- tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser-build][main] 4 commits: Bug 41199: Duplicate wrappers/sign-rcodesign as wrappers/sign-rcodesign-128
by morgan (＠morgan) 30 Jul '24

30 Jul '24

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 1ae99c2b by Nicolas Vigier at 2024-07-30T17:49:28+00:00 Bug 41199: Duplicate wrappers/sign-rcodesign as wrappers/sign-rcodesign-128 In order to modify the `sign-rcodesign` wrapper for 128esr changes, while keeping support for the 115esr branch, we duplicate the script. After the last 115esr based release we should remove it: * copying `sign-rcodesign-128` to `sign-rcodesign`, * reverting this commit, * removing tools/signing/*.entitlements.xml, * and adding instructions in `machines-setup/setup-signing-machine` to remove `/etc/sudoers.d/sign-rcodesign-128`. - - - - - 79c986b6 by Nicolas Vigier at 2024-07-30T17:49:28+00:00 Bug 40553: Use different entitlements files for parent and child processes We copy entitlements files from mozilla, from the esr128 branch, in directory `security/mac/hardenedruntime/v2/production`. In the file `taskcluster/config.yml`, `mac-signing/hardened-sign-config` lists the different entitlements files used for the different files. - - - - - 95ee823b by Nicolas Vigier at 2024-07-30T17:49:28+00:00 Bug 41199: Update rcodesign to 0.27.0 This also changes the installation directory to `rcodesign-128` instead of `rcodesign`, since we want to keep the old version for stable releases signing. - - - - - 45c352b1 by Nicolas Vigier at 2024-07-30T17:49:28+00:00 Bug 41199: Update sign-rcodesign-128 for esr128 changes - - - - - 12 changed files: - projects/rcodesign/build - projects/rcodesign/config - tools/signing/linux-signer-rcodesign-sign - tools/signing/machines-setup/setup-signing-machine - + tools/signing/machines-setup/sudoers.d/sign-rcodesign-128 - + tools/signing/macos-entitlements/firefox.browser.xml - + tools/signing/macos-entitlements/media-plugin-helper.xml - + tools/signing/macos-entitlements/plugin-container.xml - tools/signing/rcodesign-notary-submit - tools/signing/set-config.rcodesign - tools/signing/setup-rcodesign - + tools/signing/wrappers/sign-rcodesign-128 Changes: ===================================== projects/rcodesign/build ===================================== @@ -12,7 +12,7 @@ tar -C /var/tmp/build -xf [% project %]-[% c('version') %].tar.[% c('compress_ta tar -C $builddir -xf $rootdir/[% c('input_files_by_name/cargo_vendor') %] cd $builddir -mkdir .cargo +mkdir -p .cargo cat >> .cargo/config << 'EOF' [source.crates-io] ===================================== projects/rcodesign/config ===================================== @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 -version: 0.22.0 -git_hash: cb406b5feb1439131f36ec60375f607a7f82439d +version: 0.27.0 +git_hash: 703362f818272d43b3844105863739bcb6f1a11a git_url: https://github.com/indygreg/apple-platform-rs.git container: use_container: 1 @@ -16,4 +16,4 @@ steps: project: rcodesign pkg_type: cargo_vendor norec: - sha256sum: 04c21203d2948ebfa59f1039d4481e419e656ec636293b4846fdb7868cfd98f0 + sha256sum: c778deb784f68b48a51c6c54095c6cd45e37847d65e9db36ce39b4326874ae9c ===================================== tools/signing/linux-signer-rcodesign-sign ===================================== @@ -19,5 +19,5 @@ destdir=~/"$SIGNING_PROJECTNAME-$tbb_version-macos-signed" mkdir -p $destdir rm -f "$destdir/$output_file" -sudo -u signing-macos -- /signing/tor-browser-build/tools/signing/wrappers/sign-rcodesign ~/"$SIGNING_PROJECTNAME-$tbb_version"/$(project-name)-macos-${tbb_version}.dmg "$display_name" +sudo -u signing-macos -- /signing/tor-browser-build/tools/signing/wrappers/sign-rcodesign-128 ~/"$SIGNING_PROJECTNAME-$tbb_version"/$(project-name)-macos-${tbb_version}.dmg "$display_name" cp "/home/signing-macos/last-signed-$display_name.tar.zst" "$destdir/$output_file" ===================================== tools/signing/machines-setup/setup-signing-machine ===================================== @@ -91,6 +91,7 @@ sudoers_file sign-mar sudoers_file sign-exe sudoers_file sign-apk sudoers_file sign-rcodesign +sudoers_file sign-rcodesign-128 sudoers_file set-date authorized_keys boklm boklm-tb-release.pub boklm-yk1.pub ===================================== tools/signing/machines-setup/sudoers.d/sign-rcodesign-128 ===================================== @@ -0,0 +1,2 @@ +Defaults>signing-macos env_keep += "SIGNING_PROJECTNAME tbb_version_type RCODESIGN_PW" +%signing ALL = (signing-macos) NOPASSWD: /signing/tor-browser-build/tools/signing/wrappers/sign-rcodesign-128 ===================================== tools/signing/macos-entitlements/firefox.browser.xml ===================================== @@ -0,0 +1,34 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> + +<plist version="1.0"> + <dict> +  + <key>com.apple.security.cs.disable-library-validation</key><true/> + +  + <key>com.apple.security.cs.allow-jit</key><true/> + +  + <key>com.apple.security.device.audio-input</key><true/> + +  + <key>com.apple.security.device.camera</key><true/> + +  + <key>com.apple.security.personal-information.location</key><true/> + +  + <key>com.apple.security.smartcard</key><true/> + +  + <key>com.apple.application-identifier</key> + <string>43AQ936H96.org.mozilla.firefox</string> + +  + <key>com.apple.developer.web-browser.public-key-credential</key><true/> + </dict> +</plist> ===================================== tools/signing/macos-entitlements/media-plugin-helper.xml ===================================== @@ -0,0 +1,12 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> + +<plist version="1.0"> + <dict> +  + <key>com.apple.security.cs.disable-library-validation</key><true/> + </dict> +</plist> ===================================== tools/signing/macos-entitlements/plugin-container.xml ===================================== @@ -0,0 +1,12 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> + +<plist version="1.0"> + <dict> +  + <key>com.apple.security.cs.allow-jit</key><true/> + </dict> +</plist> ===================================== tools/signing/rcodesign-notary-submit ===================================== @@ -21,7 +21,7 @@ display_name=$(display_name) tar -C "$tmpdir" -xf "$macos_rcodesign_signed_tar_dir/$(project-name)-macos-${tbb_version}-rcodesign-signed.tar.zst" -"$script_dir/../local/rcodesign/rcodesign" notary-submit --api-key-path "$appstoreconnect_api_key_path" --staple "$tmpdir/$display_name.app" +"$script_dir/../local/rcodesign-128/rcodesign" notary-submit --api-key-path "$appstoreconnect_api_key_path" --staple "$tmpdir/$display_name.app" output_file="$(project-name)-${tbb_version}-notarized+stapled.tar.zst" tar -C "$tmpdir" -caf "$tmpdir/$output_file" "$display_name.app" ===================================== tools/signing/set-config.rcodesign ===================================== @@ -1,4 +1,4 @@ -rcodesign_version=0.22.0-bc8cc7 +rcodesign_version=0.27.0-e252fa rcodesign_filename=rcodesign-${rcodesign_version}.tar.gz -rcodesign_sha256sum=2a9eda016fff116c59f52b358e7a740f6fb5c039974f0acc8266c3605d24092a +rcodesign_sha256sum=c228c5fb06a088bc6c50a212d8d5a15425c2bcdf448bfa7f94ea5cc41321c533 rcodesign_url="https://build-sources.tbb.torproject.org/${rcodesign_filename}" ===================================== tools/signing/setup-rcodesign ===================================== @@ -35,8 +35,8 @@ function setup_rcodesign { tar -C "$tmpdir" -xf "$rcodesign_path" mv "$tmpdir/rcodesign" "$rcodesign_dir" chmod -R go+rX "$rcodesign_dir" - rm -f "$localdir/rcodesign" - ln -s "rcodesign-$rcodesign_version" "$localdir/rcodesign" + rm -f "$localdir/rcodesign-128" + ln -s "rcodesign-$rcodesign_version" "$localdir/rcodesign-128" } download_rcodesign ===================================== tools/signing/wrappers/sign-rcodesign-128 ===================================== @@ -0,0 +1,95 @@ +#!/bin/bash +set -e + +function exit_error { + for msg in "$@" + do + echo "$msg" >&2 + done + exit 1 +} + +test $# -eq 2 || exit_error "Wrong number of arguments" +dmg_file="$1" +display_name="$2" + +output_file="/home/signing-macos/last-signed-$display_name.tar.zst" +rm -f "$output_file" + +rcodesign=/signing/rcodesign-128/rcodesign +rcodesign_signing_p12_file=/home/signing-macos/keys/key-1.p12 +test -f "$rcodesign_signing_p12_file" || exit_error "$rcodesign_signing_p12_file is missing" + +tmpdir=$(mktemp -d) +trap "rm -Rf $tmpdir" EXIT +cd "$tmpdir" +7z x "$dmg_file" + +# Fix permission on files: +# https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/2… +# FIXME: Maybe we should extract the .mar file instead of the .dmg to +# preserve permissions +chmod ugo+x "$display_name/$display_name.app/Contents/MacOS"/* \ + "$display_name/$display_name.app/Contents/MacOS/updater.app/Contents/MacOS"/* \ + "$display_name/$display_name.app/Contents/MacOS/plugin-container.app/Contents/MacOS"/* \ + "$display_name/$display_name.app/Contents/MacOS/media-plugin-helper.app/Contents/MacOS"/* \ + "$display_name/$display_name.app/Contents/Frameworks/ChannelPrefs.framework/ChannelPrefs" \ + "$display_name/$display_name.app/Contents/MacOS/updater.app/Contents/Frameworks/UpdateSettings.framework/UpdateSettings" +test -d "$display_name/$display_name.app/Contents/MacOS/Tor" && \ + chmod -R ugo+x "$display_name/$display_name.app/Contents/MacOS/Tor" + +pwdir=/run/lock/rcodesign-pw +trap "rm -Rf $pwdir" EXIT +rm -Rf "$pwdir" +mkdir "$pwdir" +chmod 700 "$pwdir" +cat > "$pwdir/rcodesign-pw-2" << EOF +$RCODESIGN_PW +EOF +tr -d '\n' < "$pwdir/rcodesign-pw-2" > "$pwdir/rcodesign-pw" +rm "$pwdir/rcodesign-pw-2" + +# unset RCODESIGN_PW since it conflicts with rcodesign config +unset RCODESIGN_PW +rcodesign_opts=" + --code-signature-flags runtime + --timestamp-url http://timestamp.apple.com:8080/ts01 + --p12-file $rcodesign_signing_p12_file + --p12-password-file $pwdir/rcodesign-pw + " + +flags=() +for dir in Contents/MacOS Contents/MacOS/Tor Contents/MacOS/Tor/PluggableTransports +do + d="$display_name/$display_name.app/$dir" + test -d "$d" || continue + pushd "$d" + for file in * + do + test -f "$file" || continue + flags+=('--code-signature-flags' "$dir/$file:runtime") + done + popd +done +echo "code-signature-flags: ${flags[@]}" + +echo "**** Signing main bundle ($display_name.app) ****" +$rcodesign sign \ + $rcodesign_opts \ + "${flags[@]}" \ + --code-signature-flags Contents/MacOS/updater.app/Contents/Frameworks/UpdateSettings.framework:runtime \ + --code-signature-flags Contents/MacOS/updater.app:runtime \ + --code-signature-flags Contents/Frameworks/ChannelPrefs.framework:runtime \ + --code-signature-flags Contents/MacOS/plugin-container.app:runtime \ + --code-signature-flags Contents/MacOS/media-plugin-helper.app:runtime \ + --entitlements-xml-path Contents/MacOS/plugin-container.app:/signing/tor-browser-build/tools/signing/macos-entitlements/plugin-container.xml \ + --entitlements-xml-path Contents/MacOS/media-plugin-helper.app:/signing/tor-browser-build/tools/signing/macos-entitlements/media-plugin-helper.xml \ + --entitlements-xml-path /signing/tor-browser-build/tools/signing/macos-entitlements/firefox.browser.xml \ + -- \ + "$display_name/$display_name.app" + +rm -f "$pwdir/rcodesign-pw" +rmdir "$pwdir" +tar -C "$display_name" -caf "$output_file" "$display_name.app" +cd - +rm -Rf "$tmpdir" View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bumped Mullvad Browser and GeckoView to rebase 2 for nightly builds.
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: d54b0b7f by Pier Angelo Vendrame at 2024-07-30T18:30:58+02:00 Bumped Mullvad Browser and GeckoView to rebase 2 for nightly builds. - - - - - 2 changed files: - projects/firefox/config - projects/geckoview/config Changes: ===================================== projects/firefox/config ===================================== @@ -17,10 +17,8 @@ var: firefox_platform_version: 128.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '14.0' - # Note: In 14.0a1, mullvad-browser is on browser_rebase: 1! browser_rebase: 2 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - # Note: In 14.0a1, mullvad-browser is on browser_build: 2! browser_build: 1 branding_directory_prefix: 'tb' copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' @@ -109,10 +107,6 @@ targets: gitlab_project: https://gitlab.torproject.org/tpo/applications/mullvad-browser updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' nightly_updates_publish_dir_prefix: mullvadbrowser- - # TODO: Remove/update me for 14.0a2 when/if in-sync with tor-browser - browser_rebase: 1 - # TODO: Remove/update me for 14.0a2 when/if in-sync with tor-browser - browser_build: 2 linux-x86_64: var: ===================================== projects/geckoview/config ===================================== @@ -17,7 +17,7 @@ container: var: geckoview_version: 128.0esr - browser_branch: 14.0-1 + browser_branch: 14.0-2 browser_build: 1 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-128.0esr-14.0-2-build1
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed new tag mullvad-browser-128.0esr-14.0-2-build1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.0esr-14.0-2] 29 commits: MB 38: Mullvad Browser configuration
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch mullvad-browser-128.0esr-14.0-2 at The Tor Project / Applications / Mullvad Browser Commits: c973c48c by Pier Angelo Vendrame at 2024-07-30T14:45:53+02:00 MB 38: Mullvad Browser configuration - - - - - 2462093b by Pier Angelo Vendrame at 2024-07-30T14:45:54+02:00 MB 1: Mullvad Browser branding See also: mullvad-browser#5: Product name and directory customization mullvad-browser#12: Create new branding directories and integrate Mullvad icons+branding mullvad-browser#14: Remove Default Built-in bookmarks mullvad-browser#35: Add custom PDF icons for Windows builds mullvad-browser#48: Replace Mozilla copyright and legal trademarks in mullvadbrowser.exe metadata mullvad-browser#51: Update trademark string mullvad-browser#104: Update shipped dll metadata copyright/licensing info mullvad-browser#107: Add alpha and nightly icons - - - - - a0e6251a by Beatriz Rizental at 2024-07-30T15:01:08+02:00 fixup! MB 1: Mullvad Browser branding - - - - - 8d0e6099 by Pier Angelo Vendrame at 2024-07-30T15:01:09+02:00 MB 20: Allow packaged-addons in PBM. We install a few addons from the distribution directory, but they are not automatically enabled for PBM mode. This commit modifies the code that installs them to also add the PBM permission to the known ones. - - - - - 2b1dca6b by Pier Angelo Vendrame at 2024-07-30T15:01:13+02:00 MB 63: Customize some about pages for Mullvad Browser Also: mullvad-browser#57: Purge unneeded about: pages - - - - - 06b2c505 by Beatriz Rizental at 2024-07-30T15:01:19+02:00 fixup! MB 63: Customize some about pages for Mullvad Browser - - - - - ece4cf2f by Pier Angelo Vendrame at 2024-07-30T15:01:19+02:00 MB 37: Customization for the about dialog - - - - - 3816bdc6 by Beatriz Rizental at 2024-07-30T17:51:28+02:00 fixup! MB 37: Customization for the about dialog - - - - - 802a81b7 by Henry Wilkes at 2024-07-30T17:51:36+02:00 MB 39: Add home page about:mullvad-browser - - - - - eb3e9a4c by Beatriz Rizental at 2024-07-30T17:51:37+02:00 fixup! MB 39: Add home page about:mullvad-browser - - - - - 6c91f268 by hackademix at 2024-07-30T17:51:38+02:00 MB 97: Remove UI cues to install new extensions. - - - - - 5c428612 by hackademix at 2024-07-30T17:51:38+02:00 MB 47: uBlock Origin customization - - - - - 978ba4f0 by Beatriz Rizental at 2024-07-30T17:51:39+02:00 fixup! MB 47: uBlock Origin customization - - - - - ffc45078 by Pier Angelo Vendrame at 2024-07-30T17:51:40+02:00 MB 21: Disable the password manager This commit disables the about:login page and removes the "Login and Password" section of about:preferences. We do not do anything to the real password manager of Firefox, that is in toolkit: it contains C++ parts that make it difficult to actually prevent it from being built.. Finally, we modify the the function that opens about:login to report an error in the console so that we can quickly get a backtrace to the code that tries to use it. - - - - - 8df34002 by Beatriz Rizental at 2024-07-30T17:51:40+02:00 fixup! MB 21: Disable the password manager - - - - - d5685d80 by Pier Angelo Vendrame at 2024-07-30T17:51:41+02:00 MB 112: Updater customization for Mullvad Browser MB 71: Set the updater base URL to Mullvad domain - - - - - 4f52e254 by Beatriz Rizental at 2024-07-30T17:51:41+02:00 fixup! MB 112: Updater customization for Mullvad Browser - - - - - a72bde96 by Nicolas Vigier at 2024-07-30T17:51:42+02:00 MB 79: Add Mullvad Browser MAR signing keys MB 256: Add mullvad-browser nightly mar signing key - - - - - ac7a0cd1 by Pier Angelo Vendrame at 2024-07-30T17:51:42+02:00 MB 34: Hide unsafe and unwanted preferences UI about:preferences allow to override some of our defaults, that could be fingeprintable or have some other unwanted consequences. - - - - - 389150a5 by Pier Angelo Vendrame at 2024-07-30T17:51:43+02:00 MB 160: Disable the cookie exceptions button Besides disabling the "Delete on close checkbox", disable also the "Manage Exceptions" button when always using PBM. - - - - - ca83366e by hackademix at 2024-07-30T17:51:44+02:00 MB 163: prevent uBlock Origin from being uninstalled/disabled - - - - - ca262991 by Richard Pospesel at 2024-07-30T17:51:44+02:00 MB 188: Customize Gitlab Issue and Merge templates - - - - - 0b2c6394 by rui hildt at 2024-07-30T17:51:45+02:00 MB 213: Customize the search engines list - - - - - 8d319f53 by Beatriz Rizental at 2024-07-30T17:51:45+02:00 fixup! MB 213: Customize the search engines list - - - - - 35d1d01a by hackademix at 2024-07-30T17:51:46+02:00 MB 214: Enable cross-tab identity leak protection in "quiet" mode - - - - - ae34c89c by Pier Angelo Vendrame at 2024-07-30T17:51:46+02:00 MB 234: Disable OS spoofing in HTTP User-Agent. This commits makes it possible to disable OS spoofing in the HTTP User-Agent header, to see if matching header and JS property improve usability. - - - - - 85eaf2cc by Pier Angelo Vendrame at 2024-07-30T17:51:47+02:00 MB 80: Enable Mullvad Browser as a default browser - - - - - 6e132f09 by Beatriz Rizental at 2024-07-30T17:51:48+02:00 fixup! MB 80: Enable Mullvad Browser as a default browser - - - - - 054003a2 by Pier Angelo Vendrame at 2024-07-30T17:51:48+02:00 MB 320: Temporarily disable WebRTC and WDBA on Windows. WebRTC should be re-enabled when tor-browser#42758 is resolved, and and the default browser agent when in general we make this feature work again. - - - - - 30 changed files: - .gitlab/issue_templates/Emergency Security Issue.md - + .gitlab/issue_templates/Rebase Browser - Alpha.md - + .gitlab/issue_templates/Rebase Browser - Stable.md - .gitlab/merge_request_templates/default.md - browser/app/Makefile.in - browser/app/macbuild/Contents/Info.plist.in - browser/app/module.ver - browser/app/firefox.exe.manifest → browser/app/mullvadbrowser.exe.manifest - + browser/app/profile/000-mullvad-browser.js - browser/app/profile/001-base-profile.js - browser/base/content/aboutDialog.xhtml - browser/base/content/appmenu-viewcache.inc.xhtml - browser/base/content/browser-menubar.inc - browser/base/content/browser-places.js - browser/base/content/browser.js - browser/base/content/default-bookmarks.html - browser/base/content/nsContextMenu.js - browser/base/content/overrides/app-license.html - browser/base/content/pageinfo/pageInfo.xhtml - browser/base/content/utilityOverlay.js - browser/branding/branding-common.mozbuild - + browser/branding/mb-alpha/VisualElements_150.png - + browser/branding/mb-alpha/VisualElements_70.png - + browser/branding/mb-alpha/configure.sh - + browser/branding/mb-alpha/content/about-logo.png - + browser/branding/mb-alpha/content/about-logo.svg - + browser/branding/mb-alpha/content/about-logo(a)2x.png - + browser/branding/mb-alpha/content/about-wordmark.svg - + browser/branding/mb-alpha/content/about.png - + browser/branding/mb-alpha/content/aboutDialog.css The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/b9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/b9… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: Bug 41195: Simplify the go update in relprep.py.
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 1fb6aaae by Pier Angelo Vendrame at 2024-07-30T11:10:15+02:00 Bug 41195: Simplify the go update in relprep.py. Since we do not support Windows 7 anymore, we can use only one version of Go, and simplify the function that looks for updates in relprep.py. - - - - - f51f78b2 by Pier Angelo Vendrame at 2024-07-30T11:10:28+02:00 Bug 41200: Remove the tools for allowed_addons.json. For tor-browser#42618 and tor-browser#42619, we stopped using the allowed_addons.json, but initially we kept the tools to update it. However, the file creates some confusion, because it is used only for Andorid, but should be updated also when doing desktop-only releases when they update NoScript, or Android nightly builds might fail. So, since as a matter of fact we do not use that file anymore, we decided to stop updating it and remove the related tools. - - - - - 9 changed files: - − .gitattributes - .gitlab/issue_templates/Release Prep - Tor Browser Alpha.md - .gitlab/issue_templates/Release Prep - Tor Browser Stable.md - − projects/browser/allowed_addons.json - projects/browser/build.android - projects/browser/config - − projects/browser/verify_allowed_addons.py - − tools/fetch_allowed_addons.py - tools/relprep.py Changes: ===================================== .gitattributes deleted ===================================== @@ -1 +0,0 @@ -projects/browser/allowed_addons.json -diff ===================================== .gitlab/issue_templates/Release Prep - Tor Browser Alpha.md ===================================== @@ -59,8 +59,6 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - [ ] `fenix_version` : update to match alpha `firefox-android` build tag - [ ] `browser_branch` : update to match alpha `firefox-android` build tag - [ ] `browser_build` : update to match alpha `firefox-android` build tag - - [ ] Update allowed_addons.json by running (from `tor-browser-build` root): - - `./tools/fetch_allowed_addons.py > projects/browser/allowed_addons.json` - [ ] Update `projects/translation/config`: - [ ] run `make list_translation_updates-alpha` to get updated hashes - [ ] `steps/base-browser/git_hash` : update with `HEAD` commit of project's `base-browser` branch ===================================== .gitlab/issue_templates/Release Prep - Tor Browser Stable.md ===================================== @@ -60,8 +60,6 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE - [ ] `browser_branch` : update to match stable `firefox-android` build tag - [ ] `browser_build` : update to match stable `firefox-android` build tag variant: Beta - - [ ] Update allowed_addons.json by running (from `tor-browser-build` root): - - `./tools/fetch_allowed_addons.py > projects/browser/allowed_addons.json` - [ ] Update `projects/translation/config`: - [ ] run `make list_translation_updates-release` to get updated hashes - [ ] `steps/base-browser/git_hash` : update with `HEAD` commit of project's `base-browser` branch ===================================== projects/browser/allowed_addons.json deleted ===================================== The diff for this file was not included because it is too large. ===================================== projects/browser/build.android ===================================== @@ -39,15 +39,6 @@ unzip ../omni.ja }) %] popd - -[% IF c("var/verify_allowed_addons") %] - # Check that allowed_addons.json contains the right versions of our bundled extension(s). - # If so, replace the default allowed_addons.json by ours in the apk assets folder. - $rootdir/verify_allowed_addons.py "$rootdir/allowed_addons.json" "$noscript_path" -[% END %] - -mv $rootdir/allowed_addons.json $assets_dir/allowed_addons.json - mkdir apk pushd apk 7zz x "$apk" ===================================== projects/browser/config ===================================== @@ -49,7 +49,6 @@ targets: android: build: '[% INCLUDE build.android %]' var: - verify_allowed_addons: 1 arch_deps: - 7zip - openjdk-17-jdk-headless @@ -160,10 +159,6 @@ input_files: enable: '[% c("var/namecoin") %]' - filename: namecoin.patch enable: '[% c("var/namecoin") %]' - - filename: allowed_addons.json - enable: '[% c("var/android") %]' - - filename: verify_allowed_addons.py - enable: '[% c("var/android") && c("var/verify_allowed_addons") %]' - project: manual name: manual enable: '[% ! c("var/android") && c("var/tor-browser") %]' ===================================== projects/browser/verify_allowed_addons.py deleted ===================================== @@ -1,49 +0,0 @@ -#!/usr/bin/env python3 - -import json -import sys -import hashlib -import zipfile - -def find_addon(addons, addon_id): - results = addons['results'] - for x in results: - addon = x['addon'] - if addon['guid'] == addon_id: - return addon - sys.exit("Error: cannot find addon " + addon_id) - -def verify_extension_version(addons, addon_id, version): - addon = find_addon(addons, addon_id) - expected_version = addon['current_version']['version'] - if version != expected_version: - sys.exit("Error: version " + version + " != " + expected_version) - -def verify_extension_hash(addons, addon_id, hash): - addon = find_addon(addons, addon_id) - expected_hash = addon["current_version"]["files"][0]["hash"] - if hash != expected_hash: - sys.exit("Error: hash " + hash + " != " + expected_hash) - -def read_extension_manifest(path): - return json.loads(zipfile.ZipFile(path, 'r').read('manifest.json')) - -def main(argv): - allowed_addons_path = argv[0] - noscript_path = argv[1] - - addons = None - with open(allowed_addons_path, 'r') as file: - addons = json.loads(file.read()) - - noscript_hash = None - with open(noscript_path, 'rb') as file: - noscript_hash = "sha256:" + hashlib.sha256(file.read()).hexdigest() - - noscript_version = read_extension_manifest(noscript_path)["version"] - - verify_extension_hash(addons, '{73a6fe31-595d-460b-a920-fcc0f8843232}', noscript_hash) - verify_extension_version(addons, '{73a6fe31-595d-460b-a920-fcc0f8843232}', noscript_version) - -if __name__ == "__main__": - main(sys.argv[1:]) ===================================== tools/fetch_allowed_addons.py deleted ===================================== @@ -1,53 +0,0 @@ -#!/usr/bin/env python3 - -import urllib.request -import json -import base64 -import sys - -NOSCRIPT = "{73a6fe31-595d-460b-a920-fcc0f8843232}" - - -def fetch(x): - with urllib.request.urlopen(x) as response: - return response.read() - - -def find_addon(addons, addon_id): - results = addons["results"] - for x in results: - addon = x["addon"] - if addon["guid"] == addon_id: - return addon - - -def fetch_and_embed_icons(addons): - results = addons["results"] - for x in results: - addon = x["addon"] - icon_data = fetch(addon["icon_url"]) - addon["icon_url"] = "data:image/png;base64," + str( - base64.b64encode(icon_data), "utf8" - ) - - -def fetch_allowed_addons(amo_collection=None): - if amo_collection is None: - amo_collection = "83a9cccfe6e24a34bd7b155ff9ee32" - url = f"https://services.addons.mozilla.org/api/v4/accounts/account/mozilla/collect…" - data = json.loads(fetch(url)) - fetch_and_embed_icons(data) - data["results"].sort(key=lambda x: x["addon"]["guid"]) - return data - - -def main(argv): - data = fetch_allowed_addons(argv[0] if len(argv) > 1 else None) - # Check that NoScript is present - if find_addon(data, NOSCRIPT) is None: - sys.exit("Error: cannot find NoScript.") - print(json.dumps(data, indent=2, ensure_ascii=False)) - - -if __name__ == "__main__": - main(sys.argv[1:]) ===================================== tools/relprep.py ===================================== @@ -4,7 +4,6 @@ from collections import namedtuple import configparser from datetime import datetime, timezone from hashlib import sha256 -import json import locale import logging from pathlib import Path @@ -16,7 +15,6 @@ from git import Repo import requests import ruamel.yaml -from fetch_allowed_addons import NOSCRIPT, fetch_allowed_addons, find_addon import fetch_changelogs from update_manual import update_manual @@ -303,28 +301,27 @@ class ReleasePreparation: logger.info("Updating addons") config = self.load_config("browser") - amo_data = fetch_allowed_addons() - logger.debug("Fetched AMO data") - if self.android: - with ( - self.base_path / "projects/browser/allowed_addons.json" - ).open("w") as f: - json.dump(amo_data, f, indent=2) - - noscript = find_addon(amo_data, NOSCRIPT) logger.debug("Updating NoScript") - self.update_addon_amo(config, "noscript", noscript) + self.update_addon_amo( + config, "noscript", "{73a6fe31-595d-460b-a920-fcc0f8843232}" + ) if self.mullvad_browser: logger.debug("Updating uBlock Origin") - ublock = find_addon(amo_data, "uBlock0(a)raymondhill.net") - self.update_addon_amo(config, "ublock-origin", ublock) + self.update_addon_amo( + config, "ublock-origin", "uBlock0(a)raymondhill.net" + ) logger.debug("Updating the Mullvad Browser extension") self.update_mullvad_addon(config) self.save_config("browser", config) - def update_addon_amo(self, config, name, addon): - addon = addon["current_version"]["files"][0] + def update_addon_amo(self, config, name, addon_id): + r = requests.get( + f"https://services.addons.mozilla.org/api/v4/addons/addon/{addon_id}" + ) + r.raise_for_status() + amo_data = r.json() + addon = amo_data["current_version"]["files"][0] assert addon["hash"].startswith("sha256:") addon_input = self.find_input(config, name) addon_input["URL"] = addon["url"] @@ -448,9 +445,9 @@ class ReleasePreparation: major = major[2:] return major + logger.info("Updating Go") config = self.load_config("go") - # TODO: When Windows 7 goes EOL use config["version"] - major = get_major(config["var"]["go_1_21"]) + major = get_major(config["version"]) r = requests.get("https://go.dev/dl/?mode=json") r.raise_for_status() @@ -463,7 +460,7 @@ class ReleasePreparation: if not data: raise KeyError("Could not find information for our Go series.") # Skip the "go" prefix in the version. - config["var"]["go_1_21"] = data["version"][2:] + config["version"] = data["version"][2:] sha256sum = "" for f in data["files"]: @@ -472,15 +469,7 @@ class ReleasePreparation: break if not sha256sum: raise KeyError("Go source package not found.") - updated_hash = False - for input_ in config["input_files"]: - if "URL" in input_ and "var/go_1_21" in input_["URL"]: - input_["sha256sum"] = sha256sum - updated_hash = True - break - if not updated_hash: - raise KeyError("Could not find a matching entry in input_files.") - + self.find_input(config, "go")["sha256sum"] = sha256sum self.save_config("go", config) def update_manual(self): @@ -556,18 +545,11 @@ class ReleasePreparation: # Sometimes this might be incorrect for alphas, but let's # keep it for now. kwargs["firefox"] += "esr" - self.check_update_simple(kwargs, prev_tag, "tor") - self.check_update_simple(kwargs, prev_tag, "openssl") - self.check_update_simple(kwargs, prev_tag, "zlib") - self.check_update_simple(kwargs, prev_tag, "zstd") - try: - self.check_update(kwargs, prev_tag, "go", ["var", "go_1_21"]) - except KeyError as e: - logger.warning( - "Go: var/go_1_21 not found, marking Go as not updated.", - exc_info=e, - ) - pass + self.check_update(kwargs, prev_tag, "tor") + self.check_update(kwargs, prev_tag, "openssl") + self.check_update(kwargs, prev_tag, "zlib") + self.check_update(kwargs, prev_tag, "zstd") + self.check_update(kwargs, prev_tag, "go") self.check_update_extensions(kwargs, prev_tag) logger.debug("Changelog arguments for %s: %s", tag_prefix, kwargs) cb = fetch_changelogs.ChangelogBuilder( @@ -587,7 +569,7 @@ class ReleasePreparation: with (self.base_path / path).open("w") as f: f.write(changelogs + "\n" + last_changelogs + "\n") - def check_update(self, updates, prev_tag, project, key): + def check_update(self, updates, prev_tag, project, key=["version"]): old_val = self.load_old_config(prev_tag.tag, project) new_val = self.load_config(project) for k in key: @@ -596,9 +578,6 @@ class ReleasePreparation: if old_val != new_val: updates[project] = new_val - def check_update_simple(self, updates, prev_tag, project): - self.check_update(updates, prev_tag, project, ["version"]) - def check_update_extensions(self, updates, prev_tag): old_config = self.load_old_config(prev_tag, "browser") new_config = self.load_config("browser") View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag FIREFOX_128_0esr_RELEASE
