key=lambda x: x["addon"]["guid"]) - return data - - -def main(argv): - data = fetch_allowed_addons(argv[0] if len(argv) > 1 else None) - # Check that NoScript is present - if find_addon(data, NOSCRIPT) is None: - sys.exit("Error: cannot find NoScript.") - print(json.dumps(data, indent=2, ensure_ascii=False)) - - -if __name__ == "__main__": - main(sys.argv[1:]) ===================================== tools/relprep.py ===================================== @@ -4,7 +4,6 @@ from collections import namedtuple import configparser from datetime import datetime, timezone from hashlib import sha256 -import json import locale import logging from pathlib import Path @@ -16,7 +15,6 @@ from git import Repo import requests import ruamel.yaml -from fetch_allowed_addons import NOSCRIPT, fetch_allowed_addons, find_addon import fetch_changelogs from update_manual import update_manual @@ -303,28 +301,27 @@ class ReleasePreparation: logger.info("Updating addons") config = self.load_config("browser") - amo_data = fetch_allowed_addons() - logger.debug("Fetched AMO data") - if self.android: - with ( - self.base_path / "projects/browser/allowed_addons.json" - ).open("w") as f: - json.dump(amo_data, f, indent=2) - - noscript = find_addon(amo_data, NOSCRIPT) logger.debug("Updating NoScript") - self.update_addon_amo(config, "noscript", noscript) + self.update_addon_amo( + config, "noscript", "{73a6fe31-595d-460b-a920-fcc0f8843232}" + ) if self.mullvad_browser: logger.debug("Updating uBlock Origin") - ublock = find_addon(amo_data, "uBlock0(a)raymondhill.net") - self.update_addon_amo(config, "ublock-origin", ublock) + self.update_addon_amo( + config, "ublock-origin", "uBlock0(a)raymondhill.net" + ) logger.debug("Updating the Mullvad Browser extension") self.update_mullvad_addon(config) self.save_config("browser", config) - def update_addon_amo(self, config, name, addon): - addon = addon["current_version"]["files"][0] + def update_addon_amo(self, config, name, addon_id): + r = requests.get( + f"https://services.addons.mozilla.org/api/v4/addons/addon/{addon_id}" + ) + r.raise_for_status() + amo_data = r.json() + addon = amo_data["current_version"]["files"][0] assert addon["hash"].startswith("sha256:") addon_input = self.find_input(config, name) addon_input["URL"] = addon["url"] @@ -448,9 +445,9 @@ class ReleasePreparation: major = major[2:] return major + logger.info("Updating Go") config = self.load_config("go") - # TODO: When Windows 7 goes EOL use config["version"] - major = get_major(config["var"]["go_1_21"]) + major = get_major(config["version"]) r = requests.get("https://go.dev/dl/?mode=json") r.raise_for_status() @@ -463,7 +460,7 @@ class ReleasePreparation: if not data: raise KeyError("Could not find information for our Go series.") # Skip the "go" prefix in the version. - config["var"]["go_1_21"] = data["version"][2:] + config["version"] = data["version"][2:] sha256sum = "" for f in data["files"]: @@ -472,15 +469,7 @@ class ReleasePreparation: break if not sha256sum: raise KeyError("Go source package not found.") - updated_hash = False - for input_ in config["input_files"]: - if "URL" in input_ and "var/go_1_21" in input_["URL"]: - input_["sha256sum"] = sha256sum - updated_hash = True - break - if not updated_hash: - raise KeyError("Could not find a matching entry in input_files.") - + self.find_input(config, "go")["sha256sum"] = sha256sum self.save_config("go", config) def update_manual(self): @@ -556,18 +545,11 @@ class ReleasePreparation: # Sometimes this might be incorrect for alphas, but let's # keep it for now. kwargs["firefox"] += "esr" - self.check_update_simple(kwargs, prev_tag, "tor") - self.check_update_simple(kwargs, prev_tag, "openssl") - self.check_update_simple(kwargs, prev_tag, "zlib") - self.check_update_simple(kwargs, prev_tag, "zstd") - try: - self.check_update(kwargs, prev_tag, "go", ["var", "go_1_21"]) - except KeyError as e: - logger.warning( - "Go: var/go_1_21 not found, marking Go as not updated.", - exc_info=e, - ) - pass + self.check_update(kwargs, prev_tag, "tor") + self.check_update(kwargs, prev_tag, "openssl") + self.check_update(kwargs, prev_tag, "zlib") + self.check_update(kwargs, prev_tag, "zstd") + self.check_update(kwargs, prev_tag, "go") self.check_update_extensions(kwargs, prev_tag) logger.debug("Changelog arguments for %s: %s", tag_prefix, kwargs) cb = fetch_changelogs.ChangelogBuilder( @@ -587,7 +569,7 @@ class ReleasePreparation: with (self.base_path / path).open("w") as f: f.write(changelogs + "\n" + last_changelogs + "\n") - def check_update(self, updates, prev_tag, project, key): + def check_update(self, updates, prev_tag, project, key=["version"]): old_val = self.load_old_config(prev_tag.tag, project) new_val = self.load_config(project) for k in key: @@ -596,9 +578,6 @@ class ReleasePreparation: if old_val != new_val: updates[project] = new_val - def check_update_simple(self, updates, prev_tag, project): - self.check_update(updates, prev_tag, project, ["version"]) - def check_update_extensions(self, updates, prev_tag): old_config = self.load_old_config(prev_tag, "browser") new_config = self.load_config("browser") View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag FIREFOX_128_0esr_RELEASE
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed new tag FIREFOX_128_0esr_RELEASE at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/FIREF… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.0esr-14.0-2] 3 commits: fixup! Add CI for Base Browser
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch mullvad-browser-128.0esr-14.0-2 at The Tor Project / Applications / Mullvad Browser Commits: f0717dcb by Beatriz Rizental at 2024-07-29T17:00:34+02:00 fixup! Add CI for Base Browser - - - - - 9448012d by Pier Angelo Vendrame at 2024-07-30T09:06:25+02:00 fixup! Firefox preference overrides. Bug 42872: Disable translations. Currently, the UX is kinda bad in Tor Browser (RFP might be a reason). Also, we should audit it first, to make sure it is not a fingerprinting concern (or if it is, we should make sure it is an acceptable one). - - - - - b94825b7 by Beatriz Rizental at 2024-07-30T12:25:35+02:00 Revert "Bug 42725: Fix upstream lint issues" This reverts commit 0c49b3f6b7101e95e33f697234648eeaef070a46. - - - - - 5 changed files: - .gitlab/ci/lint.yml - browser/app/profile/001-base-profile.js - dom/base/nsGlobalWindowOuter.cpp - dom/security/nsContentSecurityUtils.cpp - modules/libpref/Preferences.cpp Changes: ===================================== .gitlab/ci/lint.yml ===================================== @@ -39,9 +39,8 @@ eslint: # The plugin implementing custom checks. - 'tools/lint/eslint/eslint-plugin-mozilla/**' - 'tools/lint/eslint/eslint-plugin-spidermonkey-js/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' stylelint: extends: .base @@ -59,9 +58,8 @@ stylelint: # Run when stylelint policies change. - '**/.stylelintignore' - '**/*stylelintrc*' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-black: extends: .base @@ -80,9 +78,8 @@ py-black: - '**/*.mozbuild' - 'pyproject.toml' - 'tools/lint/black.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-ruff: extends: .base @@ -101,9 +98,8 @@ py-ruff: - 'tools/lint/ruff.yml' - 'tools/lint/python/ruff.py' - 'tools/lint/python/ruff_requirements.txt' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' yaml: extends: .base @@ -118,9 +114,8 @@ yaml: - '**/*.yml' - '**/*.yaml' - '**/.ymllint' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' shellcheck: extends: .base @@ -134,9 +129,8 @@ shellcheck: # - '**/*.sh' - 'tools/lint/shellcheck.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' clang-format: extends: .base @@ -156,9 +150,8 @@ clang-format: - '**/*.m' - '**/*.mm' - 'tools/lint/clang-format.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' rustfmt: extends: .base @@ -172,9 +165,8 @@ rustfmt: # - '**/*.rs' - 'tools/lint/rustfmt.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' fluent-lint: extends: .base @@ -189,9 +181,8 @@ fluent-lint: - '**/*.ftl' - 'tools/lint/fluent-lint.yml' - 'tools/lint/fluent-lint/exclusions.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' localization: extends: .base @@ -208,9 +199,8 @@ localization: - 'third_party/python/compare-locales/**' - 'third_party/python/fluent/**' - 'tools/lint/l10n.