- tor-announce - lists.torproject.org

New Release: Tor Browser 14.0a5 (Android, Windows, macOS, Linux)
by Morgan 13 Sep '24

13 Sep '24

Hi everyone, Tor Browser 14.0a5 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-140a5/ Changelog: > Tor Browser 14.0a5 - September 12 2024 > * All Platforms > * Updated NoScript to 11.4.37 > * Bug 42255: pdfjs.disabled used to be part of RFP until Bug 1838415; lock pref to false in stable [tor-browser] > * Bug 42746: Extend prefers-contrast rules to include forced-colors [tor-browser] > * Bug 43046: Review Mozilla 1866927: Adds ability to enable email tracker blocking protection in private mode [tor-browser] > * Bug 43054: check bounceTrackingProtection in PB mode does not persist to disk [tor-browser] > * Windows + macOS + Linux > * Bug 42647: "Switching to a new device" regressed on 128 [tor-browser] > * Bug 42653: The Neterror page has a checkbox to report iframe origin errors to TPO [tor-browser] > * Bug 42777: Remove 'Website Privacy Preferences' and ensure sensible default prefs [tor-browser] > * Bug 43087: Onion pattern on about:torconnect needs a dark theme asset [tor-browser] > * Bug 43109: Remove mention of Firefox Relay from settings [tor-browser] > * Bug 43115: Height of search bar has collapsed on about:tor [tor-browser] > * Bug 43117: Hide 'Always underline links' option [tor-browser] > * Bug 43118: hide CFR [tor-browser] > * Bug 43131: Reduce layout jank when loading about:tor [tor-browser] > * Linux > * Bug 42702: Cannot access the clipboard for the crypto address check (wayland) [tor-browser] > * Bug 334: When set as default browser on Linux in standard mode, links don't open correctly [mullvad-browser] > * Android > * Bug 42954: Remove product recommendation API integration (Review Mozilla 1857215) [tor-browser] > * Bug 43097: NoScript fails to install on Android [tor-browser] > * Bug 43108: Backport Android fullscreen notifications refactoring on ESR128 [tor-browser] > * Bug 43128: Use DuckDuckGo HTML on the Safest security level for Android [tor-browser] > * Build System > * All Platforms > * Updated Go to 1.23.1 > * macOS > * Bug 41231: Use var/browser_release_date in tools/signing/gatekeeper-bundling.sh [tor-browser-build] > * Android > * Bug 41106: Non matching builds after application-services not being rebuilt in a long time [tor-browser-build] > * Bug 41232: Re-implement single-arch builds after the monorepo migration [tor-browser-build] > * Bug 41234: More dependencies are needed when building Android as a release [tor-browser-build] best, -morgan

1 0

New Release: Tor Browser 14.0a4 (Android, Windows, macOS, Linux)
by Morgan 06 Sep '24

06 Sep '24

Hi everyone, Tor Browser 14.0a4 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-140a4/ Changelog: > Tor Browser 14.0a4 - September 06 2024 > * All Platforms > * Updated NoScript to 11.4.35 > * Updated OpenSSL to 3.0.15 > * Bug 30862: 10ms time precision via EXSLT date-time function [tor-browser] > * Bug 42601: Check Bug 1894779: Allow font-face urls to be resource:// urls and relax CORS for resource:// URLs [tor-browser] > * Bug 42684: Disable network prefetch [tor-browser] > * Bug 42685: compat: ESR128: enable textmetrics [tor-browser] > * Bug 42686: Backport Mozilla 1885101 [tor-browser] > * Bug 42730: Make RemoteSettings use only local dumps [tor-browser] > * Bug 42867: Disable contentRelevancy component [tor-browser] > * Bug 43100: Backport security fixes from Firefox 130 [tor-browser] > * Windows + macOS + Linux > * Bug 40147: Re-enable Picture-in-Picture mode [tor-browser] > * Bug 41309: Re-enable screenshots component [tor-browser] > * Bug 41835: Review default search engine options [tor-browser] > * Bug 42617: Restore the HTML form on DDG when using safest in 128 [tor-browser] > * Bug 42630: Review LaterRun in 128 [tor-browser] > * Bug 42640: Disable Firefox Flame button due to unknown interactions with New Identity [tor-browser] > * Bug 42735: Disable recent search suggestions [tor-browser] > * Bug 42737: Drop the hash check on updates [tor-browser] > * Bug 42743: Invalid onion sites are shown as secure in the page info window [tor-browser] > * Bug 42744: Light theme override for "about:tor" is inherited by chrome error pages. [tor-browser] > * Bug 42745: Remove some residuals from update scripts [tor-browser] > * Bug 42764: Unconditionally disable find-bar transition animation [tor-browser] > * Bug 42803: Lost focus styling for built-in bridges radio options [tor-browser] > * Bug 42891: Review Mozilla 1854965: Define new search engine configuration schema [tor-browser] > * Bug 43015: Missing region-name-skr fluent entry when fetching TorConnect country names [tor-browser] > * Bug 43075: Should we drop link spacing in about:tor [tor-browser] > * Bug 43082: Search engine icon is not shown while typing in the address bar [tor-browser] > * Bug 43103: Verify whether an update is unsupported before choosing one [tor-browser] > * Bug 43105: Migrating Disconnect is not needed anymore [tor-browser] > * macOS + Linux > * Bug 42467: Make OS HTTP User-Agent OS spoofing configurable by pref [tor-browser] > * macOS > * Bug 42494: mac: add Arial Black and Arial Narrow to allowlist [tor-browser] > * Linux > * Bug 42773: Replace ~ with the original HOME [tor-browser] > * Bug 43092: Disable Wayland by default in 14.0 [tor-browser] > * Android > * Bug 42655: Implement "New circuit for this site" on Android [tor-browser] > * Bug 42731: Verify `privacy.spoof_english` still works once we have Android builds [tor-browser] > * Bug 43016: Re-disable Nimbus [tor-browser] > * Bug 43023: Review Mozilla 1872510: Use SamsungColorEmoji by default for Samsung devices [tor-browser] > * Bug 43043: Remove credit card autofill UI elements from menu [tor-browser] > * Bug 43088: Query stripping is disabled on Android [tor-browser] > * Bug 43094: Remove "Open in regular tab" button [tor-browser] > * Bug 43114: Reader view uses the catch-all circuit on Android [tor-browser] > * Bug 43116: The lack of GeoIP databases produces a lot of spam in the console on Android [tor-browser] > * Build System > * All Platforms > * Bug 41096: Set SOURCE_DATE_EPOCH in the default env variables [tor-browser-build] > * Bug 41180: Some files do not need to be copied when building tor-expert-bundle [tor-browser-build] > * Bug 41188: Upgrade binutils to 2.41 [tor-browser-build] > * Bug 41229: Migrate OpenSSL download location to github releases [tor-browser-build] > * Android > * Bug 41224: Do not ship Conjure and GeoIP databases on Android x86, x86-64 to save some space [tor-browser-build] best, -morgan

