morgan pushed to branch main at The Tor Project / Applications / tor-browser-build

Commits:

10 changed files:

Changes:

  • projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
    1 
    +Mullvad Browser 15.0a4 - October 16 2025
    2 
    + * All Platforms
    3 
    +   * Updated Firefox to 140.4.0esr
    4 
    +   * Updated NoScript to 13.2.1
    5 
    +   * Updated Mullvad Browser Extension to 0.9.5
    6 
    +   * Updated uBlock Origin to 1.66.4
    7 
    +   * Bug 477: Rebase Mullvad Browser Alpha onto 140.4.0esr [mullvad-browser]
    8 
    +   * Bug 478: Update to the Mullvad Browser extension to 0.9.5 [mullvad-browser]
    9 
    +   * Bug 19741: Opensearch (contextual search) does not obey FPI [tor-browser]
    10 
    +   * Bug 43850: Modify the Contrast Control settings for RFP [tor-browser]
    11 
    +   * Bug 43869: Hide pens with RFP [tor-browser]
    12 
    +   * Bug 43900: Open newtab rather than firefoxview when unloading the last tab [tor-browser]
    13 
    +   * Bug 44107: Switch tab search action is missing an icon [tor-browser]
    14 
    +   * Bug 44108: Fix the new history sidebar [tor-browser]
    15 
    +   * Bug 44123: Do not trim protocol off of URLs ever [tor-browser]
    16 
    +   * Bug 44153: Test search engines [tor-browser]
    17 
    +   * Bug 44159: Change or hide the sidebar settings description [tor-browser]
    18 
    +   * Bug 44177: Remove more urlbar actions [tor-browser]
    19 
    +   * Bug 44178: Search preservation does not work with duckduckgo in safest security level [tor-browser]
    20 
    +   * Bug 44187: TLS session tickets leak Private Browsing mode [tor-browser]
    21 
    +   * Bug 44213: Reduce linkability concerns of the "Search with" contextual search action [tor-browser]
    22 
    +   * Bug 44214: Update letterboxing to reflect changes in ESR 140 [tor-browser]
    23 
    +   * Bug 44215: Hide Firefox home settings in about:preferences [tor-browser]
    24 
    +   * Bug 44221: Backport MozBug 1984333 Bump Spoofed Processor Count [tor-browser]
    25 
    +   * Bug 44234: No images in PDF [tor-browser]
    26 
    +   * Bug 44240: Typo on dom.security.https_first_add_exception_on_failure [tor-browser]
    27 
    +   * Bug 44242: Hand over Security Level's WebAssembly controls  to NoScript [tor-browser]
    28 
    +   * Bug 44262: Disable adding search engines from HTML forms [tor-browser]
    29 
    + * Linux
    30 
    +   * Bug 44227: Some CJK characters cannot be rendered by Tor which uses the Noto font family [tor-browser]
    31 
    +   * Bug 41586: Replace Noto CJK with Jigmo on Linux [tor-browser-build]
    32 
    + * Build System
    33 
    +   * All Platforms
    34 
    +     * Bug 41373: Remove `_ALL` from mar filenames [tor-browser-build]
    35 
    +     * Bug 41568: Update instructions for manually building 7zip [tor-browser-build]
    36 
    +     * Bug 41579: Add zip to the list of Tor Browser Build dependencies [tor-browser-build]
    37 
    +     * Bug 41588: Restore legacy channel support in projects/release/update_responses_config.yml [tor-browser-build]
    38 
    +     * Bug 41589: Backport tor-browser-build-browser#41270: Add updater rewriterules to make 13.5.7 a watershed [tor-browser-build]
    39 
    +   * Windows
    40 
    +     * Bug 44167: Move the nsis-uninstall.patch to tor-browser repository [tor-browser]
    41 
    +   * macOS
    42 
    +     * Bug 41571: Work-around to prevent older 7z versions to break rcodesign. [tor-browser-build]
    43 
    +   * Linux
    44 
    +     * Bug 41558: Share descriptions between Linux packages and archives [tor-browser-build]
    45 
    +     * Bug 41569: Use var/display_name in .desktop files [tor-browser-build]
    46 
    +
    1 47 
     Mullvad Browser 15.0a3 - September 18 2025
    2 48 
      * All Platforms
    3 49 
        * Updated Firefox to 140.3.0esr

  • projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
    1 
    +Tor Browser 15.0a4 - October 16 2025
    2 
    + * All Platforms
    3 
    +   * Updated NoScript to 13.2.1
    4 
    +   * Updated OpenSSL to 3.5.4
    5 
    +   * Bug 19741: Opensearch (contextual search) does not obey FPI [tor-browser]
    6 
    +   * Bug 43850: Modify the Contrast Control settings for RFP [tor-browser]
    7 
    +   * Bug 43869: Hide pens with RFP [tor-browser]
    8 
    +   * Bug 44068: Handle migration from meek-azure to meek built-in bridge type [tor-browser]
    9 
    +   * Bug 44234: No images in PDF [tor-browser]
    10 
    +   * Bug 44240: Typo on dom.security.https_first_add_exception_on_failure [tor-browser]
    11 
    +   * Bug 44242: Hand over Security Level's WebAssembly controls  to NoScript [tor-browser]
    12 
    +   * Bug 44250: Rebase Tor Browser Alpha onto 140.4esr [tor-browser]
    13 
    +   * Bug 41574: Update Snowflake builtin bridge lines [tor-browser-build]
    14 
    + * Windows + macOS + Linux
    15 
    +   * Updated Firefox to 140.4.0esr
    16 
    +   * Bug 43900: Open newtab rather than firefoxview when unloading the last tab [tor-browser]
    17 
    +   * Bug 44101: Toolbar connection status is not visible when using vertical tabs [tor-browser]
    18 
    +   * Bug 44107: Switch tab search action is missing an icon [tor-browser]
    19 
    +   * Bug 44108: Fix the new history sidebar [tor-browser]
    20 
    +   * Bug 44123: Do not trim protocol off of URLs ever [tor-browser]
    21 
    +   * Bug 44153: Test search engines [tor-browser]
    22 
    +   * Bug 44159: Change or hide the sidebar settings description [tor-browser]
    23 
    +   * Bug 44177: Remove more urlbar actions [tor-browser]
    24 
    +   * Bug 44178: Search preservation does not work with duckduckgo in safest security level [tor-browser]
    25 
    +   * Bug 44184: Duckduckgo Onion Lite search does not work properly in safest when added as a search engine [tor-browser]
    26 
    +   * Bug 44187: TLS session tickets leak Private Browsing mode [tor-browser]
    27 
    +   * Bug 44192: Hovering unloaded tab causes console error [tor-browser]
    28 
    +   * Bug 44213: Reduce linkability concerns of the "Search with" contextual search action [tor-browser]
    29 
    +   * Bug 44214: Update letterboxing to reflect changes in ESR 140 [tor-browser]
    30 
    +   * Bug 44215: Hide Firefox home settings in about:preferences [tor-browser]
    31 
    +   * Bug 44221: Backport MozBug 1984333 Bump Spoofed Processor Count [tor-browser]
    32 
    +   * Bug 44239: DDG HTML page and search results displayed incorrectly with Safest security setting [tor-browser]
    33 
    +   * Bug 44262: Disable adding search engines from HTML forms [tor-browser]
    34 
    + * Linux
    35 
    +   * Bug 44227: Some CJK characters cannot be rendered by Tor which uses the Noto font family [tor-browser]
    36 
    +   * Bug 41586: Replace Noto CJK with Jigmo on Linux [tor-browser-build]
    37 
    + * Android
    38 
    +   * Updated GeckoView to 140.4.0esr
    39 
    +   * Bug 43401: Replace the constructor of Locale with a builder [tor-browser]
    40 
    +   * Bug 43643: Clean out unused tor connect strings [tor-browser]
    41 
    +   * Bug 43650: Survey banner behaves like a dialog on Android, rather than a card [tor-browser]
    42 
    +   * Bug 43676: Preemptively disable unified trust panel by default so we are tracking for next ESR [tor-browser]
    43 
    +   * Bug 44031: Implement YEC 2025 Takeover for Android Stable [tor-browser]
    44 
    +   * Bug 44218: Tor Browser Alpha for Android (15.0a2) doesn't work on Huawei devices P20 and P30 [tor-browser]
    45 
    +   * Bug 44237: Revoke access to all advertising ids available in Android [tor-browser]
    46 
    + * Build System
    47 
    +   * All Platforms
    48 
    +     * Bug 41568: Update instructions for manually building 7zip [tor-browser-build]
    49 
    +     * Bug 41576: Build expert bundles outside containers [tor-browser-build]
    50 
    +     * Bug 41579: Add zip to the list of Tor Browser Build dependencies [tor-browser-build]
    51 
    +     * Bug 41588: Restore legacy channel support in projects/release/update_responses_config.yml [tor-browser-build]
    52 
    +     * Bug 41589: Backport tor-browser-build-browser#41270: Add updater rewriterules to make 13.5.7 a watershed [tor-browser-build]
    53 
    +   * Windows + macOS + Linux
    54 
    +     * Bug 41373: Remove `_ALL` from mar filenames [tor-browser-build]
    55 
    +     * Bug 44131: Generate torrc-defaults and put it in objdir post-build [tor-browser]
    56 
    +   * Windows + Linux + Android
    57 
    +     * Updated Go to 1.24.9
    58 
    +   * Windows
    59 
    +     * Bug 44167: Move the nsis-uninstall.patch to tor-browser repository [tor-browser]
    60 
    +   * macOS
    61 
    +     * Bug 41571: Work-around to prevent older 7z versions to break rcodesign. [tor-browser-build]
    62 
    +   * Linux
    63 
    +     * Bug 41558: Share descriptions between Linux packages and archives [tor-browser-build]
    64 
    +     * Bug 41569: Use var/display_name in .desktop files [tor-browser-build]
    65 
    +   * Android
    66 
    +     * Bug 44220: Disable the JS minifier as it produces invalid JS [tor-browser]
    67 
    +     * Bug 41577: Minify JS with UglifyJS on Android x86 [tor-browser-build]
    68 
    +     * Bug 41582: Drop --pack-dyn-relocs=relr [tor-browser-build]
    69 
    +     * Bug 41583: Align tor and PTs to 16kB on Android [tor-browser-build]
    70 
    +
    1 71 
     Tor Browser 15.0a3 - September 18 2025
    2 72 
      * All Platforms
    3 73 
        * Updated Tor to 0.4.9.3-alpha

