- tbb-commits - lists.torproject.org

[builders/tor-browser-build] branch maint-11.5 updated: Bug 40622: Update obfs4proxy 0.0.14
by gitolite role 08 Nov '22

08 Nov '22

This is an automated email from the git hooks/post-receive script. boklm pushed a commit to branch maint-11.5 in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/maint-11.5 by this push: new 01f22b55 Bug 40622: Update obfs4proxy 0.0.14 01f22b55 is described below commit 01f22b559060db64f1c8f34d1d967f14de3f8faf Author: meskio <meskio(a)torproject.org> AuthorDate: Thu Oct 20 20:11:02 2022 +0200 Bug 40622: Update obfs4proxy 0.0.14 Use our own copy of the repo that includes uTLS support. --- projects/{gocompress => andybalholm-brotli}/config | 9 ++--- projects/gobsaes/config | 30 ----------------- projects/goutls/config | 38 ---------------------- projects/goxcrypto/config | 2 +- projects/goxnet/config | 2 +- projects/{gocompress => klauspost-compress}/config | 9 ++--- projects/obfs4/build | 2 +- projects/obfs4/config | 12 +++---- projects/refraction-utls/config | 11 ++++++- 9 files changed, 29 insertions(+), 86 deletions(-) diff --git a/projects/gocompress/config b/projects/andybalholm-brotli/config similarity index 63% copy from projects/gocompress/config copy to projects/andybalholm-brotli/config index 799c6b63..7b695cf2 100644 --- a/projects/gocompress/config +++ b/projects/andybalholm-brotli/config @@ -1,15 +1,16 @@ # vim: filetype=yaml sw=2 -version: '[% c("abbrev") %]' -git_url: https://github.com/dsnet/compress -git_hash: cc9eb1d7ad760af14e8f918698f745e80377af4f +version: 1.0.4 +git_url: https://github.com/andybalholm/brotli.git +git_hash: '1d750214c25205863625bb3eb8190a51b2cef26d' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' + container: use_container: 1 build: '[% c("projects/go/var/build_go_lib") %]' var: - go_lib: github.com/dsnet/compress + go_lib: github.com/andybalholm/brotli input_files: - project: container-image diff --git a/projects/gobsaes/config b/projects/gobsaes/config deleted file mode 100644 index a3d2b280..00000000 --- a/projects/gobsaes/config +++ /dev/null @@ -1,30 +0,0 @@ -# vim: filetype=yaml sw=2 -git_url: https://gitlab.com/yawning/bsaes.git -version: '[% c("abbrev") %]' -git_hash: 0a714cd429ec754482b4001e918db30cd2094405 -filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' -container: - use_container: 1 - -build: '[% c("projects/go/var/build_go_lib") %]' - -var: - go_lib: gitlab.com/yawning/bsaes.git - go_lib_deps: - - goxsys - -targets: - android: - var: - build_go_lib_pre: | - [% pc(c('var/compiler'), 'var/setup', { compiler_tarfile => c('input_files_by_name/' _ c('var/compiler')) }) %] - -input_files: - - project: container-image - - name: go - project: go - - name: goxsys - project: goxsys - - name: '[% c("var/compiler") %]' - project: '[% c("var/compiler") %]' - enable: '[% c("var/android") %]' diff --git a/projects/goutls/config b/projects/goutls/config deleted file mode 100644 index 91df0b7c..00000000 --- a/projects/goutls/config +++ /dev/null @@ -1,38 +0,0 @@ -# vim: filetype=yaml sw=2 -git_url: https://gitlab.com/yawning/utls.git -version: 0.0.12-1 -git_hash: 'v[% c("version") %]' -tag_gpg_id: 1 -gpg_keyring: yawning.gpg -filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' -container: - use_container: 1 - -build: '[% c("projects/go/var/build_go_lib") %]' - -var: - go_lib: gitlab.com/yawning/utls.git - go_lib_deps: - - goxcrypto - - gocompress - - gobsaes - -targets: - android: - var: - build_go_lib_pre: | - [% pc(c('var/compiler'), 'var/setup', { compiler_tarfile => c('input_files_by_name/' _ c('var/compiler')) }) %] - -input_files: - - project: container-image - - name: go - project: go - - name: goxcrypto - project: goxcrypto - - name: gocompress - project: gocompress - - name: gobsaes - project: gobsaes - - name: '[% c("var/compiler") %]' - project: '[% c("var/compiler") %]' - enable: '[% c("var/android") %]' diff --git a/projects/goxcrypto/config b/projects/goxcrypto/config index 036cc869..a10ae9a0 100644 --- a/projects/goxcrypto/config +++ b/projects/goxcrypto/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://go.googlesource.com/crypto -git_hash: 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 +git_hash: c86fa9a7ed909e2f2a8ab8298254fca727aba16a filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 diff --git a/projects/goxnet/config b/projects/goxnet/config index 77813dd3..7ae6e784 100644 --- a/projects/goxnet/config +++ b/projects/goxnet/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://go.googlesource.com/net -git_hash: da137c7871d730100384dbcf36e6f8fa493aef5b +git_hash: bea034e7d591acfddd606603cf48fae48bbdd340 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 diff --git a/projects/gocompress/config b/projects/klauspost-compress/config similarity index 63% rename from projects/gocompress/config rename to projects/klauspost-compress/config index 799c6b63..44461f9d 100644 --- a/projects/gocompress/config +++ b/projects/klauspost-compress/config @@ -1,15 +1,16 @@ # vim: filetype=yaml sw=2 -version: '[% c("abbrev") %]' -git_url: https://github.com/dsnet/compress -git_hash: cc9eb1d7ad760af14e8f918698f745e80377af4f +version: 1.15.9 +git_url: https://github.com/klauspost/compress.git +git_hash: '9559b037e79ad673c71f6ef7c732c00949014cd2' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' + container: use_container: 1 build: '[% c("projects/go/var/build_go_lib") %]' var: - go_lib: github.com/dsnet/compress + go_lib: github.com/klauspost/compress input_files: - project: container-image diff --git a/projects/obfs4/build b/projects/obfs4/build index 3aa2167e..93ff80f1 100644 --- a/projects/obfs4/build +++ b/projects/obfs4/build @@ -18,7 +18,7 @@ tar -C /var/tmp/dist -xf [% c('input_files_by_name/edwards25519-extra') %] tar -C /var/tmp/dist -xf [% c('input_files_by_name/siphash') %] tar -C /var/tmp/dist -xf [% c('input_files_by_name/goxcrypto') %] tar -C /var/tmp/dist -xf [% c('input_files_by_name/goxnet') %] -tar -C /var/tmp/dist -xf [% c('input_files_by_name/goutls') %] +tar -C /var/tmp/dist -xf [% c('input_files_by_name/refraction-utls') %] tar -C /var/tmp/dist -xf [% c('input_files_by_name/goxtext') %] mkdir -p /var/tmp/build diff --git a/projects/obfs4/config b/projects/obfs4/config index 99041b90..f8a34092 100644 --- a/projects/obfs4/config +++ b/projects/obfs4/config @@ -1,9 +1,9 @@ # vim: filetype=yaml sw=2 -version: 0.0.12 -git_url: https://gitlab.com/yawning/obfs4.git +version: 0.0.14-tor2 +git_url: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/obfs… git_hash: 'obfs4proxy-[% c("version") %]' tag_gpg_id: 1 -gpg_keyring: yawning.gpg +gpg_keyring: anti-censorship.gpg filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' container: @@ -11,7 +11,7 @@ container: targets: nightly: - git_hash: master + git_hash: main version: '[% c("abbrev") %]' tag_gpg_id: 0 @@ -31,8 +31,8 @@ input_files: project: goxcrypto - name: goxnet project: goxnet - - name: goutls - project: goutls + - name: refraction-utls + project: refraction-utls - name: goxtext project: goxtext - name: '[% c("var/compiler") %]' diff --git a/projects/refraction-utls/config b/projects/refraction-utls/config index c354437b..7991d982 100644 --- a/projects/refraction-utls/config +++ b/projects/refraction-utls/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://github.com/refraction-networking/utls -git_hash: 0b2885c8c0d4467cfe98136748a9d011d0b8fff0 #v1.0.0 +git_hash: 862fe372d939c53bb10cb4fd11263f3766589892 #v1.1.5 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 @@ -12,6 +12,9 @@ var: go_lib: github.com/refraction-networking/utls go_lib_deps: - goxcrypto + - goxnet + - klauspost-compress + - andybalholm-brotli input_files: - project: container-image @@ -19,3 +22,9 @@ input_files: project: go - name: goxcrypto project: goxcrypto + - name: goxnet + project: goxnet + - name: klauspost-compress + project: klauspost-compress + - name: andybalholm-brotli + project: andybalholm-brotli -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Bug 40622: Update obfs4proxy 0.0.14
by gitolite role 08 Nov '22

