- tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser][tor-browser-140.0a1-15.0-2] fixup! BB 41918: Option to reuse last window size when letterboxing is enabled.
by brizental (＠brizental) 30 Jun '25

30 Jun '25

brizental pushed to branch tor-browser-140.0a1-15.0-2 at The Tor Project / Applications / Tor Browser Commits: dacf2bdc by Beatriz Rizental at 2025-06-26T18:32:59+02:00 fixup! BB 41918: Option to reuse last window size when letterboxing is enabled. - - - - - 2 changed files: - browser/app/profile/001-base-profile.js - browser/components/BrowserGlue.sys.mjs Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -411,6 +411,8 @@ pref("privacy.resistFingerprinting.randomDataOnCanvasExtract", true, locked); pref("privacy.resistFingerprinting", true); pref("privacy.resistFingerprinting.exemptedDomains", ""); #endif +// tor-browser#43904: Enable this so we skip the blank window if user is resisting fingerprinting. +pref("privacy.resistFingerprinting.skipEarlyBlankFirstPaint", true); // tor-browser#18603: failIfMajorPerformanceCaveat is an optional attribute that // can be used when creating a WebGL context if the browser detects that the // performance would be low. That could be used to fingerpting users with a not ===================================== browser/components/BrowserGlue.sys.mjs ===================================== @@ -872,11 +872,6 @@ BrowserGlue.prototype = { return false; } - // We don't want to mess up with RFP new window / letterboxing machinery. - if (Services.prefs.getBoolPref("privacy.resistFingerprinting", false)) { - return false; - } - let width = getValue("width"); let height = getValue("height"); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/dacf2bd… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/dacf2bd… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41484: Add missing keyring to application-services project
by brizental (＠brizental) 26 Jun '25

26 Jun '25

brizental pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 36061174 by Beatriz Rizental at 2025-06-26T14:23:24+02:00 Bug 41484: Add missing keyring to application-services project - - - - - 1 changed file: - projects/application-services/config Changes: ===================================== projects/application-services/config ===================================== @@ -3,6 +3,14 @@ version: 140.0 git_hash: 'v[% c("version") %]-TORBROWSER' git_url: https://gitlab.torproject.org/tpo/applications/application-services.git tag_gpg_id: 1 +gpg_keyring: + - boklm.gpg + - brizental.gpg + - clairehurst.gpg + - dan_b.gpg + - ma1.gpg + - morgan.gpg + - pierov.gpg git_submodule: 1 container: use_container: 1 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/3… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/3… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.0a1-15.0-2] fixup! MB 213: Customize the search engines list
by Pier Angelo Vendrame (＠pierov) 26 Jun '25

26 Jun '25

Pier Angelo Vendrame pushed to branch mullvad-browser-140.0a1-15.0-2 at The Tor Project / Applications / Mullvad Browser Commits: c7a07008 by Pier Angelo Vendrame at 2025-06-26T13:07:47+02:00 fixup! MB 213: Customize the search engines list TB 43728: Fix search engines also on MB. - - - - - 2 changed files: - toolkit/components/search/AppProvidedSearchEngine.sys.mjs - toolkit/components/search/content/mullvadBrowserSearchEngineIcons.json Changes: ===================================== toolkit/components/search/AppProvidedSearchEngine.sys.mjs ===================================== @@ -129,29 +129,7 @@ class IconHandler { * source object or null of there is no icon with the supplied width. */ async createIconURL(iconRecord) { - let iconData; - try { - iconData = await this.#iconCollection.attachments.get(iconRecord); - } catch (ex) { - console.error(ex); - } - if (!iconData) { - console.warn("Unable to find the attachment for", iconRecord.id); - // Queue an update in case we haven't downloaded it yet. - this.#pendingUpdatesMap.set(iconRecord.id, iconRecord); - this.#maybeQueueIdle(); - return null; - } - - if (iconData.record.last_modified != iconRecord.last_modified) { - // The icon we have stored is out of date, queue an update so that we'll - // download the new icon. - this.#pendingUpdatesMap.set(iconRecord.id, iconRecord); - this.#maybeQueueIdle(); - } - return URL.createObjectURL( - new Blob([iconData.buffer], { type: iconRecord.attachment.mimetype }) - ); + return iconRecord.url; } QueryInterface = ChromeUtils.generateQI(["nsIObserver"]); @@ -237,11 +215,13 @@ class IconHandler { async #buildIconMap() { try { this.#iconMap = new Map( - await ( - await fetch( - "chrome://global/content/search/mullvadBrowserSearchEngineIcons.json" - ) - ).json() + Object.entries( + await ( + await fetch( + "chrome://global/content/search/mullvadBrowserSearchEngineIcons.json" + ) + ).json() + ) ); } catch (ex) { console.error(ex); ===================================== toolkit/components/search/content/mullvadBrowserSearchEngineIcons.json ===================================== @@ -1,9 +1,23 @@ -[ - ["ddg", "chrome://global/content/search/duckduckgo.ico"], - ["ddg-html", "chrome://global/content/search/duckduckgo.ico"], - ["mullvad-leta", "chrome://global/content/search/mullvad-leta.svg"], - ["mojeek", "chrome://global/content/search/mojeek.ico"], - ["brave", "chrome://global/content/search/brave.svg"], - ["startpage", "chrome://global/content/search/startpage.png"], - ["metager", "chrome://global/content/search/metager.ico"] -] +{ + "ddg": [ + { "url": "chrome://global/content/search/duckduckgo.ico", "iconSize": 16 } + ], + "ddg-html": [ + { "url": "chrome://global/content/search/duckduckgo.ico", "iconSize": 16 } + ], + "mullvad-leta": [ + { "url": "chrome://global/content/search/mullvad-leta.svg", "iconSize": 16 } + ], + "mojeek": [ + { "url": "chrome://global/content/search/mojeek.ico", "iconSize": 16 } + ], + "brave": [ + { "url": "chrome://global/content/search/brave.svg", "iconSize": 16 } + ], + "startpage": [ + { "url": "chrome://global/content/search/startpage.png", "iconSize": 16 } + ], + "metager": [ + { "url": "chrome://global/content/search/metager.ico", "iconSize": 16 } + ] +} View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/c7a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/c7a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41501: Zero out timestamp for cargo vendor archives
by brizental (＠brizental) 26 Jun '25

26 Jun '25

brizental pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 32fa3ff9 by Beatriz Rizental at 2025-06-26T13:41:07+02:00 Bug 41501: Zero out timestamp for cargo vendor archives - - - - - 5 changed files: - projects/application-services/config - projects/cbindgen/config - projects/rcodesign/config - projects/uniffi-rs/config - rbm.conf Changes: ===================================== projects/application-services/config ===================================== @@ -66,7 +66,7 @@ steps: project: application-services pkg_type: cargo_vendor norec: - sha256sum: 23b027cf546e34b57576ab88ef3ce8218cf1654cc44c4bde3c553aea98274f20 + sha256sum: 40497b315d225ef9e0066f67e96b48b9848fa158268af2c3b4031e93dfb1790f enable: '[% !c("var/fetch_gradle_dependencies") %]' - filename: gen_gradle_deps_file.sh enable: '[% c("var/fetch_gradle_dependencies") %]' ===================================== projects/cbindgen/config ===================================== @@ -16,4 +16,4 @@ steps: project: cbindgen pkg_type: cargo_vendor norec: - sha256sum: 5bdbbb834e2230454041251c61994450e41dc793c510b45ed7b0b392e743c03f + sha256sum: b9ce20b24182464902cfc7d0ac0bbe00fce530a4ec58acaeffbc4356fdd5aa51 ===================================== projects/rcodesign/config ===================================== @@ -16,4 +16,4 @@ steps: project: rcodesign pkg_type: cargo_vendor norec: - sha256sum: c778deb784f68b48a51c6c54095c6cd45e37847d65e9db36ce39b4326874ae9c + sha256sum: c0215cfcfe255070f0d6aecba5be92d2266b30b91135153a1907b1cb164a133c ===================================== projects/uniffi-rs/config ===================================== @@ -17,4 +17,4 @@ steps: project: uniffi-rs pkg_type: cargo_vendor norec: - sha256sum: 23c79da9169064f42c34b9dadfee9dcf5ed251f9843615ca3e9a0e59a49f581d + sha256sum: 13aa6d7c6efb3701cb40dfd110e35bcba70a388f6e18fd921229e5f22b06f8ce ===================================== rbm.conf ===================================== @@ -22,6 +22,7 @@ steps: filename: '[% project %]-vendor-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' output_dir: "out/[% project %]/cargo_vendor" compress_tar: gz + timestamp: 0 cargo_vendor: | #!/bin/bash [% c("var/set_default_env") %] View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/3… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/3… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-140.0a1-15.0-2] fixup! BB 40925: Implemented the Security Level component
by Pier Angelo Vendrame (＠pierov) 26 Jun '25