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed new tag FIREFOX_128_0esr_RELEASE at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/FIREF… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.0esr-14.0-2] 3 commits: fixup! Add CI for Base Browser
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch mullvad-browser-128.0esr-14.0-2 at The Tor Project / Applications / Mullvad Browser Commits: f0717dcb by Beatriz Rizental at 2024-07-29T17:00:34+02:00 fixup! Add CI for Base Browser - - - - - 9448012d by Pier Angelo Vendrame at 2024-07-30T09:06:25+02:00 fixup! Firefox preference overrides. Bug 42872: Disable translations. Currently, the UX is kinda bad in Tor Browser (RFP might be a reason). Also, we should audit it first, to make sure it is not a fingerprinting concern (or if it is, we should make sure it is an acceptable one). - - - - - b94825b7 by Beatriz Rizental at 2024-07-30T12:25:35+02:00 Revert "Bug 42725: Fix upstream lint issues" This reverts commit 0c49b3f6b7101e95e33f697234648eeaef070a46. - - - - - 5 changed files: - .gitlab/ci/lint.yml - browser/app/profile/001-base-profile.js - dom/base/nsGlobalWindowOuter.cpp - dom/security/nsContentSecurityUtils.cpp - modules/libpref/Preferences.cpp Changes: ===================================== .gitlab/ci/lint.yml ===================================== @@ -39,9 +39,8 @@ eslint: # The plugin implementing custom checks. - 'tools/lint/eslint/eslint-plugin-mozilla/**' - 'tools/lint/eslint/eslint-plugin-spidermonkey-js/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' stylelint: extends: .base @@ -59,9 +58,8 @@ stylelint: # Run when stylelint policies change. - '**/.stylelintignore' - '**/*stylelintrc*' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-black: extends: .base @@ -80,9 +78,8 @@ py-black: - '**/*.mozbuild' - 'pyproject.toml' - 'tools/lint/black.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-ruff: extends: .base @@ -101,9 +98,8 @@ py-ruff: - 'tools/lint/ruff.yml' - 'tools/lint/python/ruff.py' - 'tools/lint/python/ruff_requirements.txt' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' yaml: extends: .base @@ -118,9 +114,8 @@ yaml: - '**/*.yml' - '**/*.yaml' - '**/.ymllint' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' shellcheck: extends: .base @@ -134,9 +129,8 @@ shellcheck: # - '**/*.sh' - 'tools/lint/shellcheck.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' clang-format: extends: .base @@ -156,9 +150,8 @@ clang-format: - '**/*.m' - '**/*.mm' - 'tools/lint/clang-format.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' rustfmt: extends: .base @@ -172,9 +165,8 @@ rustfmt: # - '**/*.rs' - 'tools/lint/rustfmt.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' fluent-lint: extends: .base @@ -189,9 +181,8 @@ fluent-lint: - '**/*.ftl' - 'tools/lint/fluent-lint.yml' - 'tools/lint/fluent-lint/exclusions.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' localization: extends: .base @@ -208,9 +199,8 @@ localization: - 'third_party/python/compare-locales/**' - 'third_party/python/fluent/**' - 'tools/lint/l10n.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mingw-capitalization: extends: .base @@ -227,9 +217,8 @@ mingw-capitalization: - '**/*.c' - '**/*.h' - 'tools/lint/mingw-capitalization.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mscom-init: extends: .base @@ -246,9 +235,8 @@ mscom-init: - '**/*.c' - '**/*.h' - 'tools/lint/mscom-init.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' file-whitespace: extends: .base @@ -277,9 +265,8 @@ file-whitespace: - '**/*.webidl' - '**/*.xhtml' - 'tools/lint/file-whitespace.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' test-manifest: extends: .base @@ -294,9 +281,8 @@ test-manifest: - '**/*.ini' - 'python/mozlint/**' - 'tools/lint/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' trojan-source: extends: .base @@ -315,6 +301,5 @@ trojan-source: - '**/*.py' - '**/*.rs' - 'tools/lint/trojan-source.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -259,6 +259,11 @@ pref("browser.newtabpage.activity-stream.asrouter.providers.messaging-experiment // Disable fetching asrouter.ftl and related console errors (tor-browser#40763). pref("browser.newtabpage.activity-stream.asrouter.useRemoteL10n", false); +// tor-browser#42872, #42555: Disable translations. +// Translation have a bad UX in 128 (and with our config). Maybe we will +// re-enable after auditing and fixing the UX. +pref("browser.translations.enable", false); + // tor-browser#41945 - disable automatic cookie banners dismissal until // we're sure it does not causes fingerprinting risks or other issues. pref("cookiebanners.service.mode", 0); ===================================== dom/base/nsGlobalWindowOuter.cpp ===================================== @@ -7296,7 +7296,7 @@ void nsGlobalWindowOuter::InitWasOffline() { mWasOffline = NS_IsOffline(); } #if defined(_WINDOWS_) && !defined(MOZ_WRAPPED_WINDOWS_H) # pragma message( \ - "wrapper failure reason: " MOZ_WINDOWS_WRAPPER_DISABLED_REASON) + "wrapper failure reason: " MOZ_WINDOWS_WRAPPER_DISABLED_REASON) # error "Never include unwrapped windows.h in this file!" #endif ===================================== dom/security/nsContentSecurityUtils.cpp ===================================== @@ -1332,20 +1332,20 @@ void nsContentSecurityUtils::AssertAboutPageHasCSP(Document* aDocument) { // This allowlist contains about: pages that are permanently allowed to // render without a CSP applied. static nsLiteralCString sAllowedAboutPagesWithNoCSP[] = { - // about:blank is a special about page -> no CSP - "about:blank"_ns, - // about:srcdoc is a special about page -> no CSP - "about:srcdoc"_ns, - // about:sync-log displays plain text only -> no CSP - "about:sync-log"_ns, - // about:logo just displays the firefox logo -> no CSP - "about:logo"_ns, - // about:sync is a special mozilla-signed developer addon with low usage - // -> - // no CSP - "about:sync"_ns, + // about:blank is a special about page -> no CSP + "about:blank"_ns, + // about:srcdoc is a special about page -> no CSP + "about:srcdoc"_ns, + // about:sync-log displays plain text only -> no CSP + "about:sync-log"_ns, + // about:logo just displays the firefox logo -> no CSP + "about:logo"_ns, + // about:sync is a special mozilla-signed developer addon with low usage + // -> + // no CSP + "about:sync"_ns, # if defined(ANDROID) - "about:config"_ns, + "about:config"_ns, # endif }; ===================================== modules/libpref/Preferences.cpp ===================================== @@ -6100,8 +6100,7 @@ void UnloadPrefsModule() { Preferences::Shutdown(); } // Preference Sanitization Related Code --------------------------------------- -#define PREF_LIST_ENTRY(s) \ - { s, (sizeof(s) / sizeof(char)) - 1 } +#define PREF_LIST_ENTRY(s) {s, (sizeof(s) / sizeof(char)) - 1} struct PrefListEntry { const char* mPrefBranch; size_t mLen; View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/d7… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/d7… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-128.0esr-14.0-2] Revert "Bug 42725: Fix upstream lint issues"
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch base-browser-128.0esr-14.0-2 at The Tor Project / Applications / Tor Browser Commits: b94825b7 by Beatriz Rizental at 2024-07-30T12:25:35+02:00 Revert "Bug 42725: Fix upstream lint issues" This reverts commit 0c49b3f6b7101e95e33f697234648eeaef070a46. - - - - - 3 changed files: - dom/base/nsGlobalWindowOuter.cpp - dom/security/nsContentSecurityUtils.cpp - modules/libpref/Preferences.cpp Changes: ===================================== dom/base/nsGlobalWindowOuter.cpp ===================================== @@ -7296,7 +7296,7 @@ void nsGlobalWindowOuter::InitWasOffline() { mWasOffline = NS_IsOffline(); } #if defined(_WINDOWS_) && !defined(MOZ_WRAPPED_WINDOWS_H) # pragma message( \ - "wrapper failure reason: " MOZ_WINDOWS_WRAPPER_DISABLED_REASON) + "wrapper failure reason: " MOZ_WINDOWS_WRAPPER_DISABLED_REASON) # error "Never include unwrapped windows.h in this file!" #endif ===================================== dom/security/nsContentSecurityUtils.cpp ===================================== @@ -1332,20 +1332,20 @@ void nsContentSecurityUtils::AssertAboutPageHasCSP(Document* aDocument) { // This allowlist contains about: pages that are permanently allowed to // render without a CSP applied. static nsLiteralCString sAllowedAboutPagesWithNoCSP[] = { - // about:blank is a special about page -> no CSP - "about:blank"_ns, - // about:srcdoc is a special about page -> no CSP - "about:srcdoc"_ns, - // about:sync-log displays plain text only -> no CSP - "about:sync-log"_ns, - // about:logo just displays the firefox logo -> no CSP - "about:logo"_ns, - // about:sync is a special mozilla-signed developer addon with low usage - // -> - // no CSP - "about:sync"_ns, + // about:blank is a special about page -> no CSP + "about:blank"_ns, + // about:srcdoc is a special about page -> no CSP + "about:srcdoc"_ns, + // about:sync-log displays plain text only -> no CSP + "about:sync-log"_ns, + // about:logo just displays the firefox logo -> no CSP + "about:logo"_ns, + // about:sync is a special mozilla-signed developer addon with low usage + // -> + // no CSP + "about:sync"_ns, # if defined(ANDROID) - "about:config"_ns, + "about:config"_ns, # endif }; ===================================== modules/libpref/Preferences.cpp ===================================== @@ -6100,8 +6100,7 @@ void UnloadPrefsModule() { Preferences::Shutdown(); } // Preference Sanitization Related Code --------------------------------------- -#define PREF_LIST_ENTRY(s) \ - { s, (sizeof(s) / sizeof(char)) - 1 } +#define PREF_LIST_ENTRY(s) {s, (sizeof(s) / sizeof(char)) - 1} struct PrefListEntry { const char* mPrefBranch; size_t mLen; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/b94825b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/b94825b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-128.0esr-14.0-2] Revert "Bug 42725: Fix upstream lint issues"
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch tor-browser-128.0esr-14.0-2 at The Tor Project / Applications / Tor Browser Commits: 3599a60b by Beatriz Rizental at 2024-07-30T11:15:51+02:00 Revert "Bug 42725: Fix upstream lint issues" This reverts commit 0c49b3f6b7101e95e33f697234648eeaef070a46. - - - - - 3 changed files: - dom/base/nsGlobalWindowOuter.cpp - dom/security/nsContentSecurityUtils.cpp - modules/libpref/Preferences.cpp Changes: ===================================== dom/base/nsGlobalWindowOuter.cpp ===================================== @@ -7300,7 +7300,7 @@ void nsGlobalWindowOuter::InitWasOffline() { mWasOffline = NS_IsOffline(); } #if defined(_WINDOWS_) && !defined(MOZ_WRAPPED_WINDOWS_H) # pragma message( \ - "wrapper failure reason: " MOZ_WINDOWS_WRAPPER_DISABLED_REASON) + "wrapper failure reason: " MOZ_WINDOWS_WRAPPER_DISABLED_REASON) # error "Never include unwrapped windows.h in this file!" #endif ===================================== dom/security/nsContentSecurityUtils.cpp ===================================== @@ -1335,20 +1335,20 @@ void nsContentSecurityUtils::AssertAboutPageHasCSP(Document* aDocument) { // This allowlist contains about: pages that are permanently allowed to // render without a CSP applied. static nsLiteralCString sAllowedAboutPagesWithNoCSP[] = { - // about:blank is a special about page -> no CSP - "about:blank"_ns, - // about:srcdoc is a special about page -> no CSP - "about:srcdoc"_ns, - // about:sync-log displays plain text only -> no CSP - "about:sync-log"_ns, - // about:logo just displays the firefox logo -> no CSP - "about:logo"_ns, - // about:sync is a special mozilla-signed developer addon with low usage - // -> - // no CSP - "about:sync"_ns, + // about:blank is a special about page -> no CSP + "about:blank"_ns, + // about:srcdoc is a special about page -> no CSP + "about:srcdoc"_ns, + // about:sync-log displays plain text only -> no CSP + "about:sync-log"_ns, + // about:logo just displays the firefox logo -> no CSP + "about:logo"_ns, + // about:sync is a special mozilla-signed developer addon with low usage + // -> + // no CSP + "about:sync"_ns, # if defined(ANDROID) - "about:config"_ns, + "about:config"_ns, # endif }; ===================================== modules/libpref/Preferences.cpp ===================================== @@ -6100,8 +6100,7 @@ void UnloadPrefsModule() { Preferences::Shutdown(); } // Preference Sanitization Related Code --------------------------------------- -#define PREF_LIST_ENTRY(s) \ - { s, (sizeof(s) / sizeof(char)) - 1 } +#define PREF_LIST_ENTRY(s) {s, (sizeof(s) / sizeof(char)) - 1} struct PrefListEntry { const char* mPrefBranch; size_t mLen; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3599a60… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3599a60… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.0esr-14.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch mullvad-browser-128.0esr-14.0-1 at The Tor Project / Applications / Mullvad Browser Commits: f5246bd3 by Pier Angelo Vendrame at 2024-07-30T09:34:47+02:00 fixup! Firefox preference overrides. Bug 42872: Disable translations. Currently, the UX is kinda bad in Tor Browser (RFP might be a reason). Also, we should audit it first, to make sure it is not a fingerprinting concern (or if it is, we should make sure it is an acceptable one). - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -259,6 +259,11 @@ pref("browser.newtabpage.activity-stream.asrouter.providers.messaging-experiment // Disable fetching asrouter.ftl and related console errors (tor-browser#40763). pref("browser.newtabpage.activity-stream.asrouter.useRemoteL10n", false); +// tor-browser#42872, #42555: Disable translations. +// Translation have a bad UX in 128 (and with our config). Maybe we will +// re-enable after auditing and fixing the UX. +pref("browser.translations.enable", false); + // tor-browser#41945 - disable automatic cookie banners dismissal until // we're sure it does not causes fingerprinting risks or other issues. pref("cookiebanners.service.mode", 0); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/f52… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/f52… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-128.0esr-14.0-2] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 30 Jul '24

