morgan pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build

Commits:

8 changed files:

Changes:

  • projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
    1 
    +Mullvad Browser 15.0 - October 28
    2 
    + * All Platforms
    3 
    +   * Updated Firefox to 140.4.0esr
    4 
    +   * Updated NoScript to 13.2.2
    5 
    +   * Bug 451: The restart to apply button doesn't work [mullvad-browser]
    6 
    +   * Bug 463: Fix typo in MimeType entry in .desktop file included in deb/rpm package (application/xhtml_xml instead of application/xhtml+xml) [mullvad-browser]
    7 
    +   * Bug 468: Drop the Metager search engine [mullvad-browser]
    8 
    +   * Bug 478: Update to the Mullvad Browser extension to 0.9.5 [mullvad-browser]
    9 
    +   * Bug 19741: Opensearch (contextual search) does not obey FPI [tor-browser]
    10 
    +   * Bug 42738: Tidy up the commit structure for browser updates UI [tor-browser]
    11 
    +   * Bug 43009: Backport Bug 1973265 - Put WebCodecs API behind RFP Target [tor-browser]
    12 
    +   * Bug 43093: Refactor the patch to disable LaterRun [tor-browser]
    13 
    +   * Bug 43111: Delete our webextensions for search engines when Bug 1885953 is fixed upstream [tor-browser]
    14 
    +   * Bug 43525: Check if our search engine customization still works after ESR 140 transition [tor-browser]
    15 
    +   * Bug 43590: Move letterboxing rules out of browser/base/content/browser.css [tor-browser]
    16 
    +   * Bug 43610: Use newer CSS variable names for ESR 140 [tor-browser]
    17 
    +   * Bug 43629: All migrations in migrateUIBB are run for new profiles [tor-browser]
    18 
    +   * Bug 43638: Fix up our `<command>` elements [tor-browser]
    19 
    +   * Bug 43664: Review Mozilla 1842832: Move the private browsing toggle to initial install dialog [tor-browser]
    20 
    +   * Bug 43728: Update search engine icon sizes [tor-browser]
    21 
    +   * Bug 43745: Disable HEVC (H265) playback support [tor-browser]
    22 
    +   * Bug 43749: Replace the newtab component and addon with our home page [tor-browser]
    23 
    +   * Bug 43770: Bugzilla 1958070: More BrowserGlue simplification/splitting [tor-browser]
    24 
    +   * Bug 43772: Do not use official branding for BB/TB/MB [tor-browser]
    25 
    +   * Bug 43776: Set branding files for l10n merging [tor-browser]
    26 
    +   * Bug 43795: Restore the URL classifier XPCOM components. [tor-browser]
    27 
    +   * Bug 43844: Security level shield icon should be flipped for RTL locales [tor-browser]
    28 
    +   * Bug 43850: Modify the Contrast Control settings for RFP [tor-browser]
    29 
    +   * Bug 43864: Remove features from the unified search button [tor-browser]
    30 
    +   * Bug 43869: Hide pens with RFP [tor-browser]
    31 
    +   * Bug 43874: Incorporate our unified extension button hiding logic into mozilla's changes for ESR 140 [tor-browser]
    32 
    +   * Bug 43886: Fix new tab for ESR 140 [tor-browser]
    33 
    +   * Bug 43900: Open newtab rather than firefoxview when unloading the last tab [tor-browser]
    34 
    +   * Bug 43902: Hide Sidebar buttons [tor-browser]
    35 
    +   * Bug 43903: Report broken site is disabled rather than hidden [tor-browser]
    36 
    +   * Bug 43905: base-browser.ftl missing from about:addons [tor-browser]
    37 
    +   * Bug 43906: Extension.sys.mjs change in the wrong commit [tor-browser]
    38 
    +   * Bug 43913: Context menu not properly populated [tor-browser]
    39 
    +   * Bug 43947: Console error from ContentBlockingPrefs.init [tor-browser]
    40 
    +   * Bug 43966: Notify the user when they are in a custom security level (desktop) [tor-browser]
    41 
    +   * Bug 43989: Switch off AI chatbot preference [tor-browser]
    42 
    +   * Bug 44030: Security Level selector does not get confirmation before restarting [tor-browser]
    43 
    +   * Bug 44034: Update string used for checkbox on New Identity confirmation dialog [tor-browser]
    44 
    +   * Bug 44040: Modify nsIPrompt and the commonDialog code to allow destructive buttons [tor-browser]
    45 
    +   * Bug 44045: Drop AI and machine learning components [tor-browser]
    46 
    +   * Bug 44090: Several of our XUL pages cause a crash because of missing CSP [tor-browser]
    47 
    +   * Bug 44106: Make sure background tasks are not used for shutdown cleanup [tor-browser]
    48 
    +   * Bug 44107: Switch tab search action is missing an icon [tor-browser]
    49 
    +   * Bug 44108: Fix the new history sidebar [tor-browser]
    50 
