GitLab

at 2026-08-17T17:51:21+02:00

Bug 41848&41849: Prepare Tor, Mullvad Browser 15.0.20

+Mullvad Browser 15.0.20 - August 18 2026

+ * All Platforms

+   * Updated Firefox to 140.14.0esr

+   * Updated uBlock Origin to 1.73.0

+   * Bug 570: Rebase Mullvad Browser stable onto 140.14.0esr [mullvad-browser]

+   * Bug 45219: Backport Security Fixes from Firefox 154 [tor-browser]

+ * Build System

+   * All Platforms

+     * Bug 41850: Update keyring/torbrowser.gpg for new subkey and updated expiration date of the main key [tor-browser-build]

+

 Mullvad Browser 15.0.19 - July 21 2026

  * All Platforms

    * Updated Firefox to 140.13.0esr

   - filename: dmg-root

     enable: '[% ! c("var/android") %]'

   - name: fenix-nightly-apk

-    URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/07/2026-07-19-21-13-19-fenix-154.0a1-android-arm64-v8a/fenix-154.0a1.multi.android-arm64-v8a.apk

+    URL: 

+      https://ftp.mozilla.org/pub/fenix/nightly/2026/08/2026-08-17-09-28-31-fenix-156.0a1-android-arm64-v8a/fenix-156.0a1.multi.android-arm64-v8a.apk

     enable: '[% c("var/android") %]'

-    sha256sum: 022c3902342f38a3c83c0ab20067decaae6c9488dd824fda2259aba2b4997195

+    sha256sum: 2def423d5714369709d63ce9fd544049afa35ee83db8e37409ea3fcfd0a7c8da

   - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.31.1984.xpi

     name: noscript

     sha256sum: 28e1689956b610f328c582ae45b326cf666d909c468a87f01d48a10e256dad1f

-  - URL: https://addons.mozilla.org/firefox/downloads/file/4888680/ublock_origin-1.72.2.xpi

+  - URL: https://addons.mozilla.org/firefox/downloads/file/4940584/ublock_origin-1.73.0.xpi

     name: ublock-origin

-    sha256sum: 40c315b0da7871868155ecfae7a50a58dfa0920aebd865e008214986f1b7c578

+    sha256sum: bccc51a773150af4af6e1fd62c7bfdeb7238b79ff2381b998fa9f2e38f64786a

     enable: '[% c("var/mullvad-browser") %]'

   - URL: https://cdn.mullvad.net/browser-extension/0.9.10/mullvad-browser-extension-0.9.10.xpi

     name: mullvad-extension

   use_container: 1

 var:

-  firefox_platform_version: '140.13.0'

+  firefox_platform_version: '140.14.0'

   firefox_version: '[% c("var/firefox_platform_version") %]esr'

   browser_series: '15.0'

   browser_rebase: 1

     build_apk: 1

 var:

-  firefox_platform_version: '140.13.0'

+  firefox_platform_version: '140.14.0'

   geckoview_version: '[% c("var/firefox_platform_version") %]esr'

   browser_series: '15.0'

   browser_rebase: 1

 # vim: filetype=yaml sw=2

-version: '1.25.12'

+version: '1.25.13'

 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'

 container:

   use_container: 1

 var:

-  source_sha256: f90dcee4bd023fa376374ea0a5a6ebe553537b39c426ffd8c689469b45519932

+  source_sha256: 1d7e2f70b1ee9b93c7df8efcca71f5adcc6a59797a4336c2d10171bd4c174614

   no_crosscompile: 1

   setup: |

     mkdir -p /var/tmp/dist

 steps:

   base-browser:

     base-browser: '[% INCLUDE build %]'

-    git_hash: 38c3b4e6b3b71f9dbf84ed31c0552b2461e506c5

+    git_hash: 2740d708bcedd2fa43489c8d08cdd80b70bd8cf3

     targets:

       nightly:

         git_hash: 'base-browser'

   tor-browser:

     tor-browser: '[% INCLUDE build %]'

-    git_hash: 510b52a6963331b5c67471921ed5c54a77370840

+    git_hash: 1768f6c09cb2c4a012daaf8b33d105a7b48f7bfd

     targets:

       nightly:

         git_hash: 'tor-browser'

     fenix: '[% INCLUDE build %]'

     # We need to bump the commit before releasing but just pointing to a branch

     # might cause too much rebuidling of the Firefox part.

-    git_hash: ef9b8c76e315678f5c1841ad63f35870106492e4

+    git_hash: fadbeeb9f8724d06903be5aade3e0ce26529d178

     compress_tar: 'zst'

     targets:

       nightly:

   git_signtag_opt: '-s'

 var:

-  torbrowser_version: '15.0.19'

+  torbrowser_version: '15.0.20'

   torbrowser_build: 'build1'

   # This should be the date of when the build is started. For the build

   # to be reproducible, browser_release_date should always be in the past.

-  browser_release_date: '2026/07/20 08:00:00'

+  browser_release_date: '2026/08/17 15:00:00'

   browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'

   browser_default_channel: release

   browser_platforms:

   updater_enabled: 1

   build_mar: 1

   torbrowser_incremental_from:

+    - 15.0.19

     - 15.0.18

     - '[% IF c("var/tor-browser") %]15.0.17[% END %]'

-    - 15.0.16

-    - '[% IF c("var/mullvad-browser") %]15.0.14[% END %]'

+    - '[% IF c("var/mullvad-browser") %]15.0.16[% END %]'

   mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'

   # By default, we sort the list of installed packages. This allows sharing

Pier Angelo Vendrame pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build

Commits:

8 changed files:

Changes: