tor-commits March 2023

tor-commits@lists.torproject.org

3 participants
142 discussions

[Git][tpo/applications/tor-browser][tor-browser-102.9.0esr-12.5-1] fixup! Bug 31740: Remove some unnecessary RemoteSettings instances
by Pier Angelo Vendrame (＠pierov) 22 Mar '23

22 Mar '23

Pier Angelo Vendrame pushed to branch tor-browser-102.9.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 2a2e87c3 by Pier Angelo Vendrame at 2023-03-22T12:22:38+01:00 fixup! Bug 31740: Remove some unnecessary RemoteSettings instances Bug 40788: Tor Browser is phoning home The hijack-list component is the only remaining one calling home. This is a temporary workaround, to use the remote settings. We should do something like this commit at a more generic level, for all RemoteSettings users. - - - - - 1 changed file: - toolkit/modules/IgnoreLists.jsm Changes: ===================================== toolkit/modules/IgnoreLists.jsm ===================================== @@ -8,19 +8,19 @@ const { XPCOMUtils } = ChromeUtils.import( ); XPCOMUtils.defineLazyModuleGetters(this, { - RemoteSettings: "resource://services-settings/remote-settings.js", RemoteSettingsClient: "resource://services-settings/RemoteSettingsClient.jsm", }); -var EXPORTED_SYMBOLS = ["IgnoreLists"]; +Cu.importGlobalProperties(["fetch"]); -const SETTINGS_IGNORELIST_KEY = "hijack-blocklists"; +var EXPORTED_SYMBOLS = ["IgnoreLists"]; class IgnoreListsManager { + _ignoreListSettings = null; + async init() { - if (!this._ignoreListSettings) { - this._ignoreListSettings = RemoteSettings(SETTINGS_IGNORELIST_KEY); - } + // TODO: Restore the initialization, once we use only the local dumps for + // the remote settings. } async getAndSubscribe(listener) { @@ -30,7 +30,7 @@ class IgnoreListsManager { const settings = await this._getIgnoreList(); // Listen for future updates after we first get the values. - this._ignoreListSettings.on("sync", listener); + this._ignoreListSettings?.on("sync", listener); return settings; } @@ -70,6 +70,14 @@ class IgnoreListsManager { * could be obtained. */ async _getIgnoreListSettings(firstTime = true) { + if (!this._ignoreListSettings) { + const dump = await fetch( + "resource:///defaults/settings/main/hijack-blocklists.json" + ); + const { data } = await dump.json(); + return data; + } + let result = []; try { result = await this._ignoreListSettings.get({ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/2a2e87c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/2a2e87c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-12.5a4-build1
by Richard Pospesel (＠richard) 22 Mar '23

22 Mar '23

Richard Pospesel pushed new tag tbb-12.5a4-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: fixup! Bug 40805: Use the version flag for all our browsers
by Richard Pospesel (＠richard) 22 Mar '23