26 Jun '25

Pier Angelo Vendrame pushed to branch base-browser-140.0a1-15.0-2 at The Tor Project / Applications / Tor Browser Commits: c0cb717d by Pier Angelo Vendrame at 2025-06-26T13:17:05+02:00 fixup! BB 40925: Implemented the Security Level component Restore the resource:// URL for SecurityLevel.sys.mjs. - - - - - 1 changed file: - toolkit/components/search/SearchEngine.sys.mjs Changes: ===================================== toolkit/components/search/SearchEngine.sys.mjs ===================================== @@ -14,7 +14,7 @@ const lazy = {}; ChromeUtils.defineESModuleGetters(lazy, { SearchSettings: "moz-src:///toolkit/components/search/SearchSettings.sys.mjs", SearchUtils: "moz-src:///toolkit/components/search/SearchUtils.sys.mjs", - SecurityLevelPrefs: "moz-src:///toolkit/modules/SecurityLevel.sys.mjs", + SecurityLevelPrefs: "resource://gre/modules/SecurityLevel.sys.mjs", OpenSearchEngine: "moz-src:///toolkit/components/search/OpenSearchEngine.sys.mjs", }); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/c0cb717… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/c0cb717… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.0a1-15.0-2] fixup! BB 40925: Implemented the Security Level component
by Pier Angelo Vendrame (＠pierov) 26 Jun '25

26 Jun '25

Pier Angelo Vendrame pushed to branch mullvad-browser-140.0a1-15.0-2 at The Tor Project / Applications / Mullvad Browser Commits: 807a464b by Pier Angelo Vendrame at 2025-06-26T13:04:37+02:00 fixup! BB 40925: Implemented the Security Level component Restore the resource:// URL for SecurityLevel.sys.mjs. - - - - - 1 changed file: - toolkit/components/search/SearchEngine.sys.mjs Changes: ===================================== toolkit/components/search/SearchEngine.sys.mjs ===================================== @@ -14,7 +14,7 @@ const lazy = {}; ChromeUtils.defineESModuleGetters(lazy, { SearchSettings: "moz-src:///toolkit/components/search/SearchSettings.sys.mjs", SearchUtils: "moz-src:///toolkit/components/search/SearchUtils.sys.mjs", - SecurityLevelPrefs: "moz-src:///toolkit/modules/SecurityLevel.sys.mjs", + SecurityLevelPrefs: "resource://gre/modules/SecurityLevel.sys.mjs", OpenSearchEngine: "moz-src:///toolkit/components/search/OpenSearchEngine.sys.mjs", }); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/807… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/807… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.0a1-15.0-2] 2 commits: fixup! BB 40925: Implemented the Security Level component
by Pier Angelo Vendrame (＠pierov) 26 Jun '25

26 Jun '25

Pier Angelo Vendrame pushed to branch tor-browser-140.0a1-15.0-2 at The Tor Project / Applications / Tor Browser Commits: 61efd5f3 by Pier Angelo Vendrame at 2025-06-26T11:37:44+02:00 fixup! BB 40925: Implemented the Security Level component Restore the resource:// URL for SecurityLevel.sys.mjs. - - - - - ba26fcb0 by Pier Angelo Vendrame at 2025-06-26T11:38:52+02:00 fixup! TB 42891: Set the bundled search engine for Tor Browser. TB 43728: Update our custom icon fetching code. Upstream added the possibility to have search engine icons in various size, so we needed to update our code for getting search engines. - - - - - 3 changed files: - toolkit/components/search/AppProvidedSearchEngine.sys.mjs - toolkit/components/search/SearchEngine.sys.mjs - toolkit/components/search/content/torBrowserSearchEngineIcons.json Changes: ===================================== toolkit/components/search/AppProvidedSearchEngine.sys.mjs ===================================== @@ -134,29 +134,7 @@ class IconHandler { * source object or null of there is no icon with the supplied width. */ async createIconURL(iconRecord) { - let iconData; - try { - iconData = await this.#iconCollection.attachments.get(iconRecord); - } catch (ex) { - console.error(ex); - } - if (!iconData) { - console.warn("Unable to find the attachment for", iconRecord.id); - // Queue an update in case we haven't downloaded it yet. - this.#pendingUpdatesMap.set(iconRecord.id, iconRecord); - this.#maybeQueueIdle(); - return null; - } - - if (iconData.record.last_modified != iconRecord.last_modified) { - // The icon we have stored is out of date, queue an update so that we'll - // download the new icon. - this.#pendingUpdatesMap.set(iconRecord.id, iconRecord); - this.#maybeQueueIdle(); - } - return URL.createObjectURL( - new Blob([iconData.buffer], { type: iconRecord.attachment.mimetype }) - ); + return iconRecord.url; } QueryInterface = ChromeUtils.generateQI(["nsIObserver"]); @@ -242,11 +220,13 @@ class IconHandler { async #buildIconMap() { try { this.#iconMap = new Map( - await ( - await fetch( - "chrome://global/content/search/torBrowserSearchEngineIcons.json" - ) - ).json() + Object.entries( + await ( + await fetch( + "chrome://global/content/search/torBrowserSearchEngineIcons.json" + ) + ).json() + ) ); } catch (ex) { console.error(ex); ===================================== toolkit/components/search/SearchEngine.sys.mjs ===================================== @@ -14,7 +14,7 @@ const lazy = {}; ChromeUtils.defineESModuleGetters(lazy, { SearchSettings: "moz-src:///toolkit/components/search/SearchSettings.sys.mjs", SearchUtils: "moz-src:///toolkit/components/search/SearchUtils.sys.mjs", - SecurityLevelPrefs: "moz-src:///toolkit/modules/SecurityLevel.sys.mjs", + SecurityLevelPrefs: "resource://gre/modules/SecurityLevel.sys.mjs", OpenSearchEngine: "moz-src:///toolkit/components/search/OpenSearchEngine.sys.mjs", }); ===================================== toolkit/components/search/content/torBrowserSearchEngineIcons.json ===================================== @@ -1,7 +1,32 @@ -[ - ["ddg", "chrome://global/content/search/duckduckgo.ico"], - ["ddg-onion", "chrome://global/content/search/duckduckgo.ico"], - ["startpage", "chrome://global/content/search/startpage.png"], - ["startpage-onion", "chrome://global/content/search/startpage.png"], - ["wikipedia", "chrome://global/content/search/wikipedia.ico"] -] +{ + "ddg": [ + { + "url": "chrome://global/content/search/duckduckgo.ico", + "imageSize": 16 + } + ], + "ddg-onion": [ + { + "url": "chrome://global/content/search/duckduckgo.ico", + "imageSize": 16 + } + ], + "startpage": [ + { + "url": "chrome://global/content/search/startpage.png", + "imageSize": 16 + } + ], + "startpage-onion": [ + { + "url": "chrome://global/content/search/startpage.png", + "imageSize": 16 + } + ], + "wikipedia": [ + { + "url": "chrome://global/content/search/wikipedia.ico", + "imageSize": 16 + } + ] +} View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/ac53eb… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/ac53eb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41500: Optimize for size on Android.
by Pier Angelo Vendrame (＠pierov) 26 Jun '25

26 Jun '25

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: dc3ea60c by Pier Angelo Vendrame at 2025-06-26T12:02:50+02:00 Bug 41500: Optimize for size on Android. Pass -Oz to tor and its dependencies. - - - - - 5 changed files: - projects/libevent/config - projects/openssl/config - projects/tor/config - projects/zlib/build - projects/zstd/build Changes: ===================================== projects/libevent/config ===================================== @@ -17,7 +17,7 @@ targets: configure_opt_project: --disable-shared android: var: - configure_opt_project: --disable-shared + configure_opt_project: --disable-shared CFLAGS="-Oz" input_files: - project: container-image ===================================== projects/openssl/config ===================================== @@ -26,7 +26,7 @@ targets: configure_opts: '--cross-compile-prefix=[% c("var/build_target") %]- darwin64-[% c("var/macos_arch") %]-cc enable-ec_nistp_64_gcc_128' android: var: - configure_opts: 'CC=[% c("var/CC") %] android-[% c("var/toolchain_arch") %] -no-shared -D__ANDROID_API__=[% c("var/android_min_api") %]' + configure_opts: 'CC=[% c("var/CC") %] android-[% c("var/toolchain_arch") %] -no-shared -D__ANDROID_API__=[% c("var/android_min_api") %] -Oz' input_files: - project: container-image ===================================== projects/tor/config ===================================== @@ -43,7 +43,7 @@ targets: android: var: - configure_opt_project: '--enable-android --enable-static-openssl --enable-static-libevent --enable-zstd --disable-tool-name-check --disable-system-torrc' + configure_opt_project: '--enable-android --enable-static-openssl --enable-static-libevent --enable-zstd --disable-tool-name-check --disable-system-torrc CFLAGS=-Oz' input_files: - project: container-image ===================================== projects/zlib/build ===================================== @@ -7,13 +7,14 @@ tar -C /var/tmp/build -xf [% project %]-[% c('version') %].tar.[% c('compress_ta cd /var/tmp/build/[% project %]-[% c('version') %] [% IF c("var/windows") -%] - make BINARY_PATH=$distdir/lib INCLUDE_PATH=$distdir/include LIBRARY_PATH=$distdir/lib -f win32/Makefile.gcc PREFIX=[% c("arch") %]-w64-mingw32- CC=[% c("arch") %]-w64-mingw32-cc -j[% c("num_procs") %] SHARED_MODE=1 LOC="[% c("var/CFLAGS") %] [% c("var/LDFLAGS") %]" - make BINARY_PATH=$distdir/lib INCLUDE_PATH=$distdir/include LIBRARY_PATH=$distdir/lib -f win32/Makefile.gcc PREFIX=[% c("arch") %]-w64-mingw32- CC=[% c("arch") %]-w64-mingw32-cc -j[% c("num_procs") %] SHARED_MODE=1 LOC="[% c("var/CFLAGS") %] [% c("var/LDFLAGS") %]" install + make BINARY_PATH=$distdir/lib INCLUDE_PATH=$distdir/include LIBRARY_PATH=$distdir/lib -f win32/Makefile.gcc PREFIX=[% c("arch") %]-w64-mingw32- CC=[% c("arch") %]-w64-mingw32-cc -j[% c("num_procs") %] SHARED_MODE=1 LOC="[% c('var/CFLAGS') %] [% c('var/LDFLAGS') %]" + make BINARY_PATH=$distdir/lib INCLUDE_PATH=$distdir/include LIBRARY_PATH=$distdir/lib -f win32/Makefile.gcc PREFIX=[% c("arch") %]-w64-mingw32- CC=[% c("arch") %]-w64-mingw32-cc -j[% c("num_procs") %] SHARED_MODE=1 LOC="[% c('var/CFLAGS') %] [% c('var/LDFLAGS') %]" install [% END -%] [% IF c("var/android") -%] export CHOST=[% c("var/cross_prefix") %] export CC=[% c("var/CC") %] + export CFLAGS="-Oz" ./configure --prefix=$distdir make -j[% c("num_procs") %] make -j[% c("num_procs") %] install ===================================== projects/zstd/build ===================================== @@ -8,6 +8,7 @@ tar -C /var/tmp/build -xf [% project %]-[% c('version') %].tar.[% c('compress_ta cd /var/tmp/build/[% project %]-[% c('version') %] export CPPFLAGS=-DZSTD_MULTITHREAD export CC=[% c("var/CC") %] +export CFLAGS="-Oz" make -C lib -j[% c("num_procs") %] PREFIX=$distdir install # Only need static libraries rm $distdir/lib/libzstd.so* View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41484: Use our fork of application-services
by brizental (＠brizental) 26 Jun '25

