June 2023 - tor-commits - lists.torproject.org

[Git][tpo/applications/tor-browser-build][main] Bug 40887: Update Webtunnel Version to 38eb5505
by boklm (＠boklm) 26 Jun '23

26 Jun '23

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 3aeaa51c by Shelikhoo at 2023-06-26T14:04:15+00:00 Bug 40887: Update Webtunnel Version to 38eb5505 - - - - - 1 changed file: - projects/webtunnel/config Changes: ===================================== projects/webtunnel/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/webt… -git_hash: 2ecf64381bad8a5db45c5871dcad7d12831dca69 +git_hash: 38eb55054a5c3c072acc1d8f9a9afa36e3a5c9b7 container: use_container: 1 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/3… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/3… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-12.5-build1
by richard (＠richard) 23 Jun '23

23 Jun '23

richard pushed new tag mb-12.5-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] ChangeLog.txt updates
by richard (＠richard) 23 Jun '23

23 Jun '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: c5bfcc1a by Richard Pospesel at 2023-06-23T17:05:58+00:00 ChangeLog.txt updates - migrated Docs-PB to Docs-MB in browser project - updated browser build script to take new path into account - created separate ChangeLog-MB.txt softlink, migrate ChangeLog.txt softlink to ChangeLog-TBB.txt - updated changelog-format-blog-post script to reference correct file and fix bug in raw changelog link - - - - - 6 changed files: - + ChangeLog-MB.txt - ChangeLog.txt → ChangeLog-TBB.txt - + projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-PB/Licenses/uBlockOrigin.txt → projects/browser/Bundle-Data/Docs-MB/Licenses/uBlockOrigin.txt - projects/browser/build - tools/changelog-format-blog-post Changes: ===================================== ChangeLog-MB.txt ===================================== @@ -0,0 +1 @@ +projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt \ No newline at end of file ===================================== ChangeLog.txt → ChangeLog-TBB.txt ===================================== ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== ===================================== projects/browser/Bundle-Data/Docs-PB/Licenses/uBlockOrigin.txt → projects/browser/Bundle-Data/Docs-MB/Licenses/uBlockOrigin.txt ===================================== ===================================== projects/browser/build ===================================== @@ -241,7 +241,7 @@ do [% IF ! c("var/namecoin") %]--exclude=*Electrum-NMC* --exclude=*ncprop279*[% END %] \ -c . | tar -C "$tbdir[% IF ! c("var/macos") %]/[% c('var/ProjectName') %][% END %]" -x [% ELSIF c("var/mullvad-browser") -%] - cp -a Bundle-Data/Docs-PB/* "$tbdir/$DOCSPATH" + cp -a Bundle-Data/Docs-MB/* "$tbdir/$DOCSPATH" [% END -%] done ===================================== tools/changelog-format-blog-post ===================================== @@ -12,7 +12,7 @@ sub version_type { my ($changelog, $current_tbversion, $last_tbversion); -if (!open(CHANGELOG, '<', "$FindBin::Bin/../ChangeLog.txt")) { +if (!open(CHANGELOG, '<', "$FindBin::Bin/../ChangeLog-TBB.txt")) { print STDERR "Error opening changelog file\n"; exit 1; } @@ -49,6 +49,6 @@ if (! ( $current_tbversion =~ m/a/ ) ) { my @v = split(/\./, $current_tbversion); $changelog_branch = "maint-$v[0].$v[1]"; } -print "The full changelog since [Tor Browser $last_tbversion](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/$changelog_branch/projects/browser/Bundle-Data/Docs/ChangeLog.txt) is:\n\n"; +print "The full changelog since [Tor Browser $last_tbversion](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/$changelog_branch/projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt) is:\n\n"; print $changelog; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-12.5] 2 commits: ChangeLog.txt updates
by richard (＠richard) 23 Jun '23