30 Jul '24

Pier Angelo Vendrame pushed to branch tor-browser-128.0esr-14.0-2 at The Tor Project / Applications / Tor Browser Commits: f5137417 by Pier Angelo Vendrame at 2024-07-29T18:45:42+02:00 fixup! Firefox preference overrides. Bug 42872: Disable translations. Currently, the UX is kinda bad in Tor Browser (RFP might be a reason). Also, we should audit it first, to make sure it is not a fingerprinting concern (or if it is, we should make sure it is an acceptable one). - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -259,6 +259,11 @@ pref("browser.newtabpage.activity-stream.asrouter.providers.messaging-experiment // Disable fetching asrouter.ftl and related console errors (tor-browser#40763). pref("browser.newtabpage.activity-stream.asrouter.useRemoteL10n", false); +// tor-browser#42872, #42555: Disable translations. +// Translation have a bad UX in 128 (and with our config). Maybe we will +// re-enable after auditing and fixing the UX. +pref("browser.translations.enable", false); + // tor-browser#41945 - disable automatic cookie banners dismissal until // we're sure it does not causes fingerprinting risks or other issues. pref("cookiebanners.service.mode", 0); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f513741… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f513741… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41194: Add user morgan on signing machines
by boklm (＠boklm) 30 Jul '24

30 Jul '24

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 92bd7662 by Nicolas Vigier at 2024-07-30T08:21:56+02:00 Bug 41194: Add user morgan on signing machines - - - - - 2 changed files: - tools/signing/machines-setup/setup-signing-machine - + tools/signing/machines-setup/ssh-keys/morgan.pub Changes: ===================================== tools/signing/machines-setup/setup-signing-machine ===================================== @@ -96,6 +96,8 @@ sudoers_file set-date authorized_keys boklm boklm-tb-release.pub boklm-yk1.pub create_user richard signing authorized_keys richard richard.pub +create_user morgan signing +authorized_keys morgan morgan.pub # Install rbm deps install_packages libyaml-libyaml-perl libtemplate-perl libdatetime-perl \ ===================================== tools/signing/machines-setup/ssh-keys/morgan.pub ===================================== @@ -0,0 +1 @@ +ssh-rsa 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 openpgp:0xF65B11DA View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-128.0esr-14.0-2] fixup! Add CI for Base Browser
by Pier Angelo Vendrame (＠pierov) 29 Jul '24

29 Jul '24

Pier Angelo Vendrame pushed to branch base-browser-128.0esr-14.0-2 at The Tor Project / Applications / Tor Browser Commits: f0717dcb by Beatriz Rizental at 2024-07-29T17:00:34+02:00 fixup! Add CI for Base Browser - - - - - 1 changed file: - .gitlab/ci/lint.yml Changes: ===================================== .gitlab/ci/lint.yml ===================================== @@ -39,9 +39,8 @@ eslint: # The plugin implementing custom checks. - 'tools/lint/eslint/eslint-plugin-mozilla/**' - 'tools/lint/eslint/eslint-plugin-spidermonkey-js/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' stylelint: extends: .base @@ -59,9 +58,8 @@ stylelint: # Run when stylelint policies change. - '**/.stylelintignore' - '**/*stylelintrc*' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-black: extends: .base @@ -80,9 +78,8 @@ py-black: - '**/*.mozbuild' - 'pyproject.toml' - 'tools/lint/black.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-ruff: extends: .base @@ -101,9 +98,8 @@ py-ruff: - 'tools/lint/ruff.yml' - 'tools/lint/python/ruff.py' - 'tools/lint/python/ruff_requirements.txt' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' yaml: extends: .base @@ -118,9 +114,8 @@ yaml: - '**/*.yml' - '**/*.yaml' - '**/.ymllint' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' shellcheck: extends: .base @@ -134,9 +129,8 @@ shellcheck: # - '**/*.sh' - 'tools/lint/shellcheck.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' clang-format: extends: .base @@ -156,9 +150,8 @@ clang-format: - '**/*.m' - '**/*.mm' - 'tools/lint/clang-format.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' rustfmt: extends: .base @@ -172,9 +165,8 @@ rustfmt: # - '**/*.rs' - 'tools/lint/rustfmt.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' fluent-lint: extends: .base @@ -189,9 +181,8 @@ fluent-lint: - '**/*.ftl' - 'tools/lint/fluent-lint.yml' - 'tools/lint/fluent-lint/exclusions.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' localization: extends: .base @@ -208,9 +199,8 @@ localization: - 'third_party/python/compare-locales/**' - 'third_party/python/fluent/**' - 'tools/lint/l10n.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mingw-capitalization: extends: .base @@ -227,9 +217,8 @@ mingw-capitalization: - '**/*.c' - '**/*.h' - 'tools/lint/mingw-capitalization.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mscom-init: extends: .base @@ -246,9 +235,8 @@ mscom-init: - '**/*.c' - '**/*.h' - 'tools/lint/mscom-init.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' file-whitespace: extends: .base @@ -277,9 +265,8 @@ file-whitespace: - '**/*.webidl' - '**/*.xhtml' - 'tools/lint/file-whitespace.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' test-manifest: extends: .base @@ -294,9 +281,8 @@ test-manifest: - '**/*.ini' - 'python/mozlint/**' - 'tools/lint/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' trojan-source: extends: .base @@ -315,6 +301,5 @@ trojan-source: - '**/*.py' - '**/*.rs' - 'tools/lint/trojan-source.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f0717dc… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f0717dc… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-128.0esr-14.0-1] fixup! Add CI for Base Browser
by Pier Angelo Vendrame (＠pierov) 29 Jul '24

29 Jul '24

Pier Angelo Vendrame pushed to branch base-browser-128.0esr-14.0-1 at The Tor Project / Applications / Tor Browser Commits: d23b4d80 by Beatriz Rizental at 2024-07-29T16:53:19+02:00 fixup! Add CI for Base Browser - - - - - 1 changed file: - .gitlab/ci/lint.yml Changes: ===================================== .gitlab/ci/lint.yml ===================================== @@ -39,9 +39,8 @@ eslint: # The plugin implementing custom checks. - 'tools/lint/eslint/eslint-plugin-mozilla/**' - 'tools/lint/eslint/eslint-plugin-spidermonkey-js/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' stylelint: extends: .base @@ -59,9 +58,8 @@ stylelint: # Run when stylelint policies change. - '**/.stylelintignore' - '**/*stylelintrc*' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-black: extends: .base @@ -80,9 +78,8 @@ py-black: - '**/*.mozbuild' - 'pyproject.toml' - 'tools/lint/black.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-ruff: extends: .base @@ -101,9 +98,8 @@ py-ruff: - 'tools/lint/ruff.yml' - 'tools/lint/python/ruff.py' - 'tools/lint/python/ruff_requirements.txt' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' yaml: extends: .base @@ -118,9 +114,8 @@ yaml: - '**/*.yml' - '**/*.yaml' - '**/.ymllint' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' shellcheck: extends: .base @@ -134,9 +129,8 @@ shellcheck: # - '**/*.sh' - 'tools/lint/shellcheck.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' clang-format: extends: .base @@ -156,9 +150,8 @@ clang-format: - '**/*.m' - '**/*.mm' - 'tools/lint/clang-format.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' rustfmt: extends: .base @@ -172,9 +165,8 @@ rustfmt: # - '**/*.rs' - 'tools/lint/rustfmt.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' fluent-lint: extends: .base @@ -189,9 +181,8 @@ fluent-lint: - '**/*.ftl' - 'tools/lint/fluent-lint.yml' - 'tools/lint/fluent-lint/exclusions.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' localization: extends: .base @@ -208,9 +199,8 @@ localization: - 'third_party/python/compare-locales/**' - 'third_party/python/fluent/**' - 'tools/lint/l10n.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mingw-capitalization: extends: .base @@ -227,9 +217,8 @@ mingw-capitalization: - '**/*.c' - '**/*.h' - 'tools/lint/mingw-capitalization.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mscom-init: extends: .base @@ -246,9 +235,8 @@ mscom-init: - '**/*.c' - '**/*.h' - 'tools/lint/mscom-init.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' file-whitespace: extends: .base @@ -277,9 +265,8 @@ file-whitespace: - '**/*.webidl' - '**/*.xhtml' - 'tools/lint/file-whitespace.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' test-manifest: extends: .base @@ -294,9 +281,8 @@ test-manifest: - '**/*.ini' - 'python/mozlint/**' - 'tools/lint/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' trojan-source: extends: .base @@ -315,6 +301,5 @@ trojan-source: - '**/*.py' - '**/*.rs' - 'tools/lint/trojan-source.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d23b4d8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d23b4d8… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.0esr-14.0-2] fixup! Add CI for Base Browser
by Pier Angelo Vendrame (＠pierov) 29 Jul '24

29 Jul '24

Pier Angelo Vendrame pushed to branch mullvad-browser-128.0esr-14.0-2 at The Tor Project / Applications / Mullvad Browser Commits: d7c7e1ad by Beatriz Rizental at 2024-07-29T16:52:04+02:00 fixup! Add CI for Base Browser - - - - - 1 changed file: - .gitlab/ci/lint.yml Changes: ===================================== .gitlab/ci/lint.yml ===================================== @@ -39,9 +39,8 @@ eslint: # The plugin implementing custom checks. - 'tools/lint/eslint/eslint-plugin-mozilla/**' - 'tools/lint/eslint/eslint-plugin-spidermonkey-js/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' stylelint: extends: .base @@ -59,9 +58,8 @@ stylelint: # Run when stylelint policies change. - '**/.stylelintignore' - '**/*stylelintrc*' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-black: extends: .base @@ -80,9 +78,8 @@ py-black: - '**/*.mozbuild' - 'pyproject.toml' - 'tools/lint/black.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-ruff: extends: .base @@ -101,9 +98,8 @@ py-ruff: - 'tools/lint/ruff.yml' - 'tools/lint/python/ruff.py' - 'tools/lint/python/ruff_requirements.txt' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' yaml: extends: .base @@ -118,9 +114,8 @@ yaml: - '**/*.yml' - '**/*.yaml' - '**/.ymllint' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' shellcheck: extends: .base @@ -134,9 +129,8 @@ shellcheck: # - '**/*.sh' - 'tools/lint/shellcheck.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' clang-format: extends: .base @@ -156,9 +150,8 @@ clang-format: - '**/*.m' - '**/*.mm' - 'tools/lint/clang-format.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' rustfmt: extends: .base @@ -172,9 +165,8 @@ rustfmt: # - '**/*.rs' - 'tools/lint/rustfmt.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' fluent-lint: extends: .base @@ -189,9 +181,8 @@ fluent-lint: - '**/*.ftl' - 'tools/lint/fluent-lint.yml' - 'tools/lint/fluent-lint/exclusions.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' localization: extends: .base @@ -208,9 +199,8 @@ localization: - 'third_party/python/compare-locales/**' - 'third_party/python/fluent/**' - 'tools/lint/l10n.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mingw-capitalization: extends: .base @@ -227,9 +217,8 @@ mingw-capitalization: - '**/*.c' - '**/*.h' - 'tools/lint/mingw-capitalization.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mscom-init: extends: .base @@ -246,9 +235,8 @@ mscom-init: - '**/*.c' - '**/*.h' - 'tools/lint/mscom-init.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' file-whitespace: extends: .base @@ -277,9 +265,8 @@ file-whitespace: - '**/*.webidl' - '**/*.xhtml' - 'tools/lint/file-whitespace.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' test-manifest: extends: .base @@ -294,9 +281,8 @@ test-manifest: - '**/*.ini' - 'python/mozlint/**' - 'tools/lint/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' trojan-source: extends: .base @@ -315,6 +301,5 @@ trojan-source: - '**/*.py' - '**/*.rs' - 'tools/lint/trojan-source.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/d7c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/d7c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-128.0esr-14.0-2] fixup! Add CI for Base Browser
by Pier Angelo Vendrame (＠pierov) 29 Jul '24

