GitLab

at 2026-02-23T21:19:57+01:00

Bug41734&41735: Prepare Tor, Mullvad Browser 15.0.7

+Mullvad Browser 15.0.7 - February 24 2026

+ * All Platforms

+   * Updated Firefox to 140.8.0esr

+   * Updated NoScript to 13.5.14.1984

+   * Bug 509: Rebase Mullvad Browser onto 140.8.0esr [mullvad-browser]

+   * Bug 44681: Backport Security Fixes from Firefox 148 [tor-browser]

+

 Mullvad Browser 15.0.6 - February 17 2026

  * All Platforms

    * Updated Firefox to 140.7.1esr

   - filename: dmg-root

     enable: '[% ! c("var/android") %]'

   - name: fenix-nightly-apk

-    URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/02/2026-02-16-09-36-52-fenix-149.0a1-android-arm64-v8a/fenix-149.0a1.multi.android-arm64-v8a.apk

+    URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/02/2026-02-22-21-34-44-fenix-149.0a1-android-arm64-v8a/fenix-149.0a1.multi.android-arm64-v8a.apk

     enable: '[% c("var/android") %]'

-    sha256sum: c5e811d2027eca1e7e21caec47feb92deafd5128f59699fbc80bb32db8581a75

-  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.13.1984.xpi

+    sha256sum: 029f2f48f7ec2e58e06ccc0caba7d69578b3e1fa9cb85447f7c3fa63e11bf26e

+  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.14.1984.xpi

     name: noscript

-    sha256sum: 2d6a316846f113bad3720789477bc7d0633c88eeafbe7e109f2eaac642c0a408

+    sha256sum: ba55c6ad73f048468f14fb3da7acb5a8e8ffd822aa1a26ae8850933acbc92cfa

   - URL: https://addons.mozilla.org/firefox/downloads/file/4675310/ublock_origin-1.69.0.xpi

     name: ublock-origin

     sha256sum: 785bcde68a25faa8a0949964ec5ffe9bdcb85d3f0ae21c23f607c6c8f91472cf

   use_container: 1

 var:

-  firefox_platform_version: '140.7.1'

+  firefox_platform_version: '140.8.0'

   firefox_version: '[% c("var/firefox_platform_version") %]esr'

   browser_series: '15.0'

   browser_rebase: 1

   browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'

-  browser_build: 1

+  browser_build: 3

   copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'

   nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'

   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser

       updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/'

       mar_id_prefix: 'mullvadbrowser-mullvad'

       nightly_updates_publish_dir_prefix: mullvadbrowser-

+      browser_build: 2

+

   linux-x86_64:

     var:

       arch_deps:

     build_apk: 1

 var:

-  firefox_platform_version: '140.7.1'

+  firefox_platform_version: '140.8.0'

   geckoview_version: '[% c("var/firefox_platform_version") %]esr'

   browser_series: '15.0'

   browser_rebase: 1

   browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'

-  browser_build: 1

+  browser_build: 3

   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser

   git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'

   deps:

 steps:

   base-browser:

     base-browser: '[% INCLUDE build %]'

-    git_hash: 5ffb8148b4814b097bcde0a212c936e283aa77ea

+    git_hash: 2f74a0bbbaf9a4324225be31337909a7b9043e72

     targets:

       nightly:

         git_hash: 'base-browser'

   tor-browser:

     tor-browser: '[% INCLUDE build %]'

-    git_hash: 719eeceb96651f4cf527dc3d4493a9306277205e

+    git_hash: c424a64fb1d100df5de66455a3290cd0e846f70c

     targets:

       nightly:

         git_hash: 'tor-browser'

     fenix: '[% INCLUDE build %]'

     # We need to bump the commit before releasing but just pointing to a branch

     # might cause too much rebuidling of the Firefox part.

-    git_hash: cca0df9dec7d9400c4347d497ec8baa27b703dc4

+    git_hash: 0bae51aacdd03293cdf527ff4ee55a08e45189d8

     compress_tar: 'zst'

     targets:

       nightly:

 # vim: filetype=yaml sw=2

 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'

-version: '1.3.1'

+version: '1.3.2'

 git_hash: 'v[% c("version") %]'

 git_url: https://github.com/madler/zlib.git

 gpg_keyring: zlib.gpg

   git_signtag_opt: '-s'

 var:

-  torbrowser_version: '15.0.6'

-  torbrowser_build: 'build2'

+  torbrowser_version: '15.0.7'

+  torbrowser_build: 'build1'

   # This should be the date of when the build is started. For the build

   # to be reproducible, browser_release_date should always be in the past.

-  browser_release_date: '2026/02/16 16:30:00'

+  browser_release_date: '2026/02/23 09:30:00'

   browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'

   browser_default_channel: release

   browser_platforms:

   updater_enabled: 1

   build_mar: 1

   torbrowser_incremental_from:

+    - 15.0.6

     - '[% IF c("var/tor-browser") %]15.0.5[% END %]'

     - 15.0.4

-    - 15.0.3

-    - '[% IF c("var/mullvad-browser") %]15.0.2[% END %]'

+    - '[% IF c("var/mullvad-browser") %]15.0.3[% END %]'

   mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'

   torbrowser_legacy_version: 13.5.28

Pier Angelo Vendrame pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build

Commits:

8 changed files:

Changes: