- tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser][tor-browser-153.4.0esr-16.0-1] 2 commits: fixup! BB 31740: Remove some unnecessary RemoteSettings instances
by brizental (＠brizental) 30 Sep '26

30 Sep '26

brizental pushed to branch tor-browser-153.4.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 0b930cf1 by Beatriz Rizental at 2026-09-30T15:17:01+02:00 fixup! BB 31740: Remove some unnecessary RemoteSettings instances Bug 44154: Keep RemoteSettings instances required for testing, when testing - - - - - 6d59c648 by Beatriz Rizental at 2026-09-30T15:17:01+02:00 fixup! BB 42730: Patch RemoteSettings to use only local dumps as a data source Bug 44154: Implement tests to verify correctness of patch - - - - - 4 changed files: - services/settings/dumps/main/moz.build - services/settings/remote-settings.sys.mjs - + services/settings/test/unit/test_remote_settings_base_browser.js - services/settings/test/unit/xpcshell.toml Changes: ===================================== services/settings/dumps/main/moz.build ===================================== @@ -28,3 +28,11 @@ if not CONFIG["MOZ_BUILD_APP"].startswith("mobile/"): "websites-with-shared-credential-backends.json", ] +# tor-browser#44154: This file is not required by tor-browser. +# We keep it because it is used by tests and small enough not +# to be problematic when shipped unconditionally. +# +# These collections are referenced in toolkit/ or other core code. +FINAL_TARGET_FILES.defaults.settings.main += [ + "password-recipes.json", +] ===================================== services/settings/remote-settings.sys.mjs ===================================== @@ -149,7 +149,6 @@ export async function jexlFilterCreator(environment, collectionName) { function remoteSettingsFunction() { const _clients = new Map(); let _invalidatePolling = false; - let _initialized = false; // If not explicitly specified, use the default signer. const defaultOptions = { @@ -182,6 +181,8 @@ function remoteSettingsFunction() { return _clients.get(collectionName); }; + remoteSettings._initialized = false; + /** * Internal helper to retrieve existing instances of clients or new instances * with default options if possible, or `null` if bucket/collection are unknown. @@ -392,10 +393,10 @@ function remoteSettingsFunction() { } = {}) => { if (AppConstants.BASE_BROWSER_VERSION) { // Called multiple times on GeckoView due to bug 1730026 - if (_initialized) { + if (remoteSettings._initialized) { return; } - _initialized = true; + remoteSettings._initialized = true; _maybeImportFromLocalDump(trigger); return; } ===================================== services/settings/test/unit/test_remote_settings_base_browser.js ===================================== @@ -0,0 +1,267 @@ +"use strict"; + +const { Downloader } = ChromeUtils.importESModule( + "resource://services-settings/Attachments.sys.mjs" +); +const { sinon } = ChromeUtils.importESModule( + "resource://testing-common/Sinon.sys.mjs" +); + +// A collection with a dump that's packaged on all test builds. +const TEST_BUCKET = "main"; +const TEST_COLLECTION = "password-recipes"; + +let client; +let DUMP_RECORDS; +let DUMP_LAST_MODIFIED; +let SERVER_LAST_MODIFIED; +let server; +let serverRequests = []; + +function assertNoServerRequests() { + Assert.deepEqual(serverRequests, [], "the server received no requests"); + serverRequests = []; +} + +async function importData(records) { + await RemoteSettingsWorker._execute("_test_only_import", [ + TEST_BUCKET, + TEST_COLLECTION, + records, + records[0]?.last_modified || 0, + ]); +} + +async function pollChangesFromOutdatedData() { + await importData([{ id: "dummy", last_modified: 1 }]); + const seenNotification = TestUtils.topicObserved( + "remote-settings:changes-poll-end" + ); + await RemoteSettings.pollChanges({ trigger: "startup" }); + await seenNotification; +} + +add_setup(async () => { + Assert.ok( + AppConstants.BASE_BROWSER_VERSION, + "This test only makes sense when built with --with-base-browser-version" + ); + + client = RemoteSettings(TEST_COLLECTION, { bucketName: TEST_BUCKET }); + // Opening the DB from the main thread creates/upgrades it as needed. + // The worker-based import used by importData() below opens it with + // allowUpgrades=false, so it requires the DB to already exist. + await client.db.getLastModified(); + + const dump = await SharedUtils.loadJSONDump(TEST_BUCKET, TEST_COLLECTION); + DUMP_RECORDS = dump.data; + DUMP_LAST_MODIFIED = dump.timestamp; + Assert.greater( + DUMP_LAST_MODIFIED, + 1, + "the dump is newer than the outdated data used by the tests" + ); + + // The server offers data that is newer than the dump, so that processing + // anything from it would be observable. + SERVER_LAST_MODIFIED = DUMP_LAST_MODIFIED + 1000; + + server = new HttpServer(); + server.start(-1); + registerCleanupFunction(() => server.stop(() => {})); + const origin = `http://localhost:${server.identity.primaryPort}`; + const attachment = await IOUtils.readUTF8( + do_get_file( + "test_attachments_downloader/65650a0f-7c22-4c10-9744-2d67e301f5f4.pem" + ).path + ); + const responses = { + "/v1/": { + capabilities: { attachments: { base_url: `${origin}/cdn/` } }, + }, + "/v1/buckets/monitor/collections/changes/changeset": { + timestamp: SERVER_LAST_MODIFIED, + changes: [ + { + bucket: TEST_BUCKET, + collection: TEST_COLLECTION, + last_modified: SERVER_LAST_MODIFIED, + }, + ], + }, + [`/v1/buckets/${TEST_BUCKET}/collections/${TEST_COLLECTION}/changeset`]: { + timestamp: SERVER_LAST_MODIFIED, + metadata: {}, + changes: [{ id: "from-server", last_modified: SERVER_LAST_MODIFIED }], + }, + }; + server.registerPrefixHandler("/", (request, response) => { + serverRequests.push(request.path); + if (request.path.startsWith("/cdn/")) { + response.write(attachment); + } else if (request.path in responses) { + response.setHeader("Content-Type", "application/json; charset=UTF-8"); + response.write(JSON.stringify(responses[request.path])); + } else { + response.setStatusLine(null, 404, "Not Found"); + } + }); + Services.prefs.setStringPref("services.settings.server", `${origin}/v1`); + // Tor browser routes everything through a SOCKS proxy by default, which + // would prevent requests from ever reaching the server. + Services.prefs.setIntPref("network.proxy.type", 0); +}); + +add_task(function test_shouldSkipRemoteActivity_is_always_true() { + Assert.ok( + Utils.shouldSkipRemoteActivity, + "Remote activity is always skipped for base browser builds" + ); +}); + +add_task(async function test_appconstants_disable_remote_settings_server() { + Assert.deepEqual( + AppConstants.REMOTE_SETTINGS_SERVER_URLS, + [""], + "No real Remote Settings server is configured" + ); + Assert.equal( + AppConstants.REMOTE_SETTINGS_VERIFY_SIGNATURE, + false, + "Signature verification is disabled, since we never fetch from a server" + ); + Assert.equal( + Services.prefs + .getDefaultBranch("") + .getStringPref("services.settings.server", ""), + "", + "The services.settings.server pref has no default value" + ); +}); + +add_task(async function test_sync_never_contacts_server() { + await importData([{ id: "dummy", last_modified: 1 }]); + + await client.sync(); + + Assert.equal( + await client.getLastModified(), + 1, + "sync() did not touch local data" + ); + assertNoServerRequests(); + + // Sanity check: the server does offer newer data for this collection. + const { remoteTimestamp } = await client._fetchChangeset(); + Assert.equal( + remoteTimestamp, + SERVER_LAST_MODIFIED, + "the server offers newer data" + ); + serverRequests = []; +}); + +add_task(async function test_pollChanges_imports_from_newer_local_dump() { + RemoteSettings._initialized = false; + + await pollChangesFromOutdatedData(); + + Assert.equal( + await client.getLastModified(), + DUMP_LAST_MODIFIED, + "local data was updated from the packaged dump" + ); + const current = await client.get({ loadDumpIfNewer: false }); + Assert.equal( + current.length, + DUMP_RECORDS.length, + "all dump records imported" + ); + assertNoServerRequests(); + + // Sanity check: the server does advertise newer changes. + const { changes } = await Utils.fetchLatestChanges(Utils.SERVER_URL); + Assert.deepEqual( + changes.map(c => c.last_modified), + [SERVER_LAST_MODIFIED], + "the server advertises newer changes" + ); + serverRequests = []; +}); + +add_task(async function test_pollChanges_is_noop_after_first_call() { + RemoteSettings._initialized = false; + await pollChangesFromOutdatedData(); + + // The local dump import is not awaited by pollChanges(), but it calls + // hasLocalDump() synchronously, so this spy tells us deterministically + // whether an import was started. + const hasLocalDumpSpy = sinon.spy(Utils, "hasLocalDump"); + + // This guards against bug 1730026, where GeckoView calls this twice. + await RemoteSettings.pollChanges({ trigger: "timer" }); + Assert.ok( + hasLocalDumpSpy.notCalled, + "second call to pollChanges() is a no-op" + ); + + // Sanity check: without the guard, the same call starts an import. + RemoteSettings._initialized = false; + await pollChangesFromOutdatedData(); + Assert.ok( + hasLocalDumpSpy.called, + "pollChanges() starts an import when unguarded" + ); + + hasLocalDumpSpy.restore(); + assertNoServerRequests(); +}); + +add_task(async function test_pollChanges_never_records_sync_history() { + RemoteSettings._initialized = false; + const syncHistory = new SyncHistory("settings-sync"); + await syncHistory.clear(); + + await pollChangesFromOutdatedData(); + + const history = await syncHistory.list(); + Assert.equal(history.length, 0, "no sync history was recorded"); + assertNoServerRequests(); +}); + +add_task(async function test_downloader_never_downloads_from_server() { + // Same fixture as test_attachments_downloader.js: a record whose attachment + // is not available from any dump or cache. + const record = { + id: "1f3a0802-648d-11ea-bd79-876a8b69c377", + attachment: { + hash: "f41ed47d0f43325c9f089d03415c972ce1d3f1ecab6e4d6260665baf3db3ccee", + size: 1597, + filename: "test_file.pem", + location: + "main-workspace/some-collection/65650a0f-7c22-4c10-9744-2d67e301f5f4.pem", + mimetype: "application/x-pem-file", + }, + }; + const downloader = new Downloader(TEST_BUCKET, "some-collection"); + + // There's no local dump or cache for this attachment, so download must fail + // rather than fall back to the network. + await Assert.rejects( + downloader.downloadAsBytes(record), + e => e instanceof Downloader.NotFoundError, + "download never falls back to the network" + ); + assertNoServerRequests(); + + // Sanity check: the server does serve this attachment. + const { size, hash, location } = record.attachment; + const buffer = await downloader._fetchAttachment( + (await Utils.baseAttachmentsURL()) + location + ); + Assert.ok( + await RemoteSettingsWorker.checkContentHash(buffer, size, hash), + "the server serves the attachment" + ); + serverRequests = []; +}); ===================================== services/settings/test/unit/xpcshell.toml ===================================== @@ -18,11 +18,17 @@ skip-if = [ "os == 'android'", # Bug 2042499 ] +["test_remote_settings_base_browser.js"] +support-files = ["test_attachments_downloader/**"] +tags = "base-browser" + ["test_remote_settings_dump_lastmodified.js"] +tags = "base-browser" ["test_remote_settings_jexl_filters.js"] ["test_remote_settings_offline.js"] +tags = "base-browser" ["test_remote_settings_older_than_local.js"] @@ -53,8 +59,10 @@ skip-if = [ ] ["test_remote_settings_worker.js"] +tags = "base-browser" ["test_shutdown_handling.js"] +tags = "base-browser" ["test_uptake_telemetry.js"] skip-if = [ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/a1f275… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/a1f275… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.17.0esr-15.0-1] fixup! TB 30237: Add v3 onion services client authentication prompt
by ma1 (＠ma1) 30 Sep '26