08 Nov '22

This is an automated email from the git hooks/post-receive script. boklm pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new 02d54d8c Bug 40622: Update obfs4proxy 0.0.14 02d54d8c is described below commit 02d54d8cb233b34c167d7a246e6e34fafcb604af Author: meskio <meskio(a)torproject.org> AuthorDate: Thu Oct 20 20:11:02 2022 +0200 Bug 40622: Update obfs4proxy 0.0.14 Use our own copy of the repo that includes uTLS support. --- projects/{gocompress => andybalholm-brotli}/config | 9 ++--- projects/gobsaes/config | 30 ----------------- projects/goutls/config | 38 ---------------------- projects/goxcrypto/config | 2 +- projects/goxnet/config | 2 +- projects/{gocompress => klauspost-compress}/config | 9 ++--- projects/obfs4/build | 2 +- projects/obfs4/config | 12 +++---- projects/refraction-utls/config | 11 ++++++- 9 files changed, 29 insertions(+), 86 deletions(-) diff --git a/projects/gocompress/config b/projects/andybalholm-brotli/config similarity index 63% copy from projects/gocompress/config copy to projects/andybalholm-brotli/config index 799c6b63..7b695cf2 100644 --- a/projects/gocompress/config +++ b/projects/andybalholm-brotli/config @@ -1,15 +1,16 @@ # vim: filetype=yaml sw=2 -version: '[% c("abbrev") %]' -git_url: https://github.com/dsnet/compress -git_hash: cc9eb1d7ad760af14e8f918698f745e80377af4f +version: 1.0.4 +git_url: https://github.com/andybalholm/brotli.git +git_hash: '1d750214c25205863625bb3eb8190a51b2cef26d' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' + container: use_container: 1 build: '[% c("projects/go/var/build_go_lib") %]' var: - go_lib: github.com/dsnet/compress + go_lib: github.com/andybalholm/brotli input_files: - project: container-image diff --git a/projects/gobsaes/config b/projects/gobsaes/config deleted file mode 100644 index a3d2b280..00000000 --- a/projects/gobsaes/config +++ /dev/null @@ -1,30 +0,0 @@ -# vim: filetype=yaml sw=2 -git_url: https://gitlab.com/yawning/bsaes.git -version: '[% c("abbrev") %]' -git_hash: 0a714cd429ec754482b4001e918db30cd2094405 -filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' -container: - use_container: 1 - -build: '[% c("projects/go/var/build_go_lib") %]' - -var: - go_lib: gitlab.com/yawning/bsaes.git - go_lib_deps: - - goxsys - -targets: - android: - var: - build_go_lib_pre: | - [% pc(c('var/compiler'), 'var/setup', { compiler_tarfile => c('input_files_by_name/' _ c('var/compiler')) }) %] - -input_files: - - project: container-image - - name: go - project: go - - name: goxsys - project: goxsys - - name: '[% c("var/compiler") %]' - project: '[% c("var/compiler") %]' - enable: '[% c("var/android") %]' diff --git a/projects/goutls/config b/projects/goutls/config deleted file mode 100644 index 91df0b7c..00000000 --- a/projects/goutls/config +++ /dev/null @@ -1,38 +0,0 @@ -# vim: filetype=yaml sw=2 -git_url: https://gitlab.com/yawning/utls.git -version: 0.0.12-1 -git_hash: 'v[% c("version") %]' -tag_gpg_id: 1 -gpg_keyring: yawning.gpg -filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' -container: - use_container: 1 - -build: '[% c("projects/go/var/build_go_lib") %]' - -var: - go_lib: gitlab.com/yawning/utls.git - go_lib_deps: - - goxcrypto - - gocompress - - gobsaes - -targets: - android: - var: - build_go_lib_pre: | - [% pc(c('var/compiler'), 'var/setup', { compiler_tarfile => c('input_files_by_name/' _ c('var/compiler')) }) %] - -input_files: - - project: container-image - - name: go - project: go - - name: goxcrypto - project: goxcrypto - - name: gocompress - project: gocompress - - name: gobsaes - project: gobsaes - - name: '[% c("var/compiler") %]' - project: '[% c("var/compiler") %]' - enable: '[% c("var/android") %]' diff --git a/projects/goxcrypto/config b/projects/goxcrypto/config index 036cc869..a10ae9a0 100644 --- a/projects/goxcrypto/config +++ b/projects/goxcrypto/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://go.googlesource.com/crypto -git_hash: 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 +git_hash: c86fa9a7ed909e2f2a8ab8298254fca727aba16a filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 diff --git a/projects/goxnet/config b/projects/goxnet/config index 77813dd3..7ae6e784 100644 --- a/projects/goxnet/config +++ b/projects/goxnet/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://go.googlesource.com/net -git_hash: da137c7871d730100384dbcf36e6f8fa493aef5b +git_hash: bea034e7d591acfddd606603cf48fae48bbdd340 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 diff --git a/projects/gocompress/config b/projects/klauspost-compress/config similarity index 63% rename from projects/gocompress/config rename to projects/klauspost-compress/config index 799c6b63..44461f9d 100644 --- a/projects/gocompress/config +++ b/projects/klauspost-compress/config @@ -1,15 +1,16 @@ # vim: filetype=yaml sw=2 -version: '[% c("abbrev") %]' -git_url: https://github.com/dsnet/compress -git_hash: cc9eb1d7ad760af14e8f918698f745e80377af4f +version: 1.15.9 +git_url: https://github.com/klauspost/compress.git +git_hash: '9559b037e79ad673c71f6ef7c732c00949014cd2' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' + container: use_container: 1 build: '[% c("projects/go/var/build_go_lib") %]' var: - go_lib: github.com/dsnet/compress + go_lib: github.com/klauspost/compress input_files: - project: container-image diff --git a/projects/obfs4/build b/projects/obfs4/build index d063d4f1..acd62b61 100644 --- a/projects/obfs4/build +++ b/projects/obfs4/build @@ -17,7 +17,7 @@ tar -C /var/tmp/dist -xf [% c('input_files_by_name/edwards25519-extra') %] tar -C /var/tmp/dist -xf [% c('input_files_by_name/siphash') %] tar -C /var/tmp/dist -xf [% c('input_files_by_name/goxcrypto') %] tar -C /var/tmp/dist -xf [% c('input_files_by_name/goxnet') %] -tar -C /var/tmp/dist -xf [% c('input_files_by_name/goutls') %] +tar -C /var/tmp/dist -xf [% c('input_files_by_name/refraction-utls') %] tar -C /var/tmp/dist -xf [% c('input_files_by_name/goxtext') %] mkdir -p /var/tmp/build diff --git a/projects/obfs4/config b/projects/obfs4/config index 99041b90..f8a34092 100644 --- a/projects/obfs4/config +++ b/projects/obfs4/config @@ -1,9 +1,9 @@ # vim: filetype=yaml sw=2 -version: 0.0.12 -git_url: https://gitlab.com/yawning/obfs4.git +version: 0.0.14-tor2 +git_url: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/obfs… git_hash: 'obfs4proxy-[% c("version") %]' tag_gpg_id: 1 -gpg_keyring: yawning.gpg +gpg_keyring: anti-censorship.gpg filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' container: @@ -11,7 +11,7 @@ container: targets: nightly: - git_hash: master + git_hash: main version: '[% c("abbrev") %]' tag_gpg_id: 0 @@ -31,8 +31,8 @@ input_files: project: goxcrypto - name: goxnet project: goxnet - - name: goutls - project: goutls + - name: refraction-utls + project: refraction-utls - name: goxtext project: goxtext - name: '[% c("var/compiler") %]' diff --git a/projects/refraction-utls/config b/projects/refraction-utls/config index c354437b..7991d982 100644 --- a/projects/refraction-utls/config +++ b/projects/refraction-utls/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://github.com/refraction-networking/utls -git_hash: 0b2885c8c0d4467cfe98136748a9d011d0b8fff0 #v1.0.0 +git_hash: 862fe372d939c53bb10cb4fd11263f3766589892 #v1.1.5 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 @@ -12,6 +12,9 @@ var: go_lib: github.com/refraction-networking/utls go_lib_deps: - goxcrypto + - goxnet + - klauspost-compress + - andybalholm-brotli input_files: - project: container-image @@ -19,3 +22,9 @@ input_files: project: go - name: goxcrypto project: goxcrypto + - name: goxnet + project: goxnet + - name: klauspost-compress + project: klauspost-compress + - name: andybalholm-brotli + project: andybalholm-brotli -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-102.4.0esr-12.0-2 updated: fixup! Bug 40597: Implement TorSettings module
by gitolite role 07 Nov '22

07 Nov '22

This is an automated email from the git hooks/post-receive script. pierov pushed a commit to branch tor-browser-102.4.0esr-12.0-2 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-102.4.0esr-12.0-2 by this push: new d3f95b228a5a fixup! Bug 40597: Implement TorSettings module d3f95b228a5a is described below commit d3f95b228a5a6e831cb9fc1fe7ab653d01c0db59 Author: Pier Angelo Vendrame <pierov(a)torproject.org> AuthorDate: Mon Nov 7 19:13:46 2022 +0100 fixup! Bug 40597: Implement TorSettings module Bug 41429: Initialize TorConnect and TorSettings once --- browser/modules/TorConnect.jsm | 1 - browser/modules/TorSettings.jsm | 1 - 2 files changed, 2 deletions(-) diff --git a/browser/modules/TorConnect.jsm b/browser/modules/TorConnect.jsm index 7c458a41c17d..cb09c1dbefef 100644 --- a/browser/modules/TorConnect.jsm +++ b/browser/modules/TorConnect.jsm @@ -1077,6 +1077,5 @@ const TorConnect = (() => { return redirectUrls; }, }; - retval.init(); return retval; })(); /* TorConnect */ diff --git a/browser/modules/TorSettings.jsm b/browser/modules/TorSettings.jsm index 4084ee71a1ce..97f1d07a5fef 100644 --- a/browser/modules/TorSettings.jsm +++ b/browser/modules/TorSettings.jsm @@ -778,6 +778,5 @@ const TorSettings = (() => { }; }, }; - self.init(); return self; })(); -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated (7d6a2d1b -> 98b4184d)
by gitolite role 07 Nov '22

07 Nov '22

This is an automated email from the git hooks/post-receive script. pierov pushed a change to branch main in repository builders/tor-browser-build. from 7d6a2d1b Bug 40676: Remove HTTPS-Everywhere from the repackage script new 87987543 Bug 40641: Add projects/firefox-l10n new 1e12d726 Bug 40641: Use packaged locales on Firefox new 98b4184d Bug 40641: Remove langpacks and single-locale support The 3 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: README | 4 +- projects/browser/build | 154 ++------------------------------------ projects/browser/config | 3 - projects/firefox-l10n/build | 6 ++ projects/firefox-l10n/config | 45 +++++++++++ projects/firefox-langpacks/build | 16 ---- projects/firefox-langpacks/config | 50 ------------- projects/firefox/build | 16 +++- projects/firefox/config | 5 ++ rbm | 2 +- rbm.conf | 1 - tools/signing/check_file_counts | 7 -- 12 files changed, 80 insertions(+), 229 deletions(-) create mode 100644 projects/firefox-l10n/build create mode 100644 projects/firefox-l10n/config delete mode 100644 projects/firefox-langpacks/build delete mode 100644 projects/firefox-langpacks/config -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 3

[builders/tor-browser-build] branch maint-11.5 updated: fixup! Bug 41413: make injected intl.locale.requested sticky
by gitolite role 07 Nov '22

