- tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] 2 commits: fixup! BB 42027: Base Browser migration procedures.
by henry (＠henry) 03 Aug '26

03 Aug '26

henry pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: b08090cb by Henry Wilkes at 2026-08-03T13:14:55+01:00 fixup! BB 42027: Base Browser migration procedures. BB 44802: Hide safe browsing settings. - - - - - 7a387a89 by Henry Wilkes at 2026-08-03T13:15:53+01:00 fixup! BB 44711: Hide unwanted setting controls in Base Browser. BB 44802: Hide safe browsing settings. - - - - - 2 changed files: - browser/components/ProfileDataUpgrader.sys.mjs - browser/components/preferences/config/privacy.mjs Changes: ===================================== browser/components/ProfileDataUpgrader.sys.mjs ===================================== @@ -1040,7 +1040,8 @@ export let ProfileDataUpgrader = { // Version 4: 15.0a2: Drop ML components. tor-browser#44045. // Version 5: 15.0a3: Disable LaterRun using prefs. tor-browser#42630. // Version 6: 15.0a4: Reset browser colors. tor-browser#43850. - const MIGRATION_VERSION = 6; + // Version 7: 16.0a10: Reset safe browsing preferences. tor-browser#44802. + const MIGRATION_VERSION = 7; const MIGRATION_PREF = "basebrowser.migration.version"; if (isNewProfile) { @@ -1138,6 +1139,21 @@ export let ProfileDataUpgrader = { } } } + if (currentVersion < 7) { + // Clear these preferences since: + // + They aren't expected to work. + // + We are hiding the UI to change these. tor-browser#44802. + for (const prefName of [ + "browser.safebrowsing.phishing.enabled", + "browser.safebrowsing.malware.enabled", + "browser.safebrowsing.downloads.enabled", + "browser.safebrowsing.downloads.remote.block_uncommon", + "browser.safebrowsing.downloads.remote.block_potentially_unwanted", + "urlclassifier.malwareTable", + ]) { + Services.prefs.clearUserPref(prefName); + } + } Services.prefs.setIntPref(MIGRATION_PREF, MIGRATION_VERSION); }, ===================================== browser/components/preferences/config/privacy.mjs ===================================== @@ -2424,6 +2424,8 @@ Preferences.addSetting({ Preferences.addSetting({ id: "enableSafeBrowsing", deps: ["enableSafeBrowsingPhishing", "enableSafeBrowsingMalware"], + // Does not work in Tor Browser. tor-browser#44802. + visible: () => false, get: (_value, deps) => { return ( deps.enableSafeBrowsingPhishing.value && @@ -2453,12 +2455,8 @@ Preferences.addSetting( uncommonDownloads: "browser.safebrowsing.downloads.remote.block_potentially_unwanted", }, - ({ malware, phishing, downloads, unwantedDownloads, uncommonDownloads }) => - (!malware.value && !malware.locked) || - (!phishing.value && !phishing.locked) || - (!downloads.value && !downloads.locked) || - (!unwantedDownloads.value && !unwantedDownloads.locked) || - (!uncommonDownloads.value && !uncommonDownloads.locked), + // Does not work in Tor Browser. tor-browser#44802. + () => false, true ) ); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/becb4a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/becb4a… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/torbrowser-launcher] Pushed new branch update-before-launch
by Micah Lee (＠micahflee) 31 Jul '26

31 Jul '26

Micah Lee pushed new branch update-before-launch at The Tor Project / Applications / torbrowser-launcher -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/-/tree/u… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] 2 commits: fixup! [android] Modify build system
by brizental (＠brizental) 31 Jul '26