30 Sep '26

ma1 pushed to branch tor-browser-140.17.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 77772175 by hackademix at 2026-09-30T14:47:18+02:00 fixup! TB 30237: Add v3 onion services client authentication prompt TB 45346: Open about:manual from parent process. - - - - - 3 changed files: - toolkit/actors/NetErrorParent.sys.mjs - toolkit/content/aboutNetError.mjs - toolkit/modules/RemotePageAccessManager.sys.mjs Changes: ===================================== toolkit/actors/NetErrorParent.sys.mjs ===================================== @@ -275,6 +275,18 @@ export class NetErrorParent extends EscapablePageParent { let win = browser.ownerGlobal; win.openPreferences("privacy-doh"); break; + } + case "OpenTorBrowserManual": { + let browser = this.browsingContext.top.embedderElement; + if (browser) { + let url = "about:manual"; + if (message.data.fragment) { + url += `#${message.data.fragment}`; + } + browser.ownerGlobal.switchToTabHavingURI(url, true); + } + break; + } case "ShouldShowTorConnect": return lazy.TorConnect.shouldShowTorConnect; } ===================================== toolkit/content/aboutNetError.mjs ===================================== @@ -384,6 +384,19 @@ function initOnionError() { const learnMoreLink = document.getElementById("learnMoreLink"); learnMoreLink.href = "about:manual#onion-services"; + for (const evType of ["click", "mousedown", "auxclick", "contextmenu"]) { + learnMoreLink.addEventListener( + evType, + event => { + event.preventDefault(); + event.stopPropagation(); + RPMSendAsyncMessage("OpenTorBrowserManual", { + fragment: "features__onion-services", + }); + }, + true + ); + } setFocus("#netErrorButtonContainer > .try-again"); return true; ===================================== toolkit/modules/RemotePageAccessManager.sys.mjs ===================================== @@ -86,6 +86,7 @@ export let RemotePageAccessManager = { "Browser:ResetEnterpriseRootsPref", "DisplayOfflineSupportPage", "OpenTRRPreferences", + "OpenTorBrowserManual", ], RPMCheckAlternateHostAvailable: ["*"], RPMRecordGleanEvent: ["securityDohNeterror", "securityUiTlserror"], View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7777217… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7777217… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.4.0esr-16.0-1] fixup! TB 30237: Add v3 onion services client authentication prompt
by ma1 (＠ma1) 30 Sep '26