29 Jul '24

Pier Angelo Vendrame pushed to branch tor-browser-128.0esr-14.0-2 at The Tor Project / Applications / Tor Browser Commits: cce61ea8 by Beatriz Rizental at 2024-07-29T16:44:54+02:00 fixup! Add CI for Base Browser - - - - - 1 changed file: - .gitlab/ci/lint.yml Changes: ===================================== .gitlab/ci/lint.yml ===================================== @@ -39,9 +39,8 @@ eslint: # The plugin implementing custom checks. - 'tools/lint/eslint/eslint-plugin-mozilla/**' - 'tools/lint/eslint/eslint-plugin-spidermonkey-js/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' stylelint: extends: .base @@ -59,9 +58,8 @@ stylelint: # Run when stylelint policies change. - '**/.stylelintignore' - '**/*stylelintrc*' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-black: extends: .base @@ -80,9 +78,8 @@ py-black: - '**/*.mozbuild' - 'pyproject.toml' - 'tools/lint/black.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' py-ruff: extends: .base @@ -101,9 +98,8 @@ py-ruff: - 'tools/lint/ruff.yml' - 'tools/lint/python/ruff.py' - 'tools/lint/python/ruff_requirements.txt' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' yaml: extends: .base @@ -118,9 +114,8 @@ yaml: - '**/*.yml' - '**/*.yaml' - '**/.ymllint' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' shellcheck: extends: .base @@ -134,9 +129,8 @@ shellcheck: # - '**/*.sh' - 'tools/lint/shellcheck.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' clang-format: extends: .base @@ -156,9 +150,8 @@ clang-format: - '**/*.m' - '**/*.mm' - 'tools/lint/clang-format.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' rustfmt: extends: .base @@ -172,9 +165,8 @@ rustfmt: # - '**/*.rs' - 'tools/lint/rustfmt.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' fluent-lint: extends: .base @@ -189,9 +181,8 @@ fluent-lint: - '**/*.ftl' - 'tools/lint/fluent-lint.yml' - 'tools/lint/fluent-lint/exclusions.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' localization: extends: .base @@ -208,9 +199,8 @@ localization: - 'third_party/python/compare-locales/**' - 'third_party/python/fluent/**' - 'tools/lint/l10n.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mingw-capitalization: extends: .base @@ -227,9 +217,8 @@ mingw-capitalization: - '**/*.c' - '**/*.h' - 'tools/lint/mingw-capitalization.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' mscom-init: extends: .base @@ -246,9 +235,8 @@ mscom-init: - '**/*.c' - '**/*.h' - 'tools/lint/mscom-init.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' file-whitespace: extends: .base @@ -277,9 +265,8 @@ file-whitespace: - '**/*.webidl' - '**/*.xhtml' - 'tools/lint/file-whitespace.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' test-manifest: extends: .base @@ -294,9 +281,8 @@ test-manifest: - '**/*.ini' - 'python/mozlint/**' - 'tools/lint/**' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' trojan-source: extends: .base @@ -315,6 +301,5 @@ trojan-source: - '**/*.py' - '**/*.rs' - 'tools/lint/trojan-source.yml' - # Run job whenever a new tag is created - # or whenever a commit is merged to a protected branch - - if: $CI_COMMIT_TAG || $CI_COMMIT_REF_PROTECTED == 'true' + # Run job whenever a commit is merged to a protected branch + - if: $CI_COMMIT_REF_PROTECTED == 'true' View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/cce61ea… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/cce61ea… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-14.0a1-build1
by morgan (＠morgan) 25 Jul '24

25 Jul '24

morgan pushed new tag mb-14.0a1-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-14.0a1-build1
by morgan (＠morgan) 25 Jul '24

25 Jul '24

morgan pushed new tag tbb-14.0a1-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 6 commits: Add morgan and remove richard from list of builders
by morgan (＠morgan) 25 Jul '24

