- tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser-build][maint-12.0] 2 commits: Bug 40747: Remove empty line at the top of sha256sums-unsigned-build.txt
by boklm (＠boklm) 23 Jan '23

23 Jan '23

boklm pushed to branch maint-12.0 at The Tor Project / Applications / tor-browser-build Commits: 76ea72c2 by Nicolas Vigier at 2023-01-23T17:47:56+01:00 Bug 40747: Remove empty line at the top of sha256sums-unsigned-build.txt - - - - - 6c1adab8 by Nicolas Vigier at 2023-01-23T17:48:08+01:00 Bug 40748: Remove warning in dmg2mar when sha256sums-unsigned-build.txt contains an empty line - - - - - 2 changed files: - projects/release/build - tools/dmg2mar Changes: ===================================== projects/release/build ===================================== @@ -51,7 +51,7 @@ RewriteRule ^sha256sums.incrementals.txt.asc$ sha256sums-unsigned-build.incremen EOF # empty any existing sh256sums file -echo > sha256sums-unsigned-build.txt +echo -n > sha256sums-unsigned-build.txt # concat sha256sum entry for each file in set for i in $(ls -1 *.exe *.tar.xz *.dmg *.mar *.zip *.tar.gz *.apk *.json | grep -v '\.incremental\.mar$' | sort) do ===================================== tools/dmg2mar ===================================== @@ -95,6 +95,7 @@ sub get_dmg_files_from_sha256sums { my @files; foreach my $line (read_file('sha256sums-unsigned-build.txt')) { my (undef, $filename) = split ' ', $line; + next unless $filename; chomp $filename; next unless $filename =~ m/^$appname_dmg-(.+)-macos_(.+)\.dmg$/; push @files, { filename => $filename, version => $1, lang => $2 }; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: Bug 40747: Remove empty line at the top of sha256sums-unsigned-build.txt
by boklm (＠boklm) 23 Jan '23

23 Jan '23

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 7f1fcca6 by Nicolas Vigier at 2023-01-23T17:46:39+01:00 Bug 40747: Remove empty line at the top of sha256sums-unsigned-build.txt - - - - - 80d457f7 by Nicolas Vigier at 2023-01-23T17:46:42+01:00 Bug 40748: Remove warning in dmg2mar when sha256sums-unsigned-build.txt contains an empty line - - - - - 2 changed files: - projects/release/build - tools/dmg2mar Changes: ===================================== projects/release/build ===================================== @@ -51,7 +51,7 @@ RewriteRule ^sha256sums.incrementals.txt.asc$ sha256sums-unsigned-build.incremen EOF # empty any existing sh256sums file -echo > sha256sums-unsigned-build.txt +echo -n > sha256sums-unsigned-build.txt # concat sha256sum entry for each file in set for i in $(ls -1 *.exe *.tar.xz *.dmg *.mar *.zip *.tar.gz *.apk *.json | grep -v '\.incremental\.mar$' | sort) do ===================================== tools/dmg2mar ===================================== @@ -95,6 +95,7 @@ sub get_dmg_files_from_sha256sums { my @files; foreach my $line (read_file('sha256sums-unsigned-build.txt')) { my (undef, $filename) = split ' ', $line; + next unless $filename; chomp $filename; next unless $filename =~ m/^$appname_dmg-(.+)-macos_(.+)\.dmg$/; push @files, { filename => $filename, version => $1, lang => $2 }; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-12.0] Bug 40723: Use tor-browser-update-responses.git in upload-update_responses-to-staticiforme
by boklm (＠boklm) 23 Jan '23

23 Jan '23

boklm pushed to branch maint-12.0 at The Tor Project / Applications / tor-browser-build Commits: 98053ed8 by Nicolas Vigier at 2023-01-19T13:08:57+01:00 Bug 40723: Use tor-browser-update-responses.git in upload-update_responses-to-staticiforme - - - - - 6 changed files: - .gitlab/issue_templates/Release Prep - Alpha.md - .gitlab/issue_templates/Release Prep - Stable.md - tools/signing/do-all-signing - tools/signing/functions - + tools/signing/set-config.update-responses - tools/signing/upload-update_responses-to-staticiforme Changes: ===================================== .gitlab/issue_templates/Release Prep - Alpha.md ===================================== @@ -210,6 +210,8 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - `ssh_host_macos_signer` : ssh hostname of macOS signing machine - [ ] `tor-browser-build/tools/signing/set-config.macos-notarization` - `macos_notarization_user` : the email login for a tor notariser Apple Developer account + - [ ] `set-config.update-responses` + - `update_responses_repository_dir` : directory where you cloned `git@gitlab.torproject.org:tpo/applications/tor-browser-update-responses.git` - [ ] `tor-browser-build/tools/signing/set-config.tbb-version` - `tbb_version` : tor browser version string, same as `var/torbrowser_version` in `rbm.conf` (examples: `11.5a12`, `11.0.13`) - `tbb_version_build` : the tor-browser-build build number (if `var/torbrowser_build` in `rbm.conf` is `buildN` then this value is `N`) @@ -230,7 +232,7 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] `/srv/cdn-master.torproject.org/htdocs/aus1/torbrowser` - [ ] `/srv/dist-master.torproject.org/htdocs/torbrowser` - [ ] Static update components : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` - - [ ] Enable update responses : `./deploy_update_responses-alpha.sh` + - [ ] Enable update responses : `sudo -u tb-release ./deploy_update_responses-alpha.sh` - [ ] Publish APKs to Google Play: - Log into https://play.google.com/apps/publish - Select `Tor Browser (Alpha)` app ===================================== .gitlab/issue_templates/Release Prep - Stable.md ===================================== @@ -297,6 +297,8 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] `ssh_host_macos_signer` : ssh hostname of macOS signing machine - [ ] `tor-browser-build/tools/signing/set-config.macos-notarization` - [ ] `macos_notarization_user` : the email login for a tor notariser Apple Developer account + - [ ] `set-config.update-responses` + - `update_responses_repository_dir` : directory where you cloned `git@gitlab.torproject.org:tpo/applications/tor-browser-update-responses.git` - [ ] `tor-browser-build/tools/signing/set-config.tbb-version` - [ ] `tbb_version` : tor browser version string, same as `var/torbrowser_version` in `rbm.conf` (examples: `11.5a12`, `11.0.13`) - [ ] `tbb_version_build` : the tor-browser-build build number (if `var/torbrowser_build` in `rbm.conf` is `buildN` then this value is `N`) @@ -318,8 +320,8 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] `/srv/dist-master.torproject.org/htdocs/torbrowser` - [ ] Static update components : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` - [ ] Enable update responses : - - [ ] alpha: `./deploy_update_responses-alpha.sh` - - [ ] release: `./deploy_update_responses-release.sh` + - [ ] alpha: `sudo -u tb-release ./deploy_update_responses-alpha.sh` + - [ ] release: `sudo -u tb-release ./deploy_update_responses-release.sh` - [ ] ***(Android Only)*** : Publish APKs to Google Play: - [ ] Log into https://play.google.com/apps/publish - [ ] Select `Tor Browser` app ===================================== tools/signing/do-all-signing ===================================== @@ -2,6 +2,7 @@ set -e script_dir=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd ) source "$script_dir/functions" +source "$script_dir/set-config.update-responses" NON_INTERACTIVE=1 steps_dir="$signed_version_dir.steps" ===================================== tools/signing/functions ===================================== @@ -19,4 +19,16 @@ function check_torbrowser_version_var { return 0 } +function check_update_responses_repository_dir { + if test -z "$update_responses_repository_dir" || ! test -d "$update_responses_repository_dir" + then + cat << 'EOF' > /dev/stderr +$aus1_repository_dir is not defined, or the directory does not exist +You should clone git@gitlab.torproject.org:tpo/applications/tor-browser-update-responses.git +and set $update_responses_repository_dir in set-config.update-responses +EOF + exit 1 + fi +} + . "$script_dir/set-config" ===================================== tools/signing/set-config.update-responses ===================================== @@ -0,0 +1,7 @@ +# You should clone git@gitlab.torproject.org:tpo/applications/tor-browser-update-responses.git +# and uncomment the line setting update_responses_repository_dir. +# Don't forget to set user.email and user.name in your git config + +#update_responses_repository_dir=/path/to/tor-browser-update-responses.git + +check_update_responses_repository_dir ===================================== tools/signing/upload-update_responses-to-staticiforme ===================================== @@ -2,6 +2,7 @@ set -e script_dir=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd ) source "$script_dir/functions" +source "$script_dir/set-config.update-responses" check_torbrowser_version_var @@ -17,33 +18,40 @@ else popd > /dev/null fi -update_dir=/srv/aus1-master.torproject.org/htdocs/torbrowser/update_3 +cd $update_responses_repository_dir +git checkout main +git pull --ff-only +test -n "$(git status --porcelain=v1 | grep -v '^?')" \ + && exit_error 'update_responses_repository_dir has modified files' +cd update_3 +rm -Rf "$tbb_version_type" +tar -xf "$update_responses_tar" +git add "$tbb_version_type" +git commit -m "$tbb_version_type: new version, $tbb_version" +update_responses_commit=$(git log -1 --format=%H) + +update_dir=/srv/aus1-master.torproject.org/htdocs/torbrowser deploy_script=$(mktemp) trap "rm -Rf $deploy_script" EXIT cat << EOF > "$deploy_script" #!/bin/bash set -e -tmpdir="\$(mktemp -d)" +echo "Deploying version $tbb_version" +echo "update_responses_commit: $update_responses_commit" -trap "rm -Rf \$tmpdir" EXIT - -rm -Rf "$update_dir/$tbb_version_type.old" -test -d "$update_dir/$tbb_version_type" && \\ - mv -v "$update_dir/$tbb_version_type" "$update_dir/$tbb_version_type.old" - -tar -C "\$tmpdir" -xf ~/$update_responses_tar_filename -chmod 775 "\$tmpdir"/$tbb_version_type -chmod 664 "\$tmpdir"/$tbb_version_type/* "\$tmpdir"/$tbb_version_type/.htaccess -chgrp -R torwww "\$tmpdir"/$tbb_version_type -mv -v "\$tmpdir"/$tbb_version_type "$update_dir/$tbb_version_type" +cd "$update_dir" +git fetch +git checkout "$update_responses_commit" static-update-component aus1.torproject.org EOF chmod +x $deploy_script -scp -p "$update_responses_tar" "$ssh_host_staticiforme:" scp -p $deploy_script $ssh_host_staticiforme:deploy_update_responses-$tbb_version_type.sh +git push + echo 'To enable updates you can now run:' -echo " ssh $ssh_host_staticiforme ./deploy_update_responses-$tbb_version_type.sh" +echo " ssh $ssh_host_staticiforme" +echo " sudo -u tb-release ./deploy_update_responses-$tbb_version_type.sh" View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-102.7.0esr-12.5-1] Bug 41542: Disable the creation of a default profile
by Pier Angelo Vendrame (＠pierov) 23 Jan '23

23 Jan '23

Pier Angelo Vendrame pushed to branch base-browser-102.7.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: a9f50c4e by Pier Angelo Vendrame at 2023-01-23T17:39:28+01:00 Bug 41542: Disable the creation of a default profile Firefox creates a profile as a fallback for old versions. However, we do not need this, so we want to prevent Firefox from creating the related directories. We comment out the code, but should Mozilla be interested in a compile-time flag, we could rewrite the patch to add one. See also https://bugzilla.mozilla.org/show_bug.cgi?id=1770174. - - - - - 1 changed file: - toolkit/profile/nsToolkitProfileService.cpp Changes: ===================================== toolkit/profile/nsToolkitProfileService.cpp ===================================== @@ -1578,6 +1578,12 @@ nsresult nsToolkitProfileService::SelectStartupProfile( rv = CreateDefaultProfile(getter_AddRefs(mCurrent)); if (NS_SUCCEEDED(rv)) { + // tor-browser#41542: We do not need to support legacy versions. + // For now, we just use an ifdef, but we could write a patch to disable + // this behavior through a build-time flag, should Mozilla be interested + // in taking it. + // See also https://bugzilla.mozilla.org/show_bug.cgi?id=1770174 +#ifndef BASE_BROWSER // If there is only one profile and it isn't meant to be the profile that // older versions of Firefox use then we must create a default profile // for older versions of Firefox to avoid the existing profile being @@ -1589,6 +1595,7 @@ nsresult nsToolkitProfileService::SelectStartupProfile( getter_AddRefs(newProfile)); SetNormalDefault(newProfile); } +#endif rv = Flush(); NS_ENSURE_SUCCESS(rv, rv); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/a9f50c4… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/a9f50c4… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.7.0esr-12.5-1] Bug 41542: Disable the creation of a default profile
by Pier Angelo Vendrame (＠pierov) 23 Jan '23

23 Jan '23

Pier Angelo Vendrame pushed to branch tor-browser-102.7.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 65ab09ce by Pier Angelo Vendrame at 2023-01-20T18:26:28+01:00 Bug 41542: Disable the creation of a default profile Firefox creates a profile as a fallback for old versions. However, we do not need this, so we want to prevent Firefox from creating the related directories. We comment out the code, but should Mozilla be interested in a compile-time flag, we could rewrite the patch to add one. See also https://bugzilla.mozilla.org/show_bug.cgi?id=1770174. - - - - - 1 changed file: - toolkit/profile/nsToolkitProfileService.cpp Changes: ===================================== toolkit/profile/nsToolkitProfileService.cpp ===================================== @@ -1587,6 +1587,12 @@ nsresult nsToolkitProfileService::SelectStartupProfile( rv = CreateDefaultProfile(getter_AddRefs(mCurrent)); if (NS_SUCCEEDED(rv)) { + // tor-browser#41542: We do not need to support legacy versions. + // For now, we just use an ifdef, but we could write a patch to disable + // this behavior through a build-time flag, should Mozilla be interested + // in taking it. + // See also https://bugzilla.mozilla.org/show_bug.cgi?id=1770174 +#ifndef BASE_BROWSER // If there is only one profile and it isn't meant to be the profile that // older versions of Firefox use then we must create a default profile // for older versions of Firefox to avoid the existing profile being @@ -1598,6 +1604,7 @@ nsresult nsToolkitProfileService::SelectStartupProfile( getter_AddRefs(newProfile)); SetNormalDefault(newProfile); } +#endif rv = Flush(); NS_ENSURE_SUCCESS(rv, rv); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/65ab09c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/65ab09c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: Fix `Enable update responses` in `Release Prep - Stable.md`
by boklm (＠boklm) 23 Jan '23

