[Git][tpo/applications/tor-browser-build][main] Bug 41879,41880: Prepare Tor, Mullvad Browser 16.0a13

30 Sep 2026


      morgan pushed to branch main at The Tor Project / Applications / tor-browser-build


Commits:
67469b78 by Morgan at 2026-09-30T17:03:12+00:00
Bug 41879,41880: Prepare Tor, Mullvad Browser 16.0a13

- - - - -


10 changed files:

- projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
- projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
- projects/browser/config
- projects/firefox/config
- projects/geckoview/config
- projects/manual/config
- projects/openssl/config
- projects/tor/config
- projects/translation/config
- rbm.conf


Changes:

=====================================
projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
=====================================
@@ -1,3 +1,30 @@
+Mullvad Browser 16.0a13 - September 30 2026
+ * All Platforms
+   * Updated Firefox to 153.4.0esr
+   * Updated NoScript to 13.6.34.90101984
+   * Bug 569: Remove Firefox branding from about:preferences [mullvad-browser]
+   * Bug 576: Update about:preferences after redesign [mullvad-browser]
+   * Bug 580: Migrate hiding feedbackPage menuitem to Mullvad Browser patchset [mullvad-browser]
+   * Bug 581: Change the "Review settings" button destination [mullvad-browser]
+   * Bug 582: Rebase Mullvad Browser alpha onto 153.4.0esr [mullvad-browser]
+   * Bug 44815: Disable harmful addon URL blocking [tor-browser]
+   * Bug 45073: Review preference changes between Firefox 141 and 153 [tor-browser]
+   * Bug 45080: Keep the Reporting API disabled. [tor-browser]
+   * Bug 45360: Port our language preference customization to the new settings design [tor-browser]
+   * Bug 45366: Backport Security Fixes from Firefox 157 [tor-browser]
+   * Bug 45371: Hook CharacterData/Range insertion sinks for content patches propagation [tor-browser]
+ * Windows
+   * Bug 45293: Set widget.windows.tablet_detection_override to -1 [tor-browser]
+ * Build System
+   * All Platforms
+     * Bug 45334: Update marionette harness to accept multiple tags [tor-browser]
+     * Bug 45367: Backport Bugzilla 2075120: mach lint fails to create the lint virtualenv because rumdl 0.1.91 is no longer available on PyPI [tor-browser]
+     * Bug 41847: Sign all releases using new gpg subkey [tor-browser-build]
+   * Windows
+     * Bug 41890: Update sign-exe wrapper to use new Windows signing cert [tor-browser-build]
+   * macOS
+     * Bug 41883: Fix sha256sum definition in projects/hfsplus-tools/config [tor-browser-build]
+
 Mullvad Browser 16.0a12 - September 22 2026
  * All Platforms
    * Updated Firefox to 153.3.0esr


=====================================
projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
=====================================
@@ -1,3 +1,39 @@
+Tor Browser 16.0a13 - September 30 2026
+ * All Platforms
+   * Updated NoScript to 13.6.34.90101984
+   * Updated Tor to 0.4.9.13
+   * Updated OpenSSL to 3.5.9
+   * Bug 44815: Disable harmful addon URL blocking [tor-browser]
+   * Bug 45073: Review preference changes between Firefox 141 and 153 [tor-browser]
+   * Bug 45080: Keep the Reporting API disabled. [tor-browser]
+   * Bug 45333: Disable the fast-path to skip proxy resolution [tor-browser]
+   * Bug 45359: Rebase alpha onto 153.4.0esr [tor-browser]
+   * Bug 45366: Backport Security Fixes from Firefox 157 [tor-browser]
+   * Bug 45368: Account for onion aliases in NoScript site parsing [tor-browser]
+   * Bug 45371: Hook CharacterData/Range insertion sinks for content patches propagation [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 153.4.0esr
+   * Bug 45218: Implement YEC 2026 Takeover for Desktop Stable [tor-browser]
+   * Bug 45343: Hide verifier and the related error for self-signed onion cert case [tor-browser]
+   * Bug 45346: Crash when clicking "Learn more…" in onion site error page [tor-browser]
+   * Bug 45360: Port our language preference customization to the new settings design [tor-browser]
+ * Windows
+   * Bug 45293: Set widget.windows.tablet_detection_override to -1 [tor-browser]
+ * Android
+   * Updated GeckoView to 153.4.0esr
+   * Bug 40627: [Android] "share" selected text only works once [tor-browser]
+   * Bug 44913: Review Mozilla 2019009: Enable Download location Settings on Nightly [tor-browser]
+   * Bug 45363: Disable import bookmarks in Android until stable [tor-browser]
+ * Build System
+   * All Platforms
+     * Bug 45334: Update marionette harness to accept multiple tags [tor-browser]
+     * Bug 45367: Backport Bugzilla 2075120: mach lint fails to create the lint virtualenv because rumdl 0.1.91 is no longer available on PyPI [tor-browser]
+     * Bug 41847: Sign all releases using new gpg subkey [tor-browser-build]
+   * Windows
+     * Bug 41890: Update sign-exe wrapper to use new Windows signing cert [tor-browser-build]
+   * macOS
+     * Bug 41883: Fix sha256sum definition in projects/hfsplus-tools/config [tor-browser-build]
+
 Tor Browser 16.0a12 - September 22 2026
  * All Platforms
    * Updated Tor to 0.4.9.12