1 0

New Release: Tor Browser 13.5.3 (Android, Windows, macOS, Linux)
by Morgan 04 Sep '24

04 Sep '24

Hi everyone, Tor Browser 13.5.3 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-1353/ Changelog: > Tor Browser 13.5.3 - September 03 2024 > * All Platforms > * Updated NoScript to 11.4.35 > * Bug 40056: Ensure that the lazy loading attribute is ignored on script-disabled documents [tor-browser] > * Bug 42686: Backport Mozilla 1885101 [tor-browser] > * Bug 42829: Prevent CSS-based scriptless interaction tracking [tor-browser] > * Bug 43084: Rebase Tor Browser Stable onto 115.15.0esr [tor-browser] > * Bug 43100: Backport security fixes from Firefox 130 [tor-browser] > * Bug 41207: Upgrade lyrebird to 0.3.0 [tor-browser-build] > * Windows + macOS + Linux > * Updated Firefox to 115.15.0esr > * Bug 42596: Several console errors: Console.maxLogLevelPref used with a non-existing pref: [tor-browser] > * Bug 42622: Offline state is unreachable in about:torconnect (first bootstrap attempt) [tor-browser] > * Bug 42642: Downloads button warning no longer announced on Orca [tor-browser] > * Bug 42661: Re-run update_emojis.py and update locales [tor-browser] > * Bug 42691: Simplified bridge cards prevent censored users from modifying built-in bridges [tor-browser] > * Bug 42696: Update `mail` icon used in "Find more bridges" [tor-browser] > * Bug 42697: Remove padding to left of `tor-bridges-provider-list` under "Find more bridges" [tor-browser] > * Bug 43059: Drag and Drop issue in new update 13.5.2 [tor-browser] > * Bug 43066: about:torconnect no longer changes the title icon on errors [tor-browser] > * Linux > * Bug 43064: Make copy/paste and drag/drop file filtering more specific [tor-browser] > * Android > * Updated GeckoView to 115.15.0esr > * Build System > * All Platforms > * Updated Go to 1.21.13 > * Bug 41213: Update the update_manual.py script to notify when no changes needed [tor-browser-build] > * Bug 41218: Use new Tor Browser gpg subkey for signing stable releases [tor-browser-build] > * Bug 41222: link_old_mar_filenames still referenced in torbrowser-incrementals-{release,alpha}-unsigned [tor-browser-build] > * Android > * Bug 41206: GeckoView ignores the number of processors [tor-browser-build] best, -morgan

1 0

New Release: Tor Browser 14.0a3 (Android, Windows, macOS, Linux)
by Morgan 28 Aug '24

28 Aug '24

Hi everyone, Tor Browser 14.0a3 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-140a3/ Changelog: > Tor Browser 14.0a3 - August 26 2024 > * All Platforms > * Bug 40056: Ensure that the lazy loading attribute is ignored on script-disabled documents [tor-browser] > * Bug 42611: Set clipboard.imageAsFile.enabled to false [tor-browser] > * Bug 42646: Drop patch for tor-browser#40166 [tor-browser] > * Bug 42830: Enable WebAudio APIs [tor-browser] > * Bug 43012: Mixed content: browser requests HTTPS images from onion domain accessed via HTTP [tor-browser] > * Bug 43013: security.mixed_content.upgrade_display_content.image is true by default [tor-browser] > * Bug 43074: Pass the browser to TorDomainIsolator.newCircuitForBrowser [tor-browser] > * Bug 43085: Rebase Tor Browser Alpha onto 128.2.0esr [tor-browser] > * Windows + macOS + Linux > * Updated Firefox to 128.2.0esr > * Bug 41811: Primary buttons that result in a connection attempt should be purple [tor-browser] > * Bug 41817: Add more color aliases that take dark mode into account [tor-browser] > * Bug 41820: Downloads warning styling improvements (use moz-message-bar) [tor-browser] > * Bug 42212: Fluent migration: onion services [tor-browser] > * Bug 42603: Remove safebrowsing URLs [tor-browser] > * Bug 42665: Drop "Learn More" spacing [tor-browser] > * Bug 43059: Drag and Drop issue in new update 13.5.2 [tor-browser] > * Bug 43066: about:torconnect no longer changes the title icon on errors [tor-browser] > * Bug 43067: Use html:link rather than xml-stylesheet in our dialogs [tor-browser] > * Bug 43071: Make sure "tor-button" elements that are also "primary" still use the tor colors [tor-browser] > * Bug 43081: Remove hard-coded CSS `line-height` [tor-browser] > * Linux > * Bug 43064: Make copy/paste and drag/drop file filtering more specific [tor-browser] > * Android > * Updated GeckoView to 128.2.0esr > * Bug 42386: Remove unused assets to reduce APK size [tor-browser] > * Bug 42590: “Tor browser” text in top left of home fragment/new tab view gets cut off with larger text sizes [tor-browser] > * Bug 43078: Disable Sharing Links to TBA [tor-browser] > * Bug 41223: Tor Browser Alpha version not displayed correctly [tor-browser-build] > * Build System > * All Platforms > * Bug 41013: Add a README to each project [tor-browser-build] > * Bug 41198: Update release-prep issue template to include notifiying anti-censorship team of package name changes for GetTor distributor [tor-browser-build] > * Bug 41222: link_old_mar_filenames still referenced in torbrowser-incrementals-{release,alpha}-unsigned [tor-browser-build] > * Android > * Bug 42480: Use translation CI in android [tor-browser] best, -morgan

1 0

New Release: Tor Browser 14.0a2 (Android, Windows, macOS, Linux)
by Morgan 20 Aug '24