07 Nov '22

This is an automated email from the git hooks/post-receive script. pierov pushed a commit to branch maint-11.5 in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/maint-11.5 by this push: new 89a99e58 fixup! Bug 41413: make injected intl.locale.requested sticky 89a99e58 is described below commit 89a99e58fc5002cc43651fb7ecb6338683ca52eb Author: Dan Ballard <dan(a)mindstab.net> AuthorDate: Mon Nov 7 09:13:46 2022 -0800 fixup! Bug 41413: make injected intl.locale.requested sticky Bug 41413: add sticky to intl.locale.requested --- projects/tor-browser/build | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/projects/tor-browser/build b/projects/tor-browser/build index 691bac90..e639ae30 100644 --- a/projects/tor-browser/build +++ b/projects/tor-browser/build @@ -184,7 +184,7 @@ cp defaults/preferences/000-tor-browser.js $rootdir rm -rf chrome [% END %] # Set the locale of the bundle. -echo "pref(\"intl.locale.requested\", \"en-US\");" >> defaults/preferences/000-tor-browser.js +echo "pref(\"intl.locale.requested\", \"en-US\", sticky);" >> defaults/preferences/000-tor-browser.js [% c("touch") %] defaults/preferences/000-tor-browser.js zip -Xm omni.ja defaults/preferences/000-tor-browser.js rm -rf defaults -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[torbutton] branch maint-11.5 updated: Bug 41105: Match tb-102 use of ClearDataService flags, including proper call to PreflightCacheCleaner included in CLEAR_ALL
by gitolite role 07 Nov '22

07 Nov '22

This is an automated email from the git hooks/post-receive script. pierov pushed a commit to branch maint-11.5 in repository torbutton. The following commit(s) were added to refs/heads/maint-11.5 by this push: new 7d789f2c Bug 41105: Match tb-102 use of ClearDataService flags, including proper call to PreflightCacheCleaner included in CLEAR_ALL 7d789f2c is described below commit 7d789f2ce6595232486456fb8570a4a8d5f01471 Author: Dan Ballard <dan(a)mindstab.net> AuthorDate: Fri Nov 4 14:38:11 2022 -0700 Bug 41105: Match tb-102 use of ClearDataService flags, including proper call to PreflightCacheCleaner included in CLEAR_ALL --- chrome/content/torbutton.js | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/chrome/content/torbutton.js b/chrome/content/torbutton.js index 3bfaa1f8..2f6ff1ee 100644 --- a/chrome/content/torbutton.js +++ b/chrome/content/torbutton.js @@ -571,9 +571,7 @@ async function torbutton_do_new_identity() { try { await clearData( - Services.clearData.CLEAR_DOM_STORAGES | - Services.clearData.CLEAR_MEDIA_DEVICES | - Services.clearData.CLEAR_PREDICTOR_NETWORK_DATA + Services.clearData.CLEAR_ALL ^ Services.clearData.CLEAR_PASSWORDS ); } catch (e) { torbutton_log(5, "Exception on storage clearing: " + e); -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-102.4.0esr-12.0-2 updated: Bug 41417: Always prompt users to restart after changing language
by gitolite role 07 Nov '22

07 Nov '22

This is an automated email from the git hooks/post-receive script. pierov pushed a commit to branch tor-browser-102.4.0esr-12.0-2 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-102.4.0esr-12.0-2 by this push: new de019e3edec0 Bug 41417: Always prompt users to restart after changing language de019e3edec0 is described below commit de019e3edec0f4ead853b5ddb25fd0423d03e916 Author: Pier Angelo Vendrame <pierov(a)torproject.org> AuthorDate: Fri Nov 4 14:10:49 2022 +0100 Bug 41417: Always prompt users to restart after changing language This is a temporary patch that we need until we switch our strings to Fluent. The reason is that we currently set strings when we populate our XUL content. We could rework the whole mechanism, but it is not worth it because we want to switch to Fluent, which will handle everything automatically. --- browser/components/preferences/main.js | 23 ++++++++--------------- 1 file changed, 8 insertions(+), 15 deletions(-) diff --git a/browser/components/preferences/main.js b/browser/components/preferences/main.js index eab384264c4e..af53fa0403f7 100644 --- a/browser/components/preferences/main.js +++ b/browser/components/preferences/main.js @@ -1202,18 +1202,17 @@ var gMainPane = { gMainPane.recordBrowserLanguagesTelemetry("reorder"); switch (gMainPane.getLanguageSwitchTransitionType(newLocales)) { + // tor-browser#41417: Always prompt for the restart, until we switch to + // Fluent, since the current way we use to update languages does not allow + // live-reload. We could also call showConfirmLanguageChangeMessageBar in + // the official live-reload case, but the result is inconsistent and makes + // handling the locales-match case harder. case "requires-restart": + case "live-reload": // Prepare to change the locales, as they were different. gMainPane.showConfirmLanguageChangeMessageBar(newLocales); gMainPane.updatePrimaryBrowserLanguageUI(newLocales[0]); break; - case "live-reload": - Services.locale.requestedLocales = newLocales; - gMainPane.updatePrimaryBrowserLanguageUI( - Services.locale.appLocaleAsBCP47 - ); - gMainPane.hideConfirmLanguageChangeMessageBar(); - break; case "locales-match": // They matched, so we can reset the UI. gMainPane.updatePrimaryBrowserLanguageUI( @@ -1466,18 +1465,12 @@ var gMainPane = { } switch (gMainPane.getLanguageSwitchTransitionType(selected)) { + // tor-browser#41417: see onPrimaryBrowserLanguageMenuChange case "requires-restart": + case "live-reload": gMainPane.showConfirmLanguageChangeMessageBar(selected); gMainPane.updatePrimaryBrowserLanguageUI(selected[0]); break; - case "live-reload": - Services.locale.requestedLocales = selected; - - gMainPane.updatePrimaryBrowserLanguageUI( - Services.locale.appLocaleAsBCP47 - ); - gMainPane.hideConfirmLanguageChangeMessageBar(); - break; case "locales-match": // They matched, so we can reset the UI. gMainPane.updatePrimaryBrowserLanguageUI( -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Bug 40676: Remove HTTPS-Everywhere from the repackage script
by gitolite role 07 Nov '22

07 Nov '22

This is an automated email from the git hooks/post-receive script. boklm pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new 7d6a2d1b Bug 40676: Remove HTTPS-Everywhere from the repackage script 7d6a2d1b is described below commit 7d6a2d1becb5b78d30eb1cbd2e710280539a50df Author: Pier Angelo Vendrame <pierov(a)torproject.org> AuthorDate: Fri Nov 4 09:46:06 2022 +0100 Bug 40676: Remove HTTPS-Everywhere from the repackage script We do not bundle HTTPS Everywhere anymore, so we do not need to add it to local builds anymore. --- tools/repackage_browser.sh | 8 -------- 1 file changed, 8 deletions(-) diff --git a/tools/repackage_browser.sh b/tools/repackage_browser.sh index 47876735..5498bd24 100755 --- a/tools/repackage_browser.sh +++ b/tools/repackage_browser.sh @@ -48,14 +48,6 @@ do strip "$LIB" done -# Repackage https-everywhere extension -mkdir _omni/ -unzip tor-browser_en-US/Browser/omni.ja -d _omni/ -cd _omni/ -zip -Xmr ../firefox/omni.ja chrome/torbutton/content/extensions/https-everywhere/ -cd .. -rm -rf _omni/ - # Overwrite extracted tor-browser with locally built files and move to _repackaged folder cp -r firefox/* tor-browser_en-US/Browser rm -rf firefox "${TOR_FILENAME}" -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[torbutton] branch main updated: Bug 41293: Use the new Fluent API to register Torbutton as a l10n source
by gitolite role 04 Nov '22

04 Nov '22

This is an automated email from the git hooks/post-receive script. pierov pushed a commit to branch main in repository torbutton. The following commit(s) were added to refs/heads/main by this push: new 004b629b Bug 41293: Use the new Fluent API to register Torbutton as a l10n source 004b629b is described below commit 004b629b21c83133d7c90e0a3656f90d44562746 Author: Pier Angelo Vendrame <pierov(a)torproject.org> AuthorDate: Thu Nov 3 17:13:34 2022 +0100 Bug 41293: Use the new Fluent API to register Torbutton as a l10n source With Firefox 102, we have switched from a JS implementation of Fluent to a Rust one, and the related API has slightly changed. Anyway. since we are switching to packaged locales, we can register them with the jar.mn, rather than using the API. --- components/startup-observer.js | 38 -------------------------------------- jar.mn | 1 + 2 files changed, 1 insertion(+), 38 deletions(-) diff --git a/components/startup-observer.js b/components/startup-observer.js index 090eb7b8..8f9b8cc2 100644 --- a/components/startup-observer.js +++ b/components/startup-observer.js @@ -28,42 +28,6 @@ XPCOMUtils.defineLazyModuleGetters(this, { ComponentUtils: "resource://gre/modules/ComponentUtils.jsm", }); -let registerTranslations = () => {}; -if (parseInt(AppConstants.TOR_BROWSER_VERSION) < 102) { - XPCOMUtils.defineLazyModuleGetters(this, { - FileUtils: "resource://gre/modules/FileUtils.jsm", - FileSource: "resource://gre/modules/L10nRegistry.jsm", - L10nRegistry: "resource://gre/modules/L10nRegistry.jsm", - }); - registerTranslations = () => { - // Using all possible locales so that we do not have to change this list every time we support - // a new one. - /* eslint-disable */ - const allLocales = [ - "en-US", "ach", "af", "an", "ar", "ast", "az", "be", "bg", "bn", "br", "bs", "ca", "cak", - "crh", "cs", "cy", "da", "de", "dsb", "el", "en-CA", "en-GB", "eo", "es-AR", "es-CL", - "es-ES", "es-MX", "et", "eu", "fa", "ff", "fi", "fr", "fy-NL", "ga-IE", "gd", "gl", "gn", - "gu-IN", "he", "hi-IN", "hr", "hsb", "hu", "hy-AM", "ia", "id", "is", "it", "ja", - "ja-JP-mac", "ka", "kab", "kk", "km", "kn", "ko", "lij", "lo", "lt", "ltg", "lv", "mk", "mr", - "ms", "my", "nb-NO", "ne-NP", "nl", "nn-NO", "oc", "pa-IN", "pl", "pt-BR", "pt-PT", "rm", - "ro", "ru", "si", "sk", "sl", "son", "sq", "sr", "sv-SE", "ta", "te", "th", "tl", "tr", - "trs", "uk", "ur", "uz", "vi", "wo", "xh", "zh-CN", "zh-TW" - ]; - /* eslint-enable */ - let torSource = new FileSource( - "torbutton", - allLocales, - "resource://torbutton/locale/{locale}/", - true // skip this FileSource locales when computing Services.locale.availableLocales - ); - if (L10nRegistry.registerSources) { - L10nRegistry.registerSources([torSource]); - } else { - L10nRegistry.registerSource(torSource); - } - }; -} - // Module specific constants const kMODULE_NAME = "Startup"; const kMODULE_CONTRACTID = "@torproject.org/startup-observer;1"; @@ -118,8 +82,6 @@ function StartupObserver() { } cleanupCookies(); - - registerTranslations(); } StartupObserver.prototype = { diff --git a/jar.mn b/jar.mn index 8441f006..06caec8f 100644 --- a/jar.mn +++ b/jar.mn @@ -23,6 +23,7 @@ torbutton.jar: # browser branding % override chrome://branding/locale/brand.dtd chrome://torbutton/locale/brand.dtd % override chrome://branding/locale/brand.properties chrome://torbutton/locale/brand.properties +% category l10n-registry torbutton resource://torbutton/locale/{locale}/ # Strings for the about:tbupdate page % override chrome://browser/locale/aboutTBUpdate.dtd chrome://torbutton/locale/aboutTBUpdate.dtd -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Bug 40675: Update tb_builders list in set-config
by gitolite role 03 Nov '22