22 Mar '23

Richard Pospesel pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 8b0e78e6 by Richard Pospesel at 2023-03-21T17:43:06+00:00 fixup! Bug 40805: Use the version flag for all our browsers - - - - - d0135ec6 by Richard Pospesel at 2023-03-21T17:43:06+00:00 Bug 40758: Prepare alpha release 12.5a4 - - - - - 11 changed files: - projects/android-components/config - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/allowed_addons.json - projects/browser/config - projects/fenix/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/manual/config - projects/translation/config - rbm.conf Changes: ===================================== projects/android-components/config ===================================== @@ -14,7 +14,7 @@ container: var: android_components_version: 102.0.14 browser_branch: 12.5-1 - android_components_build: 1 + android_components_build: 2 # This should be updated when the list of gradle dependencies is changed. gradle_dependencies_version: 37 gradle_version: 7.0.2 ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,92 @@ +Tor Browser 12.5a4 - March 20 2023 + * All Platforms + * Updated Translations + * Updated NoScript to 11.4.20 + * Bug 40353: Re-enable rlbox [tor-browser-build] + * Bug 40810: Enable Finnish (fi) in alpha builds [tor-browser-build] + * Bug 40817: Add basebrowser-incrementals-nightly makefile target [tor-browser-build] + * Bug 41599: about:networking#networkid should be normalized [tor-browser] + * Bug 41635: Disable the Normandy component at compile time [tor-browser] + * Bug 41636: Disable back webextension.storage.sync after ensuring NoScript settings won't be lost [tor-browser] + * Bug 41646: Regression in 12.5a3: the system font patch should also set a font-size [tor-browser] + * Bug 41647: Turn --enable-base-browser in --with-base-browser-version [tor-browser] + * Bug 41659: Add canonical color definitions to base-browser [tor-browser] + * Bug 41662: Disable about:sync-logs [tor-browser] + * Bug 41670: Rebase Tor Browser Alpha to 102.9.0esr [tor-browser] + * Bug 41671: Turn media.peerconnection.ice.relay_only to true as defense in depth against WebRTC ICE leaks [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 102.9esr + * Bug 40144: about:privatebrowsing Firefox branding [tor-browser] + * Bug 40788: Remove all languages but en-US for privacy-browser build target [tor-browser-build] + * Bug 40808: Set update URL for nightly base-browser [tor-browser-build] + * Bug 41085: Refactor the UI to remove all bridges [tor-browser] + * Bug 41093: Users don't understand the purpose of bridge-moji [tor-browser] + * Bug 41574: Use --warning-color variable for the "Custom" label in the security level popup. [tor-browser] + * Bug 41657: Remove --enable-tor-browser-data-outside-app-dir [tor-browser] + * Windows + * Bug 40793: Add some metadata also to the Windows installer [tor-browser-build] + * Bug 40801: Correct the ExecShell for system-wide installs in the NSIS script [tor-browser-build] + * Android + * Updated GeckoView to 102.9esr + * Bug 40800: WebTunnel Integration in Tor Browser mobile [tor-browser-build] + * Bug 41667: Enable media.peerconnection.ice.obfuscate_host_addresses on Android for defense-in-depth [tor-browser] + * Bug 41677: Remove the --disable-tor-browser-update flag on Android [tor-browser] + * Build System + * All Platforms + * Updated Go to 1.19.7 + * Bug 40750: Find why rlbox hurts reproducibility [tor-browser-build] + * Bug 40763: Add support for signing multiple browsers in tools/signing/nightly [tor-browser-build] + * Bug 40794: Include the build-id in firefox-l10n output name [tor-browser-build] + * Bug 40795: Trim down tor-browser-build release prep issue templates [tor-browser-build] + * Bug 40796: Bad UX for the changelogs script when using the issue number [tor-browser-build] + * Bug 40805: Define the version flag for all browsers [tor-browser-build] + * Bug 40807: Add config for signing base-browser nightly in tools/signing/nightly [tor-browser-build] + * Bug 40812: Make var/rezip in projects/firefox/config quiet [tor-browser-build] + * Bug 41649: Create rebase and security backport gitlab issue templates [tor-browser] + * Bug 41682: Add base-browser nightly mar signing key [tor-browser] + * Windows + macOS + Linux + * Bug 40809: Remove --enable-tor-browser-update and --enable-verify-mar from projects/firefox/mozconfig [tor-browser-build] + * Bug 40813: Enable var/updater_enabled for basebrowser nightly [tor-browser-build] + * macOS + * Bug 40790: Fix dmg2mar after dmg changes from #28124 [tor-browser-build] + * Bug 40791: tools/dmg2mar should exit with an error when there is an error creating the mar file [tor-browser-build] + * Bug 40792: signing scripts missing project name prefix to make rule [tor-browser-build] + * Bug 40798: dmg2mar step also takes care of copying the signed+stabled dmg to the signed directory [tor-browser-build] + * Bug 40806: Update the reference to the macOS mozconfig [tor-browser-build] + * Bug 41453: Rename mozconfig-macos-x86_64 to mozconfig-macos [tor-browser] + * Android + * Bug 40789: Broken mirror links for glean: link 404 for version 5.0.1 hosted at aguestuser's tor people storage [tor-browser-build] + +Tor Browser 12.0.4 - March 13 2023 + * All Platforms + * Updated Translations + * Updated NoScript to 11.4.18 + * Bug 41598: Prevent NoScript from being removed / disabled until core functionality has been migrated to Tor Browser [tor-browser] + * Bug 41603: Customize the creation of MOZ_SOURCE_URL [tor-browser] + * Bug 41627: Enable network.http.referer.hideOnionSource in base-browser [tor-browser] + * Bug 41637: cherry-pick Mozilla 1814416: Generalize the app name in about:buildconfig. r=ahochheiden [tor-browser] + * Bug 41659: Add canonical color definitions to base-browser [tor-browser] + * Bug 41669: Rebase Tor Browser stable to 102.9.0esr [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 102.9esr + * Bug 41542: Disable the creation of a default profile [tor-browser] + * Bug 41574: Use --warning-color variable for the "Custom" label in the security level popup. [tor-browser] + * Bug 41606: Move the changes to the hamburger menu out of the Torbutton commit [tor-browser] + * Bug 41626: Bridge-emojii tooltips not localized in ES locale [tor-browser] + * Android + * Updated GeckoView to 102.9esr + * Bug 41679: Backport Android-specific security fixes from Firefox 111 to ESR 102.9-based Tor Browser [tor-browser] + * Build System + * All Platforms + * Updated Go to 1.19.7 + * Bug 40764: Embed repo URL and git revision in Firefox [tor-browser-build] + * Bug 40782: Update tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo to fetch from tb-build-04 and tb-build-05 [tor-browser-build] + * macOS + * Bug 40790: Fix dmg2mar after dmg changes from #28124 [tor-browser-build] + * Bug 40791: tools/dmg2mar should exit with an error when there is an error creating the mar file [tor-browser-build] + * Android + * Bug 40789: Broken mirror links for glean: link 404 for version 5.0.1 hosted at aguestuser's tor people storage [tor-browser-build] + Tor Browser 12.5a3 - February 16 2023 * All Platforms * Updated Translations ===================================== projects/browser/allowed_addons.json ===================================== @@ -17,7 +17,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/34/9734/13299734/13299734.pn…" } ], - "average_daily_users": 969882, + "average_daily_users": 991330, "categories": { "android": [ "experimental", @@ -50,7 +50,7 @@ "name": { "en-US": "The MIT License" }, - "url": "http://www.opensource.org/licenses/mit-license.php" + "url": "http://www.opensource.org/license/mit" }, "release_notes": { "en-US": "- Fixed a edge case with extracting color numbers, it's now able to extract `rgb(0 0 0/0.04)`.\n- Improved IPv6 check.\n- Faster UI loading.\n- Users' fixes for websites." @@ -77,7 +77,8 @@ "theme", "<all_urls>" ], - "optional_permissions": [] + "optional_permissions": [], + "host_permissions": [] } ] }, @@ -220,10 +221,10 @@ "category": "recommended" }, "ratings": { - "average": 4.5586, - "bayesian_average": 4.557409514018636, - "count": 4859, - "text_count": 1543 + "average": 4.5572, + "bayesian_average": 4.556020910333306, + "count": 4912, + "text_count": 1556 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/reviews/", "requires_payment": false, @@ -320,7 +321,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/versions/", - "weekly_downloads": 28911 + "weekly_downloads": 29096 }, "notes": null }, @@ -336,7 +337,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/56/7656/6937656/6937656.png?…" } ], - "average_daily_users": 265173, + "average_daily_users": 266501, "categories": { "android": [ "security-privacy" @@ -396,7 +397,8 @@ "webRequest", "webRequestBlocking" ], - "optional_permissions": [] + "optional_permissions": [], + "host_permissions": [] } ] }, @@ -551,10 +553,10 @@ "category": "recommended" }, "ratings": { - "average": 4.816, - "bayesian_average": 4.81132997570714, - "count": 1321, - "text_count": 235 + "average": 4.8173, + "bayesian_average": 4.812651456820935, + "count": 1330, + "text_count": 236 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/reviews/", "requires_payment": false, @@ -639,7 +641,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions/", - "weekly_downloads": 4626 + "weekly_downloads": 4398 }, "notes": null }, @@ -655,7 +657,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/73/4073/5474073/5474073.png?