    +   * Bug 44123: Do not trim protocol off of URLs ever [tor-browser]
    51 
    +   * Bug 44125: Do not offer to save signatures by default in Private Browsing Mode [tor-browser]
    52 
    +   * Bug 44140: Refactored patch to prevent writing temp PDF files to disk [tor-browser]
    53 
    +   * Bug 44141: Hide "Report broken site" items by default  [tor-browser]
    54 
    +   * Bug 44142: Missing document_pdf.svg from our branding directories [tor-browser]
    55 
    +   * Bug 44153: Test search engine customization [tor-browser]
    56 
    +   * Bug 44159: Change or hide the sidebar settings description [tor-browser]
    57 
    +   * Bug 44177: Remove more urlbar actions [tor-browser]
    58 
    +   * Bug 44178: Search preservation does not work with duckduckgo in safest security level [tor-browser]
    59 
    +   * Bug 44187: TLS session tickets leak Private Browsing mode [tor-browser]
    60 
    +   * Bug 44213: Reduce linkability concerns of the "Search with" contextual search action [tor-browser]
    61 
    +   * Bug 44214: Update letterboxing to reflect changes in ESR 140 [tor-browser]
    62 
    +   * Bug 44215: Hide Firefox home settings in about:preferences [tor-browser]
    63 
    +   * Bug 44221: Backport MozBug 1984333 Bump Spoofed Processor Count [tor-browser]
    64 
    +   * Bug 44234: No images in PDF [tor-browser]
    65 
    +   * Bug 44242: Hand over Security Level's WebAssembly controls to NoScript [tor-browser]
    66 
    +   * Bug 44262: Disable adding search engines from HTML forms [tor-browser]
    67 
    +   * Bug 44279: Disable contextual search install prompt [tor-browser]
    68 
    + * Windows
    69 
    +   * Bug 440: Make abseil use win32 thread model on mingw [mullvad-browser]
    70 
    +   * Bug 44046: Replace BASE_BROWSER_UPDATE with BASE_BROWSER_VERSION in the font visibility list [tor-browser]
    71 
    +   * Bug 44062: Force touch enabled on Windows and Android [tor-browser]
    72 
    + * Linux
    73 
    +   * Bug 43950: Review Mozilla 1894818: Support HEVC playback on Linux [tor-browser]
    74 
    +   * Bug 43959: Make Noto Color Emoji the default emoji font on Linux [tor-browser]
    75 
    +   * Bug 44227: Some CJK characters cannot be rendered by Tor which uses the Noto font family [tor-browser]
    76 
    +   * Bug 41586: Replace Noto CJK with Jigmo on Linux [tor-browser-build]
    77 
    + * Build System
    78 
    +   * All Platforms
    79 
    +     * Bug 43891: Update the translation CI to use the new mozilla versions [tor-browser]
    80 
    +     * Bug 44067: Move --enable-geckodriver only to Linux-only mozconfigs [tor-browser]
    81 
    +     * Bug 44103: git's export-subst is a reproducibility problem [tor-browser]
    82 
    +     * Bug 44104: Don't run linter when there are no overall changes [tor-browser]
    83 
    +     * Bug 26408: Make MAR signature checks clearer when creating incremental MAR files [tor-browser-build]
    84 
    +     * Bug 34434: Remove unused variables from rbm.conf [tor-browser-build]
    85 
    +     * Bug 40697: Delete repackage_browser.sh [tor-browser-build]
    86 
    +     * Bug 40698: Update locale in tbb_version.json [tor-browser-build]
    87 
    +     * Bug 40994: Add support in do-all-signing to sign release for some archs only [tor-browser-build]
    88 
    +     * Bug 41064: Update tools/signing/README and add a tools/signing/machines-setup/README [tor-browser-build]
    89 
    +     * Bug 41227: Update projects/common/list_toolchain_updates-common-firefox-geckoview to include check for binutils [tor-browser-build]
    90 
    +     * Bug 41373: Remove `_ALL` from mar filenames [tor-browser-build]
    91 
    +     * Bug 41444: Build artifacts to support artifact builds of Tor/Muillvad/Base Browser [tor-browser-build]
    92 
    +     * Bug 41448: Update toolchains for Firefox ESR 140 [tor-browser-build]
    93 
    +     * Bug 41452: Skip update-responses xml files for versions which don't have incrementals [tor-browser-build]
    94 
    +     * Bug 41457: Set mar IDs as env variables in tor-browser-build [tor-browser-build]
    95 
    +     * Bug 41459: Update taskcluster/ci paths in README and comments [tor-browser-build]
    96 
    +     * Bug 41465: Disable development artifacts generation by default, keep it enabled for nightly builds [tor-browser-build]
    97 
    +     * Bug 41478: Add vim and others missing basic tools to base container image [tor-browser-build]
    98 
    +     * Bug 41496: Clean up unused projects [tor-browser-build]
    99 
    +     * Bug 41501: cargo_vendor generated archive maintains timestamps [tor-browser-build]