31 Jul '26

brizental pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: b827102a by Beatriz Rizental at 2026-07-31T03:43:54+02:00 fixup! [android] Modify build system Bug 44898: Remove our custom handling of NIMBUS_FML environment variable in favour of upstream's. - - - - - becb4a94 by Beatriz Rizental at 2026-07-31T03:43:54+02:00 fixup! TB 42669: [android] Use custom no-op app-services Bug 44898: Remove our custom handling of NIMBUS_FML environment variable in favour of upstream's. - - - - - 4 changed files: - mobile/android/fenix/app/build.gradle - mobile/android/gradle/plugins/nimbus-gradle-plugin/src/main/kotlin/org/mozilla/appservices/tooling/nimbus/NimbusAssembleToolsTask.kt - mobile/android/gradle/plugins/nimbus-gradle-plugin/src/main/kotlin/org/mozilla/appservices/tooling/nimbus/NimbusGradlePlugin.kt - mobile/android/moz.configure Changes: ===================================== mobile/android/fenix/app/build.gradle ===================================== @@ -291,18 +291,12 @@ androidComponents { onVariants(selector().all()) { variant -> def buildType = variant.buildType - // When this is set, a-s doesn't attempt to download NIMBUS_FML. - if (gradle.mozconfig.substs.NIMBUS_FML) { - System.setProperty("nimbusFml", gradle.mozconfig.substs.NIMBUS_FML) - } - def disableTor = providers.gradleProperty("disableTor").getOrElse(false) project.logger.debug("----------------------------------------------") project.logger.debug("Variant name: " + variant.name) project.logger.debug("Build type: " + buildType) project.logger.debug("Flavor: " + variant.flavorName) - project.logger.debug("nimbusFml: " + providers.gradleProperty("nimbusFml").getOrNull()) project.logger.debug("Tor is disabled: " + disableTor) variant.buildConfigFields.put("DISABLE_TOR", new BuildConfigField("boolean", "$disableTor", null)) ===================================== mobile/android/gradle/plugins/nimbus-gradle-plugin/src/main/kotlin/org/mozilla/appservices/tooling/nimbus/NimbusAssembleToolsTask.kt ===================================== @@ -28,11 +28,6 @@ import java.net.URI import java.security.MessageDigest import javax.inject.Inject -import java.nio.file.Files -import java.nio.file.Path -import java.nio.file.Paths -import java.nio.file.StandardCopyOption - /** * A task that fetches a prebuilt `nimbus-fml` binary for the current platform. * @@ -118,17 +113,6 @@ abstract class NimbusAssembleToolsTask : DefaultTask() { @TaskAction fun assembleTools() { - var nimbusFml = System.getenv("NIMBUS_FML") ?: "" - if (nimbusFml == "") { - nimbusFml = System.getProperty("nimbusFml", "") - } - if (nimbusFml != "") { - val source = File(nimbusFml).toPath() - val dest = fmlBinary.get().asFile.toPath() - Files.copy(source, dest, StandardCopyOption.REPLACE_EXISTING) - return - } - val binaryFile = fmlBinary.get().asFile val archiveFileObj = archiveFile.get().asFile val hashFileObj = hashFile.get().asFile ===================================== mobile/android/gradle/plugins/nimbus-gradle-plugin/src/main/kotlin/org/mozilla/appservices/tooling/nimbus/NimbusGradlePlugin.kt ===================================== @@ -118,20 +118,20 @@ class NimbusPlugin : Plugin<Project> { @Suppress("UNCHECKED_CAST") val mozconfigSubsts = mozconfig?.get("substs") as? Map<String, Any> - if (mozconfigSubsts?.get("MOZ_APPSERVICES_IN_TREE").isTruthy()) { - // This is subtle. We capture `NIMBUS_FML` in the configuration cache as a `String`. - // If we access `project.gradle...` in the `provider` `Callable` below, we capture the - // `Project` in the configuration cache, which is not desirable. - // - // We can't produce a `File` immediately, because in some configurations, namely - // `android-gradle-dependencies` tasks, `NIMBUS_FML` is legitimately unset (`null`). So - // we pass strings around and map to `File` types lazily "by hand". - // - // Finally: if this process fails, including with an exception, the framework swallows - // the details and says something like `MissingValueException`, which can be hard to - // interpret. Hence, this explanation of the details. - val nimbusFmlPath = mozconfigSubsts?.get("NIMBUS_FML") as? String - + // This is subtle. We capture `NIMBUS_FML` in the configuration cache as a `String`. + // If we access `project.gradle...` in the `provider` `Callable` below, we capture the + // `Project` in the configuration cache, which is not desirable. + // + // We can't produce a `File` immediately, because in some configurations, namely + // `android-gradle-dependencies` tasks, `NIMBUS_FML` is legitimately unset (`null`). So + // we pass strings around and map to `File` types lazily "by hand". + // + // Finally: if this process fails, including with an exception, the framework swallows + // the details and says something like `MissingValueException`, which can be hard to + // interpret. Hence, this explanation of the details. + val nimbusFmlPath = mozconfigSubsts?.get("NIMBUS_FML") as? String + + if (nimbusFmlPath != null) { val fmlBinaryString = project.providers.provider { nimbusFmlPath } ===================================== mobile/android/moz.configure ===================================== @@ -216,9 +216,8 @@ def check_host_bin_prog(var, prog, toolchain=None): ) -# tb-44669 - this was added in rebase 148 to make android compile but tracking potentially better fix -#check_host_bin_prog("EMBEDDED_UNIFFI_BINDGEN", "embedded-uniffi-bindgen") -#check_host_bin_prog("NIMBUS_FML", "nimbus-fml") +check_host_bin_prog("EMBEDDED_UNIFFI_BINDGEN", "embedded-uniffi-bindgen") +check_host_bin_prog("NIMBUS_FML", "nimbus-fml") project_flag( "MOZ_ANDROID_NETWORK_STATE", View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/1676ad… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/1676ad… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.0esr-16.0-1] fixup! MB 39: Add home page about:mullvad-browser
by Pier Angelo Vendrame (＠pierov) 30 Jul '26

30 Jul '26

Pier Angelo Vendrame pushed to branch mullvad-browser-153.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: bd184026 by Pier Angelo Vendrame at 2026-07-30T18:57:23+02:00 fixup! MB 39: Add home page about:mullvad-browser MB 564: Fix about:mullvadbrowser colors. - - - - - 1 changed file: - browser/components/mullvad-browser/content/aboutMullvadBrowser.css Changes: ===================================== browser/components/mullvad-browser/content/aboutMullvadBrowser.css ===================================== @@ -91,7 +91,7 @@ body:not(.no-update) #mullvad-browser-intro { /* Dark background. */ background: linear-gradient(to bottom, var(--branding-gradient-start) 0%, var(--branding-gradient-middle) 55%, var(--branding-gradient-end) 100%); /* Same as --text-color when "prefers-color-scheme: dark" */ - --text-color-dark: var(--color-gray-05); + --text-color-dark: var(--color-gray-0); color: var(--text-color-dark); --link-color: var(--branding-link-color); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/bd1… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/bd1… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] 2 commits: fixup! Tor Browser strings
by henry (＠henry) 30 Jul '26

30 Jul '26

henry pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 87ad933f by Henry Wilkes at 2026-07-30T16:37:03+00:00 fixup! Tor Browser strings TB 45051: Add notification strings. - - - - - 1676ad67 by Henry Wilkes at 2026-07-30T16:37:03+00:00 TB 45051: Add an external tor provider notification. - - - - - 4 changed files: - browser/components/BrowserComponents.manifest - + browser/modules/TorProviderExternalNotification.sys.mjs - browser/modules/moz.build - toolkit/locales/en-US/toolkit/global/tor-browser.ftl Changes: ===================================== browser/components/BrowserComponents.manifest ===================================== @@ -64,6 +64,7 @@ category browser-window-delayed-startup resource:///modules/HomePage.sys.mjs Hom category browser-window-delayed-startup moz-src:///browser/components/reportbrokensite/ReportBrokenSite.sys.mjs ReportBrokenSite.init category browser-window-delayed-startup moz-src:///browser/components/search/SearchUIUtils.sys.mjs SearchUIUtils.init category browser-window-delayed-startup resource:///modules/taskbartabs/TaskbarTabsPageAction.sys.mjs TaskbarTabsPageAction.init +category browser-window-delayed-startup moz-src:///browser/modules/TorProviderExternalNotification.sys.mjs TorProviderExternalNotification.delayedStartup category browser-window-location-change chrome://browser/content/browser-places.js BookmarkingUI.onLocationChange category browser-window-location-change chrome://browser/content/browser-sitePermissionPanel.js gPermissionPanel.onLocationChange @@ -93,6 +94,7 @@ category browser-window-unload chrome://browser/content/browser.js#CombinedStopR category browser-window-unload chrome://browser/content/browser-addons.js gUnifiedExtensions.uninit category browser-window-unload chrome://browser/content/browser.js#FirefoxViewHandler FirefoxViewHandler.uninit category browser-window-unload moz-src:///browser/components/tabbrowser/NewTabPagePreloading.sys.mjs NewTabPagePreloading.removePreloadedBrowser +category browser-window-unload moz-src:///browser/modules/TorProviderExternalNotification.sys.mjs TorProviderExternalNotification.unload # The category below is specific to Tabbrowser destruction. For consumers that need to uninitialize during # window unload, use 'browser-window-unload' instead. ===================================== browser/modules/TorProviderExternalNotification.sys.mjs ===================================== @@ -0,0 +1,219 @@ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at https://mozilla.org/MPL/2.0/. */ + +const lazy = {}; + +ChromeUtils.defineESModuleGetters(lazy, { + BrowserWindowTracker: "resource:///modules/BrowserWindowTracker.sys.mjs", + TorConnect: "moz-src:///toolkit/modules/TorConnect.sys.mjs", + TorProviderBuilder: + "moz-src:///toolkit/components/tor-launcher/TorProviderBuilder.sys.mjs", + TorProviderState: + "moz-src:///toolkit/components/tor-launcher/TorProviderBuilder.sys.mjs", + TorProviderTopics: + "moz-src:///toolkit/components/tor-launcher/TorProviderBuilder.sys.mjs", +}); + +export const TorProviderExternalNotification = { + /** + * Whether we have been initialized. + * + * @type {boolean} + */ + _initialized: false, + + /** + * Callback for browser-window-delayed-startup. + * + * @param {Window} win - The browser window that was just loaded. + */ + delayedStartup(win) { + if (lazy.TorConnect.enabled) { + // Let TorConnect handle the ProviderStateChanged. + return; + } + + if (!this._initialized) { + this._initialized = true; + this._setProviderState(lazy.TorProviderBuilder.currentState()); + Services.obs.addObserver( + this, + lazy.TorProviderTopics.ProviderStateChanged + ); + } else { + // Maybe show the notification in the new window. + this._updateNotification(win); + } + }, + + /** + * Callback for browser-window-unload. + * + * @param {Window} win - The browser window that is being unloaded. + */ + unload(win) { + if (this._notification?.window === win) { + this._notification = null; + } + }, + + observe(subject, topic, data) { + switch (topic) { + case lazy.TorProviderTopics.ProviderStateChanged: + this._setProviderState(data); + break; + } + }, + + /** + * The last seen `TorProviderState` state. + * + * @type {?string} + */ + _providerState: null, + + /** + * Set the provider state. + * + * @param {string} state - The `TorProviderState` state we are now in. + */ + _setProviderState(state) { + if (this._providerState === state) { + // No change, ignore. + return; + } + + this._providerState = state; + // A new instance of a provider, so ignore any previously dismissed + // notifications. + this._notificationUserDismissed = false; + this._updateNotification(); + }, + + /** + * The notification that is currently shown. + * + * @type {?