26 Jun '25

brizental pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: bda3d714 by Beatriz Rizental at 2025-06-26T11:30:55+02:00 Bug 41484: Use our fork of application-services - - - - - 11 changed files: - − projects/application-services/41422-disable-viaduct.diff - − projects/application-services/a-s-noop.diff - − projects/application-services/apply-bug-13028.diff - − projects/application-services/bug_13028.patch - projects/application-services/build - − projects/application-services/cargo-no-build.sh - projects/application-services/config - − projects/application-services/glean-noop.diff - − projects/application-services/local-repository.diff - − projects/application-services/no-ndk-lookup.diff - − projects/application-services/offline-nimbus-fml.diff Changes: ===================================== projects/application-services/41422-disable-viaduct.diff deleted ===================================== @@ -1,13 +0,0 @@ -diff --git a/components/viaduct/src/backend/ffi.rs b/components/viaduct/src/backend/ffi.rs -index cca6bc68f..5d11eb026 100644 ---- a/components/viaduct/src/backend/ffi.rs -+++ b/components/viaduct/src/backend/ffi.rs -@@ -37,6 +37,8 @@ macro_rules! backend_error { - pub struct FfiBackend; - impl Backend for FfiBackend { - fn send(&self, request: crate::Request) -> Result<crate::Response, Error> { -+ return Err(backend_error!("Viaduct is disabled in Tor Browser.")); -+ - use ffi_support::IntoFfi; - use prost::Message; - super::note_backend("FFI (trusted)"); ===================================== projects/application-services/a-s-noop.diff deleted ===================================== @@ -1,158 +0,0 @@ -diff --git a/build-scripts/component-common.gradle b/build-scripts/component-common.gradle -index a126341b0..3b3579290 100644 ---- a/build-scripts/component-common.gradle -+++ b/build-scripts/component-common.gradle -@@ -111,16 +111,30 @@ ext.configureUniFFIBindgen = { crateName -> - commandLine "${mozconfig.topobjdir}/dist/host/bin/embedded-uniffi-bindgen", 'generate', '--library', libraryPath, "--crate", crateName, '--language', 'kotlin', '--out-dir', uniffiOutDir.get(), '--no-format' - } - } else { -- def libraryPath = megazordNative.asFileTree.matching { -- include "${nativeRustTarget}/libmegazord.*" -- }.singleFile -- -- if (libraryPath == null) { -- throw new GradleException("libmegazord dynamic library path not found") -- } -- exec { -- workingDir project.rootDir -- commandLine '/usr/bin/env', 'cargo', 'uniffi-bindgen', 'generate', '--library', libraryPath, "--crate", crateName, '--language', 'kotlin', '--out-dir', uniffiOutDir.get(), '--no-format' -+ if (crateName.toString().contains("places")) { -+ def libraryPath = megazordNative.asFileTree.matching { -+ include "${nativeRustTarget}/libmegazord.*" -+ }.singleFile -+ -+ if (libraryPath == null) { -+ throw new GradleException("libmegazord dynamic library path not found") -+ } -+ exec { -+ workingDir project.rootDir -+ commandLine '/usr/bin/env', 'cargo', 'uniffi-bindgen', 'generate', '--library', libraryPath, "--crate", crateName, '--language', 'kotlin', '--out-dir', uniffiOutDir.get(), '--no-format' -+ } -+ } else { -+ def libraryPath = "${project.rootDir}/megazords/full/target/debug/libmegazord.so" -+ exec { -+ workingDir project.rootDir -+ def command = ["${rootProject.projectDir}/uniffi-rs/uniffi-bindgen", 'generate', '--library', libraryPath, "--crate", crateName, '--language', 'kotlin', '--out-dir', uniffiOutDir.get(), '--no-format'] -+ println "Executing command: ${command.join(' ')}" -+ commandLine command -+ -+ // Print both stdout and stderr to Gradle's console -+ standardOutput = System.out -+ errorOutput = System.err -+ } - } - } - } -diff --git a/components/fxa-client/android/src/main/java/mozilla/appservices/fxaclient/Config.kt b/components/fxa-client/android/src/main/java/mozilla/appservices/fxaclient/Config.kt -index 78c16dd0a..d2615fa74 100644 ---- a/components/fxa-client/android/src/main/java/mozilla/appservices/fxaclient/Config.kt -+++ b/components/fxa-client/android/src/main/java/mozilla/appservices/fxaclient/Config.kt -@@ -13,4 +13,5 @@ fun FxaServer.contentUrl() = when (this) { - is FxaServer.China -> "https://accounts.firefox.com.cn" - is FxaServer.LocalDev -> "http://127.0.0.1:3030" - is FxaServer.Custom -> this.url -+ is FxaServer.__NOOP -> "" - } -diff --git a/components/nimbus/android/src/main/java/org/mozilla/experiments/nimbus/Nimbus.kt b/components/nimbus/android/src/main/java/org/mozilla/experiments/nimbus/Nimbus.kt -index 376ef90d9..d80eea50f 100644 ---- a/components/nimbus/android/src/main/java/org/mozilla/experiments/nimbus/Nimbus.kt -+++ b/components/nimbus/android/src/main/java/org/mozilla/experiments/nimbus/Nimbus.kt -@@ -535,6 +535,8 @@ open class Nimbus( - ), - ) - } -+ -+ EnrollmentChangeEventType.__NOOP -> {} - } - } - } -diff --git a/megazords/full/Cargo.toml b/megazords/full/Cargo.toml -index c5e9eea19..ce899aac1 100644 ---- a/megazords/full/Cargo.toml -+++ b/megazords/full/Cargo.toml -@@ -9,24 +9,24 @@ license = "MPL-2.0" - crate-type = ["cdylib"] - - [dependencies] --fxa-client = { path = "../../components/fxa-client" } --logins = { path = "../../components/logins" } --tabs = { path = "../../components/tabs/" } --sync_manager = { path = "../../components/sync_manager/" } -+# fxa-client = { path = "../../components/fxa-client" } -+# logins = { path = "../../components/logins" } -+# tabs = { path = "../../components/tabs/" } -+# sync_manager = { path = "../../components/sync_manager/" } - # TODO: Uncomment this code when webext-storage component is integrated in android - # webext-storage = { path = "../../components/webext-storage/" } - places = { path = "../../components/places" } --push = { path = "../../components/push" } --remote_settings = { path = "../../components/remote_settings" } --rust-log-forwarder = { path = "../../components/support/rust-log-forwarder" } --viaduct = { path = "../../components/viaduct" } --nimbus-sdk = { path = "../../components/nimbus" } --autofill = { path = "../../components/autofill" } --crashtest = { path = "../../components/crashtest" } --error-support = { path = "../../components/support/error" } --suggest = { path = "../../components/suggest" } --search = { path = "../../components/search" } --tracing-support = { path = "../../components/support/tracing" } -+# push = { path = "../../components/push" } -+# remote_settings = { path = "../../components/remote_settings" } -+# rust-log-forwarder = { path = "../../components/support/rust-log-forwarder" } -+# viaduct = { path = "../../components/viaduct" } -+# nimbus-sdk = { path = "../../components/nimbus" } -+# autofill = { path = "../../components/autofill" } -+# crashtest = { path = "../../components/crashtest" } -+# error-support = { path = "../../components/support/error" } -+# suggest = { path = "../../components/suggest" } -+# search = { path = "../../components/search" } -+# tracing-support = { path = "../../components/support/tracing" } - - lazy_static = "1.4" - init_rust_components = { path = "../../components/init_rust_components" } -diff --git a/megazords/full/src/lib.rs b/megazords/full/src/lib.rs -index 4b6ba4499..e4fde58ae 100644 ---- a/megazords/full/src/lib.rs -+++ b/megazords/full/src/lib.rs -@@ -8,24 +8,24 @@ - use std::ffi::CString; - use std::os::raw::c_char; - --pub use autofill; --pub use crashtest; --pub use error_support; --pub use fxa_client; --pub use init_rust_components; --pub use logins; --pub use merino; --pub use nimbus; -+// pub use autofill; -+// pub use crashtest; -+// pub use error_support; -+// pub use fxa_client; -+// pub use init_rust_components; -+// pub use logins; -+// pub use merino; -+// pub use nimbus; - pub use places; --pub use push; --pub use