    100 
    +     * Bug 41517: Add morgan's key to the setup account on the signing machine [tor-browser-build]
    101 
    +     * Bug 41534: Copy geckodriver only for Linux x86-64 [tor-browser-build]
    102 
    +     * Bug 41539: Update Ubuntu version used to run mmdebstrap to 24.04.3 [tor-browser-build]
    103 
    +     * Bug 41568: Update instructions for manually building 7zip [tor-browser-build]
    104 
    +     * Bug 41579: Add zip to the list of Tor Browser Build dependencies [tor-browser-build]
    105 
    +     * Bug 40084: Always use bash for the debug terminal [rbm]
    106 
    +     * Bug 40087: Downloaded files getting stricter permissions than expected [rbm]
    107 
    +   * Windows
    108 
    +     * Bug 44167: Move the nsis-uninstall.patch to tor-browser repository [tor-browser]
    109 
    +   * macOS
    110 
    +     * Bug 41503: Error 403 when downloading macOS SDK [tor-browser-build]
    111 
    +     * Bug 41527: Update libdmg-hfsplus and enable LZMA compression on dmgs [tor-browser-build]
    112 
    +     * Bug 41538: Bump macOS SDK to 15.5 [tor-browser-build]
    113 
    +     * Bug 41571: Work-around to prevent older 7z versions to break rcodesign. [tor-browser-build]
    114 
    +   * Linux
    115 
    +     * Bug 41458: Ship geckodriver only on Linux [tor-browser-build]
    116 
    +     * Bug 41488: Disable sys/random.h for Node.js [tor-browser-build]
    117 
    +     * Bug 41558: Share descriptions between Linux packages and archives [tor-browser-build]
    118 
    +     * Bug 41561: Ship Noto Color Emoji on Linux [tor-browser-build]
    119 
    +     * Bug 41569: Use var/display_name in .desktop files [tor-browser-build]
    120 
    +
    1 121 
     Mullvad Browser 15.0a4 - October 16 2025
    2 122 
      * All Platforms
    3 123 
        * Updated Firefox to 140.4.0esr
    ... ... @@ -24,7 +144,7 @@ Mullvad Browser 15.0a4 - October 16 2025
    24 144 
        * Bug 44221: Backport MozBug 1984333 Bump Spoofed Processor Count [tor-browser]
    25 145 
        * Bug 44234: No images in PDF [tor-browser]
    26 146 
        * Bug 44240: Typo on dom.security.https_first_add_exception_on_failure [tor-browser]
    27 
    -   * Bug 44242: Hand over Security Level's WebAssembly controls  to NoScript [tor-browser]
    147 
    +   * Bug 44242: Hand over Security Level's WebAssembly controls to NoScript [tor-browser]
    28 148 
        * Bug 44262: Disable adding search engines from HTML forms [tor-browser]
    29 149 
      * Linux
    30 150 
        * Bug 44227: Some CJK characters cannot be rendered by Tor which uses the Noto font family [tor-browser]

  • projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
    1 
    +Tor Browser 15.0 - October 28 2025
    2 
    + * All Platforms
    3 
    +   * Updated NoScript to 13.2.2
    4 
    +   * Updated Lyrebird to 0.6.2
    5 
    +   * Bug 19741: Opensearch (contextual search) does not obey FPI [tor-browser]
    6 
    +   * Bug 43009: Backport Bug 1973265 - Put WebCodecs API behind RFP Target [tor-browser]
    7 
    +   * Bug 43093: Refactor the patch to disable LaterRun [tor-browser]
    8 
    +   * Bug 43727: Update moz-toggle customisation for ESR 140 [tor-browser]
    9 
    +   * Bug 43745: Disable HEVC (H265) playback support [tor-browser]
    10 
    +   * Bug 43772: Do not use official branding for BB/TB/MB [tor-browser]
    11 
    +   * Bug 43784: Get confirmation from NoScript that settings are applied [tor-browser]
    12 
    +   * Bug 43832: Drop eslint-env [tor-browser]
    13 
    +   * Bug 43850: Modify the Contrast Control settings for RFP [tor-browser]
    14 
    +   * Bug 43853: DomainFrontedRequests: setData is no longer a function [tor-browser]
    15 
    +   * Bug 43864: Remove features from the unified search button [tor-browser]
    16 
    +   * Bug 43869: Hide pens with RFP [tor-browser]
    17 
    +   * Bug 43880: Update moat's domain front url [tor-browser]
    18 
    +   * Bug 44045: Drop AI and machine learning components [tor-browser]
    19 
    +   * Bug 44068: Handle migration from meek-azure to meek built-in bridge type [tor-browser]
    20 
    +   * Bug 44069: Update `meek-azure` related strings to `meek` [tor-browser]
    21 
    +   * Bug 44140: Refactored patch to prevent writing temp PDF files to disk [tor-browser]
    22 
    +   * Bug 44234: No images in PDF [tor-browser]
    23 
    +   * Bug 41429: Add a note about user safety to Tor Browser Alpha blog posts [tor-browser-build]
    24 
    +   * Bug 41442: Update our audit CSVs to use the new Audit template [tor-browser-build]
