- tbb-commits - lists.torproject.org

[Git][tpo/applications/mullvad-browser] Pushed new branch mullvad-browser-140.9.0esr-15.0-1
by Pier Angelo Vendrame (＠pierov) 17 Mar '26

17 Mar '26

Pier Angelo Vendrame pushed new branch mullvad-browser-140.9.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new branch tor-browser-140.9.0esr-15.0-1
by Pier Angelo Vendrame (＠pierov) 17 Mar '26

17 Mar '26

Pier Angelo Vendrame pushed new branch tor-browser-140.9.0esr-15.0-1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag FIREFOX_140_9_0esr_BUILD1
by Pier Angelo Vendrame (＠pierov) 17 Mar '26

17 Mar '26

Pier Angelo Vendrame pushed new tag FIREFOX_140_9_0esr_BUILD1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/FIREF… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag FIREFOX_140_9_0esr_BUILD1
by Pier Angelo Vendrame (＠pierov) 17 Mar '26

17 Mar '26

Pier Angelo Vendrame pushed new tag FIREFOX_140_9_0esr_BUILD1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/FIREFOX_1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-148.0a1-16.0-2] 4 commits: fixup! BB 41736: Customize toolbar for base-browser.
by Pier Angelo Vendrame (＠pierov) 16 Mar '26

16 Mar '26

Pier Angelo Vendrame pushed to branch mullvad-browser-148.0a1-16.0-2 at The Tor Project / Applications / Mullvad Browser Commits: 01980dc9 by Pier Angelo Vendrame at 2026-03-16T13:20:24+01:00 fixup! BB 41736: Customize toolbar for base-browser. TB 44720: Move new identity to Tor Browser. Do not add the new identity button anymore on Base Browser. - - - - - 0ae04431 by Pier Angelo Vendrame at 2026-03-16T13:20:25+01:00 dropme! BB 40926: Implemented the New Identity feature MB 514: Revert "BB 40926: Implemented the New Identity feature" This reverts commit 4a56e172c6ebe04a4eee0c0f0f4d327386ba5150. - - - - - 431ed700 by Pier Angelo Vendrame at 2026-03-16T13:20:25+01:00 fixup! Firefox preference overrides. TB 44720: Move new identity to Tor Browser. Remove the Log levels section from 001-base-profile.js, since it is now empty. - - - - - 8839a280 by Pier Angelo Vendrame at 2026-03-16T13:20:25+01:00 fixup! MB 329: Customize toolbar for mullvad-browser. MB 514: Remove new identity from Mullvad Browser. - - - - - 19 changed files: - browser/app/profile/001-base-profile.js - browser/base/content/appmenu-viewcache.inc.xhtml - browser/base/content/browser-menubar.inc - browser/base/content/browser-sets.inc - browser/base/content/browser-sets.js - browser/base/content/browser.js - browser/base/content/browser.js.globals - browser/base/content/navigator-toolbox.inc.xhtml - browser/components/customizableui/CustomizableUI.sys.mjs - browser/components/customizableui/CustomizeMode.sys.mjs - browser/components/moz.build - − browser/components/newidentity/content/newidentity.js - − browser/components/newidentity/jar.mn - − browser/components/newidentity/moz.build - browser/modules/BrowserWindowTracker.sys.mjs - − browser/themes/shared/icons/new_identity.svg - browser/themes/shared/jar.inc.mn - browser/themes/shared/toolbarbutton-icons.css - eslint-file-globals.config.mjs Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -783,9 +783,6 @@ pref("privacy.globalprivacycontrol.pbmode.enabled", true); // Disable platform text recognition functionality (tor-browser#42057) pref("dom.text-recognition.enabled", false); -// Log levels -pref("browser.new_identity.log_level", "Info"); - #ifdef XP_WIN pref("browser.taskbar.lists.enabled", false); pref("browser.taskbar.lists.frequent.enabled", false); ===================================== browser/base/content/appmenu-viewcache.inc.xhtml ===================================== @@ -63,12 +63,6 @@ key="key_privatebrowsing" command="Tools:PrivateBrowsing"/> <toolbarseparator/> - <toolbarbutton id="appMenu-new-identity" - class="subviewbutton" - data-l10n-id="appmenuitem-new-identity" - key="new-identity-key" - command="cmd_newIdentity"/> - <toolbarseparator/> <toolbarbutton id="appMenu-bookmarks-button" class="subviewbutton subviewbutton-nav" data-l10n-id="library-bookmarks-menu" ===================================== browser/base/content/browser-menubar.inc ===================================== @@ -26,12 +26,6 @@ <menuitem id="menu_newPrivateWindow" command="Tools:PrivateBrowsing" key="key_privatebrowsing" data-l10n-id="menu-file-new-private-window"/> - <menuseparator/> - <menuitem id="menu_newIdentity" - command="cmd_newIdentity" - key="new-identity-key" - data-l10n-id="menu-new-identity"/> - <menuseparator/> <menuitem id="menu_openLocation" hidden="true" command="Browser:OpenLocation" ===================================== browser/base/content/browser-sets.inc ===================================== @@ -116,8 +116,6 @@ #ifdef XP_MACOSX <command id="zoomWindow" data-l10n-id="window-zoom-command" /> #endif - - <command id="cmd_newIdentity" /> </commandset> #include ../../components/places/content/placesCommands.inc.xhtml <commandset id="splitViewCommands"> @@ -415,5 +413,4 @@ modifiers="accel,alt" internal="true"/> #endif - <key id="new-identity-key" modifiers="accel shift" key="U" command="cmd_newIdentity"/> </keyset> ===================================== browser/base/content/browser-sets.js ===================================== @@ -267,9 +267,6 @@ document.addEventListener( case "zoomWindow": zoomWindow(); break; - case "cmd_newIdentity": - NewIdentityButton.onCommand(event); - break; } }); ===================================== browser/base/content/browser.js ===================================== @@ -271,11 +271,6 @@ XPCOMUtils.defineLazyScriptGetter( ["SecurityLevelButton"], "chrome://browser/content/securitylevel/securityLevel.js" ); -XPCOMUtils.defineLazyScriptGetter( - this, - ["NewIdentityButton"], - "chrome://browser/content/newidentity.js" -); XPCOMUtils.defineLazyScriptGetter( this, "gEditItemOverlay", ===================================== browser/base/content/browser.js.globals ===================================== @@ -239,6 +239,5 @@ "ToolbarDropHandler", "ProfilesDatastoreService", "gTrustPanelHandler", - "SecurityLevelButton", - "NewIdentityButton" + "SecurityLevelButton" ] ===================================== browser/base/content/navigator-toolbox.inc.xhtml ===================================== @@ -578,11 +578,6 @@ command="cmd_newNavigator" tooltip="dynamic-shortcut-tooltip"/> - <toolbarbutton id="new-identity-button" - command="cmd_newIdentity" - class="toolbarbutton-1 chromeclass-toolbar-additional" - data-l10n-id="toolbar-new-identity"/> - <toolbarbutton id="fullscreen-button" class="toolbarbutton-1 chromeclass-toolbar-additional" observes="View:FullScreen" command="View:FullScreen" ===================================== browser/components/customizableui/CustomizableUI.sys.mjs ===================================== @@ -79,7 +79,7 @@ const NoScriptId = "_73a6fe31-595d-460b-a920-fcc0f8843232_-browser-action"; /** * The current version for mullvad browser. */ -var kVersionMullvadBrowser = 1; +var kVersionMullvadBrowser = 2; /** * Buttons removed from built-ins by version they were removed. kVersion must be @@ -363,7 +363,6 @@ var CustomizableUIInternal = { // _updateForMullvadBrowser. // Do not show the security-level-button by default in Mullvad Browser. // See mullvad-browser#329 - "new-identity-button", "downloads-button", AppConstants.MOZ_DEV_EDITION ? "developer-button" : null, "fxa-toolbar-menu-button", @@ -1004,8 +1003,8 @@ var CustomizableUIInternal = { navbarPlacements.splice(before, 1); } - // Make sure the security-level-button and new-identity-button appears - // in the toolbar. + // Make sure security-level-button and new-identity-button appear in the + // toolbar. for (const id of ["new-identity-button", "security-level-button"]) { let alreadyAdded = false; for (const placements of Object.values(gSavedState.placements)) { @@ -1127,6 +1126,17 @@ var CustomizableUIInternal = { } } } + + if (currentVersion < 2) { + // mullvad-browser#514: Clean up the new-identity-button placement, which + // no longer exists. + for (const placements of Object.values(gSavedState.placements)) { + const buttonIndex = placements.indexOf("new-identity-button"); + if (buttonIndex !== -1) { + placements.splice(buttonIndex, 1); + } + } + } }, /** ===================================== browser/components/customizableui/CustomizeMode.sys.mjs ===================================== @@ -252,7 +252,6 @@ export class CustomizeMode { "Browser:NewUserContextTab", "Tools:PrivateBrowsing", "zoomWindow", - "cmd_newIdentity", ]); /** ===================================== browser/components/moz.build ===================================== @@ -47,7 +47,6 @@ DIRS += [ "mozcachedohttp", "mullvad-browser", "multilineeditor", - "newidentity", # Exclude newtab component. tor-browser#43886. "originattributes", "pagedata", ===================================== browser/components/newidentity/content/newidentity.js deleted ===================================== @@ -1,560 +0,0 @@ -"use strict"; - -// Use a lazy getter because NewIdentityButton is declared more than once -// otherwise. -ChromeUtils.defineLazyGetter(this, "NewIdentityButton", () => { - // Logger adapted from CustomizableUI.jsm - const logger = (() => { - const consoleOptions = { - maxLogLevelPref: "browser.new_identity.log_level", - prefix: "NewIdentity", - }; - return console.createInstance(consoleOptions); - })(); - - const topics = Object.freeze({ - newIdentityRequested: "new-identity-requested", - }); - - /** - * This class contains the actual implementation of the various step involved - * when running new identity. - */ - class NewIdentityImpl { - async run() { - this.disableAllJS(); - await this.clearState(); - await this.openNewWindow(); - this.closeOldWindow(); - this.broadcast(); - } - - // Disable JS (as a defense-in-depth measure) - - disableAllJS() { - logger.info("Disabling JavaScript"); - const enumerator = Services.wm.getEnumerator("navigator:browser"); - while (enumerator.hasMoreElements()) { - const win = enumerator.getNext(); - this.disableWindowJS(win); - } - } - - disableWindowJS(win) { - const browsers = win.gBrowser?.browsers || []; - for (const browser of browsers) { - if (!browser) { - continue; - } - this.disableBrowserJS(browser); - try { - browser.webNavigation?.stop(browser.webNavigation.STOP_ALL); - } catch (e) { - logger.warn("Could not stop navigation", e, browser.currentURI); - } - } - } - - disableBrowserJS(browser) { - if (!browser) { - return; - } - // Does the following still apply? - // Solution from: https://bugzilla.mozilla.org/show_bug.cgi?id=409737 - // XXX: This kills the entire window. We need to redirect - // focus and inform the user via a lightbox. - const eventSuppressor = browser.contentWindow?.windowUtils; - if (browser.browsingContext) { - browser.browsingContext.allowJavascript = false; - } - try { - // My estimation is that this does not get the inner iframe windows, - // but that does not matter, because iframes should be destroyed - // on the next load. - // Should we log when browser.contentWindow is null? - if (browser.contentWindow) { - browser.contentWindow.name = null; - browser.contentWindow.window.name = null; - } - } catch (e) { - logger.warn("Failed to reset window.name", e); - } - eventSuppressor?.suppressEventHandling(true); - } - - // Clear state - - async clearState() { - logger.info("Clearing the state"); - this.closeTabs(); - this.clearSearchBar(); - this.clearPrivateSessionHistory(); - this.clearHTTPAuths(); - this.clearCryptoTokens(); - this.clearOCSPCache(); - this.clearSecuritySettings(); - this.clearImageCaches(); - this.clearStorage(); - this.clearPreferencesAndPermissions(); - await this.clearData(); - await this.reloadAddons(); - this.clearConnections(); - this.clearPrivateSession(); - } - - clearSiteSpecificZoom() { - Services.prefs.setBoolPref( - "browser.zoom.siteSpecific", - !Services.prefs.getBoolPref("browser.zoom.siteSpecific") - ); - Services.prefs.setBoolPref( - "browser.zoom.siteSpecific", - !Services.prefs.getBoolPref("browser.zoom.siteSpecific") - ); - } - - closeTabs() { - if ( - !Services.prefs.getBoolPref("browser.new_identity.close_newnym", true) - ) { - logger.info("Not closing tabs"); - return; - } - // TODO: muck around with browser.tabs.warnOnClose.. maybe.. - logger.info("Closing tabs..."); - const enumerator = Services.wm.getEnumerator("navigator:browser"); - const windowsToClose = []; - while (enumerator.hasMoreElements()) { - const win = enumerator.getNext(); - const browser = win.gBrowser; - if (!browser) { - logger.warn("No browser for possible window to close"); - continue; - } - const tabsToRemove = []; - for (const b of browser.browsers) { - const tab = browser.getTabForBrowser(b); - if (tab) { - tabsToRemove.push(tab); - } else { - logger.warn("Browser has a null tab", b); - } - } - if (win == window) { - browser.addWebTab("about:blank"); - } else { - // It is a bad idea to alter the window list while iterating - // over it, so add this window to an array and close it later. - windowsToClose.push(win); - } - // Close each tab except the new blank one that we created. - tabsToRemove.forEach(aTab => browser.removeTab(aTab)); - } - // Close all XUL windows except this one. - logger.info("Closing windows..."); - windowsToClose.forEach(aWin => aWin.close()); - logger.info("Closed all tabs"); - - // This clears the undo tab history. - const tabs = Services.prefs.getIntPref( - "browser.sessionstore.max_tabs_undo" - ); - Services.prefs.setIntPref("browser.sessionstore.max_tabs_undo", 0); - Services.prefs.setIntPref("browser.sessionstore.max_tabs_undo", tabs); - } - - clearSearchBar() { - logger.info("Clearing searchbox"); - // Bug #10800: Trying to clear search/find can cause exceptions - // in unknown cases. Just log for now. - try { - const searchBar = window.document.getElementById("searchbar"); - if (searchBar) { - searchBar.textbox.reset(); - } - } catch (e) { - logger.error("Exception on clearing search box", e); - } - try { - if (gFindBarInitialized) { - const findbox = gFindBar.getElement("findbar-textbox"); - findbox.reset(); - gFindBar.close(); - } - } catch (e) { - logger.error("Exception on clearing find bar", e); - } - } - - clearPrivateSessionHistory() { - logger.info("Emitting Private Browsing Session clear event"); - Services.obs.notifyObservers(null, "browser:purge-session-history"); - } - - clearHTTPAuths() { - if ( - !Services.prefs.getBoolPref( - "browser.new_identity.clear_http_auth", - true - ) - ) { - logger.info("Skipping HTTP Auths, because disabled"); - return; - } - logger.info("Clearing HTTP Auths"); - const auth = Cc["@mozilla.org/network/http-auth-manager;1"].getService( - Ci.nsIHttpAuthManager - ); - auth.clearAll(); - } - - clearCryptoTokens() { - logger.info("Clearing Crypto Tokens"); - // Clear all crypto auth tokens. This includes calls to PK11_LogoutAll(), - // nsNSSComponent::LogoutAuthenticatedPK11() and clearing the SSL session - // cache. - const sdr = Cc["@mozilla.org/security/sdr;1"].getService( - Ci.nsISecretDecoderRing - ); - sdr.logoutAndTeardown(); - } - - clearOCSPCache() { - // nsNSSComponent::Observe() watches security.OCSP.enabled, which calls - // setValidationOptions(), which in turn calls setNonPkixOcspEnabled() which, - // if security.OCSP.enabled is set to 0, calls CERT_DisableOCSPChecking(), - // which calls CERT_ClearOCSPCache(). - // See: https://mxr.mozilla.org/comm-esr24/source/mozilla/security/manager/ssl/src/… - const ocsp = Services.prefs.getIntPref("security.OCSP.enabled"); - Services.prefs.setIntPref("security.OCSP.enabled", 0); - Services.prefs.setIntPref("security.OCSP.enabled", ocsp); - } - - clearSecuritySettings() { - // Clear site security settings - const sss = Cc["@mozilla.org/ssservice;1"].getService( - Ci.nsISiteSecurityService - ); - sss.clearAll(); - } - - clearImageCaches() { - logger.info("Clearing Image Cache"); - // In Firefox 18 and newer, there are two image caches: one that is used - // for regular browsing, and one that is used for private browsing. - this.clearImageCacheRB(); - this.clearImageCachePB(); - } - - clearImageCacheRB() { - try { - const imgTools = Cc["@mozilla.org/image/tools;1"].getService( - Ci.imgITools - ); - const imgCache = imgTools.getImgCacheForDocument(null); - // Evict all but chrome cache - imgCache.clearCache(false); - } catch (e) { - // FIXME: This can happen in some rare cases involving XULish image data - // in combination with our image cache isolation patch. Sure isn't - // a good thing, but it's not really a super-cookie vector either. - // We should fix it eventually. - logger.error("Exception on image cache clearing", e); - } - } - - clearImageCachePB() { - const imgTools = Cc["@mozilla.org/image/tools;1"].getService( - Ci.imgITools - ); - try { - // Try to clear the private browsing cache. To do so, we must locate a - // content document that is contained within a private browsing window. - let didClearPBCache = false; - const enumerator = Services.wm.getEnumerator("navigator:browser"); - while (!didClearPBCache && enumerator.hasMoreElements()) { - const win = enumerator.getNext(); - let browserDoc = win.document.documentElement; - if (!browserDoc.hasAttribute("privatebrowsingmode")) { - continue; - } - const tabbrowser = win.gBrowser; - if (!tabbrowser) { - continue; - } - for (const browser of tabbrowser.browsers) { - const doc = browser.contentDocument; - if (doc) { - const imgCache = imgTools.getImgCacheForDocument(doc); - // Evict all but chrome cache - imgCache.clearCache(false); - didClearPBCache = true; - break; - } - } - } - } catch (e) { - logger.error("Exception on private browsing image cache clearing", e); - } - } - - clearStorage() { - logger.info("Clearing Disk and Memory Caches"); - try { - Services.cache2.clear(); - } catch (e) { - logger.error("Exception on cache clearing", e); - } - - logger.info("Clearing Cookies and DOM Storage"); - Services.cookies.removeAll(); - } - - clearPreferencesAndPermissions() { - logger.info("Clearing Content Preferences"); - ChromeUtils.defineESModuleGetters(this, { - PrivateBrowsingUtils: - "resource://gre/modules/PrivateBrowsingUtils.sys.mjs", - }); - const pbCtxt = PrivateBrowsingUtils.privacyContextFromWindow(window); - const cps = Cc["@mozilla.org/content-pref/service;1"].getService( - Ci.nsIContentPrefService2 - ); - cps.removeAllDomains(pbCtxt); - this.clearSiteSpecificZoom(); - - logger.info("Clearing permissions"); - try { - Services.perms.removeAll(); - } catch (e) { - // Actually, this catch does not appear to be needed. Leaving it in for - // safety though. - logger.error("Cannot clear permissions", e); - } - - logger.info("Syncing prefs"); - // Force prefs to be synced to disk - Services.prefs.savePrefFile(null); - } - - async clearData() { - logger.info("Calling the clearDataService"); - const flags = - Services.clearData.CLEAR_ALL ^ Services.clearData.CLEAR_PASSWORDS; - return new Promise(resolve => { - Services.clearData.deleteData(flags, { - onDataDeleted(code) { - if (code !== Cr.NS_OK) { - logger.error(`Error while calling the clearDataService: ${code}`); - } - // We always resolve, because we do not want to interrupt the new - // identity procedure. - resolve(); - }, - }); - }); - } - - clearConnections() { - logger.info("Closing open connections"); - // Clear keep-alive - Services.obs.notifyObservers(this, "net:prune-all-connections"); - } - - clearPrivateSession() { - logger.info("Ending any remaining private browsing sessions."); - Services.obs.notifyObservers(null, "last-pb-context-exited"); - } - - async reloadAddons() { - logger.info("Reloading add-ons to clear their temporary state."); - // Reload all active extensions except search engines, which would throw. - const addons = await AddonManager.getAddonsByTypes(["extension"]); - const isSearchEngine = async addon => - (await (await fetch(addon.getResourceURI("manifest.json").spec)).json()) - ?.chrome_settings_overrides?.search_provider; - const reloadIfNeeded = async addon => - addon.isActive && !(await isSearchEngine(addon)) && addon.reload(); - await Promise.all(addons.map(addon => reloadIfNeeded(addon))); - } - - // Broadcast as a hook to clear other data - - broadcast() { - logger.info("Broadcasting the new identity"); - Services.obs.notifyObservers({}, topics.newIdentityRequested); - } - - // Window management - - openNewWindow() { - logger.info("Opening a new window"); - return new Promise(resolve => { - // Open a new window forcing the about:privatebrowsing page (tor-browser#41765) - // unless user explicitly overrides this policy (tor-browser #42236) - const trustedHomePref = "browser.startup.homepage.new_identity"; - const homeURL = HomePage.get(); - const defaultHomeURL = HomePage.getDefault(); - const isTrustedHome = - homeURL === defaultHomeURL || - homeURL === "chrome://browser/content/blanktab.html" || // about:blank - homeURL === Services.prefs.getStringPref(trustedHomePref, ""); - const isCustomHome = - Services.prefs.getIntPref("browser.startup.page") === 1; - const win = OpenBrowserWindow({ - private: isCustomHome && isTrustedHome ? "private" : "no-home", - }); - // This mechanism to know when the new window is ready is used by - // OpenBrowserWindow itself (see its definition in browser.js). - win.addEventListener( - "MozAfterPaint", - () => { - resolve(); - if (isTrustedHome || !isCustomHome) { - return; - } - const tbl = win.TabsProgressListener; - const { onLocationChange } = tbl; - tbl.onLocationChange = (...args) => { - tbl.onLocationChange = onLocationChange; - tbl.onLocationChange(...args); - const url = URL.parse(homeURL); - if (!url) { - // malformed URL, bail out - return; - } - - let displayAddress = url.hostname; - if (!displayAddress) { - // no host, use full address and truncate if too long - const MAX_LEN = 32; - displayAddress = url.href; - if (displayAddress.length > MAX_LEN) { - displayAddress = `${displayAddress.substring(0, MAX_LEN)}…`; - } - } - const callback = () => { - Services.prefs.setStringPref(trustedHomePref, homeURL); - win.BrowserHome(); - }; - const notificationBox = win.gBrowser.getNotificationBox(); - notificationBox.appendNotification( - "new-identity-safe-home", - { - label: { - "l10n-id": "new-identity-blocked-home-notification", - "l10n-args": { url: displayAddress }, - }, - priority: notificationBox.PRIORITY_INFO_MEDIUM, - }, - [ - { - "l10n-id": "new-identity-blocked-home-ignore-button", - callback, - }, - ] - ); - }; - }, - { once: true } - ); - }); - } - - closeOldWindow() { - logger.info("Closing the old window"); - - // Run garbage collection and cycle collection after window is gone. - // This ensures that blob URIs are forgotten. - window.addEventListener("unload", function () { - logger.debug("Initiating New Identity GC pass"); - // Clear out potential pending sInterSliceGCTimer: - window.windowUtils.runNextCollectorTimer(); - // Clear out potential pending sICCTimer: - window.windowUtils.runNextCollectorTimer(); - // Schedule a garbage collection in 4000-1000ms... - window.windowUtils.garbageCollect(); - // To ensure the GC runs immediately instead of 4-10s from now, we need - // to poke it at least 11 times. - // We need 5 pokes for GC, 1 poke for the interSliceGC, and 5 pokes for - // CC. - // See nsJSContext::RunNextCollectorTimer() in - // https://mxr.mozilla.org/mozilla-central/source/dom/base/nsJSEnvironment.cpp…. - // XXX: We might want to make our own method for immediate full GC... - for (let poke = 0; poke < 11; poke++) { - window.windowUtils.runNextCollectorTimer(); - } - // And now, since the GC probably actually ran *after* the CC last time, - // run the whole thing again. - window.windowUtils.garbageCollect(); - for (let poke = 0; poke < 11; poke++) { - window.windowUtils.runNextCollectorTimer(); - } - logger.debug("Completed New Identity GC pass"); - }); - - // Close the current window for added safety - window.close(); - } - } - - let newIdentityInProgress = false; - return { - async onCommand() { - try { - // Ignore if there's a New Identity in progress to avoid race - // conditions leading to failures (see bug 11783 for an example). - if (newIdentityInProgress) { - return; - } - newIdentityInProgress = true; - - const prefConfirm = "browser.new_identity.confirm_newnym"; - const shouldConfirm = Services.prefs.getBoolPref(prefConfirm, true); - if (shouldConfirm) { - const [titleString, bodyString, checkboxString, restartString] = - await document.l10n.formatValues([ - { id: "new-identity-dialog-title" }, - { id: "new-identity-dialog-description" }, - { id: "restart-warning-dialog-do-not-warn-checkbox" }, - { id: "restart-warning-dialog-restart-button" }, - ]); - const flags = - Services.prompt.BUTTON_POS_0 * - Services.prompt.BUTTON_TITLE_IS_STRING + - Services.prompt.BUTTON_POS_0_DEFAULT + - Services.prompt.BUTTON_DEFAULT_IS_DESTRUCTIVE + - Services.prompt.BUTTON_POS_1 * Services.prompt.BUTTON_TITLE_CANCEL; - const propBag = await Services.prompt.asyncConfirmEx( - window.browsingContext, - Services.prompt.MODAL_TYPE_INTERNAL_WINDOW, - titleString, - bodyString, - flags, - restartString, - null, - null, - checkboxString, - false - ); - if (propBag.get("buttonNumClicked") !== 0) { - return; - } - if (propBag.get("checked")) { - Services.prefs.setBoolPref(prefConfirm, false); - } - } - - const impl = new NewIdentityImpl(); - await impl.run(); - } catch (e) { - // If something went wrong make sure we have the New Identity button - // enabled (again). - logger.error("Unexpected error", e); - window.alert("New Identity unexpected error: " + e); - } finally { - newIdentityInProgress = false; - } - }, - }; -}); ===================================== browser/components/newidentity/jar.mn deleted ===================================== @@ -1,2 +0,0 @@ -browser.jar: - content/browser/newidentity.js (content/newidentity.js) ===================================== browser/components/newidentity/moz.build deleted ===================================== @@ -1 +0,0 @@ -JAR_MANIFESTS += ["jar.mn"] ===================================== browser/modules/BrowserWindowTracker.sys.mjs ===================================== @@ -345,10 +345,7 @@ export const BrowserWindowTracker = { let loadURIString; if (isPrivate && lazy.PrivateBrowsingUtils.enabled) { windowFeatures += ",private"; - if ( - (!args && !lazy.PrivateBrowsingUtils.permanentPrivateBrowsing) || - args?.private === "no-home" - ) { + if (!args && !lazy.PrivateBrowsingUtils.permanentPrivateBrowsing) { // Force the new window to load about:privatebrowsing instead of the // default home page. loadURIString = "about:privatebrowsing"; ===================================== browser/themes/shared/icons/new_identity.svg deleted ===================================== @@ -1,9 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> - <g fill="context-fill" fill-opacity="context-fill-opacity"> - <path d="m13.5383 14.5627c-.1712-.0053-.3194-.1334-.3505-.3028-.0419-.294-.1441-.5789-.3001-.8369-.2583-.1558-.5436-.2579-.838-.2998-.1694-.0313-.2974-.1793-.3026-.3501-.0053-.1708.1136-.3146.2813-.3402.2944-.0329.5762-.1254.8284-.272.1426-.2476.2313-.5243.2608-.8129.0237-.1679.1662-.2884.3372-.2851.1699.0042.3181.1295.3517.2973.0471.2931.1533.5763.312.8323.2565.1573.5396.263.8326.3109.1682.0345.2929.1836.2958.3536.0028.17-.1171.3116-.2843.3357-.2894.0285-.5669.1172-.8147.2604-.1462.2521-.2386.5335-.2717.8274-.025.167-.1675.2861-.3379.2822z"/> - <path d="m6.49858 2.99992c-.14675-.00459-.27377-.11436-.3004-.25961-.03593-.25196-.12354-.49621-.25729-.71731-.22137-.13358-.46594-.22109-.71822-.25699-.14526-.02682-.25492-.15363-.25945-.30004-.00454-.14641.09737-.26967.24112-.29164.25236-.02817.49393-.10747.71013-.233093.12217-.2123.19825-.449454.22353-.696834.0203-.143878.14242-.24714456.28897-.24434753.14565.00358504.27273.11100153.30149.25484453.0404.251183.13139.493923.2674.713349.21988.134841.46256.225461.71364.266481.14417.02957.25114.15744.25358.30313.00244.1457-.10035.26707-.24368.28774-.2481.02441-.48592.10041-.69835.22319-.1253.2161-.20449.45729-.23284.7092-.0214.14312-.14361.24521-.28963.24193z"/> - <path d="m1.82093 5.3609c-.15279-.00473-.28512-.11875-.31315-.26981-.02739-.18014-.08781-.35525-.1782-.51643-.16152-.09021-.336989-.15052-.517512-.17788-.151437-.02794-.265749-.16003-.270474-.31254-.004724-.15251.101518-.2809.251381-.30378.181146-.02145.355265-.07593.513815-.16075.08209-.15545.13363-.32622.15197-.50355.02095-.15059.14903-.25861.3025-.25512.15164.00368.28404.11525.31428.26484.03021.18029.09338.35503.18632.51538.16048.09192.33508.15452.51517.18469.1503.0308.26181.164.26435.31577.00254.15176-.10462.27819-.25404.29971-.17764.01914-.34855.07141-.50396.15412-.08502.1582-.13963.33194-.16114.5127-.022.14911-.14912.25571-.30131.25265z"/> - <path clip-rule="evenodd" d="m15.3213 1.06694c.2441-.244076.2441-.639804 0-.883882-.2441-.2440775-.6398-.2440774-.8839 0l-5.96506 5.965062h-.50519c-1.996-1.09517-4.49023.42233-6.49079 1.63948-.41545.25277-.80961.49258-1.173597.69335-.16756.10002-.289261.26641-.30145394.48048-.01219156.21407.06079654.41038.21802994.56743l1.243691 1.24224 2.37084-1.02603c.15392-.06661.30331.14022.18601.25753l-1.66213 1.6621 1.46329 1.4616 1.66126-1.6613c.1173-.1173.32413.0321.25752.186l-1.02482 2.3682 1.25462 1.2531c.15724.157.35379.23.56815.2178.19095-.0561.35851-.1561.45869-.3234.20012-.3592.43577-.7455.68321-1.1511 1.22241-2.0039 2.73233-4.47901 1.66484-6.47533v-.49654zm-7.46715 6.55077c1.12692 1.12692.64113 2.69369-.05278 3.70149h-.50137l-3.13-3.1492v-.5c1.00858-.68566 2.56556-1.17088 3.68415-.05229z" fill-rule="evenodd"/> - </g> -</svg> ===================================== browser/themes/shared/jar.inc.mn ===================================== @@ -332,5 +332,3 @@ skin/classic/browser/illustrations/market-opt-in.svg (../shared/illustrations/market-opt-in.svg) skin/classic/browser/illustrations/yelpRealtime-opt-in.svg (../shared/illustrations/yelpRealtime-opt-in.svg) - - skin/classic/browser/new_identity.svg (../shared/icons/new_identity.svg) ===================================== browser/themes/shared/toolbarbutton-icons.css ===================================== @@ -87,10 +87,6 @@ list-style-image: url("chrome://browser/skin/new-tab.svg"); } -#new-identity-button { - list-style-image: url("chrome://browser/skin/new_identity.svg"); -} - #privatebrowsing-button { list-style-image: url("chrome://browser/skin/privateBrowsing.svg"); } ===================================== eslint-file-globals.config.mjs ===================================== @@ -134,7 +134,6 @@ export default [ "testing/mochitest/browser-test.js", "toolkit/components/printing/content/printPreviewPagination.js", "toolkit/components/printing/content/printUtils.js", - "browser/components/newidentity/content/newidentity.js", ], languageOptions: { globals: mozilla.environments["browser-window"].globals, View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/e8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/e8… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-148.0a1-16.0-2] fixup! MB 188: Customize Gitlab Issue and Merge templates
by Dan Ballard (＠dan) 12 Mar '26

12 Mar '26

Dan Ballard pushed to branch mullvad-browser-148.0a1-16.0-2 at The Tor Project / Applications / Mullvad Browser Commits: e8cc5cf2 by Dan Ballard at 2026-03-12T11:41:02-07:00 fixup! MB 188: Customize Gitlab Issue and Merge templates Add notification final step - - - - - 1 changed file: - .gitlab/issue_templates/060 Rebase - Alpha.md Changes: ===================================== .gitlab/issue_templates/060 Rebase - Alpha.md ===================================== @@ -13,7 +13,7 @@ The step-by-step rebase process is detailed on the [Rebase Process](https://gitl - Rebase Mullvad Browser - Prepare the rebase - [ ] Push the `base-browser-*` tag - - [ ] Freeze the current default branch + - [ ] Freeze the current default branch (if not frozen during the tor-browser rebase) - [ ] Create the target branch (`mullvad-browser-...-1`) - Do the rebase - [ ] Cherry-pick commits until `mullvad-browser-...-build1` @@ -27,6 +27,7 @@ The step-by-step rebase process is detailed on the [Rebase Process](https://gitl - [ ] Tag and update the repository - [ ] Tag `mullvad-browser-...-build1` - [ ] Make `mullvad-browser-...-2` the default branch + - [ ] Send notification email to applications-team of the completed rebase and new open branch --- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/e8c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/e8c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.8.0esr-15.0-1] fixup! TB 43107: Disable remoting by default
by Pier Angelo Vendrame (＠pierov) 12 Mar '26

12 Mar '26

Pier Angelo Vendrame pushed to branch tor-browser-140.8.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: bc519e86 by Pier Angelo Vendrame at 2026-03-11T18:24:59+01:00 fixup! TB 43107: Disable remoting by default TB 44706: Fix a crash when creating new profiles. Rework the patch to disable remoting at runtime to allow using some of the service's functionalities, while still refusing to create any remoting server/client. - - - - - 3 changed files: - toolkit/components/remote/nsRemoteService.cpp - toolkit/components/remote/nsRemoteService.h - toolkit/xre/nsAppRunner.cpp Changes: ===================================== toolkit/components/remote/nsRemoteService.cpp ===================================== @@ -53,7 +53,8 @@ nsStartupLock::~nsStartupLock() { NS_IMPL_ISUPPORTS(nsRemoteService, nsIObserver, nsIRemoteService) -nsRemoteService::nsRemoteService() : mProgram("mozilla") { +nsRemoteService::nsRemoteService(bool aRemotingEnabled) + : mRemotingEnabled(aRemotingEnabled), mProgram("mozilla") { ToLowerCase(mProgram); } @@ -194,6 +195,10 @@ nsresult nsRemoteService::SendCommandLine(const nsACString& aProfile, return NS_ERROR_FAILURE; } + if (!mRemotingEnabled) { + return NS_ERROR_NOT_AVAILABLE; + } + UniquePtr<nsRemoteClient> client; #ifdef MOZ_WIDGET_GTK # if defined(MOZ_ENABLE_DBUS) @@ -249,7 +254,7 @@ nsresult nsRemoteService::StartClient() { } void nsRemoteService::StartupServer() { - if (mRemoteServer) { + if (mRemoteServer || !mRemotingEnabled) { return; } ===================================== toolkit/components/remote/nsRemoteService.h ===================================== @@ -39,7 +39,7 @@ class nsRemoteService final : public nsIObserver, public nsIRemoteService { NS_DECL_NSIOBSERVER NS_DECL_NSIREMOTESERVICE - nsRemoteService(); + nsRemoteService(bool aRemotingEnabled); void SetProgram(const char* aProgram); void SetProfile(nsACString& aProfile); #ifdef MOZ_WIDGET_GTK @@ -91,6 +91,7 @@ class nsRemoteService final : public nsIObserver, public nsIRemoteService { nsresult SendCommandLine(const nsACString& aProfile, size_t aArgc, const char** aArgv, bool aRaise); + bool mRemotingEnabled; mozilla::UniquePtr<nsRemoteServer> mRemoteServer; nsCString mProgram; nsCString mProfile; ===================================== toolkit/xre/nsAppRunner.cpp ===================================== @@ -320,7 +320,7 @@ static nsIProfileLock* gProfileLock; MOZ_RUNINIT static RefPtr<nsRemoteService> gRemoteService; MOZ_RUNINIT static RefPtr<nsStartupLock> gStartupLock; // tor-browser#43107: Disable remoting by default. -bool gDisableRemoting = true; +bool gEnableRemoting = false; #endif int gRestartArgc; @@ -2118,8 +2118,8 @@ nsresult ScopedXPCOMStartup::SetWindowCreator(nsINativeAppSupport* native) { /* static */ already_AddRefed<nsIRemoteService> GetRemoteService() { AssertIsOnMainThread(); - if (!gRemoteService && !gDisableRemoting) { - gRemoteService = new nsRemoteService(); + if (!gRemoteService) { + gRemoteService = new nsRemoteService(gEnableRemoting); } nsCOMPtr<nsIRemoteService> remoteService = gRemoteService.get(); return remoteService.forget(); @@ -4496,7 +4496,7 @@ int XREMain::XRE_mainInit(bool* aExitFlag) { // The user can still enable remoting if they want to, by adding the // allow-remote parameter to the command line. if (CheckArg("allow-remote") == ARG_FOUND) { - gDisableRemoting = false; + gEnableRemoting = true; } #else // These arguments do nothing in platforms with no remoting support but we @@ -4870,7 +4870,7 @@ int XREMain::XRE_mainStartup(bool* aExitFlag) { #ifdef MOZ_HAS_REMOTE if (gfxPlatform::IsHeadless()) { - gDisableRemoting = true; + gEnableRemoting = false; } #endif @@ -4992,10 +4992,8 @@ int XREMain::XRE_mainStartup(bool* aExitFlag) { } #endif #if defined(MOZ_HAS_REMOTE) - if (!gDisableRemoting) { - // handle --remote now that xpcom is fired up - gRemoteService = new nsRemoteService(); - } + // handle --remote now that xpcom is fired up + gRemoteService = new nsRemoteService(gEnableRemoting); if (gRemoteService) { gRemoteService->SetProgram(gAppData->remotingName); gStartupLock = gRemoteService->LockStartup(); @@ -5080,7 +5078,7 @@ int XREMain::XRE_mainStartup(bool* aExitFlag) { if (NS_SUCCEEDED(rv)) { gRemoteService->SetProfile(profilePath); - if (!gDisableRemoting) { + if (gEnableRemoting) { // Try to remote the entire command line. If this fails, start up // normally. # ifdef MOZ_WIDGET_GTK View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bc519e8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bc519e8… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-148.0a1-16.0-2] 4 commits: fixup! BB 41736: Customize toolbar for base-browser.
by Pier Angelo Vendrame (＠pierov) 12 Mar '26

12 Mar '26

Pier Angelo Vendrame pushed to branch tor-browser-148.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: dea5d9a8 by Pier Angelo Vendrame at 2026-03-12T17:55:26+01:00 fixup! BB 41736: Customize toolbar for base-browser. TB 44720: Move new identity to Tor Browser. Do not add the new identity button anymore on Base Browser. - - - - - aec3880c by Pier Angelo Vendrame at 2026-03-12T17:55:26+01:00 amend! BB 40926: Implemented the New Identity feature TB 40926: Implemented the New Identity feature - - - - - 5349a0bb by Pier Angelo Vendrame at 2026-03-12T17:55:26+01:00 fixup! TB 41736: Customize toolbar for tor-browser. TB 44720: Move new identity to Tor Browser. - - - - - f15ef0aa by Pier Angelo Vendrame at 2026-03-12T17:55:27+01:00 fixup! Firefox preference overrides. TB 44720: Move new identity to Tor Browser. Remove the Log levels section from 001-base-profile.js, since it is now empty. - - - - - 3 changed files: - browser/app/profile/000-tor-browser.js - browser/app/profile/001-base-profile.js - browser/components/customizableui/CustomizableUI.sys.mjs Changes: ===================================== browser/app/profile/000-tor-browser.js ===================================== @@ -131,6 +131,7 @@ pref("extensions.torlauncher.bridgedb_reflector", "https://bespoke-strudel-c243c pref("extensions.torlauncher.moat_service", "https://bridges.torproject.org/moat"); // Log levels +pref("browser.new_identity.log_level", "Info"); pref("browser.tor_provider.log_level", "Warn"); pref("browser.tor_provider.cp_log_level", "Warn"); pref("lox.log_level", "Warn"); ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -787,9 +787,6 @@ pref("privacy.globalprivacycontrol.pbmode.enabled", true); // Disable platform text recognition functionality (tor-browser#42057) pref("dom.text-recognition.enabled", false); -// Log levels -pref("browser.new_identity.log_level", "Info"); - #ifdef XP_WIN pref("browser.taskbar.lists.enabled", false); pref("browser.taskbar.lists.frequent.enabled", false); ===================================== browser/components/customizableui/CustomizableUI.sys.mjs ===================================== @@ -1002,8 +1002,8 @@ var CustomizableUIInternal = { navbarPlacements.splice(before, 1); } - // Make sure the security-level-button and new-identity-button appears - // in the toolbar. + // Make sure security-level-button and new-identity-button appear in the + // toolbar. for (const id of ["new-identity-button", "security-level-button"]) { let alreadyAdded = false; for (const placements of Object.values(gSavedState.placements)) { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/6ecff8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/6ecff8… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-148.0a1-16.0-2] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 12 Mar '26