  • projects/browser/config
    ... ... @@ -113,16 +113,16 @@ input_files:
    113 113 
         enable: '[% ! c("var/android") %]'
    114 114 
       - filename: dmg-root
    115 115 
         enable: '[% ! c("var/android") %]'
    116 
    -  - URL: https://addons.mozilla.org/firefox/downloads/file/4551629/noscript-13.0.9.xpi
    116 
    +  - URL: https://addons.mozilla.org/firefox/downloads/file/4593796/noscript-13.2.1.xpi
    117 117 
         name: noscript
    118 
    -    sha256sum: 525ab61aff21f67d10c3e20965a86ed479631549908a658f54692adc47d771f5
    119 
    -  - URL: https://addons.mozilla.org/firefox/downloads/file/4573289/ublock_origin-1.66.0.xpi
    118 
    +    sha256sum: 190297f3d1e55db0c65f9bc00460bea9b753939d428ea593d6cef27fde1ce69a
    119 
    +  - URL: https://addons.mozilla.org/firefox/downloads/file/4578681/ublock_origin-1.66.4.xpi
    120 120 
         name: ublock-origin
    121 
    -    sha256sum: 155820bace5bf7c8ba547e27678a4a25251131c54904f02f5bf340996f6fdbdc
    121 
    +    sha256sum: bc62cd930601212f1568964389352bbd4b1808466f2c9ac1198c754338077fb0
    122 122 
         enable: '[% c("var/mullvad-browser") %]'
    123 
    -  - URL: https://cdn.mullvad.net/browser-extension/0.9.4/mullvad-browser-extension-0.9.4.xpi
    123 
    +  - URL: https://cdn.mullvad.net/browser-extension/0.9.5/mullvad-browser-extension-0.9.5.xpi
    124 124 
         name: mullvad-extension
    125 
    -    sha256sum: c91fcf30fe9a998f45ddc92e083bca4cd7b6dbb24fc545391e155ed1ec13c8cb
    125 
    +    sha256sum: c36f8d5447300621579f7f1408a25f25dac3929c867e7ae5db9fc8b82e80a4e9
    126 126 
         enable: '[% c("var/mullvad-browser") %]'
    127 127 
       - filename: 'gtk3-settings.ini'
    128 128 
         enable: '[% c("var/linux") %]'

  • projects/firefox/config
    ... ... @@ -21,7 +21,7 @@ var:
    21 21 
       browser_series: '15.0'
    22 22 
       browser_rebase: 1
    23 23 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    24 
    -  browser_build: 1
    24 
    +  browser_build: 2
    25 25 
       copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
    26 26 
       nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'
    27 27 
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser

  • projects/geckoview/config
    ... ... @@ -23,7 +23,7 @@ var:
    23 23 
       browser_series: '15.0'
    24 24 
       browser_rebase: 1
    25 25 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    26 
    -  browser_build: 1
    26 
    +  browser_build: 2
    27 27 
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
    28 28 
       git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
    29 29 
       deps:

  • projects/go/config
    1 1 
     # vim: filetype=yaml sw=2
    2 
    -version: '1.24.7'
    2 
    +version: '1.24.9'
    3 3 
     filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    4 4 
     container:
    5 5 
       use_container: 1
    6 6
    7 7 
     var:
    8 
    -  source_sha256: 2a8f50db0f88803607c50d7ea8834dcb7bd483c6b428a91e360fdf8624b46464
    8 
    +  source_sha256: c72f81ba54fe00efe7f3e7499d400979246881b13b775e9a9bb85541c11be695
    9 9 
       no_crosscompile: 1
    10 10 
       setup: |
    11 11 
         mkdir -p /var/tmp/dist

  • projects/manual/config
    1 1 
     # vim: filetype=yaml sw=2
    2 2 
     # To update, see doc/how-to-update-the-manual.txt
    3 3 
     # Remember to update also the package's hash, with the version!
    4 
    -version: 311002
    4 
    +version: 321660
    5 5 
     filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    6 6 
     container:
    7 7 
       use_container: 1

  • projects/openssl/config
    1 1 
     # vim: filetype=yaml sw=2
    2 
    -version: 3.5.3
    2 
    +version: 3.5.4
    3 3 
     filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    4 4 
     container:
    5 5 
       use_container: 1
    ... ... @@ -33,5 +33,5 @@ input_files:
    33 33 
       - name: '[% c("var/compiler") %]'
    34 34 
         project: '[% c("var/compiler") %]'
    35 35 
       - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz'
    36 
    -    sha256sum: c9489d2abcf943cdc8329a57092331c598a402938054dc3a22218aea8a8ec3bf
    36 
    +    sha256sum: 967311f84955316969bdb1d8d4b983718ef42338639c621ec4c34fddef355e99
    37 37 
         name: openssl

  • projects/translation/config
    ... ... @@ -12,13 +12,13 @@ compress_tar: 'gz'
    12 12 
     steps:
    13 13 
       base-browser:
    14 14 
         base-browser: '[% INCLUDE build %]'
    15 
    -    git_hash: 7a4673ab420d7c52cd3fa7366d0d9cdaa5a37937
    15 
    +    git_hash: dff70d135408cfc24931c170efa91fbaded19914
    16 16 
         targets:
    17 17 
           nightly:
    18 18 
             git_hash: 'base-browser'
    19 19 
       tor-browser:
    20 20 
         tor-browser: '[% INCLUDE build %]'
    21 
    -    git_hash: db5e90248e74338ce72ff118bdb749fea6ea2606
    21 
    +    git_hash: ca310e42296a7085ea59fc323592f3dc702123ac
    22 22 
         targets:
    23 23 
           nightly:
    24 24 
             git_hash: 'tor-browser'
    ... ... @@ -32,7 +32,7 @@ steps:
    32 32 
         fenix: '[% INCLUDE build %]'
    33 33 
         # We need to bump the commit before releasing but just pointing to a branch
    34 34 
         # might cause too much rebuidling of the Firefox part.
    35 
    -    git_hash: 092a1e145fc7d558afbb0f6490f21aef4f6f5b2e
    35 
    +    git_hash: 0efa38c746df88feeb4daa7150e394e87e6d4d18
    36 36 
         compress_tar: 'zst'
    37 37 
         targets:
    38 38 
           nightly:

  • rbm.conf
    ... ... @@ -74,11 +74,11 @@ buildconf:
    74 74 
       git_signtag_opt: '-s'
    75 75
    76 76 
     var:
    77 
    -  torbrowser_version: '15.0a3'
    77 
    +  torbrowser_version: '15.0a4'
    78 78 
       torbrowser_build: 'build1'
    79 79 
       # This should be the date of when the build is started. For the build
    80 80 
       # to be reproducible, browser_release_date should always be in the past.
    81 
    -  browser_release_date: '2025/09/17 18:30:00'
    81 
    +  browser_release_date: '2025/10/15 18:00:00'
    82 82 
       browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
    83 83 
       browser_default_channel: alpha
    84 84 
       browser_platforms:
    ... ... @@ -128,9 +128,9 @@ var:
    128 128 
       updater_enabled: 1
    129 129 
       build_mar: 1
    130 130 
       torbrowser_incremental_from:
    131 
    +    - 15.0a3
    131 132 
         - 15.0a2
    132 133 
         - 15.0a1
    133 
    -    - 14.5a6
    134 134 
       mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
    135 135
    136 136 
     #  torbrowser_legacy_version: 13.5.22

    • —
    View it on GitLab.
    You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help Notification message regarding https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/3f55477b5848b3e85761453c3303df6573bee8f4 at 1760557503