    25 
    +   * Bug 41502: Application services build is failing on isNetworkAllowed() [tor-browser-build]
    26 
    + * Windows + macOS + Linux
    27 
    +   * Updated Firefox to 140.4.0esr
    28 
    +   * Bug 42025: Purple elements (e.g. Tor buttons) need dark theme variants [tor-browser]
    29 
    +   * Bug 42738: Tidy up the commit structure for browser updates UI [tor-browser]
    30 
    +   * Bug 43111: Delete our webextensions for search engines when Bug 1885953 is fixed upstream [tor-browser]
    31 
    +   * Bug 43519: Replace tor-loading.png with SVG [tor-browser]
    32 
    +   * Bug 43525: Check if our search engine customization still works after ESR 140 transition [tor-browser]
    33 
    +   * Bug 43590: Move letterboxing rules out of browser/base/content/browser.css [tor-browser]
    34 
    +   * Bug 43610: Use newer CSS variable names for ESR 140 [tor-browser]
    35 
    +   * Bug 43629: All migrations in migrateUIBB are run for new profiles [tor-browser]
    36 
    +   * Bug 43636: Tor exiting during startup with "connect automatically" leads to "Try a bridge" page [tor-browser]
    37 
    +   * Bug 43638: Fix up our `<command>` elements [tor-browser]
    38 
    +   * Bug 43664: Review Mozilla 1842832: Move the private browsing toggle to initial install dialog [tor-browser]
    39 
    +   * Bug 43728: Update search engine icon sizes [tor-browser]
    40 
    +   * Bug 43765: Temporarily disable Lox [tor-browser]
    41 
    +   * Bug 43766: Only save the relevant TorSettings changes to preferences. [tor-browser]
    42 
    +   * Bug 43770: Bugzilla 1958070: More BrowserGlue simplification/splitting [tor-browser]
    43 
    +   * Bug 43776: Set branding files for l10n merging [tor-browser]
    44 
    +   * Bug 43795: Restore the URL classifier XPCOM components. [tor-browser]
    45 
    +   * Bug 43817: Write e2e test for verifying if the browser is connected to the Tor network [tor-browser]
    46 
    +   * Bug 43844: Security level shield icon should be flipped for RTL locales [tor-browser]
    47 
    +   * Bug 43874: Incorporate our unified extension button hiding logic into mozilla's changes for ESR 140 [tor-browser]
    48 
    +   * Bug 43879: tor-branding.css declarations are overwritten [tor-browser]
    49 
    +   * Bug 43886: Fix new tab for ESR 140 [tor-browser]
    50 
    +   * Bug 43900: Open newtab rather than firefoxview when unloading the last tab [tor-browser]
    51 
    +   * Bug 43901: Modify about:license for Tor Browser and drop about:rights [tor-browser]
    52 
    +   * Bug 43902: Hide Sidebar buttons [tor-browser]
    53 
    +   * Bug 43903: Report broken site is disabled rather than hidden [tor-browser]
    54 
    +   * Bug 43905: base-browser.ftl missing from about:addons [tor-browser]
    55 
    +   * Bug 43906: Extension.sys.mjs change in the wrong commit [tor-browser]
    56 
    +   * Bug 43913: Context menu not properly populated [tor-browser]
    57 
    +   * Bug 43929: two about:tor pages opened after update [tor-browser]
    58 
    +   * Bug 43930: Onionize toggle not centre aligned in about:tor [tor-browser]
    59 
    +   * Bug 43947: Console error from ContentBlockingPrefs.init [tor-browser]
    60 
    +   * Bug 43966: Notify the user when they are in a custom security level (desktop) [tor-browser]
    61 
    +   * Bug 43989: Switch off AI chatbot preference [tor-browser]
    62 
    +   * Bug 44030: Security Level selector does not get confirmation before restarting [tor-browser]
    63 
    +   * Bug 44034: Update string used for checkbox on New Identity confirmation dialog [tor-browser]
    64 
    +   * Bug 44040: Modify nsIPrompt and the commonDialog code to allow destructive buttons [tor-browser]
    65 
    +   * Bug 44090: Several of our XUL pages cause a crash because of missing CSP [tor-browser]
    66 
    +   * Bug 44095: Rename connectionPane.xhtml and remove it from the jar [tor-browser]
    67 
    +   * Bug 44101: Toolbar connection status is not visible when using vertical tabs [tor-browser]
    68 
    +   * Bug 44106: Make sure background tasks are not used for shutdown cleanup [tor-browser]
    69 
    +   * Bug 44107: Switch tab search action is missing an icon [tor-browser]
    70 
    +   * Bug 44108: Fix the new history sidebar [tor-browser]
    71 
    +   * Bug 44115: Make remove all bridges dialog use a destructive red button [tor-browser]
    72 
    +   * Bug 44123: Do not trim protocol off of URLs ever [tor-browser]
    73 
    +   * Bug 44125: Do not offer to save signatures by default in Private Browsing Mode [tor-browser]
