Pier Angelo Vendrame pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build Commits: 45639909 by Pier Angelo Vendrame at 2026-03-23T09:24:56+01:00 Bug 41580: Updated go to 1.25.8. This is a major Go update, which introduces incompatibilities. For this reason, we needed to update also go-licenses. However, the new version does not build with the Go compiler built to output Windows binaries (and possibly Android as well). Therefore, we changed the projects that use it to use the Linux arfiacts of the tool. - - - - - 26a901e2 by Pier Angelo Vendrame at 2026-03-23T15:34:31+01:00 Bug41739&41740: Prepare Tor, Mullvad Browser 15.0.8 - - - - - 12 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/conjure/config - projects/firefox/config - projects/geckoview/config - projects/go-licenses/config - projects/go/config - projects/lyrebird/config - projects/moat-settings/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,17 @@ +Mullvad Browser 15.0.8 - March 24 2026 + * All Platforms + * Updated Firefox to 140.9.0esr + * Updated NoScript to 13.6.12.1984 + * Updated uBlock Origin to 1.70.0 + * Bug 521: Rebase Mullvad Browser stable onto 140.9.0esr [mullvad-browser] + * Bug 44663: NoScript behavior on “Safer” security level prevents integrity checks for dynamically loaded javascript [tor-browser] + * Bug 44680: Properly handle subdocuments created by data: URLs [tor-browser] + * Bug 44761: Safer Level's worker patching filters out Worker constructor options [tor-browser] + * Bug 44784: Backport Security Fixes from Firefox 149 [tor-browser] + * Bug 41738: Allow to specify an unsupportedURL on update responses [tor-browser-build] + * Linux + * Bug 44657: Backport tor-browser#44394: Do not read default prefs from /etc/firefox [tor-browser] + Mullvad Browser 15.0.7 - February 24 2026 * All Platforms * Updated Firefox to 140.8.0esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,25 @@ +Tor Browser 15.0.8 - March 24 2026 + * All Platforms + * Updated NoScript to 13.6.12.1984 + * Bug 44663: NoScript behavior on “Safer” security level prevents integrity checks for dynamically loaded javascript [tor-browser] + * Bug 44680: Properly handle subdocuments created by data: URLs [tor-browser] + * Bug 44761: Safer Level's worker patching filters out Worker constructor options [tor-browser] + * Bug 44771: Rebase Tor Browser stable onto 140.9.0esr [tor-browser] + * Bug 44784: Backport Security Fixes from Firefox 149 [tor-browser] + * Bug 41738: Allow to specify an unsupportedURL on update responses [tor-browser-build] + * Windows + macOS + Linux + * Updated Firefox to 140.9.0esr + * Bug 44327: ERROR: Your Tor Browser profile cannot be loaded. It may be missing or inaccessible [tor-browser] + * Bug 44386: Firefox profiles no longer work in Tor Browser 15.0 [tor-browser] + * Linux + * Bug 44657: Backport tor-browser#44394: Do not read default prefs from /etc/firefox [tor-browser] + * Android + * Updated GeckoView to 140.9.0esr + * Build System + * Windows + Linux + Android + * Updated Go to 1.25.8 + * Bug 44249: Backport tor-browser-build#41580: Update Go major to 1.25.x [tor-browser] + Tor Browser 15.0.7 - February 24 2026 * All Platforms * Updated NoScript to 13.5.14.1984 ===================================== projects/browser/config ===================================== @@ -114,15 +114,15 @@ input_files: - filename: dmg-root enable: '[% ! c("var/android") %]' - name: fenix-nightly-apk - URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/02/2026-02-22-21-34-44-fenix-... + URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/03/2026-03-21-20-51-52-fenix-... enable: '[% c("var/android") %]' - sha256sum: 029f2f48f7ec2e58e06ccc0caba7d69578b3e1fa9cb85447f7c3fa63e11bf26e - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.14.1984.xpi + sha256sum: 84932e0e1288bfd0678d39d96e89530cce4d5f2c4ad37126338e060b0b89204e + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.12.1984.xpi name: noscript - sha256sum: ba55c6ad73f048468f14fb3da7acb5a8e8ffd822aa1a26ae8850933acbc92cfa - - URL: https://addons.mozilla.org/firefox/downloads/file/4675310/ublock_origin-1.69... + sha256sum: fe0fe0b582723ba2187def77746aab6b8f5f884729465de746f846ed00a87201 + - URL: https://addons.mozilla.org/firefox/downloads/file/4721638/ublock_origin-1.70... name: ublock-origin - sha256sum: 785bcde68a25faa8a0949964ec5ffe9bdcb85d3f0ae21c23f607c6c8f91472cf + sha256sum: f2730d2877005763a45d765749892e936f49cae713d28f7aa6ea314454b89cf1 enable: '[% c("var/mullvad-browser") %]' - URL: https://cdn.mullvad.net/browser-extension/0.9.7/mullvad-browser-extension-0.... name: mullvad-extension ===================================== projects/conjure/config ===================================== @@ -24,3 +24,5 @@ steps: '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64' - name: go-licenses project: go-licenses + target_replace: + '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64' ===================================== projects/firefox/config ===================================== @@ -16,12 +16,12 @@ container: use_container: 1 var: - firefox_platform_version: '140.8.0' + firefox_platform_version: '140.9.0' firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 3 + browser_build: 2 copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser @@ -114,7 +114,6 @@ targets: updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' mar_id_prefix: 'mullvadbrowser-mullvad' nightly_updates_publish_dir_prefix: mullvadbrowser- - browser_build: 2 linux-x86_64: var: ===================================== projects/geckoview/config ===================================== @@ -18,12 +18,12 @@ container: build_apk: 1 var: - firefox_platform_version: '140.8.0' + firefox_platform_version: '140.9.0' geckoview_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 3 + browser_build: 2 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/go-licenses/config ===================================== @@ -1,9 +1,9 @@ # vim: filetype=yaml sw=2 # The last stable release is not compatible with our go version, therefore use # the last available pre-release. -version: 2.0.0-alpha.1 +version: 2.0.1 git_url: https://github.com/google/go-licenses.git -git_hash: d01822334fba5896920a060f762ea7ecdbd086e8 +git_hash: 3e084b0caf710f7bfead967567539214f598c0a2 container: use_container: 1 @@ -22,6 +22,6 @@ steps: pkg_type: go_vendor project: go-licenses norec: - sha256sum: b3799f5445ce9f1d48893227287846c689ab67bbdc76b607d5d228739b5c19a2 + sha256sum: 924d0e45d1ec723b29f667547ac43444ff5c432862317b5e5a246de3871ec9a5 target_replace: '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64' ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.24.13' +version: '1.25.8' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: 639a6204c2486b137df1eb6e78ee3ed038f9877d0e4b5a465e796a2153f858d7 + source_sha256: e988d4a2446ac7fe3f6daa089a58e9936a52a381355adec1c8983230a8d6c59e no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist ===================================== projects/lyrebird/config ===================================== @@ -38,3 +38,5 @@ steps: '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64' - name: go-licenses project: go-licenses + target_replace: + '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64' ===================================== projects/moat-settings/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' git_url: https://gitlab.torproject.org/tpo/anti-censorship/rdsys-admin.git -git_hash: 365b0e65b27e053bece37b70bca0bd5fdb02099f +git_hash: b99317d18b69d878700e124bbfe575495581270d version: '[% c("abbrev") %]' # Use gz for now, since we do not support Zstandard on Linux containers. compress_tar: 'gz' ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 2f74a0bbbaf9a4324225be31337909a7b9043e72 + git_hash: 1603108043c6fd4f8efbdc48b0c1efdb1a75e23f targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: c424a64fb1d100df5de66455a3290cd0e846f70c + git_hash: fc03771326c446f5eed1e0675fdf88769ca3daf2 targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 0bae51aacdd03293cdf527ff4ee55a08e45189d8 + git_hash: 50f7678e7090753d1ca795b87bd2827c0cbfbba6 compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -74,11 +74,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '15.0.7' + torbrowser_version: '15.0.8' torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2026/02/23 09:30:00' + browser_release_date: '2026/03/23 08:00:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: release browser_platforms: @@ -128,14 +128,14 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 15.0.7 - 15.0.6 - '[% IF c("var/tor-browser") %]15.0.5[% END %]' - - 15.0.4 - - '[% IF c("var/mullvad-browser") %]15.0.3[% END %]' + - '[% IF c("var/mullvad-browser") %]15.0.4[% END %]' mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' - torbrowser_legacy_version: 13.5.28 - torbrowser_legacy_platform_version: 115.32.1 + torbrowser_legacy_version: 13.5.29 + torbrowser_legacy_platform_version: 115.33.0 # By default, we sort the list of installed packages. This allows sharing # containers with identical list of packages, even if they are not listed View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/a... -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/a... You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help