03 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new fddffa89 Bug 40675: Update tb_builders list in set-config fddffa89 is described below commit fddffa89aeaf44498bcc1ece321313c9b6aaab79 Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Wed Nov 2 20:09:32 2022 +0000 Bug 40675: Update tb_builders list in set-config --- tools/signing/set-config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/signing/set-config b/tools/signing/set-config index 88a5e655..a6658452 100644 --- a/tools/signing/set-config +++ b/tools/signing/set-config @@ -14,4 +14,4 @@ echo "${BASH_ARGV0:-}" | grep -q '\.dry-run$' && DRY_RUN='--dry-run' test -z "${NON_INTERACTIVE:-}" || rsync_progress="--progress" rsync_options="-avH ${rsync_progress:-} ${DRY_RUN:-}" -tb_builders='boklm gk pierov richard sysrqb' +tb_builders='boklm dan henry ma1 pierov richard' -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-102.4.0esr-12.0-2 updated: squash! Firefox preference overrides.
by gitolite role 02 Nov '22

02 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-102.4.0esr-12.0-2 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-102.4.0esr-12.0-2 by this push: new 46dcad9a70ad squash! Firefox preference overrides. 46dcad9a70ad is described below commit 46dcad9a70ad2ed3785f6607e470f927da39be02 Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Wed Nov 2 20:39:17 2022 +0000 squash! Firefox preference overrides. Bug 40183: Disable TLS ciphersuites using SHA-1 --- browser/app/profile/001-base-profile.js | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/browser/app/profile/001-base-profile.js b/browser/app/profile/001-base-profile.js index caf2f00ad8d6..3f93614a7bbb 100644 --- a/browser/app/profile/001-base-profile.js +++ b/browser/app/profile/001-base-profile.js @@ -79,6 +79,18 @@ pref("dom.security.https_only_mode.upgrade_onion", false); // [4] https://www.ssllabs.com/ssl-pulse/ pref("security.ssl.require_safe_negotiation", true); +// Bug 40183: Disable TLS ciphersuites using SHA-1 +// https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40183 +pref("security.ssl3.dhe_rsa_aes_128_sha", false, locked); +pref("security.ssl3.dhe_rsa_aes_256_sha", false, locked); +pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", false, locked); +pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", false, locked); +pref("security.ssl3.ecdhe_rsa_aes_128_sha", false, locked); +pref("security.ssl3.ecdhe_rsa_aes_256_sha", false, locked); +pref("security.ssl3.rsa_aes_128_sha", false, locked); +pref("security.ssl3.rsa_aes_256_sha", false, locked); + + // Misc privacy: Remote pref("browser.send_pings", false); pref("geo.enabled", false); -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser-spec] branch main updated: Bug 40029: FF95 Audit
by gitolite role 02 Nov '22

02 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository tor-browser-spec. The following commit(s) were added to refs/heads/main by this push: new 0fa797b Bug 40029: FF95 Audit 0fa797b is described below commit 0fa797bcb95e704a84dd9aab9abcf3c4c14201ad Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Wed Nov 2 20:47:14 2022 +0000 Bug 40029: FF95 Audit --- audits/FF95_AUDIT | 78 +++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 78 insertions(+) diff --git a/audits/FF95_AUDIT b/audits/FF95_AUDIT new file mode 100644 index 0000000..dd30696 --- /dev/null +++ b/audits/FF95_AUDIT @@ -0,0 +1,78 @@ +Tracking issue: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/issues/40… + +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `6c9b6e1483551f220cd409e4e584349bc74a8231` ( `FIREFOX_RELEASE_95_BASE` ) +- End: `6a277ae5bdf6554793cd0da292a9c9ea804b4ed9` ( `FIREFOX_RELEASE_96_BASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `df1a47fde89f49201b1e839f960e8f16eb95a55d` ( `v87.1.0` ) +- End: `5ceeb43598871a7d8550acc574a6a3fb93803ad7` ( `v87.3.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Android Components: https://github.com/mozilla-mobile/android-components.git + +- Start: `ef09fecd91dfcbffb85d9f4907b76cc9e5a0b70e` ( `v95.0.0` ) +- End: `93066a8f082fa2db3d38d361d0a538c438d2e1b8` ( `v95.0.15` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Fenix: https://github.com/mozilla-mobile/fenix.git + +- Start: `9ab24a371b2dd51d18dab2f7f49facc6d2fd56ad` ( `v95.0.0-beta.1` ) +- End: `d01642a0b1e3819cd2802b42a8a6aae43eb5ff12` ( `releases_v95.0.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Ticket Review ## + +### Review List + +#### 95 https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=F… + +- https://bugzilla.mozilla.org/show_bug.cgi?id=1732792 : @dan https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41125 + - put this feature behind MOZ_PROXY_BYPASS_PROTECTION and uplifted to Firefox +- https://bugzilla.mozilla.org/show_bug.cgi?id=1734262 : @ma1 https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41126 + - nothing to do here +- https://bugzilla.mozilla.org/show_bug.cgi?id=1726524 : @henry https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41127 + - not a blocking issue for release, but kept open so we can review our options and re-enable text to speech while also resisting fingerprinting +- https://bugzilla.mozilla.org/show_bug.cgi?id=1734331 : @boklm https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41128 + - nothing to do here \ No newline at end of file -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated (c9800a15 -> e4c676b3)
by gitolite role 02 Nov '22

02 Nov '22

This is an automated email from the git hooks/post-receive script. pierov pushed a change to branch main in repository builders/tor-browser-build. from c9800a15 Bug 40674: Add Secondary Snowflake Bridgeline new 04302abf Bug 40666: Fix compiler depedencies for Firefox on Windows new e4c676b3 Bug 40667: Update Node.js to 12.22.12 The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: projects/firefox/build | 10 ++++++---- projects/firefox/config | 4 +--- projects/node/config | 4 ++-- 3 files changed, 9 insertions(+), 9 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 2

[builders/rbm] branch main updated (8ed3aa1 -> a6ccc10)
by gitolite role 02 Nov '22

02 Nov '22

This is an automated email from the git hooks/post-receive script. boklm pushed a change to branch main in repository builders/rbm. from 8ed3aa1 Bug 40010: Add git_branch option new 5255072 Bug 40047: fix options in hg_clone_fetch_chdir new a6ccc10 Bug 40048: Add a hg_clone_subdir option The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: doc/rbm_config.asc | 7 +++++++ lib/RBM.pm | 23 +++++++++++++++-------- lib/RBM/DefaultConfig.pm | 1 + 3 files changed, 23 insertions(+), 8 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 2