    74 
    +   * Bug 44141: Hide "Report broken site" items by default [tor-browser]
    75 
    +   * Bug 44142: Missing document_pdf.svg from our branding directories [tor-browser]
    76 
    +   * Bug 44145: Switch onion connection icons to use --icon-color-critical and --icon-color [tor-browser]
    77 
    +   * Bug 44153: Test search engine customization [tor-browser]
    78 
    +   * Bug 44159: Change or hide the sidebar settings description [tor-browser]
    79 
    +   * Bug 44177: Remove more urlbar actions [tor-browser]
    80 
    +   * Bug 44178: Search preservation does not work with duckduckgo in safest security level [tor-browser]
    81 
    +   * Bug 44180: Clear YEC 2024 preference [tor-browser]
    82 
    +   * Bug 44184: Duckduckgo Onion Lite search does not work properly in safest when added as a search engine [tor-browser]
    83 
    +   * Bug 44187: TLS session tickets leak Private Browsing mode [tor-browser]
    84 
    +   * Bug 44192: Hovering unloaded tab causes console error [tor-browser]
    85 
    +   * Bug 44213: Reduce linkability concerns of the "Search with" contextual search action [tor-browser]
    86 
    +   * Bug 44214: Update letterboxing to reflect changes in ESR 140 [tor-browser]
    87 
    +   * Bug 44215: Hide Firefox home settings in about:preferences [tor-browser]
    88 
    +   * Bug 44221: Backport MozBug 1984333 Bump Spoofed Processor Count [tor-browser]
    89 
    +   * Bug 44239: DDG HTML page and search results displayed incorrectly with Safest security setting [tor-browser]
    90 
    +   * Bug 44262: Disable adding search engines from HTML forms [tor-browser]
    91 
    +   * Bug 44279: Disable contextual search install prompt [tor-browser]
    92 
    + * Windows + Android
    93 
    +   * Bug 44062: Force touch enabled on Windows and Android [tor-browser]
    94 
    + * Windows
    95 
    +   * Bug 44046: Replace BASE_BROWSER_UPDATE with BASE_BROWSER_VERSION in the font visibility list [tor-browser]
    96 
    + * macOS
    97 
    +   * Bug 44127: Do not show macOS Privacy hint on network error pages [tor-browser]
    98 
    + * Linux
    99 
    +   * Bug 43950: Review Mozilla 1894818: Support HEVC playback on Linux [tor-browser]
    100 
    +   * Bug 43959: Make Noto Color Emoji the default emoji font on Linux [tor-browser]
    101 
    +   * Bug 44227: Some CJK characters cannot be rendered by Tor which uses the Noto font family [tor-browser]
    102 
    +   * Bug 41586: Replace Noto CJK with Jigmo on Linux [tor-browser-build]
    103 
    + * Android
    104 
    +   * Updated GeckoView to 140.4.0esr
    105 
    +   * Bug 43179: Make persistent 'private tabs' notification distinct from Firefox's [tor-browser]
    106 
    +   * Bug 43401: Replace the constructor of Locale with a builder [tor-browser]
    107 
    +   * Bug 43577: Flush settings fails on Android [tor-browser]
    108 
    +   * Bug 43643: Clean out unused tor connect strings [tor-browser]
    109 
    +   * Bug 43650: Survey banner behaves like a dialog on Android, rather than a card [tor-browser]
    110 
    +   * Bug 43676: Preemptively disable unified trust panel by default so we are tracking for next ESR [tor-browser]
    111 
    +   * Bug 43699: Dummy "about:" pages are not cleared from recently closed tabs (and possibly elsewhere) because they are normal tabs, not private tabs. [tor-browser]
    112 
    +   * Bug 43755: Restore functionality of "switch to tab" urlbar suggestion [tor-browser]
    113 
    +   * Bug 43826: Review Mozilla 1960122: Use `MOZ_BUILD_DATE` in Fenix build configuration [tor-browser]
    114 
    +   * Bug 43855: brand.properties merging on Android is broken in 140 [tor-browser]
    115 
    +   * Bug 43943: Review Mozilla 1928705: Ship Android Font Restrictions as part of FPP [tor-browser]
    116 
    +   * Bug 44021: Android settings page colors are sometimes messed up (seems to be on the first launch) [tor-browser]
    117 
    +   * Bug 44029: Search/url bar doesn't work on android after ESR 140 [tor-browser]
    118 
    +   * Bug 44036: Crash on opening "Search Settings" on android [tor-browser]
    119 
    +   * Bug 44042: Debug crash when opening settings too quickly after launching app [tor-browser]
    120 
    +   * Bug 44047: Tor Browser's home doesn't have the background at the first load on Android [tor-browser]
    121 
    +   * Bug 44080: Further remove "Analytics data collection and usage" [tor-browser]
    122 
    +   * Bug 44083: "snowflake" is lower case on Android [tor-browser]
    123 
    +   * Bug 44098: Bookmarks offer a way to go to sync in 15.0a1 [tor-browser]
    124 
    +   * Bug 44133: Hide the "Allow in private browsing" checkboxes from WebExtension management UI [tor-browser]
    125 
    +   * Bug 44139: Restore the (inactive) YouTube and Reddit search plugins on Android [tor-browser]
    126 
    +   * Bug 44172: Fix crash in TorAndroidIntegration.handleMessage() [tor-browser]
    127 
    +   * Bug 44237: Revoke access to all advertising ids available in Android [tor-browser]
    128 
    +   * Bug 41494: Update GeckoView build scripts for ESR140 [tor-browser-build]
    129 
    + * Build System
    130 
    +   * All Platforms
    131 
    +     * Bug 43615: Add Gitlab Issue and Merge request templates [tor-browser]
    132 
    +     * Bug 43616: Customize Gitlab Issue and Merge templates [tor-browser]
    133 
    +     * Bug 43891: Update the translation CI to use the new mozilla versions [tor-browser]
    134 
    +     * Bug 43954: Update tb-dev to handle lightweight tags [tor-browser]
    135 
    +     * Bug 43962: update tb-dev auto-fixup for git 2.50 [tor-browser]
    136 
    +     * Bug 44061: "Contributing" link is broken [tor-browser]
    137 
    +     * Bug 44067: Move --enable-geckodriver only to Linux-only mozconfigs [tor-browser]
    138 
    +     * Bug 44103: git's export-subst is a reproducibility problem [tor-browser]
    139 
    +     * Bug 44104: Don't run linter when there are no overall changes [tor-browser]
    140 
    +     * Bug 26408: Make MAR signature checks clearer when creating incremental MAR files [tor-browser-build]
    141 
    +     * Bug 34434: Remove unused variables from rbm.conf [tor-browser-build]
    142 
    +     * Bug 40551: Drop go reproducibility patches [tor-browser-build]
    143 
    +     * Bug 40697: Delete repackage_browser.sh [tor-browser-build]
    144 
    +     * Bug 40698: Update locale in tbb_version.json [tor-browser-build]
    145 
    +     * Bug 41064: Update tools/signing/README and add a tools/signing/machines-setup/README [tor-browser-build]
    146 
    +     * Bug 41227: Update projects/common/list_toolchain_updates-common-firefox-geckoview to include check for binutils [tor-browser-build]
    147 
    +     * Bug 41434: Go updates shouldn't target all platforms until macOS is on legacy in the changelogs [tor-browser-build]
    148 
    +     * Bug 41444: Build artifacts to support artifact builds of Tor/Muillvad/Base Browser [tor-browser-build]
    149 
    +     * Bug 41448: Update toolchains for Firefox ESR 140 [tor-browser-build]
    150 
    +     * Bug 41459: Update taskcluster/ci paths in README and comments [tor-browser-build]
    151 
    +     * Bug 41465: Disable development artifacts generation by default, keep it enabled for nightly builds [tor-browser-build]
    152 
    +     * Bug 41474: update README to explain moat-settings project requires `jq` to be installed [tor-browser-build]
    153 
    +     * Bug 41478: Add vim and others missing basic tools to base container image [tor-browser-build]
    154 
    +     * Bug 41486: Track bundletool and osslicenses-plugin versions in list_toolchain_updates_checks [tor-browser-build]
    155 
    +     * Bug 41496: Clean up unused projects [tor-browser-build]
    156 
    +     * Bug 41501: cargo_vendor generated archive maintains timestamps [tor-browser-build]
    157 
    +     * Bug 41514: Remove var/build_go_lib from projects/go/config [tor-browser-build]
    158 
    +     * Bug 41532: Rename meek-azure to meek in pt_config.json [tor-browser-build]
    159 
    +     * Bug 41534: Copy geckodriver only for Linux x86-64 [tor-browser-build]
    160 
    +     * Bug 41537: Add script to count mar downloads from web logs [tor-browser-build]
    161 
    +     * Bug 41539: Update Ubuntu version used to run mmdebstrap to 24.04.3 [tor-browser-build]
    162 
    +     * Bug 41568: Update instructions for manually building 7zip [tor-browser-build]
    163 
    +     * Bug 41576: Build expert bundles outside containers [tor-browser-build]
    164 
    +     * Bug 41579: Add zip to the list of Tor Browser Build dependencies [tor-browser-build]
    165 
    +     * Bug 41594: Remove version from tor-expert-bundle and tor-expert-bundle-aar filenames [tor-browser-build]
    166 
    +     * Bug 41600: update lyrebird version to v0.6.2 [tor-browser-build]
    167 
    +     * Bug 41602: Update tools/changelog-format-blog-post [tor-browser-build]
    168 
    +     * Bug 40084: Always use bash for the debug terminal [rbm]
    169 
    +     * Bug 40087: Downloaded files getting stricter permissions than expected [rbm]