…" } ], - "average_daily_users": 1096532, + "average_daily_users": 1141854, "categories": { "android": [ "security-privacy" @@ -1105,7 +1107,8 @@ "http://docs.google.com/*", "<all_urls>" ], - "optional_permissions": [] + "optional_permissions": [], + "host_permissions": [] } ] }, @@ -1177,10 +1180,10 @@ "category": "recommended" }, "ratings": { - "average": 4.7987, - "bayesian_average": 4.795881600312439, - "count": 2181, - "text_count": 427 + "average": 4.8016, + "bayesian_average": 4.798796787815379, + "count": 2198, + "text_count": 426 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/reviews/", "requires_payment": false, @@ -1204,7 +1207,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/versions/", - "weekly_downloads": 18674 + "weekly_downloads": 41171 }, "notes": null }, @@ -1220,7 +1223,7 @@ "picture_url": null } ], - "average_daily_users": 6382932, + "average_daily_users": 6481174, "categories": { "android": [ "security-privacy" @@ -1232,18 +1235,18 @@ "contributions_url": "", "created": "2015-04-25T07:26:22Z", "current_version": { - "id": 5525624, + "id": 5534721, "compatibility": { "firefox": { - "min": "68.0", + "min": "78.0", "max": "*" }, "android": { - "min": "68.0", + "min": "79.0", "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/ublock-origin/versions/55…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/ublock-origin/versions/55…", "is_strict_compatibility_enabled": false, "license": { "id": 6, @@ -1254,22 +1257,22 @@ "url": "http://www.gnu.org/licenses/gpl-3.0.html" }, "release_notes": { - "en-US": "See complete release notes for <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/b140bd014e7f181fb45b37…" rel=\"nofollow\">1.47.0</a>.\n\n<b>Fixes / changes</b>\n\n<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e35dbd5e9f783a5823861d…" rel=\"nofollow\">Prevent context menu entries on non-HTTP documents</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/8574183ea43238e380567b…" rel=\"nofollow\">Ignore compilation hints when applying exception cosmetic filters</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/58c3f94f487f1a98eda31a…" rel=\"nofollow\"> Add support for regex-based values as target domain for static extended filters</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/664a38f09616854a9936e1…" rel=\"nofollow\">Add support for regex-based values for <code>domain=</code>/<code>from=</code>/<code>to=</code> options</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/250586255e6c8ce1e3ae5e…" rel=\"nofollow\">Rewrite static filtering parser</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e628bc12d0be3b68739917…" rel=\"nofollow\">uBO doesn't reject cosmetic filters with invalid pseudo-classes/pseudo-elements</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/01f40a6478c16320eebcb5…" rel=\"nofollow\">Make the logger entry dialog modeless</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/8e5b045c6bbda00f272ead…" rel=\"nofollow\">Fix missing regex flags</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/338ff06b790a9831939536…" rel=\"nofollow\">Import version 1.2.0 of RegexAnalyzer</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/1ad5b3aa657299b66b4e93…" rel=\"nofollow\">Set <code>charset</code> to <code>utf-8</code> for Blob-based injected scriptlets </a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e5547c21fa5e38fe56d4d8…" rel=\"nofollow\">Disallow <code>-abp-...</code> filters if not using <code>#?#</code></a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e94131c76bb7a1a2513a70…" rel=\"nofollow\">Work related to keyboard shortcuts for page reload</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/5fb5dddef3045ae7f30a24…" rel=\"nofollow\">New network filter option: <code>to=[list of domain names]</code></a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/78eda79469d3baaeb94f09…" rel=\"nofollow\">New network filter option: <code>method=...</code></a></li></ul>\n<a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/0706aff990bd228e1bb5b0…" rel=\"nofollow\">Commits history since last version</a>." + "en-US": "See complete release notes for <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/ea467320fde698dd660f5e…" rel=\"nofollow\">1.47.4</a>.\n\n<b>Fixes / changes</b>\n\n<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/90332d429df9e9702298e1…" rel=\"nofollow\">Add list for Macedonia; add languages to Persian list</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f99dde6a629e89c9f720b2…" rel=\"nofollow\">Support update period below 1-day</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/07f7b3b6b630e4e4652b00…" rel=\"nofollow\">Restore behind-the-scene origin for docless secondary resources</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/538445e0e1306d365a45a8…" rel=\"nofollow\">Refine AST template's regex for hosts file entries</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/4b7349389c22c2bd89ddd6…" rel=\"nofollow\">Flush cached result when adding to FilterDomainHitSet</a></li></ul>\n<a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/25aa2ca137134570435ed8…" rel=\"nofollow\">Commits history since last version</a>." }, - "reviewed": "2023-02-15T10:52:52Z", - "version": "1.47.0", + "reviewed": "2023-03-08T13:21:02Z", + "version": "1.47.4", "files": [ { - "id": 4069969, - "created": "2023-02-13T18:12:01Z", - "hash": "sha256:e76958a8c8eb4b71954dac9b0eb1f5a7a545f746159227e0b821b1a1b23f7cd4", + "id": 4079064, + "created": "2023-03-03T22:26:56Z", + "hash": "sha256:a35a6c8758ba74616afc09648c96d74ec2e7d27fe30f311d1db6e9a4966e7858", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 3224904, + "size": 3246151, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4069969/ublock_origin-1.4…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4079064/ublock_origin-1.4…", "permissions": [ "dns", "menus", @@ -1292,7 +1295,8 @@ "https://*.github.io/*", "https://*.letsblock.it/*" ], - "optional_permissions": [] + "optional_permissions": [], + "host_permissions": [] } ] }, @@ -1384,7 +1388,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-02-15T10:52:52Z", + "last_updated": "2023-03-19T11:30:30Z", "name": { "ar": "uBlock Origin", "bg": "uBlock Origin", @@ -1529,10 +1533,10 @@ "category": "recommended" }, "ratings": { - "average": 4.7797, - "bayesian_average": 4.779290903491396, - "count": 14964, - "text_count": 3911 + "average": 4.7805, + "bayesian_average": 4.780094594455903, + "count": 15128, + "text_count": 3934 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/reviews/", "requires_payment": false, @@ -1594,7 +1598,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions/", - "weekly_downloads": 146451 + "weekly_downloads": 143423 }, "notes": null }, @@ -1610,7 +1614,7 @@ "picture_url": null } ], - "average_daily_users": 155053, + "average_daily_users": 159499, "categories": { "android": [ "photos-media" @@ -1641,7 +1645,7 @@ "name": { "en-US": "The MIT License" }, - "url": "http://www.opensource.org/licenses/mit-license.php" + "url": "http://www.opensource.org/license/mit" }, "release_notes": { "de": "Experimentelle Verbesserungen der Handhabung von Youtube.", @@ -1667,7 +1671,8 @@ "*://*.youtube-nocookie.com/*", "*://*.vimeo.com/*" ], - "optional_permissions": [] + "optional_permissions": [], + "host_permissions": [] } ] }, @@ -1707,10 +1712,10 @@ "category": "recommended" }, "ratings": { - "average": 4.5083, - "bayesian_average": 4.503059203963862, - "count": 1088, - "text_count": 403 + "average": 4.5055, + "bayesian_average": 4.50026668386193, + "count": 1090, + "text_count": 405 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/re…", "requires_payment": false, @@ -1732,7 +1737,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/ve…", - "weekly_downloads": 503 + "weekly_downloads": 363 }, "notes": null }, @@ -1748,7 +1753,7 @@ "picture_url": null } ], - "average_daily_users": 92798, + "average_daily_users": 92182, "categories": { "android": [ "experimental", @@ -1812,7 +1817,8 @@ "*://twitter.com/*", "*://tweetdeck.twitter.com/*" ], - "optional_permissions": [] + "optional_permissions": [], + "host_permissions": [] } ] }, @@ -1860,10 +1866,10 @@ ], "promoted": null, "ratings": { - "average": 4.3838, - "bayesian_average": 4.369924660120627, - "count": 396, - "text_count": 111 + "average": 4.3769, + "bayesian_average": 4.3630961936527894, + "count": 398, + "text_count": 112 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/reviews/", "requires_payment": false, @@ -1885,7 +1891,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions/", - "weekly_downloads": 486 + "weekly_downloads": 1406 }, "notes": null }, @@ -1901,7 +1907,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/64/9064/12929064/12929064.pn…" } ], - "average_daily_users": 249917, + "average_daily_users": 259947, "categories": { "android": [ "photos-media", @@ -1969,7 +1975,8 @@ "https://*/*", "file:///*" ], - "optional_permissions": [] + "optional_permissions": [], + "host_permissions": [] } ] }, @@ -2119,10 +2126,10 @@ "category": "recommended" }, "ratings": { - "average": 4.6512, - "bayesian_average": 4.646376429373567, - "count": 1227, - "text_count": 237 + "average": 4.6513, + "bayesian_average": 4.646506092845788, + "count": 1236, + "text_count": 240 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/reviews/", "requires_payment": false, @@ -2143,7 +2150,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/versions/", - "weekly_downloads": 3780 + "weekly_downloads": 7883 }, "notes": null }, @@ -2166,7 +2173,7 @@ "picture_url": null } ], - "average_daily_users": 106756, + "average_daily_users": 109654, "categories": { "android": [ "other" @@ -2412,7 +2419,8 @@ "*://*.google.cat/*", "*://*.google.ng/*" ], - "optional_permissions": [] + "optional_permissions": [], + "host_permissions": [] } ] }, @@ -2448,10 +2456,10 @@ "category": "recommended" }, "ratings": { - "average": 4.4409, - "bayesian_average": 4.4362065782583375, - "count": 1193, - "text_count": 317 + "average": 4.4426, + "bayesian_average": 4.437933242019955, + "count": 1202, + "text_count": 319 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/reviews/", "requires_payment": false, @@ -2471,7 +2479,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/versions/", - "weekly_downloads": 41 + "weekly_downloads": 50 }, "notes": null }, @@ -2487,7 +2495,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/43/0143/143/143.png?modified…" } ], - "average_daily_users": 329326, + "average_daily_users": 326501, "categories": { "android": [ "performance", @@ -2501,7 +2509,7 @@ "contributions_url": "https://www.paypal.com/donate/?hosted_button_id=9ERKTU5MBH4EW&utm_content=p…", "created": "2005-05-13T10:51:32Z", "current_version": { - "id": 5523128, + "id": 5542185, "compatibility": { "firefox": { "min": "59.0", @@ -2512,7 +2520,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/noscript/versions/5523128", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/noscript/versions/5542185", "is_strict_compatibility_enabled": false, "license": { "id": 13, @@ -2523,22 +2531,22 @@ "url": "http://www.gnu.org/licenses/gpl-2.0.html" }, "release_notes": { - "en-US": "v 11.4.16\n============================================================\nx [L10n] Updated de, nl, pl, ru, sq, zh_CN\nx Always open the windowed standalone UI when invoked from\n the Alt+Shift+N shortcut\nx Alt+Shift+Space shortcut to toggle restrictions\n enforcement for current tab (issue #129, thanks PF4Public\n for RFE)" + "en-US": "v 11.4.20\n============================================================\nx Generalized prompt safety hooks\nx Better blob: URL support\nx [nscl] Improved cross-window patch cascading\nx [nscl] Avoid unneeded side effects when checking for\n zombie patched objects\nx [nscl] Prompt safety hooks\nx [L10n] Updated fr, fi\nx Fix font family typo (!283, thanks alex-kinokon)" }, - "reviewed": "2023-02-09T17:48:06Z", - "version": "11.4.16", + "reviewed": "2023-03-21T12:03:50Z", + "version": "11.4.20", "files": [ { - "id": 4067473, - "created": "2023-02-06T22:12:36Z", - "hash": "sha256:44bdddd89bee11e52e09ea967aebd3aa996dc2d66c1a819e8dfdaf9a16cc753b", + "id": 4086528, + "created": "2023-03-20T22:48:31Z", + "hash": "sha256:014aec3ce142222338372d227eaadfa2ae13c9e3861f6d43869615b932ce4b53", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 949002, + "size": 951165, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4067473/noscript-11.4.16.…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4086528/noscript-11.4.20.…", "permissions": [ "contextMenus", "storage", @@ -2552,7 +2560,8 @@ "file://*/*", "ftp://*/*" ], - "optional_permissions": [] + "optional_permissions": [], + "host_permissions": [] } ] }, @@ -2604,7 +2613,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-02-09T17:48:06Z", + "last_updated": "2023-03-21T12:03:50Z", "name": { "de": "NoScript", "el": "NoScript", @@ -2676,10 +2685,10 @@ "category": "recommended" }, "ratings": { - "average": 4.4094, - "bayesian_average": 4.4066726918104555, - "count": 2037, - "text_count": 793 + "average": 4.405, + "bayesian_average": 4.402291645516784, + "count": 2052, + "text_count": 801 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/reviews/", "requires_payment": false, @@ -2723,7 +2732,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/", - "weekly_downloads": 7901 + "weekly_downloads": 8165 }, "notes": null }, @@ -2739,7 +2748,7 @@ "picture_url": null } ], - "average_daily_users": 145846, + "average_daily_users": 148495, "categories": { "android": [ "performance", @@ -2800,7 +2809,8 @@ "<all_urls>", "*://*.youtube.com/*" ], - "optional_permissions": [] + "optional_permissions": [], + "host_permissions": [] } ] }, @@ -2853,10 +2863,10 @@ "category": "recommended" }, "ratings": { - "average": 3.9213, - "bayesian_average": 3.91694973530769, - "count": 1106, - "text_count": 395 + "average": 3.9155, + "bayesian_average": 3.9111787696510967, + "count": 1113, + "text_count": 396 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/revi…", "requires_payment": false, @@ -2875,7 +2885,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/vers…", - "weekly_downloads": 1934 + "weekly_downloads": 1769 }, "notes": null } ===================================== projects/browser/config ===================================== @@ -103,9 +103,9 @@ input_files: enable: '[% ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4067473/noscript-11.4.16.… + - URL: https://addons.mozilla.org/firefox/downloads/file/4086528/noscript-11.4.20.… name: noscript - sha256sum: 44bdddd89bee11e52e09ea967aebd3aa996dc2d66c1a819e8dfdaf9a16cc753b + sha256sum: 014aec3ce142222338372d227eaadfa2ae13c9e3861f6d43869615b932ce4b53 - URL: https://addons.mozilla.org/firefox/downloads/file/4047353/ublock_origin-1.4… name: ublock-origin sha256sum: 6bf8af5266353fab5eabdc7476de026e01edfb7901b0430c5e539f6791f1edc8 ===================================== projects/fenix/config ===================================== @@ -14,7 +14,7 @@ container: var: fenix_version: 102.2.1 browser_branch: 12.5-1 - fenix_build: 2 + fenix_build: 3 git_branch: 'tor-browser-[% c("var/fenix_version") %]-[% c("var/browser_branch") %]' copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' # This should be updated when the list of gradle dependencies is changed. ===================================== projects/firefox/config ===================================== @@ -11,11 +11,11 @@ container: use_container: 1 var: - firefox_platform_version: 102.8.0 + firefox_platform_version: 102.9.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '12.5' browser_branch: '[% c("var/browser_series") %]-1' - browser_build: 3 + browser_build: 2 branding_directory_prefix: 'tb' copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %][% c("var/osname") %]' ===================================== projects/geckoview/config ===================================== @@ -11,9 +11,9 @@ container: use_container: 1 var: - geckoview_version: 102.8.0esr + geckoview_version: 102.9.0esr browser_branch: 12.5-1 - browser_build: 3 + browser_build: 2 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' deps: - build-essential @@ -91,7 +91,7 @@ steps: mkdir "$HOME/.mozbuild" # We still need to specify --tor-browser-version due to bug 34005. ./mach configure \ - --with-tor-browser-version=[% c("var/torbrowser_version") %] \ + --with-base-browser-version=[% c("var/torbrowser_version") %] \ [% IF !c("var/rlbox") -%]--without-wasm-sandboxed-libraries[% END %] ./mach build --verbose ===================================== projects/go/config ===================================== @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 1.19.6 +version: 1.19.7 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 @@ -121,7 +121,7 @@ input_files: enable: '[% ! c("var/linux") %]' - URL: 'https://golang.org/dl/go[% c("version") %].src.tar.gz' name: go - sha256sum: d7f0013f82e6d7f862cc6cb5c8cdb48eef5f2e239b35baa97e2f1a7466043767 + sha256sum: 775bdf285ceaba940da8a2fe20122500efd7a0b65dbcee85247854a8d7402633 - URL: 'https://golang.org/dl/go[% c("var/go14_version") %].src.tar.gz' name: go14 sha256sum: 9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959 ===================================== projects/manual/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 # To update, see doc/how-to-update-the-manual.txt # Remember to update also the package's hash, with the version! -version: 66168 +version: 69998 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 @@ -19,6 +19,6 @@ input_files: - project: container-image - URL: 'https://people.torproject.org/~richard/tbb_files/manual_[% c("version") %].zip' name: manual - sha256sum: efb88be6217f7cb6879157678963bc90c47a2b91380ae3ba9a52d748eabf9568 + sha256sum: 236ad8b877d9bdb3ad5309deee8acb4025e10e4faf4626d063cbf6c87fc209a4 - filename: packagemanual.py name: package_script ===================================== projects/translation/config ===================================== @@ -6,19 +6,19 @@ version: '[% c("abbrev") %]' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: d862d323bd78e100de5f51f2f8742d21de3a76d0 + git_hash: 50ec65bc65e510156c1e9f5c835eb6ea034450d0 targets: nightly: git_hash: 'base-browser' base-browser-fluent: base-browser-fluent: '[% INCLUDE build %]' - git_hash: 71869a9fd722c36eb57d08d7ef5a1fa5270ddb54 + git_hash: 667a6daeba46b7aeb0a8b664bd9ae006f8ac233d targets: nightly: git_hash: 'basebrowser-newidentityftl' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: b3d9033d2229e82d30771aa7a1b77667d9a80628 + git_hash: e9ad920fc7427ff1b84e3723a97212ccd78dfe26 targets: nightly: git_hash: 'tor-browser' @@ -26,7 +26,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: d19129475bae8943d3ee4ca6b6ed114a9a6db94e + git_hash: f9fd1869f6904e3a9fe99fa3626382b20ff33e66 targets: nightly: git_hash: 'fenix-torbrowserstringsxml' ===================================== rbm.conf ===================================== @@ -71,10 +71,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '12.5a3' + torbrowser_version: '12.5a4' torbrowser_build: 'build1' torbrowser_incremental_from: - - 12.5a2 + - 12.5a3 updater_enabled: 1 build_mar: 1 # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/fenix][tor-browser-102.2.1-12.5-1] fixup! Modify build system
by ma1 (＠ma1) 21 Mar '23