23 Jan '23

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 631bcbc1 by Nicolas Vigier at 2023-01-23T17:33:40+01:00 Fix `Enable update responses` in `Release Prep - Stable.md` - - - - - 1a018371 by Nicolas Vigier at 2023-01-23T17:33:43+01:00 Bug 40723: Use tor-browser-update-responses.git in upload-update_responses-to-staticiforme - - - - - 6 changed files: - .gitlab/issue_templates/Release Prep - Alpha.md - .gitlab/issue_templates/Release Prep - Stable.md - tools/signing/do-all-signing - tools/signing/functions - + tools/signing/set-config.update-responses - tools/signing/upload-update_responses-to-staticiforme Changes: ===================================== .gitlab/issue_templates/Release Prep - Alpha.md ===================================== @@ -219,6 +219,8 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - `ssh_host_macos_signer` : ssh hostname of macOS signing machine - [ ] `tor-browser-build/tools/signing/set-config.macos-notarization` - `macos_notarization_user` : the email login for a tor notariser Apple Developer account + - [ ] `set-config.update-responses` + - `update_responses_repository_dir` : directory where you cloned `git@gitlab.torproject.org:tpo/applications/tor-browser-update-responses.git` - [ ] `tor-browser-build/tools/signing/set-config.tbb-version` - `tbb_version` : tor browser version string, same as `var/torbrowser_version` in `rbm.conf` (examples: `11.5a12`, `11.0.13`) - `tbb_version_build` : the tor-browser-build build number (if `var/torbrowser_build` in `rbm.conf` is `buildN` then this value is `N`) @@ -239,7 +241,7 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] `/srv/cdn-master.torproject.org/htdocs/aus1/torbrowser` - [ ] `/srv/dist-master.torproject.org/htdocs/torbrowser` - [ ] Static update components : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` - - [ ] Enable update responses : `./deploy_update_responses-alpha.sh` + - [ ] Enable update responses : `sudo -u tb-release ./deploy_update_responses-alpha.sh` - [ ] Publish APKs to Google Play: - Log into https://play.google.com/apps/publish - Select `Tor Browser (Alpha)` app ===================================== .gitlab/issue_templates/Release Prep - Stable.md ===================================== @@ -229,6 +229,8 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - `ssh_host_macos_signer` : ssh hostname of macOS signing machine - [ ] `tor-browser-build/tools/signing/set-config.macos-notarization` - `macos_notarization_user` : the email login for a tor notariser Apple Developer account + - [ ] `set-config.update-responses` + - `update_responses_repository_dir` : directory where you cloned `git@gitlab.torproject.org:tpo/applications/tor-browser-update-responses.git` - [ ] `tor-browser-build/tools/signing/set-config.tbb-version` - `tbb_version` : tor browser version string, same as `var/torbrowser_version` in `rbm.conf` (examples: `11.5a12`, `11.0.13`) - `tbb_version_build` : the tor-browser-build build number (if `var/torbrowser_build` in `rbm.conf` is `buildN` then this value is `N`) @@ -249,7 +251,7 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] `/srv/cdn-master.torproject.org/htdocs/aus1/torbrowser` - [ ] `/srv/dist-master.torproject.org/htdocs/torbrowser` - [ ] Static update components : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` - - [ ] Enable update responses : `./deploy_update_responses-alpha.sh` + - [ ] Enable update responses : `sudo -u tb-release ./deploy_update_responses-release.sh` - [ ] Publish APKs to Google Play: - Log into https://play.google.com/apps/publish - Select `Tor Browser` app ===================================== tools/signing/do-all-signing ===================================== @@ -2,6 +2,7 @@ set -e script_dir=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd ) source "$script_dir/functions" +source "$script_dir/set-config.update-responses" NON_INTERACTIVE=1 steps_dir="$signed_version_dir.steps" ===================================== tools/signing/functions ===================================== @@ -19,4 +19,16 @@ function check_torbrowser_version_var { return 0 } +function check_update_responses_repository_dir { + if test -z "$update_responses_repository_dir" || ! test -d "$update_responses_repository_dir" + then + cat << 'EOF' > /dev/stderr +$aus1_repository_dir is not defined, or the directory does not exist +You should clone git@gitlab.torproject.org:tpo/applications/tor-browser-update-responses.git +and set $update_responses_repository_dir in set-config.update-responses +EOF + exit 1 + fi +} + . "$script_dir/set-config" ===================================== tools/signing/set-config.update-responses ===================================== @@ -0,0 +1,7 @@ +# You should clone git@gitlab.torproject.org:tpo/applications/tor-browser-update-responses.git +# and uncomment the line setting update_responses_repository_dir. +# Don't forget to set user.email and user.name in your git config + +#update_responses_repository_dir=/path/to/tor-browser-update-responses.git + +check_update_responses_repository_dir ===================================== tools/signing/upload-update_responses-to-staticiforme ===================================== @@ -2,6 +2,7 @@ set -e script_dir=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd ) source "$script_dir/functions" +source "$script_dir/set-config.update-responses" check_torbrowser_version_var @@ -17,33 +18,40 @@ else popd > /dev/null fi -update_dir=/srv/aus1-master.torproject.org/htdocs/torbrowser/update_3 +cd $update_responses_repository_dir +git checkout main +git pull --ff-only +test -n "$(git status --porcelain=v1 | grep -v '^?')" \ + && exit_error 'update_responses_repository_dir has modified files' +cd update_3 +rm -Rf "$tbb_version_type" +tar -xf "$update_responses_tar" +git add "$tbb_version_type" +git commit -m "$tbb_version_type: new version, $tbb_version" +update_responses_commit=$(git log -1 --format=%H) + +update_dir=/srv/aus1-master.torproject.org/htdocs/torbrowser deploy_script=$(mktemp) trap "rm -Rf $deploy_script" EXIT cat << EOF > "$deploy_script" #!/bin/bash set -e -tmpdir="\$(mktemp -d)" +echo "Deploying version $tbb_version" +echo "update_responses_commit: $update_responses_commit" -trap "rm -Rf \$tmpdir" EXIT - -rm -Rf "$update_dir/$tbb_version_type.old" -test -d "$update_dir/$tbb_version_type" && \\ - mv -v "$update_dir/$tbb_version_type" "$update_dir/$tbb_version_type.old" - -tar -C "\$tmpdir" -xf ~/$update_responses_tar_filename -chmod 775 "\$tmpdir"/$tbb_version_type -chmod 664 "\$tmpdir"/$tbb_version_type/* "\$tmpdir"/$tbb_version_type/.htaccess -chgrp -R torwww "\$tmpdir"/$tbb_version_type -mv -v "\$tmpdir"/$tbb_version_type "$update_dir/$tbb_version_type" +cd "$update_dir" +git fetch +git checkout "$update_responses_commit" static-update-component aus1.torproject.org EOF chmod +x $deploy_script -scp -p "$update_responses_tar" "$ssh_host_staticiforme:" scp -p $deploy_script $ssh_host_staticiforme:deploy_update_responses-$tbb_version_type.sh +git push + echo 'To enable updates you can now run:' -echo " ssh $ssh_host_staticiforme ./deploy_update_responses-$tbb_version_type.sh" +echo " ssh $ssh_host_staticiforme" +echo " sudo -u tb-release ./deploy_update_responses-$tbb_version_type.sh" View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] Fix download-android-*.json files (tor-browser-build#40752)
by boklm (＠boklm) 23 Jan '23

23 Jan '23

boklm pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 2937a020 by Nicolas Vigier at 2023-01-23T15:01:56+01:00 Fix download-android-*.json files (tor-browser-build#40752) - - - - - 5 changed files: - update_3/alpha/download-android-aarch64.json - update_3/alpha/download-android-armv7.json - update_3/release/download-android-aarch64.json - update_3/release/download-android-armv7.json - update_3/release/download-android-x86_64.json Changes: ===================================== update_3/alpha/download-android-aarch64.json ===================================== @@ -1 +1 @@ -{"binary":"https://dist.torproject.org/torbrowser/12.5a1/tor-browser-12.5a1-android-aa…","git_tag":"tbb-12.5a1-build1","sig":"https://dist.torproject.org/torbrowser/12.5a1/tor-browser-12.5a1-android-aa…","version":"12.5a1"} \ No newline at end of file +{"binary":"https://dist.torproject.org/torbrowser/12.5a1/tor-browser-12.5a1-android-aa…","git_tag":"tbb-12.5a1-build1","sig":"https://dist.torproject.org/torbrowser/12.5a1/tor-browser-12.5a1-android-aa…","version":"12.5a1"} ===================================== update_3/alpha/download-android-armv7.json ===================================== @@ -1 +1 @@ -{"binary":"https://dist.torproject.org/torbrowser/12.5a1/tor-browser-12.5a1-android-ar…","git_tag":"tbb-12.5a1-build1","sig":"https://dist.torproject.org/torbrowser/12.5a1/tor-browser-12.5a1-android-ar…","version":"12.5a1"} \ No newline at end of file +{"binary":"https://dist.torproject.org/torbrowser/12.5a1/tor-browser-12.5a1-android-ar…","git_tag":"tbb-12.5a1-build1","sig":"https://dist.torproject.org/torbrowser/12.5a1/tor-browser-12.5a1-android-ar…","version":"12.5a1"} ===================================== update_3/release/download-android-aarch64.json ===================================== @@ -1 +1 @@ -{"binary":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-aa…","git_tag":"tbb-12.0.2-build1","sig":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-aa…","version":"12.0.2"} \ No newline at end of file +{"binary":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-aa…","git_tag":"tbb-12.0.2-build1","sig":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-aa…","version":"12.0.2"} ===================================== update_3/release/download-android-armv7.json ===================================== @@ -1 +1 @@ -{"binary":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-ar…","git_tag":"tbb-12.0.2-build1","sig":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-ar…","version":"12.0.2"} \ No newline at end of file +{"binary":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-ar…","git_tag":"tbb-12.0.2-build1","sig":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-ar…","version":"12.0.2"} ===================================== update_3/release/download-android-x86_64.json ===================================== @@ -1 +1 @@ -{"binary":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-x8…","git_tag":"tbb-12.0.2-build1","sig":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-x8…","version":"12.0.2"} \ No newline at end of file +{"binary":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-x8…","git_tag":"tbb-12.0.2-build1","sig":"https://dist.torproject.org/torbrowser/12.0.2/tor-browser-12.0.2-android-x8…","version":"12.0.2"} View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-12.5a2-build1
by Richard Pospesel (＠richard) 22 Jan '23

22 Jan '23

Richard Pospesel pushed new tag tbb-12.5a2-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40715: Prepare alpha release 12.5a2
by Richard Pospesel (＠richard) 22 Jan '23

22 Jan '23

Richard Pospesel pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 02523c15 by Richard Pospesel at 2023-01-22T17:23:03+00:00 Bug 40715: Prepare alpha release 12.5a2 Disable rlbox for now for build-reproducibility - - - - - 10 changed files: - projects/browser/Bundle-Data/Docs/ChangeLog.txt - projects/browser/allowed_addons.json - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/manual/config - projects/tor/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs/ChangeLog.txt ===================================== @@ -1,3 +1,88 @@ +Tor Browser 12.5a2 - January 22 2023 + * All Platforms + * Updated tor to 0.4.7.13 + * Updated NoScript to 11.4.14 + * Bug 40565: do something with security.tls.version.enable-deprecated [tor-browser] + * Bug 40727: Update list of Snowflake STUN servers in default bridge line [tor-browser-build] + * Bug 41066: Circuit Isolation should take containers into account [tor-browser] + * Bug 41428: Check if we can create our own directories for branding [tor-browser] + * Bug 41506: Remove TrustCor root certificates [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 102.7esr + * Bug 32274: Bad screen-reader UX for Security Level/Shield button [tor-browser] + * Bug 40733: Use the new branding directories [tor-browser-build] + * Bug 41393: about:tbupdate semantic and accessibility problems [tor-browser] + * Bug 41539: Crypto warning weaknesses [tor-browser] + * Bug 41549: tor freeze when receiving to many http proxy requests on socks port [tor-browser] + * Bug 41561: Maximize warning is broken (regression) [tor-browser] + * Bug 41562: API-triggered fullscreen after F11 causes letterboxing to crop the page [tor-browser] + * Bug 41563: Old placeholders used in TorStrings.jsm [tor-browser] + * Bug 41572: Check for userContextId also in the circuit display [tor-browser] + * Bug 41577: Disable profile migration [tor-browser] + * Windows + Linux + * Bug 40714: Ship NoScript in the distribution directory also for Windows and Linux [tor-browser-build] + * Windows + * Bug 40717: UX: hide SSO [tor-browser] + * Bug 41578: Disable and lock Windows SSO [tor-browser] + * macOS + * Bug 28124: Show Tor Browser icon as macOS volume (dmg) icon [tor-browser-build] + * Bug 40719: Allow non-universal macOS builds also on base-browser [tor-browser-build] + * Bug 41535: Remove the old, unused and undocumented "-invisible" macOS CLI flag [tor-browser] + * Android + * Updated GeckoView to 102.7esr + * Bug 40283: Can't upload files with Tor browser on Android [tor-browser] + * Bug 41571: Backport Android-specific Firefox 109 to ESR 102.7-based Tor Browser [tor-browser] + * Build System + * All Platforms + * Updated Go to 1.19.5 + * Bug 40720: Update fetch-changelogs.py scripts to support new Build System label [tor-browser-build] + * Bug 40735: Add command to list which translation components need to be updated [tor-browser-build] + * Bug 40739: tor-expert-bundle should include ClientTransportPlugin torrc lines for each pluggable transport [tor-browser-build] + * Bug 41567: Build outputs now going to obj-*/dist/torbrower rather than obj-*/dist/firefox [tor-browser] + * Windows + macOS + Linux + * Bug 40732: Review Bundle-Data and try not to ship the default profile in base browser [tor-browser-build] + * macOS + * Bug 40706: macos-signer-stapler should wait for user interaction before attempting stapling [tor-browser-build] + * Bug 40744: HFS DMG are not deterministic [tor-brower-build] + * Android + * Bug 40738: Update Android git hashes templates [tor-browser-build] + +Tor Browser 12.0.2 - January 16 2023 + * All Platforms + * Updated tor to 0.4.7.13 + * Updated NoScript to 11.4.14 + * Bug 40565: do something with security.tls.version.enable-deprecated [tor-browser] + * Bug 40713: Use the new tor-browser l10n branch in Firefox [tor-browser-build] + * Bug 40727: Update list of Snowflake STUN servers in default bridge line [tor-browser-build] + * Bug 41506: Remove TrustCor root certificates [tor-browser] + * Bug 41525: Drop locales from torbutton, since we will inject them in tor-browser-build [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 102.7esr + * Bug 26504: Browser version in about:preferences showing the Firefox ESR version [tor-browser] + * Bug 32308: Stop inner letterbox jiggling as border is dragged [tor-browser] + * Bug 41375: Clean unused strings [tor-browser] + * Bug 41393: about:tbupdate semantic and accessibility problems [tor-browser] + * Bug 41522: Backport torbutton -> tor-browser migration to 12.0 series [tor-browser] + * Bug 41524: about:tbupdate needs UTF-8 [tor-browser] + * Bug 41539: Crypto warning weaknesses [tor-browser] + * Bug 41549: tor freeze when receiving to many http proxy requests on socks port [tor-browser] + * Bug 41561: Maximize warning is broken (regression) [tor-browser] + * Bug 41563: Old placeholders used in TorStrings.jsm [tor-browser] + * macOS + * Bug 40716: Unable to update to 12.0.1 on Apple Silicon-based Mac [tor-browser-build] + * Android + * Updated GeckoView to 102.7esr + * Bug 41571: Backport Android-specific Firefox 109 to ESR 102.7-based Tor Browser [tor-browser] + * Build System + * All Platforms + * Updated Go to 1.19.5 + * Bug 40735: Add command to list which translation components need to be updated [tor-browser-build] + * Bug 40739: tor-expert-bundle should include ClientTransportPlugin torrc lines for each pluggable transport [tor-browser-build] + * Windows + macOS + Linux + * Bug 40734: Backport the translation project [tor-browser-build] + * macOS + * Bug 40706: macos-signer-stapler should wait for user interaction before attempting stapling [tor-browser-build] + Tor Browser 12.5a1 - December 21 2022 * All Platforms * Updated tor to 0.4.7.12 ===================================== projects/browser/allowed_addons.json ===================================== @@ -1,7 +1,7 @@ { "page_size": 25, "page_count": 1, - "count": 11, + "count": 10, "next": null, "previous": null, "results": [ @@ -17,7 +17,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/34/9734/13299734/13299734.pn…" } ], - "average_daily_users": 920784, + "average_daily_users": 941192, "categories": { "android": [ "experimental", @@ -31,7 +31,7 @@ "contributions_url": "https://opencollective.com/darkreader?utm_content=product-page-contribute&u…", "created": "2017-09-19T07:03:00Z", "current_version": { - "id": 5477554, + "id": 5509244, "compatibility": { "firefox": { "min": "54.0", @@ -42,7 +42,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/darkreader/versions/54775…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/darkreader/versions/55092…", "is_strict_compatibility_enabled": false, "license": { "id": 22, @@ -53,23 +53,22 @@ "url": "http://www.opensource.org/licenses/mit-license.php" }, "release_notes": { - "en-GB": "", - "en-US": "- Fixed broken hotkeys.\n- Improved IP v6 address support.\n- Users' fixes for websites." + "en-US": "- Fixed a edge case with extracting color numbers, it's now able to extract `rgb(0 0 0/0.04)`.\n- Improved IPv6 check.\n- Faster UI loading.\n- Users' fixes for websites." }, "reviewed": null, - "version": "4.9.60", + "version": "4.9.62", "files": [ { - "id": 4021899, - "created": "2022-10-27T07:07:27Z", - "hash": "sha256:202eccf8088bd2842158f5fe4f4b751217a05b2f0ada02057c16314c174df01b", + "id": 4053589, + "created": "2023-01-08T17:15:31Z", + "hash": "sha256:e537a2cee45ed7c26f79ecd3ed362620e3f00d24c158532a58e163a63a3d60cc", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 648411, + "size": 636487, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4021899/darkreader-4.9.60…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4053589/darkreader-4.9.62…", "permissions": [ "alarms", "contextMenus", @@ -95,7 +94,7 @@ "fr": "Cette extension de protection oculaire active le mode nuit en créant à la volée des thèmes sombres pour les sites Web. Dark Reader inverse les couleurs vives, ce qui les rend très contrastés et faciles à lire la nuit.\n\nVous pouvez régler la luminosité, le contraste, le filtre sépia, le mode sombre, les paramètres de police et la liste des sites ignorés.\n\nDark Reader n’affiche pas de publicités et n’envoie aucune donnée utilisateur. Il est entièrement open source <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/2a8020ee7fe5fea69148ed…" rel=\"nofollow\">https://github.com/darkreader/darkreader</a>\n\nAvant de l’installer, désactivez vos extensions similaires. Profitez et regardez!", "he": "תוסף טיפוח לעיניים זה מאפשר למצב לילה ליצור ערכות נושא כהות לאתרי אינטרנט גלישה. קורא כהה ממיר צבעים בהירים מה שהופך אותם לניגודיות גבוהה וקל לקריאה בלילה.\n\nניתן להתאים את הבהירות, הניגודיות, מסנן חום-אדמדם, מצב כהה, הגדרות גופן ורשימת אתרים להתעלמות.\n\nReader Dark אינו מציג מודעות ואינו שולח את נתוני המשתמש לשום מקום. זהו קוד פתוח לחלוטין <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/2a8020ee7fe5fea69148ed…" rel=\"nofollow\">https://github.com/darkreader/darkreader</a>\n\nלצורך פעולה תקינה, השבת תוספים דומים. צפייה נעימה!", "id": "Ekstensi ini mengaktifkan mode malam dengan membuat halaman situs web menjadi gelap. Dark Reader bekerja dengan membalik warna cerah dengan warna kontras sehingga nyaman di mata.\n\nAnda bisa mengatur kecerahan, kontras, filter sepia, mode malam, setelan fon dan pengecualian situs web.\n\nDark Reader tidak menampilkan iklan dan tidak mengirimkan data penggunan ke manapun. Sepenuhnya bersumber terbuka: <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/2a8020ee7fe5fea69148ed…" rel=\"nofollow\">https://github.com/darkreader/darkreader</a>\n\nSebelum memasang, silakan nonaktifkan ekstensi serupa. Selamat berselancar!", - "it": "Questa estensione si prende cura dei tuoi occhi e ti consente di creare al volo un tema scuro in modalità nottura per ogni sito. Dark Reader inverte i colori più luminosi rendendoli ad alto contrato e più semplici da leggere la notte.\n\nPuoi modificare luminosità, contrasto, filtro seppia, modalità notturna, caratteri e lista di siti da ignorare.\n\nDark Reader non mostra pubblicità e non invia i dati dell'utente da nessuna parte. È pienamente open-source <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/2a8020ee7fe5fea69148ed…" rel=\"nofollow\">https://github.com/darkreader/darkreader</a>\n\nPrima di installare disabilita altre estensioni simili. Buona lettura!", + "it": "Questa estensione si prende cura dei tuoi occhi e ti consente di creare al volo un tema scuro in modalità notturna per ogni sito. Dark Reader inverte i colori più luminosi rendendoli ad alto contrasto e più semplici da leggere la notte.\n\nPuoi modificare luminosità, contrasto, filtro seppia, modalità notturna, caratteri e lista di siti da ignorare.\n\nDark Reader non mostra pubblicità e non invia i dati dell'utente da nessuna parte. È pienamente open-source <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/2a8020ee7fe5fea69148ed…" rel=\"nofollow\">https://github.com/darkreader/darkreader</a>\n\nPrima di installare disabilita altre estensioni simili. Buona lettura!", "ja": "このアイ・ケアの拡張機能は、オンザフライでウェブサイトのためのダークテーマを作成し、ナイトモードを有効にします。 Dark Readerは鮮やかな色を反転させてコントラストを高め、夜間に読みやすくします。\n\n明るさ、コントラスト、セピアフィルター、ダークモード、フォント設定、無視リストを調整することができます。\n\nDark Readerは広告を表示せず、ユーザーのデータをどこにも送信しません。それは完全にオープンソースです <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/2a8020ee7fe5fea69148ed…" rel=\"nofollow\">https://github.com/darkreader/darkreader</a>\n\nインストールする前に、同様の拡張機能を無効にしてください。ブラウジングをお楽しみください！", "ko": "이 눈 건강을 위한 확장 기능은 실시간으로 각 웹사이트에 어두운 테마를 적용해 야간 모드를 가능케 합니다. 다크 리더는 밝은 색상을 반전해 고대비로 만들어 밤에 읽기가 쉽도록 만듭니다.\n\n밝기, 대비, 세피아 필터, 어두운 모드, 폰트와 예외 목록을 설정할 수 있습니다.\n\n다크 리더는 광고를 보여주지 않으며 사용자의 데이터를 어디에도 보내지 않습니다. 완전히 오픈 소스입니다. <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/2a8020ee7fe5fea69148ed…" rel=\"nofollow\">https://github.com/darkreader/darkreader</a>\n\n설치하기 전에 비슷한 기능을 가진 확장 기능을 사용 해제하시기 바랍니다. 편하게 읽으십시오!", "ms": "Ekstensi penjagaan mata ini mendayakan mod malam dengan mencipta tema gelap untuk laman web dengan cepat. Dark Reader menyongsangkan warna terang, menjadikannya kontras tinggi dan mudah dibaca pada waktu malam.\n\nAnda boleh melaraskan kecerahan, kontras, penapis sepia, mod gelap, tetapan fon dan senarai abaikan.\n\nDark Reader tidak memaparkan iklan dan tidak menghantar data pengguna ke mana-mana sahaja. Ia adalah sumber terbuka sepenuhnya: <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/2a8020ee7fe5fea69148ed…" rel=\"nofollow\">https://github.com/darkreader/darkreader</a>\n\nSebelum anda memasangnya, lumpuhkan sambungan yang serupa. Selamat menonton!", @@ -146,7 +145,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2022-10-27T11:39:58Z", + "last_updated": "2023-01-09T12:25:16Z", "name": { "ar": "Dark Reader", "bn": "Dark Reader", @@ -221,10 +220,10 @@ "category": "recommended" }, "ratings": { - "average": 4.5582, - "bayesian_average": 4.556981916903566, - "count": 4742, - "text_count": 1512 + "average": 4.5565, + "bayesian_average": 4.555296389469589, + "count": 4800, + "text_count": 1532 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/reviews/", "requires_payment": false, @@ -321,187 +320,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/versions/", - "weekly_downloads": 25636 - }, - "notes": null - }, - { - "addon": { - "id": 229918, - "authors": [ - { - "id": 5474073, - "name": "EFF Technologists", - "url": "https://addons.mozilla.org/en-US/firefox/user/5474073/", - "username": "eff-technologists", - "picture_url": "https://addons.mozilla.org/user-media/userpics/73/4073/5474073/5474073.png?…" - } - ], - "average_daily_users": 661005, - "categories": { - "android": [ - "security-privacy" - ], - "firefox": [ - "privacy-security" - ] - }, - "contributions_url": "https://paypal.me/SupportEFF?utm_content=product-page-contribute&utm_medium…", - "created": "2010-09-16T15:09:10Z", - "current_version": { - "id": 5265391, - "compatibility": { - "firefox": { - "min": "52.0", - "max": "*" - }, - "android": { - "min": "52.0", - "max": "*" - } - }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/https-everywhere/versions…", - "is_strict_compatibility_enabled": false, - "license": { - "id": 5278, - "is_custom": true, - "name": { - "en-US": "Multiple" - }, - "url": "https://addons.mozilla.org/en-US/firefox/addon/https-everywhere/license/" - }, - "release_notes": { - "en-US": "2021.7.13\n* Amend Incognito Key for Chrome and Firefox #20092\n* Fix unexpected arithmetic operations on strings #20043\n* Remove Top Alexa Labeller #20083\n* Update deprecated log function #20101\n* Patch Chrome Test Failure #20102" - }, - "reviewed": null, - "version": "2021.7.13", - "files": [ - { - "id": 3809748, - "created": "2021-07-13T22:01:19Z", - "hash": "sha256:e261461b5d4d3621285fce70773558184d691c614b330744dab672f032db731c", - "is_restart_required": false, - "is_webextension": true, - "is_mozilla_signed_extension": false, - "platform": "all", - "size": 1752121, - "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/3809748/https_everywhere-…", - "permissions": [ - "webNavigation", - "webRequest", - "webRequestBlocking", - "tabs", - "cookies", - "storage", - "*://*/*", - "ftp://*/*" - ], - "optional_permissions": [] - } - ] - }, - "default_locale": "en-US", - "description": { - "de": "Viele Webseiten unterstützen zwar Verschlüsslung über HTTPS, machen es aber nicht einfach, diese auch zu nutzen. Manchmal bieten diese beispielsweise standardmäßig nur unverschlüsseltes HTTP an oder haben auf verschlüsselten Seiten Links gesetzt, die Sie zurück zu einer unverschlüsselten Version führen.\n\nDie HTTPS-Everywhere Erweiterung löst dieses Problem, indem sie alle Anfragen zu diesen Seiten automatisch zu HTTPS ändert.", - "en-US": "Note: Extension will sunset January 2023. Instructions on how to turn on HTTPS by default in Firefox here: <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/a15697d75ed1f7eb05e9b0…" rel=\"nofollow\">https://eff.org/https-everywhere/set-https-default-your-browser</a>\n\nMany sites on the web offer some limited support for encryption over HTTPS, but make it difficult to use. For instance, they may default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site.\n\nThe HTTPS Everywhere extension fixes these problems by rewriting all requests to these sites to HTTPS.\n\nThe DuckDuckGo Smarter Encryption list is publicly available under the Creative Commons Attribution-NonCommercial-ShareAlike 4.0. International license. If you'd like to license the list for commercial use, please reach out to: <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/afc2012d629a8b8f6c7fd0…" rel=\"nofollow\">https://help.duckduckgo.com/duckduckgo-help-pages/company/contact-us/</a>", - "es": "Muchos sitios en la web ofrecen soporte limitado para cifrado sobre HTTPS, pero hacen difícil su uso. Por ejemplo, puede que usen HTTP no cifrado por defecto o que llenen páginas cifradas con enlaces que vuelvan al sitio no cifrado.\n\nLa extensión HTTPS Everywhere corrige estos problemas reescribiendo todas las peticiones a estos sitios a HTTPS.", - "fr": "Beaucoup de sites web offrent une prise en charge limitée pour le chiffrement via HTTPS, mais la rendent difficile à utiliser. Par exemple, ils peuvent utiliser une adresse par défaut non chiffrée avec HTTPS, ou proposer sur des pages chiffrées uniquement des liens qui retournent sur le site non chiffré.\n\nL’extension HTTPS Everywhere résout le problème en redirigeant toutes les requêtes de ces sites vers HTTPS.", - "it": "Molti siti web offrono un limitato supporto per la crittografia HTTPS, ma lo rendono difficile da usare. Ad esempio, possono avere come impostazione predefinita HTTP non crittato, o inserire in pagine crittate collegamenti che indirizzano a siti non crittati.\n\nL'estensione HTTPS Everywhere consente di correggere questi problemi riscrivendo tutte le richieste a questi siti in HTTPS.", - "nl": "Veel websites bieden enigszins beperkte ondersteuning voor versleuteling via HTTPS, maar maken het moeilijk om dit te gebruiken. Ze kunnen bijvoorbeeld standaard niet-versleutelde HTTP hanteren, of versleutelde pagina’s vullen met koppelingen die naar de niet-versleutelde website terugkeren.\n\nDe HTTPS Everywhere-extensie lost deze problemen op door alle aanvragen naar deze websites naar HTTPS te herschrijven.", - "pt-BR": "Muitos sites na web oferecem algum suporte limitado a criptografia sobre HTTPS, mas tornam difícil seu uso. Por exemplo, podem encaminhar por padrão para HTTP não criptografado, ou colocar em páginas criptografadas links que voltam à versão não criptografada do site.\n\nA extensão HTTPS Everywhere corrige esses problemas, substituindo todas as solicitações a esses sites para HTTPS.", - "zh-CN": "许多网站通过 HTTPS 提供有限的网络加密，这样有时很难起作用。比如，网站还是默认使用 HTTP，或者在加密页面使用指向非加密页面的链接。\n\nHTTPS Everywhere 扩展通过把发向这些网站的请求都改写成 HTTPS 来解决这些问题。" - }, - "developer_comments": null, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/https-everywhere/edit", - "guid": "https-everywhere(a)eff.org", - "has_eula": false, - "has_privacy_policy": true, - "homepage": { - "de": "https://www.eff.org/https-everywhere", - "en-US": "https://www.eff.org/https-everywhere", - "es": "https://www.eff.org/https-everywhere", - "fr": "https://www.eff.org/https-everywhere", - "it": "https://www.eff.org/https-everywhere", - "nl": "https://www.eff.org/https-everywhere", - "pt-BR": "https://www.eff.org/https-everywhere", - "zh-CN": "https://www.eff.org/https-everywhere" - }, - "icon_url": "data:image/png;base64,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", - "icons": { - "32": "https://addons.mozilla.org/user-media/addon_icons/229/229918-32.png?modifie…", - "64": "https://addons.mozilla.org/user-media/addon_icons/229/229918-64.png?modifie…", - "128": "https://addons.mozilla.org/user-media/addon_icons/229/229918-128.png?modifi…" - }, - "is_disabled": false, - "is_experimental": false, - "last_updated": "2021-07-14T06:03:40Z", - "name": { - "de": "HTTPS Everywhere", - "en-US": "HTTPS Everywhere", - "es": "HTTPS Everywhere", - "fr": "HTTPS Everywhere", - "it": "HTTPS Everywhere", - "nl": "HTTPS Everywhere", - "pt-BR": "HTTPS Everywhere", - "zh-CN": "HTTPS Everywhere - 加密网络" - }, - "previews": [ - { - "id": 214771, - "caption": null, - "image_size": [ - 1280, - 800 - ], - "image_url": "https://addons.mozilla.org/user-media/previews/full/214/214771.png?modified…", - "thumbnail_size": [ - 533, - 333 - ], - "thumbnail_url": "https://addons.mozilla.org/user-media/previews/thumbs/214/214771.jpg?modifi…" - } - ], - "promoted": { - "apps": [ - "firefox" - ], - "category": "spotlight" - }, - "ratings": { - "average": 4.6599, - "bayesian_average": 4.657336257654981, - "count": 2311, - "text_count": 460 - }, - "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/https-everywhere/reviews/", - "requires_payment": false, - "review_url": "https://addons.mozilla.org/en-US/reviewers/review/229918", - "slug": "https-everywhere", - "status": "public", - "summary": { - "de": "Verschlüsseln Sie das Web! HTTPS-Everywhere schützt Ihre Kommunikation indem die Verbindung zu unterstützten Seiten automatisch auf eine HTTPS-Verschlüsselung umgestellt wird, auch wenn die URL oder ein besuchter Link das https://-Präfix weg lässt.", - "en-US": "Encrypt the web! HTTPS Everywhere is a Firefox extension to protect your communications by enabling HTTPS encryption automatically on sites that are known to support it, even when you type URLs or follow links that omit the https: prefix.", - "es": "¡Cifra la web! HTTPS Everywhere es una extensión para proteger tus comunicaciones al habilitar el cifrado HTTPS automáticamente en las web que lo soportan, incluso cuando escribes URLs o sigues vínculos que omiten el prefijo \"https:\".", - "fr": "Chiffrez le Web ! L’extension Firefox HTTPS Everywhere protège vos communications en activant automatiquement le chiffrement HTTPS sur les sites le prenant en charge, même lorsque vous saisissez une URL ou cliquez sur un lien sans préfixe « https: ».", - "it": "Il Web crittato! HTTPS Everywhere è un'estensione per Firefox che protegge le comunicazioni attivando la crittografia HTTPS automaticamente su tutti i siti che la supportano, anche se si digitano URL o si seguono link che omettono il prefisso https.", - "nl": "Versleutel het web! HTTPS Everywhere is een Firefox-extensie die uw communicatie beschermt door automatisch HTTPS-versleuteling in te schakelen op websites die dit ondersteunen, zelfs bij URL’s of koppelingen die het voorvoegsel https: weglaten.", - "pt-BR": "Criptografe a web! HTTPS Everywhere é uma extensão que protege sua comunicação habilitando criptografia HTTPS automaticamente em sites que são conhecidos por suportá-la, mesmo quando você digita URLs ou segue links que omitem o prefixo https:", - "zh-CN": "加密网络！