30 Sep '26

ma1 pushed to branch tor-browser-153.4.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: a1f275b9 by hackademix at 2026-09-30T14:25:50+02:00 fixup! TB 30237: Add v3 onion services client authentication prompt TB 45346: Open about:manual from parent process. - - - - - 3 changed files: - toolkit/actors/NetErrorParent.sys.mjs - toolkit/content/aboutNetError.mjs - toolkit/modules/RemotePageAccessManager.sys.mjs Changes: ===================================== toolkit/actors/NetErrorParent.sys.mjs ===================================== @@ -281,6 +281,17 @@ export class NetErrorParent extends EscapablePageParent { win.openPreferences("privacy-doh"); break; } + case "OpenTorBrowserManual": { + let browser = this.browsingContext.top.embedderElement; + if (browser) { + let url = "about:manual"; + if (message.data.fragment) { + url += `#${message.data.fragment}`; + } + browser.documentGlobal.switchToTabHavingURI(url, true); + } + break; + } case "ShouldShowTorConnect": return lazy.TorConnect.shouldShowTorConnect; } ===================================== toolkit/content/aboutNetError.mjs ===================================== @@ -374,6 +374,19 @@ function initOnionError() { const learnMoreLink = document.getElementById("learnMoreLink"); learnMoreLink.href = "about:manual#features__onion-services"; + for (const evType of ["click", "mousedown", "auxclick", "contextmenu"]) { + learnMoreLink.addEventListener( + evType, + event => { + event.preventDefault(); + event.stopPropagation(); + RPMSendAsyncMessage("OpenTorBrowserManual", { + fragment: "features__onion-services", + }); + }, + true + ); + } setFocus("#netErrorButtonContainer > .try-again"); return true; ===================================== toolkit/modules/RemotePageAccessManager.sys.mjs ===================================== @@ -108,6 +108,7 @@ export let RemotePageAccessManager = { "Browser:ResetEnterpriseRootsPref", "DisplayOfflineSupportPage", "OpenTRRPreferences", + "OpenTorBrowserManual", ], RPMCheckAlternateHostAvailable: ["*"], RPMRecordGleanEvent: [ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/a1f275b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/a1f275b… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.4.0esr-16.0-1] fixup! TB 40562: Added Tor Browser preferences to 000-tor-browser.js
by morgan (＠morgan) 30 Sep '26

30 Sep '26

morgan pushed to branch tor-browser-153.4.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 6051b421 by Pier Angelo Vendrame at 2026-09-30T09:11:52+02:00 fixup! TB 40562: Added Tor Browser preferences to 000-tor-browser.js TB 45333: Disable the fast-path to skip proxy resolution. We are always behind a proxy, we don't need this. - - - - - 1 changed file: - browser/app/profile/000-tor-browser.js Changes: ===================================== browser/app/profile/000-tor-browser.js ===================================== @@ -11,6 +11,9 @@ pref("network.http.max-persistent-connections-per-proxy", 256); pref("network.proxy.no_proxies_on", ""); // tor-browser#31065: Force proxies also for localhost pref("network.proxy.allow_hijacking_localhost", true); +// tor-browser#45333: We are always behind a (manual) proxy, no need to enable +// the fast path for direct connections. +pref("network.proxy.fast_path_system_direct", false); // tor-browser#41317: banned port can be fingerprinted and is not necessary, // since there are multiple protections that prevent localhost access. // Lock ratoinale: prevent fingerprinting of old configurations. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6051b42… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6051b42… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.4.0esr-16.0-1] 2 commits: fixup! BB 44711: Hide unwanted setting controls in Base Browser.
by morgan (＠morgan) 30 Sep '26

30 Sep '26

morgan pushed to branch mullvad-browser-153.4.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 958f0964 by Beatriz Rizental at 2026-09-30T11:44:24+00:00 fixup! BB 44711: Hide unwanted setting controls in Base Browser. Bug 576: Hide more unwanted stuff from settings - - - - - 7a5bf3a8 by Beatriz Rizental at 2026-09-30T11:44:24+00:00 fixup! MB 1: Mullvad Browser branding Bug 576: Fix home page name - - - - - 4 changed files: - browser/components/preferences/config/about-firefox.mjs - browser/components/preferences/config/search.mjs - browser/components/preferences/config/tabs-browsing.mjs - toolkit/locales/en-US/toolkit/branding/brandings.ftl Changes: ===================================== browser/components/preferences/config/about-firefox.mjs ===================================== @@ -568,14 +568,6 @@ SettingGroupManager.registerGroups({ control: "moz-box-link", supportPage: "preferences", }, - { - id: "supportShareIdeas", - l10nId: "support-share-ideas", - control: "moz-box-link", - controlAttrs: { - href: "https://connect.mozilla.org/", - }, - }, ], }, ], ===================================== browser/components/preferences/config/search.mjs ===================================== @@ -1159,53 +1159,6 @@ SettingGroupManager.registerGroups({ }, ], }, - searchSuggestions: { - l10nId: "search-suggestions-header-2", - headingLevel: 2, - items: [ - // Add a warning banner. tor-browser#44629. - { - id: "searchSuggestionsWarningBanner", - l10nId: "search-suggestions-warning-banner", - control: "moz-message-bar", - controlAttrs: { - role: "status", - type: "warning", - }, - }, - { - id: "suggestionsInSearchFieldsCheckbox", - l10nId: "search-show-suggestions-option", - items: [ - { - id: "urlBarSuggestionCheckbox", - l10nId: "search-show-suggestions-url-bar-option", - }, - { - id: "showSearchSuggestionsFirstCheckbox", - l10nId: "search-show-suggestions-above-history-option-2", - }, - { - id: "showSearchSuggestionsPrivateWindowsCheckbox", - l10nId: "search-show-suggestions-private-windows-2", - }, - { - id: "showTrendingSuggestionsCheckbox", - l10nId: "addressbar-locbar-showtrendingsuggestions-option-2", - supportPage: "google-trending-searches-on-awesomebar", - }, - { - id: "urlBarSuggestionPermanentPBMessage", - l10nId: "search-suggestions-cant-show-2", - control: "moz-message-bar", - controlAttrs: { - role: "status", - }, - }, - ], - }, - ], - }, firefoxSuggest: { id: "locationBarGroup", subcategory: "locationBar", ===================================== browser/components/preferences/config/tabs-browsing.mjs ===================================== @@ -661,25 +661,6 @@ SettingGroupManager.registerGroups({ }, ], }, - { - id: "browserContainersbox", - control: "moz-fieldset", - l10nId: "tabs-containers-heading", - headingLevel: 3, - items: [ - { - id: "browserContainersCheckbox", - l10nId: "browser-containers-enabled-2", - supportPage: "containers", - }, - { - id: "browserContainersSettings", - loadPane: "containers", - l10nId: "browser-containers-settings-2", - control: "moz-box-button", - }, - ], - }, { id: "tabsClosing", control: "moz-fieldset", ===================================== toolkit/locales/en-US/toolkit/branding/brandings.ftl ===================================== @@ -44,9 +44,9 @@ # and kept in English. -firefox-suggest-brand-name = Firefox Suggest -# ”Home" can be localized, “Firefox” must be treated as a brand +# ”Home" can be localized, “Mullvad” must be treated as a brand # and kept in English. --firefox-home-brand-name = Firefox Home +-firefox-home-brand-name = Mullvad Home # View" can be localized, “Firefox” must be treated as a brand # and kept in English. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/83… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/83… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.4.0esr-16.0-1] fixup! [android] Disable features and functionality
by Dan Ballard (＠dan) 29 Sep '26

29 Sep '26

Dan Ballard pushed to branch tor-browser-153.4.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: ade87853 by Dan Ballard at 2026-09-29T15:35:07-07:00 fixup! [android] Disable features and functionality TB 45363: Disable import bookmarks in android until stable - - - - - 1 changed file: - mobile/android/fenix/app/nimbus.fml.yaml Changes: ===================================== mobile/android/fenix/app/nimbus.fml.yaml ===================================== @@ -319,6 +319,8 @@ features: value: enabled: false +# https://gitlab.torproject.org/tpo/applications/tor-browser/-/work_items/451… +# Disabeling until stable upstream, so if default is turned to true, we can revisit, or allow and delete this import-bookmarks: description: A feature that lets users import bookmarks from another browser. variables: @@ -329,13 +331,13 @@ features: defaults: - channel: developer value: - enabled: true + enabled: false - channel: nightly value: enabled: true - channel: beta value: - enabled: true + enabled: false setup-checklist: description: A feature on the home page that allows the user to track onboarding setup progress. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ade8785… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ade8785… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-update-responses][main] 6 commits: release: new version, 15.0.24 (linux-i686)
by morgan (＠morgan) 29 Sep '26