[tor-browser-spec] branch main updated: Bug 40030: FFF97 Audit
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository tor-browser-spec. The following commit(s) were added to refs/heads/main by this push: new da46045 Bug 40030: FFF97 Audit da46045 is described below commit da46045536cc1c9bb0b144d2ced0a011697bca1d Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Tue Nov 1 21:23:31 2022 +0000 Bug 40030: FFF97 Audit --- audits/FF97_AUDIT | 84 +++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 84 insertions(+) diff --git a/audits/FF97_AUDIT b/audits/FF97_AUDIT new file mode 100644 index 0000000..5fa1bab --- /dev/null +++ b/audits/FF97_AUDIT @@ -0,0 +1,84 @@ +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `e6b83e1727b7e9a6847e6e15bdb935d9937099e4` ( `FIREFOX_RELEASE_97_BASE` ) +- End: `82764d45153d175f4686ead7aac977810fe1fd1b` ( `FIREFOX_RELEASE_98_BASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +**OR** + +### foreach PROBLEMATIC_HASH: +#### $(PROBLEMATIC_HASH) +- Summary +- Review Result: (SAFE|BAD) + +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `df53ad867be7d79899e05797533cd624f1eeb2a2` ( `v90.0.1` ) +- End: `17942945873cdb8be56a9316d3cb8a611b3ef321` ( `v91.1.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Android Components: https://github.com/mozilla-mobile/android-components.git + +- Start: `604152ef532c33d8fc2412fd6d21cf29e9764c51` ( `v97.0.0` ) +- End: `0465a6f809adafd5429c230e890e7f4911f0070e` ( `v97.0.13` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Fenix: https://github.com/mozilla-mobile/fenix.git + +- Start: `84d4a07c0067f7c51757b157c79658a891870d95` ( `v97.0.0-beta.1` ) +- End: `16042ab2a16a64c9c94c8c01ea93578062415ac5` ( `releases_v97.0.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Ticket Review ## + +### Review List + +#### 97 https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=F… + +- https://bugzilla.mozilla.org/show_bug.cgi?id=1741428 @richard https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41130 + - Upstream widl fix required, took mozilla's patch to headers in the meantime + - Created https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… to track upstream bug +- https://bugzilla.mozilla.org/show_bug.cgi?id=1738983 @pierov https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41131 + - Disabled updater and left ticket open to revisitin ESR115 +- https://bugzilla.mozilla.org/show_bug.cgi?id=1432983 @pierov https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41132 + - Nothing to do here +- https://bugzilla.mozilla.org/show_bug.cgi?id=1745092 @boklm https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41133 + - Nothing to do here -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] annotated tag tbb-11.5.7-build1 created (now 92f40e55)
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a change to annotated tag tbb-11.5.7-build1 in repository builders/tor-browser-build. at 92f40e55 (tag) tagging 6d4441e082bd7c20b06071cab037b835573d877a (commit) replaces tbb-11.5.6-build1 by Richard Pospesel on Tue Nov 1 20:52:51 2022 +0000 - Log ----------------------------------------------------------------- Tagging build1 for 11.5.7 -----BEGIN PGP SIGNATURE----- iQJLBAABCAA1FiEEvnyRTMkiztnZPSO33kc2A2PzSywFAmNhhyMXHHJpY2hhcmRA dG9ycHJvamVjdC5vcmcACgkQ3kc2A2PzSyzcSg/+NJItllfAo70oSOyIu+9/uEPl 4gAn8NQPy5JLkrT0EYpP7cGmbkGakSQGC/AOo0zAD6ryqN9bD14iaBgtaajlKZtO LIXTwkq4yFVnJr9sVWb02XA3snmMXWh3/7ykN0a36NRN5XmIC1K/BqhhxIhJ/ndi u+UT6aaD7jY7r0WYNjSdTccIP7S1kxLrjnwXE8V0IxYpulYrauvNApcpCGuRD7+w oEIb5r5bDDEZTYkO+mR+6kJGBKQqM0AAqx7VjA3/nwDZMLUB2RiY6QFMVHEvb81W b9ADigkPtkUIqIx7drVEnkBvvgKLHlnpqC1h4Ai0LjewhvAA2Hv/ZIUGZJ43iou9 bBmiS+LoSCdatWjzEhOGledKaXMHpW80E/wE4WKwNofEkdsSr1Ug/YfKiv0NejMq Qs8NorjAfbY4PK9tB6FI8IPPnv2JntfTCoR9DDcK4f/bcvBKPyY0tLUHyLaWYBKH pK6FranJ5S1v0vPSLQTRKKgLrXImfDjkPe4C/J+jojD7ne/Iw6z65JbFJAxEJpC1 XqGFA3OuUYWDxz3+k3AHJTFPs9H9XWRL3bnk4ghncpLuqrjCn/zmXlj9n1Gs6iRN ulHKwzO6h1pWbHlVFKP8D/KNWWn64bXzogAcrTVRwvLTF4oGtBa1czYxLM6NOKlh /BP0C9uazqzEBEwA010= =eKb9 -----END PGP SIGNATURE----- ----------------------------------------------------------------------- No new revisions were added by this update. -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch maint-11.5 updated: Bug 40672: Prepare stable release 11.5.7
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch maint-11.5 in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/maint-11.5 by this push: new 6d4441e0 Bug 40672: Prepare stable release 11.5.7 6d4441e0 is described below commit 6d4441e082bd7c20b06071cab037b835573d877a Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Tue Nov 1 20:43:13 2022 +0000 Bug 40672: Prepare stable release 11.5.7 --- projects/firefox/config | 2 +- .../tor-browser/Bundle-Data/Docs/ChangeLog.txt | 101 +++++++++++++++++++++ rbm.conf | 5 +- 3 files changed, 104 insertions(+), 4 deletions(-) diff --git a/projects/firefox/config b/projects/firefox/config index 626450e4..5455aac7 100644 --- a/projects/firefox/config +++ b/projects/firefox/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'firefox-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build5' +git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build6' tag_gpg_id: 1 git_url: https://git.torproject.org/tor-browser.git git_submodule: 1 diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 1381e73a..2e438bbb 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,104 @@ +Tor Browser 11.5.7 - November 2 2022 + * Windows + macOS + Linux + * Bug 41413: Backup intl.locale.requested in 11.5.x [tor-browser] + +Tor Browser 12.0a4 - October 28 2022 + * All Plaforms + * Update Translations + * Bug 24686: In Tor Browser context, should network.http.tailing.enabled be set to false? [tor-browser] + * Bug 27127: Audit and enable HTTP/2 push [tor-browser] + * Bug 40057: ensure that CSS4 system colors are not a fingerprinting vector [tor-browser] + * Bug 40058: ensure no locale leaks from new Intl APIs [tor-browser] + * Bug 40251: Clear obsolete prefs after torbutton!27 [tor-browser] + * Bug 40406: Remove Presentation API related prefs [tor-browser] + * Bug 40465: Onion Authentication fails when connecting to a subdomain [tor-browser] + * Bug 40491: Don't auto-pick a v2 address when it's in Onion-Location header [tor-browser] + * Bug 40494: Update Startpage and Blockchair onion search providers [tor-browser] + * Bug 40629: Bump snowflake version to 9ce1de4eee4e [tor-browser-build] + * Bug 40633: Remove Team Cymru hard-coded bridges [tor-browser-build] + * Bug 40646: Don't build Español AR anymore [tor-browser-build] + * Bug 40649: Update meek default bridge [tor-browser-build] + * Bug 40654: Enable uTLS and use the full bridge line for snowflake [tor-browser-build] + * Bug 40665: Snowflake bridge parameters are too long (535 bytes) in 11.5.5 [tor-browser-build] + * Bug 41098: Compare Tor Browser's and GeckoView's profiles [tor-browser] + * Bug 41154: Review Mozilla 1765167: Deprecate Cu.import [tor-browser] + * Bug 41164: Add some #define for the base-browser section [tor-browser] + * Bug 41306: Typo "will not able" in "Tor unexpectedly exited" dialog [tor-browser] + * Bug 41317: Tor Browser leaks banned ports in network.security.ports.banned [tor-browser] + * Bug 41326: Update preference for remoteRecipes [tor-browser] + * Bug 41345: fonts: windows whitelist contains supplemental fonts [tor-browser] + * Bug 41398: Disable Web MIDI API [tor-browser] + * Windows + macOS + Linux + * Update Firefox to 102.4.0esr + * Bug 17400: Decide how to use the multi-lingual Tor Browser in the alpha/release series [tor-browser] + * Bug 40638: Visit our website link after build-to-build upgrade in Nightly channel points to old v2 onion [tor-browser-build] + * Bug 40648: Do not customize update.locale in multi-lingual builds [tor-browser-build] + * Bug 40853: use Subprocess.jsm to launch tor [tor-browser] + * Bug 40933: Migrate remaining tor-launcher functionality to tor-browser [tor-browser] + * Bug 41117: Review Mozilla 1512851: Add Share Menu to File Menu on macOS [tor-browser] + * Bug 41323: Tor-ify notification bar gradient colors (branding) [tor-browser] + * Bug 41337: Add a title to the new identity confirmation [tor-browser] + * Bug 41342: Update the New Identity dialog to the proton modal style [tor-browser] + * Bug 41344: Authenticated Onion Services do not prompt for auth key in 12.0 alpha series [tor-browser] + * Bug 41352: Update or drop the show manual logic in torbutton [tor-browser] + * Bug 41369: Consider a different list-order for locales in language menu [tor-browser] + * Bug 41374: Missing a few torconnect strings in the DTD [tor-browser] + * Bug 41377: Hide `Search for more languages...` from Language selector in multi-locale build [tor-browser] + * Bug 41385: Bootstrap failure is logged but not raised up to about:torconnect [tor-browser] + * Bug 41386: The new tor-launcher has a problem when another Tor is running [tor-browser] + * Bug 41387: New identity and new circuit ended up inside history [tor-browser] + * Bug 41400: Missing onionAuthViewKeys causes "Onion Services Keys" dialog to be empty. [tor-browser] + * Bug 41401: Missing some mozilla icons because we still loading them from "chrome://browser/skin" rather than "chrome://global/skin/icons" [tor-browser] + * Bug 41404: Fix blockchair-onion search extension [tor-browser] + * Windows + * Bug 41149: Review Mozilla 1762576: Firefox is not allowing Symantec DLP to inject DLL into the browser for Data Loss Prevention software [tor-browser] + * Bug 41278: Create Tor Browser styled pdf logo similar to the vanilla Firefox one [tor-browser] + * macOS + * Bug 41294: Bookmarks manager broken in 12.0a2 on MacOS [tor-browser] + * Bug 41348: cherry-pick macOS OSSpinLock replacements [tor-browser] + * Bug 41370: Find a way to ship custom default bookmarks without changing language-packs on macOS [tor-browser] + * Bug 41372: "Japanese" language menu item is localised in multi-locale testbuild (on mac OS) [tor-browser] + * Bug 41379: The new tor-launcher is broken also on macOS [tor-browser] + * Linux + * Bug 40359: Tor Browser Launcher has Wrong Icon [tor-browser] + * Android + * Update GeckoView to 102.4.0esr + * Bug 40631: Stop bundling HTTPS Everywhere on Android [tor-browser-build] + * Bug 41360: Backport Android-specific Firefox 106 to ESR 102.4-based Tor Browser [tor-browser] + * Bug 41394: Implement a setting to always prefer onion sites [tor-browser] + * Build + * All Platforms + * Update Go to 1.19.2 + * Bug 23656: Use .mozconfig files in tor-browser repo for rbm builds [tor-browser-build] + * Bug 28754: make testbuild-android-armv7 stalls during sha256sum step [tor-browser-build] + * Bug 40397: Create a new build target to package tor daemon, pluggable transports and dependencies [tor-browser-build] + * Bug 40619: Make sure translations are taken from gitlab.tpo and not git.tpo [tor-browser-build] + * Bug 40627: Add boklm to torbutton.gpg [torbrowser-build] + * Bug 40634: Update the project/browser path in tools/changelog-format-blog-post and other files [tor-browser-build] + * Bug 40636: Remove https-everywhere from projects/browser/config [tor-browser-build] + * Bug 40639: Remove tor-launcher references [tor-browser-build] + * Bug 40643: Update Richard's key in torbutton.gpg [tor-browser-build] + * Bug 40655: Published tor-expert-bundle tar.gz files should not include their tor-browser-build build id [tor-browser-build] + * Bug 40656: Improve get_last_build_version in tools/signing/nightly/sign-nightly [tor-browser-build] + * Bug 40658: Create an anticensorship team keyring [tor-browser-build] + * Bug 40660: Update changelog-format-blog-post script to point gitlab rather than gitolite [tor-browser-build] + * Bug 40662: Make base-browser nightly build from tag [tor-browser-build] + * Bug 40671: Update langpacks URL [tor-browser-build] + * Bug 41308: Use the same branch for Desktop and GeckoView [tor-browser] + * Bug 41340: Opt in to some of the NIGHTLY_BUILD features [tor-browser] + * Bug 41343: Add -without-wam-sandboxed-libraries to mozconfig-linux-x86_64-dev for local builds [tor-browser] + * Bug 40585: Prune the manual more [tor-browser-build] + * Bug 40663: Do not ship bookmarks in tor-browser-build anymore [tor-browser-build] + * Bug 40669: Remove HTTPS-Everywhere keyring [tor-browser-build] + * Bug 41357: Enable browser toolbox debugging by default for dev builds [tor-browser] + * macOS + * Bug 40158: Add support for macOS AArch64 [tor-browser-build] + * Bug 40464: go 1.18 fails to build on macOS [tor-browser-build] + * Linux + * Bug 40659: Error building goservice for linux in nightly build [tor-browser-build] + * Android + * Bug 40640: Extract Gradle in the toolchain setup [tor-browser-build] + Tor Browser 11.5.6 - October 25 2022 * All Plaforms * Bug 40665: Shorten snowflake bridge line [tor-browser-build] diff --git a/rbm.conf b/rbm.conf index 7f3ac153..0cc1d1cd 100644 --- a/rbm.conf +++ b/rbm.conf @@ -71,11 +71,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '11.5.6' + torbrowser_version: '11.5.7' torbrowser_build: 'build1' torbrowser_incremental_from: - - 11.5.4 - - 11.5.5 + - 11.5.6 project_name: tor-browser multi_lingual: 0 build_mar: 1 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] annotated tag tor-browser-91.13.0esr-11.5-1-build6 created (now f445f71f4194)
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a change to annotated tag tor-browser-91.13.0esr-11.5-1-build6 in repository tor-browser. at f445f71f4194 (tag) tagging a83148635e482714e3c2a38d02b19f7a2241d691 (commit) replaces tor-browser-91.13.0esr-11.5-1-build5 by Richard Pospesel on Tue Nov 1 20:27:37 2022 +0000 - Log ----------------------------------------------------------------- Tagging build6 for 91.13esr-based stable -----BEGIN PGP SIGNATURE----- iQJLBAABCAA1FiEEvnyRTMkiztnZPSO33kc2A2PzSywFAmNhgWQXHHJpY2hhcmRA dG9ycHJvamVjdC5vcmcACgkQ3kc2A2PzSyzRkA/+ML+z4vokNO9R/nfKqXUvkcUM yf21Q6Oy/q9rChrZTKm9+XQZqwL3dGT3OBIqZ20guSFZUqLrUhA4x7BqFjuqIdh/ j2VLDH6xZqdpLvK9l7VoTCWMwLty03YuTadRp1qI1u2HsnzB9DSdfKqII8N0PR+W ZOkYOa0zFqruLaFzavOwfg8FCMhRnYhxbdQe/TEM7PPOuieJ6rQtUzK5AlNSWjTR /2/S74lZHGqLSbbSfIuZG+Vib22pIQd18Wr7PreCj+ImWwEZmotJQxUpdGO5wsJi b5sd8oEe/3RlBV+0gCaZmeAjqOG50Jy3yQ+m5olVJz9XCsIx1ORNOvXvclxuKwBb mG4NWvkHffeZRNQ1OJyKSfdO2E40rdkIzWbF9NJQOM4Uod7ek5Z6Nb50rRhm3h+t 20IGq281oE7hVLSEp4SuY67WBgYDZyr68zIn+tkyFTBLsA1BNwUCfZFSF1IsJW/w 47PufYxCvN8Osg+uP4qC4KN4oKZe5o335Gybw9LGkCtmE2ZhPtUJkZ3fn8YJflZa QJor4FfDRABVNNZdXZNGEAuV3jnDLUwnT4OHoBTkdaQi+FByBvVK+o0/FH4QTSj3 UN9qn7VigyW/IyGRS+07NoHFwrLXVQxc5Nh9hsahDU9mK4OYtVWPLwNeoxTNsQNi PwH/FH8N2zGzfShDsl4= =+Z0Y -----END PGP SIGNATURE----- ----------------------------------------------------------------------- No new revisions were added by this update. -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-91.13.0esr-11.5-1 updated: Bug 41413: reset install supplied locale pref so it persists
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-91.13.0esr-11.5-1 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-91.13.0esr-11.5-1 by this push: new a83148635e48 Bug 41413: reset install supplied locale pref so it persists a83148635e48 is described below commit a83148635e482714e3c2a38d02b19f7a2241d691 Author: Dan Ballard <dan(a)mindstab.net> AuthorDate: Tue Nov 1 08:31:40 2022 -0700 Bug 41413: reset install supplied locale pref so it persists --- browser/components/BrowserGlue.jsm | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/browser/components/BrowserGlue.jsm b/browser/components/BrowserGlue.jsm index d41934720c25..1e6592909968 100644 --- a/browser/components/BrowserGlue.jsm +++ b/browser/components/BrowserGlue.jsm @@ -1416,6 +1416,10 @@ BrowserGlue.prototype = { Services.prefs.clearUserPref("security.enterprise_roots.auto-enabled"); } + if (!Services.prefs.prefHasUserValue("intl.locale.requested")) { + Services.prefs.setStringPref("intl.locale.requested", Services.prefs.getStringPref("intl.locale.requested", "")); + } + if (!Services.prefs.prefHasUserValue(PREF_PDFJS_ISDEFAULT_CACHE_STATE)) { PdfJs.checkIsDefault(this._isNewProfile); } -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch maint-11.5 updated: Bug 41413: make injected intl.locale.requested sticky
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch maint-11.5 in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/maint-11.5 by this push: new ab33dec8 Bug 41413: make injected intl.locale.requested sticky ab33dec8 is described below commit ab33dec8266ccf2cfc6e431fc37fb1f0529acf60 Author: Dan Ballard <dan(a)mindstab.net> AuthorDate: Mon Oct 31 12:38:24 2022 -0700 Bug 41413: make injected intl.locale.requested sticky --- projects/tor-browser/build | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/projects/tor-browser/build b/projects/tor-browser/build index 041e5f0d..691bac90 100644 --- a/projects/tor-browser/build +++ b/projects/tor-browser/build @@ -357,7 +357,7 @@ cp $rootdir/[% c('input_files_by_name/firefox') %]/mar-tools-*.zip "$OUTDIR"/ mkdir -p defaults/preferences cp $rootdir/000-tor-browser.js defaults/preferences/ # Set the locale of the bundle. - echo "pref(\"intl.locale.requested\", \"[% lang %]\");" >> defaults/preferences/000-tor-browser.js + echo "pref(\"intl.locale.requested\", \"[% lang %]\", sticky);" >> defaults/preferences/000-tor-browser.js [% c("touch") %] defaults/preferences/000-tor-browser.js zip -Xm omni.ja defaults/preferences/000-tor-browser.js rm -rf defaults -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Bug 40674: Add Secondary Snowflake Bridgeline
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new c9800a15 Bug 40674: Add Secondary Snowflake Bridgeline c9800a15 is described below commit c9800a153ebd5f17e5a84b2a417b43e0d4ec72fc Author: Shelikhoo <xiaokangwang(a)outlook.com> AuthorDate: Tue Nov 1 11:23:03 2022 +0000 Bug 40674: Add Secondary Snowflake Bridgeline --- projects/common/bridges_list.snowflake.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/projects/common/bridges_list.snowflake.txt b/projects/common/bridges_list.snowflake.txt index 7a4aaf92..70fdca5d 100644 --- a/projects/common/bridges_list.snowflake.txt +++ b/projects/common/bridges_list.snowflake.txt @@ -1 +1,2 @@ snowflake 192.0.2.3:80 2B280B23E1107BB62ABFC40DDCC8824814F80A72 fingerprint=2B280B23E1107BB62ABFC40DDCC8824814F80A72 url=https://snowflake-broker.torproject.net.global.prod.fastly.net/ front=cdn.sstatic.net ice=stun:stun.l.google.com:19302,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.v [...] +snowflake 192.0.2.4:80 8838024498816A039FCBBAB14E6F40A0843051FA fingerprint=8838024498816A039FCBBAB14E6F40A0843051FA url=https://snowflake-broker.torproject.net.global.prod.fastly.net/ front=cdn.sstatic.net ice=stun:stun.l.google.com:19302,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.v [...] -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-102.4.0esr-12.0-2 updated: fixup! Firefox preference overrides.
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-102.4.0esr-12.0-2 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-102.4.0esr-12.0-2 by this push: new ee9f1ebdba26 fixup! Firefox preference overrides. ee9f1ebdba26 is described below commit ee9f1ebdba2693d5b8f53e6c4ea33f71ee291042 Author: hackademix <giorgio(a)maone.net> AuthorDate: Sat Oct 29 20:36:26 2022 +0200 fixup! Firefox preference overrides. --- browser/app/profile/001-base-profile.js | 1 + 1 file changed, 1 insertion(+) diff --git a/browser/app/profile/001-base-profile.js b/browser/app/profile/001-base-profile.js index e0634b5aac6c..caf2f00ad8d6 100644 --- a/browser/app/profile/001-base-profile.js +++ b/browser/app/profile/001-base-profile.js @@ -217,6 +217,7 @@ pref("privacy.resistFingerprinting.letterboxing", true); // not leak that difference if possible. pref("dom.netinfo.enabled", false); pref("network.http.referer.defaultPolicy", 2); // Bug 32948: Make referer behavior consistent regardless of private browing mode status +pref("network.http.referer.XOriginTrimmingPolicy", 2); // Bug 17228: Force trim referer to scheme+host+port in cross-origin requests pref("media.videocontrols.picture-in-picture.enabled", false); // Bug 40148: disable until audited in #40147 pref("network.http.referer.hideOnionSource", true); // Bug 40463: Disable Windows SSO -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Update the Release Prep - Alpha issue template
by gitolite role 01 Nov '22