25 Jul '24

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: a07699a8 by Morgan at 2024-07-25T20:30:42+00:00 Add morgan and remove richard from list of builders - - - - - afc9d346 by Morgan at 2024-07-25T20:30:42+00:00 Update various gitlab template adding morgan and removing richard - - - - - 11fc5be5 by Morgan at 2024-07-25T20:30:42+00:00 Add tor-browser-bundle-testsuite support to fetch_changelogs.py - - - - - 083b456a by Morgan at 2024-07-25T20:30:42+00:00 Bug 41195: Update go to 1.22 - - - - - 91cf28cc by Morgan at 2024-07-25T20:30:42+00:00 Bug 41197: Modify update-responses to prevent upgrades on unsupported Windows and macOS versions - - - - - 12adb3f6 by Morgan at 2024-07-25T20:30:42+00:00 Bug 41144,41445: Prepare Tor+Mullvad Browser 14.0a1 - - - - - 19 changed files: - .gitlab/issue_templates/Release Prep - Mullvad Browser Alpha.md - .gitlab/issue_templates/Release Prep - Mullvad Browser Stable.md - .gitlab/issue_templates/Release Prep - Tor Browser Alpha.md - .gitlab/issue_templates/Release Prep - Tor Browser Stable.md - .gitlab/merge_request_templates/default.md - .gitlab/merge_request_templates/relprep.md - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/go-bootstrap/build - projects/go-bootstrap/config - projects/go/config - projects/manual/config - projects/release/update_responses_config.yml - projects/translation/config - rbm.conf - tools/fetch_changelogs.py - tools/signing/set-config Changes: ===================================== .gitlab/issue_templates/Release Prep - Mullvad Browser Alpha.md ===================================== @@ -84,8 +84,8 @@ Mullvad Browser Alpha (and Nightly) are on the `main` branch - boklm - dan - ma1 + - morgan - pierov - - richard - [ ] Run: `make mullvadbrowser-signtag-alpha` - [ ] Push tag to `upstream` - [ ] Build the tag: @@ -105,7 +105,7 @@ Mullvad Browser Alpha (and Nightly) are on the `main` branch ### release signing - [ ] Assign this issue to the signer, one of: - boklm - - richard + - morgan - [ ] On `$(STAGING_SERVER)`, ensure updated: - [ ] `tor-browser-build` is on the right commit: `git tag -v tbb-$(MULLVAD_BROWSER_VERSION)-$(MULLVAD_BROWSER_BUILD_N) && git checkout tbb-$(MULLVAD_BROWSER_VERSION)-$(MULLVAD_BROWSER_BUILD_N)` - [ ] `tor-browser-build/tools/signing/set-config.hosts` @@ -139,7 +139,7 @@ Mullvad Browser Alpha (and Nightly) are on the `main` branch - [ ] Assign this issue to someone with mullvad commit access, one of: - boklm - ma1 - - richard + - morgan - pierov - [ ] Push this release's associated `mullvad-browser.git` branch to github - [ ] Push this release's associated tags to github: ===================================== .gitlab/issue_templates/Release Prep - Mullvad Browser Stable.md ===================================== @@ -84,8 +84,8 @@ Mullvad Browser Stable lives in the various `maint-$(MULLVAD_BROWSER_MAJOR).$(MU - boklm - dan - ma1 + - morgan - pierov - - richard - [ ] Run: `make mullvadbrowser-signtag-release` - [ ] Push tag to `upstream` - [ ] Build the tag: @@ -105,7 +105,7 @@ Mullvad Browser Stable lives in the various `maint-$(MULLVAD_BROWSER_MAJOR).$(MU ### release signing - [ ] Assign this issue to the signer, one of: - boklm - - richard + - morgan - [ ] On `$(STAGING_SERVER)`, ensure updated: - [ ] `tor-browser-build` is on the right commit: `git tag -v tbb-$(MULLVAD_BROWSER_VERSION)-$(MULLVAD_BROWSER_BUILD_N) && git checkout tbb-$(MULLVAD_BROWSER_VERSION)-$(MULLVAD_BROWSER_BUILD_N)` - [ ] `tor-browser-build/tools/signing/set-config.hosts` @@ -139,7 +139,7 @@ Mullvad Browser Stable lives in the various `maint-$(MULLVAD_BROWSER_MAJOR).$(MU - [ ] Assign this issue to someone with mullvad commit access, one of: - boklm - ma1 - - richard + - morgan - pierov - [ ] Push this release's associated `mullvad-browser.git` branch to github - [ ] Push this release's associated tags to github: ===================================== .gitlab/issue_templates/Release Prep - Tor Browser Alpha.md ===================================== @@ -121,8 +121,8 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - boklm - dan - ma1 + - morgan - pierov - - richard - [ ] Run: `make torbrowser-signtag-alpha` - [ ] Push tag to `upstream` - [ ] Build the tag: @@ -181,7 +181,7 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - **NOTE** : In practice, it's most efficient to have the blog post and website updates ready to merge, since signing doesn't take very long - [ ] Assign this issue to the signer, one of: - boklm - - richard + - morgan - [ ] On `$(STAGING_SERVER)`, ensure updated: - [ ] `tor-browser-build` is on the right commit: `git tag -v tbb-$(TOR_BROWSER_VERSION)-$(TOR_BROWSER_BUILD_N) && git checkout tbb-$(TOR_BROWSER_VERSION)-$(TOR_BROWSER_BUILD_N)` - [ ] `tor-browser-build/tools/signing/set-config.hosts` ===================================== .gitlab/issue_templates/Release Prep - Tor Browser Stable.md ===================================== @@ -118,8 +118,8 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE - boklm - dan - ma1 + - morgan - pierov - - richard - [ ] Run: `make torbrowser-signtag-release` - [ ] Push tag to `upstream` - [ ] Build the tag: @@ -171,7 +171,7 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE - **NOTE** : In practice, it's most efficient to have the blog post and website updates ready to merge, since signing doesn't take very long - [ ] Assign this issue to the signer, one of: - boklm - - richard + - morgan - [ ] On `$(STAGING_SERVER)`, ensure updated: - [ ] `tor-browser-build` is on the right commit: `git tag -v tbb-$(TOR_BROWSER_VERSION)-$(TOR_BROWSER_BUILD_N) && git checkout tbb-$(TOR_BROWSER_VERSION)-$(TOR_BROWSER_BUILD_N)` - [ ] `tor-browser-build/tools/signing/set-config.hosts` ===================================== .gitlab/merge_request_templates/default.md ===================================== @@ -39,16 +39,16 @@ - **firefox internals (XUL/JS/XPCOM)** : jwilde, ma1 - **fonts** : pierov - **frontend (implementation)** : henry - - **frontend (review)** : donuts, richard + - **frontend (review)** : donuts, morgan - **localization** : henry, pierov - **macOS** : clairehurst, dan - **nightly builds** : boklm - - **rebases/release-prep** : boklm, dan, ma1, pierov, richard + - **rebases/release-prep** : boklm, dan, ma1, morgan, pierov - **security** : jwilde, ma1 - - **signing** : boklm, richard + - **signing** : boklm, morgan - **updater** : pierov - - **windows** : jwilde, richard - - **misc/other** : pierov, richard + - **windows** : jwilde, morgan + - **misc/other** : morgan, pierov ### Change Description ===================================== .gitlab/merge_request_templates/relprep.md ===================================== @@ -42,7 +42,7 @@ ### Request Reviewer -- [ ] Request review from a release engineer: boklm, dan, ma1, pierov, richard +- [ ] Request review from a release engineer: boklm, dan, ma1, morgan, pierov ### Change Description ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,158 @@ +Mullvad Browser 14.0a1 - July 24 2024 + * All Platforms + * Updated Firefox to 128.0esr + * Bug 42441: Evaluate RR version-by-RR version rebases instead of ESR-to-ESR [tor-browser] + * Bug 42683: Create script to generate issue triage csv's from bugzilla query and git scraping [tor-browser] + * Bug 42687: Disable Privacy-Preserving Attribution [tor-browser] + * Windows + * Bug 320: Temporarily disable WebRTC and the default browser agent on Windows [mullvad-browser] + * Linux + * Bug 314: Mullvad Browser is not listed as a possible default browser application for Gnome on Ubuntu / Fedora [mullvad-browser] + * Build System + * All Platforms + * Bug 42470: Add merge request CI for linting [tor-browser] + * Bug 42722: clang-format and localization linters are not running [tor-browser] + * Bug 40964: Create new Tor Browser gpg subkey [tor-browser-build] + * Bug 41155: Update toolchains for ESR128 [tor-browser-build] + * Bug 41156: Split the Rust configuration options [tor-browser-build] + * Bug 41166: Use the GitHub repository for firefox-l10n [tor-browser-build] + * Bug 41176: Update list of people with github commit access in MB issue templates [tor-browser-build] + * Bug 41190: Add morgan.gpg to keyrings and list of valid keyrings in firefox+geckoview [tor-browser-build] + * Bug 41191: Remove richard.gpg from keyrings and list of valid keyrings in firefox+geckoview [tor-browser-build] + * Bug 40078: Update tools/tb-build-06-start-nightly-build after tor-browser-build#40829 [tor-browser-bundle-testsuite] + * Windows + * Bug 29318: Drop mingw-w64/gcc toolchain [tor-browser-build] + * Bug 29320: Use mingw-w64/clang toolchain to build Rust [tor-browser-build] + * Bug 41167: Stop generating an MB "portable" windows install and output a single build from 13.5 release [tor-browser-build] + * Bug 41177: Include Windows installer without -portable- in download json files [tor-browser-build] + * Linux + * Bug 41173: Fix permission issue on files in the debian directory [tor-browser-build] + * Windows + macOS + * Bug 41197: Modify update-responses to prevent upgrades on unsupported Windows and macOS versions [tor-browser-build] + +Mullvad Browser 13.5.1 - July 09 2024 + * All Platforms + * Updated Firefox to 115.13.0esr + * Bug 317: Rebase Mullvad Browser stable onto 115.13.0esr [mullvad-browser] + * Bug 42693: Backports security fixes from Firefox 128 [tor-browser] + * Linux + * Bug 314: Mullvad Browser is not listed as a possible default browser application for Gnome on Ubuntu / Fedora [mullvad-browser] + * Build System + * All Platforms + * Bug 41166: Use the GitHub repository for firefox-l10n [tor-browser-build] + * Bug 41173: Fix permission issue on files in the debian directory [tor-browser-build] + * Windows + * Bug 41177: Include Windows installer without -portable- in download json files [tor-browser-build] + +Mullvad Browser 13.5 - June 17 2024 + * All Platforms + * Bug 222: Hide "List all tabs" when the tabs don't overflow [mullvad-browser] + * Bug 234: Make User-Agent request header match RFP's navigator.userAgent [mullvad-browser] + * Bug 241: Move network.proxy.failover_direct=false pref to base-browser [mullvad-browser] + * Bug 256: Update nightly mar signing key [mullvad-browser] + * Bug 262: Mouse-over long links causes the browser element to re-center relative to width of status tooltip [mullvad-browser] + * Bug 284: Should we reflect the actual channel in about:debugging? [mullvad-browser] + * Bug 289: The Letterboxing>Content Alignment heading doesn't follow the Firefox design document capitalization [mullvad-browser] + * Bug 290: Add default bookmarks in the alpha channels for testing [mullvad-browser] + * Bug 40919: Consider dropping protection against line-height introduced in #23104 [tor-browser] + * Bug 41467: compat: beacon: re-enable the API but transform it to a no-op [tor-browser] + * Bug 41916: Letterboxing preferences UI [tor-browser] + * Bug 41917: Make the appearance of letterboxing look more intentional [tor-browser] + * Bug 41918: Add option to reuse last window size when letterboxing is enabled [tor-browser] + * Bug 41930: intl.accept_languages gets into a stuck modifed state [tor-browser] + * Bug 42153: Drop dom.enable_resource_timing = false preference [tor-browser] + * Bug 42172: browser.startup.homepage and TOR_DEFAULT_HOMEPAGE are ignored for the new window opened by New Identity [tor-browser] + * Bug 42192: Correctly round new windows when bookmarks toolbar is set to "Only Show on New Tab" [tor-browser] + * Bug 42211: Fluent migration: new identity [tor-browser] + * Bug 42214: Fluent migration: security level [tor-browser] + * Bug 42315: compat: why is eventCounts undefined? [tor-browser] + * Bug 42387: Visual noise in 13.5a4 letterboxing [tor-browser] + * Bug 42389: Betterboxing: gradient is never shown [tor-browser] + * Bug 42390: Betterboxing: make the decorator border disappear when the corners are flat [tor-browser] + * Bug 42397: Change RFP-spoofed Timezone from UTC to a real-world, less discriminable one [tor-browser] + * Bug 42398: Include Alpha and Nightly in MOZ_APP_DISPLAYNAME (and possibly in other places) [tor-browser] + * Bug 42405: Fix betterboxing + findbar horizontal bounce if the scrollbar is not an overlay [tor-browser] + * Bug 42443: Shrink the window to match letterboxing size when the emtpy area is doble-clicked [tor-browser] + * Bug 42490: Install svg from branding theme to browser/chrome/icons/default [tor-browser] + * Bug 42500: When startup window is maximized per letterboxing.rememberSize on startup, the restore button shrinks it to its minimum size [tor-browser] + * Bug 42519: Update the profile directory patch to check both for `system-install` and for `is-packaged-app` file [tor-browser] + * Bug 42520: Correctly record new initial window size after auto-shrinking [tor-browser] + * Bug 42529: Try not to spoof system-ui in contexts exempt from RFP [tor-browser] + * Bug 42537: Move base-browser.ftl Fluent file from "browser" to "toolkit" [tor-browser] + * Bug 42574: Exempt pdf.js from letterboxing [tor-browser] + * Bug 42583: Modify moz-support-link [tor-browser] + * Windows + macOS + * Bug 41405: Win ≤8.1 and macOS ≤10.14 not supported in ESR 128 [tor-browser] + * Bug 42347: Add a banner warning users about the upcoming EOL for Win ≤8.1 and macOS ≤10.14 [tor-browser] + * Bug 42586: Add support link to OS deprecation message [tor-browser] + * Windows + * Bug 278: Create asset(s) for the Mullvad Browser installer [mullvad-browser] + * Bug 305: Disable setting default browser on Windows [mullvad-browser] + * Bug 41901: windows: FontSubstitutes can leak system locale [tor-browser] + * Bug 41089: Add filetype association to the installer of Mullvad Browser [tor-browser-build] + * macOS + * Bug 40569: Create build-specific installer for macOS [tor-browser-build] + * Linux + * Bug 41136: Include *.deb in the list of files to gpg sign [tor-browser-build] + * Bug 28: deb installation package for Linux [mullvad-browser] + * Bug 29: rpm installation package for Linux [mullvad-browser] + * Bug 295: Filepicker string chars are tofu for the .deb package in Ubuntu 22.04 / Debian 11 [mullvad-browser] + * Bug 42438: Adapt the data import wizard to use the original $HOME on Linux [tor-browser] + * Bug 41135: 13.5a7's start-tor-browser seems to break KeePassXC-Browser? [tor-browser-build] + * Build System + * All Platforms + * Bug 282: Move `--disable-eme` to OS- and architecture-specific mozconfigs [mullvad-browser] + * Bug 301: Deb package in the debian software installer is showing the License as "Proprietary" [mullvad-browser] + * Bug 42337: Enable GeckoDriver for all desktop platforms [tor-browser] + * Bug 42594: Update mach to work with python 3.12 [tor-browser] + * Bug 40983: Bump the various branches to 13.5 on main [tor-browser-build] + * Bug 41001: Create Release Prep MR generating script [tor-browser-build] + * Bug 41031: Add command to unsign .mar files and compare with sha256sums-unsigned-build.txt [tor-browser-build] + * Bug 41038: Add RPM dependencies to README [tor-browser-build] + * Bug 41041: Sign mullvad-browser nightly updates [tor-browser-build] + * Bug 41045: Dump more information about build times on Firefox [tor-browser-build] + * Bug 41057: make fetch is not fetching mullvad repo [tor-browser-build] + * Bug 41072: Set correct updater_url for Mullvad Browser nightly builds [tor-browser-build] + * Bug 41081: Update detailsURL in tools/signing/nightly/update-responses-base-config.yml [tor-browser-build] + * Bug 41088: Remove use of projects/browser/run_scripts [tor-browser-build] + * Bug 41148: Update projects/browser/Bundle-Data/Docs/Licenses/NoScript.txt [tor-browser-build] + * Bug 41153: Update README for Ubuntu 24.04 unprivileged user namespace changes [tor-browser-build] + * Bug 41154: Update keyring/boklm.gpg for new subkeys [tor-browser-build] + * Bug 41161: Explicitly fetch tags in the release preparation script [tor-browser-build] + * Bug 40884: Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be [tor-browser-build] + * Bug 40071: Add an option to create zip files using 7z [rbm] + * Bug 40072: Move capture_exec to a separate module [rbm] + * Bug 40073: We should remove ./ when using 7-zip for zip files [rbm] + * Bug 40076: Correctly refresh file when computing input_files_id and a file is set as refresh_input [rbm] + * Windows + * Bug 200: Build system installer for Mullvad Browser on Windows [mullvad-browser] + * Bug 40606: Use Clang to compile NSIS [tor-browser-build] + * Bug 40900: Update NSIS to 3.09 [tor-browser-build] + * Bug 41065: Do a cleanup of the NSIS script [tor-browser-build] + * Bug 41076: Include the ShellLink plugin in NSIS [tor-browser-build] + * Bug 41077: Draft the new installer for Mullvad Browser [tor-browser-build] + * Bug 41084: $app_bundle is missing the final .app in projects/firefox/build [tor-browser-build] + * Bug 41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build] + * Bug 41151: Explicitly initialize the plugin directory on the Windows installer [tor-browser-build] + * Bug 41167: Stop generating an MB "portable" windows install [tor-browser-build] + * macOS + * Bug 40990: Remove old macos signing scripts [tor-browser-build] + * Bug 41124: Since TB/MB 13.5a5 macos signed installers contain all .DS_Store [tor-browser-build] + * Linux + * Bug 42491: Add mozconfig-linux-aarch64 [tor-browser] + * Bug 41046: Use the final path for Linux debug symbols [tor-browser-build] + * Bug 41083: Make deb package for Mullvad Browser [tor-browser-build] + * Bug 41112: Fix indentation of projects/browser/RelativeLink/start-browser [tor-browser-build] + * Bug 41129: Make rpm package for Mullvad Browser [tor-browser-build] + + +Mullvad Browser 13.0.16 - June 11th 2024 +* All Platforms + * Updated Firefox to 115.12.0esr + * Updated uBlock Origin to 1.58.0 + * Bug 310: Rebase Mullvad Browser Stable 13.0 onto 115.12.0esr [mullvad-browser] + * Bug 42621: Backport security fixes from Firefox 127 [tor-browser] + Mullvad Browser 13.5a9 - June 10 2024 * All Platforms * Updated Firefox to 115.12.0esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,260 @@ +Tor Browser 14.0a1 - July 24 2024 + * All Platforms + * Updated NoScript to 11.4.31 + * Bug 41328: Follow firefox ESMify for Bug 1308512 [tor-browser] + * Bug 42441: Evaluate RR version-by-RR version rebases instead of ESR-to-ESR [tor-browser] + * Bug 42683: Create script to generate issue triage csv's from bugzilla query and git scraping [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 128.0esr + * Bug 42687: Disable Privacy-Preserving Attribution [tor-browser] + * Build System + * All Platforms + * Updated Go to 1.22.5 + * Bug 42470: Add merge request CI for linting [tor-browser] + * Bug 42722: clang-format and localization linters are not running [tor-browser] + * Bug 40964: Create new Tor Browser gpg subkey [tor-browser-build] + * Bug 41155: Update toolchains for ESR128 [tor-browser-build] + * Bug 41156: Split the Rust configuration options [tor-browser-build] + * Bug 41166: Use the GitHub repository for firefox-l10n [tor-browser-build] + * Bug 41168: deploy_update_responses-$channel.sh should check that it is not reverting an update in an other channel [tor-browser-build] + * Bug 41184: Update generate blog post script to use new blog header images [tor-browser-build] + * Bug 41189: Add matzfan to list of downstream projects in alpha release-prep template [tor-browser-build] + * Bug 41190: Add morgan.gpg to keyrings and list of valid keyrings in firefox+geckoview [tor-browser-build] + * Bug 41191: Remove richard.gpg from keyrings and list of valid keyrings in firefox+geckoview [tor-browser-build] + * Bug 41195: Update Go to 1.22 [tor-browser-build] + * Bug 40078: Update tools/tb-build-06-start-nightly-build after tor-browser-build#40829 [tor-browser-bundle-testsuite] + * Windows + * Bug 29318: Drop mingw-w64/gcc toolchain [tor-browser-build] + * Bug 29320: Use mingw-w64/clang toolchain to build Rust [tor-browser-build] + * Bug 41177: Include Windows installer without -portable- in download json files [tor-browser-build] + * Windows + macOS + * Bug 41197: Modify update-responses to prevent upgrades on unsupported Windows and macOS versions [tor-browser-build] + +Tor Browser 13.5.1 - July 09 2024 + * All Platforms + * Bug 42689: Rebase Tor Browser onto 115.13.0esr [tor-browser] + * Bug 42693: Backports security fixes from Firefox 128 [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 115.13.0esr + * Android + * Updated GeckoView to 115.13.0esr + * Build System + * All Platforms + * Updated Go to 1.21.12 + * Bug 41166: Use the GitHub repository for firefox-l10n [tor-browser-build] + * Windows + * Bug 41177: Include Windows installer without -portable- in download json files [tor-browser-build] + +Tor Browser 13.5 - June 17 2024 + * All Platforms + * Bug 40856: Add a default for preferences in TorSettings [tor-browser] + * Bug 40919: Consider dropping protection against line-height introduced in #23104 [tor-browser] + * Bug 41114: Fix no-async-promise-executor on TorConnect [tor-browser] + * Bug 41467: compat: beacon: re-enable the API but transform it to a no-op [tor-browser] + * Bug 42153: Drop dom.enable_resource_timing = false preference [tor-browser] + * Bug 42246: Migrate tor connection stuff from browser to toolkit [tor-browser] + * Bug 42290: "DuckDuckGoOnion" is a weird naming format for onion search engines [tor-browser] + * Bug 42302: The allowed ports string contains a typo [tor-browser] + * Bug 42308: Update README for tor browser [tor-browser] + * Bug 42315: compat: why is eventCounts undefined? [tor-browser] + * Bug 42336: Review the relationship between TorSettings and the TorProvider [tor-browser] + * Bug 42340: TorBridgeChanged notification sends out "[object Object]" as its data. [tor-browser] + * Bug 42343: Consume pt_config.json in the browser [tor-browser] + * Bug 42354: Refactor exclusions in ShouldSanitizePreference() to the pref list. [tor-browser] + * Bug 42358: Separate the domain fronted requests from Moat [tor-browser] + * Bug 42359: Handle firewall and proxy in TorSettings.setSettings [tor-browser] + * Bug 42390: Betterboxing: make the decorator border disappear when the corners are flat [tor-browser] + * Bug 42397: Change RFP-spoofed Timezone from UTC to a real-world, less