HTTPS Everywhere 是一个保护通信的 Firefox 扩展。它对支持加密的网站自动开启 HTTPS 通信加密，即使你在输入网址时没有加上 https: 前缀也一样。" - }, - "support_email": { - "en-US": "extension-devs(a)eff.org" - }, - "support_url": { - "en-US": "https://www.eff.org/https-everywhere" - }, - "tags": [ - "security" - ], - "type": "extension", - "url": "https://addons.mozilla.org/en-US/firefox/addon/https-everywhere/", - "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/https-everywhere/versions/", - "weekly_downloads": 5713 + "weekly_downloads": 26559 }, "notes": null }, @@ -517,7 +336,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/56/7656/6937656/6937656.png?…" } ], - "average_daily_users": 257005, + "average_daily_users": 260254, "categories": { "android": [ "security-privacy" @@ -732,10 +551,10 @@ "category": "recommended" }, "ratings": { - "average": 4.8208, - "bayesian_average": 4.816082492766398, - "count": 1306, - "text_count": 235 + "average": 4.8226, + "bayesian_average": 4.81792153710705, + "count": 1319, + "text_count": 238 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/reviews/", "requires_payment": false, @@ -820,7 +639,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions/", - "weekly_downloads": 4839 + "weekly_downloads": 4978 }, "notes": null }, @@ -836,7 +655,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/73/4073/5474073/5474073.png?…" } ], - "average_daily_users": 1077418, + "average_daily_users": 1084519, "categories": { "android": [ "security-privacy" @@ -1358,10 +1177,10 @@ "category": "recommended" }, "ratings": { - "average": 4.7982, - "bayesian_average": 4.7953467483624355, - "count": 2151, - "text_count": 423 + "average": 4.7952, + "bayesian_average": 4.7923692395774875, + "count": 2168, + "text_count": 427 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/reviews/", "requires_payment": false, @@ -1385,7 +1204,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/versions/", - "weekly_downloads": 18282 + "weekly_downloads": 18765 }, "notes": null }, @@ -1401,7 +1220,7 @@ "picture_url": null } ], - "average_daily_users": 6143701, + "average_daily_users": 6238648, "categories": { "android": [ "security-privacy" @@ -1413,7 +1232,7 @@ "contributions_url": "", "created": "2015-04-25T07:26:22Z", "current_version": { - "id": 5484631, + "id": 5503008, "compatibility": { "firefox": { "min": "68.0", @@ -1424,7 +1243,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/ublock-origin/versions/54…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/ublock-origin/versions/55…", "is_strict_compatibility_enabled": false, "license": { "id": 6, @@ -1435,22 +1254,22 @@ "url": "http://www.gnu.org/licenses/gpl-3.0.html" }, "release_notes": { - "en-US": "See complete release notes for <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/95f0ebe3bae2fcefe329d5…" rel=\"nofollow\">1.45.2</a>.\n\n<b>Fixes</b>\n\n<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/dda3a5335ce241b61df3e5…" rel=\"nofollow\">Test for unsupported pseudo operators after normalization</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/3d7500545eff2f1454e1b2…" rel=\"nofollow\">Mind implicit prelude <code>*</code> element in pseudo operators</a></li></ul>\n<a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/5cabc51255c376ef5d9a0e…" rel=\"nofollow\">Commits history since last version</a>." + "en-US": "See complete release notes for <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/389523b56d56000b5903f0…" rel=\"nofollow\">1.46.0</a>.\n\n<b>Fixes</b>\n<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/9c26fe22ae94cdc2f29d6c…" rel=\"nofollow\">Add <code>options</code> stub to <code>nofab</code> scriptlet </a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/30cbc3175eb0b2e15466bf…" rel=\"nofollow\">Rewrite logger's \"exceptor\" feature</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/3ed97b9e246742ad411d56…" rel=\"nofollow\">Use Blob URLs to reliably inject scriptlets</a> -- as <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/438c3567eb7d6b3ff10d90…" rel=\"nofollow\">suggested</a> by @evilpie</li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/8f40970eec0653bf03a1ca…" rel=\"nofollow\">Add :remove-attr() and :remove-class() pseudo selector operators</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/94fccb01a65453050684d2…" rel=\"nofollow\">Add pseudo-operator :matches-attr()</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/c08e49fc883ba5c9201cd8…" rel=\"nofollow\">Detect invalid usage of combinators in :not() pseudoclass</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/615d0729d168db8cb67c8b…" rel=\"nofollow\">Give more time for viewport to be ready</a> (in popup panel) -- <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/20ff6c390e21534e4a52fd…" rel=\"nofollow\">related feedback</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/fac8d7f4335f97f8e60585…" rel=\"nofollow\">Handle potentially invalid CSS selector</a> (in logger)</li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/2e3d7b79681191d69ae519…" rel=\"nofollow\">Ensure state of more/less in panel reflect locked/disabled sections</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/206078ace2c2f2cf401ad3…" rel=\"nofollow\">Isolate generic cosmetic filters from specific ones in generated stylesheet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/4f9ea5893ffda77f028cf2…" rel=\"nofollow\">Do not cname-uncloak same-origin network requests</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/cc959a4d7f9d2e70d41225…" rel=\"nofollow\">Prevent the creation of non-cosmetic extended filters in element picker</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/75f3ecbd1e6e79c9c62f22…" rel=\"nofollow\">Fix visual of DOM inspector layer in dark theme mode</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/26929d8da566773a86e49a…" rel=\"nofollow\">Improve extraction of tokens from regexes</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/53e1591ac127a6a1ee45be…" rel=\"nofollow\">Use placeholders to minimize vertical shifting at page load time</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/edead39b273cc8494559fd…" rel=\"nofollow\">Bundled filter lists in releases are not timestamped</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/86a77d0302d1cfdc9a5c31…" rel=\"nofollow\">Ensure procedural filters are applied at least once</a></li></ul>\n<a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/a57cff231cba9bed789947…" rel=\"nofollow\">Commits history since last version</a>." }, "reviewed": null, - "version": "1.45.2", + "version": "1.46.0", "files": [ { - "id": 4028976, - "created": "2022-11-11T14:15:28Z", - "hash": "sha256:fb173895c76c3b05f132caf87a716c75e3db21be861ead1b14ba6abc7e715e8b", + "id": 4047353, + "created": "2022-12-22T16:49:43Z", + "hash": "sha256:6bf8af5266353fab5eabdc7476de026e01edfb7901b0430c5e539f6791f1edc8", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 3234876, + "size": 3215576, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4028976/ublock_origin-1.4…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4047353/ublock_origin-1.4…", "permissions": [ "dns", "menus", @@ -1565,7 +1384,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2022-12-15T18:40:20Z", + "last_updated": "2023-01-07T15:25:25Z", "name": { "ar": "uBlock Origin", "bg": "uBlock Origin", @@ -1710,10 +1529,10 @@ "category": "recommended" }, "ratings": { - "average": 4.7784, - "bayesian_average": 4.777984735280378, - "count": 14716, - "text_count": 3857 + "average": 4.7791, + "bayesian_average": 4.778687487250499, + "count": 14827, + "text_count": 3878 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/reviews/", "requires_payment": false, @@ -1775,7 +1594,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions/", - "weekly_downloads": 144039 + "weekly_downloads": 150528 }, "notes": null }, @@ -1791,7 +1610,7 @@ "picture_url": null } ], - "average_daily_users": 139255, + "average_daily_users": 142502, "categories": { "android": [ "photos-media" @@ -1889,9 +1708,9 @@ }, "ratings": { "average": 4.5097, - "bayesian_average": 4.5044214841383585, - "count": 1077, - "text_count": 399 + "bayesian_average": 4.504446391084406, + "count": 1085, + "text_count": 403 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/re…", "requires_payment": false, @@ -1913,7 +1732,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/ve…", - "weekly_downloads": 309 + "weekly_downloads": 354 }, "notes": null }, @@ -1929,7 +1748,7 @@ "picture_url": null } ], - "average_daily_users": 92068, + "average_daily_users": 92136, "categories": { "android": [ "experimental", @@ -2066,7 +1885,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions/", - "weekly_downloads": 609 + "weekly_downloads": 517 }, "notes": null }, @@ -2082,7 +1901,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/64/9064/12929064/12929064.pn…" } ], - "average_daily_users": 242609, + "average_daily_users": 245015, "categories": { "android": [ "photos-media", @@ -2300,10 +2119,10 @@ "category": "recommended" }, "ratings": { - "average": 4.646, - "bayesian_average": 4.641119725504792, - "count": 1209, - "text_count": 237 + "average": 4.6498, + "bayesian_average": 4.644960886726223, + "count": 1222, + "text_count": 239 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/reviews/", "requires_payment": false, @@ -2324,7 +2143,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/versions/", - "weekly_downloads": 3474 + "weekly_downloads": 3563 }, "notes": null }, @@ -2347,7 +2166,7 @@ "picture_url": null } ], - "average_daily_users": 99861, + "average_daily_users": 103493, "categories": { "android": [ "other" @@ -2629,10 +2448,10 @@ "category": "recommended" }, "ratings": { - "average": 4.4392, - "bayesian_average": 4.434480963861528, - "count": 1184, - "text_count": 316 + "average": 4.442, + "bayesian_average": 4.437306737005405, + "count": 1190, + "text_count": 318 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/reviews/", "requires_payment": false, @@ -2652,7 +2471,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/versions/", - "weekly_downloads": 45 + "weekly_downloads": 50 }, "notes": null }, @@ -2668,7 +2487,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/43/0143/143/143.png?modified…" } ], - "average_daily_users": 328150, + "average_daily_users": 328001, "categories": { "android": [ "performance", @@ -2682,7 +2501,7 @@ "contributions_url": "https://www.paypal.com/donate/?hosted_button_id=9ERKTU5MBH4EW&utm_content=p…", "created": "2005-05-13T10:51:32Z", "current_version": { - "id": 5489293, + "id": 5506390, "compatibility": { "firefox": { "min": "59.0", @@ -2693,7 +2512,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/noscript/versions/5489293", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/noscript/versions/5506390", "is_strict_compatibility_enabled": false, "license": { "id": 13, @@ -2704,22 +2523,22 @@ "url": "http://www.gnu.org/licenses/gpl-2.0.html" }, "release_notes": { - "en-US": "v 11.4.13\n============================================================\nx Ensure theme changes are synchronized across windows,\n including private ones (thanks barbaz for reporting)\nx [UI] Ensure prompts are always centered relative to the\n parent window in multi-monitors setups\nx Switch to \"Modern Red Evil\" icon contributed by fatboy\nx Work-around for Chromium unable to load the placeholder\n icon\nx Themed placeholders\nx [nscl] Fixed placeholder fallback styles on Gecko\n embedding documents\nx [L10n] New Romanian (ro) locale (thanks Simona Iacob and\n Inpresentia I.)" + "en-US": "v 11.4.14\n============================================================\nx Updated HTML event attributes list\nx Uniformed indexed directory Firefox UI emulation to\n prevent a script blocking bypass on file:// resources\n (thanks RyotaK for reporting)\nx Fixed error being logged in the console on scriptless\n pages when hitting [Delete] or [Backspace] (thanks barbaz\n for reporting)\nx Work-around for background page misteriously being\n unloaded sometimes by Firefox\nx [L10n] Updated Transifex configuration" }, "reviewed": null, - "version": "11.4.13", + "version": "11.4.14", "files": [ { - "id": 4033638, - "created": "2022-11-21T22:34:56Z", - "hash": "sha256:078026ae894fe516ce9e61a1084d1b6dc883cd72c51027de342132141ca7f00d", + "id": 4050735, + "created": "2023-01-01T22:33:07Z", + "hash": "sha256:14af6a3cbc269c045f2d950e1e4f7c29981b35a7abc61d2413f5bb8bd7311857", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 948790, + "size": 948881, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4033638/noscript-11.4.13.…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4050735/noscript-11.4.14.…", "permissions": [ "contextMenus", "storage", @@ -2730,8 +2549,8 @@ "webRequestBlocking", "dns", "<all_urls>", - "ftp://*/*", - "file://*/*" + "file://*/*", + "ftp://*/*" ], "optional_permissions": [] } @@ -2785,7 +2604,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2022-12-04T09:05:24Z", + "last_updated": "2023-01-03T12:32:35Z", "name": { "de": "NoScript", "el": "NoScript", @@ -2857,10 +2676,10 @@ "category": "recommended" }, "ratings": { - "average": 4.4106, - "bayesian_average": 4.4078510292178406, - "count": 2019, - "text_count": 790 + "average": 4.412, + "bayesian_average": 4.40926402856513, + "count": 2029, + "text_count": 793 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/reviews/", "requires_payment": false, @@ -2904,7 +2723,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/", - "weekly_downloads": 7328 + "weekly_downloads": 8435 }, "notes": null }, @@ -2920,7 +2739,7 @@ "picture_url": null } ], - "average_daily_users": 140692, + "average_daily_users": 142622, "categories": { "android": [ "performance", @@ -3034,10 +2853,10 @@ "category": "recommended" }, "ratings": { - "average": 3.916, - "bayesian_average": 3.911620482957336, - "count": 1095, - "text_count": 393 + "average": 3.9222, + "bayesian_average": 3.917847057751054, + "count": 1105, + "text_count": 395 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/revi…", "requires_payment": false, @@ -3056,7 +2875,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/vers…", - "weekly_downloads": 1318 + "weekly_downloads": 1769 }, "notes": null } ===================================== projects/browser/config ===================================== @@ -100,9 +100,9 @@ input_files: enable: '[% ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4033638/noscript-11.4.13.… + - URL: https://addons.mozilla.org/firefox/downloads/file/4050735/noscript-11.4.14.… name: noscript - sha256sum: 078026ae894fe516ce9e61a1084d1b6dc883cd72c51027de342132141ca7f00d + sha256sum: 14af6a3cbc269c045f2d950e1e4f7c29981b35a7abc61d2413f5bb8bd7311857 - filename: 'gtk3-settings.ini' enable: '[% c("var/linux") %]' - project: hfsplus-tools ===================================== projects/firefox/config ===================================== @@ -11,7 +11,7 @@ container: use_container: 1 var: - firefox_platform_version: 102.6.0 + firefox_platform_version: 102.7.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_branch: '12.5-1' browser_build: 1 ===================================== projects/geckoview/config ===================================== @@ -11,7 +11,7 @@ container: use_container: 1 var: - geckoview_version: 102.6.0esr + geckoview_version: 102.7.0esr browser_branch: 12.5-1 browser_build: 1 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' ===================================== projects/go/config ===================================== @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 1.19.4 +version: 1.19.5 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 @@ -121,7 +121,7 @@ input_files: enable: '[% ! c("var/linux") %]' - URL: 'https://golang.org/dl/go[% c("version") %].src.tar.gz' name: go - sha256sum: eda74db4ac494800a3e66ee784e495bfbb9b8e535df924a8b01b1a8028b7f368 + sha256sum: 8e486e8e85a281fc5ce3f0bedc5b9d2dbf6276d7db0b25d3ec034f313da0375f - URL: 'https://golang.org/dl/go[% c("var/go14_version") %].src.tar.gz' name: go14 sha256sum: 9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959 ===================================== projects/manual/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 # To update, see doc/how-to-update-the-manual.txt # Remember to update also the package's hash, with the version! -version: 60224 +version: 62420 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 @@ -17,8 +17,8 @@ var: input_files: - project: container-image - - URL: 'https://people.torproject.org/~pierov/tbb_files/manual_[% c("version") %].zip' + - URL: 'https://people.torproject.org/~richard/tbb_files/manual_[% c("version") %].zip' name: manual - sha256sum: a76908f228d006b49f18ff731d4bd9ff220183535b2c1ccc9bb92c78709e1966 + sha256sum: ea4cb60f27d4a0c9690c8b885c4f1f4d872b50e71060142f688bac9c5a37793a - filename: packagemanual.py name: package_script ===================================== projects/tor/config ===================================== @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' -version: 0.4.7.12 +version: 0.4.7.13 git_hash: 'tor-[% c("version") %]' git_url: https://gitlab.torproject.org/tpo/core/tor.git git_submodule: 1 ===================================== projects/translation/config ===================================== @@ -6,19 +6,19 @@ version: '[% c("abbrev") %]' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: f3c816f0fde87471f98e46515482a493c4eb57dc + git_hash: d1aa584f3da4c2fc6bfe5d289e2783705ee7e015 targets: nightly: git_hash: 'base-browser' base-browser-fluent: base-browser-fluent: '[% INCLUDE build %]' - git_hash: d771fd689978f52053e8a14bb622c936aa938769 + git_hash: ddc3ff5d0d1c9849f1b1d3a630c0dc6095a15959 targets: nightly: git_hash: 'basebrowser-newidentityftl' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 6a1d58f5d3c749a55d18e7dc6d902d9b622e8d5d + git_hash: e7e6f5de5d83120785500908f8f1a3b6b8303475 targets: nightly: git_hash: 'tor-browser' @@ -26,7 +26,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 3abd32f7db3779af063d937f8a5d87b88504b006 + git_hash: 997fd61e426305c0d45e519ed219125712ba9075 targets: nightly: git_hash: 'fenix-torbrowserstringsxml' ===================================== rbm.conf ===================================== @@ -71,10 +71,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '12.5a1' + torbrowser_version: '12.5a2' torbrowser_build: 'build1' torbrowser_incremental_from: - - 12.0a5 + - 12.5a1 build_mar: 1 # By default, we sort the list of installed packages. This allows sharing # containers with identical list of packages, even if they are not listed @@ -168,7 +168,7 @@ var: - zh-rCN - zh-rTW - rlbox: 1 + rlbox: 0 sign_build: '[% ENV.RBM_SIGN_BUILD %]' sign_build_gpg_opts: '[% ENV.RBM_GPG_OPTS %]' View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.7.0esr-12.5-1] 5 commits: dropme! Bug 13379: Sign our MAR files.
by Pier Angelo Vendrame (＠pierov) 20 Jan '23