{ window: Window, elementPromise: Promise<NotificationMessage> }} + */ + _notification: null, + /** + * Whether the user has dismissed the notification for the current TorProvider + * instance. + * + * @type {boolean} + */ + _notificationUserDismissed: false, + + /** + * Update the notification depending on the latest `TorProviderState`. + * + * @param {Window} [win] - A newly opened browser window to maybe show the + * notification in. If not given, the notification might be shown in the + * current top window. + */ + _updateNotification(win) { + if (this._providerState === lazy.TorProviderState.Starting) { + this._updateNotificationButton( + "tor-external-process-error-retry-button-retrying" + ); + return; + } + + if (this._providerState === lazy.TorProviderState.Running) { + if (this._notification) { + // If there is a notification, close it. + const { elementPromise } = this._notification; + this._notification = null; + elementPromise.then(el => el.remove()); + } + return; + } + // Else, _providerState is TorProviderState.Stopped. + + if (this._notificationUserDismissed) { + // User has already dismissed this in a different window. + return; + } + + if (this._notification) { + // Already showing. + this._updateNotificationButton("tor-external-process-error-retry-button"); + return; + } + + if (!win) { + win = lazy.BrowserWindowTracker.getTopWindow(); + if (!win) { + // Wait for a window. + return; + } + } + + const buttons = [ + { + supportPage: "tor-manual:get-in-touch__bug-or-feedback", + }, + { + "l10n-id": "tor-external-process-error-retry-button", + callback: () => { + if (this._providerState === lazy.TorProviderState.Stopped) { + lazy.TorProviderBuilder.replace(); + } + // Keep open. + return true; + }, + }, + ]; + + const notification = { + window: win, + elementPromise: win.gNotificationBox.appendNotification( + "tor-provider-external-process-stopped", + { + label: { "l10n-id": "tor-external-process-error-message" }, + priority: win.gNotificationBox.PRIORITY_WARNING_HIGH, + eventCallback: event => { + switch (event) { + case "dismissed": + this._notificationUserDismissed = true; + break; + case "disconnected": + if (this._notification === notification) { + this._notification = null; + } + break; + } + }, + }, + buttons + ), + }; + this._notification = notification; + }, + + /** + * Update the notification button if it exists. + * + * @param {string} l10nId - The Fluent ID for the string we want to show in + * the button. + */ + async _updateNotificationButton(l10nId) { + if (!this._notification) { + return; + } + const state = this._providerState; + const notification = this._notification; + const notificationEl = await notification.elementPromise; + + if (this._providerState !== state || this._notification !== notification) { + // Replaced. + return; + } + + notificationEl.buttonContainer.firstElementChild.setAttribute( + "data-l10n-id", + l10nId + ); + }, +}; ===================================== browser/modules/moz.build ===================================== @@ -154,6 +154,7 @@ MOZ_SRC_FILES += [ "ObserverForwarder.sys.mjs", "PrivateBrowsingUI.sys.mjs", "SecurityLevelNotification.sys.mjs", + "TorProviderExternalNotification.sys.mjs", "TorSettingsNotification.sys.mjs", "TorUIUtils.sys.mjs", ] ===================================== toolkit/locales/en-US/toolkit/global/tor-browser.ftl ===================================== @@ -46,6 +46,15 @@ tor-connect-tor-not-working-restarting-button = .label = Restarting Tor process… tor-connect-tor-not-working-restarting-failed = Restarting failed +## External Tor process error. + +# "{ -brand-short-name }" will be replaced with the localized name of the browser, e.g. "Tor Browser". +tor-external-process-error-message = { -brand-short-name } can’t communicate with your external Tor application, which may cause some browser features to malfunction. Check that the external application is running, or reconfigure its communication with { -brand-short-name }. +tor-external-process-error-retry-button = + .label = Retry communication +tor-external-process-error-retry-button-retrying = + .label = Retrying communication… + ## Tor Browser home page. tor-browser-home-heading-stable = Explore. Privately. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/ae2950… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/ae2950… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-bundle-testsuite][main] Bug 40100: Add nightly pipelines status email
by boklm (＠boklm) 30 Jul '26