discriminable one [tor-browser] + * Bug 42437: Drop "torbrowser.version" preference [tor-browser] + * Bug 42466: Drop the "Onion Logo" from trademark statement [tor-browser] + * Bug 42479: Switch from localized strings to error codes in TorConnect errors [tor-browser] + * Bug 42481: Modularize SecurityLevel [tor-browser] + * Bug 42521: Remove unused onboarding strings [tor-browser] + * Bug 42529: Try not to spoof system-ui in contexts exempt from RFP [tor-browser] + * Bug 42537: Move Fluent files from "browser" to "toolkit" [tor-browser] + * Bug 42538: Move onion icons to toolkit [tor-browser] + * Bug 42549: Remove brand.dtd [tor-browser] + * Bug 42604: Add some debug logs about circuits [tor-browser] + * Bug 241: Move network.proxy.failover_direct=false pref to base-browser [mullvad-browser] + * Bug 41111: Use Lyrebird to provide WebTunnel PT Client [tor-browser-build] + * Windows + macOS + Linux + * Bug 40843: Add a working state to the Internet test button in connection settings [tor-browser] + * Bug 41621: Tweak about:torconnect styling [tor-browser] + * Bug 41622: Convert onion site errors to the new neterror template [tor-browser] + * Bug 41814: Change "vanilla bridge:" to "Tor bridge:" in bridge cards [tor-browser] + * Bug 41916: Letterboxing preferences UI [tor-browser] + * Bug 41917: Make the appearance of letterboxing look more intentional [tor-browser] + * Bug 41918: Add option to reuse last window size when letterboxing is enabled [tor-browser] + * Bug 41930: intl.accept_languages gets into a stuck modifed state [tor-browser] + * Bug 41966: Cannot remove locales from the locale alternatives list [tor-browser] + * Bug 42036: Design and build a user interface for Lox [tor-browser] + * Bug 42192: Correctly round new windows when bookmarks toolbar is set to "Only Show on New Tab" [tor-browser] + * Bug 42202: Fluent migration: crypto safety [tor-browser] + * Bug 42203: Fluent migration: about dialog [tor-browser] + * Bug 42204: Drop unused aboutTor.dtd [tor-browser] + * Bug 42206: Fluent migration: about:rulesets [tor-browser] + * Bug 42207: Fluent migration: preferences [tor-browser] + * Bug 42209: Fluent migration: tor circuit [tor-browser] + * Bug 42210: Fluent migration: download warning [tor-browser] + * Bug 42211: Fluent migration: new identity [tor-browser] + * Bug 42214: Fluent migration: security level [tor-browser] + * Bug 42270: Implement design changes to QR code dialog [tor-browser] + * Bug 42303: Remove unused "help" button logic in tor dialogs [tor-browser] + * Bug 42319: Make all the wordmark of the same size [tor-browser] + * Bug 42387: Visual noise in 13.5a4 letterboxing [tor-browser] + * Bug 42389: Betterboxing: gradient is never shown [tor-browser] + * Bug 42398: Include Alpha and Nightly in MOZ_APP_DISPLAYNAME (and possibly in other places) [tor-browser] + * Bug 42405: Fix betterboxing + findbar horizontal bounce if the scrollbar is not an overlay [tor-browser] + * Bug 42414: Show ellipsis when the tor bridge address overflows [tor-browser] + * Bug 42415: Improve focus styling for forced focus in bridge settings [tor-browser] + * Bug 42421: Remove bridge option should be hidden for Lox bridges [tor-browser] + * Bug 42423: Move temporary Lox Fluent strings to new file [tor-browser] + * Bug 42425: Improve accessibility of the bridge emoji cells [tor-browser] + * Bug 42443: Shrink the window to match letterboxing size when the emtpy area is doble-clicked [tor-browser] + * Bug 42446: Improve accessible descriptions in built-in dialog [tor-browser] + * Bug 42457: Loading icon for bridge pass (Lox) invites [tor-browser] + * Bug 42458: Update the "Submit Feedback" link in "About Tor Browser" [tor-browser] + * Bug 42476: Only allow Lox (invites) in alpha and nightly builds [tor-browser] + * Bug 42489: Lox module notifications [tor-browser] + * Bug 42490: Install svg from branding theme to browser/chrome/icons/default [tor-browser] + * Bug 42496: Moat refresh bug [tor-browser] + * Bug 42500: When startup window is maximized per letterboxing.rememberSize on startup, the restore button shrinks it to its minimum size [tor-browser] + * Bug 42504: TB Bookmarks: Add the Tor forum .onion to the bookmarks [tor-browser] + * Bug 42510: SETCONF Tor control protocol command should not be used when system Tor is configured / TOR_SKIP_LAUNCH=1 is not honored [tor-browser] + * Bug 42511: false positive message: browser tab bar shows "Not connected" even though connected in a system Tor etc. context [tor-browser] + * Bug 42520: Correctly record new initial window size after auto-shrinking [tor-browser] + * Bug 42533: Add Lox notification for activeLoxId [tor-browser] + * Bug 42540: Fix gNetworkStatus.deinint typo [tor-browser] + * Bug 42541: Circuit Display does not work when using Conjure pluggable transport [tor-browser] + * Bug 42542: Quirks when onion authentication prompt is shared between two tabs [tor-browser] + * Bug 42573: Tweak language notification to avoid formatValue [tor-browser] + * Bug 42574: Exempt pdf.js from letterboxing [tor-browser] + * Bug 42583: Modify moz-support-link [tor-browser] + * Bug 262: Mouse-over long links causes the browser element to re-center relative to width of status tooltip [mullvad-browser] + * Bug 289: The Letterboxing>Content Alignment heading doesn't follow the Firefox design document capitalization [mullvad-browser] + * Bug 41149: Add be, bg and pt-PT translations to nightlies [tor-browser-build] + * Windows + macOS + * Bug 41405: Win ≤8.1 and macOS ≤10.14 not supported in ESR 128 [tor-browser] + * Bug 42347: Add a banner warning users about the upcoming EOL for Win ≤8.1 and macOS ≤10.14 [tor-browser] + * Bug 42586: Add support link to OS deprecation message [tor-browser] + * Windows + * Bug 41859: Font used for IPs in circuit display is illegible [tor-browser] + * Bug 41901: windows: FontSubstitutes can leak system locale [tor-browser] + * Bug 42163: Make the 3rd party DLL blocklist obey portable mode [tor-browser] + * macOS + * Bug 40569: Create build-specific installer for macOS [tor-browser-build] + * Linux + * Bug 42438: Adapt the data import wizard to use the original $HOME on Linux [tor-browser] + * Bug 41112: Fix indentation of projects/browser/RelativeLink/start-browser [tor-browser-build] + * Bug 41136: Include *.deb in the list of files to gpg sign [tor-browser-build] + * Android + * Bug 41187: Improve Android's bridge settings UI [tor-browser] + * Bug 41846: Disable new nimbus use in firefox-android 115 [tor-browser] + * Bug 42017: TBA13: system/widget font tests: font-family not returned in getComputedStyle [tor-browser] + * Bug 42248: Allow GeckoView to launch tor [tor-browser] + * Bug 42249: Allow GeckoView to launch lyrebird [tor-browser] + * Bug 42250: Allow Moat.sys.mjs to invoke lyrebird on Android [tor-browser] + * Bug 42252: Plumb down TorConnect commands from firefox-android to GeckoView [tor-browser] + * Bug 42253: Remove "New private tab" action and widget [tor-browser] + * Bug 42259: Remove unused firefox branding from Tor Browser for Android [tor-browser] + * Bug 42260: Add TBB artifacts to .gitignore [tor-browser] + * Bug 42301: Make TorSettings interact with the old Android Settings [tor-browser] + * Bug 42317: Update "Security Settings" menu item [tor-browser] + * Bug 42323: Add a checkbox to enable the connect assist experiments on alpha [tor-browser] + * Bug 42409: TTP-03-011 WP3: Potential DoS due to Deep Link abuse [tor-browser] + * Bug 42427: Do not ship bridges as prefences anymore [tor-browser] + * Bug 42486: firefox-android bridge settings sometimes dont save [tor-browser] + * Bug 42522: The quick connect switch on Android seems too much on the right side [tor-browser] + * Bug 42552: TBA: formatting APIs are en-US only [tor-browser] + * Bug 42566: Remove 'Enable beta connection features' menu item in stable release channel [tor-browser] + * Bug 42567: Remove 'Enable beta connection features' toggle [tor-browser] + * Bug 42571: The new bootstrap on Android breaks if the browser goes in background [tor-browser] + * Bug 42576: Backport Bug 1885171: use the private keyboard for prompts on Android [tor-browser] + * Bug 42578: Reject Android "open in Tor Browser" intent [tor-browser] + * Bug 42582: Accepted languages should use id and he on Android [tor-browser] + * Bug 42593: Unable to disable bridges after they have been configured and successfully bootstrapped [tor-browser] + * Bug 42618: Addons on Android have a stale cache [tor-browser] + * Bug 42619: Cannot install Android addons from AMO [tor-browser] + * Bug 42632: Don't display builtin bridges in provide bridge popup [tor-browser] + * Bug 42636: A bad bridge line might get TBA stuck [tor-browser] + * Bug 42648: Don't cancel tor bootstrap when opening settings from bootstrap [tor-browser] + * Bug 41143: Enable multi-locales also on GeckoView [tor-browser-build] + * Build System + * All Platforms + * Bug 42331: tb-dev fetch command is missing repository argument [tor-browser] + * Bug 42516: Make tb-dev worktree-compatible [tor-browser] + * Bug 42594: Update mach to work with Python 3.12 [tor-browser] + * Bug 40852: Reproducible build of the the lox client library to wasm [tor-browser-build] + * Bug 40983: Bump the various branches to 13.5 on main [tor-browser-build] + * Bug 41001: Create Release Prep MR generating script [tor-browser-build] + * Bug 41037: Set time on signing machine before starting signing [tor-browser-build] + * Bug 41038: Add RPM dependencies to README [tor-browser-build] + * Bug 41045: Dump more information about build times on Firefox [tor-browser-build] + * Bug 41048: Drop the kcp-go project [tor-browser-build] + * Bug 41073: Update documention about required packages for container-less build [tor-browser-build] + * Bug 41081: Update detailsURL in tools/signing/nightly/update-responses-base-config.yml [tor-browser-build] + * Bug 41148: Update projects/browser/Bundle-Data/Docs/Licenses/NoScript.txt [tor-browser-build] + * Bug 41153: Update README for Ubuntu 24.04 unprivileged user namespace changes [tor-browser-build] + * Bug 41154: Update keyring/boklm.gpg for new subkeys [tor-browser-build] + * Bug 41161: Explicitly fetch tags in the release preparation script [tor-browser-build] + * Bug 40071: Add an option to create zip files using 7z [rbm] + * Bug 40073: We should remove ./ when using 7-zip for zip files [rbm] + * Bug 40076: Correctly refresh file when computing input_files_id and a file is set as refresh_input [rbm] + * Windows + macOS + Linux + * Bug 42305: (Semi-)Automatically merge translation resources across tor browser releases (desktop) [tor-browser] + * Bug 42501: Move `--disable-eme` to OS- and architecture-specific mozconfigs [tor-browser] + * Bug 42519: Update the profile directory patch to check both for `system-install` and for `is-packaged-app` file [tor-browser] + * Bug 41057: make fetch is not fetching mullvad repo [tor-browser-build] + * Bug 41078: pt_config.json not touch'd before adding to omni.ja, resulting in build non-determinism [tor-browser-build] + * Bug 41088: Remove use of projects/browser/run_scripts [tor-browser-build] + * Windows + * Bug 40606: Use Clang to compile NSIS [tor-browser-build] + * Bug 40900: Update NSIS to 3.09 [tor-browser-build] + * Bug 41065: Do a cleanup of the NSIS script [tor-browser-build] + * Bug 41076: Include the ShellLink plugin in NSIS [tor-browser-build] + * Bug 41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build] + * Bug 41150: Do not check for SSE2 on the Windows installer [tor-browser-build] + * macOS + * Bug 41084: $app_bundle is missing the final .app in projects/firefox/build [tor-browser-build] + * Bug 41124: Since TB/MB 13.5a5 macos signed installers contain all .DS_Store [tor-browser-build] + * Linux + * Bug 42491: Add mozconfig-linux-aarch64 [tor-browser] + * Bug 41046: Use the final path for Linux debug symbols [tor-browser-build] + * Bug 41126: Make deb and rpm packages for Tor Browser [tor-browser-build] + * Bug 41137: Build gcc-cross and tor-expert-bundle for linux-aarch64 [tor-browser-build] + * Bug 41160: Enable build of Tor Browser rpm/deb packages for nightly only [tor-browser-build] + * Android + * Bug 40502: Do not recommend addons on Tor Browser [tor-browser] + * Bug 42399: Re-enable minimization of JS for Android [tor-browser] + * Bug 42568: Remove legacy tor dependencies from firefox-android [tor-browser] + * Bug 42569: Remove tor-onion-proxy-library and and tor-android-service deployment/ingestion steps from firefox-android dev tools/scripts [tor-browser] + * Bug 42570: Add tor-expert-bundle aar depoyment/ingestion step to firefox-android dev tools/scripts [tor-browser] + * Bug 42581: Check if a file exists before trying to sign it in tools/tba-sign-devbuild.sh [tor-browser] + * Bug 41080: Re-pack omni.ja with 7-zip on Android [tor-browser-build] + * Bug 41082: Package tor expert bundle on android as .aar that firefox-android can use in lieu of tor-android-service with geckoview bootstrap [tor-browser-build] + * Bug 41092: Use an uncompressed omni.ja to improve final apk compression. [tor-browser-build] + * Bug 41093: Sign unsigned APKs instead of the QA-signed ones [tor-browser-build] + * Bug 41127: Android testbuilds fail because of the too early MOZ_BUILD_DATE [tor-browser-build] + * Bug 41139: Remove tor-android-service and tor-onion-proxy-library dependencies and ingestion steps from firefox-android config and build script [tor-browser-build] + * Bug 41140: Remove tor-onion-proxy-library and tor-android-service projects from tor-browser-build [tor-browser-build] + * Bug 41141: Add tor-expert-bundle aar dependency to firefox-android [tor-browser-build] + * Bug 42201: Make the script sign all the channels for local builds [tor-browser] + * Bug 42258: Replace the current boring "fiery android" icon we use for dev with the cool nightly icon [tor-browser] + +Tor Browser 13.0.16 - June 11th 2024 + * All Platforms + * Updated Tor to 0.4.8.12 + * Updated OpenSSL to 3.0.14 + * Bug 42625: Rebase Tor Browser Stable 13.0 onto 115.12.0esr [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 115.12.0esr + * Android + * Updated GeckoView to 115.12.0esr + * Bug 42621: Backport security fixes from Firefox 127 [tor-browser] + * Build System + * All Platforms + * Updated Go to 1.21.11 + Tor Browser 13.5a9 - June 10 2024 * All Platforms * Updated Tor to 0.4.8.12 ===================================== projects/browser/config ===================================== @@ -105,9 +105,9 @@ input_files: enable: '[% ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4206186/noscript-11.4.29.… + - URL: https://addons.mozilla.org/firefox/downloads/file/4320635/noscript-11.4.31.… name: noscript - sha256sum: 05b98840b05ef2acbac333543e4b7c3d40fee2ce5fb4e29260b05e2ff6fe24cd + sha256sum: b22c007534471a8fb74378e970ba79a536a44f88d81ad3852273b82a466d10c7 - URL: https://addons.mozilla.org/firefox/downloads/file/4290466/ublock_origin-1.5… name: ublock-origin sha256sum: 470c56994a7174db21578adce598b158a5dc0970c87c5cfe889ac632bd3085ea ===================================== projects/firefox/config ===================================== @@ -17,8 +17,10 @@ var: firefox_platform_version: 128.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '14.0' - browser_rebase: 1 + # Note: In 14.0a1, mullvad-browser is on browser_rebase: 1! + browser_rebase: 2 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' + # Note: In 14.0a1, mullvad-browser is on browser_build: 2! browser_build: 1 branding_directory_prefix: 'tb' copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' @@ -107,6 +109,10 @@ targets: gitlab_project: https://gitlab.torproject.org/tpo/applications/mullvad-browser updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' nightly_updates_publish_dir_prefix: mullvadbrowser- + # TODO: Remove/update me for 14.0a2 when/if in-sync with tor-browser + browser_rebase: 1 + # TODO: Remove/update me for 14.0a2 when/if in-sync with tor-browser + browser_build: 2 linux-x86_64: var: ===================================== projects/go-bootstrap/build ===================================== @@ -18,8 +18,16 @@ cd /var/tmp/build/go1.4/src CGO_ENABLED=0 CC= CFLAGS= LDFLAGS= ./make.bash export GOROOT_BOOTSTRAP="/var/tmp/build/go1.4" +# Building go 1.19.X cd $rootdir +tar -C /var/tmp/build --transform='s,^go\>,go1.19,' -xf $rootdir/[% c('input_files_by_name/go119') %] +cd /var/tmp/build/go1.19/src +./make.bash +export GOROOT_BOOTSTRAP="/var/tmp/build/go1.19" + +# Building go 1.21.X +cd $rootdir tar -C /var/tmp/dist -xf $rootdir/[% c('input_files_by_name/go') %] export GOROOT="$distdir" mv /var/tmp/dist/go $distdir ===================================== projects/go-bootstrap/config ===================================== @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 1.19.9 +version: 1.21.12 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -9,9 +9,12 @@ var: input_files: - project: container-image - - URL: 'https://golang.org/dl/go[% c("version") %].src.tar.gz' + - URL: 'https://go.dev/dl/go[% c("version") %].src.tar.gz' name: go - sha256sum: 131190a4697a70c5b1d232df5d3f55a3f9ec0e78e40516196ffb3f09ae6a5744 + sha256sum: 30e68af27bc1f1df231e3ab74f3d17d3b8d52a089c79bcaab573b4f1b807ed4f + - URL: https://go.dev/dl/go1.19.13.src.tar.gz + sha256sum: ccf36b53fb0024a017353c3ddb22c1f00bc7a8073c6aac79042da24ee34434d3 + name: go119 - URL: https://dl.google.com/go/go1.4-bootstrap-20171003.tar.gz name: go14 sha256sum: f4ff5b5eb3a3cae1c993723f3eab519c5bae18866b5e5f96fe1102f0cb5c3e52 ===================================== projects/go/config ===================================== @@ -1,14 +1,10 @@ # vim: filetype=yaml sw=2 -# When Windows 7 goes EOL, just update this field -version: '[% IF c("var/use_go_1_20") %][% c("var/go_1_20") %][% ELSE %][% c("var/go_1_21") %][% END %]' +version: '1.22.5' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - use_go_1_20: 0 - go_1_21: 1.21.11 - go_1_20: 1.20.14 no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist @@ -77,7 +73,6 @@ targets: windows: var: GOOS: windows - use_go_1_20: '[% c("origin_project") != "snowflake" %]' windows-i686: var: GOARCH: 386 @@ -129,14 +124,9 @@ input_files: - name: '[% c("var/compiler") %]' project: '[% c("var/compiler") %]' enable: '[% ! c("var/linux") %]' - - URL: 'https://go.dev/dl/go[% c("var/go_1_21") %].src.tar.gz' + - URL: 'https://go.dev/dl/go[% c("version") %].src.tar.gz' name: go - sha256sum: 42aee9bf2b6956c75a7ad6aa3f0a51b5821ffeac57f5a2e733a2d6eae1e6d9d2 - enable: '[% !c("var/use_go_1_20") %]' - - URL: 'https://go.dev/dl/go[% c("var/go_1_20") %].src.tar.gz' - name: go - sha256sum: 1aef321a0e3e38b7e91d2d7eb64040666cabdcc77d383de3c9522d0d69b67f4e - enable: '[% c("var/use_go_1_20") %]' + sha256sum: ac9c723f224969aee624bc34fd34c9e13f2a212d75c71c807de644bb46e112f6 - project: go-bootstrap name: go-bootstrap target_replace: ===================================== projects/manual/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 # To update, see doc/how-to-update-the-manual.txt # Remember to update also the package's hash, with the version! -version: 172720 +version: 186657 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -23,6 +23,6 @@ input_files: - project: container-image - URL: 'https://build-sources.tbb.torproject.org/manual_[% c("version") %].zip' name: manual - sha256sum: f2abffe1471ae63046cff06b853685c6614e117cc67bdf51228dc0792344441c + sha256sum: c73bb6c97eebe22947b0e9e076838e3c4994da24f3e6e16b7621831afd2006a8 - filename: packagemanual.py name: package_script ===================================== projects/release/update_responses_config.yml ===================================== @@ -55,17 +55,15 @@ versions: migrate_langs: # minSupportedOsVersion on macOS corresponds to the Darwin version ( https://en.wikipedia.org/wiki/Darwin_(operating_system) ) macos: - # macOS v10.12.0 - minSupportedOSVersion: 16.0.0 + # macOS v10.15.0 + minSupportedOSVersion: 19.0.0 # minSupportedOsVersion on Windows corresponds to the operating system version ( https://docs.microsoft.com/en-us/windows/win32/sysinfo/operating-system-ver… ) windows-i686: - # Windows 7 - minSupportedOSVersion: 6.1 - minSupportedInstructionSet: SSE2 + # Windows 10 + minSupportedOSVersion: 10.0 windows-x86_64: - # Windows 7 - minSupportedOSVersion: 6.1 - minSupportedInstructionSet: SSE2 + # Windows 10 + minSupportedOSVersion: 10.0 linux-i686: minSupportedInstructionSet: SSE2 linux-x86_64: ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: a2c920966678dd664e98318557ef03ab22023880 + git_hash: b8972d5a7409c964c832c6ccb7703f0451e000cd targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 0542de960c53726fab59918eeaddb3173dbacea2 + git_hash: dd38ffa906e83acfaf5af94d5823feee52eb86f2 targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 35087956c0e382242935c2ce6e9cecfd44c112bc + git_hash: 5799bb4b0104159a79ad43334f89ac26c36a1465 compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -73,18 +73,18 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '13.5a9' - torbrowser_build: 'build2' + torbrowser_version: '14.0a1' + torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2024/06/10 06:30:00' + browser_release_date: '2024/07/24 21:00:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 13.5a9 - 13.5a8 - 13.5a7 - - 13.5a6 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing ===================================== tools/fetch_changelogs.py ===================================== @@ -41,7 +41,8 @@ class ChangelogEntry: "tor-browser": 2, "tor-browser-build": 3, "mullvad-browser": 1 if is_mb else 4, - "rbm": 5, + "tor-browser-bundle-testsuite": 5, + "rbm": 6, } def get_platforms(self): ===================================== tools/signing/set-config ===================================== @@ -42,5 +42,5 @@ faketime_path=/usr/lib/x86_64-linux-gnu/faketime/libfaketime.so.1 test -z "${NON_INTERACTIVE:-}" || rsync_progress="--progress" rsync_options="-avH ${rsync_progress:-} ${DRY_RUN:-}" -tb_builders='boklm dan henry ma1 pierov richard' +tb_builders='boklm dan henry ma1 morgan pierov' wrappers_dir=/signing/tor-browser-build/tools/signing/wrappers View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-13.5] 2 commits: Bug 41190: Add morgan.gpg to keyrings and list of valid keyrings in firefox+geckoview
by morgan (＠morgan) 25 Jul '24