21 Mar '23

ma1 pushed to branch tor-browser-102.2.1-12.5-1 at The Tor Project / Applications / fenix Commits: 5c26f235 by Pier Angelo Vendrame at 2023-03-21T11:14:21+01:00 fixup! Modify build system Bug 41684: Android improvements for local dev builds Added a script to fetch the Tor dependencies from tor-browser-build, and print the name of the signed apk. - - - - - 2 changed files: - + tools/tba-fetch-deps.sh - tools/tba-sign-devbuilds.sh Changes: ===================================== tools/tba-fetch-deps.sh ===================================== @@ -0,0 +1,22 @@ +#!/bin/bash + +cd "$(dirname $(realpath "$0"))/.." + +if [ -z "$TOR_BROWSER_BUILD" ]; then + TOR_BROWSER_BUILD=../tor-browser-build +fi + +android_service="$(ls -1td "$TOR_BROWSER_BUILD/out/tor-android-service/"tor-android-service-* | head -1)" +if [ -z "$android_service" ]; then + echo "Cannot find Tor Android Service artifacts!" + exit 1 +fi + +onion_proxy_library="$(ls -1td "$TOR_BROWSER_BUILD/out/tor-onion-proxy-library/"tor-onion-proxy-library-* | head -1)" +if [ -z "$onion_proxy_library" ]; then + echo "Cannot find Tor Onoin Proxy library artifacts!" + exit 2 +fi + +cp "$android_service"/* app/ +cp "$onion_proxy_library"/* app/ ===================================== tools/tba-sign-devbuilds.sh ===================================== @@ -38,6 +38,7 @@ sign () { rm -f "$aligned" "$zipalign" -p 4 "$apk" "$aligned" "$apksigner" sign --ks "$key" --in "$aligned" --out "$out" --ks-key-alias androidqakey --key-pass pass:android --ks-pass pass:android + echo "Signed $out" } for apk in app/build/outputs/apk/release/*-unsigned.apk; do View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/commit/5c26f2353ef1a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/commit/5c26f2353ef1a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-102.9.0esr-12.5-1] fixup! Firefox preference overrides.
by Richard Pospesel (＠richard) 21 Mar '23

21 Mar '23

Richard Pospesel pushed to branch base-browser-102.9.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 566eaec6 by Pier Angelo Vendrame at 2023-03-21T12:41:17+00:00 fixup! Firefox preference overrides. Bug 41683: Disable the network process on Windows - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -433,6 +433,14 @@ pref("captivedetect.canonicalURL", ""); // See tor-browser#18801. pref("dom.push.serverURL", ""); +#ifdef XP_WIN +// tor-browser#41683: Disable the network process on Windows +// Mozilla already disables the network process for HTTP. +// With this preference, we completely disable it, because we found that it +// breaks stuff with mingw. See also tor-browser#41489. +pref("network.process.enabled", false); +#endif + // Extension support pref("extensions.autoDisableScopes", 0); pref("extensions.databaseSchema", 3); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/566eaec… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/566eaec… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.9.0esr-12.5-1] fixup! Firefox preference overrides.
by Richard Pospesel (＠richard) 21 Mar '23

21 Mar '23

Richard Pospesel pushed to branch tor-browser-102.9.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: a7769330 by Pier Angelo Vendrame at 2023-03-20T18:58:51+01:00 fixup! Firefox preference overrides. Bug 41683: Disable the network process on Windows - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -429,6 +429,14 @@ pref("captivedetect.canonicalURL", ""); // See tor-browser#18801. pref("dom.push.serverURL", ""); +#ifdef XP_WIN +// tor-browser#41683: Disable the network process on Windows +// Mozilla already disables the network process for HTTP. +// With this preference, we completely disable it, because we found that it +// breaks stuff with mingw. See also tor-browser#41489. +pref("network.process.enabled", false); +#endif + // Extension support pref("extensions.autoDisableScopes", 0); pref("extensions.databaseSchema", 3); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/a776933… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/a776933… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-102.9.0esr-12.5-1] 12 commits: Bug 13379: Allow using NSS to sign and verify MAR signatures
by Pier Angelo Vendrame (＠pierov) 20 Mar '23