01 Nov '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new 1c75490b Update the Release Prep - Alpha issue template 1c75490b is described below commit 1c75490b74fbfdded54cc3bbb2924a8fe3421707 Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Tue Oct 25 18:02:18 2022 +0000 Update the Release Prep - Alpha issue template --- .gitlab/issue_templates/Release Prep - Alpha.md | 143 +++++++++++------------- 1 file changed, 67 insertions(+), 76 deletions(-) diff --git a/.gitlab/issue_templates/Release Prep - Alpha.md b/.gitlab/issue_templates/Release Prep - Alpha.md index d396506f..0291960f 100644 --- a/.gitlab/issue_templates/Release Prep - Alpha.md +++ b/.gitlab/issue_templates/Release Prep - Alpha.md @@ -45,43 +45,36 @@ <details> <summary>Android</summary> -### **tba-translation** : https://gitlab.torproject.org/tpo/translation.git -- [ ] Fetch latest and identify new `HEAD` of `fenix-torbrowserstringsxml` branch - - [ ] `origin/fenix-torbrowserstringsxml` : `<INSERT COMMIT HASH HERE>` - -### **tor-android-service** ***(Optional)***: https://gitlab.torproject.org/tpo/applications/tor-android-service.git -- [ ] Fetch latest and identify new `HEAD` of `main` branch - - [ ] `origin/main` : `<INSERT COMMIT HASH HERE>` - ### ***Security Vulnerabilities Backport*** : https://www.mozilla.org/en-US/security/advisories/ +- **NOTE** : this work may have already occurred in the analogous stable release prep issue +- [ ] Create tor-browser issue `Backport Android-specific Firefox $(RR_VERSION) to ESR $(ESR_VERSION)-based Tor Browser` + - [ ] Link new backport issue to this release prep issue - [ ] Go through any `Security Vulnerabilities fixed in Firefox $(RR_VERSION)` (or similar) and create list of CVEs which affect Android that need to be a backported - Potentially Affected Components: - `firefox` - `application-services` - `android-components` - `fenix` -- [ ] Create issue for each backport in `tor-browser` and merge requests for `cherry-pick`'d fixes in each affected component -- [ ] Link each created backport issue to this release prep issue -### **application-services** : *TODO: we need to setup a gitlab copy of this repo that we can apply security backports to* -- [ ] ***(Optional)*** Backport any Android-specific security fixes from Firefox rapid-release +### **application-services** ***(Optional)*** : *TODO: we need to setup a gitlab copy of this repo that we can apply security backports to* +- [ ] Backport any Android-specific security fixes from Firefox rapid-release - [ ] Sign/Tag commit: - Tag : `application-services-$(ESR_VERSION)-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-1-$(BUILD_N)` - - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based (alpha|stable)` + - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based alpha` - [ ] Push tag to `origin` -### **android-components** : https://gitlab.torproject.org/tpo/applications/android-components.git -- [ ] ***(Optional)*** Backport any Android-specific security fixes from Firefox rapid-release +### **android-components** ***(Optional)*** : https://gitlab.torproject.org/tpo/applications/android-components.git +- [ ] Backport any Android-specific security fixes from Firefox rapid-release - [ ] Sign/Tag commit: - Tag : `android-components-$(ESR_VERSION)-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-1-$(BUILD_N)` - - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based (alpha|stable)` + - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based alpha)` - [ ] Push tag to `origin` -### **fenix** : https://gitlab.torproject.org/tpo/applications/fenix.git -- [ ] ***(Optional)*** Backport any Android-specific security fixes from Firefox rapid-release +### **fenix** ***(Optional)*** : https://gitlab.torproject.org/tpo/applications/fenix.git +- [ ] Backport any Android-specific security fixes from Firefox rapid-release - [ ] Sign/Tag commit: - Tag : `tor-browser-$(ESR_VERSION)-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-1-$(BUILD_N)` - - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based (alpha|stable)` + - Message: `Tagging $(BUILD_N) for $(ESR_VERSION)-based alpha)` - [ ] Push tag to `origin` </details> @@ -111,13 +104,13 @@ - [ ] `$(DIFF_TOOL) current_patchset.dif rebased_patchset.deff` - [ ] Open MR for the rebase - [ ] Sign/Tag `base-browser` commit: - - **NOTE** : Currently we are using the `Bug 27511: Add new identity button to toolbar` commit as the dividing line between `base-browser` and `tor-browser` - - **NOTE** : If we need to prepare a release without a rebase that includes a patch that needs to be in the `base-browser` section (such as a Mozilla chemspill release) we will create an entirely new branch with a `-2` suffix + - **NOTE** : Currently we are using the `Bug 40926: Implemented the New Identity feature` commit as the dividing line between `base-browser` and `tor-browser` + - **NOTE** : If we need to prepare a release without a rebase that includes a patch that needs to be in the `base-browser` section (such as a Mozilla chemspill release) we will create an entirely new branch with a `-2` suffix (or increment higher as appropriate) - Tag : `base-browser-$(ESR_VERSION)esr-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-1-build1` - - Message: `Tagging build1 for $(ESR_VERSION)esr-based (alpha|stable)` + - Message: `Tagging build1 for $(ESR_VERSION)esr-based alpha` - [ ] Sign/Tag `tor-browser` commit : - Tag : `tor-browser-$(ESR_VERSION)esr-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-1-$(FIREFOX_BUILD_N)` - - Message : `Tagging $(FIREFOX_BUILD_N) for $(ESR_VERSION)esr-based (alpha|stable)` + - Message : `Tagging $(FIREFOX_BUILD_N) for $(ESR_VERSION)esr-based alpha` - [ ] Push tag to `origin` - [ ] Update Gitlab Default Branch to new Alpha branch: https://gitlab.torproject.org/tpo/applications/tor-browser/-/settings/repos… @@ -127,7 +120,7 @@ <summary>Build/Signing/Publishing</summary> ### tor-browser-build: https://gitlab.torproject.org/tpo/applications/tor-browser-build.git -Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in the various `$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)-maint` (and possibly more specific) branches +Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)` (and possibly more specific) branches - [ ] Update `rbm.conf` - [ ] `var/torbrowser_version` : update to next version @@ -144,9 +137,9 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] `git_hash` : update with `HEAD` commit of project's `base-browser` branch - [ ] Update `projects/tba-translations/config`: - [ ] `git_hash` : update with `HEAD` commit of project's `fenix-torbrowserstringsxml` branch -- [ ] Update `projects/tor-android-service/config` +- [ ] ***(Optional)*** Update `projects/tor-android-service/config` - [ ] `git_hash` : update with `HEAD` commit of project's `main` branch -- [ ] Update `projects/application-services/config`: +- [ ] ***(Optional)*** Update `projects/application-services/config`: **NOTE** we don't have any of our own patches for this project - [ ] `git_hash` : update to appropriate git commit associated with $(ESR_VERSION) - [ ] Update `projects/android-components/config`: @@ -160,11 +153,11 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] ***(Optional)*** If new version available, update `noscript` section of `input_files` in `projects/browser/config` - [ ] `URL` - [ ] `sha256sum` -- [ ] Check for OpenSSL updates here : https://github.com/openssl/openssl/tags +- [ ] Check for OpenSSL updates here : https://www.openssl.org/source/ - [ ] ***(Optional)*** If new 1.X.Y series tag available, update `projects/openssl/config` - [ ] `version` : update to next 1.X.Y release tag - [ ] `input_files/sha256sum` : update to sha256 sum of source tarball -- [ ] Check for tor updates here : https://gitlab.torproject.org/tpo/core/tor/-/tags ; Tor Browser Alpha uses `-alpha` tagged tor, while stable uses the stable series +- [ ] Check for tor updates here : https://gitlab.torproject.org/tpo/core/tor/-/tags ; Tor Browser Alpha uses latest `-alpha` tagged tor (or latest of stable if newer) - [ ] ***(Optional)*** Update `projects/tor/config` - [ ] `version` : update to next release tag - [ ] Check for go updates here : https://golang.org/dl @@ -186,7 +179,7 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] Ensure ChangeLog.txt is sync'd between alpha and stable branches - [ ] Open MR with above changes - [ ] Begin build on `$(BUILD_SERVER)` (and fix any issues which come up) -- [ ] Sign/Tag commit : `make signtag-(alpha|release)` +- [ ] Sign/Tag commit : `make signtag-alpha` - [ ] Push tag to origin ### notify stakeholders @@ -197,52 +190,22 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] Email Tails dev mailing list: tails-dev(a)boum.org - [ ] Provide links to unsigned builds on `$(BUILD_SERVER)` -### blog: https://gitlab.torproject.org/tpo/web/blog.git - -- [ ] Duplicate previous Stable or Alpha release blog post as appropriate to new directory under `content/blog/new-release-tor-browser-$(TOR_BROWSER_VERSION)` and update with info on release : - - [ ] Update Tor Browser version numbers - - [ ] Note any ESR rebase - - [ ] Note any Rapid Release rebase - - [ ] Link to any Firefox security updates - - [ ] Note any updates to : - - [ ] tor - - [ ] OpenSSL - - [ ] go - - [ ] NoScript - - [ ] Convert ChangeLog.txt to markdown format used here by : `tor-browser-build/tools/changelog-format-blog-post` -- [ ] Push to origin as new branch, open 'Draft :' MR -- [ ] Remove `Draft:` from MR once signed-packages are uploaded -- [ ] Merge -- [ ] Publish after CI passes - -### website: https://gitlab.torproject.org/tpo/web/tpo.git -- [ ] `databags/versions.ini` : Update the downloads versions - - `torbrowser-stable/version` : sort of a catch-all for latest stable version - - `torbrowser-stable/win32` : tor version in the expert bundle - - `torbrowser-*-stable/version` : platform-specific stable versions - - `torbrowser-*-alpha/version` : platform-specific alpha versions - - `tor-stable`,`tor-alpha` : set by tor devs, do not touch -- [ ] Push to origin as new branch, open 'Draft :' MR -- [ ] Remove `Draft:` from MR once signed-packages are uploaded -- [ ] Merge -- [ ] Publish after CI passes - ### signing + publishing - [ ] Ensure builders have matching builds - [ ] On `$(STAGING_SERVER)`, ensure updated: - [ ] `tor-browser-build/tools/signing/set-config` - - [ ] `NSS_DB_DIR` : location of the `nssdb7` directory + - `NSS_DB_DIR` : location of the `nssdb7` directory - [ ] `tor-browser-build/tools/signing/set-config.hosts` - - [ ] `ssh_host_builder` : ssh hostname of machine with unsigned builds + - `ssh_host_builder` : ssh hostname of machine with unsigned builds - **NOTE** : `tor-browser-build` is expected to be in the `$HOME` directory) - - [ ] `ssh_host_linux_signer` : ssh hostname of linux signing machine - - [ ] `ssh_host_macos_signer` : ssh hostname of macOS signing machine + - `ssh_host_linux_signer` : ssh hostname of linux signing machine + - `ssh_host_macos_signer` : ssh hostname of macOS signing machine - [ ] `tor-browser-build/tools/signing/set-config.macos-notarization` - - [ ] `macos_notarization_user` : the email login for a tor notariser Apple Developer account + - `macos_notarization_user` : the email login for a tor notariser Apple Developer account - [ ] `tor-browser-build/tools/signing/set-config.tbb-version` - - [ ] `tbb_version` : tor browser version string, same as `var/torbrowser_version` in `rbm.conf` (examples: `11.5a12`, `11.0.13`) - - [ ] `tbb_version_build` : the tor-browser-build build number (if `var/torbrowser_build` in `rbm.conf` is `buildN` then this value is `N`) - - [ ] `tbb_version_type` : either `alpha` for alpha releases or `release` for stable releases + - `tbb_version` : tor browser version string, same as `var/torbrowser_version` in `rbm.conf` (examples: `11.5a12`, `11.0.13`) + - `tbb_version_build` : the tor-browser-build build number (if `var/torbrowser_build` in `rbm.conf` is `buildN` then this value is `N`) + - `tbb_version_type` : either `alpha` for alpha releases or `release` for stable releases - [ ] On `$(STAGING_SERVER)` in a separate `screen` session, run the macOS proxy script: - `cd tor-browser-build/tools/signing/` - `./macos-signer-proxy` @@ -259,23 +222,51 @@ Tor Browser Alpha (and Nightly) are on the `main` branch, while Stable lives in - [ ] `/srv/cdn-master.torproject.org/htdocs/aus1/torbrowser` - [ ] `/srv/dist-master.torproject.org/htdocs/torbrowser` - [ ] Static update components : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` - - [ ] Enable update responses : - - [ ] alpha: `./deploy_update_responses-alpha.sh` - - [ ] release: `./deploy_update_responses-release.sh` + - [ ] Enable update responses : `./deploy_update_responses-alpha.sh` - [ ] Publish APKs to Google Play: - - [ ] Log into https://play.google.com/apps/publish - - [ ] Select `Tor Browser (Alpha)` app - - [ ] Navigate to `Release > Production` and click `Create new release` button + - Log into https://play.google.com/apps/publish + - Select `Tor Browser (Alpha)` app + - Navigate to `Release > Production` and click `Create new release` button - [ ] Upload the `*.multi.apk` APKs - - [ ] If necessary, update the 'Release Name' (should be automatically populated) + - If necessary, update the 'Release Name' (should be automatically populated) - [ ] Update Release Notes - - [ ] Next to 'Release notes', click `Copy from a previous release` + - Next to 'Release notes', click `Copy from a previous release` - [ ] Edit blog post url to point to most recent blog post - - [ ] Save, review, and configure rollout percentage + - Save, review, and configure rollout percentage - [ ] 25% rollout when publishing a scheduled update - [ ] 100% rollout when publishing a security-driven release - [ ] Update rollout percentage to 100% after confirmed no major issues +### website: https://gitlab.torproject.org/tpo/web/tpo.git +- [ ] `databags/versions.ini` : Update the downloads versions + - `torbrowser-stable/version` : sort of a catch-all for latest stable version + - `torbrowser-stable/win32` : tor version in the expert bundle + - `torbrowser-*-stable/version` : platform-specific stable versions + - `torbrowser-*-alpha/version` : platform-specific alpha versions + - `tor-stable`,`tor-alpha` : set by tor devs, do not touch +- [ ] Push to origin as new branch, open 'Draft :' MR +- [ ] Remove `Draft:` from MR once signed-packages are uploaded +- [ ] Merge +- [ ] Publish after CI passes and builds are published + +### blog: https://gitlab.torproject.org/tpo/web/blog.git + +- [ ] Duplicate previous Stable or Alpha release blog post as appropriate to new directory under `content/blog/new-release-tor-browser-$(TOR_BROWSER_VERSION)` and update with info on release : + - [ ] Update Tor Browser version numbers + - [ ] Note any ESR rebase + - [ ] Link to any Firefox security updates from ESR upgrade + - [ ] Link to any Android-specific security backports + - [ ] Note any updates to : + - tor + - OpenSSL + - NoScript + - [ ] Convert ChangeLog.txt to markdown format used here by : + - `tor-browser-build/tools/changelog-format-blog-post` +- [ ] Push to origin as new branch, open `Draft:` MR +- [ ] Remove `Draft:` from MR once signed-packages are uploaded +- [ ] Merge +- [ ] Publish after CI passes and website has been updated + ### tor-announce mailing list - [ ] Send an email to tor-announce(a)lists.torproject.org, using the same content as the blog post and subject "Tor Browser $version is released". -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Fixed some ChangeLog.txt typos
by gitolite role 31 Oct '22