20 Aug '24

Hi everyone, Tor Browser 14.0a2 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-140a2/ Changelog: > Tor Browser 14.0a2 - August 19 2024 > * All Platforms > * Updated NoScript to 11.4.34 > * Bug 42759: CI: remove localization file names that are in neither 14.0 nor 13.5 branches [tor-browser] > * Bug 42762: Review Mozilla 1498512: Enable by default setSinkId pref [tor-browser] > * Bug 42788: Review Mozilla 1828606: Add Recently Closed tabs to its own page [tor-browser] > * Bug 42789: Review Mozilla 1830157: Add new telemetry probe to determine how often an extension process had to be... [tor-browser] > * Bug 42792: Review Mozilla 1837097: Implement "Show less frequently" behavior for Pocket suggestions [tor-browser] > * Bug 42810: Review Mozilla 1840584: Support autofilling `first name` and `last name` field in a credit card form [tor-browser] > * Bug 42814: Opt out from Firefox relay by default. [tor-browser] > * Bug 42818: Review Mozilla 1841295: Update PocketSuggestions for the final suggestions schema [tor-browser] > * Bug 42835: Filter data transfers containing files [tor-browser] > * Bug 42846: Review Mozilla 1841995: Enable Credit Card Autofill in ES and IT in nightly [tor-browser] > * Bug 42847: Review Mozilla 1841996: Enable Credit Card Autofill in AT, BE, and PL in nightly [tor-browser] > * Bug 42848: Review Mozilla 1841998: Enable Credit Card Autofill for ES,IT,AT,BE and PL locales in release. r=dimi... [tor-browser] > * Bug 42886: Review Mozilla 1848048: Add a result menu to disable trending results. r=dao,fluent-reviewers,setting... [tor-browser] > * Bug 42996: Review Mozilla 1517786: Implement and ship CanvasRenderingContext2D.getContextAttributes() [tor-browser] > * Bug 42999: Rebase Tor Browser Alpha onto 128.1.0esr [tor-browser] > * Bug 43011: Ship only one copy of the MIT license, like upstream. [tor-browser] > * Bug 41207: Upgrade lyrebird to 0.3.0 [tor-browser-build] > * Windows + macOS + Linux > * Updated Firefox to 128.1.0esr > * Bug 42488: ESR 128: Remove role="code" from tor circuit panel [tor-browser] > * Bug 42596: Several console errors: Console.maxLogLevelPref used with a non-existing pref: [tor-browser] > * Bug 42612: Re-implement moz-toggle customizations for ESR 128 [tor-browser] > * Bug 42622: Offline state is unreachable in about:torconnect (first bootstrap attempt) [tor-browser] > * Bug 42629: Tweak `isOnNewTabPage` patch [tor-browser] > * Bug 42641: Move from panel-footer class to moz-button-group [tor-browser] > * Bug 42642: Downloads button warning no longer announced on Orca [tor-browser] > * Bug 42643: downloads panel separator has mismatched margin [tor-browser] > * Bug 42644: toolbar rules in panelUI-shared.css are unneccessary [tor-browser] > * Bug 42661: Re-run update_emojis.py and update locales [tor-browser] > * Bug 42662: Use data-hidden-from-search for hiding the firefox connection settings [tor-browser] > * Bug 42663: Tor Browser "Connection" settings missing a tooltip [tor-browser] > * Bug 42667: Add description-deemphasized class to our additions to about:preferences [tor-browser] > * Bug 42679: Use a more robust approach to hide the "tracking protection" urlbar button [tor-browser] > * Bug 42691: Simplified bridge cards prevent censored users from modifying built-in bridges [tor-browser] > * Bug 42695: Use `--arrowpanel-` variables for tor circuit panel spacing [tor-browser] > * Bug 42696: Update `mail` icon used in "Find more bridges" [tor-browser] > * Bug 42697: Remove padding to left of `tor-bridges-provider-list` under "Find more bridges" [tor-browser] > * Bug 42699: Drop level="top" attribute from panels [tor-browser] > * Bug 42700: Remove !nodes condition from gTorCircuitPanel._updateCurrentBrowser [tor-browser] > * Bug 42704: Drop the badged="true" attribute from security level button [tor-browser] > * Bug 42705: Update our preferences to account for new line height [tor-browser] > * Bug 42713: Some --in-content CSS variables were renamed/removed [tor-browser] > * Bug 42806: Use the `lh` CSS unit [tor-browser] > * Bug 42855: Review Mozilla 1843130: Pocket newtab use new recs api for locale list config if new api pref is set [tor-browser] > * Bug 42862: Review Mozilla 1845428: Instrument Translations Panel With Telemetry [tor-browser] > * Bug 42863: Review Mozilla 1847150: Add more TranslationsTelemetry event keys for panel open r=gregtatum, a=dsmith [tor-browser] > * Bug 42864: Review Mozilla 1848845: Pocket newtab migrate existing markets to new API. r=gvn a=RyanVM [tor-browser] > * Bug 42872: Disable translations until audited and solved the UX problems [tor-browser] > * Windows + macOS > * Bug 42774: Review Mozilla 1848815: Add a user-facing setting to enable enterprise roots import, and enable it by default [tor-browser] > * Bug 43021: Revert the OS deprecation notification introduced in #42347 [tor-browser] > * Windows > * Bug 43051: windows: remove UI for "open Tor Browser automatically when computer starts" [tor-browser] > * Android > * Updated GeckoView to 128.1.0esr > * Bug 43048: Firefox logo on splash [tor-browser] > * Bug 43050: Center text in connect buttons [tor-browser] > * Bug 43057: fenix/.../search/list.json failing linting [tor-browser] > * Build System > * All Platforms > * Updated Go to 1.23.0 > * Bug 42799: Do not run lint pipelines on new tag [tor-browser] > * Bug 43014: Add purgecaches to the dev build [tor-browser] > * Bug 41203: Tor Blog generation script uses the wrong url scheme for alpha releases [tor-browser-build] > * Bug 41213: Update the update_manual.py script to notify when no changes needed [tor-browser-build] > * Windows + macOS + Linux > * Bug 42668: Drop torconnect rule in eslint-plugin-mozilla [tor-browser] > * Windows > * Bug 41185: Drop Windows 7 support for 14.0 from build tools [tor-browser-build] > * Bug 41201: Bump the Windows version checked by the installer [tor-browser-build] > * macOS > * Bug 41202: 14.0a1 fails to run on macOS because of invalid signature [tor-browser-build] > * Android > * Bug 40544: Bump Java 8 version to something more recent [tor-browser-build] > * Bug 41123: Drop the firefox-android project [tor-browser-build] > * Bug 41171: Switch Android containers to Debian bookworm [tor-browser-build] > * Bug 41172: Refactor the android-toolchain project [tor-browser-build] > * Bug 41178: Force IPv4 when downloading in fix_gradle_deps.py [tor-browser-build] > * Bug 41200: Remove allowed_addons.json and the related tools [tor-browser-build] > * Bug 41206: GeckoView ignores the number of processors [tor-browser-build] > * Bug 41210: Use tor-expert-bundle-aar in geckoview/build_apk [tor-browser-build] > * Bug 41211: The Android license file is not deterministic anymore [tor-browser-build] > * Bug 41214: Update geckoview/config to be more like firefox/config [tor-browser-build] > * Bug 41217: Update realprep.py script to handle Firefox 128-based Tor Browser Android [tor-browser-build] best, -morgan

1 0

New Release: Tor Browser 13.5.1 (Android, Windows, macOS, Linux)
by Nicolas Vigier 10 Jul '24

10 Jul '24

Hi everyone, Tor Browser 13.5.1 has now been published for all platforms. For details please see our blog post: https://blog.torproject.org/new-release-tor-browser-1351/ Changelog: * All Platforms * Bug 42689: Rebase Tor Browser onto 115.13.0esr [tor-browser] * Bug 42693: Backports security fixes from Firefox 128 [tor-browser] * Windows + macOS + Linux * Updated Firefox to 115.13.0esr * Android * Updated GeckoView to 115.13.0esr * Build System * All Platforms * Updated Go to 1.21.12 * Bug 41166: Use the GitHub repository for firefox-l10n [tor-browser-build] * Windows * Bug 41177: Include Windows installer without -portable- in download json files [tor-browser-build]

1 0

New Release: Tor Browser 13.5 (Android, Windows, macOS, Linux)
by Richard Pospesel 20 Jun '24

