Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 93827844 by Pier Angelo Vendrame at 2026-03-10T19:31:00+01:00 Bug 41729&41730: Prepare Tor&Mullvad Browser 16.0a4. - - - - - 10 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/moat-settings/config - projects/translation/config - projects/zlib/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,35 @@ +Mullvad Browser 16.0a4 - March 11 2026 + * All Platforms + * Updated Firefox to 148.0a1 + * Updated NoScript to 13.6.6.90401984 + * Bug 515: Fix mullvad browser about dialog for 148 [mullvad-browser] + * Bug 516: Use CSS size and space tokens in mullvad-browser [mullvad-browser] + * Bug 44663: NoScript behavior on “Safer” security level prevents integrity checks for dynamically loaded javascript [tor-browser] + * Bug 44675: Restore "BB 43850: Modify the Contrast Control settings for RFP" dropped during the 148.0a1 rebase [tor-browser] + * Bug 44679: Review Mozilla 2006066: Credit cards autofill settings are not visible [tor-browser] + * Bug 44680: Properly handle subdocuments created by data: URLs [tor-browser] + * Bug 44687: Security level requires a restart in a new profile after 148 update [tor-browser] + * Bug 44689: Forwardport tor-browser#44668 from legacy to alpha: Set detailsURL in update XML to be useful for 13.5 users [tor-browser] + * Bug 44701: Unexpected change to `netwerk/url-classifier/components.conf` [tor-browser] + * Bug 44706: creating a new profiles causes crash ENOTTY [tor-browser] + * Bug 44709: Hide the AI settings panel [tor-browser] + * Bug 44710: Hide about:preferences#translations [tor-browser] + * Bug 44717: Search suggestion settings are visible in 148 [tor-browser] + * Bug 41738: Allow to specify an unsupportedURL on update responses [tor-browser-build] + * Bug 41742: Make the Mullvad Browser publishing script work even if the BB branch being missing [tor-browser-build] + * Windows + * Bug 44461: Window controls are missing on Windows [tor-browser] + * Bug 44633: Move D3D11 function from local webrtc changes to tbb webrtc patches [tor-browser] + * Linux + * Bug 44394: Do not read default prefs from /etc/firefox [tor-browser] + * Build System + * All Platforms + * Bug 41690: Merge list_toolchain_updates-firefox-* commands into one [tor-browser-build] + * Bug 41725: Update toolchains for Firefox 148 [tor-browser-build] + * Bug 41726: Check in list_toolchain_updates that the sha512sum we have for the macOS SDK is the same as Mozilla [tor-browser-build] + * Bug 41727: Split the list_toolchain_updates_checks script in two [tor-browser-build] + * Bug 41728: Update projects/application-services/list_toolchain_updates_checks to check nss sha256sum [tor-browser-build] + Mullvad Browser 16.0a3 - February 17 2026 * All Platforms * Updated NoScript to 13.5.12.90301984 ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,63 @@ +Tor Browser 16.0a4 - March 11 2026 + * All Platforms + * Updated NoScript to 13.6.6.90401984 + * Updated zlib to 1.3.2 + * Bug 44663: NoScript behavior on “Safer” security level prevents integrity checks for dynamically loaded javascript [tor-browser] + * Bug 44675: Restore "BB 43850: Modify the Contrast Control settings for RFP" dropped during the 148.0a1 rebase [tor-browser] + * Bug 44679: Review Mozilla 2006066: Credit cards autofill settings are not visible [tor-browser] + * Bug 44680: Properly handle subdocuments created by data: URLs [tor-browser] + * Bug 44687: Security level requires a restart in a new profile after 148 update [tor-browser] + * Bug 44689: Forwardport tor-browser#44668 from legacy to alpha: Set detailsURL in update XML to be useful for 13.5 users [tor-browser] + * Bug 44701: Unexpected change to `netwerk/url-classifier/components.conf` [tor-browser] + * Bug 44706: creating a new profiles causes crash ENOTTY [tor-browser] + * Bug 41738: Allow to specify an unsupportedURL on update responses [tor-browser-build] + * Windows + macOS + Linux + * Updated Firefox to 148.0a1 + * Bug 42664: Use mozilla token sizes in CSS [tor-browser] + * Bug 44634: Review Mozilla 2006250: add ai window about:preferences section within ai features [tor-browser] + * Bug 44682: Wrong pid in the exit log [tor-browser] + * Bug 44709: Hide the AI settings panel [tor-browser] + * Bug 44710: Hide about:preferences#translations [tor-browser] + * Bug 44713: The about dialog is missing some padding in 148.0a1 [tor-browser] + * Bug 44717: Search suggestion settings are visible in 148 [tor-browser] + * Windows + Linux + * Bug 40892: Move torrc-defaults, geoip and geoip6 on Windows and Linux [tor-browser-build] + * Windows + * Bug 44461: Window controls are missing on Windows [tor-browser] + * Bug 44633: Move D3D11 function from local webrtc changes to tbb webrtc patches [tor-browser] + * Linux + * Bug 44394: Do not read default prefs from /etc/firefox [tor-browser] + * Android + * Updated GeckoView to 148.0a1 + * Bug 43349: Add user feedback for when Tor connects (Android) [tor-browser] + * Bug 43909: Review Mozilla: TBD: new Android tab-strip feature [tor-browser] + * Bug 44226: Disable all link sharing functionality [tor-browser] + * Bug 44274: Review Mozilla 1986534: Disable screenshots in PBM [tor-browser] + * Bug 44469: Fix branding on Android RR [tor-browser] + * Bug 44506: Remove more sync from 147 [tor-browser] + * Bug 44582: Fix or remove new settings search functionality on Android [tor-browser] + * Bug 44661: Restore or fix new rebase-148 uses of moz