29 Sep '26

morgan pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 30976d70 by Morgan at 2026-09-29T13:15:22+00:00 release: new version, 15.0.24 (linux-i686) - - - - - 83d84676 by Morgan at 2026-09-29T13:15:22+00:00 release: new version, 15.0.24 (linux-x86_64) - - - - - fa1c34f5 by Morgan at 2026-09-29T13:15:22+00:00 release: new version, 15.0.24 (macos) - - - - - 0575ef67 by Morgan at 2026-09-29T13:15:22+00:00 release: new version, 15.0.24 (windows-i686) - - - - - 5dcabb1a by Morgan at 2026-09-29T13:15:22+00:00 release: new version, 15.0.24 (windows-x86_64) - - - - - d99251eb by Morgan at 2026-09-29T13:15:22+00:00 release: new version, 15.0.24 - - - - - 40 changed files: - update_3/release/download-android-aarch64.json - update_3/release/download-android-armv7.json - update_3/release/download-android-x86.json - update_3/release/download-android-x86_64.json - update_3/release/download-linux-i686.json - update_3/release/download-linux-x86_64.json - update_3/release/download-macos.json - update_3/release/download-windows-i686.json - update_3/release/download-windows-x86_64.json - update_3/release/downloads.json - update_3/release/linux-i686/.htaccess - + update_3/release/linux-i686/update-15.0.20-15.0.24-linux-i686.xml - update_3/release/linux-i686/update-15.0.20-15.0.23-linux-i686.xml → update_3/release/linux-i686/update-15.0.21-15.0.24-linux-i686.xml - update_3/release/linux-i686/update-15.0.21-15.0.23-linux-i686.xml → update_3/release/linux-i686/update-15.0.22-15.0.24-linux-i686.xml - update_3/release/linux-i686/update-15.0.22-15.0.23-linux-i686.xml → update_3/release/linux-i686/update-15.0.23-15.0.24-linux-i686.xml - update_3/release/linux-i686/update-15.0.23-linux-i686.xml → update_3/release/linux-i686/update-15.0.24-linux-i686.xml - update_3/release/linux-x86_64/.htaccess - update_3/release/linux-x86_64/update-15.0.20-15.0.23-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.20-15.0.24-linux-x86_64.xml - update_3/release/linux-x86_64/update-15.0.21-15.0.23-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.21-15.0.24-linux-x86_64.xml - update_3/release/linux-x86_64/update-15.0.22-15.0.23-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.22-15.0.24-linux-x86_64.xml - + update_3/release/linux-x86_64/update-15.0.23-15.0.24-linux-x86_64.xml - update_3/release/linux-x86_64/update-15.0.23-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.24-linux-x86_64.xml - update_3/release/macos/.htaccess - update_3/release/macos/update-15.0.22-15.0.23-macos.xml → update_3/release/macos/update-15.0.20-15.0.24-macos.xml - update_3/release/macos/update-15.0.20-15.0.23-macos.xml → update_3/release/macos/update-15.0.21-15.0.24-macos.xml - update_3/release/macos/update-15.0.21-15.0.23-macos.xml → update_3/release/macos/update-15.0.22-15.0.24-macos.xml - + update_3/release/macos/update-15.0.23-15.0.24-macos.xml - update_3/release/macos/update-15.0.23-macos.xml → update_3/release/macos/update-15.0.24-macos.xml - update_3/release/windows-i686/.htaccess - update_3/release/windows-i686/update-15.0.20-15.0.23-windows-i686.xml → update_3/release/windows-i686/update-15.0.20-15.0.24-windows-i686.xml - update_3/release/windows-i686/update-15.0.22-15.0.23-windows-i686.xml → update_3/release/windows-i686/update-15.0.21-15.0.24-windows-i686.xml - + update_3/release/windows-i686/update-15.0.22-15.0.24-windows-i686.xml - update_3/release/windows-i686/update-15.0.21-15.0.23-windows-i686.xml → update_3/release/windows-i686/update-15.0.23-15.0.24-windows-i686.xml - update_3/release/windows-i686/update-15.0.23-windows-i686.xml → update_3/release/windows-i686/update-15.0.24-windows-i686.xml - update_3/release/windows-x86_64/.htaccess - + update_3/release/windows-x86_64/update-15.0.20-15.0.24-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.20-15.0.23-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.21-15.0.24-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.21-15.0.23-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.22-15.0.24-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.22-15.0.23-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.23-15.0.24-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.23-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.24-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser-update-responses][main] 4 commits: release: new version, 15.0.24 (linux-x86_64)
by ma1 (＠ma1) 29 Sep '26