remote_settings; --pub use rust_log_forwarder; --pub use search; --pub use suggest; --pub use sync_manager; --pub use tabs; --pub use tracing_support; --pub use viaduct; -+// pub use push; -+// pub use remote_settings; -+// pub use rust_log_forwarder; -+// pub use search; -+// pub use suggest; -+// pub use sync_manager; -+// pub use tabs; -+// pub use tracing_support; -+// pub use viaduct; - // TODO: Uncomment this code when webext-storage component is integrated in android - // pub use webext_storage; - ===================================== projects/application-services/apply-bug-13028.diff deleted ===================================== @@ -1,20 +0,0 @@ -diff --git a/libs/build-all.sh b/libs/build-all.sh -index 650c1299..6c4e5404 100755 ---- a/libs/build-all.sh -+++ b/libs/build-all.sh -@@ -128,6 +128,15 @@ echo $'\ - fi - ' | patch "${NSS_SRC_PATH}/nspr/configure" - -+rm -f python -+ln -s /usr/bin/python3 python -+export PATH=$(pwd):$PATH -+patch_13028=$(realpath bug_13028.patch) -+pushd $NSS_SRC_PATH -+# Apply our proxy bypass defense-in-depth here as well to be on the safe side. -+patch -p2 < $patch_13028 -+popd -+ - if [[ "${PLATFORM}" == "ios" ]] - then - ./build-all-ios.sh "${SQLCIPHER_SRC_PATH}" "${NSS_SRC_PATH}" ===================================== projects/application-services/bug_13028.patch deleted ===================================== @@ -1,79 +0,0 @@ -From 2f0888c348561249d3083555db33c5619840dbfa Mon Sep 17 00:00:00 2001 -From: Mike Perry <mikeperry-git(a)torproject.org> -Date: Mon, 29 Sep 2014 14:30:19 -0700 -Subject: [PATCH] Bug 13028: Prevent potential proxy bypass cases. - -It looks like these cases should only be invoked in the NSS command line -tools, and not the browser, but I decided to patch them anyway because there -literally is a maze of network function pointers being passed around, and it's -very hard to tell if some random code might not pass in the proper proxied -versions of the networking code here by accident. - -diff --git a/security/nss/lib/certhigh/ocsp.c b/security/nss/lib/certhigh/ocsp.c -index cea8456606bf..86fa971cfbef 100644 ---- a/security/nss/lib/certhigh/ocsp.c -+++ b/security/nss/lib/certhigh/ocsp.c -@@ -2932,6 +2932,14 @@ ocsp_ConnectToHost(const char *host, PRUint16 port) - PRNetAddr addr; - char *netdbbuf = NULL; - -+ // XXX: Do we need a unittest ifdef here? We don't want to break the tests, but -+ // we want to ensure nothing can ever hit this code in production. -+#if 1 -+ printf("Tor Browser BUG: Attempted OSCP direct connect to %s, port %u\n", host, -+ port); -+ goto loser; -+#endif -+ - sock = PR_NewTCPSocket(); - if (sock == NULL) - goto loser; -diff --git a/security/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_socket.c b/security/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_socket.c -index e8698376b5be..85791d84a932 100644 ---- a/security/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_socket.c -+++ b/security/nss/lib/libpkix/pkix_pl_nss/module/pkix_pl_socket.c -@@ -1334,6 +1334,13 @@ pkix_pl_Socket_Create( - plContext), - PKIX_COULDNOTCREATESOCKETOBJECT); - -+ // XXX: Do we need a unittest ifdef here? We don't want to break the tests, but -+ // we want to ensure nothing can ever hit this code in production. -+#if 1 -+ printf("Tor Browser BUG: Attempted pkix direct socket connect\n"); -+ PKIX_ERROR(PKIX_PRNEWTCPSOCKETFAILED); -+#endif -+ - socket->isServer = isServer; - socket->timeout = timeout; - socket->clientSock = NULL; -@@ -1433,6 +1440,13 @@ pkix_pl_Socket_CreateByName( - - localCopyName = PL_strdup(serverName); - -+ // XXX: Do we need a unittest ifdef here? We don't want to break the tests, but -+ // we want to ensure nothing can ever hit this code in production. -+#if 1 -+ printf("Tor Browser BUG: Attempted pkix direct connect to %s\n", serverName); -+ PKIX_ERROR(PKIX_PRNEWTCPSOCKETFAILED); -+#endif -+ - sepPtr = strchr(localCopyName, ':'); - /* First strip off the portnum, if present, from the end of the name */ - if (sepPtr) { -@@ -1582,6 +1596,13 @@ pkix_pl_Socket_CreateByHostAndPort( - PKIX_ENTER(SOCKET, "pkix_pl_Socket_CreateByHostAndPort"); - PKIX_NULLCHECK_THREE(hostname, pStatus, pSocket); - -+ // XXX: Do we need a unittest ifdef here? We don't want to break the tests, but -+ // we want to ensure nothing can ever hit this code in production. -+#if 1 -+ printf("Tor Browser BUG: Attempted pkix direct connect to %s, port %u\n", hostname, -+ portnum); -+ PKIX_ERROR(PKIX_PRNEWTCPSOCKETFAILED); -+#endif - - prstatus = PR_GetHostByName(hostname, buf, sizeof(buf), &hostent); - --- -2.27.0 - ===================================== projects/application-services/build ===================================== @@ -68,34 +68,12 @@ EOF tar -xf $rootdir/[% c('input_files_by_name/uniffi-rs') %] -# We add a suffix to the version to make it super specific. -# This is useful for developer builds, which seem to try to fetch -# latest versions of dependencies sometimes. -sed -i '$ s/$/-TORBROWSER/' version.txt - pushd libs ln -s $rootdir/[% c("input_files_by_name/nss") %] ./ -ln -s $rootdir/bug_13028.patch -patch -p2 < $rootdir/apply-bug-13028.diff -patch -p2 < $rootdir/no-ndk-lookup.diff ./build-all.sh desktop ./build-all.sh android popd -pushd megazords/full -NSS_DIR=$(pwd)/../../libs/desktop/linux-x86-64/nss cargo build --target-dir=$(pwd)/target -popd - -cp $rootdir/cargo-no-build.sh megazords/full/android/ -chmod +x megazords/full/android/cargo-no-build.sh -patch -p1 < $rootdir/a-s-noop.diff - -pushd components/external/glean -cp $rootdir/cargo-no-build.sh glean-core/android-native/ -cp $builddir/uniffi-rs/uniffi-bindgen glean-core/android-native/ -patch -p1 < $rootdir/glean-noop.diff -popd - [% IF c('var/fetch_gradle_dependencies') %] # XXX: `assemble` is still not enough to see all fetched dependencies via # Gradle's --debug. See: tor-browser-build#40056. @@ -107,10 +85,7 @@ popd # otherwise `click` barfs. See: https://click.palletsprojects.com/python3/ export LC_ALL=C.UTF-8 export LANG=C.UTF-8 - patch -p1 < $rootdir/local-repository.diff - patch -p1 < $rootdir/offline-nimbus-fml.diff - patch -p1 < $rootdir/41422-disable-viaduct.diff - gradle_flags="--offline --no-daemon" + gradle_flags="--offline --no-daemon -PuniffiBindgenNoop=$builddir/uniffi-rs/uniffi-bindgen -PgradleDependenciesUrl=file:///var/tmp/dist/gradle-dependencies" gradle $gradle_flags assembleRelease gradle $gradle_flags publish mv build/maven $distdir ===================================== projects/application-services/cargo-no-build.sh deleted ===================================== @@ -1,8 +0,0 @@ -#!/bin/bash - -if [[ "$1" == "build" ]]; then - echo "cargo build is disabled." - exit 0 -else - command cargo "$@" -fi ===================================== projects/application-services/config ===================================== @@ -1,7 +1,8 @@ # vim: filetype=yaml sw=2 version: 140.0 -git_hash: 8ee6cb6a23f96ff8e2161926441aea72d6f09249 -git_url: https://github.com/mozilla/application-services +git_hash: 'v[% c("version") %]-TORBROWSER' +git_url: https://gitlab.torproject.org/tpo/applications/application-services.git +tag_gpg_id: 1 git_submodule: 1 container: use_container: 1 @@ -65,19 +66,10 @@ steps: project: application-services pkg_type: cargo_vendor norec: - sha256sum: 4cf0235b525b5ce1d8bcc40e9763a13fd0e79c773749b900b4d7420551cf5114 - - filename: local-repository.diff + sha256sum: 23b027cf546e34b57576ab88ef3ce8218cf1654cc44c4bde3c553aea98274f20 enable: '[% !c("var/fetch_gradle_dependencies") %]' - filename: gen_gradle_deps_file.sh enable: '[% c("var/fetch_gradle_dependencies") %]' - - filename: bug_13028.patch - - filename: apply-bug-13028.diff - - filename: no-ndk-lookup.diff - - filename: offline-nimbus-fml.diff - - filename: glean-noop.diff - - filename: a-s-noop.diff - - filename: cargo-no-build.sh - - filename: 41422-disable-viaduct.diff list_toolchain_updates: git_hash: 'v[% c("version") %]' ===================================== projects/application-services/glean-noop.diff deleted ===================================== @@ -1,26 +0,0 @@ -diff --git a/glean-core/android-native/build.gradle b/glean-core/android-native/build.gradle -index 53716d523..d38af8320 100644 ---- a/glean-core/android-native/build.gradle -+++ b/glean-core/android-native/build.gradle -@@ -48,6 +48,8 @@ android { - } - - cargo { -+ cargoCommand = "${rootDir}/glean-core/android-native/cargo-no-build.sh" -+ - // The directory of the Cargo.toml to build. - module = '../bundle-android' - -diff --git a/glean-core/android/build.gradle b/glean-core/android/build.gradle -index 7748378b4..5af06b1c3 100644 ---- a/glean-core/android/build.gradle -+++ b/glean-core/android/build.gradle -@@ -197,7 +197,7 @@ def generateUniffiBindings = tasks.register("generateUniffiBindings") { - doFirst { - exec { - workingDir project.rootDir -- commandLine 'cargo', 'uniffi-bindgen', 'generate', '--no-format', "${project.projectDir}/${udlFilePath}", '--language', 'kotlin', '--out-dir', UNIFFI_OUT_DIR.get() -+ commandLine '${rootDir}/glean-core/android-native/uniffi-bindgen', 'generate', '--no-format', "${project.projectDir}/${udlFilePath}", '--language', 'kotlin', '--out-dir', UNIFFI_OUT_DIR.get() - } - } - outputs.dir UNIFFI_OUT_DIR ===================================== projects/application-services/local-repository.diff deleted ===================================== @@ -1,92 +0,0 @@ -diff --git a/build.gradle b/build.gradle -index bd516e58c..b30d552c9 100644 ---- a/build.gradle -+++ b/build.gradle -@@ -14,6 +14,14 @@ buildscript { - } - - repositories { -+ maven { -+ url "file:///var/tmp/dist/gradle-dependencies" -+ metadataSources { -+ gradleMetadata() -+ mavenPom() -+ } -+ } -+ - mavenCentral() - google() - maven { -@@ -59,6 +67,14 @@ plugins { - - allprojects { - repositories { -+ maven { -+ url "file:///var/tmp/dist/gradle-dependencies" -+ metadataSources { -+ gradleMetadata() -+ mavenPom() -+ } -+ } -+ - google() - mavenCentral() - maven { -diff --git a/settings.gradle b/settings.gradle -index 4117bc0d3..f1b028dad 100644 ---- a/settings.gradle -+++ b/settings.gradle -@@ -1,6 +1,19 @@ - /* This Source Code Form is subject to the terms of the Mozilla Public - * License, v. 2.0. If a copy of the MPL was not distributed with this - * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ -+ -+pluginManagement { -+ repositories { -+ maven { -+ url "file:///var/tmp/dist/gradle-dependencies" -+ metadataSources { -+ gradleMetadata() -+ mavenPom() -+ } -+ } -+ } -+} -+ - import org.yaml.snakeyaml.Yaml - - // We prefer `appServicesRootDir` over `rootDir` to help us on the path to the monorepo. -@@ -23,6 +36,14 @@ buildscript { - if (!gradle.root.hasProperty("mozconfig")) { - // in app-services - repositories { -+ maven { -+ url "file:///var/tmp/dist/gradle-dependencies" -+ metadataSources { -+ gradleMetadata() -+ mavenPom() -+ } -+ } -+ - mavenCentral() - } - } else { -diff --git a/tools/nimbus-gradle-plugin/settings.gradle b/tools/nimbus-gradle-plugin/settings.gradle -index 7d907f057..c0d213503 100644 ---- a/tools/nimbus-gradle-plugin/settings.gradle -+++ b/tools/nimbus-gradle-plugin/settings.gradle -@@ -14,6 +14,14 @@ buildscript { - if (!gradle.root.hasProperty("mozconfig")) { - // in app-services - repositories { -+ maven { -+ url "file:///var/tmp/dist/gradle-dependencies" -+ metadataSources { -+ gradleMetadata() -+ mavenPom() -+ } -+ } -+ - mavenCentral() - } - } else { ===================================== projects/application-services/no-ndk-lookup.diff deleted ===================================== @@ -1,18 +0,0 @@ -diff --git a/libs/android_defaults.sh b/libs/android_defaults.sh -index 2cfcc4206..9e3d3de97 100755 ---- a/libs/android_defaults.sh -+++ b/libs/android_defaults.sh -@@ -1,11 +1,7 @@ - #!/usr/bin/env bash - --# Find the NDK. --pushd .. --NDK_VERSION=$(./gradlew -q printNdkVersion | tail -1) --export ANDROID_NDK_HOME="$ANDROID_HOME/ndk/$NDK_VERSION" --export ANDROID_NDK_ROOT="$ANDROID_NDK_HOME" --popd || exit -+# Do not try to find the NDK, as it does not work offline. -+# We already define the needed variables in our environment. - - if [[ -z "${ANDROID_NDK_API_VERSION:-}" ]]; then - export ANDROID_NDK_API_VERSION=21 ===================================== projects/application-services/offline-nimbus-fml.diff deleted ===================================== @@ -1,72 +0,0 @@ -diff --git a/tools/nimbus-gradle-plugin/src/main/groovy/org/mozilla/appservices/tooling/nimbus/NimbusAssembleToolsTask.groovy b/tools/nimbus-gradle-plugin/src/main/groovy/org/mozilla/appservices/tooling/nimbus/NimbusAssembleToolsTask.groovy -index 67c9e66d0..6dd949c92 100644 ---- a/tools/nimbus-gradle-plugin/src/main/groovy/org/mozilla/appservices/tooling/nimbus/NimbusAssembleToolsTask.groovy -+++ b/tools/nimbus-gradle-plugin/src/main/groovy/org/mozilla/appservices/tooling/nimbus/NimbusAssembleToolsTask.groovy -@@ -20,6 +20,11 @@ import org.gradle.api.tasks.Nested - import org.gradle.api.tasks.OutputFile - import org.gradle.api.tasks.TaskAction - -+import java.nio.file.Files -+import java.nio.file.Path -+import java.nio.file.Paths -+import java.nio.file.StandardCopyOption -+ - import javax.inject.Inject - - import groovy.transform.Immutable -@@ -84,46 +89,17 @@ abstract class NimbusAssembleToolsTask extends DefaultTask { - - @TaskAction - void assembleTools() { -- def sources = [fetchSpec, *fetchSpec.fallbackSources.get()].collect { -- new Source(new URI(it.archive.get()), new URI(it.hash.get())) -- } -- -- def successfulSource = sources.find { it.trySaveArchiveTo(archiveFile.get().asFile) } -- if (successfulSource == null) { -- throw new GradleException("Couldn't fetch archive from any of: ${sources*.archiveURI.collect { "`$it`" }.join(', ')}") -- } -- -- // We get the checksum, although don't do anything with it yet; -- // Checking it here would be able to detect if the zip file was tampered with -- // in transit between here and the server. -- // It won't detect compromise of the CI server. -- try { -- successfulSource.saveHashTo(hashFile.get().asFile) -- } catch (IOException e) { -- throw new GradleException("Couldn't fetch hash from `${successfulSource.hashURI}`", e) -- } -- -- def zipTree = archiveOperations.zipTree(archiveFile.get()) -- def visitedFilePaths = [] -- zipTree.matching { -- include unzipSpec.includePatterns.get() -- }.visit { FileVisitDetails details -> -- if (!details.directory) { -- if (visitedFilePaths.empty) { -- details.copyTo(fmlBinary.get().asFile) -- fmlBinary.get().asFile.setExecutable(true) -- } -- visitedFilePaths.add(details.relativePath) -+ String nimbusFmlPath = System.getenv("NIMBUS_FML") -+ Path source -+ if (nimbusFmlPath == null) { -+ nimbusFmlPath = System.getProperty("nimbusFml") -+ if (nimbusFmlPath == null) { -+ throw new GradleException("NIMBUS_FML and property nimbusFml are not defined.") - } - } -- -- if (visitedFilePaths.empty) { -- throw new GradleException("Couldn't find any files in archive matching unzip spec: (${unzipSpec.includePatterns.get().collect { "`$it`" }.join(' | ')})") -- } -- -- if (visitedFilePaths.size() > 1) { -- throw new GradleException("Ambiguous unzip spec matched ${visitedFilePaths.size()} files in archive: ${visitedFilePaths.collect { "`$it`" }.join(', ')}") -- } -+ source = Paths.get(nimbusFmlPath) -+ Path dest = fmlBinary.get().asFile.toPath() -+ Files.copy(source, dest, StandardCopyOption.REPLACE_EXISTING) - } - - /** View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] 7 commits: release: new version, 14.5.4 (linux-i686)
by ma1 (＠ma1) 24 Jun '25