20 Mar '23

Pier Angelo Vendrame pushed to branch base-browser-102.9.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 9a95e213 by Kathy Brade at 2023-03-20T18:38:16+01:00 Bug 13379: Allow using NSS to sign and verify MAR signatures Allow using NSS on all platforms for checking MAR signatures (instead of using OS-native APIs, the default on Mac OS and Windows). So that the NSS and NSPR libraries the updater depends on can be found at runtime, we add the firefox directory to the shared library search path on macOS. On Linux, rpath is used to solve that problem, but that approach won't work on macOS because the updater executable is copied during the update process to a location that can vary. - - - - - 136c2813 by Pier Angelo Vendrame at 2023-03-20T18:38:25+01:00 fixup! Bug 13379: Allow using NSS to sign and verify MAR signatures Bug 41668: Port some updater patches to Base Browser Use a configure-time flag to force using NSS for MARs signatures. - - - - - 72aa9358 by Pier Angelo Vendrame at 2023-03-20T18:38:25+01:00 fixup! Bug 13379: Allow using NSS to sign and verify MAR signatures Bug 41668: Port some updater patches to Base Browser Avoid using -rpath on macOS. - - - - - 038b55d2 by Pier Angelo Vendrame at 2023-03-20T18:38:26+01:00 fixup! Base Browser's .mozconfigs. Bug 41668: Port some updater patches to Base Browser - - - - - 7ae822c3 by Pier Angelo Vendrame at 2023-03-20T18:38:26+01:00 fixup! Base Browser's .mozconfigs. Bug 41677: Fix updater settings for Android - - - - - da0f77aa by Pier Angelo Vendrame at 2023-03-20T18:38:26+01:00 fixup! Firefox preference overrides. Bug 41668: Port some updater patches to Base Browser Do not change app.update.auto in firefox.js, but add it to 001. - - - - - b5f2300a by Kathy Brade at 2023-03-20T18:38:27+01:00 Bug 4234: Use the Firefox Update Process for Base Browser. Windows: disable "runas" code path in updater (15201). Windows: avoid writing to the registry (16236). Also includes fixes for tickets 13047, 13301, 13356, 13594, 15406, 16014, 16909, 24476, and 25909. Also fix bug 27221: purge the startup cache if the Base Browser version changed (even if the Firefox version and build ID did not change), e.g., after a minor Base Browser update. Also fix 32616: Disable GetSecureOutputDirectoryPath() functionality. Bug 26048: potentially confusing "restart to update" message Within the update doorhanger, remove the misleading message that mentions that windows will be restored after an update is applied, and replace the "Restart and Restore" button label with an existing "Restart to update Tor Browser" string. Bug 28885: notify users that update is downloading Add a "Downloading Base Browser update" item which appears in the hamburger (app) menu while the update service is downloading a MAR file. Before this change, the browser did not indicate to the user that an update was in progress, which is especially confusing in Tor Browser because downloads often take some time. If the user clicks on the new menu item, the about dialog is opened to allow the user to see download progress. As part of this fix, the update service was changed to always show update-related messages in the hamburger menu, even if the update was started in the foreground via the about dialog or via the "Check for Tor Browser Update" toolbar menu item. This change is consistent with the Tor Browser goal of making sure users are informed about the update process. Removed #28885 parts of this patch which have been uplifted to Firefox. - - - - - e359ab23 by Pier Angelo Vendrame at 2023-03-20T18:38:27+01:00 fixup! Bug 4234: Use the Firefox Update Process for Base Browser. Bug 41647: Clean up our {TOR,BASE}_BROWSER(_VERSION)? macros Changed TOR_BROWSER_VERSION with BASE_BROWSER_VERSION. - - - - - ef8cc25a by Pier Angelo Vendrame at 2023-03-20T18:38:28+01:00 fixup! Bug 4234: Use the Firefox Update Process for Base Browser. Bug 41668: Port some updater patches to Base Browser Move the check on the update package version to this other commit. - - - - - 2ae0ca1c by Pier Angelo Vendrame at 2023-03-20T18:38:28+01:00 fixup! Bug 4234: Use the Firefox Update Process for Base Browser. Bug 41668: Port some updater patches to Base Browser Rename TOR_BROWSER_UPDATE to BASE_BROWSER_UPDATE. Also, do not change app.update.auto in firefox.js, but add it to 001. - - - - - 9640ba6e by Pier Angelo Vendrame at 2023-03-20T18:38:28+01:00 fixup! Bug 4234: Use the Firefox Update Process for Base Browser. Bug 41668: Port some updater patches to Base Browser Changes that will need to remain when actually cherry-picking to base-browser, because they contain name fixes, for example. Or, for UpdateService.jsm, they need to stay because they make the patch more understandable. - - - - - 9b61b6f0 by Pier Angelo Vendrame at 2023-03-20T18:38:29+01:00 fixup! Bug 4234: Use the Firefox Update Process for Base Browser. Bug 41668: Port some updater patches to Base Browser Remove Tor Browser-only additions to make the updater patches usable with Base Browser. This commit should be reverted, and become a commit on its own, to further adapt the updater to Tor Browser needs. - - - - - 30 changed files: - browser/app/Makefile.in - browser/app/profile/001-base-profile.js - browser/app/profile/firefox.js - browser/base/content/aboutDialog-appUpdater.js - browser/base/content/aboutDialog.js - browser/base/moz.build - browser/components/BrowserContentHandler.jsm - browser/components/customizableui/content/panelUI.inc.xhtml - browser/components/preferences/main.js - browser/config/mozconfigs/base-browser - browser/config/mozconfigs/base-browser-android - browser/confvars.sh - browser/installer/Makefile.in - browser/installer/package-manifest.in - build/application.ini.in - build/moz.configure/init.configure - build/moz.configure/update-programs.configure - devtools/client/aboutdebugging/src/actions/runtimes.js - modules/libmar/tool/mar.c - modules/libmar/tool/moz.build - modules/libmar/verify/moz.build - mozconfig-linux-x86_64-dev - toolkit/modules/AppConstants.jsm - toolkit/modules/UpdateUtils.jsm - toolkit/modules/moz.build - toolkit/mozapps/extensions/AddonManager.jsm - toolkit/mozapps/extensions/test/browser/head.js - toolkit/mozapps/extensions/test/xpcshell/head_addons.js - toolkit/mozapps/update/UpdateService.jsm - toolkit/mozapps/update/UpdateServiceStub.jsm The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/9c1dd5… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/9c1dd5… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: Bug 40763: Add support for signing multiple browsers in tools/signing/nightly
by boklm (＠boklm) 20 Mar '23