31 Oct '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new 028b5281 Fixed some ChangeLog.txt typos 028b5281 is described below commit 028b5281702c123515452d48b5775fc21c18f0cf Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Mon Oct 31 19:13:57 2022 +0000 Fixed some ChangeLog.txt typos --- projects/browser/Bundle-Data/Docs/ChangeLog.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/browser/Bundle-Data/Docs/ChangeLog.txt b/projects/browser/Bundle-Data/Docs/ChangeLog.txt index 3642afc9..d91ba1b4 100644 --- a/projects/browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/browser/Bundle-Data/Docs/ChangeLog.txt @@ -38,7 +38,7 @@ Tor Browser 12.0a4 - October 28 2022 * Bug 41344: Authenticated Onion Services do not prompt for auth key in 12.0 alpha series [tor-browser] * Bug 41352: Update or drop the show manual logic in torbutton [tor-browser] * Bug 41369: Consider a different list-order for locales in language menu [tor-browser] - * Bug 41374: [torconnect] Missing a few strings in the DTD [tor-browser] + * Bug 41374: Missing a few torconnect strings in the DTD [tor-browser] * Bug 41377: Hide `Search for more languages...` from Language selector in multi-locale build [tor-browser] * Bug 41385: Bootstrap failure is logged but not raised up to about:torconnect [tor-browser] * Bug 41386: The new tor-launcher has a problem when another Tor is running [tor-browser] @@ -88,7 +88,7 @@ Tor Browser 12.0a4 - October 28 2022 * Bug 40669: Remove HTTPS-Everywhere keyring [tor-browser-build] * Bug 41357: Enable browser toolbox debugging by default for dev builds [tor-browser] * macOS - * Bug 40158: Add support for macOS AArch64 + * Bug 40158: Add support for macOS AArch64 [tor-browser-build] * Bug 40464: go 1.18 fails to build on macOS [tor-browser-build] * Linux * Bug 40659: Error building goservice for linux in nightly build [tor-browser-build] -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Update migrate_langs in projects/release/update_responses_config.yml
by gitolite role 31 Oct '22