assets instead of TB ones [tor-browser] + * Bug 44718: Fix splash screen branding and other issues in RR [tor-browser] + * Bug 44721: Android build failure in nightlyOssLicensesTask: missing dependencies.json file [tor-browser] + * Build System + * All Platforms + * Bug 41690: Merge list_toolchain_updates-firefox-* commands into one [tor-browser-build] + * Bug 41725: Update toolchains for Firefox 148 [tor-browser-build] + * Bug 41726: Check in list_toolchain_updates that the sha512sum we have for the macOS SDK is the same as Mozilla [tor-browser-build] + * Bug 41727: Split the list_toolchain_updates_checks script in two [tor-browser-build] + * Bug 41728: Update projects/application-services/list_toolchain_updates_checks to check nss sha256sum [tor-browser-build] + * Windows + macOS + Linux + * Bug 44406: Fix CSS linting issues introduced by 146 [tor-browser] + * Windows + Linux + Android + * Updated Go to 1.25.8 + * Android + * Bug 41736: Add generate_gradle_dependencies_list-$project makefile targets [tor-browser-build] + * Bug 41737: Remove comment from gen-gradle-deps-file.py saying var/gradle_dependencies_version should be updated [tor-browser-build] + * Bug 41743: Make an error if gradle-dependencies-list is missing in the input files [tor-browser-build] + * Bug 41744: Reduce duplication between projects/geckoview/build and projects/geckoview/build_apk [tor-browser-build] + * Bug 41745: Add .sh file extension to included build_* scripts in projects/geckoview [tor-browser-build] + * Bug 41751: Fix the NDK path [tor-browser-build] + Tor Browser 16.0a3 - February 17 2026 * All Platforms * Updated Tor to 0.4.9.5 ===================================== projects/browser/config ===================================== @@ -87,9 +87,9 @@ input_files: enable: '[% !c("var/android") %]' - filename: dmg-root enable: '[% c("var/macos") %]' - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.12.90301984.xp... + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.6.90401984.xpi name: noscript - sha256sum: 047d886412ab823b61355e3d54625885d088ee0d594c53622a2809b6f25d4529 + sha256sum: a961c57791bc4dc8add25f8e21b527d5b60d8eaff32e627bd6b61383588921ed - URL: https://addons.mozilla.org/firefox/downloads/file/4675310/ublock_origin-1.69... name: ublock-origin sha256sum: 785bcde68a25faa8a0949964ec5ffe9bdcb85d3f0ae21c23f607c6c8f91472cf ===================================== projects/firefox/config ===================================== @@ -22,7 +22,7 @@ var: browser_series: '16.0' browser_rebase: 2 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 2 upstream_firefox_commit: FIREFOX_NIGHTLY_148_END copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' @@ -113,8 +113,6 @@ targets: updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' mar_id_prefix: 'mullvadbrowser-mullvad' nightly_updates_publish_dir_prefix: mullvadbrowser- - browser_build: 3 - linux-x86_64: var: arch_deps: ===================================== projects/geckoview/config ===================================== @@ -25,7 +25,7 @@ var: browser_series: '16.0' browser_rebase: 2 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 2 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.25.7' +version: '1.25.8' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: 178f2832820274b43e177d32f06a3ebb0129e427dd20a5e4c88df2c1763cf10a + source_sha256: e988d4a2446ac7fe3f6daa089a58e9936a52a381355adec1c8983230a8d6c59e no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist ===================================== projects/moat-settings/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' git_url: https://gitlab.torproject.org/tpo/anti-censorship/rdsys-admin.git -git_hash: 365b0e65b27e053bece37b70bca0bd5fdb02099f +git_hash: b4e3b47c3ed31c35a6df43ba654de37b62b93c27 version: '[% c("abbrev") %]' # Use gz for now, since we do not support Zstandard on Linux containers. compress_tar: 'gz' ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 5ffb8148b4814b097bcde0a212c936e283aa77ea + git_hash: 0c951426ef9c309ba2c5e49f2a429c7914c73c6c targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 719eeceb96651f4cf527dc3d4493a9306277205e + git_hash: e531300282aef8d2af89e94a8725ed9368f0a52b targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: cca0df9dec7d9400c4347d497ec8baa27b703dc4 + git_hash: 01957ed5cfe97206ebd1fbdba8c7bd94c10ebf0e compress_tar: 'zst' targets: nightly: ===================================== projects/zlib/config ===================================== @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' -version: '1.3.1' +version: '1.3.2' git_hash: 'v[% c("version") %]' git_url: https://github.com/madler/zlib.git gpg_keyring: zlib.gpg ===================================== rbm.conf ===================================== @@ -77,11 +77,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '16.0a3' + torbrowser_version: '16.0a4' torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2026/02/16 20:00:00' + browser_release_date: '2026/03/10 18:30:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: alpha browser_platforms: @@ -127,9 +127,9 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 16.0a3 - 16.0a2 - 16.0a1 - - 15.0a4 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # torbrowser_legacy_version: 13.5.22 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/93... -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/93... You're receiving this email because of your account on gitlab.torproject.org.