24 Jun '25

ma1 pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 1022ffe8 by hackademix at 2025-06-24T19:19:26+02:00 release: new version, 14.5.4 (linux-i686) - - - - - 59332b9a by hackademix at 2025-06-24T19:19:27+02:00 release: new version, 14.5.4 (linux-x86_64) - - - - - 0e668b94 by hackademix at 2025-06-24T19:19:27+02:00 release: new version, 14.5.4 (macos) - - - - - 5b34afee by hackademix at 2025-06-24T19:19:28+02:00 release: new version, 14.5.4 (windows-i686) - - - - - fbaa7cae by hackademix at 2025-06-24T19:19:28+02:00 release: new version, 14.5.4 (windows-x86_64) - - - - - 1e59ae72 by hackademix at 2025-06-24T19:19:29+02:00 release: new version, 14.5.4 (android) - - - - - 9ae3c290 by hackademix at 2025-06-24T19:19:29+02:00 release: new version, 14.5.4 - - - - - 55 changed files: - update_3/release/download-android-aarch64.json - update_3/release/download-android-armv7.json - update_3/release/download-android-x86.json - update_3/release/download-android-x86_64.json - update_3/release/download-linux-i686.json - update_3/release/download-linux-x86_64.json - update_3/release/download-macos.json - update_3/release/download-windows-i686.json - update_3/release/download-windows-x86_64.json - update_3/release/downloads.json - update_3/release/linux-i686/.htaccess - − update_3/release/linux-i686/update-14.5-14.5.3+13.5.18-linux-i686.xml - − update_3/release/linux-i686/update-14.5.1-14.5.3+13.5.18-linux-i686.xml - + update_3/release/linux-i686/update-14.5.1-14.5.4+13.5.18-linux-i686.xml - − update_3/release/linux-i686/update-14.5.2-14.5.3+13.5.18-linux-i686.xml - + update_3/release/linux-i686/update-14.5.2-14.5.4+13.5.18-linux-i686.xml - − update_3/release/linux-i686/update-14.5.3+13.5.18-linux-i686.xml - + update_3/release/linux-i686/update-14.5.3-14.5.4+13.5.18-linux-i686.xml - + update_3/release/linux-i686/update-14.5.4+13.5.18-linux-i686.xml - update_3/release/linux-x86_64/.htaccess - − update_3/release/linux-x86_64/update-14.5-14.5.3+13.5.18-linux-x86_64.xml - − update_3/release/linux-x86_64/update-14.5.1-14.5.3+13.5.18-linux-x86_64.xml - + update_3/release/linux-x86_64/update-14.5.1-14.5.4+13.5.18-linux-x86_64.xml - − update_3/release/linux-x86_64/update-14.5.2-14.5.3+13.5.18-linux-x86_64.xml - + update_3/release/linux-x86_64/update-14.5.2-14.5.4+13.5.18-linux-x86_64.xml - − update_3/release/linux-x86_64/update-14.5.3+13.5.18-linux-x86_64.xml - + update_3/release/linux-x86_64/update-14.5.3-14.5.4+13.5.18-linux-x86_64.xml - + update_3/release/linux-x86_64/update-14.5.4+13.5.18-linux-x86_64.xml - update_3/release/macos/.htaccess - update_3/release/macos/update-13.5.15-14.5.3+13.5.18-macos.xml → update_3/release/macos/update-13.5.15-14.5.4+13.5.18-macos.xml - update_3/release/macos/update-13.5.16-14.5.3+13.5.18-macos.xml → update_3/release/macos/update-13.5.16-14.5.4+13.5.18-macos.xml - update_3/release/macos/update-13.5.17-14.5.3+13.5.18-macos.xml → update_3/release/macos/update-13.5.17-14.5.4+13.5.18-macos.xml - − update_3/release/macos/update-14.5-14.5.3+13.5.18-macos.xml - update_3/release/macos/update-14.5.1-14.5.3+13.5.18-macos.xml → update_3/release/macos/update-14.5.1-14.5.4+13.5.18-macos.xml - update_3/release/macos/update-14.5.2-14.5.3+13.5.18-macos.xml → update_3/release/macos/update-14.5.2-14.5.4+13.5.18-macos.xml - + update_3/release/macos/update-14.5.3-14.5.4+13.5.18-macos.xml - update_3/release/macos/update-14.5.3+13.5.18-macos.xml → update_3/release/macos/update-14.5.4+13.5.18-macos.xml - update_3/release/windows-i686/.htaccess - update_3/release/windows-i686/update-13.5.15-14.5.3+13.5.18-windows-i686.xml → update_3/release/windows-i686/update-13.5.15-14.5.4+13.5.18-windows-i686.xml - update_3/release/windows-i686/update-13.5.16-14.5.3+13.5.18-windows-i686.xml → update_3/release/windows-i686/update-13.5.16-14.5.4+13.5.18-windows-i686.xml - update_3/release/windows-i686/update-13.5.17-14.5.3+13.5.18-windows-i686.xml → update_3/release/windows-i686/update-13.5.17-14.5.4+13.5.18-windows-i686.xml - − update_3/release/windows-i686/update-14.5-14.5.3+13.5.18-windows-i686.xml - update_3/release/windows-i686/update-14.5.1-14.5.3+13.5.18-windows-i686.xml → update_3/release/windows-i686/update-14.5.1-14.5.4+13.5.18-windows-i686.xml - update_3/release/windows-i686/update-14.5.2-14.5.3+13.5.18-windows-i686.xml → update_3/release/windows-i686/update-14.5.2-14.5.4+13.5.18-windows-i686.xml - + update_3/release/windows-i686/update-14.5.3-14.5.4+13.5.18-windows-i686.xml - update_3/release/windows-i686/update-14.5.3+13.5.18-windows-i686.xml → update_3/release/windows-i686/update-14.5.4+13.5.18-windows-i686.xml - update_3/release/windows-x86_64/.htaccess - update_3/release/windows-x86_64/update-13.5.15-14.5.3+13.5.18-windows-x86_64.xml → update_3/release/windows-x86_64/update-13.5.15-14.5.4+13.5.18-windows-x86_64.xml - update_3/release/windows-x86_64/update-13.5.16-14.5.3+13.5.18-windows-x86_64.xml → update_3/release/windows-x86_64/update-13.5.16-14.5.4+13.5.18-windows-x86_64.xml - update_3/release/windows-x86_64/update-13.5.17-14.5.3+13.5.18-windows-x86_64.xml → update_3/release/windows-x86_64/update-13.5.17-14.5.4+13.5.18-windows-x86_64.xml - − update_3/release/windows-x86_64/update-14.5-14.5.3+13.5.18-windows-x86_64.xml - update_3/release/windows-x86_64/update-14.5.1-14.5.3+13.5.18-windows-x86_64.xml → update_3/release/windows-x86_64/update-14.5.1-14.5.4+13.5.18-windows-x86_64.xml - update_3/release/windows-x86_64/update-14.5.2-14.5.3+13.5.18-windows-x86_64.xml → update_3/release/windows-x86_64/update-14.5.2-14.5.4+13.5.18-windows-x86_64.xml - + update_3/release/windows-x86_64/update-14.5.3-14.5.4+13.5.18-windows-x86_64.xml - update_3/release/windows-x86_64/update-14.5.3+13.5.18-windows-x86_64.xml → update_3/release/windows-x86_64/update-14.5.4+13.5.18-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41444: Fix MacOS background file name
by brizental (＠brizental) 24 Jun '25

24 Jun '25

brizental pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 92beb9f1 by Beatriz Rizental at 2025-06-24T18:15:53+02:00 Bug 41444: Fix MacOS background file name - - - - - 1 changed file: - projects/firefox/build Changes: ===================================== projects/firefox/build ===================================== @@ -137,7 +137,7 @@ echo "Starting ./mach build $(date)" echo "Building development artifacts" [% IF c("var/macos") -%] - export MOZ_PKG_MAC_BACKGROUND=$rootdir/dmg-root/[% c('var/ProjectName') %].dmg/.background/background.tiff + export MOZ_PKG_MAC_BACKGROUND=$(find $rootdir/dmg-root/[% c('var/ProjectName') %].dmg/.background -type f) export MOZ_PKG_MAC_DSSTORE=$rootdir/dmg-root/[% c('var/ProjectName') %].dmg/nightly.DS_Store export MOZ_PKG_MAC_ICON=$rootdir/dmg-root/[% c('var/ProjectName') %].dmg/.VolumeIcon.icns [% END -%] View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser-update-responses][main] 4 commits: release: new version, 14.5.4 (linux-x86_64)
by ma1 (＠ma1) 24 Jun '25

24 Jun '25

ma1 pushed to branch main at The Tor Project / Applications / mullvad-browser-update-responses Commits: 2dab350c by hackademix at 2025-06-24T16:28:53+02:00 release: new version, 14.5.4 (linux-x86_64) - - - - - 08048a3e by hackademix at 2025-06-24T16:28:54+02:00 release: new version, 14.5.4 (macos) - - - - - 8a8c5194 by hackademix at 2025-06-24T16:28:54+02:00 release: new version, 14.5.4 (windows-x86_64) - - - - - ede12fe7 by hackademix at 2025-06-24T16:28:54+02:00 release: new version, 14.5.4 - - - - - 31 changed files: - update_1/release/download-linux-x86_64.json - update_1/release/download-macos.json - update_1/release/download-windows-x86_64.json - update_1/release/downloads.json - update_1/release/linux-x86_64/.htaccess - − update_1/release/linux-x86_64/update-14.5-14.5.3-linux-x86_64.xml - − update_1/release/linux-x86_64/update-14.5.1-14.5.3-linux-x86_64.xml - + update_1/release/linux-x86_64/update-14.5.1-14.5.4-linux-x86_64.xml - − update_1/release/linux-x86_64/update-14.5.2-14.5.3-linux-x86_64.xml - + update_1/release/linux-x86_64/update-14.5.2-14.5.4-linux-x86_64.xml - + update_1/release/linux-x86_64/update-14.5.3-14.5.4-linux-x86_64.xml - − update_1/release/linux-x86_64/update-14.5.3-linux-x86_64.xml - + update_1/release/linux-x86_64/update-14.5.4-linux-x86_64.xml - update_1/release/macos/.htaccess - − update_1/release/macos/update-14.5-14.5.3-macos.xml - − update_1/release/macos/update-14.5.1-14.5.3-macos.xml - + update_1/release/macos/update-14.5.1-14.5.4-macos.xml - − update_1/release/macos/update-14.5.2-14.5.3-macos.xml - + update_1/release/macos/update-14.5.2-14.5.4-macos.xml - + update_1/release/macos/update-14.5.3-14.5.4-macos.xml - − update_1/release/macos/update-14.5.3-macos.xml - + update_1/release/macos/update-14.5.4-macos.xml - update_1/release/windows-x86_64/.htaccess - − update_1/release/windows-x86_64/update-14.5-14.5.3-windows-x86_64.xml - − update_1/release/windows-x86_64/update-14.5.1-14.5.3-windows-x86_64.xml - + update_1/release/windows-x86_64/update-14.5.1-14.5.4-windows-x86_64.xml - − update_1/release/windows-x86_64/update-14.5.2-14.5.3-windows-x86_64.xml - + update_1/release/windows-x86_64/update-14.5.2-14.5.4-windows-x86_64.xml - + update_1/release/windows-x86_64/update-14.5.3-14.5.4-windows-x86_64.xml - − update_1/release/windows-x86_64/update-14.5.3-windows-x86_64.xml - + update_1/release/windows-x86_64/update-14.5.4-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-14.5.4-build1
by morgan (＠morgan) 23 Jun '25

23 Jun '25

morgan pushed new tag mb-14.5.4-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-14.5.4-build1
by morgan (＠morgan) 23 Jun '25

23 Jun '25

morgan pushed new tag tbb-14.5.4-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-14.5] Bug 41480,41481: Prepare Tor,Mullvad Browser 14.5.4
by ma1 (＠ma1) 23 Jun '25

23 Jun '25

ma1 pushed to branch maint-14.5 at The Tor Project / Applications / tor-browser-build Commits: ba76b894 by ma1 at 2025-06-23T21:37:04+02:00 Bug 41480,41481: Prepare Tor,Mullvad Browser 14.5.4 - - - - - 8 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,17 @@ +Mullvad Browser 14.5.4 - June 23 2025 + * All Platforms + * Updated Firefox to 128.12.0esr + * Updated NoScript to 13.0.8 + * Bug 450: Rebase Mullvad Browser stable onto 128.12.0esr [mullvad-browser] + * Bug 43782: Add new UX flow for changing security level (Desktop) [tor-browser] + * Bug 43783: Tighten up the SecurityLevel module to enforce new UX flow [tor-browser] + * Bug 43784: Get confirmation from NoScript that settings are applied [tor-browser] + * Bug 43911: Backport security fixes from Firefox 140 [tor-browser] + * Build System + * All Platforms + * Bug 41477: Update keyring/boklm.gpg for new subkeys (2025) [tor-browser-build] + * Bug 41498: Update keyring/morgan.gpg with updated public key [tor-browser-build] + Mullvad Browser 14.5.3 - May 26 2025 * All Platforms * Updated Firefox to 128.11.0esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,23 @@ +Tor Browser 14.5.4 - June 23 2025 + * All Platforms + * Updated NoScript to 13.0.8 + * Bug 43783: Tighten up the SecurityLevel module to enforce new UX flow [tor-browser] + * Bug 43784: Get confirmation from NoScript that settings are applied [tor-browser] + * Bug 43885: Rebase stable onto 128.12.0esr [tor-browser] + * Bug 43911: Backport security fixes from Firefox 140 [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 128.12.0esr + * Bug 43782: Add new UX flow for changing security level (Desktop) [tor-browser] + * Android + * Updated GeckoView to 128.12.0esr + * Bug 43786: Add new UX flow for changing security level (Android) [tor-browser] + * Build System + * All Platforms + * Bug 41477: Update keyring/boklm.gpg for new subkeys (2025) [tor-browser-build] + * Bug 41498: Update keyring/morgan.gpg with updated public key [tor-browser-build] + * Windows + Linux + Android + * Updated Go to 1.23.10 + Tor Browser 14.5.3 - May 26 2025 * All Platforms * Updated NoScript to 13.0.6 ===================================== projects/browser/config ===================================== @@ -111,9 +111,9 @@ input_files: enable: '[% ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4495120/noscript-13.0.6.x… + - URL: https://addons.mozilla.org/firefox/downloads/file/4497468/noscript-13.0.8.x… name: noscript - sha256sum: 85066ef24c44cc839b2d6bbe4d3d08652c8e09f06515e1b86ee72ba26c406989 + sha256sum: 9d978cfe083cb9cce120b5ee41e8933d752d7ab4680bf517c5ec4b29c4cfd2dc - URL: https://addons.mozilla.org/firefox/downloads/file/4492375/ublock_origin-1.6… name: ublock-origin sha256sum: b9e1c868bd1ac1defcabf2e01776d1a90effba34b07fe6a21350d45f022e0e9f ===================================== projects/firefox/config ===================================== @@ -16,12 +16,12 @@ container: use_container: 1 var: - firefox_platform_version: '128.11.0' + firefox_platform_version: '128.12.0' firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '14.5' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 3 + browser_build: 1 copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser ===================================== projects/geckoview/config ===================================== @@ -18,12 +18,12 @@ container: build_apk: 1 var: - firefox_platform_version: '128.11.0' + firefox_platform_version: '128.12.0' geckoview_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '14.5' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 3 + browser_build: 1 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.23.9' +version: '1.23.10' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: 08f6419547563ed9e7037d12b9c8909677c72f75f62ef85887ed9dbf49b8d2dd + source_sha256: 800a7ae1bff179a227b653a2f644517c800443b8b4abf3273af5e1cb7113de59 no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist ===================================== projects/translation/config ===================================== @@ -12,19 +12,19 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 90dbac96420394aa35ce29385814742ac4942b26 + git_hash: 9f6043e1a51d04f9f6f00ade10e410691fe41f66 targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 9cbc3b3d25d2c5c77f1b6b3172ba6bcad2563939 + git_hash: cd3b5ba07ab83e7e0e8e0fdffbc1c4043a5525ca targets: nightly: git_hash: 'tor-browser' mullvad-browser: mullvad-browser: '[% INCLUDE build %]' - git_hash: 111ba9020215431c58d6382c08c57557d6ca50ba + git_hash: bf09d9c070f72ad3aee24c54cb154bab2570247b targets: nightly: git_hash: 'mullvad-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: ee29144d1fa9e2242814a5a96c94ddd975f1b98e + git_hash: c673da1157717b1a3738e69b24eb07ee1245c1a3 compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -73,11 +73,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '14.5.3' - torbrowser_build: 'build2' + torbrowser_version: '14.5.4' + torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2025/05/26 20:25:32' + browser_release_date: '2025/06/23 18:11:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: release browser_platforms: @@ -96,9 +96,9 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 14.5.3 - 14.5.2 - 14.5.1 - - '14.5' mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' torbrowser_legacy_version: 13.5.18 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-13.5.19-build1
by morgan (＠morgan) 23 Jun '25

23 Jun '25

morgan pushed new tag tbb-13.5.19-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-13.5] Bug 41482: Prepare Tor Browser 13.5.19
by morgan (＠morgan) 23 Jun '25

23 Jun '25

morgan pushed to branch maint-13.5 at The Tor Project / Applications / tor-browser-build Commits: 82b59fa5 by Morgan at 2025-06-23T19:18:11+00:00 Bug 41482: Prepare Tor Browser 13.5.19 - - - - - 5 changed files: - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,14 @@ +Tor Browser 13.5.19 - June 24 2025 + * All Platforms + * Updated NoScript to 13.0.8 + * Bug 43835: Backport tor-browser#43782: Add new UX flow for changing security level (Desktop) [tor-browser] + * Bug 43910: Rebase Tor Browser 13.5.19 Legacy onto Firefox 115.25.0esr [tor-browser] + * Bug 43911: Backport security fixes from Firefox 140 [tor-browser] + * Build System + * All Platforms + * Bug 41477: Update keyring/boklm.gpg for new subkeys (2025) [tor-browser-build] + * Bug 41498: Update keyring/morgan.gpg with updated public key [tor-browser-build] + Tor Browser 13.5.18 - May 27 2025 * All Platforms * Updated Firefox to 115.24.0esr ===================================== projects/browser/config ===================================== @@ -103,9 +103,9 @@ input_files: enable: '[% ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4495120/noscript-13.0.6.x… + - URL: https://addons.mozilla.org/firefox/downloads/file/4497468/noscript-13.0.8.x… name: noscript - sha256sum: 85066ef24c44cc839b2d6bbe4d3d08652c8e09f06515e1b86ee72ba26c406989 + sha256sum: 9d978cfe083cb9cce120b5ee41e8933d752d7ab4680bf517c5ec4b29c4cfd2dc - URL: https://addons.mozilla.org/firefox/downloads/file/4359936/ublock_origin-1.6… name: ublock-origin sha256sum: e2cda9b2a1b0a7f6e5ef0da9f87f28df52f8560587ba2e51a3003121cfb81600 ===================================== projects/firefox/config ===================================== @@ -16,12 +16,12 @@ container: use_container: 1 var: - firefox_platform_version: 115.24.0 + firefox_platform_version: 115.25.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '13.5' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 2 + browser_build: 1 branding_directory_prefix: 'tb' copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 90dbac96420394aa35ce29385814742ac4942b26 + git_hash: 9f6043e1a51d04f9f6f00ade10e410691fe41f66 targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 9cbc3b3d25d2c5c77f1b6b3172ba6bcad2563939 + git_hash: cd3b5ba07ab83e7e0e8e0fdffbc1c4043a5525ca targets: nightly: git_hash: 'tor-browser' ===================================== rbm.conf ===================================== @@ -73,18 +73,18 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '13.5.18' + torbrowser_version: '13.5.19' torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2025/05/26 20:58:45' + browser_release_date: '2025/06/23 18:56:30' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 13.5.18 - 13.5.17 - 13.5.16 - - 13.5.15 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/8… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-115.25.0esr-13.5-1-build1
by ma1 (＠ma1) 23 Jun '25