31 Oct '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new f214e845 Update migrate_langs in projects/release/update_responses_config.yml f214e845 is described below commit f214e8455b2199e8b7fa98c9f3a27f9bacdcc077 Author: Nicolas Vigier <boklm(a)torproject.org> AuthorDate: Mon Oct 31 07:55:37 2022 +0100 Update migrate_langs in projects/release/update_responses_config.yml This reverts the changes from 3a12465d983bb96948486384fd16a91963558f5f to that file. Since we changed in a3f49129c0c697eb7e951c871b8bfa8dd2e1fe27 the default locale to be `ALL`, users of any unkwnown locale should now be redirected to `ALL`, without the need for setting `migrate_langs` for those locales. --- projects/release/update_responses_config.yml | 37 ---------------------------- 1 file changed, 37 deletions(-) diff --git a/projects/release/update_responses_config.yml b/projects/release/update_responses_config.yml index 566bf4d1..0f42a09b 100644 --- a/projects/release/update_responses_config.yml +++ b/projects/release/update_responses_config.yml @@ -39,43 +39,6 @@ versions: migrate_archs: # for example, pt-PT: pt-BR migrate_langs: - ar: ALL - ca: ALL - cs: ALL - da: ALL - de: ALL - el: ALL - en-US: ALL - es-AR: ALL - es-ES: ALL - fa: ALL - fr: ALL - ga-IE: ALL - he: ALL - hu: ALL - id: ALL - is: ALL - it: ALL - ja: ALL - ka: ALL - ko: ALL - lt: ALL - mk: ALL - ms: ALL - my: ALL - nb-NO: ALL - nl: ALL - pl: ALL - pt-BR: ALL - ro: ALL - ru: ALL - sv-SE: ALL - th: ALL - tr: ALL - uk: ALL - vi: ALL - zh-CN: ALL - zh-TW: ALL minSupportedInstructionSet: SSE2 # minSupportedOsVersion on macOS corresponds to the Darwin version ( https://en.wikipedia.org/wiki/Darwin_(operating_system) ) osx64: -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0