30 Jul '26

boklm pushed to branch main at The Tor Project / Applications / tor-browser-bundle-testsuite Commits: d7f73057 by Nicolas Vigier at 2026-07-30T17:00:17+02:00 Bug 40100: Add nightly pipelines status email - - - - - 9 changed files: - .gitignore - + TBBTestSuite/TestSuite/TorBrowserBuildGitlabPipelines.pm - TBBTestSuite/TestSuites.pm - config/tb-build-06.torproject.org - + config/tb-build-06.torproject.org-gitlab-pipelines - + tmpl/details_gitlab_pipeline.html - + tmpl/report_tor-browser_pipelines.txt - + tmpl/reports_index_tor-browser_pipelines.html - tools/tb-build-06-start-nightly-build Changes: ===================================== .gitignore ===================================== @@ -7,3 +7,4 @@ reports tmp bundle tools/.gitlab_trigger_token +gitlab-tokens ===================================== TBBTestSuite/TestSuite/TorBrowserBuildGitlabPipelines.pm ===================================== @@ -0,0 +1,140 @@ +package TBBTestSuite::TestSuite::TorBrowserBuildGitlabPipelines; + +use strict; +use parent 'TBBTestSuite::TestSuite'; + +use FindBin; +use TBBTestSuite::Common qw(run_to_file exit_error); +use TBBTestSuite::GitRepo; +use TBBTestSuite::Options qw($options); +use File::Copy; +use File::Slurp; +use IO::CaptureOutput qw(capture_exec); +use Path::Tiny; +use LWP::UserAgent; +use JSON; +use Data::Dump qw/dd/; + +sub description { + 'Tor Browser Build Gitlab Pipelines'; +} + +sub type { + 'tor-browser_pipelines'; +}; + +sub test_types { + return { + gitlab_pipeline => \&gitlab_pipeline, + } +} + +sub gitlab_access_token { + my $token_dir = "$FindBin::Bin/gitlab-tokens"; + my $token_file = "$token_dir/access-token"; + exit_error "File $token_file is missing" unless -f $token_file; + # Change permission on gitlab-tokens directory to make sure token files + # cannot be accessed by other users + chmod 0700, $token_dir; + my $token = read_file($token_file); + chomp $token; + return $token; +} + +sub get_ua { + my $token = gitlab_access_token; + my $ua = LWP::UserAgent->new; + $ua->default_header('PRIVATE-TOKEN' => $token); + return $ua; +} + +sub get_pipeline_status { + my ($pipeline_id) = @_; + my $ua = get_ua; + my $url = "https://gitlab.torproject.org/api/v4/projects/409/pipelines/$pipeline_id"; + my $count = 100; + while ($count) { + my $response = $ua->get($url); + if ($response->is_success) { + my $result = eval { decode_json $response->decoded_content }; + my %finished_status = map { $_ => 1 } + qw/success failed canceling canceled skipped/; + if (ref $result eq 'HASH' && $result->{status} + && $finished_status{$result->{status}}) { + return $result->{status}; + } + } + $count--; + sleep 60; + } + return 'timeout'; +} + +sub get_failed_jobs { + my ($pipeline_id) = @_; + my @res; + my $ua = get_ua; + my $url = "https://gitlab.torproject.org/api/v4/projects/409/pipelines/$pipeline_id/jo…"; + my $response = $ua->get($url); + return \@res unless $response->is_success; + my $result = eval { decode_json $response->decoded_content }; + return \@res unless ref $result eq 'ARRAY'; + foreach my $job (@$result) { + push @res, { + id => $job->{id}, + url => "https://gitlab.torproject.org/tpo/applications/tor-browser-bundle-testsuite…>{id}", + name => $job->{name}, + failure_reason => $job->{failure_reason}, + }; + } + return \@res; +} + +sub gitlab_pipeline { + my ($testsuite, $test) = @_; + $test->{results}{success} = 0; + my $pipeline_id; + $pipeline_id = $1 + if $test->{gitlab_pipeline_url} =~ m{https://gitlab.torproject.org/tpo/applications/tor-browser-bundle-testsui…; + return unless $pipeline_id; + my $status = get_pipeline_status($pipeline_id); + $test->{pipeline_status} = $status; + $test->{results}{success} = 1 if $status eq 'success'; + $test->{failed_jobs} = get_failed_jobs($pipeline_id) + if $status eq 'failed'; +} + +sub set_tests { + my ($testsuite) = @_; + exit_error "tbb_buildreport_dir option is missing" unless $testsuite->{tbb_buildreport_dir}; + $testsuite->{tests} = []; + my $tbb_buildreport = $testsuite->{tbb_buildreport_dir}; + return unless -d $tbb_buildreport; + foreach my $pipeline (path($tbb_buildreport)->children(qr/\.trigger-test-pipeline\.stdout\.txt\z/)) { + my $url = $pipeline->slurp_utf8; + my $name = $pipeline->basename; + if ($name =~ m/^(.+)\.trigger-test-pipeline\.stdout\.txt\z/) { + my $test_name = "pipeline-$1"; + push @{$testsuite->{tests}}, { + name => $test_name, + descr => $test_name, + type => 'gitlab_pipeline', + gitlab_pipeline_url => $url, + }; + } + } +} + +sub new { + my ($ts, $infos) = @_; + my $testsuite = { + %$infos, + type => $ts->type(), + filename => $ts->type(), + }; + bless $testsuite, $ts; + $testsuite->set_tests(); + return $testsuite; +} + +1; ===================================== TBBTestSuite/TestSuites.pm ===================================== @@ -7,11 +7,12 @@ use TBBTestSuite::TestSuite::BrowserBundleTests; use TBBTestSuite::TestSuite::BrowserUnitTests; use TBBTestSuite::TestSuite::RBMBuild; use TBBTestSuite::TestSuite::TorBrowserBuild; +use TBBTestSuite::TestSuite::TorBrowserBuildGitlabPipelines; use TBBTestSuite::TestSuite::BrowserBundleHardening; my @testsuite_list = qw(TestTestSuite BrowserBundleTests BrowserUnitTests RBMBuild TorBrowserBuild - BrowserBundleHardening); + TorBrowserBuildGitlabPipelines BrowserBundleHardening); my %testsuite_types; sub testsuite_types { return %testsuite_types if %testsuite_types; ===================================== config/tb-build-06.torproject.org ===================================== @@ -7,6 +7,7 @@ use File::Slurp; use TBBTestSuite::TestSuite::TorBrowserBuild; my $date = DateTime->now->ymd; +$date = $ENV{NIGHTLY_BUILD_DATE} if $ENV{NIGHTLY_BUILD_DATE}; my $tbb_version = 'tbb-nightly.' . DateTime->now->ymd('.'); my $name = "tor-browser-$date"; ===================================== config/tb-build-06.torproject.org-gitlab-pipelines ===================================== @@ -0,0 +1,45 @@ +# vim: filetype=perl expandtab +use strict; +use FindBin; +use DateTime; +use TBBTestSuite::TestSuite::TorBrowserBuildGitlabPipelines; + +my $date = DateTime->now->ymd; +$date = $ENV{NIGHTLY_BUILD_DATE} if $ENV{NIGHTLY_BUILD_DATE}; +my $name = "tor-browser-pipelines-$date"; + +my $builds_dir_root = '/home/tb-builder/nightly-builds'; +my $reports_dir = "$builds_dir_root/reports"; + +if (-d "$reports_dir/r/$name") { + print "Doing nothing: $name already done\n"; + return ( args => [] ); +} + +my $testsuite = TBBTestSuite::TestSuite::TorBrowserBuildGitlabPipelines->new({ + tbb_buildreport_dir => "$reports_dir/r/tor-browser-$date/results-tor-browser_build", + }); + +my %res = ( + name => $name, + args => [ $testsuite ], + tags => [ 'nightly' ], + 'default-retry' => 1, + 'reports-dir' => $reports_dir, + 'reports-url' => 'https://nightlies.tbb.torproject.org/nightly-builds/reports/', + 'email-subject' => '[pipelines result: [% tbbfile = "tor-browser_pipelines"; tbbfiles.$tbbfile.tests.size == 0 ? "skipped" : success ? "ok" : "failed" %]] [% options.name %]', + 'email-report' => 1, + 'email-to' => [ + 'bea(a)torproject.org', + 'boklm(a)torproject.org', + 'clairehurst(a)torproject.org', + 'dan(a)torproject.org', + 'henry(a)torproject.org', + 'jwilde(a)torproject.org', + 'ma1(a)torproject.org', + 'morgan(a)torproject.org', + 'pierov(a)torproject.org', + ], + 'email-from' => 'Tor Browser Nightly Builds <tb-builder(a)tb-build-06.torproject.org>', +); +%res; ===================================== tmpl/details_gitlab_pipeline.html ===================================== @@ -0,0 +1,11 @@ +<ul> +[% IF test.pipeline_status %] + <li>Status: [% test.pipeline_status %] +[% END %] + <li><a href="[% test.gitlab_pipeline_url %]">GitLab test pipeline</a></li> +[% IF test.failed_jobs %] + [% FOREACH job = test.failed_jobs %] + <li>Failed job: <a href="[% job.url %]">[% job.name %](#[% job.id %])</a> - [% job.failure_reason %]</li> + [% END %] +[% END %] +</ul> ===================================== tmpl/report_tor-browser_pipelines.txt ===================================== @@ -0,0 +1,20 @@ +Results +[% IF tbbfiles.$tbbfile.tests.size == 0 -%] + + No pipeline has been run in today's nightly builds. + +[% END -%] +[% FOREACH test IN tbbfiles.$tbbfile.tests -%] +[% IF test.results -%] + [% test.name %]: [% test.results.success ? 'ok' : 'failed (' _ test.fail_type _ ')' %] + + GitLab test pipeline: [% test.gitlab_pipeline_url ? test.gitlab_pipeline_url : 'failed run' %] +[% IF test.failed_jobs -%] + [%- FOREACH job = test.failed_jobs -%] + Failed job ([% job.failure_reason %]): [% job.url %] + [%- END -%] + +[% END -%] + +[% END -%] +[% END %] ===================================== tmpl/reports_index_tor-browser_pipelines.html ===================================== @@ -0,0 +1,61 @@ +[% USE date -%] +<html> + <head> + <title>Tests reports</title> + <style type="text/css"> + .test_ok { + color: #006600; + font-weight: bold; + } + .test_ok A { + color: #006600; + font-weight: bold; + } + .test_notok { + color: #FF0000; + font-weight: bold; + } + .test_notok A { + color: #FF0000; + } + .reportdate { + font-size: small; + } + </style> + </head> + <body> + <h1>[% title %]</h1> + <table> + <tr> + <th>Name</th> + <th>Date</th> + <th>Version</th> + <th>Result</th> + </tr> + [% FOREACH report IN reports_list %] + <tr> + <td valign="top"><a href="r/[% report %]/[% testsuite_type %].html">[% report %]</a></td> + <td valign="top">[% date.format(reports.$report.time, '%Y-%m-%d %H:%M') %]</td> + <td valign="top">[% IF reports.$report.options.tags %] + <a href="index-[% testsuite_type %]-[% reports.$report.options.tags.0 %].html">[% reports.$report.options.tags.0 %]</a> + [% END %] + </td> + <td valign="top"> + [% failed = 0 %] + [% SET tbbfile = reports.$report.tbbfiles.keys.0 -%] + [% FOREACH test IN reports.$report.tbbfiles.$tbbfile.tests %] + [% NEXT UNLESS test.results %] + [% IF test.results.success %] + <img src="static/ok-small.png" /> + <span class="test_ok"><a href="r/[% report %]/[% testsuite_type %].html">[% test.name %]</a></span> + [% ELSE -%] + <img src="static/failed-small.png" /> + <span class="test_notok"><a href="r/[% report %]/[% tbbfile %].html">[% test.name %]</a></span> + [% END -%] + [% END -%] + </td> + </tr> + [% END %] + </table> + </body> +</html> ===================================== tools/tb-build-06-start-nightly-build ===================================== @@ -22,6 +22,7 @@ function getlock { getlock today_version=$(date '+tbb-nightly.%Y.%m.%d') +export NIGHTLY_BUILD_DATE=$(date +"%Y-%m-%d") cd /home/tb-builder/tor-browser-bundle-testsuite export RBM_NO_DEBUG=1 @@ -73,6 +74,8 @@ builds_size=$(du -s ~/nightly-builds/tor-browser-builds | cut -f 1) test "$builds_size" -gt 20000000 && \ /home/tb-builder/tor-browser-bundle-testsuite/clones/tor-browser-build/tools/prune-old-builds --days 7 --weeks 0 --months 0 ~/nightly-builds/tor-browser-builds +./tbb-testsuite --config=tb-build-06.torproject.org-gitlab-pipelines "$@" + # sleep for 5m to give time to previous rsync to finish sleep 5m /home/tb-builder/tor-browser-bundle-testsuite/tools/rsync-to-tbb-nightlies-master View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-bundle-testsuite… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-bundle-testsuite… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! TB 13252: Customize profile management on macOS
by Pier Angelo Vendrame (＠pierov) 30 Jul '26