23 Jun '25

ma1 pushed new tag tor-browser-115.25.0esr-13.5-1-build1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.0a1-15.0-2] fixup! BB 43615: Add Gitlab Issue and Merge Request templates
by morgan (＠morgan) 23 Jun '25

23 Jun '25

morgan pushed to branch mullvad-browser-140.0a1-15.0-2 at The Tor Project / Applications / Mullvad Browser Commits: 27e30268 by Morgan at 2025-06-23T18:18:52+00:00 fixup! BB 43615: Add Gitlab Issue and Merge Request templates now instruct users to /request_review instead of /cc - - - - - 1 changed file: - .gitlab/merge_request_templates/Default.md Changes: ===================================== .gitlab/merge_request_templates/Default.md ===================================== @@ -60,7 +60,7 @@ #### Request Reviewer - [ ] Request review from an applications developer depending on modified system: - - **NOTE**: if the MR modifies multiple areas, please `/cc` all the relevant reviewers (since Gitlab only allows 1 reviewer) + - **NOTE**: if the MR modifies multiple areas, please `/request_review` all the relevant reviewers - **accessibility** : henry - **android** : clairehurst, dan - **build system** : boklm View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/27e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/27e… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-140.0a1-15.0-2] fixup! BB 43615: Add Gitlab Issue and Merge Request templates
by morgan (＠morgan) 23 Jun '25

23 Jun '25

morgan pushed to branch base-browser-140.0a1-15.0-2 at The Tor Project / Applications / Tor Browser Commits: 76ee5f39 by Morgan at 2025-06-23T18:17:24+00:00 fixup! BB 43615: Add Gitlab Issue and Merge Request templates now instruct users to /request_review instead of /cc - - - - - 1 changed file: - .gitlab/merge_request_templates/Default.md Changes: ===================================== .gitlab/merge_request_templates/Default.md ===================================== @@ -62,7 +62,7 @@ #### Request Reviewer - [ ] Request review from an applications developer depending on modified system: - - **NOTE**: if the MR modifies multiple areas, please `/cc` all the relevant reviewers (since Gitlab only allows 1 reviewer) + - **NOTE**: if the MR modifies multiple areas, please `/request_review` all the relevant reviewers - **accessibility** : henry - **android** : clairehurst, dan - **build system** : boklm View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/76ee5f3… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/76ee5f3… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.0a1-15.0-2] fixup! BB 43615: Add Gitlab Issue and Merge Request templates
by morgan (＠morgan) 23 Jun '25

23 Jun '25

morgan pushed to branch tor-browser-140.0a1-15.0-2 at The Tor Project / Applications / Tor Browser Commits: ac53eb6b by Morgan at 2025-06-23T14:57:50+00:00 fixup! BB 43615: Add Gitlab Issue and Merge Request templates now instruct users to /request_review instead of /cc - - - - - 1 changed file: - .gitlab/merge_request_templates/Default.md Changes: ===================================== .gitlab/merge_request_templates/Default.md ===================================== @@ -62,7 +62,7 @@ #### Request Reviewer - [ ] Request review from an applications developer depending on modified system: - - **NOTE**: if the MR modifies multiple areas, please `/cc` all the relevant reviewers (since Gitlab only allows 1 reviewer) + - **NOTE**: if the MR modifies multiple areas, please `/request_review` all the relevant reviewers - **accessibility** : henry - **android** : clairehurst, dan - **build system** : boklm View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ac53eb6… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ac53eb6… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: Bug 41499: Update build_apk step for new geckoview outdir structure
by brizental (＠brizental) 23 Jun '25

23 Jun '25

brizental pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 6e6a9168 by Beatriz Rizental at 2025-06-23T19:35:52+02:00 Bug 41499: Update build_apk step for new geckoview outdir structure - - - - - 6efc7226 by Beatriz Rizental at 2025-06-23T19:35:52+02:00 Bug 41499: Comment out artifact copy Temporary fix just so we get nightlies tomorrow. - - - - - 2 changed files: - projects/browser/build.android - projects/geckoview/build_apk Changes: ===================================== projects/browser/build.android ===================================== @@ -121,6 +121,6 @@ apksigner sign --verbose --min-sdk-version [% c("var/android_min_api") %] --ks $ [% END -%] [% IF c("var/nightly") -%] - mkdir -p "[% dest_dir %]/[% c('filename') %]/artifacts" - cp -r $rootdir/[% c('input_files_by_name/fenix') %]/artifacts [% dest_dir %]/[% c('filename') %] + # mkdir -p "[% dest_dir %]/[% c('filename') %]/artifacts" + # cp -r $rootdir/[% c('input_files_by_name/fenix') %]/artifacts [% dest_dir %]/[% c('filename') %] [% END %] ===================================== projects/geckoview/build_apk ===================================== @@ -3,19 +3,15 @@ echo "Starting the creation of the fat AAR $(date)" -tar -C $builddir -xf [% c('input_files_by_name/geckoview_armv7') %] -tar -C $builddir -xf [% c('input_files_by_name/geckoview_aarch64') %] -tar -C $builddir -xf [% c('input_files_by_name/geckoview_x86') %] -tar -C $builddir -xf [% c('input_files_by_name/geckoview_x86_64') %] tar -C $builddir -xf [% project %]-[% c('version') %].tar.[% c('compress_tar') %] # Specify the architectures we want to merge export MOZ_ANDROID_FAT_AAR_ARCHITECTURES=armeabi-v7a,arm64-v8a,x86,x86_64 -export MOZ_ANDROID_FAT_AAR_ARMEABI_V7A=$builddir/geckoview/*armeabi-v7a*.aar -export MOZ_ANDROID_FAT_AAR_ARM64_V8A=$builddir/geckoview/*arm64-v8a*.aar +export MOZ_ANDROID_FAT_AAR_ARMEABI_V7A=$rootdir/[% c('input_files_by_name/geckoview_armv7') %]/geckoview/*.aar +export MOZ_ANDROID_FAT_AAR_ARM64_V8A=$rootdir/[% c('input_files_by_name/geckoview_aarch64') %]/geckoview/*.aar # Specifying just "x86" is not differentiating enough -export MOZ_ANDROID_FAT_AAR_X86=$builddir/geckoview/*x86-*.aar -export MOZ_ANDROID_FAT_AAR_X86_64=$builddir/geckoview/*x86_64*.aar +export MOZ_ANDROID_FAT_AAR_X86=$rootdir/[% c('input_files_by_name/geckoview_x86') %]/geckoview/*.aar +export MOZ_ANDROID_FAT_AAR_X86_64=$rootdir/[% c('input_files_by_name/geckoview_x86_64') %]/geckoview/*.aar cd $builddir/[% project %]-[% c("version") %] ln -s mozconfig-android-all .mozconfig View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-13.5] Bug 41498: Update keyring/morgan.gpg with updated public key
by morgan (＠morgan) 23 Jun '25

23 Jun '25

morgan pushed to branch maint-13.5 at The Tor Project / Applications / tor-browser-build Commits: f63cb52f by Morgan at 2025-06-23T15:56:59+00:00 Bug 41498: Update keyring/morgan.gpg with updated public key - - - - - 1 changed file: - keyring/morgan.gpg Changes: ===================================== keyring/morgan.gpg ===================================== Binary files a/keyring/morgan.gpg and b/keyring/morgan.gpg differ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-14.5] Bug 41498: Update keyring/morgan.gpg with updated public key
by morgan (＠morgan) 23 Jun '25

23 Jun '25

morgan pushed to branch maint-14.5 at The Tor Project / Applications / tor-browser-build Commits: 2c09a704 by Morgan at 2025-06-23T15:55:59+00:00 Bug 41498: Update keyring/morgan.gpg with updated public key - - - - - 1 changed file: - keyring/morgan.gpg Changes: ===================================== keyring/morgan.gpg ===================================== Binary files a/keyring/morgan.gpg and b/keyring/morgan.gpg differ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/2… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/2… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41498: Update keyring/morgan.gpg with updated public key
by morgan (＠morgan) 23 Jun '25

23 Jun '25

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 2f9e19ba by Morgan at 2025-06-23T15:54:56+00:00 Bug 41498: Update keyring/morgan.gpg with updated public key - - - - - 1 changed file: - keyring/morgan.gpg Changes: ===================================== keyring/morgan.gpg ===================================== Binary files a/keyring/morgan.gpg and b/keyring/morgan.gpg differ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/2… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/2… You're receiving this email because of your account on gitlab.torproject.org.

1 0