20 Jan '23

Pier Angelo Vendrame pushed to branch tor-browser-102.7.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: a85b5b96 by Pier Angelo Vendrame at 2023-01-20T16:44:33+01:00 dropme! Bug 13379: Sign our MAR files. Part of 41584. This commit makes sure we're not messing stuff when rebasing. - - - - - 541d508c by Pier Angelo Vendrame at 2023-01-20T16:44:40+01:00 Revert "TB3: Tor Browser's official .mozconfigs." Part of 41584. This reverts commit b721a1e22730fd407aa10e5b3d519345856b18f5. - - - - - d967a1fd by Pier Angelo Vendrame at 2023-01-20T16:44:46+01:00 squash! Base Browser's .mozconfigs. Bug 17858: Cannot create incremental MARs for hardened builds. Define HOST_CFLAGS, etc. to avoid compiling programs such as mbsdiff (which is part of mar-tools and is not distributed to end-users) with ASan. Bug 21849: Don't allow SSL key logging. Bug 25741 - TBA: Disable features at compile-time Define MOZ_ANDROID_NETWORK_STATE and MOZ_ANDROID_LOCATION Bug 27623 - Export MOZILLA_OFFICIAL during desktop builds This fixes a problem where some preferences had the wrong default value. Also see bug 27472 where we made a similar fix for Android. Bug 29859: Disable HLS support for now Bug 30463: Explicitly disable MOZ_TELEMETRY_REPORTING Bug 32493: Disable MOZ_SERVICES_HEALTHREPORT Bug 33734: Set MOZ_NORMANDY to False Bug 33851: Omit Parental Controls. Bug 40252: Add --enable-rust-simd to our tor-browser mozconfig files Bug 41584: Move some configuration options to base-browser level - - - - - ec2caef7 by Mike Perry at 2023-01-20T16:44:46+01:00 TB3: Tor Browser's official .mozconfigs. Also: Add an --enable-tor-browser-data-outside-app-dir configure option Add --with-tor-browser-version configure option Bug 31457: disable per-installation profiles The dedicated profiles (per-installation) feature does not interact well with our bundled profiles on Linux and Windows, and it also causes multiple profiles to be created on macOS under TorBrowser-Data. Bug 31935: Disable profile downgrade protection. Since Tor Browser does not support more than one profile, disable the prompt and associated code that offers to create one when a version downgrade situation is detected. Add --enable-tor-browser-update build option Bug 40793: moved Tor configuration options from old-configure.in to moz.configure Bug 41584: Move some configuration options to base-browser level - - - - - 03866122 by Pier Angelo Vendrame at 2023-01-20T17:29:13+01:00 fixup! Bug 13379: Sign our MAR files. Part of 41584. This reverts commit 541d508cf5ff118d6438ee9f264a4e1f93cb7a6b - - - - - 6 changed files: - browser/moz.configure - mobile/android/torbrowser.configure → mobile/android/basebrowser.configure - mobile/android/confvars.sh - mobile/android/moz.configure - security/moz.build - security/nss/lib/ssl/Makefile Changes: ===================================== browser/moz.configure ===================================== @@ -5,10 +5,12 @@ # file, You can obtain one at http://mozilla.org/MPL/2.0/. imply_option("MOZ_PLACES", True) +# tor-browser#32493 imply_option("MOZ_SERVICES_HEALTHREPORT", False) imply_option("MOZ_SERVICES_SYNC", True) imply_option("MOZ_DEDICATED_PROFILES", False) imply_option("MOZ_BLOCK_PROFILE_DOWNGRADE", False) +# tor-browser#33734 imply_option("MOZ_NORMANDY", False) with only_when(target_is_linux & compile_environment): ===================================== mobile/android/torbrowser.configure → mobile/android/basebrowser.configure ===================================== @@ -4,7 +4,8 @@ # License, v. 2.0. If a copy of the MPL was not distributed with this # file, You can obtain one at http://mozilla.org/MPL/2.0/. -# Set Tor Browser default config +# Set Base Browser default config +# See tor-browser#25741 and tor-browser#41584. imply_option("MOZ_ANDROID_EXCLUDE_FONTS", False) @@ -14,7 +15,7 @@ imply_option("MOZ_ANDROID_EXCLUDE_FONTS", False) # imply_option("MOZ_CRASHREPORTER", False) # Disable uploading information about the browser configuration and -# performance to an external server +# performance to an external server. See tor-browser#32493. imply_option("MOZ_SERVICES_HEALTHREPORT", False) # Disable creating telemetry and data reports that are uploaded to an @@ -26,5 +27,7 @@ imply_option("MOZ_SERVICES_HEALTHREPORT", False) # imply_option("MOZ_TELEMETRY_REPORTING", False) # imply_option("MOZ_DATA_REPORTING", False) +# tor-browser#24796: This controls some permissions in GeckoView's +# AndroidManifest.xml imply_option("MOZ_ANDROID_NETWORK_STATE", False) imply_option("MOZ_ANDROID_LOCATION", False) ===================================== mobile/android/confvars.sh ===================================== @@ -16,8 +16,6 @@ MOZ_RAW=1 MOZ_APP_ID={aa3c5121-dab2-40e2-81ca-7ea25febc110} -### Tor Browser for Android ### - # Disable telemetry at compile-time unset MOZ_TELEMETRY_REPORTING ===================================== mobile/android/moz.configure ===================================== @@ -10,6 +10,7 @@ project_flag( default=True, ) +# tor-browser#29859 project_flag( "MOZ_ANDROID_HLS_SUPPORT", help="Enable HLS (HTTP Live Streaming) support (currently using the ExoPlayer library)", @@ -58,7 +59,7 @@ option( set_config("MOZ_ANDROID_GECKOVIEW_LITE", True, when="--enable-geckoview-lite") imply_option("MOZ_NORMANDY", False) -# Comment this so we can imply |False| in torbrowser.configure +# Comment this so we can imply |False| in basebrowser.configure # The Build system doesn't allow multiple imply_option() # calls with the same key. # imply_option("MOZ_SERVICES_HEALTHREPORT", True) @@ -80,7 +81,7 @@ def check_target(target): ) -include("torbrowser.configure") +include("basebrowser.configure") include("../../toolkit/moz.configure") include("../../build/moz.configure/android-sdk.configure") ===================================== security/moz.build ===================================== @@ -85,6 +85,7 @@ gyp_vars["nss_dist_obj_dir"] = "$PRODUCT_DIR/dist/bin" gyp_vars["disable_tests"] = 1 gyp_vars["disable_dbm"] = 1 gyp_vars["disable_libpkix"] = 1 +# tor-browser#18885, tor-browser#21849 gyp_vars["enable_sslkeylogfile"] = 0 # pkg-config won't reliably find zlib on our builders, so just force it. # System zlib is only used for modutil and signtool unless ===================================== security/nss/lib/ssl/Makefile ===================================== @@ -41,6 +41,7 @@ endif # Enable key logging by default in debug builds, but not opt builds. # Logging still needs to be enabled at runtime through env vars. +# tor-browser#18885, tor-browser#21849 NSS_ALLOW_SSLKEYLOGFILE ?= 0 ifeq (1,$(NSS_ALLOW_SSLKEYLOGFILE)) DEFINES += -DNSS_ALLOW_SSLKEYLOGFILE=1 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/6ebcf4… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/6ebcf4… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-102.7.0esr-12.5-1] squash! Base Browser's .mozconfigs.
by Pier Angelo Vendrame (＠pierov) 20 Jan '23