20 Jun '24

Hi everyone, Tor Browser 13.5 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-135/ Changelog: > Tor Browser 13.5 - June 17 2024 > * All Platforms > * Bug 40856: Add a default for preferences in TorSettings [tor-browser] > * Bug 40919: Consider dropping protection against line-height introduced in #23104 [tor-browser] > * Bug 41114: Fix no-async-promise-executor on TorConnect [tor-browser] > * Bug 41467: compat: beacon: re-enable the API but transform it to a no-op [tor-browser] > * Bug 42153: Drop dom.enable_resource_timing = false preference [tor-browser] > * Bug 42246: Migrate tor connection stuff from browser to toolkit [tor-browser] > * Bug 42290: "DuckDuckGoOnion" is a weird naming format for onion search engines [tor-browser] > * Bug 42302: The allowed ports string contains a typo [tor-browser] > * Bug 42308: Update README for tor browser [tor-browser] > * Bug 42315: compat: why is eventCounts undefined? [tor-browser] > * Bug 42336: Review the relationship between TorSettings and the TorProvider [tor-browser] > * Bug 42340: TorBridgeChanged notification sends out "[object Object]" as its data. [tor-browser] > * Bug 42343: Consume pt_config.json in the browser [tor-browser] > * Bug 42354: Refactor exclusions in ShouldSanitizePreference() to the pref list. [tor-browser] > * Bug 42358: Separate the domain fronted requests from Moat [tor-browser] > * Bug 42359: Handle firewall and proxy in TorSettings.setSettings [tor-browser] > * Bug 42390: Betterboxing: make the decorator border disappear when the corners are flat [tor-browser] > * Bug 42397: Change RFP-spoofed Timezone from UTC to a real-world, less discriminable one [tor-browser] > * Bug 42437: Drop "torbrowser.version" preference [tor-browser] > * Bug 42466: Drop the "Onion Logo" from trademark statement [tor-browser] > * Bug 42479: Switch from localized strings to error codes in TorConnect errors [tor-browser] > * Bug 42481: Modularize SecurityLevel [tor-browser] > * Bug 42521: Remove unused onboarding strings [tor-browser] > * Bug 42529: Try not to spoof system-ui in contexts exempt from RFP [tor-browser] > * Bug 42537: Move Fluent files from "browser" to "toolkit" [tor-browser] > * Bug 42538: Move onion icons to toolkit [tor-browser] > * Bug 42549: Remove brand.dtd [tor-browser] > * Bug 42604: Add some debug logs about circuits [tor-browser] > * Bug 241: Move network.proxy.failover_direct=false pref to base-browser [mullvad-browser] > * Bug 41111: Use Lyrebird to provide WebTunnel PT Client [tor-browser-build] > * Windows + macOS + Linux > * Bug 40843: Add a working state to the Internet test button in connection settings [tor-browser] > * Bug 41621: Tweak about:torconnect styling [tor-browser] > * Bug 41622: Convert onion site errors to the new neterror template [tor-browser] > * Bug 41814: Change "vanilla bridge:" to "Tor bridge:" in bridge cards [tor-browser] > * Bug 41916: Letterboxing preferences UI [tor-browser] > * Bug 41917: Make the appearance of letterboxing look more intentional [tor-browser] > * Bug 41918: Add option to reuse last window size when letterboxing is enabled [tor-browser] > * Bug 41930: intl.accept_languages gets into a stuck modifed state [tor-browser] > * Bug 41966: Cannot remove locales from the locale alternatives list [tor-browser] > * Bug 42036: Design and build a user interface for Lox [tor-browser] > * Bug 42192: Correctly round new windows when bookmarks toolbar is set to "Only Show on New Tab" [tor-browser] > * Bug 42202: Fluent migration: crypto safety [tor-browser] > * Bug 42203: Fluent migration: about dialog [tor-browser] > * Bug 42204: Drop unused aboutTor.dtd [tor-browser] > * Bug 42206: Fluent migration: about:rulesets [tor-browser] > * Bug 42207: Fluent migration: preferences [tor-browser] > * Bug 42209: Fluent migration: tor circuit [tor-browser] > * Bug 42210: Fluent migration: download warning [tor-browser] > * Bug 42211: Fluent migration: new identity [tor-browser] > * Bug 42214: Fluent migration: security level [tor-browser] > * Bug 42270: Implement design changes to QR code dialog [tor-browser] > * Bug 42303: Remove unused "help" button logic in tor dialogs [tor-browser] > * Bug 42319: Make all the wordmark of the same size [tor-browser] > * Bug 42387: Visual noise in 13.5a4 letterboxing [tor-browser] > * Bug 42389: Betterboxing: gradient is never shown [tor-browser] > * Bug 42398: Include Alpha and Nightly in MOZ_APP_DISPLAYNAME (and possibly in other places) [tor-browser] > * Bug 42405: Fix betterboxing + findbar horizontal bounce if the scrollbar is not an overlay [tor-browser] > * Bug 42414: Show ellipsis when the tor bridge address overflows [tor-browser] > * Bug 42415: Improve focus styling for forced focus in bridge settings [tor-browser] > * Bug 42421: Remove bridge option should be hidden for Lox bridges [tor-browser] > * Bug 42423: Move temporary Lox Fluent strings to new file [tor-browser] > * Bug 42425: Improve accessibility of the bridge emoji cells [tor-browser] > * Bug 42443: Shrink the window to match letterboxing size when the emtpy area is doble-clicked [tor-browser] > * Bug 42446: Improve accessible descriptions in built-in dialog [tor-browser] > * Bug 42457: Loading icon for bridge pass (Lox) invites [tor-browser] > * Bug 42458: Update the "Submit Feedback" link in "About Tor Browser" [tor-browser] > * Bug 42476: Only allow Lox (invites) in alpha and nightly builds [tor-browser] > * Bug 42489: Lox module notifications [tor-browser] > * Bug 42490: Install svg from branding theme to browser/chrome/icons/default [tor-browser] > * Bug 42496: Moat refresh bug [tor-browser] > * Bug 42500: When startup window is maximized per letterboxing.rememberSize on startup, the restore button shrinks it to its minimum size [tor-browser] > * Bug 42504: TB Bookmarks: Add the Tor forum .onion to the bookmarks [tor-browser] > * Bug 42510: SETCONF Tor control protocol command should not be used when system Tor is configured / TOR_SKIP_LAUNCH=1 is not honored [tor-browser] > * Bug 42511: false positive message: browser tab bar shows "Not connected" even though connected in a system Tor etc. context [tor-browser] > * Bug 42520: Correctly record new initial window size after auto-shrinking [tor-browser] > * Bug 42533: Add Lox notification for activeLoxId [tor-browser] > * Bug 42540: Fix gNetworkStatus.deinint typo [tor-browser] > * Bug 42541: Circuit Display does not work when using Conjure pluggable transport [tor-browser] > * Bug 42542: Quirks when onion authentication prompt is shared between two tabs [tor-browser] > * Bug 42573: Tweak language notification to avoid formatValue [tor-browser] > * Bug 42574: Exempt pdf.js from letterboxing [tor-browser] > * Bug 42583: Modify moz-support-link [tor-browser] > * Bug 262: Mouse-over long links causes the browser element to re-center relative to width of status tooltip [mullvad-browser] > * Bug 289: The Letterboxing>Content Alignment heading doesn't follow the Firefox design document capitalization [mullvad-browser] > * Bug 41149: Add be, bg and pt-PT translations to nightlies [tor-browser-build] > * Windows + macOS > * Bug 41405: Win ≤8.1 and macOS ≤10.14 not supported in ESR 128 [tor-browser] > * Bug 42347: Add a banner warning users about the upcoming EOL for Win ≤8.1 and macOS ≤10.14 [tor-browser] > * Bug 42586: Add support link to OS deprecation message [tor-browser] > * Windows > * Bug 41859: Font used for IPs in circuit display is illegible [tor-browser] > * Bug 41901: windows: FontSubstitutes can leak system locale [tor-browser] > * Bug 42163: Make the 3rd party DLL blocklist obey portable mode [tor-browser] > * macOS > * Bug 40569: Create build-specific installer for macOS [tor-browser-build] > * Linux > * Bug 42438: Adapt the data import wizard to use the original $HOME on Linux [tor-browser] > * Bug 41112: Fix indentation of projects/browser/RelativeLink/start-browser [tor-browser-build] > * Bug 41136: Include *.deb in the list of files to gpg sign [tor-browser-build] > * Android > * Bug 41187: Improve Android's bridge settings UI [tor-browser] > * Bug 41846: Disable new nimbus use in firefox-android 115 [tor-browser] > * Bug 42017: TBA13: system/widget font tests: font-family not returned in getComputedStyle [tor-browser] > * Bug 42248: Allow GeckoView to launch tor [tor-browser] > * Bug 42249: Allow GeckoView to launch lyrebird [tor-browser] > * Bug 42250: Allow Moat.sys.mjs to invoke lyrebird on Android [tor-browser] > * Bug 42252: Plumb down TorConnect commands from firefox-android to GeckoView [tor-browser] > * Bug 42253: Remove "New private tab" action and widget [tor-browser] > * Bug 42259: Remove unused firefox branding from Tor Browser for Android [tor-browser] > * Bug 42260: Add TBB artifacts to .gitignore [tor-browser] > * Bug 42301: Make TorSettings interact with the old Android Settings [tor-browser] > * Bug 42317: Update "Security Settings" menu item [tor-browser] > * Bug 42323: Add a checkbox to enable the connect assist experiments on alpha [tor-browser] > * Bug 42409: TTP-03-011 WP3: Potential DoS due to Deep Link abuse [tor-browser] > * Bug 42427: Do not ship bridges as prefences anymore [tor-browser] > * Bug 42486: firefox-android bridge settings sometimes dont save [tor-browser] > * Bug 42522: The quick connect switch on Android seems too much on the right side [tor-browser] > * Bug 42552: TBA: formatting APIs are en-US only [tor-browser] > * Bug 42566: Remove 'Enable beta connection features' menu item in stable release channel [tor-browser] > * Bug 42567: Remove 'Enable beta connection features' toggle [tor-browser] > * Bug 42571: The new bootstrap on Android breaks if the browser goes in background [tor-browser] > * Bug 42576: Backport Bug 1885171: use the private keyboard for prompts on Android [tor-browser] > * Bug 42578: Reject Android "open in Tor Browser" intent [tor-browser] > * Bug 42582: Accepted languages should use id and he on Android [tor-browser] > * Bug 42593: Unable to disable bridges after they have been configured and successfully bootstrapped [tor-browser] > * Bug 42618: Addons on Android have a stale cache [tor-browser] > * Bug 42619: Cannot install Android addons from AMO [tor-browser] > * Bug 42632: Don't display builtin bridges in provide bridge popup [tor-browser] > * Bug 42636: A bad bridge line might get TBA stuck [tor-browser] > * Bug 