=====================================
projects/browser/config
=====================================
@@ -87,9 +87,9 @@ input_files:
     enable: '[% !c("var/android") %]'
   - filename: dmg-root
     enable: '[% c("var/macos") %]'
-  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.33.90101984.xp...
+  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.34.90101984.xp...
     name: noscript
-    sha256sum: cd2eed6bbc9b3dee47bdc277d7a522b31972fa017c66c130a8ec19e2b21783bc
+    sha256sum: 689a7f9807e241ab1f42ac3b17879740768a90de3567cf55890c1edea84d04c7
   - URL: https://addons.mozilla.org/firefox/downloads/file/5034826/ublock_origin-1.75...
     name: ublock-origin
     sha256sum: 5b74415860456370644bd80f16125e865b0e6c356bb5dfcfb84069967eaa5287


=====================================
projects/firefox/config
=====================================
@@ -23,7 +23,7 @@ var:
   browser_series: '16.0'
   browser_rebase: 1
   browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
-  browser_build: 1
+  browser_build: 3
   upstream_firefox_commit: FIREFOX_NIGHTLY_153_END
   copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
   nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'


=====================================
projects/geckoview/config
=====================================
@@ -26,7 +26,7 @@ var:
   browser_series: '16.0'
   browser_rebase: 1
   browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
-  browser_build: 1
+  browser_build: 3
   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
   git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
   deps:


=====================================
projects/manual/config
=====================================
@@ -1,7 +1,7 @@
 # vim: filetype=yaml sw=2
 # To update, see doc/how-to-update-the-manual.txt
 # Remember to update also the package's hash, with the version!
-version: 419761
+version: 421313
 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 container:
   use_container: 1
@@ -23,6 +23,6 @@ input_files:
   - project: container-image
   - URL: 'https://build-sources.tbb.torproject.org/marble-support_[% c("version") %].zip'
     name: manual
-    sha256sum: 8416ee6a01c3e70251d15417a4724b3560cf399faad8b090961731cd01cdca8f
+    sha256sum: 01b68a69d2bd2a972a1bd8919a950d76da91ff695529b4ed9f80571d15112c93
   - filename: package_marble_build_artifacts.py
     name: package_script


=====================================
projects/openssl/config
=====================================
@@ -1,5 +1,5 @@
 # vim: filetype=yaml sw=2
-version: 3.5.8
+version: 3.5.9
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 container:
   use_container: 1
@@ -41,5 +41,5 @@ input_files:
   - name: '[% c("var/compiler") %]'
     project: '[% c("var/compiler") %]'
   - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz'
-    sha256sum: a8f84a39918ec6415ce765d9b429d313ba97b8143169c172e734b9514464f5b2
+    sha256sum: 603f5602e2eef00d77fbd429d34dcd5822bb301757a1bc9cdb24c670f1eb859a
     name: openssl


=====================================
projects/tor/config
=====================================
@@ -1,6 +1,6 @@
 # vim: filetype=yaml sw=2
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
-version: 0.4.9.12
+version: 0.4.9.13
 git_hash: 'tor-[% c("version") %]'
 git_url: https://gitlab.torproject.org/tpo/core/tor.git
 git_submodule: 1


=====================================
projects/translation/config
=====================================
@@ -12,13 +12,13 @@ compress_tar: 'gz'
 steps:
   base-browser:
     base-browser: '[% INCLUDE build %]'
-    git_hash: f1d99cd70cdb62b0ba1b8cac17bbfb13c4912039
+    git_hash: 0381962777811f8f9428ce0ef62393c6f4a0e12f
     targets:
       nightly:
         git_hash: 'base-browser'
   tor-browser:
     tor-browser: '[% INCLUDE build %]'
-    git_hash: c273467658aa1cf6a9ad38b4394ee4871082b42a
+    git_hash: 4b063e03a3f2daa39307415646a01dd5377b7034
     targets:
       nightly:
         git_hash: 'tor-browser'
@@ -32,7 +32,7 @@ steps:
     fenix: '[% INCLUDE build %]'
     # We need to bump the commit before releasing but just pointing to a branch
     # might cause too much rebuidling of the Firefox part.
-    git_hash: 27b287f452f9a0a6fab6b06fb0eaf921f37ed196
+    git_hash: d1b9e6abf61c48a8a58f4c72f04ee694d69db966
     compress_tar: 'zst'
     targets:
       nightly:


=====================================
rbm.conf
=====================================
@@ -81,11 +81,11 @@ buildconf:
   git_signtag_opt: '-s'
 
 var:
-  torbrowser_version: '16.0a12'
+  torbrowser_version: '16.0a13'
   torbrowser_build: 'build1'
   # This should be the date of when the build is started. For the build
   # to be reproducible, browser_release_date should always be in the past.
-  browser_release_date: '2026/09/21 10:30:00'
+  browser_release_date: '2026/09/30 15:40:47'
   browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
   browser_default_channel: alpha
   browser_platforms:
@@ -131,9 +131,9 @@ var:
   updater_enabled: 1
   build_mar: 1
   torbrowser_incremental_from:
+    - 16.0a12
     - 16.0a11
     - 16.0a10
-    - 16.0a9
   mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
 
   # By default, we sort the list of installed packages. This allows sharing



View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/67...

-- 
View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/67...
You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

    

morgan (＠morgan)

tags

participants (1)