12 Mar '26

Pier Angelo Vendrame pushed to branch mullvad-browser-148.0a1-16.0-2 at The Tor Project / Applications / Mullvad Browser Commits: d898d977 by Pier Angelo Vendrame at 2026-03-12T12:18:45+01:00 fixup! Firefox preference overrides. BB 43769: Update the comment about overscroll. We had an issue about gating overscroll behind RFP. However, as far as I can tell, it cannot really be measured. So, disabling it is basically a defense-in-depth, so I updated the comment to include more information about this. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -510,7 +510,13 @@ pref("dom.webmidi.enabled", false); // Bug 41398: Disable Web MIDI API // Defense-in-depth (already the default value) from Firefox 119 or 120. pref("media.devices.enumerate.legacy.enabled", false); #ifndef ANDROID -// Bug 42138: Disable touch-based overscroll UX +// tor-browser#43769,42010,42138: Disable overscroll UX. +// Firefox has an overscroll effect that appears only when using a touch screen +// or a touchpad. So, theoretically it is a behavior difference also for desktop +// users. +// However, we could not find a way to actually measure this effect. +// Still, the UX impact on disabling this animation is minimal, therefore we do +// it just in case there is an actual way to measure it. pref("apz.overscroll.enabled", false); #endif pref("dom.vr.enabled", false); // Bug 21607: Disable WebVR for now View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/d89… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/d89… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-148.0a1-16.0-2] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 12 Mar '26

12 Mar '26

Pier Angelo Vendrame pushed to branch tor-browser-148.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: 6ecff809 by Pier Angelo Vendrame at 2026-03-12T11:41:41+01:00 fixup! Firefox preference overrides. BB 43769: Update the comment about overscroll. We had an issue about gating overscroll behind RFP. However, as far as I can tell, it cannot really be measured. So, disabling it is basically a defense-in-depth, so I updated the comment to include more information about this. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -510,7 +510,13 @@ pref("dom.webmidi.enabled", false); // Bug 41398: Disable Web MIDI API // Defense-in-depth (already the default value) from Firefox 119 or 120. pref("media.devices.enumerate.legacy.enabled", false); #ifndef ANDROID -// Bug 42138: Disable touch-based overscroll UX +// tor-browser#43769,42010,42138: Disable overscroll UX. +// Firefox has an overscroll effect that appears only when using a touch screen +// or a touchpad. So, theoretically it is a behavior difference also for desktop +// users. +// However, we could not find a way to actually measure this effect. +// Still, the UX impact on disabling this animation is minimal, therefore we do +// it just in case there is an actual way to measure it. pref("apz.overscroll.enabled", false); #endif pref("dom.vr.enabled", false); // Bug 21607: Disable WebVR for now View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6ecff80… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6ecff80… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] 6 commits: alpha: new version, 16.0a4 (linux-aarch64)
by ma1 (＠ma1) 11 Mar '26

11 Mar '26

ma1 pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: ec4b0190 by hackademix at 2026-03-11T20:03:53+01:00 alpha: new version, 16.0a4 (linux-aarch64) - - - - - 21d349cf by hackademix at 2026-03-11T20:03:55+01:00 alpha: new version, 16.0a4 (linux-x86_64) - - - - - 6c0ad7df by hackademix at 2026-03-11T20:03:57+01:00 alpha: new version, 16.0a4 (macos) - - - - - 739d3a6d by hackademix at 2026-03-11T20:03:59+01:00 alpha: new version, 16.0a4 (windows-i686) - - - - - daf35dc3 by hackademix at 2026-03-11T20:04:01+01:00 alpha: new version, 16.0a4 (windows-x86_64) - - - - - f2851df2 by hackademix at 2026-03-11T20:04:03+01:00 alpha: new version, 16.0a4 - - - - - 53 changed files: - update_3/alpha/download-android-aarch64.json - update_3/alpha/download-android-armv7.json - update_3/alpha/download-android-x86_64.json - update_3/alpha/download-linux-aarch64.json - update_3/alpha/download-linux-x86_64.json - update_3/alpha/download-macos.json - update_3/alpha/download-windows-i686.json - update_3/alpha/download-windows-x86_64.json - update_3/alpha/downloads.json - update_3/alpha/linux-aarch64/.htaccess - − update_3/alpha/linux-aarch64/update-16.0a1-16.0a3-linux-aarch64.xml - + update_3/alpha/linux-aarch64/update-16.0a1-16.0a4-linux-aarch64.xml - − update_3/alpha/linux-aarch64/update-16.0a2-16.0a3-linux-aarch64.xml - + update_3/alpha/linux-aarch64/update-16.0a2-16.0a4-linux-aarch64.xml - + update_3/alpha/linux-aarch64/update-16.0a3-16.0a4-linux-aarch64.xml - − update_3/alpha/linux-aarch64/update-16.0a3-linux-aarch64.xml - + update_3/alpha/linux-aarch64/update-16.0a4-linux-aarch64.xml - update_3/alpha/linux-x86_64/.htaccess - − update_3/alpha/linux-x86_64/update-15.0a4-16.0a3-linux-x86_64.xml - − update_3/alpha/linux-x86_64/update-16.0a1-16.0a3-linux-x86_64.xml - + update_3/alpha/linux-x86_64/update-16.0a1-16.0a4-linux-x86_64.xml - − update_3/alpha/linux-x86_64/update-16.0a2-16.0a3-linux-x86_64.xml - + update_3/alpha/linux-x86_64/update-16.0a2-16.0a4-linux-x86_64.xml - + update_3/alpha/linux-x86_64/update-16.0a3-16.0a4-linux-x86_64.xml - − update_3/alpha/linux-x86_64/update-16.0a3-linux-x86_64.xml - + update_3/alpha/linux-x86_64/update-16.0a4-linux-x86_64.xml - update_3/alpha/macos/.htaccess - − update_3/alpha/macos/update-15.0a4-16.0a3-macos.xml - − update_3/alpha/macos/update-16.0a1-16.0a3-macos.xml - + update_3/alpha/macos/update-16.0a1-16.0a4-macos.xml - − update_3/alpha/macos/update-16.0a2-16.0a3-macos.xml - + update_3/alpha/macos/update-16.0a2-16.0a4-macos.xml - + update_3/alpha/macos/update-16.0a3-16.0a4-macos.xml - − update_3/alpha/macos/update-16.0a3-macos.xml - + update_3/alpha/macos/update-16.0a4-macos.xml - update_3/alpha/windows-i686/.htaccess - − update_3/alpha/windows-i686/update-15.0a4-16.0a3-windows-i686.xml - − update_3/alpha/windows-i686/update-16.0a1-16.0a3-windows-i686.xml - + update_3/alpha/windows-i686/update-16.0a1-16.0a4-windows-i686.xml - − update_3/alpha/windows-i686/update-16.0a2-16.0a3-windows-i686.xml - + update_3/alpha/windows-i686/update-16.0a2-16.0a4-windows-i686.xml - + update_3/alpha/windows-i686/update-16.0a3-16.0a4-windows-i686.xml - − update_3/alpha/windows-i686/update-16.0a3-windows-i686.xml - + update_3/alpha/windows-i686/update-16.0a4-windows-i686.xml - update_3/alpha/windows-x86_64/.htaccess - − update_3/alpha/windows-x86_64/update-15.0a4-16.0a3-windows-x86_64.xml - − update_3/alpha/windows-x86_64/update-16.0a1-16.0a3-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-16.0a1-16.0a4-windows-x86_64.xml - − update_3/alpha/windows-x86_64/update-16.0a2-16.0a3-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-16.0a2-16.0a4-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-16.0a3-16.0a4-windows-x86_64.xml - − update_3/alpha/windows-x86_64/update-16.0a3-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-16.0a4-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-148.0a1-16.0-2] fixup! Various Android workarounds
by clairehurst (＠clairehurst) 11 Mar '26

11 Mar '26

clairehurst pushed to branch tor-browser-148.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: ea4b75a0 by Pier Angelo Vendrame at 2026-03-11T11:50:11-06:00 fixup! Various Android workarounds Revert "Various Android workarounds" This reverts commit 30735a5791eaff01b97c3ac35e7dacdec6f29831. - - - - - 3 changed files: - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/HomeActivity.kt - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/home/ui/HomepageHeader.kt - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/settings/account/AccountSettingsFragment.kt Changes: ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/HomeActivity.kt ===================================== @@ -707,9 +707,9 @@ open class HomeActivity : LocaleAwareAppCompatActivity(), NavHostActivity { MessageNotificationWorker.setMessageNotificationWorker(applicationContext) } - // if (components.core.sentFromFirefoxManager.shouldShowSnackbar) { - // components.appStore.dispatch(ShareAction.ShareToWhatsApp) - // } + if (components.core.sentFromFirefoxManager.shouldShowSnackbar) { + components.appStore.dispatch(ShareAction.ShareToWhatsApp) + } } onBackPressedCallback.isEnabled = true ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/home/ui/HomepageHeader.kt ===================================== @@ -60,11 +60,11 @@ fun HomepageHeader( .padding(start = 16.dp, end = 16.dp, top = 18.dp, bottom = 32.dp), verticalAlignment = Alignment.CenterVertically, ) { - // WordmarkLogo() + WordmarkLogo() - // WordmarkText(wordmarkTextColor) + WordmarkText(wordmarkTextColor) - // Spacer(modifier = Modifier.weight(1f)) + Spacer(modifier = Modifier.weight(1f)) PrivateBrowsingButton( color = privateBrowsingButtonColor, ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/settings/account/AccountSettingsFragment.kt ===================================== @@ -95,8 +95,7 @@ class AccountSettingsFragment : PreferenceFragmentCompat() { override fun onCreate(savedInstanceState: Bundle?) { super.onCreate(savedInstanceState) - // FIXME: Update A-S - // SyncTelemetry.processOpenSyncSettingsMenuTelemetry() + SyncTelemetry.processOpenSyncSettingsMenuTelemetry() SyncAccount.opened.record(NoExtras()) accountManager = requireComponents.backgroundServices.accountManager @@ -125,8 +124,7 @@ class AccountSettingsFragment : PreferenceFragmentCompat() { } } } - // FIXME: Update A-S - // SyncTelemetry.processSaveSyncSettingsTelemetry(enabledEngines, disabledEngines) + SyncTelemetry.processSaveSyncSettingsTelemetry(enabledEngines, disabledEngines) } override fun onViewCreated(view: View, savedInstanceState: Bundle?) { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ea4b75a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ea4b75a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser-update-responses][main] 5 commits: alpha: new version, 16.0a4 (linux-aarch64)
by ma1 (＠ma1) 11 Mar '26

11 Mar '26

ma1 pushed to branch main at The Tor Project / Applications / mullvad-browser-update-responses Commits: eaba286c by hackademix at 2026-03-11T14:13:44+01:00 alpha: new version, 16.0a4 (linux-aarch64) - - - - - 9a38b01f by hackademix at 2026-03-11T14:13:45+01:00 alpha: new version, 16.0a4 (linux-x86_64) - - - - - 1f51c7aa by hackademix at 2026-03-11T14:13:46+01:00 alpha: new version, 16.0a4 (macos) - - - - - 3f46fc40 by hackademix at 2026-03-11T14:13:47+01:00 alpha: new version, 16.0a4 (windows-x86_64) - - - - - f1b3a8d9 by hackademix at 2026-03-11T14:13:47+01:00 alpha: new version, 16.0a4 - - - - - 40 changed files: - update_1/alpha/download-linux-aarch64.json - update_1/alpha/download-linux-x86_64.json - update_1/alpha/download-macos.json - update_1/alpha/download-windows-x86_64.json - update_1/alpha/downloads.json - update_1/alpha/linux-aarch64/.htaccess - − update_1/alpha/linux-aarch64/update-16.0a1-16.0a3-linux-aarch64.xml - + update_1/alpha/linux-aarch64/update-16.0a1-16.0a4-linux-aarch64.xml - − update_1/alpha/linux-aarch64/update-16.0a2-16.0a3-linux-aarch64.xml - + update_1/alpha/linux-aarch64/update-16.0a2-16.0a4-linux-aarch64.xml - + update_1/alpha/linux-aarch64/update-16.0a3-16.0a4-linux-aarch64.xml - − update_1/alpha/linux-aarch64/update-16.0a3-linux-aarch64.xml - + update_1/alpha/linux-aarch64/update-16.0a4-linux-aarch64.xml - update_1/alpha/linux-x86_64/.htaccess - − update_1/alpha/linux-x86_64/update-15.0a4-16.0a3-linux-x86_64.xml - − update_1/alpha/linux-x86_64/update-16.0a1-16.0a3-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-16.0a1-16.0a4-linux-x86_64.xml - − update_1/alpha/linux-x86_64/update-16.0a2-16.0a3-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-16.0a2-16.0a4-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-16.0a3-16.0a4-linux-x86_64.xml - − update_1/alpha/linux-x86_64/update-16.0a3-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-16.0a4-linux-x86_64.xml - update_1/alpha/macos/.htaccess - − update_1/alpha/macos/update-15.0a4-16.0a3-macos.xml - − update_1/alpha/macos/update-16.0a1-16.0a3-macos.xml - + update_1/alpha/macos/update-16.0a1-16.0a4-macos.xml - − update_1/alpha/macos/update-16.0a2-16.0a3-macos.xml - + update_1/alpha/macos/update-16.0a2-16.0a4-macos.xml - + update_1/alpha/macos/update-16.0a3-16.0a4-macos.xml - − update_1/alpha/macos/update-16.0a3-macos.xml - + update_1/alpha/macos/update-16.0a4-macos.xml - update_1/alpha/windows-x86_64/.htaccess - − update_1/alpha/windows-x86_64/update-15.0a4-16.0a3-windows-x86_64.xml - − update_1/alpha/windows-x86_64/update-16.0a1-16.0a3-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-16.0a1-16.0a4-windows-x86_64.xml - − update_1/alpha/windows-x86_64/update-16.0a2-16.0a3-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-16.0a2-16.0a4-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-16.0a3-16.0a4-windows-x86_64.xml - − update_1/alpha/windows-x86_64/update-16.0a3-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-16.0a4-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-148.0a1-16.0-2] fixup! TB 43616: Customize Gitlab Issue and Merge Request templates
by Dan Ballard (＠dan) 10 Mar '26

10 Mar '26

Dan Ballard pushed to branch tor-browser-148.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: e89a6ac5 by Dan Ballard at 2026-03-10T12:07:22-07:00 fixup! TB 43616: Customize Gitlab Issue and Merge Request templates TB 44741: Update alpha relprep with mullvad freeze step and notify team final step - - - - - 1 changed file: - .gitlab/issue_templates/060 Rebase - Alpha.md Changes: ===================================== .gitlab/issue_templates/060 Rebase - Alpha.md ===================================== @@ -15,7 +15,7 @@ The step-by-step rebase process is detailed on the [Rebase Process](https://gitl - Prepare the rebase - [ ] Verify if application-services has updated it's uniffi-rs version else skip this step - [ ] Get the [upstream](https://github.com/mozilla/uniffi-rs) tag - - [ ] Freeze the current default branch + - [ ] Freeze the current default branch (on both tor-browser and mullvad-browser) - [ ] Create the target branch (`X.XX.X`) - [ ] Rebase - Merge @@ -82,7 +82,7 @@ The step-by-step rebase process is detailed on the [Rebase Process](https://gitl - [ ] `tor-browser-...-2-build1` - [ ] `base-browser-...-2-build1` - [ ] Make `tor-browser-...-2` the default branch - + - [ ] Send notification email to application-team about the rebase completion and new open branch --- /label ~"Apps::Product::TorBrowser" View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/e89a6ac… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/e89a6ac… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-16.0a4-build1
by Pier Angelo Vendrame (＠pierov) 10 Mar '26

10 Mar '26

Pier Angelo Vendrame pushed new tag mb-16.0a4-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-16.0a4-build1
by Pier Angelo Vendrame (＠pierov) 10 Mar '26

10 Mar '26

Pier Angelo Vendrame pushed new tag tbb-16.0a4-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41729&41730: Prepare Tor&Mullvad Browser 16.0a4.
by Pier Angelo Vendrame (＠pierov) 10 Mar '26