42648: Don't cancel tor bootstrap when opening settings from bootstrap [tor-browser] > * Bug 41143: Enable multi-locales also on GeckoView [tor-browser-build] > * Build System > * All Platforms > * Bug 42331: tb-dev fetch command is missing repository argument [tor-browser] > * Bug 42516: Make tb-dev worktree-compatible [tor-browser] > * Bug 42594: Update mach to work with Python 3.12 [tor-browser] > * Bug 40852: Reproducible build of the the lox client library to wasm [tor-browser-build] > * Bug 40983: Bump the various branches to 13.5 on main [tor-browser-build] > * Bug 41001: Create Release Prep MR generating script [tor-browser-build] > * Bug 41037: Set time on signing machine before starting signing [tor-browser-build] > * Bug 41038: Add RPM dependencies to README [tor-browser-build] > * Bug 41045: Dump more information about build times on Firefox [tor-browser-build] > * Bug 41048: Drop the kcp-go project [tor-browser-build] > * Bug 41073: Update documention about required packages for container-less build [tor-browser-build] > * Bug 41081: Update detailsURL in tools/signing/nightly/update-responses-base-config.yml [tor-browser-build] > * Bug 41148: Update projects/browser/Bundle-Data/Docs/Licenses/NoScript.txt [tor-browser-build] > * Bug 41153: Update README for Ubuntu 24.04 unprivileged user namespace changes [tor-browser-build] > * Bug 41154: Update keyring/boklm.gpg for new subkeys [tor-browser-build] > * Bug 41161: Explicitly fetch tags in the release preparation script [tor-browser-build] > * Bug 40071: Add an option to create zip files using 7z [rbm] > * Bug 40073: We should remove ./ when using 7-zip for zip files [rbm] > * Bug 40076: Correctly refresh file when computing input_files_id and a file is set as refresh_input [rbm] > * Windows + macOS + Linux > * Bug 42305: (Semi-)Automatically merge translation resources across tor browser releases (desktop) [tor-browser] > * Bug 42501: Move `--disable-eme` to OS- and architecture-specific mozconfigs [tor-browser] > * Bug 42519: Update the profile directory patch to check both for `system-install` and for `is-packaged-app` file [tor-browser] > * Bug 41057: make fetch is not fetching mullvad repo [tor-browser-build] > * Bug 41078: pt_config.json not touch'd before adding to omni.ja, resulting in build non-determinism [tor-browser-build] > * Bug 41088: Remove use of projects/browser/run_scripts [tor-browser-build] > * Windows > * Bug 40606: Use Clang to compile NSIS [tor-browser-build] > * Bug 40900: Update NSIS to 3.09 [tor-browser-build] > * Bug 41065: Do a cleanup of the NSIS script [tor-browser-build] > * Bug 41076: Include the ShellLink plugin in NSIS [tor-browser-build] > * Bug 41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build] > * Bug 41150: Do not check for SSE2 on the Windows installer [tor-browser-build] > * macOS > * Bug 41084: $app_bundle is missing the final .app in projects/firefox/build [tor-browser-build] > * Bug 41124: Since TB/MB 13.5a5 macos signed installers contain all .DS_Store [tor-browser-build] > * Linux > * Bug 42491: Add mozconfig-linux-aarch64 [tor-browser] > * Bug 41046: Use the final path for Linux debug symbols [tor-browser-build] > * Bug 41126: Make deb and rpm packages for Tor Browser [tor-browser-build] > * Bug 41137: Build gcc-cross and tor-expert-bundle for linux-aarch64 [tor-browser-build] > * Bug 41160: Enable build of Tor Browser rpm/deb packages for nightly only [tor-browser-build] > * Android > * Bug 40502: Do not recommend addons on Tor Browser [tor-browser] > * Bug 42399: Re-enable minimization of JS for Android [tor-browser] > * Bug 42568: Remove legacy tor dependencies from firefox-android [tor-browser] > * Bug 42569: Remove tor-onion-proxy-library and and tor-android-service deployment/ingestion steps from firefox-android dev tools/scripts [tor-browser] > * Bug 42570: Add tor-expert-bundle aar depoyment/ingestion step to firefox-android dev tools/scripts [tor-browser] > * Bug 42581: Check if a file exists before trying to sign it in tools/tba-sign-devbuild.sh [tor-browser] > * Bug 41080: Re-pack omni.ja with 7-zip on Android [tor-browser-build] > * Bug 41082: Package tor expert bundle on android as .aar that firefox-android can use in lieu of tor-android-service with geckoview bootstrap [tor-browser-build] > * Bug 41092: Use an uncompressed omni.ja to improve final apk compression. [tor-browser-build] > * Bug 41093: Sign unsigned APKs instead of the QA-signed ones [tor-browser-build] > * Bug 41127: Android testbuilds fail because of the too early MOZ_BUILD_DATE [tor-browser-build] > * Bug 41139: Remove tor-android-service and tor-onion-proxy-library dependencies and ingestion steps from firefox-android config and build script [tor-browser-build] > * Bug 41140: Remove tor-onion-proxy-library and tor-android-service projects from tor-browser-build [tor-browser-build] > * Bug 41141: Add tor-expert-bundle aar dependency to firefox-android [tor-browser-build] > * Bug 42201: Make the script sign all the channels for local builds [tor-browser] > * Bug 42258: Replace the current boring "fiery android" icon we use for dev with the cool nightly icon [tor-browser] best -richard

1 0

New Release: Tor Browser 13.0.16 (Android, Windows, macOS, Linux)
by Richard Pospesel 11 Jun '24

11 Jun '24

Hi everyone, Tor Browser 13.0.16 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-release-tor-browser-13016/ Changelog: > Tor Browser 13.0.16 - June 11th 2024 > * All Platforms > * Updated Tor to 0.4.8.12 > * Updated OpenSSL to 3.0.14 > * Bug 42625: Rebase Tor Browser Stable 13.0 onto 115.12.0esr [tor-browser] > * Windows + macOS + Linux > * Updated Firefox to 115.12.0esr > * Android > * Updated GeckoView to 115.12.0esr > * Bug 42621: Backport security fixes from Firefox 127 [tor-browser] > * Build System > * All Platforms > * Updated Go to 1.21.11 best, -richard

1 0

New Release: Tor Browser 13.5a9 (Android, Windows, macOS, Linux)
by Richard Pospesel 11 Jun '24

11 Jun '24

Hi everyone, Tor Browser 13.5a9 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-135a9/ Changelog: > Tor Browser 13.5a9 - June 10 2024 > * All Platforms > * Updated Tor to 0.4.8.12 > * Updated OpenSSL to 3.0.14 > * Bug 41467: compat: beacon: re-enable the API but transform it to a no-op [tor-browser] > * Bug 42604: Add some debug logs about circuits [tor-browser] > * Bug 42614: Rebase Tor Browser Stable onto 115.12.0esr [tor-browser] > * Windows + macOS + Linux > * Updated Firefox to 115.12.0esr > * Bug 41149: Add be, bg and pt-PT translations to nightlies [tor-browser-build] > * Windows + macOS > * Bug 42586: Add support link to OS deprecation message [tor-browser] > * Windows > * Bug 41859: Font used for IPs in circuit display is illegible [tor-browser] > * Android > * Updated GeckoView to 115.12.0esr > * Bug 42593: Unable to disable bridges after they have been configured and successfully bootstrapped [tor-browser] > * Bug 42621: Backport security fixes from Firefox 127 [tor-browser] > * Build System > * All Platforms > * Updated Go to 1.21.11 > * Bug 42594: Update mach to work with python 3.12 [tor-browser] > * Bug 41153: Update README for Ubuntu 24.04 unprivileged user namespace changes [tor-browser-build] > * Bug 41154: Update keyring/boklm.gpg for new subkeys [tor-browser-build] > * Windows > * Bug 41150: Do not check for SSE2 on the Windows installer [tor-browser-build] > * Linux > * Bug 41126: Make deb and rpm packages for Tor Browser [tor-browser-build] > * Bug 41160: Enable build of Tor Browser rpm/deb packages for nightly only [tor-browser-build] > * Android > * Bug 42568: Remove legacy tor dependencies from firefox-android [tor-browser] > * Bug 42569: Remove tor-onion-proxy-library and and tor-android-service deployment/ingestion steps from firefox-android dev tools/scripts [tor-browser] > * Bug 42570: Add tor-expert-bundle aar depoyment/ingestion step to firefox-android dev tools/scripts [tor-browser] > * Bug 42581: Check if a file exists before trying to sign it in tools/tba-sign-devbuild.sh [tor-browser] > * Bug 41139: Remove tor-android-service and tor-onion-proxy-library dependencies and ingestion steps from firefox-android config and build script [tor-browser-build] > * Bug 41140: Remove tor-onion-proxy-library and tor-android-service projects from tor-browser-build [tor-browser-build] > * Bug 41141: Add tor-expert-bundle aar dependency to firefox-android [tor-browser-build] best, -richard

1 0

[RELEASE] Tor stable 0.4.8.12
by David Goulet 06 Jun '24

06 Jun '24

Greetings, We just released tor 0.4.8.12: https://forum.torproject.org/t/stable-release-0-4-8-12/13060 Here is the ChangeLog. Changes in version 0.4.8.12 - 2024-06-06 This is a minor release with couple bugfixes affecting conflux and logging. We also have the return of faravahar directory authority with new keys and address. o Minor feature (dirauth): - Add back faravahar with a new address and new keys. Closes 40689. o Minor features (fallbackdir): - Regenerate fallback directories generated on June 06, 2024. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2024/06/06. o Minor bugfix (circuit): - Remove a log_warn being triggered by a protocol violation that already emits a protocol warning log. Fixes bug 40932; bugfix on 0.4.8.1-alpha. o Minor bugfixes (conflux): - Avoid a potential hard assert (crash) when sending a cell on a Conflux set. Fixes bug 40921; bugfix on 0.4.8.1-alpha. - Make sure we don't process a closed circuit when packaging data. This lead to a non fatal BUG() spamming logs. Fixes bug 40908; bugfix on 0.4.8.1-alpha. Cheers! David -- UDjW8OCkZGhFDx/ok1rcq2Z9OdCBKV3j9cBvoU4i27o=

1 0