23 Jun '23

richard pushed to branch maint-12.5 at The Tor Project / Applications / tor-browser-build Commits: dbd79b03 by Richard Pospesel at 2023-06-21T21:06:53+00:00 ChangeLog.txt updates - migrated Docs-PB to Docs-MB in browser project - updated browser build script to take new path into account - created separate ChangeLog-MB.txt softlink, migrate ChangeLog.txt softlink to ChangeLog-TBB.txt - updated changelog-format-blog-post script to reference correct file and fix bug in raw changelog link - - - - - 0836bd0b by Richard Pospesel at 2023-06-22T20:03:17+00:00 Bug 40872: Mullvad Browser 12.5 - - - - - 9 changed files: - + ChangeLog-MB.txt - ChangeLog.txt → ChangeLog-TBB.txt - + projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-PB/Licenses/uBlockOrigin.txt → projects/browser/Bundle-Data/Docs-MB/Licenses/uBlockOrigin.txt - projects/browser/build - projects/browser/config - projects/firefox/config - rbm.conf - tools/changelog-format-blog-post Changes: ===================================== ChangeLog-MB.txt ===================================== @@ -0,0 +1 @@ +projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt \ No newline at end of file ===================================== ChangeLog.txt → ChangeLog-TBB.txt ===================================== ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -0,0 +1,31 @@ +Mullvad Browser 12.5 - June 21 2023 + * All Platforms + * Updated uBlock Origin to 1.50.0 + * Updated mullvad-browser-extension to version 0.8.3 + * Windows + macOS + Linux + * Bug 41577: Disable profile migration [tor-browser] + * Bug 41595: Disable pagethumbnails capturing [tor-browser] + * Bug 41609: Move the disabling of Firefox Home (Activity Stream) to base-browser [tor-browser] + * Bug 41668: Move part of the updater patches to base browser [tor-browser] + * Bug 41686: Move the 'Bug 11641: Disable remoting by default' commit from base-browser to tor-browser [tor-browser] + * Bug 41695: Port warning on maximized windows without letterboxing from torbutton [tor-browser] + * Bug 41701: Reporting an extension does not work [tor-browser] + * Bug 41711: Race condition when opening a new window in New Identity [tor-browser] + * Bug 41736: Customize the default CustomizableUI toolbar using CustomizableUI.jsm [tor-browser] + * Bug 41738: Replace the patch to disable live reload with its preference [tor-browser] + * Bug 41775: Avoid re-defining some macros in nsUpdateDriver.cpp [tor-browser] + * Windows + Linux + * Bug 41654: UpdateInfo jumped into Data [tor-browser] + * Linux + * Bug 40860: Improve the transition from the old fontconfig file to the new one [tor-browser-build] + * Bug 41163: Many bundled fonts are blocked in Ubuntu/Fedora because of RFP [tor-browser] + * Bug 41732: implement linux font whitelist as defense-in-depth [tor-browser] + * Build System + * All Platforms + * Bug 40837: Rebase mullvad-browser build changes onto main [tor-browser-build] + * Bug 40870: Remove url without browser name from tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build] + * Windows + macOS + Linux + * Bug 40826: Correctly set appname_marfile for basebrowser in tools/signing/nightly/update-responses-base-config.yml [tor-browser-build] + * Bug 40866: Remove `Using ansible to set up a nightly build machine` from README [tor-browser-build] + * macOS + * Bug 40858: Create script to assist testers self sign Mac builds to allow running on Arm processors [tor-browser-build] ===================================== projects/browser/Bundle-Data/Docs-PB/Licenses/uBlockOrigin.txt → projects/browser/Bundle-Data/Docs-MB/Licenses/uBlockOrigin.txt ===================================== ===================================== projects/browser/build ===================================== @@ -237,7 +237,7 @@ do [% IF ! c("var/namecoin") %]--exclude=*Electrum-NMC* --exclude=*ncprop279*[% END %] \ -c . | tar -C "$tbdir[% IF ! c("var/macos") %]/[% c('var/ProjectName') %][% END %]" -x [% ELSIF c("var/mullvad-browser") -%] - cp -a Bundle-Data/Docs-PB/* "$tbdir/$DOCSPATH" + cp -a Bundle-Data/Docs-MB/* "$tbdir/$DOCSPATH" [% END -%] done ===================================== projects/browser/config ===================================== @@ -106,13 +106,13 @@ input_files: - URL: https://addons.mozilla.org/firefox/downloads/file/4111078/noscript-11.4.22.… name: noscript sha256sum: 46a84c85df4c6be11905388ad2b66aeb5a010ed615484112c8c1710ad13bc36e - - URL: https://addons.mozilla.org/firefox/downloads/file/4103048/ublock_origin-1.4… + - URL: https://addons.mozilla.org/firefox/downloads/file/4121906/ublock_origin-1.5… name: ublock-origin - sha256sum: 39266486f720cd31d291d2fdad78625b079782a05517e1936eec7e780bc2a84d + sha256sum: 10618003e70b528c3f17996e373146d39e6b15f777ac4ca1f214da2ffdb7a5b3 enable: '[% c("var/mullvad-browser") %]' - - URL: https://github.com/mullvad/browser-extension/releases/download/v0.7.9-firef… + - URL: https://github.com/mullvad/browser-extension/releases/download/v0.8.3-firef… name: mullvad-extension - sha256sum: 17ce31b32e8be0f0db86a5a5ed93607cc84d5e2092341aee0b8eaba1c0746390 + sha256sum: e531ce6e809091eb40848874ea9e695bce61196397b6d8238ab582a152e02ac7 enable: '[% c("var/mullvad-browser") %]' - filename: 'gtk3-settings.ini' enable: '[% c("var/linux") %]' ===================================== projects/firefox/config ===================================== @@ -85,7 +85,7 @@ targets: git_url: https://gitlab.torproject.org/tpo/applications/mullvad-browser.git var: branding_directory_prefix: 'mb' - browser_build: 1 + browser_build: 2 gitlab_project: https://gitlab.torproject.org/tpo/applications/mullvad-browser linux-x86_64: ===================================== rbm.conf ===================================== @@ -277,8 +277,7 @@ targets: exe_name: mullvadbrowser mar_channel_id: '[% c("var/projectname") %]-mullvad-[% c("var/channel") %]' locales: [] - torbrowser_incremental_from: - - 12.5a6 + torbrowser_build: 'build1' torbrowser-testbuild: - testbuild ===================================== tools/changelog-format-blog-post ===================================== @@ -12,7 +12,7 @@ sub version_type { my ($changelog, $current_tbversion, $last_tbversion); -if (!open(CHANGELOG, '<', "$FindBin::Bin/../ChangeLog.txt")) { +if (!open(CHANGELOG, '<', "$FindBin::Bin/../ChangeLog-TBB.txt")) { print STDERR "Error opening changelog file\n"; exit 1; } @@ -49,6 +49,6 @@ if (! ( $current_tbversion =~ m/a/ ) ) { my @v = split(/\./, $current_tbversion); $changelog_branch = "maint-$v[0].$v[1]"; } -print "The full changelog since [Tor Browser $last_tbversion](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/$changelog_branch/projects/browser/Bundle-Data/Docs/ChangeLog.txt) is:\n\n"; +print "The full changelog since [Tor Browser $last_tbversion](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/$changelog_branch/projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt) is:\n\n"; print $changelog; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] release: new version, 12.5
by richard (＠richard) 22 Jun '23

22 Jun '23

richard pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 741176fa by Richard Pospesel at 2023-06-22T18:46:35+00:00 release: new version, 12.5 - - - - - 30 changed files: - update_3/release/.htaccess - − update_3/release/12.0.4-12.0.7-linux32-ALL.xml - − update_3/release/12.0.4-12.0.7-linux64-ALL.xml - − update_3/release/12.0.4-12.0.7-macos-ALL.xml - − update_3/release/12.0.4-12.0.7-win32-ALL.xml - − update_3/release/12.0.4-12.0.7-win64-ALL.xml - − update_3/release/12.0.5-12.0.7-linux32-ALL.xml - − update_3/release/12.0.5-12.0.7-linux64-ALL.xml - − update_3/release/12.0.5-12.0.7-macos-ALL.xml - − update_3/release/12.0.5-12.0.7-win32-ALL.xml - − update_3/release/12.0.5-12.0.7-win64-ALL.xml - + update_3/release/12.0.5-12.5-linux32-ALL.xml - + update_3/release/12.0.5-12.5-linux64-ALL.xml - + update_3/release/12.0.5-12.5-macos-ALL.xml - + update_3/release/12.0.5-12.5-win32-ALL.xml - + update_3/release/12.0.5-12.5-win64-ALL.xml - − update_3/release/12.0.6-12.0.7-linux32-ALL.xml - − update_3/release/12.0.6-12.0.7-linux64-ALL.xml - − update_3/release/12.0.6-12.0.7-macos-ALL.xml - − update_3/release/12.0.6-12.0.7-win32-ALL.xml - − update_3/release/12.0.6-12.0.7-win64-ALL.xml - + update_3/release/12.0.6-12.5-linux32-ALL.xml - + update_3/release/12.0.6-12.5-linux64-ALL.xml - + update_3/release/12.0.6-12.5-macos-ALL.xml - + update_3/release/12.0.6-12.5-win32-ALL.xml - + update_3/release/12.0.6-12.5-win64-ALL.xml - + update_3/release/12.0.7-12.5-linux32-ALL.xml - + update_3/release/12.0.7-12.5-linux64-ALL.xml - + update_3/release/12.0.7-12.5-macos-ALL.xml - + update_3/release/12.0.7-12.5-win32-ALL.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40886: Add Arch instructions to README
by boklm (＠boklm) 22 Jun '23

22 Jun '23

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: cb783947 by Dan Ballard at 2023-06-21T16:17:32-07:00 Bug 40886: Add Arch instructions to README - - - - - 1 changed file: - README Changes: ===================================== README ===================================== @@ -42,6 +42,20 @@ If you are running Debian or Ubuntu, you can install them with: libfile-copy-recursive-perl libfile-slurp-perl git \ mercurial uidmap +If you are running an Arch based system, you should be able to install them with: + +# pacman -S perl-datetime perl-path-tiny perl-yaml perl-yaml-libyaml \ + perl-yaml-tiny perl-template-toolkit perl-io-captureoutput \ + perl-file-copy-recursive perl-string-shellquote \ + perl-sort-versions perl-data-uuid perl-data-dump perl-json \ + perl-digest-sha1 perl-io-all perl-file-slurp perl-sys-syscall \ + perl-parallel-forkmanager perl-xml-libxml perl-lwp-protocol-https + +On Arch based systems you also need to generate some .ph files RBM expects: + + # cd /usr/include/sys; h2ph syscall.h + # cd /usr/include/; h2ph asm/unistd.h asm/unistd_64.h bits/syscall.h + The build system is based on rbm, which is included as a git submodule in the rbm/ directory. You can fetch the rbm git submodule by running 'make submodule-update'. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.12.0esr-12.5-1] fixup! Adding issue and merge request templates
by richard (＠richard) 21 Jun '23

21 Jun '23

richard pushed to branch tor-browser-102.12.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 9d876ebb by Richard Pospesel at 2023-06-21T18:06:08+00:00 fixup! Adding issue and merge request templates - added potential reviewer list with associated focus areas - - - - - 1 changed file: - .gitlab/merge_request_templates/default.md Changes: ===================================== .gitlab/merge_request_templates/default.md ===================================== @@ -25,12 +25,34 @@ ### Merging - [ ] Merge to `tor-browser` - `!fixups` to `tor-browser`-specific commits, new features, security backports -- [ ] Merge to `base-browser` -`!fixups` to `base-browser`-specific commits, new features to be shared with `mullvad-browser`, and security backports +- [ ] Merge to `base-browser` - `!fixups` to `base-browser`-specific commits, new features to be shared with `mullvad-browser`, and security backports - **NOTE**: if your changeset includes patches to both `base-browser` and `tor-browser` please clearly label in the change description which commits should be cherry-picked to `base-browser` after merging ### Issue Tracking - [ ] Link resolved issues with appropriate [Release Prep issue](https://gitlab.torproject.org/groups/tpo/applications/-/issues/?sort… for changelog generation -## Change Description - - \ No newline at end of file +### Review + +#### Request Reviewer + +- [ ] Request review from an applications developer depending on modified system: + - **NOTE**: if the MR modifies multiple areas, please `/cc` all the relevant reviewers (since gitlab only allows 1 reviewer) + - **accessibility** : henry + - **android** : dan + - **build system** : boklm + - **extensions** : ma1 + - **firefox internals (XUL/JS/XPCOM)** : ma1 + - **fonts** : pierov + - **frontend (implementation)** : henry + - **frontend (review)** : donuts, richard + - **localization** : henry, pierov + - **nightly builds** : boklm + - **rebases/release-prep** : dan_b, ma1, pierov, richard + - **security** : ma1 + - **signing** : boklm, richard + - **updater** : pierov + - **misc/other** : pierov, richard + +#### Change Description + + View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/9d876eb… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/9d876eb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: Updated gitlab merge request template
by richard (＠richard) 21 Jun '23