29 Sep '26

ma1 pushed to branch main at The Tor Project / Applications / mullvad-browser-update-responses Commits: 95d9ed75 by hackademix at 2026-09-29T13:46:18+02:00 release: new version, 15.0.24 (linux-x86_64) - - - - - 330ac507 by hackademix at 2026-09-29T13:46:20+02:00 release: new version, 15.0.24 (macos) - - - - - 4fa43efa by hackademix at 2026-09-29T13:46:21+02:00 release: new version, 15.0.24 (windows-x86_64) - - - - - cf19e3d2 by hackademix at 2026-09-29T13:46:24+02:00 release: new version, 15.0.24 - - - - - 31 changed files: - update_1/release/download-linux-x86_64.json - update_1/release/download-macos.json - update_1/release/download-windows-x86_64.json - update_1/release/downloads.json - update_1/release/linux-x86_64/.htaccess - − update_1/release/linux-x86_64/update-15.0.19-15.0.23-linux-x86_64.xml - − update_1/release/linux-x86_64/update-15.0.20-15.0.23-linux-x86_64.xml - + update_1/release/linux-x86_64/update-15.0.20-15.0.24-linux-x86_64.xml - − update_1/release/linux-x86_64/update-15.0.21-15.0.23-linux-x86_64.xml - + update_1/release/linux-x86_64/update-15.0.21-15.0.24-linux-x86_64.xml - + update_1/release/linux-x86_64/update-15.0.23-15.0.24-linux-x86_64.xml - − update_1/release/linux-x86_64/update-15.0.23-linux-x86_64.xml - + update_1/release/linux-x86_64/update-15.0.24-linux-x86_64.xml - update_1/release/macos/.htaccess - − update_1/release/macos/update-15.0.19-15.0.23-macos.xml - − update_1/release/macos/update-15.0.20-15.0.23-macos.xml - + update_1/release/macos/update-15.0.20-15.0.24-macos.xml - − update_1/release/macos/update-15.0.21-15.0.23-macos.xml - + update_1/release/macos/update-15.0.21-15.0.24-macos.xml - + update_1/release/macos/update-15.0.23-15.0.24-macos.xml - − update_1/release/macos/update-15.0.23-macos.xml - + update_1/release/macos/update-15.0.24-macos.xml - update_1/release/windows-x86_64/.htaccess - − update_1/release/windows-x86_64/update-15.0.19-15.0.23-windows-x86_64.xml - − update_1/release/windows-x86_64/update-15.0.20-15.0.23-windows-x86_64.xml - + update_1/release/windows-x86_64/update-15.0.20-15.0.24-windows-x86_64.xml - − update_1/release/windows-x86_64/update-15.0.21-15.0.23-windows-x86_64.xml - + update_1/release/windows-x86_64/update-15.0.21-15.0.24-windows-x86_64.xml - + update_1/release/windows-x86_64/update-15.0.23-15.0.24-windows-x86_64.xml - − update_1/release/windows-x86_64/update-15.0.23-windows-x86_64.xml - + update_1/release/windows-x86_64/update-15.0.24-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-15.0.24-build1
by Pier Angelo Vendrame (＠pierov) 28 Sep '26

28 Sep '26

Pier Angelo Vendrame pushed new tag mb-15.0.24-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-15.0.24-build1
by Pier Angelo Vendrame (＠pierov) 28 Sep '26

28 Sep '26

Pier Angelo Vendrame pushed new tag tbb-15.0.24-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0