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mingw-capitalization: extends: .base @@ -227,9 +217,8 @@ mingw-capitalization: - '**/*.c' - '**/*.h' - 'tools/lint/mingw-capitalization.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mscom-init: extends: .base @@ -246,9 +235,8 @@ mscom-init: - '**/*.c' - '**/*.h' - 'tools/lint/mscom-init.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' file-whitespace: extends: .base @@ -277,9 +265,8 @@ file-whitespace: - '**/*.webidl' - '**/*.xhtml' - 'tools/lint/file-whitespace.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' test-manifest: extends: .base @@ -294,9 +281,8 @@ test-manifest: - '**/*.ini' - 'python/mozlint/**' - 'tools/lint/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' trojan-source: extends: .base @@ -315,6 +301,5 @@ trojan-source: - '**/*.py' - '**/*.rs' - 'tools/lint/trojan-source.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -259,6 +259,11 @@ pref("browser.newtabpage.activity-stream.asrouter.providers.messaging-experiment // Disable fetching asrouter.ftl and related console errors (tor-browser#40763). pref("browser.newtabpage.activity-stream.asrouter.useRemoteL10n", false); +// tor-browser#42872, #42555: Disable translations. +// Translation have a bad UX in 128 (and with our config). Maybe we will +// re-enable after auditing and fixing the UX. +pref("browser.translations.enable", false); + // tor-browser#41945 - disable automatic cookie banners dismissal until // we're sure it does not causes fingerprinting risks or other issues. pref("cookiebanners.service.mode", 0); ===================================== dom/base/nsGlobalWindowOuter.cpp ===================================== @@ -7296,7 +7296,7 @@ void nsGlobalWindowOuter::InitWasOffline() { mWasOffline = NS_IsOffline(); } #if defined(_WINDOWS_) && !defined(MOZ_WRAPPED_WINDOWS_H) # pragma message( \ - "wrapper failure reason: " MOZ_WINDOWS_WRAPPER_DISABLED_REASON) + "wrapper failure reason: " MOZ_WINDOWS_WRAPPER_DISABLED_REASON) # error "Never include unwrapped windows.h in this file!" #endif ===================================== dom/security/nsContentSecurityUtils.cpp ===================================== @@ -1332,20 +1332,20 @@ void nsContentSecurityUtils::AssertAboutPageHasCSP(Document* aDocument) { // This allowlist contains about: pages that are permanently allowed to // render without a CSP applied. static nsLiteralCString sAllowedAboutPagesWithNoCSP[] = { - // about:blank is a special about page -> no CSP - "about:blank"_ns, - // about:srcdoc is a special about page -> no CSP - "about:srcdoc"_ns, - // about:sync-log displays plain text only -> no CSP - "about:sync-log"_ns, - // about:logo just displays the firefox logo -> no CSP - "about:logo"_ns, - // about:sync is a special mozilla-signed developer addon with low usage - // -> - // no CSP - "about:sync"_ns, + // about:blank is a special about page -> no CSP + "about:blank"_ns, + // about:srcdoc is a special about page -> no CSP + "about:srcdoc"_ns, + // about:sync-log displays plain text only -> no CSP + "about:sync-log"_ns, + // about:logo just displays the firefox logo -> no CSP + "about:logo"_ns, + // about:sync is a special mozilla-signed developer addon with low usage + // -> + // no CSP + "about:sync"_ns, # if defined(ANDROID) - "about:config"_ns, + "about:config"_ns, # endif }; ===================================== modules/libpref/Preferences.cpp ===================================== @@ -6100,8 +6100,7 @@ void UnloadPrefsModule() { Preferences::Shutdown(); } // Preference Sanitization Related Code --------------------------------------- -#define PREF_LIST_ENTRY(s) \ - { s, (sizeof(s) / sizeof(char)) - 1 } +#define PREF_LIST_ENTRY(s) {s, (sizeof(s) / sizeof(char)) - 1} struct PrefListEntry { const char* mPrefBranch; size_t mLen; View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/d7… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/d7… You're receiving this email because of your account on gitlab.torproject.org.

1 0