10 Mar '26

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 93827844 by Pier Angelo Vendrame at 2026-03-10T19:31:00+01:00 Bug 41729&41730: Prepare Tor&Mullvad Browser 16.0a4. - - - - - 10 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/moat-settings/config - projects/translation/config - projects/zlib/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,35 @@ +Mullvad Browser 16.0a4 - March 11 2026 + * All Platforms + * Updated Firefox to 148.0a1 + * Updated NoScript to 13.6.6.90401984 + * Bug 515: Fix mullvad browser about dialog for 148 [mullvad-browser] + * Bug 516: Use CSS size and space tokens in mullvad-browser [mullvad-browser] + * Bug 44663: NoScript behavior on “Safer” security level prevents integrity checks for dynamically loaded javascript [tor-browser] + * Bug 44675: Restore "BB 43850: Modify the Contrast Control settings for RFP" dropped during the 148.0a1 rebase [tor-browser] + * Bug 44679: Review Mozilla 2006066: Credit cards autofill settings are not visible [tor-browser] + * Bug 44680: Properly handle subdocuments created by data: URLs [tor-browser] + * Bug 44687: Security level requires a restart in a new profile after 148 update [tor-browser] + * Bug 44689: Forwardport tor-browser#44668 from legacy to alpha: Set detailsURL in update XML to be useful for 13.5 users [tor-browser] + * Bug 44701: Unexpected change to `netwerk/url-classifier/components.conf` [tor-browser] + * Bug 44706: creating a new profiles causes crash ENOTTY [tor-browser] + * Bug 44709: Hide the AI settings panel [tor-browser] + * Bug 44710: Hide about:preferences#translations [tor-browser] + * Bug 44717: Search suggestion settings are visible in 148 [tor-browser] + * Bug 41738: Allow to specify an unsupportedURL on update responses [tor-browser-build] + * Bug 41742: Make the Mullvad Browser publishing script work even if the BB branch being missing [tor-browser-build] + * Windows + * Bug 44461: Window controls are missing on Windows [tor-browser] + * Bug 44633: Move D3D11 function from local webrtc changes to tbb webrtc patches [tor-browser] + * Linux + * Bug 44394: Do not read default prefs from /etc/firefox [tor-browser] + * Build System + * All Platforms + * Bug 41690: Merge list_toolchain_updates-firefox-* commands into one [tor-browser-build] + * Bug 41725: Update toolchains for Firefox 148 [tor-browser-build] + * Bug 41726: Check in list_toolchain_updates that the sha512sum we have for the macOS SDK is the same as Mozilla [tor-browser-build] + * Bug 41727: Split the list_toolchain_updates_checks script in two [tor-browser-build] + * Bug 41728: Update projects/application-services/list_toolchain_updates_checks to check nss sha256sum [tor-browser-build] + Mullvad Browser 16.0a3 - February 17 2026 * All Platforms * Updated NoScript to 13.5.12.90301984 ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,63 @@ +Tor Browser 16.0a4 - March 11 2026 + * All Platforms + * Updated NoScript to 13.6.6.90401984 + * Updated zlib to 1.3.2 + * Bug 44663: NoScript behavior on “Safer” security level prevents integrity checks for dynamically loaded javascript [tor-browser] + * Bug 44675: Restore "BB 43850: Modify the Contrast Control settings for RFP" dropped during the 148.0a1 rebase [tor-browser] + * Bug 44679: Review Mozilla 2006066: Credit cards autofill settings are not visible [tor-browser] + * Bug 44680: Properly handle subdocuments created by data: URLs [tor-browser] + * Bug 44687: Security level requires a restart in a new profile after 148 update [tor-browser] + * Bug 44689: Forwardport tor-browser#44668 from legacy to alpha: Set detailsURL in update XML to be useful for 13.5 users [tor-browser] + * Bug 44701: Unexpected change to `netwerk/url-classifier/components.conf` [tor-browser] + * Bug 44706: creating a new profiles causes crash ENOTTY [tor-browser] + * Bug 41738: Allow to specify an unsupportedURL on update responses [tor-browser-build] + * Windows + macOS + Linux + * Updated Firefox to 148.0a1 + * Bug 42664: Use mozilla token sizes in CSS [tor-browser] + * Bug 44634: Review Mozilla 2006250: add ai window about:preferences section within ai features [tor-browser] + * Bug 44682: Wrong pid in the exit log [tor-browser] + * Bug 44709: Hide the AI settings panel [tor-browser] + * Bug 44710: Hide about:preferences#translations [tor-browser] + * Bug 44713: The about dialog is missing some padding in 148.0a1 [tor-browser] + * Bug 44717: Search suggestion settings are visible in 148 [tor-browser] + * Windows + Linux + * Bug 40892: Move torrc-defaults, geoip and geoip6 on Windows and Linux [tor-browser-build] + * Windows + * Bug 44461: Window controls are missing on Windows [tor-browser] + * Bug 44633: Move D3D11 function from local webrtc changes to tbb webrtc patches [tor-browser] + * Linux + * Bug 44394: Do not read default prefs from /etc/firefox [tor-browser] + * Android + * Updated GeckoView to 148.0a1 + * Bug 43349: Add user feedback for when Tor connects (Android) [tor-browser] + * Bug 43909: Review Mozilla: TBD: new Android tab-strip feature [tor-browser] + * Bug 44226: Disable all link sharing functionality [tor-browser] + * Bug 44274: Review Mozilla 1986534: Disable screenshots in PBM [tor-browser] + * Bug 44469: Fix branding on Android RR [tor-browser] + * Bug 44506: Remove more sync from 147 [tor-browser] + * Bug 44582: Fix or remove new settings search functionality on Android [tor-browser] + * Bug 44661: Restore or fix new rebase-148 uses of moz assets instead of TB ones [tor-browser] + * Bug 44718: Fix splash screen branding and other issues in RR [tor-browser] + * Bug 44721: Android build failure in nightlyOssLicensesTask: missing dependencies.json file [tor-browser] + * Build System + * All Platforms + * Bug 41690: Merge list_toolchain_updates-firefox-* commands into one [tor-browser-build] + * Bug 41725: Update toolchains for Firefox 148 [tor-browser-build] + * Bug 41726: Check in list_toolchain_updates that the sha512sum we have for the macOS SDK is the same as Mozilla [tor-browser-build] + * Bug 41727: Split the list_toolchain_updates_checks script in two [tor-browser-build] + * Bug 41728: Update projects/application-services/list_toolchain_updates_checks to check nss sha256sum [tor-browser-build] + * Windows + macOS + Linux + * Bug 44406: Fix CSS linting issues introduced by 146 [tor-browser] + * Windows + Linux + Android + * Updated Go to 1.25.8 + * Android + * Bug 41736: Add generate_gradle_dependencies_list-$project makefile targets [tor-browser-build] + * Bug 41737: Remove comment from gen-gradle-deps-file.py saying var/gradle_dependencies_version should be updated [tor-browser-build] + * Bug 41743: Make an error if gradle-dependencies-list is missing in the input files [tor-browser-build] + * Bug 41744: Reduce duplication between projects/geckoview/build and projects/geckoview/build_apk [tor-browser-build] + * Bug 41745: Add .sh file extension to included build_* scripts in projects/geckoview [tor-browser-build] + * Bug 41751: Fix the NDK path [tor-browser-build] + Tor Browser 16.0a3 - February 17 2026 * All Platforms * Updated Tor to 0.4.9.5 ===================================== projects/browser/config ===================================== @@ -87,9 +87,9 @@ input_files: enable: '[% !c("var/android") %]' - filename: dmg-root enable: '[% c("var/macos") %]' - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.12.90301984.x… + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.6.90401984.xpi name: noscript - sha256sum: 047d886412ab823b61355e3d54625885d088ee0d594c53622a2809b6f25d4529 + sha256sum: a961c57791bc4dc8add25f8e21b527d5b60d8eaff32e627bd6b61383588921ed - URL: https://addons.mozilla.org/firefox/downloads/file/4675310/ublock_origin-1.6… name: ublock-origin sha256sum: 785bcde68a25faa8a0949964ec5ffe9bdcb85d3f0ae21c23f607c6c8f91472cf ===================================== projects/firefox/config ===================================== @@ -22,7 +22,7 @@ var: browser_series: '16.0' browser_rebase: 2 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 2 upstream_firefox_commit: FIREFOX_NIGHTLY_148_END copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' @@ -113,8 +113,6 @@ targets: updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' mar_id_prefix: 'mullvadbrowser-mullvad' nightly_updates_publish_dir_prefix: mullvadbrowser- - browser_build: 3 - linux-x86_64: var: arch_deps: ===================================== projects/geckoview/config ===================================== @@ -25,7 +25,7 @@ var: browser_series: '16.0' browser_rebase: 2 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 2 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.25.7' +version: '1.25.8' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: 178f2832820274b43e177d32f06a3ebb0129e427dd20a5e4c88df2c1763cf10a + source_sha256: e988d4a2446ac7fe3f6daa089a58e9936a52a381355adec1c8983230a8d6c59e no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist ===================================== projects/moat-settings/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' git_url: https://gitlab.torproject.org/tpo/anti-censorship/rdsys-admin.git -git_hash: 365b0e65b27e053bece37b70bca0bd5fdb02099f +git_hash: b4e3b47c3ed31c35a6df43ba654de37b62b93c27 version: '[% c("abbrev") %]' # Use gz for now, since we do not support Zstandard on Linux containers. compress_tar: 'gz' ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 5ffb8148b4814b097bcde0a212c936e283aa77ea + git_hash: 0c951426ef9c309ba2c5e49f2a429c7914c73c6c targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 719eeceb96651f4cf527dc3d4493a9306277205e + git_hash: e531300282aef8d2af89e94a8725ed9368f0a52b targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: cca0df9dec7d9400c4347d497ec8baa27b703dc4 + git_hash: 01957ed5cfe97206ebd1fbdba8c7bd94c10ebf0e compress_tar: 'zst' targets: nightly: ===================================== projects/zlib/config ===================================== @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' -version: '1.3.1' +version: '1.3.2' git_hash: 'v[% c("version") %]' git_url: https://github.com/madler/zlib.git gpg_keyring: zlib.gpg ===================================== rbm.conf ===================================== @@ -77,11 +77,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '16.0a3' + torbrowser_version: '16.0a4' torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2026/02/16 20:00:00' + browser_release_date: '2026/03/10 18:30:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: alpha browser_platforms: @@ -127,9 +127,9 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 16.0a3 - 16.0a2 - 16.0a1 - - 15.0a4 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # torbrowser_legacy_version: 13.5.22 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-148.0a1-16.0-2-build2
by Pier Angelo Vendrame (＠pierov) 10 Mar '26

10 Mar '26

Pier Angelo Vendrame pushed new tag tor-browser-148.0a1-16.0-2-build2 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-148.0a1-16.0-2-build2
by Pier Angelo Vendrame (＠pierov) 10 Mar '26

10 Mar '26

Pier Angelo Vendrame pushed new tag mullvad-browser-148.0a1-16.0-2-build2 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new branch tor-browser-149.0a1-16.0-1
by boklm (＠boklm) 10 Mar '26

10 Mar '26

boklm pushed new branch tor-browser-149.0a1-16.0-1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag FIREFOX_NIGHTLY_149_END
by boklm (＠boklm) 10 Mar '26

10 Mar '26

boklm pushed new tag FIREFOX_NIGHTLY_149_END at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/FIREF… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag FIREFOX_NIGHTLY_149_END
by boklm (＠boklm) 10 Mar '26

10 Mar '26

boklm pushed new tag FIREFOX_NIGHTLY_149_END at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/FIREFOX_N… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-148.0a1-16.0-2] 2 commits: fixup! BB 44522: Modify the about dialog.
by henry (＠henry) 10 Mar '26

10 Mar '26

henry pushed to branch mullvad-browser-148.0a1-16.0-2 at The Tor Project / Applications / Mullvad Browser Commits: 38fb1f07 by Henry Wilkes at 2026-03-10T13:46:11+00:00 fixup! BB 44522: Modify the about dialog. TB 44713: Restore the top padding that was removed upstream. - - - - - 6b59ecdc by Henry Wilkes at 2026-03-10T13:46:11+00:00 fixup! MB 1: Mullvad Browser branding MB 515: Use max-width instead of width for #rightBox - - - - - 3 changed files: - browser/base/content/aboutDialog.css - browser/branding/mb-alpha/content/aboutDialog.css - browser/branding/mb-nightly/content/aboutDialog.css Changes: ===================================== browser/base/content/aboutDialog.css ===================================== @@ -192,6 +192,7 @@ } #rightBox { + padding-block-start: 38px; background-size: auto; margin-inline: 30px; } ===================================== browser/branding/mb-alpha/content/aboutDialog.css ===================================== @@ -12,5 +12,5 @@ #rightBox { /* Increase the default width to fit the about-wordmark.svg width. */ - width: 559px; + max-width: 559px; } ===================================== browser/branding/mb-nightly/content/aboutDialog.css ===================================== @@ -12,5 +12,5 @@ #rightBox { /* Increase the default width to fit the about-wordmark.svg width. */ - width: 601px; + max-width: 601px; } View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/42… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/42… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-148.0a1-16.0-2] 5 commits: fixup! BB 42728: Modify ./mach lint to skip unused linters
by henry (＠henry) 10 Mar '26