    170 
    +   * Windows + macOS + Linux
    171 
    +     * Bug 44131: Generate torrc-defaults and put it in objdir post-build [tor-browser]
    172 
    +     * Bug 41373: Remove `_ALL` from mar filenames [tor-browser-build]
    173 
    +     * Bug 41457: Set mar IDs as env variables in tor-browser-build [tor-browser-build]
    174 
    +     * Bug 41604: Keep update-responses files from previous release [tor-browser-build]
    175 
    +   * Windows + Linux + Android
    176 
    +     * Updated Go to 1.24.9
    177 
    +   * Windows
    178 
    +     * Bug 44167: Move the nsis-uninstall.patch to tor-browser repository [tor-browser]
    179 
    +   * macOS
    180 
    +     * Bug 41503: Error 403 when downloading macOS SDK [tor-browser-build]
    181 
    +     * Bug 41527: Update libdmg-hfsplus and enable LZMA compression on dmgs [tor-browser-build]
    182 
    +     * Bug 41538: Bump macOS SDK to 15.5 [tor-browser-build]
    183 
    +     * Bug 41571: Work-around to prevent older 7z versions to break rcodesign. [tor-browser-build]
    184 
    +   * Linux
    185 
    +     * Bug 41458: Ship geckodriver only on Linux [tor-browser-build]
    186 
    +     * Bug 41488: Disable sys/random.h for Node.js [tor-browser-build]
    187 
    +     * Bug 41558: Share descriptions between Linux packages and archives [tor-browser-build]
    188 
    +     * Bug 41561: Ship Noto Color Emoji on Linux [tor-browser-build]
    189 
    +     * Bug 41569: Use var/display_name in .desktop files [tor-browser-build]
    190 
    +   * Android
    191 
    +     * Bug 43984: Update android build scripts and docs for ESR 140 [tor-browser]
    192 
    +     * Bug 43987: 140 Android is not reproducible [tor-browser]
    193 
    +     * Bug 44078: Modify ./autopublish-settings.gradle for building a-s and glean with uniffi-bindgen no-op [tor-browser]
    194 
    +     * Bug 44220: Disable the JS minifier as it produces invalid JS [tor-browser]
    195 
    +     * Bug 41453: Update application-services and uniffi-rs for ESR140 [tor-browser-build]
    196 
    +     * Bug 41467: Remove list_toolchain_updates-firefox-android from Makefile [tor-browser-build]
    197 
    +     * Bug 41483: geckoview_example-withGeckoBinaries-....apk doesn't exist anymore in Firefox 140 [tor-browser-build]
    198 
    +     * Bug 41484: Create a fork of application-services [tor-browser-build]
    199 
    +     * Bug 41500: Optimize tor and its dependencies for size on Android [tor-browser-build]
    200 
    +     * Bug 41506: Use appilcation-services branch for nightlies builds [tor-browser-build]
    201 
    +     * Bug 41507: Single-arch build fails because artifacts don't have arch subdirectories [tor-browser-build]
    202 
    +     * Bug 41523: Use custom built Glean package on Android [tor-browser-build]
    203 
    +     * Bug 41548: Hide tor's symbols on Android and add other linker options to save space [tor-browser-build]
    204 
    +     * Bug 41577: Minify JS with UglifyJS on Android x86 [tor-browser-build]
    205 
    +     * Bug 41583: Align tor and PTs to 16kB on Android [tor-browser-build]
    206 
    +     * Bug 41605: Ignore incrementals if we're not building desktop [tor-browser-build]
    207 
    +
    1 208 
     Tor Browser 15.0a4 - October 16 2025
    2 209 
      * All Platforms
    3 210 
        * Updated NoScript to 13.2.1

  • projects/browser/config
    ... ... @@ -113,9 +113,9 @@ input_files:
    113 113 
         enable: '[% ! c("var/android") %]'
    114 114 
       - filename: dmg-root
    115 115 
         enable: '[% ! c("var/android") %]'
    116 
    -  - URL: https://addons.mozilla.org/firefox/downloads/file/4593796/noscript-13.2.1.xpi
    116 
    +  - URL: https://addons.mozilla.org/firefox/downloads/file/4597669/noscript-13.2.2.xpi
    117 117 
         name: noscript
    118 
    -    sha256sum: 190297f3d1e55db0c65f9bc00460bea9b753939d428ea593d6cef27fde1ce69a
    118 
    +    sha256sum: f5ae80f2858057a3c8ebbafc12269659003f937e1cd781e05c01cc668e025c70
    119 119 
       - URL: https://addons.mozilla.org/firefox/downloads/file/4578681/ublock_origin-1.66.4.xpi
    120 120 
         name: ublock-origin
    121 121 
         sha256sum: bc62cd930601212f1568964389352bbd4b1808466f2c9ac1198c754338077fb0

  • projects/firefox/config
    ... ... @@ -21,7 +21,7 @@ var:
    21 21 
       browser_series: '15.0'
    22 22 
       browser_rebase: 1
    23 23 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    24 
    -  browser_build: 2
    24 
    +  browser_build: 4
    25 25 
       copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
    26 26 
       nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'
    27 27 
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
    ... ... @@ -114,6 +114,7 @@ targets:
    114 114 
           updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/'
    115 115 
           mar_id_prefix: 'mullvadbrowser-mullvad'
    116 116 
           nightly_updates_publish_dir_prefix: mullvadbrowser-
    117 
    +      browser_build: 3
    117 118
    118 119 
       linux-x86_64:
    119 120 
         var:

  • projects/geckoview/config
    ... ... @@ -23,7 +23,7 @@ var:
    23 23 
       browser_series: '15.0'
    24 24 
       browser_rebase: 1
    25 25 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    26 
    -  browser_build: 2
    26 
    +  browser_build: 4
    27 27 
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
    28 28 
       git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
    29 29 
       deps:

  • projects/tor/config
    1 1 
     # vim: filetype=yaml sw=2
    2 2 
     filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    3 
    -version: 0.4.9.3-alpha
    3 
    +version: 0.4.8.19
    4 4 
     git_hash: 'tor-[% c("version") %]'
    5 5 
     git_url: https://gitlab.torproject.org/tpo/core/tor.git
    6 6 
     git_submodule: 1

  • projects/translation/config
    ... ... @@ -12,13 +12,13 @@ compress_tar: 'gz'
    12 12 
     steps:
    13 13 
       base-browser:
    14 14 
         base-browser: '[% INCLUDE build %]'
    15 
    -    git_hash: dff70d135408cfc24931c170efa91fbaded19914
    15 
    +    git_hash: cdd3da6308bb3beb916744057af92331025053bb
    16 16 
         targets:
    17 17 
           nightly:
    18 18 
             git_hash: 'base-browser'
    19 19 
       tor-browser:
    20 20 
         tor-browser: '[% INCLUDE build %]'
    21 
    -    git_hash: ca310e42296a7085ea59fc323592f3dc702123ac
    21 
    +    git_hash: 3395fe5bdb7556490e31d3c6804e6240278bc708
    22 22 
         targets:
    23 23 
           nightly:
    24 24 
             git_hash: 'tor-browser'
    ... ... @@ -32,7 +32,7 @@ steps:
    32 32 
         fenix: '[% INCLUDE build %]'
    33 33 
         # We need to bump the commit before releasing but just pointing to a branch
    34 34 
         # might cause too much rebuidling of the Firefox part.
    35 
    -    git_hash: 0efa38c746df88feeb4daa7150e394e87e6d4d18
    35 
    +    git_hash: 807271d57878187b08fbd004276a3eea624421e6
    36 36 
         compress_tar: 'zst'
    37 37 
         targets:
    38 38 
           nightly:

  • rbm.conf
    ... ... @@ -74,13 +74,13 @@ buildconf:
    74 74 
       git_signtag_opt: '-s'
    75 75
    76 76 
     var:
    77 
    -  torbrowser_version: '15.0a4'
    77 
    +  torbrowser_version: '15.0'
    78 78 
       torbrowser_build: 'build1'
    79 79 
       # This should be the date of when the build is started. For the build
    80 80 
       # to be reproducible, browser_release_date should always be in the past.
    81 
    -  browser_release_date: '2025/10/15 18:00:00'
    81 
    +  browser_release_date: '2025/10/20 17:00:00'
    82 82 
       browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
    83 
    -  browser_default_channel: alpha
    83 
    +  browser_default_channel: release
    84 84 
       browser_platforms:
    85 85 
         android-armv7: '[% c("var/browser_platforms/is_android_release") %]'
    86 86 
         android-x86: '[% c("var/browser_platforms/is_android_release") %]'
    ... ... @@ -128,13 +128,13 @@ var:
    128 128 
       updater_enabled: 1
    129 129 
       build_mar: 1
    130 130 
       torbrowser_incremental_from:
    131 
    -    - 15.0a3
    132 
    -    - 15.0a2
    133 
    -    - 15.0a1
    131 
    +    - 14.5.8
    132 
    +    - 14.5.7
    133 
    +    - 14.5.6
    134 134 
       mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
    135 135
    136 
    -#  torbrowser_legacy_version: 13.5.22
    137 
    -#  torbrowser_legacy_platform_version: 115.28.0
    136 
    +  torbrowser_legacy_version: 13.5.23
    137 
    +  torbrowser_legacy_platform_version: 115.29.0
    138 138
    139 139 
       # By default, we sort the list of installed packages. This allows sharing
    140 140 
       # containers with identical list of packages, even if they are not listed

    • —
    View it on GitLab.
    You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help Notification message regarding https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/8cf87f2c07f82a75f63dd1966c6f30da9cf49bec at 1761064771