25 Jul '24

morgan pushed to branch maint-13.5 at The Tor Project / Applications / tor-browser-build Commits: d5e356a3 by Morgan at 2024-07-25T21:42:29+00:00 Bug 41190: Add morgan.gpg to keyrings and list of valid keyrings in firefox+geckoview - - - - - 42a9b198 by Morgan at 2024-07-25T21:42:36+00:00 Bug 41191: Remove richard.gpg from keyrings and list of valid keyrings in firefox+geckoview - - - - - 5 changed files: - + keyring/morgan.gpg - − keyring/richard.gpg - projects/firefox-android/config - projects/firefox/config - projects/geckoview/config Changes: ===================================== keyring/morgan.gpg ===================================== Binary files /dev/null and b/keyring/morgan.gpg differ ===================================== keyring/richard.gpg deleted ===================================== Binary files a/keyring/richard.gpg and /dev/null differ ===================================== projects/firefox-android/config ===================================== @@ -9,7 +9,7 @@ gpg_keyring: - dan_b.gpg - ma1.gpg - pierov.gpg - - richard.gpg + - morgan.gpg container: use_container: 1 ===================================== projects/firefox/config ===================================== @@ -8,8 +8,8 @@ gpg_keyring: - boklm.gpg - dan_b.gpg - ma1.gpg + - morgan.gpg - pierov.gpg - - richard.gpg container: use_container: 1 ===================================== projects/geckoview/config ===================================== @@ -8,8 +8,8 @@ gpg_keyring: - boklm.gpg - dan_b.gpg - ma1.gpg + - morgan.gpg - pierov.gpg - - richard.gpg container: use_container: 1 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: Bug 41190: Add morgan.gpg to keyrings and list of valid keyrings in firefox+geckoview
by morgan (＠morgan) 25 Jul '24

25 Jul '24

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: b58523dc by Morgan at 2024-07-25T20:30:42+00:00 Bug 41190: Add morgan.gpg to keyrings and list of valid keyrings in firefox+geckoview - - - - - 323e32d3 by Morgan at 2024-07-25T20:30:42+00:00 Bug 41191: Remove richard.gpg from keyrings and list of valid keyrings in firefox+geckoview - - - - - 5 changed files: - + keyring/morgan.gpg - − keyring/richard.gpg - projects/firefox-android/config - projects/firefox/config - projects/geckoview/config Changes: ===================================== keyring/morgan.gpg ===================================== Binary files /dev/null and b/keyring/morgan.gpg differ ===================================== keyring/richard.gpg deleted ===================================== Binary files a/keyring/richard.gpg and /dev/null differ ===================================== projects/firefox-android/config ===================================== @@ -9,7 +9,7 @@ gpg_keyring: - dan_b.gpg - ma1.gpg - pierov.gpg - - richard.gpg + - morgan.gpg container: use_container: 1 ===================================== projects/firefox/config ===================================== @@ -8,8 +8,8 @@ gpg_keyring: - boklm.gpg - dan_b.gpg - ma1.gpg + - morgan.gpg - pierov.gpg - - richard.gpg container: use_container: 1 ===================================== projects/geckoview/config ===================================== @@ -8,8 +8,8 @@ gpg_keyring: - boklm.gpg - dan_b.gpg - ma1.gpg + - morgan.gpg - pierov.gpg - - richard.gpg container: use_container: 1 disable_network: View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-128.0esr-14.0-1-build2
by morgan (＠morgan) 25 Jul '24

25 Jul '24

morgan pushed new tag mullvad-browser-128.0esr-14.0-1-build2 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag FIREFOX_127_0b1_RELEASE
by Pier Angelo Vendrame (＠pierov) 25 Jul '24

25 Jul '24

Pier Angelo Vendrame pushed new tag FIREFOX_127_0b1_RELEASE at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/FIREFOX_1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41189: Add selenium-tor maintainer to comms list in Tor Browser release-prep issue template
by morgan (＠morgan) 24 Jul '24

24 Jul '24

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 8d56b077 by Morgan at 2024-07-24T20:01:53+00:00 Bug 41189: Add selenium-tor maintainer to comms list in Tor Browser release-prep issue template - - - - - 1 changed file: - .gitlab/issue_templates/Release Prep - Tor Browser Alpha.md Changes: ===================================== .gitlab/issue_templates/Release Prep - Tor Browser Alpha.md ===================================== @@ -164,6 +164,8 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - [ ] FreeBSD port: freebsd(a)sysctl.cz  - [ ] OpenBSD port: caspar(a)schutijser.com  - [ ] Note any changes which may affect packaging/downstream integration +- [ ] ***(Optional, only after internal API-breaking changes)*** Email downstream project maintainers: + - [ ] selenium-tor: matzfan(a)tempr.email  - [ ] ***(Optional, after ESR migration)*** Email external partners: - [ ] Cloudflare: ask-research(a)cloudflare.com - **NOTE** : We need to provide them with updated user agent string so they can update their internal machinery to prevent Tor Browser users from getting so many CAPTCHAs View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/8… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-13.5] 2 commits: Bug 40964: Update keyring/torbrowser.gpg for new subkey
by morgan (＠morgan) 24 Jul '24

24 Jul '24

morgan pushed to branch maint-13.5 at The Tor Project / Applications / tor-browser-build Commits: 7e25f33b by Nicolas Vigier at 2024-07-24T19:58:57+00:00 Bug 40964: Update keyring/torbrowser.gpg for new subkey - - - - - 1176788e by Nicolas Vigier at 2024-07-24T19:59:03+00:00 Bug 40964: Sign alpha release using new gpg subkey - - - - - 4 changed files: - keyring/torbrowser.gpg - tools/signing/linux-signer-gpg-sign - tools/signing/machines-setup/sudoers.d/sign-gpg - tools/signing/wrappers/sign-gpg Changes: ===================================== keyring/torbrowser.gpg ===================================== Binary files a/keyring/torbrowser.gpg and b/keyring/torbrowser.gpg differ ===================================== tools/signing/linux-signer-gpg-sign ===================================== @@ -4,6 +4,8 @@ set -e script_dir=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd ) source "$script_dir/functions" +test "$tbb_version_type" = "alpha" && export GPG_NEWSUBKEY=1 + cd ~/"$SIGNING_PROJECTNAME-$tbb_version" test -n "$GPG_PASS" || read -sp "Enter gpg passphrase: " GPG_PASS ===================================== tools/signing/machines-setup/sudoers.d/sign-gpg ===================================== @@ -1,2 +1,2 @@ -Defaults>signing-gpg env_keep += SIGNING_PROJECTNAME +Defaults>signing-gpg env_keep += "SIGNING_PROJECTNAME GPG_NEWSUBKEY" %signing ALL = (signing-gpg) NOPASSWD: /signing/tor-browser-build/tools/signing/wrappers/sign-gpg ===================================== tools/signing/wrappers/sign-gpg ===================================== @@ -11,4 +11,6 @@ if test $(whoami) != 'signing-gpg'; then exit 1 fi -exec gpg --homedir /home/signing-gpg/.gnupg -absu 0xe53d989a9e2d47bf! --batch --no-tty -o- --passphrase-fd 0 -- "$1" +gpg_subkey='0xe53d989a9e2d47bf!' +test -n "$GPG_NEWSUBKEY" && gpg_subkey='0x157432CF78A65729!' +exec gpg --homedir /home/signing-gpg/.gnupg -absu "$gpg_subkey" --batch --no-tty -o- --passphrase-fd 0 -- "$1" View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0