20 Mar '23

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 38099794 by Nicolas Vigier at 2023-03-20T17:29:45+01:00 Bug 40763: Add support for signing multiple browsers in tools/signing/nightly - - - - - 3f0b4c83 by Nicolas Vigier at 2023-03-20T17:29:46+01:00 Bug 40807: Add config for basebrowser nightly signing - - - - - 3 changed files: - tools/signing/nightly/config.yml - tools/signing/nightly/create-nightly-mar-signing-key - tools/signing/nightly/sign-nightly Changes: ===================================== tools/signing/nightly/config.yml ===================================== @@ -3,15 +3,22 @@ martools_version: 9.0.2 martools_url: https://archive.torproject.org/tor-package-archive/torbrowser/ martools_gpg_keyring: keyring/torbrowser.gpg builds_url: /srv/tbb-nightlies-master.torproject.org/htdocs/nightly-builds/tor-browser-builds -builds_url_auth_basic_username: tor-guest -builds_url_auth_basic_password: tor-guest -publish_dirs: +torbrowser: + publish_dirs: - nightly-linux-x86_64 - nightly-linux-i686 - nightly-windows-x86_64 - nightly-windows-i686 - nightly-macos -nss_db_dir: nssdb + nss_db_dir: nssdb +basebrowser: + publish_dirs: + - basebrowser-nightly-linux-x86_64 + - basebrowser-nightly-linux-i686 + - basebrowser-nightly-windows-x86_64 + - basebrowser-nightly-windows-i686 + - basebrowser-nightly-macos + nss_db_dir: nssdb-basebrowser-1 nss_certname: nightly-marsigner gpg_keyring: keyring/torbrowser-nightly.gpg rsync_dest: /srv/tbb-nightlies-master.torproject.org/htdocs/nightly-updates/ ===================================== tools/signing/nightly/create-nightly-mar-signing-key ===================================== @@ -1,6 +1,13 @@ #!/bin/bash set -e -nssdb="$(dirname "$0")/nssdb" +if test "$#" -ne 2; then + echo "Usage: $0 <nssdb-dir> <Browser Name>" >&2 + echo >&2 + echo "Example: $0 nssdb-basebrowser 'Base Browser'" >&2 + exit 1 +fi +nssdb="$(dirname "$0")/$1" +BrowserName="$2" if test -d $nssdb then echo "Error: $nssdb already exists" >&2 @@ -9,5 +16,5 @@ fi mkdir -p $nssdb chmod 700 $nssdb certutil -d $nssdb -N --empty-password -certutil -d $nssdb -S -x -g 4096 -Z SHA384 -n nightly-marsigner -s "CN=Tor Browser Nightly MAR signing key" -t,, +certutil -d $nssdb -S -x -g 4096 -Z SHA384 -n nightly-marsigner -s "CN=$BrowserName Nightly MAR signing key" -t,, certutil -d $nssdb -L -r -n nightly-marsigner -o $nssdb/nightly-marsigner.der ===================================== tools/signing/nightly/sign-nightly ===================================== @@ -33,13 +33,22 @@ exit_error "Missing config file: $FindBin::Bin/config.yml" my $config = LoadFile("$FindBin::Bin/config.yml"); my $topdir = "$FindBin::Bin/../../.."; +exit_error "Usage: sign-nightly <project>" unless @ARGV == 1; +my $project = $ARGV[0]; + +sub get_config { + my ($name) = @_; + return $config->{$project}{$name} if defined $config->{$project}{$name}; + return $config->{$name}; +} + { no warnings 'redefine'; sub LWP::UserAgent::get_basic_credentials { - if ($config->{builds_url_auth_basic_username} - && $config->{builds_url_auth_basic_password}) { - return ( $config->{builds_url_auth_basic_username}, - $config->{builds_url_auth_basic_password} ); + if (get_config('builds_url_auth_basic_username') + && get_config('builds_url_auth_basic_password')) { + return ( get_config('builds_url_auth_basic_username'), + get_config('builds_url_auth_basic_password') ); } return (); } @@ -51,7 +60,7 @@ sub print_time { } END { - print_time "Exiting sign-nightly (pid: $$)\n"; + print_time "Exiting sign-nightly (pid: $$, project: $project)\n" if $project; } sub run_alone { @@ -71,10 +80,8 @@ END { } sub get_tmpdir { - my ($config) = @_; - return File::Temp->newdir($config->{tmp_dir} ? - (DIR => $config->{tmp_dir}) - : ()); + my $tmp_dir = get_config('tmp_dir'); + return File::Temp->newdir($tmp_dir ? (DIR => $tmp_dir) : ()); } sub basedir_path { @@ -83,15 +90,16 @@ sub basedir_path { } sub get_last_build_version { - my ($config, $publish_dir) = @_; + my ($publish_dir) = @_; my $today = 'tbb-nightly.' . DateTime->now->ymd('.'); my @last_days; for my $i (1..5) { my $dt = DateTime->now - DateTime::Duration->new(days => $i); push @last_days, 'tbb-nightly.' . $dt->ymd('.'); } + my $builds_url = get_config('builds_url'); for my $version ($today, @last_days) { - my $url = "$config->{builds_url}/$version/$publish_dir/sha256sums-unsigned-build.incrementals.txt"; + my $url = "$builds_url/$version/$publish_dir/sha256sums-unsigned-build.incrementals.txt"; if ($url =~ m|^/|) { return $version if -f $url; } else { @@ -115,10 +123,10 @@ sub set_current_version { } sub get_new_version { - my ($config, $publish_dir) = @_; + my ($publish_dir) = @_; my $today = 'tbb-nightly.' . DateTime->now->ymd('.'); my $current_ver = get_current_version($publish_dir); - my $last_ver = get_last_build_version($config, $publish_dir); + my $last_ver = get_last_build_version($publish_dir); return $last_ver unless defined($current_ver); return undef if $current_ver eq $today; return undef unless defined($last_ver); @@ -147,13 +155,13 @@ sub get_file_sha256sum { } sub fetch_version { - my ($config, $publish_dir, $version) = @_; - my $tmpdir = get_tmpdir($config); - my $urldir = "$config->{builds_url}/$version/$publish_dir"; + my ($publish_dir, $version) = @_; + my $tmpdir = get_tmpdir(); + my $urldir = get_config('builds_url') . "/$version/$publish_dir"; my $destdir = "$topdir/nightly/$publish_dir/$version"; return if -d $destdir; - my $gpg_keyring = basedir_path($config->{gpg_keyring}, $topdir); + my $gpg_keyring = basedir_path(get_config('gpg_keyring'), $topdir); for my $file (qw/sha256sums-unsigned-build.txt sha256sums-unsigned-build.incrementals.txt/) { my $url = "$urldir/$file"; exit_error "Error getting $url" @@ -184,17 +192,17 @@ sub fetch_version { } sub setup_martools { - my ($config) = @_; - my $martools_dir = "$FindBin::Bin/mar-tools-$config->{martools_version}"; + my $martools_dir = "$FindBin::Bin/mar-tools-" . get_config('martools_version'); if (! -d $martools_dir) { my $file = "mar-tools-linux64.zip"; - my $url = "$config->{martools_url}/$config->{martools_version}/$file"; - my $tmpdir = get_tmpdir($config); + my $url = join('/', get_config('martools_url'), + get_config('martools_version'), $file); + my $tmpdir = get_tmpdir(); exit_error "Error downloading $url" unless getstore($url, "$tmpdir/$file") == 200; exit_error "Error downloading $url.asc" unless getstore("$url.asc", "$tmpdir/$file.asc") == 200; - my $gpg_keyring = basedir_path($config->{martools_gpg_keyring}, $topdir); + my $gpg_keyring = basedir_path(get_config('martools_gpg_keyring'), $topdir); exit_error "Error checking gpg signature for $url" if system('gpg', '--no-default-keyring', '--keyring', $gpg_keyring, '--verify', "$tmpdir/$file.asc", @@ -212,14 +220,14 @@ sub setup_martools { } sub sign_version { - my ($config, $publish_dir, $version) = @_; - setup_martools($config); - my $nss_db_dir = basedir_path($config->{nss_db_dir}, $FindBin::Bin); + my ($publish_dir, $version) = @_; + setup_martools(); + my $nss_db_dir = basedir_path(get_config('nss_db_dir'), $FindBin::Bin); for my $marfile (path("$topdir/nightly/$publish_dir/$version")->children(qr/\.mar$/)) { print "Signing $marfile\n"; exit_error "Error signing $marfile" unless system('signmar', '-d', $nss_db_dir, '-n', - $config->{nss_certname}, '-s', $marfile, + get_config('nss_certname'), '-s', $marfile, "$marfile-signed") == 0; move("$marfile-signed", $marfile); } @@ -232,7 +240,7 @@ sub get_buildinfos { } sub update_responses { - my ($config, $publish_dir, $version) = @_; + my ($publish_dir, $version) = @_; my $ur_config = LoadFile("$FindBin::Bin/update-responses-base-config.yml"); $ur_config->{download}{mars_url} .= "/$publish_dir"; $ur_config->{releases_dir} = "$topdir/nightly/$publish_dir"; @@ -253,7 +261,7 @@ sub update_responses { } sub remove_oldversions { - my ($config, $publish_dir, $version) = @_; + my ($publish_dir, $version) = @_; for my $dir (path("$topdir/nightly/$publish_dir")->children) { my ($filename) = fileparse($dir); next if $filename eq $version; @@ -262,27 +270,27 @@ sub remove_oldversions { } sub sync_dest { - my ($config) = @_; exit_error "Error running rsync" if system('rsync', '-aH', '--delete-after', - "$topdir/nightly/", "$config->{rsync_dest}/"); - if ($config->{post_rsync_cmd}) { - exit_error "Error running $config->{post_rsync_cmd}" - if system($config->{post_rsync_cmd}); + "$topdir/nightly/", get_config('rsync_dest') . '/'); + my $post_rsync_cmd = get_config('post_rsync_cmd'); + if ($post_rsync_cmd) { + exit_error "Error running $post_rsync_cmd" + if system($post_rsync_cmd); } } -print_time "Starting sign-nightly (pid: $$)\n"; +print_time "Starting sign-nightly (pid: $$, project: $project)\n"; run_alone; my $some_updates = 0; -foreach my $publish_dir (@{$config->{publish_dirs}}) { - my $new_version = get_new_version($config, $publish_dir); +foreach my $publish_dir (@{get_config('publish_dirs')}) { + my $new_version = get_new_version($publish_dir); next unless $new_version; - fetch_version($config, $publish_dir, $new_version); - sign_version($config, $publish_dir, $new_version); - update_responses($config, $publish_dir, $new_version); + fetch_version($publish_dir, $new_version); + sign_version($publish_dir, $new_version); + update_responses($publish_dir, $new_version); set_current_version($publish_dir, $new_version); - remove_oldversions($config, $publish_dir, $new_version); + remove_oldversions($publish_dir, $new_version); $some_updates = 1; } -sync_dest($config) if $some_updates; +sync_dest() if $some_updates; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-bundle-testsuite][main] Bug 40073: Create incrementals for base-browser nightly builds
by boklm (＠boklm) 20 Mar '23