20 Jan '23

Pier Angelo Vendrame pushed to branch base-browser-102.7.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 5ad37bff by Pier Angelo Vendrame at 2023-01-20T16:41:46+01:00 squash! Base Browser's .mozconfigs. Bug 17858: Cannot create incremental MARs for hardened builds. Define HOST_CFLAGS, etc. to avoid compiling programs such as mbsdiff (which is part of mar-tools and is not distributed to end-users) with ASan. Bug 21849: Don't allow SSL key logging. Bug 25741 - TBA: Disable features at compile-time Define MOZ_ANDROID_NETWORK_STATE and MOZ_ANDROID_LOCATION Bug 27623 - Export MOZILLA_OFFICIAL during desktop builds This fixes a problem where some preferences had the wrong default value. Also see bug 27472 where we made a similar fix for Android. Bug 29859: Disable HLS support for now Bug 30463: Explicitly disable MOZ_TELEMETRY_REPORTING Bug 32493: Disable MOZ_SERVICES_HEALTHREPORT Bug 33734: Set MOZ_NORMANDY to False Bug 33851: Omit Parental Controls. Bug 40252: Add --enable-rust-simd to our tor-browser mozconfig files Bug 41584: Move some configuration options to base-browser level - - - - - 6 changed files: - browser/moz.configure - + mobile/android/basebrowser.configure - mobile/android/confvars.sh - mobile/android/moz.configure - security/moz.build - security/nss/lib/ssl/Makefile Changes: ===================================== browser/moz.configure ===================================== @@ -5,11 +5,13 @@ # file, You can obtain one at http://mozilla.org/MPL/2.0/. imply_option("MOZ_PLACES", True) -imply_option("MOZ_SERVICES_HEALTHREPORT", True) +# tor-browser#32493 +imply_option("MOZ_SERVICES_HEALTHREPORT", False) imply_option("MOZ_SERVICES_SYNC", True) imply_option("MOZ_DEDICATED_PROFILES", True) imply_option("MOZ_BLOCK_PROFILE_DOWNGRADE", True) -imply_option("MOZ_NORMANDY", True) +# tor-browser#33734 +imply_option("MOZ_NORMANDY", False) with only_when(target_is_linux & compile_environment): option(env="MOZ_NO_PIE_COMPAT", help="Enable non-PIE wrapper") ===================================== mobile/android/basebrowser.configure ===================================== @@ -0,0 +1,33 @@ +# -*- Mode: python; indent-tabs-mode: nil; tab-width: 40 -*- +# vim: set filetype=python: +# This Source Code Form is subject to the terms of the Mozilla Public +# License, v. 2.0. If a copy of the MPL was not distributed with this +# file, You can obtain one at http://mozilla.org/MPL/2.0/. + +# Set Base Browser default config +# See tor-browser#25741 and tor-browser#41584. + +imply_option("MOZ_ANDROID_EXCLUDE_FONTS", False) + +# Disable uploading crash reports and dump files to an external server +# This is still configured in old-configure. Uncomment when this moves +# to the python config +# imply_option("MOZ_CRASHREPORTER", False) + +# Disable uploading information about the browser configuration and +# performance to an external server. See tor-browser#32493. +imply_option("MOZ_SERVICES_HEALTHREPORT", False) + +# Disable creating telemetry and data reports that are uploaded to an +# external server +# These aren't actually configure options. These are disabled in +# confvars.sh, but they look like configure options so we'll document +# them here, as well. +# XXX: no confvars.sh here +# imply_option("MOZ_TELEMETRY_REPORTING", False) +# imply_option("MOZ_DATA_REPORTING", False) + +# tor-browser#24796: This controls some permissions in GeckoView's +# AndroidManifest.xml +imply_option("MOZ_ANDROID_NETWORK_STATE", False) +imply_option("MOZ_ANDROID_LOCATION", False) ===================================== mobile/android/confvars.sh ===================================== @@ -15,3 +15,9 @@ MOZ_OFFICIAL_BRANDING_DIRECTORY=mobile/android/branding/official MOZ_RAW=1 MOZ_APP_ID={aa3c5121-dab2-40e2-81ca-7ea25febc110} + +# Disable telemetry at compile-time +unset MOZ_TELEMETRY_REPORTING + +# Disable data reporting at compile-time +unset MOZ_DATA_REPORTING ===================================== mobile/android/moz.configure ===================================== @@ -10,10 +10,11 @@ project_flag( default=True, ) +# tor-browser#29859 project_flag( "MOZ_ANDROID_HLS_SUPPORT", help="Enable HLS (HTTP Live Streaming) support (currently using the ExoPlayer library)", - default=True, + default=False, ) option( @@ -58,7 +59,10 @@ option( set_config("MOZ_ANDROID_GECKOVIEW_LITE", True, when="--enable-geckoview-lite") imply_option("MOZ_NORMANDY", False) -imply_option("MOZ_SERVICES_HEALTHREPORT", True) +# Comment this so we can imply |False| in basebrowser.configure +# The Build system doesn't allow multiple imply_option() +# calls with the same key. +# imply_option("MOZ_SERVICES_HEALTHREPORT", True) imply_option("MOZ_ANDROID_HISTORY", True) imply_option("--enable-small-chunk-size", True) @@ -77,6 +81,8 @@ def check_target(target): ) +include("basebrowser.configure") + include("../../toolkit/moz.configure") include("../../build/moz.configure/android-sdk.configure") include("../../build/moz.configure/java.configure") ===================================== security/moz.build ===================================== @@ -85,7 +85,8 @@ gyp_vars["nss_dist_obj_dir"] = "$PRODUCT_DIR/dist/bin" gyp_vars["disable_tests"] = 1 gyp_vars["disable_dbm"] = 1 gyp_vars["disable_libpkix"] = 1 -gyp_vars["enable_sslkeylogfile"] = 1 +# tor-browser#18885, tor-browser#21849 +gyp_vars["enable_sslkeylogfile"] = 0 # pkg-config won't reliably find zlib on our builders, so just force it. # System zlib is only used for modutil and signtool unless # SSL zlib is enabled, which we are disabling immediately below this. ===================================== security/nss/lib/ssl/Makefile ===================================== @@ -41,7 +41,8 @@ endif # Enable key logging by default in debug builds, but not opt builds. # Logging still needs to be enabled at runtime through env vars. -NSS_ALLOW_SSLKEYLOGFILE ?= $(if $(BUILD_OPT),0,1) +# tor-browser#18885, tor-browser#21849 +NSS_ALLOW_SSLKEYLOGFILE ?= 0 ifeq (1,$(NSS_ALLOW_SSLKEYLOGFILE)) DEFINES += -DNSS_ALLOW_SSLKEYLOGFILE=1 endif View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/5ad37bf… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/5ad37bf… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-android-service][main] Bug 41361: Add conjure support
by boklm (＠boklm) 20 Jan '23

20 Jan '23

boklm pushed to branch main at The Tor Project / Applications / tor-android-service Commits: 27924bc7 by Cecylia Bocovich at 2022-12-05T11:45:24-05:00 Bug 41361: Add conjure support - - - - - 1 changed file: - service/src/main/java/org/torproject/android/service/TorService.java Changes: ===================================== service/src/main/java/org/torproject/android/service/TorService.java ===================================== @@ -377,8 +377,10 @@ public final class TorService extends Service implements TorServiceConstants, Or if(!pluggableTransportObfs.canExecute()) pluggableTransportObfs.setExecutable(true); File pluggableTransportSnow = new File(nativeDir, "libSnowflake.so"); if(!pluggableTransportSnow.canExecute()) pluggableTransportSnow.setExecutable(true); + File pluggableTransportConjure = new File(nativeDir, "libConjure.so"); + if(!pluggableTransportConjure.canExecute()) pluggableTransportConjure.setExecutable(true); - builder.configurePluggableTransportsFromSettings(pluggableTransportObfs, pluggableTransportSnow); + builder.configurePluggableTransportsFromSettings(pluggableTransportObfs, pluggableTransportSnow, pluggableTransportConjure); mDataService.updateConfigBuilder(builder); onionProxyManager.getTorInstaller().updateTorConfigCustom (builder.asString()); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-android-service/-/commit… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-android-service/-/commit… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-102.7.0esr-12.0-1] fixup! Firefox preference overrides.
by Richard Pospesel (＠richard) 19 Jan '23

19 Jan '23

Richard Pospesel pushed to branch base-browser-102.7.0esr-12.0-1 at The Tor Project / Applications / Tor Browser Commits: caf2d28a by Dan Ballard at 2023-01-19T22:21:41+00:00 fixup! Firefox preference overrides. privacy-browser#17: disable do not track (cherry picked from commit f5d35ce628bac6b978420536321836294d9e3cf1) (cherry picked from commit 3d923dc21e52ca31705e26898330a5d5f659d999) - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -148,6 +148,7 @@ pref("browser.newtabpage.enabled", false); pref("browser.search.region", "US"); // The next two prefs disable GeoIP search lookups (#16254) pref("browser.search.geoip.url", ""); pref("browser.fixup.alternate.enabled", false); // Bug #16783: Prevent .onion fixups +pref("privacy.donottrackheader.enabled", false); // (privacy-browser#17) // Make sure there is no Tracking Protection active in Tor Browser, see: #17898. pref("privacy.trackingprotection.enabled", false); pref("privacy.trackingprotection.pbmode.enabled", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/caf2d28… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/caf2d28… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.7.0esr-12.0-1] fixup! Firefox preference overrides.
by Richard Pospesel (＠richard) 19 Jan '23

19 Jan '23

Richard Pospesel pushed to branch tor-browser-102.7.0esr-12.0-1 at The Tor Project / Applications / Tor Browser Commits: 3d923dc2 by Dan Ballard at 2023-01-19T22:21:07+00:00 fixup! Firefox preference overrides. privacy-browser#17: disable do not track (cherry picked from commit f5d35ce628bac6b978420536321836294d9e3cf1) - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -148,6 +148,7 @@ pref("browser.newtabpage.enabled", false); pref("browser.search.region", "US"); // The next two prefs disable GeoIP search lookups (#16254) pref("browser.search.geoip.url", ""); pref("browser.fixup.alternate.enabled", false); // Bug #16783: Prevent .onion fixups +pref("privacy.donottrackheader.enabled", false); // (privacy-browser#17) // Make sure there is no Tracking Protection active in Tor Browser, see: #17898. pref("privacy.trackingprotection.enabled", false); pref("privacy.trackingprotection.pbmode.enabled", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3d923dc… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3d923dc… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-102.7.0esr-12.5-1] Bug 41568: Disable LaterRun
by Pier Angelo Vendrame (＠pierov) 19 Jan '23

19 Jan '23

Pier Angelo Vendrame pushed to branch base-browser-102.7.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 35fa3a0c by cypherpunks1 at 2023-01-19T16:20:10+01:00 Bug 41568: Disable LaterRun - - - - - 1 changed file: - browser/components/BrowserContentHandler.jsm Changes: ===================================== browser/components/BrowserContentHandler.jsm ===================================== @@ -662,8 +662,8 @@ nsBrowserContentHandler.prototype = { additionalPage = Services.urlFormatter.formatURLPref( "startup.homepage_welcome_url.additional" ); - // Turn on 'later run' pages for new profiles. - LaterRun.enabled = true; + // Disable 'later run' pages for new profiles (tor-browser#41568) + LaterRun.enabled = false; break; case OVERRIDE_NEW_MSTONE: // Check whether we will restore a session. If we will, we assume View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/35fa3a0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/35fa3a0… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.7.0esr-12.5-1] Bug 41568: Disable LaterRun
by Pier Angelo Vendrame (＠pierov) 19 Jan '23

19 Jan '23

Pier Angelo Vendrame pushed to branch tor-browser-102.7.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 6ebcf4f4 by cypherpunks1 at 2023-01-19T15:17:57+00:00 Bug 41568: Disable LaterRun - - - - - 1 changed file: - browser/components/BrowserContentHandler.jsm Changes: ===================================== browser/components/BrowserContentHandler.jsm ===================================== @@ -703,8 +703,8 @@ nsBrowserContentHandler.prototype = { additionalPage = Services.urlFormatter.formatURLPref( "startup.homepage_welcome_url.additional" ); - // Turn on 'later run' pages for new profiles. - LaterRun.enabled = true; + // Disable 'later run' pages for new profiles (tor-browser#41568) + LaterRun.enabled = false; break; case OVERRIDE_NEW_MSTONE: // Check whether we will restore a session. If we will, we assume View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6ebcf4f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6ebcf4f… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40353: Re-enable rlbox
by Pier Angelo Vendrame (＠pierov) 19 Jan '23

19 Jan '23

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: d940f9db by Pier Angelo Vendrame at 2023-01-19T15:18:08+01:00 Bug 40353: Re-enable rlbox Updated the creation of the WASI sysroot, to be more similar to what Mozilla does in shell scripts included in Firefox source code. This includes the same hacks, like re-using the LLVM we already build. We were still using lucetc, which is not needed anymore. Therefore, this commit removes it. - - - - - 17 changed files: - Makefile - projects/clang/build - projects/firefox/build - projects/firefox/config - projects/firefox/list_toolchain_updates_checks - projects/geckoview/build - projects/geckoview/config - − projects/lucetc/Remove-march-native-from-COMMON_CFLAGS.patch - − projects/lucetc/build - − projects/lucetc/config - + projects/wasi-config/build - + projects/wasi-config/config - + projects/wasi-libc/build - + projects/wasi-libc/config - projects/wasi-sysroot/build - projects/wasi-sysroot/config - rbm.conf Changes: ===================================== Makefile ===================================== @@ -274,9 +274,6 @@ cargo_vendor-cbindgen-android: submodule-update cargo_vendor-cbindgen: submodule-update $(rbm) build cbindgen --step cargo_vendor --target nightly --target torbrowser-linux-x86_64 -cargo_vendor-lucetc: submodule-update - $(rbm) build lucetc --step cargo_vendor --target nightly --target torbrowser-linux-x86_64 - cargo_vendor-uniffi-rs: submodule-update $(rbm) build uniffi-rs --step cargo_vendor --target nightly --target torbrowser-linux-x86_64 ===================================== projects/clang/build ===================================== @@ -24,7 +24,7 @@ cd build cmake ../llvm -GNinja \ -DCMAKE_INSTALL_PREFIX=$distdir \ -DCMAKE_BUILD_TYPE=Release \ - -DLLVM_TARGETS_TO_BUILD="X86;ARM;AArch64[% IF c("var/rlbox") -%];WebAssembly[% END %]" \ + -DLLVM_TARGETS_TO_BUILD="X86;ARM;AArch64;WebAssembly" \ -DLLVM_ENABLE_PROJECTS="clang;lld" \ -DLLVM_ENABLE_ZLIB=ON \ -DLLVM_INSTALL_UTILS=ON \ ===================================== projects/firefox/build ===================================== @@ -49,10 +49,7 @@ export PATH="/var/tmp/dist/rust/bin:/var/tmp/dist/cbindgen:/var/tmp/dist/nasm/bi rtdir=/var/tmp/dist/clang/lib/clang/[% pc("clang", "version") %]/lib/wasi [% END -%] mkdir -p $rtdir - cp /var/tmp/dist/wasi-sysroot/lib/clang/11.0.0/lib/wasi/libclang_rt.builtins-wasm32.a $rtdir - tar -C /var/tmp/dist -xf [% c('input_files_by_name/lucetc') %] - export PATH="/var/tmp/dist/lucetc/bin:$PATH" - export WASM_SANDBOXED_LIBRARIES=graphite,ogg + cp /var/tmp/dist/wasi-sysroot/lib/clang/*/lib/wasi/libclang_rt.builtins-wasm32.a $rtdir export WASI_SYSROOT=/var/tmp/dist/wasi-sysroot/share/wasi-sysroot [% END -%] ===================================== projects/firefox/config ===================================== @@ -158,9 +158,6 @@ input_files: - project: wasi-sysroot name: wasi-sysroot enable: '[% c("var/rlbox") %]' - - project: lucetc - name: lucetc - enable: '[% c("var/rlbox") %]' - project: node name: node - project: nasm ===================================== projects/firefox/list_toolchain_updates_checks ===================================== @@ -213,15 +213,5 @@ needed=$(perl -MYAML::XS -e "$p") current='[% pc("wasi-sysroot", "git_hash") %]' check_update_needed wasi-sdk "$needed" "$current" - -# lucetc -read -d '' p << 'EOF' || true -my $d = YAML::XS::LoadFile('taskcluster/ci/fetch/toolchains.yml'); -print $d->{'lucetc-source'}{fetch}{revision}; -EOF -needed=$(perl -MYAML::XS -e "$p") -current='[% pc("lucetc", "git_hash") %]' -check_update_needed lucetc "$needed" "$current" - # End RLBox [% END -%] ===================================== projects/geckoview/build ===================================== @@ -26,6 +26,18 @@ cp -r /var/tmp/dist/compiler-rt/* /var/tmp/dist/clang/ tar -C /var/tmp/dist -xf [% c('input_files_by_name/binutils') %] export PATH="/var/tmp/dist/rust/bin:/var/tmp/dist/cbindgen:/var/tmp/dist/nasm/bin:/var/tmp/dist/node/bin:/var/tmp/dist/clang/bin:/var/tmp/dist/binutils/bin:$PATH" +[% IF c("var/rlbox") -%] + tar -C /var/tmp/dist -xf [% c('input_files_by_name/wasi-sysroot') %] + # XXX: We need the libclang_rt.builtins-wasm32.a in our clang lib directory. + # Copy it over. + # https://searchfox.org/mozilla-central/source/build/build-clang/build-clang.…, + # include it directly in our clang + rtdir=/var/tmp/dist/clang/lib/clang/[% pc("clang", "version") %]/lib/wasi + mkdir -p $rtdir + cp /var/tmp/dist/wasi-sysroot/lib/clang/*/lib/wasi/libclang_rt.builtins-wasm32.a $rtdir + export WASI_SYSROOT=/var/tmp/dist/wasi-sysroot/share/wasi-sysroot +[% END -%] + tar -C /var/tmp/build -xf [% project %]-[% c('version') %].tar.gz cd /var/tmp/build/[% project %]-[% c("version") %] ===================================== projects/geckoview/config ===================================== @@ -173,6 +173,9 @@ input_files: name: clang - project: 'compiler-rt' name: 'compiler-rt' + - project: wasi-sysroot + name: wasi-sysroot + enable: '[% c("var/rlbox") %]' - filename: 'gradle-dependencies-[% c("var/gradle_dependencies_version") %]' name: gradle-dependencies exec: '[% INCLUDE "fetch-gradle-dependencies" %]' ===================================== projects/lucetc/Remove-march-native-from-COMMON_CFLAGS.patch deleted ===================================== @@ -1,24 +0,0 @@ -From ce82762aef3f8cdbdd340f39f95d2491f69a7da0 Mon Sep 17 00:00:00 2001 -From: Nicolas Vigier <boklm(a)torproject.org> -Date: Mon, 29 Mar 2021 13:42:48 +0200 -Subject: [PATCH] Remove -march=native from COMMON_CFLAGS - -The -march=native flag is causing an error on some hardware. It can also -make the build non-reproducible when not building on the same hardware. ---- - lucet-builtins/Makefile | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/lucet-builtins/Makefile b/lucet-builtins/Makefile -index 6ddbcfd..de7e540 100644 ---- a/lucet-builtins/Makefile -+++ b/lucet-builtins/Makefile -@@ -7,7 +7,7 @@ LIBBUILTINS_OBJS:=$(addprefix build/, \ - strcmp.o \ - strlen.o ) - --COMMON_CFLAGS:= --std=gnu99 -Ofast -Wall -Werror -march=native -fPIC \ -+COMMON_CFLAGS:= --std=gnu99 -Ofast -Wall -Werror -fPIC \ - -I../lucet-runtime/include - - default: build/libbuiltins.so ===================================== projects/lucetc/build deleted ===================================== @@ -1,57 +0,0 @@ -#!/bin/bash -[% c("var/set_default_env") -%] -# XXX: Do we need the GCC part here if we set CC to clang anyway? -[% IF c("var/linux") %] - [% pc('gcc', 'var/setup', { compiler_tarfile => c('input_files_by_name/gcc'), - hardened_gcc => 0 }) %] - tar -C /var/tmp/dist -xf $rootdir/[% c('input_files_by_name/binutils') %] - export PATH="/var/tmp/dist/binutils/bin:$PATH" -[% END -%] -distdir=/var/tmp/dist -builddir=/var/tmp/build/[% project %] - -mkdir -p $distdir -tar -C /var/tmp/dist -xf [% c('input_files_by_name/cmake') %] -tar -C /var/tmp/dist -xf [% c('input_files_by_name/clang') %] -tar -C /var/tmp/dist -xf [% c('input_files_by_name/rust') %] -tar -C /var/tmp/dist -xf [% c('input_files_by_name/wasi-sysroot') %] -export PATH="/var/tmp/dist/cmake/bin:/var/tmp/dist/clang/bin:/var/tmp/dist/rust/bin:$PATH" -export CC=$distdir/clang/bin/clang -export CFLAGS="-L$distdir/clang/lib" -export CXX=$distdir/clang/bin/clang++ -export CXXFLAGS=$CFLAGS -export AR=$distdir/clang/bin/llvm-ar -export RUSTFLAGS="-C linker=$CXX -C link-arg=$CXXFLAGS" -export LUCET_PREFIX=$distdir/[% project %] -# XXX: Why do we need that when Mozilla doesn't? See: taskcluster/scripts/misc/build-lucetc.sh -export WASI_SYSROOT=$distdir/wasi-sysroot - -mkdir -p /var/tmp/build -tar -C /var/tmp/build -xf [% project %]-[% c('version') %].tar.gz - -# Now prepare the offline build -# Move the directory for hardcoding the path in .cargo/config -mv /var/tmp/build/[% project %]-[% c('version') %] $builddir -tar -C $builddir -xf [% c('input_files_by_name/lucetc-vendor') %] -cd $builddir -# .cargo exists already, let's just add to it -cat >> .cargo/config << 'EOF' - -[source.crates-io] -replace-with = "vendored-sources" - -[source.vendored-sources] -directory = "/var/tmp/build/lucetc/vendor" -EOF - -patch -p1 < $rootdir/Remove-march-native-from-COMMON_CFLAGS.patch - -make -j[% c("num_procs") %] build -# XXX: Should not be needed, just the lucetc binary, see: taskcluster/scripts/misc/build-lucetc.sh -make install - -cd $distdir -[% c('tar', { - tar_src => [ project ], - tar_args => '-czf ' _ dest_dir _ '/' _ c('filename'), - }) %] ===================================== projects/lucetc/config deleted ===================================== @@ -1,43 +0,0 @@ -# vim: filetype=yaml sw=2 -filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' -version: '[% c("abbrev") %]' -git_hash: d582d76bf0d17984501f3933688bf7a1eb5cf208 -git_url: https://github.com/PLSysSec/lucet_sandbox_compiler/ -git_submodule: 1 - -container: - use_container: 1 - -input_files: - - project: container-image - - name: binutils - project: binutils - enable: '[% c("var/linux") %]' - # Our clang still needs GCC parts (libstdc++ for instance) so we include that - # one here even though compilation gets done solely by clang. - - project: '[% c("var/compiler") %]' - name: '[% c("var/compiler") %]' - enable: '[% c("var/linux") %]' - - name: cmake - project: cmake - - name: clang - project: clang - - name: rust - project: rust - - name: wasi-sysroot - project: wasi-sysroot - # Use `make cargo_vendor-lucetc` to re-generate the vendor tarball - - name: lucetc-vendor - URL: 'https://people.torproject.org/~boklm/mirrors/sources/lucetc-vendor-[% c("version") %].tar.bz2' - sha256sum: 6b044ed76bc8870040174c8fbfa49c3a791b3aba7d32dd00cad541025eb16077 - - filename: Remove-march-native-from-COMMON_CFLAGS.patch - -steps: - cargo_vendor: - filename: '[% project %]-vendor-[% c("version") %].tar.bz2' - input_files: - - project: container-image - pkg_type: build - - project: rust - name: rust - pkg_type: build ===================================== projects/wasi-config/build ===================================== @@ -0,0 +1,4 @@ +#!/bin/bash +[% c("var/set_default_env") -%] +mkdir -p /var/tmp/dist +mv $rootdir/[% project %]-[% c('version') %].tar.gz [% dest_dir %]/[% c("filename") %] ===================================== projects/wasi-config/config ===================================== @@ -0,0 +1,5 @@ +# vim: filetype=yaml sw=2 +version: '[% c("abbrev") %]' +git_url: https://git.savannah.gnu.org/git/config.git +git_hash: c179db1b6f2ae484bfca1e9f8bae273e3319fa7d +filename: '[% project %]-[% c("version") %].tar.gz' ===================================== projects/wasi-libc/build ===================================== @@ -0,0 +1,4 @@ +#!/bin/bash +[% c("var/set_default_env") -%] +mkdir -p /var/tmp/dist +mv $rootdir/[% project %]-[% c('version') %].tar.gz [% dest_dir %]/[% c("filename") %] ===================================== projects/wasi-libc/config ===================================== @@ -0,0 +1,5 @@ +# vim: filetype=yaml sw=2 +version: '[% c("abbrev") %]' +git_url: https://github.com/WebAssembly/wasi-libc.git +git_hash: 9886d3d6200fcc3726329966860fc058707406cd +filename: '[% c("project") %]-[% c("version") %].tar.gz' ===================================== projects/wasi-sysroot/build ===================================== @@ -1,35 +1,81 @@ #!/bin/bash [% c("var/set_default_env") -%] -[% IF c("var/linux") %] - [% pc('gcc', 'var/setup', { compiler_tarfile => c('input_files_by_name/gcc'), - hardened_gcc => 0 }) %] - tar -C /var/tmp/dist -xf $rootdir/[% c('input_files_by_name/binutils') %] - export PATH="/var/tmp/dist/binutils/bin:$PATH" -[% END -%] -distdir=/var/tmp/dist -builddir=/var/tmp/build/[% project %] +distdir=/var/tmp/dist/[% project %] +builddir=/var/tmp/build/[% project %]-[% c("abbrev") %] mkdir -p $distdir tar -C /var/tmp/dist -xf [% c('input_files_by_name/cmake') %] tar -C /var/tmp/dist -xf [% c('input_files_by_name/ninja') %] -export PATH=/var/tmp/dist/binutils/bin:/var/tmp/dist/cmake/bin:/var/tmp/dist/ninja:$PATH +export PATH="/var/tmp/dist/ninja:/var/tmp/dist/cmake/bin:$PATH" + +[% IF c("var/linux") -%] + [% pc(c('var/compiler'), 'var/setup', { compiler_tarfile => c('input_files_by_name/' _ c('var/compiler')) }) %] + [% pc('python', 'var/setup', { python_tarfile => c('input_files_by_name/python') }) %] +[% END -%] mkdir -p /var/tmp/build tar -C /var/tmp/build -xf [% project %]-[% c('version') %].tar.gz -mv /var/tmp/build/[% project %]-[% c('version') %] $builddir +cd /var/tmp/build +tar -xf $rootdir/[% project %]-[% c('version') %].tar.gz cd $builddir -# We have no .git in our tar ball but the script version.sh used by -# the Makefile depends on that. We replace the script. + +pushd src +rmdir config llvm-project wasi-libc +tar -xf $rootdir/[% c('input_files_by_name/wasi-config') %] +mv wasi-config-* config +tar -xf $rootdir/[% c('input_files_by_name/clang-source') %] +mv clang-source llvm-project +export LLVM_HOME=$(pwd)/llvm-project +tar -xf $rootdir/[% c('input_files_by_name/wasi-libc') %] +mv wasi-libc-* wasi-libc +popd + +# What follows has been copied from Firefox's +# taskcluster/scripts/misc/build-sysroot-wasi.sh and adapted to +# tor-browser-build. + +mkdir -p build/install/wasi +# The wasi-sdk build system wants to build clang itself. We trick it into +# thinking it did, and put our own clang where it would have built its own. +tar -C build -xf $rootdir/[% c('input_files_by_name/clang') %] +mv build/clang build/llvm +touch build/llvm.BUILT + +# The wasi-sdk build system wants a clang and an ar binary in +# build/install/$PREFIX/bin +ln -s $(pwd)/build/llvm/bin build/install/wasi/bin +ln -s llvm-ar build/install/wasi/bin/ar + +# tor-browser-build: we have no .git in our tarball but the script version.sh +# used by the Makefile depends on that. We replace the script. cat > 'version.sh' << EOF #!/bin/sh echo '[% c("abbrev") %]' EOF -# XXX: We don't want to use the clang 9.0 wasi-sdk would use, see: -# https://bugzilla.mozilla.org/show_bug.cgi?id=1605708 -make -j[% c("num_procs") %] PREFIX=$distdir/[% project %] DESTDIR=/ +# Build wasi-libc, libc++ and libc++abi. +make \ + LLVM_PROJ_DIR=$LLVM_HOME \ + PREFIX=/wasi \ + build/wasi-libc.BUILT \ + build/compiler-rt.BUILT \ + NINJA_FLAGS='-j[% c("num_procs") %]' + +# Does Mozilla maybe do this when compiling Clang? +rtdir="build/llvm/lib/clang/$(ls build/llvm/lib/clang)/lib/wasi" +mkdir -p "$rtdir" +cp build/compiler-rt/lib/wasi/libclang_rt.builtins-wasm32.a "$rtdir/" + +make \ + LLVM_PROJ_DIR=$LLVM_HOME \ + PREFIX=/wasi \ + build/libcxx.BUILT \ + NINJA_FLAGS='-j[% c("num_procs") %]' + +mv build/install/wasi/share $distdir/ +mv build/install/wasi/lib $distdir/ -cd $distdir +cd /var/tmp/dist [% c('tar', { tar_src => [ project ], tar_args => '-czf ' _ dest_dir _ '/' _ c('filename'), ===================================== projects/wasi-sysroot/config ===================================== @@ -1,22 +1,35 @@ # vim: filetype=yaml sw=2 -filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' +filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz' version: '[% c("abbrev") %]' -git_hash: b36c433738f0c29160a5ac1c1cee1b1b884bf4a0 -git_url: https://github.com/CraneStation/wasi-sdk -git_submodule: 1 +# Notice: we are not enabling submodules because we use the same hacks as +# Mozilla and re-use the LLVM we already build. +# So, be sure to update also wasi-libc and wasi-config when you update this +# git hash! +git_hash: 37ae6af88201884c8b98a65adcd6d8cd1284f95e +git_url: https://github.com/WebAssembly/wasi-sdk.git +git_submodule: 0 container: use_container: 1 input_files: - project: container-image - - name: binutils - project: binutils - enable: '[% c("var/linux") %]' - - project: '[% c("var/compiler") %]' - name: '[% c("var/compiler") %]' + # We do not use GCC, but we need its libsdc++ to run Clang + - name: '[% c("var/compiler") %]' + project: '[% c("var/compiler") %]' enable: '[% c("var/linux") %]' + - name: clang + project: clang + - project: llvm-project + name: clang-source - name: cmake project: cmake - name: ninja project: ninja + - name: python + project: python + enable: '[% c("var/linux") %]' + - name: wasi-config + project: wasi-config + - name: wasi-libc + project: wasi-libc ===================================== rbm.conf ===================================== @@ -168,6 +168,8 @@ var: - zh-rCN - zh-rTW + rlbox: 1 + sign_build: '[% ENV.RBM_SIGN_BUILD %]' sign_build_gpg_opts: '[% ENV.RBM_GPG_OPTS %]' @@ -401,8 +403,6 @@ targets: osname: linux-x86_64 linux-cross: 0 arch_debian: amd64 - # We only support RLBox on the nightly channel and x86_64 for now - rlbox: 0 linux-i686: arch: i686 var: @@ -569,7 +569,6 @@ targets: FLAGS: "-target [% c('var/build_target') %] -B $cctoolsdir -isysroot $sysrootdir [% IF c('var/macos-aarch64') %]-mcpu=apple-m1[% END %]" LDFLAGS: "-Wl,-syslibroot,$sysrootdir -Wl,-dead_strip -Wl,-pie" locale_ja: ja-JP-mac - rlbox: 0 deps: - build-essential - faketime View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-12.0.2-build2
by Richard Pospesel (＠richard) 18 Jan '23

18 Jan '23

Richard Pospesel pushed new tag tbb-12.0.2-build2 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-12.0] Bug 40712: 12.0.2-build2
by Richard Pospesel (＠richard) 18 Jan '23