30 Jul '26

Pier Angelo Vendrame pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: ae295060 by Pier Angelo Vendrame at 2026-07-30T08:47:59+02:00 fixup! TB 13252: Customize profile management on macOS TB 45163: Remove our feature gate on app group containers. It is already gated upstream, and we might actually want to enable it when ready, or disable it at the Base Browser level. - - - - - 1 changed file: - toolkit/xre/nsXREDirProvider.cpp Changes: ===================================== toolkit/xre/nsXREDirProvider.cpp ===================================== @@ -227,7 +227,7 @@ nsXREDirProvider::Release() { return 0; } nsresult nsXREDirProvider::GetUserProfilesRootDir(nsIFile** aResult) { nsCOMPtr<nsIFile> file; nsresult rv = NS_OK; -#if !defined(TOR_BROWSER) && defined(XP_MACOSX) && defined(NIGHTLY_BUILD) +#if defined(XP_MACOSX) && defined(NIGHTLY_BUILD) const char* appGroup = PR_GetEnv("MOZ_APP_GROUP"); if (appGroup && *appGroup && strcmp(appGroup, "0") != 0) { nsCOMPtr<nsIFile> group; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ae29506… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ae29506… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.0esr-16.0-1] fixup! BB 41598: Prevent NoScript from being removed/disabled.
by ma1 (＠ma1) 29 Jul '26

29 Jul '26

ma1 pushed to branch mullvad-browser-153.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 7a00e81e by hackademix at 2026-07-29T19:06:45+02:00 fixup! BB 41598: Prevent NoScript from being removed/disabled. TB 45157: Grant "access local file" permission to NoScript. - - - - - 2 changed files: - toolkit/components/extensions/Extension.sys.mjs - toolkit/mozapps/extensions/content/components/addon-permissions-list.mjs Changes: ===================================== toolkit/components/extensions/Extension.sys.mjs ===================================== @@ -4366,12 +4366,14 @@ export class Extension extends ExtensionData { } // tor-browser#40253: Explicitly allow NoScript in Private Browsing mode. + // tor-browser#45157: Grant "access local files" permission to NoScript. if (this.isNoScript) { lazy.ExtensionPermissions.add(this.id, { - permissions: [PRIVATE_ALLOWED_PERMISSION], + permissions: [PRIVATE_ALLOWED_PERMISSION, "internal:fileSchemeAllowed"], origins: [], }); this.permissions.add(PRIVATE_ALLOWED_PERMISSION); + this.permissions.add("internal:fileSchemeAllowed"); } // We only want to update the SVG_CONTEXT_PROPERTIES_PERMISSION during ===================================== toolkit/mozapps/extensions/content/components/addon-permissions-list.mjs ===================================== @@ -87,7 +87,15 @@ class AddonPermissionsList extends AboutAddonsHTMLElement { }, { buildOptionalOrigins: true, - includeFileSchemeAccess: lazy.fileSchemeAccessRequiresOptIn, + // tor-browser#45157: prevent "access local files" from being accidentally + // toggled off in NoScript, causing Safer and Safest security levels to + // fail on file:// URLs. + includeFileSchemeAccess: + lazy.fileSchemeAccessRequiresOptIn && + !( + fileSchemeAllowed && + this.addon.id == "{73a6fe31-595d-460b-a920-fcc0f8843232}" + ), } ); let optionalEntries = [ View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/7a0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/7a0… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! BB 41598: Prevent NoScript from being removed/disabled.
by ma1 (＠ma1) 29 Jul '26

29 Jul '26

ma1 pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: eff748cd by hackademix at 2026-07-29T18:50:33+02:00 fixup! BB 41598: Prevent NoScript from being removed/disabled. TB 45157: Grant "access local file" permission to NoScript. - - - - - 2 changed files: - toolkit/components/extensions/Extension.sys.mjs - toolkit/mozapps/extensions/content/components/addon-permissions-list.mjs Changes: ===================================== toolkit/components/extensions/Extension.sys.mjs ===================================== @@ -4366,12 +4366,14 @@ export class Extension extends ExtensionData { } // tor-browser#40253: Explicitly allow NoScript in Private Browsing mode. + // tor-browser#45157: Grant "access local files" permission to NoScript. if (this.isNoScript) { lazy.ExtensionPermissions.add(this.id, { - permissions: [PRIVATE_ALLOWED_PERMISSION], + permissions: [PRIVATE_ALLOWED_PERMISSION, "internal:fileSchemeAllowed"], origins: [], }); this.permissions.add(PRIVATE_ALLOWED_PERMISSION); + this.permissions.add("internal:fileSchemeAllowed"); } // We only want to update the SVG_CONTEXT_PROPERTIES_PERMISSION during ===================================== toolkit/mozapps/extensions/content/components/addon-permissions-list.mjs ===================================== @@ -87,7 +87,15 @@ class AddonPermissionsList extends AboutAddonsHTMLElement { }, { buildOptionalOrigins: true, - includeFileSchemeAccess: lazy.fileSchemeAccessRequiresOptIn, + // tor-browser#45157: prevent "access local files" from being accidentally + // toggled off in NoScript, causing Safer and Safest security levels to + // fail on file:// URLs. + includeFileSchemeAccess: + lazy.fileSchemeAccessRequiresOptIn && + !( + fileSchemeAllowed && + this.addon.id == "{73a6fe31-595d-460b-a920-fcc0f8843232}" + ), } ); let optionalEntries = [ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/eff748c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/eff748c… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-154.0a1-17.0-1-build1
by Pier Angelo Vendrame (＠pierov) 29 Jul '26

29 Jul '26

Pier Angelo Vendrame pushed new tag tor-browser-154.0a1-17.0-1-build1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0