10 Mar '26

henry pushed to branch mullvad-browser-148.0a1-16.0-2 at The Tor Project / Applications / Mullvad Browser Commits: 04a17b35 by Henry Wilkes at 2026-03-10T11:28:26+00:00 fixup! BB 42728: Modify ./mach lint to skip unused linters TB 44406: Re-enable stylelint. - - - - - dab4b570 by Henry Wilkes at 2026-03-10T11:28:27+00:00 fixup! BB 40925: Implemented the Security Level component TB 44406: Use size tokens. - - - - - 5b30a3a2 by Henry Wilkes at 2026-03-10T11:28:28+00:00 fixup! BB 32308: Use direct browser sizing for letterboxing. TB 44406: Use size tokens. - - - - - a5cc1011 by Henry Wilkes at 2026-03-10T11:28:29+00:00 fixup! BB 41919: Letterboxing, add temporarily visible web content-size indicator on window resizing. TB 44406: Use size tokens. - - - - - 4202c924 by Henry Wilkes at 2026-03-10T11:45:52+00:00 fixup! MB 39: Add home page about:mullvad-browser MB 516: Use new CSS tokens. - - - - - 7 changed files: - .stylelintrc.js - browser/components/mullvad-browser/content/aboutMullvadBrowser.css - browser/components/securitylevel/content/securityLevelPanel.css - browser/components/securitylevel/content/securityLevelPreferences.css - browser/themes/shared/tabbrowser/content-area.css - python/mozlint/mozlint/cli.py - toolkit/components/resistfingerprinting/content/letterboxing.css Changes: ===================================== .stylelintrc.js ===================================== @@ -274,9 +274,9 @@ module.exports = { // Remove this line setting `csscontrols/use-logical` to null after implementing fixes "csstools/use-logical": null, "stylelint-plugin-mozilla/no-base-design-tokens": true, - "stylelint-plugin-mozilla/use-design-tokens": true, - "stylelint-plugin-mozilla/no-non-semantic-token-usage": true, - "stylelint-plugin-mozilla/use-size-tokens": true, + "stylelint-plugin-mozilla/use-design-tokens": false, + "stylelint-plugin-mozilla/no-non-semantic-token-usage": false, + "stylelint-plugin-mozilla/use-size-tokens": false, }, overrides: [ ===================================== browser/components/mullvad-browser/content/aboutMullvadBrowser.css ===================================== @@ -19,9 +19,13 @@ body { grid-template: "heading" auto "text" auto / auto; justify-items: center; align-content: center; - gap: 32px; - padding-block: 40px; - padding-inline: 16px; + gap: var(--space-xxlarge); + padding-block: var(--space-xxlarge); +} + +#header, +#footer { + padding-inline: var(--space-large); } #header p { @@ -34,7 +38,7 @@ body { flex-direction: row; white-space: nowrap; align-items: center; - gap: 16px; + gap: var(--space-large); } #heading-logo { @@ -68,29 +72,28 @@ body:not(.no-update) #mullvad-browser-intro { } #mullvad-browser-update-img { - height: 1em; + height: var(--icon-size); vertical-align: sub; - margin-inline-end: 0.3em; + margin-inline-end: var(--space-xsmall); } #footer { - padding-block: 40px; - border-block-start: 1px solid var(--in-content-box-border-color); - background-color: var(--in-content-box-info-background); + padding-block: var(--space-xxlarge); + border-block-start: var(--border-width) solid var(--border-color); + background-color: var(--background-color-box-info); } #footer p { - margin-inline: 8px; - margin-block: 0.5em; + margin-block: var(--space-small); } @media not ((prefers-contrast) or (forced-colors)) { :root { /* Dark background. */ background: linear-gradient(to bottom, var(--branding-gradient-start) 0%, var(--branding-gradient-middle) 55%, var(--branding-gradient-end) 100%); - /* Same as --in-content-page-color when "prefers-color-scheme: dark" */ - --in-content-page-color-dark: var(--color-gray-05); - color: var(--in-content-page-color-dark); + /* Same as --text-color when "prefers-color-scheme: dark" */ + --text-color-dark: var(--color-gray-05); + color: var(--text-color-dark); --link-color: var(--branding-link-color); --link-color-hover: var(--branding-link-color-hover); @@ -98,8 +101,6 @@ body:not(.no-update) #mullvad-browser-intro { --focus-outline-color: var(--branding-focus-outline-color); --focus-outline: var(--focus-outline-width) solid var(--focus-outline-color); - --in-content-focus-outline-color: var(--focus-outline-color); - --in-content-focus-outline: var(--focus-outline); } #heading-wordmark { ===================================== browser/components/securitylevel/content/securityLevelPanel.css ===================================== @@ -1,25 +1,25 @@ /* Security Level CSS */ #securityLevel-background { - min-height: 10em; - padding-inline: 16px; - column-gap: 0.5em; + min-height: 150px; + padding-inline: var(--space-large); + column-gap: var(--space-small); display: grid; grid-template: - "top-pad icon" 16px + "top-pad icon" var(--space-large) "title icon" auto "body icon" auto "learn-more icon" auto - "bottom-pad icon" minmax(8px, 1fr) + "bottom-pad icon" minmax(var(--space-small), 1fr) / auto auto; } #securityLevel-background-image { grid-area: icon; - --security-level-icon-size: 9em; + --security-level-icon-size: 130px; width: var(--security-level-icon-size); height: var(--security-level-icon-size); - margin-block: 0.4em; + margin-block: var(--space-small); /* Middle of shield aligns with the panel padding: */ margin-inline-end: calc(-0.5 * var(--security-level-icon-size)); align-self: start; @@ -50,12 +50,12 @@ } #securityLevel-background p { - margin-block: 0 16px; + margin-block: 0 var(--space-large); } /* Override margin in panelUI-shared.css */ #securityLevel-panel toolbarseparator#securityLevel-separator { - margin-inline: 16px; + margin-inline: var(--space-large); } #securityLevel-level { @@ -65,7 +65,7 @@ } #securityLevel-summary { - max-width: 20em; + max-width: 300px; grid-area: body; } ===================================== browser/components/securitylevel/content/securityLevelPreferences.css ===================================== @@ -10,8 +10,8 @@ .security-level-icon { grid-area: icon; align-self: start; - width: 24px; - height: 24px; + width: var(--icon-size-large); + height: var(--icon-size-large); -moz-context-properties: fill; fill: var(--icon-color); margin-block-start: var(--space-xsmall); @@ -97,7 +97,7 @@ #security-level-current { margin-block-start: var(--space-large); background: var(--background-color-box); - border: 1px solid var(--border-color); + border: var(--border-width) solid var(--border-color); border-radius: var(--border-radius-small); padding: var(--space-medium); } ===================================== browser/themes/shared/tabbrowser/content-area.css ===================================== @@ -390,16 +390,16 @@ split-view-footer { #statuspanel:is([type="letterboxingStatus"], [previoustype="letterboxingStatus"][inactive]) > #statuspanel-label { background-image: url("chrome://browser/skin/window.svg"); - background-size: 1em; + background-size: var(--icon-size); background-repeat: no-repeat; background-position-y: center; - background-position-x: left 0.5em; + background-position-x: left var(--space-small); &:-moz-locale-dir(rtl) { - background-position-x: right 0.5em; + background-position-x: right var(--space-small); } - padding-inline-start: 2em; + padding-inline-start: calc(var(--space-small) + var(--icon-size) + var(--space-small)); -moz-context-properties: fill; fill: var(--color-accent-primary); @media (forced-colors) { ===================================== python/mozlint/mozlint/cli.py ===================================== @@ -38,7 +38,6 @@ INACTIVE_LINTERS = [ "updatebot", "typescript", "wpt", - "stylelint", "glean-parser", ] ===================================== toolkit/components/resistfingerprinting/content/letterboxing.css ===================================== @@ -17,9 +17,6 @@ } } -/* stylelint-disable stylelint-plugin-mozilla/use-border-color-tokens */ -/* stylelint-disable stylelint-plugin-mozilla/use-border-radius-tokens */ - #tabbrowser-tabbox.letterboxing { --letterboxing-bgcolor: var(--background-color-canvas); /* Match the border radius used for the sidebar. */ @@ -28,7 +25,7 @@ --letterboxing-vertical-alignment: start; --letterboxing-shadow: none; --letterboxing-outline-color: var(--border-color); - --letterboxing-outline-width: 1px; + --letterboxing-outline-width: var(--border-width); @media not ((prefers-contrast) or (forced-colors)) { /* Match the #sidebar outline width. */ View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/31… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/31… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41751: Fix the NDK path.
by Pier Angelo Vendrame (＠pierov) 10 Mar '26

10 Mar '26

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 90b1805c by Pier Angelo Vendrame at 2026-03-10T11:08:25+01:00 Bug 41751: Fix the NDK path. Now the r of the revision is already in var/release. So, we need to remove it from the build script. Also, rename the variable to ndk_release since var/release is also used as an alias of var/channel: release. - - - - - 3 changed files: - projects/android-ndk/build - projects/android-ndk/config - tools/toolchain-updates/extract-firefox-versions-infos Changes: ===================================== projects/android-ndk/build ===================================== @@ -2,7 +2,7 @@ [% c("var/set_default_env") -%] unzip -qq $rootdir/[% c("input_files_by_name/ndk")%] -mv android-ndk-r[% c("var/release") %] [% project %] +mv android-ndk-[% c("var/ndk_release") %] [% project %] [% c('tar', { tar_src => [ project ], tar_args => '-caf ' _ dest_dir _ '/' _ c('filename'), ===================================== projects/android-ndk/config ===================================== @@ -3,7 +3,7 @@ filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("co version: 29.0.14206865 var: - release: r29 + ndk_release: r29 setup: | mkdir -p /var/tmp/dist tar -C /var/tmp/dist -xf $rootdir/[% c("compiler_tarfile") %] @@ -13,6 +13,6 @@ var: export PATH=$PATH:$ANDROID_NDK_HOME/toolchains/llvm/prebuilt/linux-x86_64/bin input_files: - - URL: 'https://dl.google.com/android/repository/android-ndk-[% c("var/release") %]-linux.zip' + - URL: 'https://dl.google.com/android/repository/android-ndk-[% c("var/ndk_release") %]-linux.zip' name: ndk sha256sum: 4abbbcdc842f3d4879206e9695d52709603e52dd68d3c1fff04b3b5e7a308ecf ===================================== tools/toolchain-updates/extract-firefox-versions-infos ===================================== @@ -321,7 +321,7 @@ sub get_mozboot_android_info { bundletool => 'geckoview', ); my %component_option = ( - ndk => 'var/release', + ndk => 'var/ndk_release', commandlinetools_version_string => 'var/commandlinetools_version_string', commandlinetools_version => 'var/commandlinetools_version', bundletool => 'var/bundletool_version', View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… You're receiving this email because of your account on gitlab.torproject.org.

1 0