18 Jan '23

Richard Pospesel pushed to branch maint-12.0 at The Tor Project / Applications / tor-browser-build Commits: 6ddcc8bf by Nicolas Vigier at 2023-01-18T19:59:43+01:00 Bug 40712: 12.0.2-build2 - - - - - 2 changed files: - projects/browser/Bundle-Data/Docs/ChangeLog.txt - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs/ChangeLog.txt ===================================== @@ -1,4 +1,4 @@ -Tor Browser 12.0.2 - January 16 2023 +Tor Browser 12.0.2 - January 18 2023 * All Platforms * Updated tor to 0.4.7.13 * Updated NoScript to 11.4.14 @@ -31,6 +31,7 @@ Tor Browser 12.0.2 - January 16 2023 * Bug 40739: tor-expert-bundle should include ClientTransportPlugin torrc lines for each pluggable transport [tor-browser-build] * Windows + macOS + Linux * Bug 40734: Backport the translation project [tor-browser-build] + * Bug 40746: Remove pt_config.json from pt dir [tor-browser-build] * macOS * Bug 40706: macos-signer-stapler should wait for user interaction before attempting stapling [tor-browser-build] ===================================== rbm.conf ===================================== @@ -72,7 +72,7 @@ buildconf: var: torbrowser_version: '12.0.2' - torbrowser_build: 'build1' + torbrowser_build: 'build2' torbrowser_incremental_from: - 12.0.1 build_mar: 1 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/6… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/6… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-12.0] Bug 40746: Remove pt_config.json from pt dir
by boklm (＠boklm) 18 Jan '23

18 Jan '23

boklm pushed to branch maint-12.0 at The Tor Project / Applications / tor-browser-build Commits: f5bf29d5 by Nicolas Vigier at 2023-01-18T19:51:46+01:00 Bug 40746: Remove pt_config.json from pt dir The pt_config.json file is causing issues with macos code-signing. - - - - - 1 changed file: - projects/browser/build Changes: ===================================== projects/browser/build ===================================== @@ -83,9 +83,9 @@ mv [% c('input_files_by_name/noscript') %] "$TBDIR/$EXTSPATH/{73a6fe31-595d-460b mv_tbdir data/{geoip,geoip6} "$TORCONFIGPATH" # Bridge lists will be consumed later in `bridges_conf` - mv tor/pluggable_transports/bridges_list.*.txt $rootdir + mv tor/pluggable_transports/bridges_list.*.txt tor/pluggable_transports/pt_config.json $rootdir [% IF c("var/macos_universal") %] - rm -f aarch64/tor/pluggable_transports/bridges_list.*.txt + rm -f aarch64/tor/pluggable_transports/bridges_list.*.txt aarch64/tor/pluggable_transports/pt_config.json [% END -%] # Snowflake's README is the only documentation shipped in tor-expert-bundle View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40746: Remove pt_config.json from pt dir
by boklm (＠boklm) 18 Jan '23

18 Jan '23

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 14ede88c by Nicolas Vigier at 2023-01-18T19:35:30+01:00 Bug 40746: Remove pt_config.json from pt dir The pt_config.json file is causing issues with macos code-signing. - - - - - 1 changed file: - projects/browser/build Changes: ===================================== projects/browser/build ===================================== @@ -90,9 +90,9 @@ mv [% c('input_files_by_name/noscript') %] "$TBDIR/$EXTSPATH/{73a6fe31-595d-460b mv_tbdir data/{geoip,geoip6} "$TORCONFIGPATH" # Bridge lists will be consumed later in `bridges_conf` - mv tor/pluggable_transports/bridges_list.*.txt $rootdir + mv tor/pluggable_transports/bridges_list.*.txt tor/pluggable_transports/pt_config.json $rootdir [% IF c("var/macos_universal") %] - rm -f aarch64/tor/pluggable_transports/bridges_list.*.txt + rm -f aarch64/tor/pluggable_transports/bridges_list.*.txt aarch64/tor/pluggable_transports/pt_config.json [% END -%] # Snowflake's README is a documentation shipped in tor-expert-bundle View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/1… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-102.7.0esr-12.5-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 18 Jan '23

18 Jan '23

Pier Angelo Vendrame pushed to branch base-browser-102.7.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 7582b85e by Dan Ballard at 2023-01-18T18:01:21+00:00 fixup! Firefox preference overrides. privacy-browser#17: disable do not track (cherry picked from commit f5d35ce628bac6b978420536321836294d9e3cf1) - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -151,6 +151,7 @@ pref("browser.newtabpage.enabled", false); pref("browser.search.region", "US"); // The next two prefs disable GeoIP search lookups (#16254) pref("browser.search.geoip.url", ""); pref("browser.fixup.alternate.enabled", false); // Bug #16783: Prevent .onion fixups +pref("privacy.donottrackheader.enabled", false); // (privacy-browser#17) // Make sure there is no Tracking Protection active in Tor Browser, see: #17898. pref("privacy.trackingprotection.enabled", false); pref("privacy.trackingprotection.pbmode.enabled", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7582b85… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7582b85… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.7.0esr-12.5-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 18 Jan '23

18 Jan '23

Pier Angelo Vendrame pushed to branch tor-browser-102.7.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: f5d35ce6 by Dan Ballard at 2023-01-18T18:00:33+00:00 fixup! Firefox preference overrides. privacy-browser#17: disable do not track - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -151,6 +151,7 @@ pref("browser.newtabpage.enabled", false); pref("browser.search.region", "US"); // The next two prefs disable GeoIP search lookups (#16254) pref("browser.search.geoip.url", ""); pref("browser.fixup.alternate.enabled", false); // Bug #16783: Prevent .onion fixups +pref("privacy.donottrackheader.enabled", false); // (privacy-browser#17) // Make sure there is no Tracking Protection active in Tor Browser, see: #17898. pref("privacy.trackingprotection.enabled", false); pref("privacy.trackingprotection.pbmode.enabled", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f5d35ce… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f5d35ce… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40744: Ensure reproducibility with HFS DMG
by Pier Angelo Vendrame (＠pierov) 18 Jan '23

18 Jan '23

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: d4aa558e by Pier Angelo Vendrame at 2023-01-18T09:26:22+01:00 Bug 40744: Ensure reproducibility with HFS DMG - - - - - 8 changed files: - projects/browser/ddmg.sh - projects/hfsplus-tools/build - projects/hfsplus-tools/config - projects/hfsplus-tools/only-newfs_include.diff → projects/hfsplus-tools/newfs_hfs.diff - projects/libdmg-hfsplus/build - projects/libdmg-hfsplus/config - + projects/libdmg-hfsplus/libdmg.patch - tools/signing/ddmg.sh Changes: ===================================== projects/browser/ddmg.sh ===================================== @@ -1,3 +1,6 @@ +#!/bin/bash +set -e + [% SET src = c('dmg_src', { error_if_undef => 1 }) -%] find [% src %] -executable -exec chmod 0755 {} \; find [% src %] ! -executable -exec chmod 0644 {} \; @@ -18,7 +21,14 @@ newfs_hfs -v "[% c("var/Project_Name") %]" "\$hfsfile" pushd [% src %] -hfsplus "\$hfsfile" addall . +find -type d -mindepth 1 | sed -e 's/^\.\///' | sort | while read dirname; do + hfsplus "\$hfsfile" mkdir "/\$dirname" + hfsplus "\$hfsfile" chmod 0755 "/\$dirname" +done +find -type f | sed -e 's/^\.\///' | sort | while read filename; do + hfsplus "\$hfsfile" add "\$filename" "/\$filename" + hfsplus "\$hfsfile" chmod \$(stat --format '0%a' "\$filename") "/\$filename" +done # hfsplus does not play well with dangling links hfsplus "\$hfsfile" symlink /Applications /Applications # Show the volume icon ===================================== projects/hfsplus-tools/build ===================================== @@ -8,7 +8,7 @@ export PATH="/var/tmp/dist/clang/bin:$PATH" tar -xf diskdev_cmds-[% c("version") %].tar.gz cd diskdev_cmds-[% c("version") %] -patch -p1 < $rootdir/only-newfs_include.diff +patch -p1 < $rootdir/newfs_hfs.diff make -j[% c("num_procs") %] ===================================== projects/hfsplus-tools/config ===================================== @@ -16,6 +16,7 @@ input_files: # The project uses a flag that is not supported by GCC - name: clang project: clang - # Build only newfs (we do not care of fsck), and remove a header that does not - # exist on Linux (at that path) and is not required on Linux either. - - filename: only-newfs_include.diff + # Build only newfs (we do not care of fsck), remove a header that does not + # exist on Linux (at that path) and is not required on Linux either, and make + # the UUID deterministic. + - filename: newfs_hfs.diff ===================================== projects/hfsplus-tools/only-newfs_include.diff → projects/hfsplus-tools/newfs_hfs.diff ===================================== @@ -1,18 +1,18 @@ diff '--color=auto' -Naur diskdev_cmds-540.1.linux3_orig/Makefile diskdev_cmds-540.1.linux3/Makefile ---- diskdev_cmds-540.1.linux3_orig/Makefile 2023-01-13 10:01:32.474525600 +0100 -+++ diskdev_cmds-540.1.linux3/Makefile 2023-01-13 10:01:50.346876760 +0100 +--- diskdev_cmds-540.1.linux3_orig/Makefile 2023-01-17 11:36:56.341279443 +0100 ++++ diskdev_cmds-540.1.linux3/Makefile 2023-01-17 11:44:12.496479981 +0100 @@ -3,7 +3,7 @@ CC := clang CFLAGS := -g3 -Wall -fblocks -I$(PWD)/BlocksRunTime -I$(PWD)/include -DDEBUG_BUILD=0 -D_FILE_OFFSET_BITS=64 -D LINUX=1 -D BSD=1 -D VERSION=\"$(VERSION)\" LDFLAGS := -Wl,--build-id -L$(PWD)/BlocksRunTime -SUBDIRS := BlocksRunTime newfs_hfs.tproj fsck_hfs.tproj +SUBDIRS := newfs_hfs.tproj - + all clean: for d in $(SUBDIRS); do $(MAKE) -C $$d -f Makefile.lnx $@; done diff '--color=auto' -Naur diskdev_cmds-540.1.linux3_orig/newfs_hfs.tproj/makehfs.c diskdev_cmds-540.1.linux3/newfs_hfs.tproj/makehfs.c ---- diskdev_cmds-540.1.linux3_orig/newfs_hfs.tproj/makehfs.c 2023-01-13 10:01:32.474525600 +0100 -+++ diskdev_cmds-540.1.linux3/newfs_hfs.tproj/makehfs.c 2023-01-13 10:02:07.899221800 +0100 +--- diskdev_cmds-540.1.linux3_orig/newfs_hfs.tproj/makehfs.c 2023-01-17 11:36:56.341279443 +0100 ++++ diskdev_cmds-540.1.linux3/newfs_hfs.tproj/makehfs.c 2023-01-17 11:58:15.972059719 +0100 @@ -38,8 +38,8 @@ #endif #include <sys/errno.h> @@ -22,4 +22,17 @@ diff '--color=auto' -Naur diskdev_cmds-540.1.linux3_orig/newfs_hfs.tproj/makehfs +#include <sys/sysctl.h> #include <sys/vmmeter.h> #endif - + +@@ -571,8 +571,10 @@ + /* Adjust free blocks to reflect everything we have allocated. */ + hp->freeBlocks -= blocksUsed; + +- /* Generate and write UUID for the HFS+ disk */ +- GenerateVolumeUUID(&newVolumeUUID); ++ /* Use a deterministic UUID for reproducibility */ ++ memset(&newVolumeUUID, 0, sizeof(newVolumeUUID)); ++ strncpy(&newVolumeUUID, defaults->volumeName, sizeof(newVolumeUUID)); ++ + finderInfoUUIDPtr = (VolumeUUID *)(&hp->finderInfo[24]); + finderInfoUUIDPtr->v.high = OSSwapHostToBigInt32(newVolumeUUID.v.high); + finderInfoUUIDPtr->v.low = OSSwapHostToBigInt32(newVolumeUUID.v.low); ===================================== projects/libdmg-hfsplus/build ===================================== @@ -9,6 +9,7 @@ export PATH="/var/tmp/dist/ninja:/var/tmp/dist/cmake/bin:$PATH" mkdir /var/tmp/build tar -C /var/tmp/build -xf [% project %]-[% c('version') %].tar.gz cd /var/tmp/build/[% project %]-[% c('version') %] +patch -p1 < "$rootdir/libdmg.patch" cmake . -GNinja -DCMAKE_BUILD_TYPE=Release ninja -j[% c("num_procs") %] -v ===================================== projects/libdmg-hfsplus/config ===================================== @@ -16,3 +16,4 @@ input_files: project: cmake - name: ninja project: ninja + - filename: libdmg.patch ===================================== projects/libdmg-hfsplus/libdmg.patch ===================================== @@ -0,0 +1,39 @@ +From d1a5eca891f32103ccda80ee75e158dfc7ece70d Mon Sep 17 00:00:00 2001 +From: Mike Perry <mikeperry-git(a)torproject.org> +Date: Thu, 6 Mar 2014 19:47:05 -0800 +Subject: [PATCH] Memset a UDIF header to ensure archive reproducibility. + +Some of the struct padding and fields contained unitialized memory, which +caused two successive invocations to produce archives that differed in some +bytes. +--- + dmg/dmglib.c | 6 ++++-- + 1 file changed, 4 insertions(+), 2 deletions(-) + +diff --git a/dmg/dmglib.c b/dmg/dmglib.c +index f481b1f..b74e50b 100644 +--- a/dmg/dmglib.c ++++ b/dmg/dmglib.c +@@ -108,7 +108,8 @@ int buildDmg(AbstractFile* abstractIn, AbstractFile* abstractOut) { + ChecksumToken dataForkToken; + + UDIFResourceFile koly; +- ++ memset(&koly, 0, sizeof(koly)); ++ + off_t plistOffset; + uint32_t plistSize; + uint32_t dataForkChecksum; +@@ -284,7 +285,8 @@ int convertToDMG(AbstractFile* abstractIn, AbstractFile* abstractOut) { + uint64_t numSectors; + + UDIFResourceFile koly; +- ++ memset(&koly, 0, sizeof(koly)); ++ + char partitionName[512]; + + off_t fileLength; +-- +1.8.1.2 + ===================================== tools/signing/ddmg.sh ===================================== @@ -42,7 +42,14 @@ cd $src_dir # add it back again with the special command to do so. rm -f Applications -hfsplus "$hfsfile" addall . +find -type d -mindepth 1 | sed -e 's/^\.\///' | sort | while read dirname; do + hfsplus "$hfsfile" mkdir "/$dirname" + hfsplus "$hfsfile" chmod 0755 "/$dirname" +done +find -type f | sed -e 's/^\.\///' | sort | while read filename; do + hfsplus "$hfsfile" add "$filename" "/$filename" + hfsplus "$hfsfile" chmod $(stat --format '0%a' "$filename") "/$filename" +done hfsplus "$hfsfile" symlink /Applications /Applications # Show the volume icon hfsplus "$hfsfile" attr / C View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-12.0.2-build1
by Richard Pospesel (＠richard) 17 Jan '23

17 Jan '23

Richard Pospesel pushed new tag tbb-12.0.2-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0