20 Mar '23

boklm pushed to branch main at The Tor Project / Applications / tor-browser-bundle-testsuite Commits: 2190cfc8 by Nicolas Vigier at 2023-03-20T15:53:59+01:00 Bug 40073: Create incrementals for base-browser nightly builds - - - - - 1 changed file: - TBBTestSuite/TestSuite/TorBrowserBuild.pm Changes: ===================================== TBBTestSuite/TestSuite/TorBrowserBuild.pm ===================================== @@ -194,6 +194,13 @@ sub set_tests { ], publish_dir => 'basebrowser-nightly-linux-x86_64', }, + { + name => 'basebrowser-incrementals-nightly-linux-x86_64', + descr => 'create incrementals for base-browser nightly linux-x86_64', + type => 'make_incrementals', + publish_dir => 'basebrowser-nightly-linux-x86_64', + projectname => 'basebrowser', + }, { name => 'basebrowser-nightly-linux-i686', descr => 'build base-browser nightly linux-i686', @@ -207,6 +214,13 @@ sub set_tests { ], publish_dir => 'basebrowser-nightly-linux-i686', }, + { + name => 'basebrowser-incrementals-nightly-linux-i686', + descr => 'create incrementals for base-browser nightly linux-i686', + type => 'make_incrementals', + publish_dir => 'basebrowser-nightly-linux-i686', + projectname => 'basebrowser', + }, { name => 'basebrowser-nightly-windows-i686', descr => 'build base-browser nightly windows-i686', @@ -220,6 +234,13 @@ sub set_tests { ], publish_dir => 'basebrowser-nightly-windows-i686', }, + { + name => 'basebrowser-incrementals-nightly-windows-i686', + descr => 'create incrementals for base-browser nightly windows-i686', + type => 'make_incrementals', + publish_dir => 'basebrowser-nightly-windows-i686', + projectname => 'basebrowser', + }, { name => 'basebrowser-nightly-windows-x86_64', descr => 'build base-browser nightly windows-x86_64', @@ -233,6 +254,13 @@ sub set_tests { ], publish_dir => 'basebrowser-nightly-windows-x86_64', }, + { + name => 'basebrowser-incrementals-nightly-windows-x86_64', + descr => 'create incrementals for base-browser nightly windows-x86_64', + type => 'make_incrementals', + publish_dir => 'basebrowser-nightly-windows-x86_64', + projectname => 'basebrowser', + }, { name => 'basebrowser-nightly-macos', descr => 'build base-browser nightly macos', @@ -246,6 +274,13 @@ sub set_tests { ], publish_dir => 'basebrowser-nightly-macos', }, + { + name => 'basebrowser-incrementals-nightly-macos', + descr => 'create incrementals for base-browser nightly macos (universal)', + type => 'make_incrementals', + publish_dir => 'basebrowser-nightly-macos', + projectname => 'basebrowser', + }, ]; } View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-bundle-testsuite… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-bundle-testsuite… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-102.9.0esr-12.5-1] Bug 41682: Add base-browser nightly mar signing key
by boklm (＠boklm) 20 Mar '23

20 Mar '23

boklm pushed to branch base-browser-102.9.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 9c1dd51f by Nicolas Vigier at 2023-03-20T15:32:52+01:00 Bug 41682: Add base-browser nightly mar signing key - - - - - 2 changed files: - toolkit/mozapps/update/updater/nightly_aurora_level3_primary.der - toolkit/mozapps/update/updater/nightly_aurora_level3_secondary.der Changes: ===================================== toolkit/mozapps/update/updater/nightly_aurora_level3_primary.der ===================================== Binary files a/toolkit/mozapps/update/updater/nightly_aurora_level3_primary.der and b/toolkit/mozapps/update/updater/nightly_aurora_level3_primary.der differ ===================================== toolkit/mozapps/update/updater/nightly_aurora_level3_secondary.der ===================================== Binary files a/toolkit/mozapps/update/updater/nightly_aurora_level3_secondary.der and b/toolkit/mozapps/update/updater/nightly_aurora_level3_secondary.der differ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/9c1dd51… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/9c1dd51… You're receiving this email because of your account on gitlab.torproject.org.

1 0

← Newer
1
2
3
4
5
6
7
8
...
15
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits March 2023