21 Jun '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: aafb2ab9 by Richard Pospesel at 2023-06-20T21:22:57+00:00 Updated gitlab merge request template - - - - - 82bb2187 by Richard Pospesel at 2023-06-20T21:22:59+00:00 Release Prep issue template updates - - - - - 5 changed files: - + .gitlab/issue_templates/Release Prep - Mullvad Browser Alpha.md - .gitlab/issue_templates/Release Prep - Mullvad Browser Stable.md - .gitlab/issue_templates/Release Prep - Tor Browser Alpha.md - .gitlab/issue_templates/Release Prep - Tor Browser Stable.md - .gitlab/merge_request_templates/default.md Changes: ===================================== .gitlab/issue_templates/Release Prep - Mullvad Browser Alpha.md ===================================== @@ -0,0 +1,195 @@ +<details> + <summary>Explanation of variables</summary> + +- `$(BUILD_SERVER)` : the server the main builder is using to build a mullvad-browser release +- `$(BUILDER)` : whomever is building the release on the $(BUILD_SERVER) + - **example** : `pierov` +- `$(STAGING_SERVER)` : the server the signer is using to to run the signing process +- `$(ESR_VERSION)` : the Mozilla defined ESR version, used in various places for building mullvad-browser tags, labels, etc + - **example** : `91.6.0` +- `$(MULLVAD_BROWSER_MAJOR)` : the Mullvad Browser major version + - **example** : `11` +- `$(MULLVAD_BROWSER_MINOR)` : the Mullvad Browser minor version + - **example** : either `0` or `5`; Alpha's is always `(Stable + 5) % 10` +- `$(MULLVAD_BROWSER_VERSION)` : the Mullvad Browser version in the format + - **example** : `12.5a3`, `12.0.3` +- `$(BUILD_N)` : a project's build revision within a its branch; this is separate from the `$(MULLVAD_BROWSER_BUILD_N)` value; many of the Firefox-related projects have a `$(BUILD_N)` suffix and may differ between projects even when they contribute to the same build. + - **example** : `build1` +- `$(MULLVAD_BROWSER_BUILD_N)` : the mullvad-browser build revision for a given Mullvad Browser release; used in tagging git commits + - **example** : `build2` + - **NOTE** : A project's `$(BUILD_N)` and `$(MULLVAD_BROWSER_BUILD_N)` may be the same, but it is possible for them to diverge. For **example** : + - if we have multiple Mullvad Browser releases on a given ESR branch the two will become out of sync as the `$(BUILD_N)` value will increase, while the `$(MULLVAD_BROWSER_BUILD_N)` value may stay at `build1` (but the `$(MULLVAD_BROWSER_VERSION)` will increase) + - if we have build failures unrelated to `mullvad-browser`, the `$(MULLVAD_BROWSER_BUILD_N)` value will increase while the `$(BUILD_N)` will stay the same. +- `$(MULLVAD_BROWSER_VERSION)` : the published Mullvad Browser version + - **example** : `11.5a6`, `11.0.7` +- `$(MB_BUILD_TAG)` : the `tor-browser-build` build tag used to build a given Mullvad Browser version + - **example** : `mb-12.0.7-build1` +</details> + +**NOTE** It is assumed that the `tor-browser` alpha rebase and security backport tasks have been completed + +<details> + <summary>Building</summary> + +### tor-browser-build: https://gitlab.torproject.org/tpo/applications/tor-browser-build.git +Mullvad Browser Alpha (and Nightly) are on the `main` branch + +- [ ] Update `rbm.conf` + - [ ] `var/torbrowser_version` : update to next version + - [ ] `var/torbrowser_build` : update to `$(MULLVAD_BROWSER_BUILD_N)` + - [ ] `var/torbrowser_incremental_from` : update to previous Desktop version + - **IMPORTANT**: Really *actually* make sure this is the previous Desktop version or else the `make mullvadbrowser-incrementals-*` step will fail +- [ ] Update build configs + - [ ] Update `projects/firefox/config` + - [ ] `browser_build` : update to match `mullvad-browser` tag + - [ ] ***(Optional)*** `var/firefox_platform_version` : update to latest `$(ESR_VERSION)` if rebased + - [ ] Update `projects/translation/config`: + - [ ] run `make list_translation_updates-alpha` to get updated hashes + - [ ] `steps/base-browser/git_hash` : update with `HEAD` commit of project's `base-browser` branch + - [ ] `steps/base-browser-fluent/git_hash` : update with `HEAD` commit of project's `basebrowser-newidentityftl` branch +- [ ] Update common build configs + - [ ] Check for NoScript updates here : https://addons.mozilla.org/en-US/firefox/addon/noscript + - [ ] ***(Optional)*** If new version available, update `noscript` section of `input_files` in `projects/browser/config` + - [ ] `URL` + - [ ] `sha256sum` + - [ ] Check for uBlock-origin updates here : https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/ + - [ ] ***(Optional)*** If new version available, update `ublock-origin` section of `input_files` in `projects/browser/config` + - [ ] `URL` + - [ ] `sha256sum` + - [ ] Check for Mullvad Privacy Companion updates here : https://github.com/mullvad/browser-extension/releases + - [ ] ***(Optional)*** If new version available, update `mullvad-extension` section of `input_files` in `projects/browser/config` + - [ ] `URL` + - [ ] `sha256sum` +- [ ] Open MR with above changes +- [ ] Merge +- [ ] Sign/Tag commit: `make mullvadbrowser-signtag-alpha` +- [ ] Push tag to `origin` +- [ ] Begin build on `$(BUILD_SERVER)` (fix any issues in subsequent MRs) +- [ ] **TODO** Submit build-tag to Mullvad build infra +- [ ] Ensure builders have matching builds + +</details> + +<details> + <summary>QA</summary> + +### send the build + + - [ ] Email Mullvad QA: support(a)mullvad.net, rui(a)mullvad.net + <details> + <summary>email template</summary> + + Subject: + New build: Mullvad Browser $(MULLVAD_BROWSER_VERION) (unsigned) + + Body: + unsigned builds: https://tb-build-05.torproject.org/~$(BUILDER)/builds/mullvadbrowser/releas… + + changelog: + ... + + </details> + + - ***(Optional)*** Add additional information: + - [ ] Note any new functionality which needs testing + - [ ] Link to any known issues + +</details> + +<details> + <summary>Signing</summary> + +### signing +- [ ] On `$(STAGING_SERVER)`, ensure updated: + - [ ] `tor-browser-build/tools/signing/set-config.hosts` + - `ssh_host_builder` : ssh hostname of machine with unsigned builds + - **NOTE** : `tor-browser-build` is expected to be in the `$HOME` directory) + - `ssh_host_linux_signer` : ssh hostname of linux signing machine + - `ssh_host_macos_signer` : ssh hostname of macOS signing machine + - [ ] `tor-browser-build/tools/signing/set-config.macos-notarization` + - `macos_notarization_user` : the email login for a mullvad notariser Apple Developer account + - [ ] `set-config.update-responses` + - `update_responses_repository_dir` : directory where you cloned `git@gitlab.torproject.org:tpo/applications/mullvad-browser-update-responses.git` + - [ ] `tor-browser-build/tools/signing/set-config.tbb-version` + - `tbb_version` : mullvad browser version string, same as `var/torbrowser_version` in `rbm.conf` (examples: `11.5a12`, `11.0.13`) + - `tbb_version_build` : the tor-browser-build build number (if `var/torbrowser_build` in `rbm.conf` is `buildN` then this value is `N`) + - `tbb_version_type` : either `alpha` for alpha releases or `release` for stable releases +- [ ] On `$(STAGING_SERVER)` in a separate `screen` session, run the macOS proxy script: + - `cd tor-browser-build/tools/signing/` + - `./macos-signer-proxy` +- [ ] On `$(STAGING_SERVER)` in a separate `screen` session, ensure tor daemon is running with SOCKS5 proxy on the default port 9050 +- [ ] run do-all-signing script: + - `cd tor-browser-build/tools/signing/` + - `./do-all-signing.mullvadbrowser` +- **NOTE**: at this point the signed binaries should have been copied to `staticiforme` +- [ ] Update `staticiforme.torproject.org`: + - From `screen` session on `staticiforme.torproject.org`: + - [ ] Static update components : `static-update-component dist.torproject.org` + - [ ] Remove old release data from `/srv/dist-master.torproject.org/htdocs/mullvadbrowser` + - [ ] Static update components (again) : `static-update-component dist.torproject.org` + +</details> + +<details> + <summary>Publishing</summary> + +### email + +- [ ] Email Mullvad with release information: support(a)mullvad.net, rui(a)mullvad.net + <details> + <summary>email template</summary> + + Subject: + New build: Mullvad Browser $(MULLVAD_BROWSER_VERION) (signed) + + Body: + signed builds: https://dist.torproject.org/mullvadbrowser/$(MULLVAD_BROWSER_VERSION) + + update_response hashes: $(MULLVAD_UPDATE_RESPONSES_HASH) + + changelog: + ... + + </details> + +### mullvad-browser (github): https://github.com/mullvad/mullvad-browser/ +- [ ] Push this release's associated `mullvad-browser.git` branch to github +- [ ] Push this release's associated tags to github: + - [ ] Firefox ESR tag + - **example** : `FIREFOX_102_12_0esr_BUILD1,` + - [ ] `base-browser` tag + - **example** : `base-browser-102.12.0esr-12.0-1-build1` + - [ ] `mullvad-browser` tag + - **example** : `mullvad-browser-102.12.0esr-12.0-1-build1` +- [ ] Sign+Tag additionally the `mullvad-browser.git` `firefox` commit used in build: + - **Tag**: `$(MULLVAD_BROWSER_VERSION)` + - **example** : `12.5a7` + - **Message**: `$(ESR_VERSION)esr-based $(MULLVAD_BROWSER_VERSION)` + - **example** : `102.12.0esr-based 12.5a7` + - [ ] Push tag to github + +</details> + +<details> + <summary>Downstream</summary> + +### notify packagers + +- [ ] **(Optional, Once Mullvad Updates their Github Releases Page)** Email downstream consumers: + <details> + <summary>email template</summary> + + ... + + ... + + </details> + + - **NOTE**: This is an optional step and only necessary close a major release/transition from alpha to stable, or if there are major packing changes these developers need to be aware of + - [ ] flathub package maintainer: proletarius101(a)protonmail.com + - [ ] arch package maintainer: bootctl(a)gmail.com + - [ ] nixOS package maintainer: dev(a)felschr.com + +</details> + +/label ~"Release Prep" ===================================== .gitlab/issue_templates/Release Prep - Mullvad Browser Stable.md ===================================== @@ -2,32 +2,36 @@ <summary>Explanation of variables</summary> - `$(BUILD_SERVER)` : the server the main builder is using to build a mullvad-browser release +- `$(BUILDER)` : whomever is building the release on the $(BUILD_SERVER) + - **example** : `pierov` - `$(STAGING_SERVER)` : the server the signer is using to to run the signing process - `$(ESR_VERSION)` : the Mozilla defined ESR version, used in various places for building mullvad-browser tags, labels, etc - - example : `91.6.0` + - **example** : `91.6.0` - `$(MULLVAD_BROWSER_MAJOR)` : the Mullvad Browser major version - - example : `11` + - **example** : `11` - `$(MULLVAD_BROWSER_MINOR)` : the Mullvad Browser minor version - - example : either `0` or `5`; Alpha's is always `(Stable + 5) % 10` + - **example** : either `0` or `5`; Alpha's is always `(Stable + 5) % 10` - `$(MULLVAD_BROWSER_VERSION)` : the Mullvad Browser version in the format - - example: `12.5a3`, `12.0.3` + - **example** : `12.5a3`, `12.0.3` - `$(BUILD_N)` : a project's build revision within a its branch; this is separate from the `$(MULLVAD_BROWSER_BUILD_N)` value; many of the Firefox-related projects have a `$(BUILD_N)` suffix and may differ between projects even when they contribute to the same build. - - example : `build1` + - **example** : `build1` - `$(MULLVAD_BROWSER_BUILD_N)` : the mullvad-browser build revision for a given Mullvad Browser release; used in tagging git commits - - example : `build2` - - **NOTE** : A project's `$(BUILD_N)` and `$(MULLVAD_BROWSER_BUILD_N)` may be the same, but it is possible for them to diverge. For example : - - if we have multiple Mullvad Browser releases on a given ESR branch the two will become out of sync as the `$(BUILD_N)` value will increase, while the `$(MULLVAD_BROWSER_BUILD_N)` value may stay at `build1` (but the `$(MULLVAD_BROWSER_VERSION)` will increase) - - if we have build failures unrelated to `mullvad-browser`, the `$(MULLVAD_BROWSER_BUILD_N)` value will increase while the `$(BUILD_N)` will stay the same. + - **example** : `build2` + - **NOTE** : A project's `$(BUILD_N)` and `$(MULLVAD_BROWSER_BUILD_N)` may be the same, but it is possible for them to diverge. For **example** : + - if we have multiple Mullvad Browser releases on a given ESR branch the two will become out of sync as the `$(BUILD_N)` value will increase, while the `$(MULLVAD_BROWSER_BUILD_N)` value may stay at `build1` (but the `$(MULLVAD_BROWSER_VERSION)` will increase) + - if we have build failures unrelated to `mullvad-browser`, the `$(MULLVAD_BROWSER_BUILD_N)` value will increase while the `$(BUILD_N)` will stay the same. - `$(MULLVAD_BROWSER_VERSION)` : the published Mullvad Browser version - - example : `11.5a6`, `11.0.7` + - **example** : `11.5a6`, `11.0.7` +- `$(MB_BUILD_TAG)` : the `tor-browser-build` build tag used to build a given Mullvad Browser version + - **example** : `mb-12.0.7-build1` </details> -**NOTE** It is assumed that the `tor-browser` rebase and security backport tasks have been completed +**NOTE** It is assumed that the `tor-browser` stable rebase and security backport tasks have been completed <details> - <summary>Build Configs</summary> + <summary>Building</summary> -### tor-browser-build: https://gitlab.mullvadproject.org/tpo/applications/tor-browser-build.git +### tor-browser-build: https://gitlab.torproject.org/tpo/applications/tor-browser-build.git Mullvad Browser Stable lives in the various `maint-$(MULLVAD_BROWSER_MAJOR).$(MULLVAD_BROWSER_MINOR)` (and possibly more specific) branches - [ ] Update `rbm.conf` @@ -57,30 +61,55 @@ Mullvad Browser Stable lives in the various `maint-$(MULLVAD_BROWSER_MAJOR).$(MU - [ ] `URL` - [ ] `sha256sum` - [ ] Open MR with above changes -- [ ] Begin build on `$(BUILD_SERVER)` (and fix any issues which come up and update MR) - [ ] Merge - [ ] Sign/Tag commit: `make mullvadbrowser-signtag-release` - [ ] Push tag to `origin` +- [ ] Begin build on `$(BUILD_SERVER)` (fix any issues in subsequent MRs) +- [ ] **TODO** Submit build-tag to Mullvad build infra +- [ ] Ensure builders have matching builds + +</details> + +<details> + <summary>QA</summary> + +### send the build + + - [ ] Email Mullvad QA: support(a)mullvad.net, rui(a)mullvad.net + <details> + <summary>email template</summary> + + Subject: + New build: Mullvad Browser $(MULLVAD_BROWSER_VERION) (unsigned) + + Body: + unsigned builds: https://tb-build-05.torproject.org/~$(BUILDER)/builds/mullvadbrowser/releas… + + changelog: + ... + + </details> + + - ***(Optional)*** Add additional information: + - [ ] Note any new functionality which needs testing + - [ ] Link to any known issues </details> <details> <summary>Signing</summary> -### signing + publishing -- [ ] Ensure builders have matching builds +### signing - [ ] On `$(STAGING_SERVER)`, ensure updated: - - [ ] `tor-browser-build/tools/signing/set-config` - - `NSS_DB_DIR` : location of the `nssdb7` direcmullvady - [ ] `tor-browser-build/tools/signing/set-config.hosts` - `ssh_host_builder` : ssh hostname of machine with unsigned builds - - **NOTE** : `tor-browser-build` is expected to be in the `$HOME` direcmullvady) + - **NOTE** : `tor-browser-build` is expected to be in the `$HOME` directory) - `ssh_host_linux_signer` : ssh hostname of linux signing machine - `ssh_host_macos_signer` : ssh hostname of macOS signing machine - [ ] `tor-browser-build/tools/signing/set-config.macos-notarization` - `macos_notarization_user` : the email login for a mullvad notariser Apple Developer account - [ ] `set-config.update-responses` - - `update_responses_reposimullvady_dir` : direcmullvady where you cloned `git@gitlab.mullvadproject.org:tpo/applications/mullvad-browser-update-responses.git` + - `update_responses_repository_dir` : directory where you cloned `git@gitlab.torproject.org:tpo/applications/mullvad-browser-update-responses.git` - [ ] `tor-browser-build/tools/signing/set-config.tbb-version` - `tbb_version` : mullvad browser version string, same as `var/torbrowser_version` in `rbm.conf` (examples: `11.5a12`, `11.0.13`) - `tbb_version_build` : the tor-browser-build build number (if `var/torbrowser_build` in `rbm.conf` is `buildN` then this value is `N`) @@ -91,7 +120,7 @@ Mullvad Browser Stable lives in the various `maint-$(MULLVAD_BROWSER_MAJOR).$(MU - [ ] On `$(STAGING_SERVER)` in a separate `screen` session, ensure tor daemon is running with SOCKS5 proxy on the default port 9050 - [ ] run do-all-signing script: - `cd tor-browser-build/tools/signing/` - - `./do-all-signing.sh` + - `./do-all-signing.mullvadbrowser` - **NOTE**: at this point the signed binaries should have been copied to `staticiforme` - [ ] Update `staticiforme.torproject.org`: - From `screen` session on `staticiforme.torproject.org`: @@ -101,19 +130,64 @@ Mullvad Browser Stable lives in the various `maint-$(MULLVAD_BROWSER_MAJOR).$(MU </details> +<details> + <summary>Publishing</summary> + +### email + +- [ ] Email Mullvad with release information: support(a)mullvad.net, rui(a)mullvad.net + <details> + <summary>email template</summary> + + Subject: + New build: Mullvad Browser $(MULLVAD_BROWSER_VERION) (signed) + + Body: + signed builds: https://dist.torproject.org/mullvadbrowser/$(MULLVAD_BROWSER_VERSION) + + update_response hashes: $(MULLVAD_UPDATE_RESPONSES_HASH) + + changelog: + ... + + </details> + +### mullvad-browser (github): https://github.com/mullvad/mullvad-browser/ +- [ ] Push this release's associated `mullvad-browser.git` branch to github +- [ ] Push this release's associated tags to github: + - [ ] Firefox ESR tag + - **example** : `FIREFOX_102_12_0esr_BUILD1,` + - [ ] `base-browser` tag + - **example** : `base-browser-102.12.0esr-12.0-1-build1` + - [ ] `mullvad-browser` tag + - **example** : `mullvad-browser-102.12.0esr-12.0-1-build1` +- [ ] Sign+Tag additionally the `mullvad-browser.git` `firefox` commit used in build: + - **Tag**: `$(MULLVAD_BROWSER_VERSION)` + - **example** : `12.0.7` + - **Message**: `$(ESR_VERSION)esr-based $(MULLVAD_BROWSER_VERSION)` + - **example** : `102.12.0esr-based 12.0.7` + - [ ] Push tag to github + +</details> + <details> <summary>Downstream</summary> -### notify stakeholders +### notify packagers + +- [ ] **(Once Mullvad Updates their Github Releases Page)** Email downstream consumers: + <details> + <summary>email template</summary> + + ... + + ... + + </details> -- [ ] Email Mullvad with release information: rui(a)mullvad.net - - [ ] Build artifact download list - - [ ] New `mullvad-browser` project branch and tags - - [ ] mullvad-browser-update-responses git hash - - [ ] changelog -- [ ] Email downstream consumers: - [ ] flathub package maintainer: proletarius101(a)protonmail.com - [ ] arch package maintainer: bootctl(a)gmail.com + - [ ] nixOS package maintainer: dev(a)felschr.com ### merge requests ===================================== .gitlab/issue_templates/Release Prep - Tor Browser Alpha.md ===================================== @@ -2,28 +2,34 @@ <summary>Explanation of variables</summary> - `$(BUILD_SERVER)` : the server the main builder is using to build a tor-browser release +- `$(BUILDER)` : whomever is building the release on the $(BUILD_SERVER) + - **example** : `pierov` - `$(STAGING_SERVER)` : the server the signer is using to to run the signing process - `$(ESR_VERSION)` : the Mozilla defined ESR version, used in various places for building tor-browser tags, labels, etc - - example : `91.6.0` + - **example** : `91.6.0` - `$(TOR_BROWSER_MAJOR)` : the Tor Browser major version - - example : `11` + - **example** : `11` - `$(TOR_BROWSER_MINOR)` : the Tor Browser minor version - - example : either `0` or `5`; Alpha's is always `(Stable + 5) % 10` + - **example** : either `0` or `5`; Alpha's is always `(Stable + 5) % 10` +- `$(TOR_BROWSER_VERSION)` : the Tor Browser version in the format + - **example** : `12.5a3`, `12.0.3` - `$(BUILD_N)` : a project's build revision within a its branch; this is separate from the `$(TOR_BROWSER_BUILD_N)` value; many of the Firefox-related projects have a `$(BUILD_N)` suffix and may differ between projects even when they contribute to the same build. - - example : `build1` + - **example** : `build1` - `$(TOR_BROWSER_BUILD_N)` : the tor-browser build revision for a given Tor Browser release; used in tagging git commits - - example : `build2` - - **NOTE** : A project's `$(BUILD_N)` and `$(TOR_BROWSER_BUILD_N)` may be the same, but it is possible for them to diverge. For example : - - if we have multiple Tor Browser releases on a given ESR branch the two will become out of sync as the `$(BUILD_N)` value will increase, while the `$(TOR_BROWSER_BUILD_N)` value may stay at `build1` (but the `$(TOR_BROWSER_VERSION)` will increase) - - if we have build failures unrelated to `tor-browser`, the `$(TOR_BROWSER_BUILD_N)` value will increase while the `$(BUILD_N)` will stay the same. + - **example** : `build2` + - **NOTE** : A project's `$(BUILD_N)` and `$(TOR_BROWSER_BUILD_N)` may be the same, but it is possible for them to diverge. For example : + - if we have multiple Tor Browser releases on a given ESR branch the two will become out of sync as the `$(BUILD_N)` value will increase, while the `$(TOR_BROWSER_BUILD_N)` value may stay at `build1` (but the `$(TOR_BROWSER_VERSION)` will increase) + - if we have build failures unrelated to `tor-browser`, the `$(TOR_BROWSER_BUILD_N)` value will increase while the `$(BUILD_N)` will stay the same. - `$(TOR_BROWSER_VERSION)` : the published Tor Browser version - - example : `11.5a6`, `11.0.7` + - **example** : `11.5a6`, `11.0.7` +- `$(TBB_BUILD_TAG)` : the `tor-browser-build` build tag used to build a given Tor Browser version + - **example** : `tbb-12.5a7-build1` </details> -**NOTE** It is assumed that the `tor-browser` rebase and security backport tasks have been completed +**NOTE** It is assumed that the `tor-browser` stable rebase and security backport tasks have been completed <details> - <summary>Build Updates</summary> + <summary>Building</summary> ### tor-browser-build: https://gitlab.torproject.org/tpo/applications/tor-browser-build.git Tor Browser Alpha (and Nightly) are on the `main` branch @@ -44,7 +50,7 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - [ ] `steps/tor-browser/git_hash` : update with `HEAD` commit of project's `tor-browser` branch - [ ] `steps/fenix/git_hash` : update with `HEAD` commit of project's `fenix-torbrowserstringsxml` branch - [ ] Update Android-specific build configs - - [ ] ***(Optional)*** Update `projects/geckoview/config` + - [ ] Update `projects/geckoview/config` - [ ] `browser_build` : update to match `tor-browser` tag - [ ] ***(Optional)*** `var/geckoview_version` : update to latest `$(ESR_VERSION)` if rebased - [ ] ***(Optional)*** Update `projects/tor-android-service/config` @@ -56,7 +62,6 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - [ ] `android_components_build` : update to match alpha android-components tag - [ ] ***(Optional)*** Update `projects/fenix/config` - [ ] `fenix_build` : update to match fenix tag - - [ ] ***(Optional)*** `var/fenix_version` : update to latest `$(ESR_VERSION)` if rebased - [ ] Update allowed_addons.json by running (from `tor-browser-build` root): - `./tools/fetch_allowed_addons.py > projects/browser/allowed_addons.json` - [ ] Update common build configs @@ -79,14 +84,13 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - [ ] ***(Optional)*** Update `projects/go/config` - [ ] `version` : update go version - [ ] `input_files/sha256sum` for `go` : update sha256sum of archive (sha256 sums are displayed on the go download page) - - [ ] Update the manual : https://gitlab.torproject.org/tpo/web/manual/-/jobs/ - - [ ] Download the `artifacts.zip` file from latest build stage row (download icon button on the right) - - [ ] Rename it to `manual_$PIPELINEID.zip` - - [ ] Upload it to people.tpo - - [ ] Update `projects/manual/config` - - [ ] Change the version to `$PIPELINEID` - - [ ] Update the hash in the input_files section - - [ ] Update the URL if you have uploaded to a different people.tpo home + - [ ] Check for manual updates by running (from `tor-browser-build` root): `./tools/fetch-manual.py` + - [ ] ***(Optional)*** If new version is available: + - [ ] Upload the downloaded `manual_$PIPELINEID.zip` file to people.tpo + - [ ] Update `projects/manual/config`: + - [ ] Change the `version` to `$PIPELINEID` + - [ ] Update `sha256sum` in the `input_files` section + - [ ] ***(Optional)*** Update the URL if you have uploaded to a different people.tpo home - [ ] Update `ChangeLog.txt` - [ ] Ensure ChangeLog.txt is sync'd between alpha and stable branches - [ ] Check the linked issues: ask people to check if any are missing, remove the not fixed ones @@ -94,19 +98,26 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - Make sure you have `requests` installed (e.g., `apt install python3-requests`) - The first time you run this script you will need to generate an access token; the script will guide you - [ ] Copy the output of the script to the beginning of `ChangeLog.txt` and adjust its output - - If you used the issue number, you will need to write the Tor Browser version manually - - [ ] Include any version updates for: - - [ ] translations - - [ ] OpenSSL - - [ ] NoScript + - **NOTE** : If you used the issue number, you will need to write the Tor Browser version manually + - [ ] ***(Optional)*** Under `All Platforms` include any version updates for: + - [ ] Translations + - [ ]OpenSSL + - [ ]NoScript + - [ ]zlib + - [ ] tor daemon + - [ ] ***(Optional)*** Under `Windows + macOS + Linux` include updates for: + - [ ] Firefox + - [ ] ***(Optional)*** Under `Android`, include updates for: + - [ ] Geckoview + - [ ] ***(Optional)*** Under `Build System/All Platforms` include updates for: - [ ] Go - - [ ] zlib - - [ ] Include any ESR rebase for Firefox and GeckoView - [ ] Open MR with above changes -- [ ] Begin build on `$(BUILD_SERVER)` (fix any issues which come up and update MR) - [ ] Merge - [ ] Sign/Tag commit: `make torbrowser-signtag-alpha` - [ ] Push tag to `origin` +- [ ] Begin build on `$(BUILD_SERVER)` (fix any issues in subsequent MRs) +- [ ] **TODO** Submit build-tag to Mullvad build infra +- [ ] Ensure builders have matching builds </details> @@ -118,6 +129,10 @@ Tor Browser Alpha (and Nightly) are on the `main` branch <details> <summary>email template</summary> + Subject: + Tor Browser $(TOR_BROWSER_VERION) (Android, Windows, macOS, Linux) + + Body: Hello All, Unsigned Tor Browser $(TOR_BROWSER_VERSION) alpha candidate builds are now available for testing: @@ -126,15 +141,15 @@ Tor Browser Alpha (and Nightly) are on the `main` branch The full changelog can be found here: - - https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/main… + - https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/blob/$(T… </details> - [ ] Email tor-qa mailing list: tor-qa(a)lists.torproject.org - - Additional information: + - ***(Optional)*** Additional information: - [ ] Note any new functionality which needs testing - [ ] Link to any known issues -- [ ] ***(Optional, only around build/packaging changes)*** Email downstream consumers: +- [ ] ***(Optional, only around build/packaging changes)*** Email packagers: - Recipients: - Tails dev mailing list: tails-dev(a)boum.org - Guardian Project: nathan(a)guardianproject.info @@ -142,7 +157,7 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - FreeBSD port: freebsd(a)sysctl.cz  - OpenBSD port: caspar(a)schutijser.com  - [ ] Note any changes which may affect packaging/downstream integration -- [ ] Email upstream stakeholders: +- [ ] Email external partners: - ***(Optional, after ESR migration)*** Cloudflare: ask-research(a)cloudflare.com - **NOTE** : We need to provide them with updated user agent string so they can update their internal machinery to prevent Tor Browser users from getting so many CAPTCHAs @@ -151,11 +166,9 @@ Tor Browser Alpha (and Nightly) are on the `main` branch <details> <summary>Signing</summary> -### signing + publishing -- [ ] Ensure builders have matching builds +### signing +- **NOTE** : In practice, it's most efficient to have the blog post and website updates ready to merge, since signing doesn't take very long - [ ] On `$(STAGING_SERVER)`, ensure updated: - - [ ] `tor-browser-build/tools/signing/set-config` - - `NSS_DB_DIR` : location of the `nssdb7` directory - [ ] `tor-browser-build/tools/signing/set-config.hosts` - `ssh_host_builder` : ssh hostname of machine with unsigned builds - **NOTE** : `tor-browser-build` is expected to be in the `$HOME` directory) @@ -182,7 +195,7 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - [ ] Static update components : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` - [ ] Enable update responses : `sudo -u tb-release ./deploy_update_responses-alpha.sh` - [ ] Remove old release data from following places: - - **NOTE** : Skip this step if the current release is Android or Desktop *only* + - **NOTE** : Skip this step if we need to hold on to older versions for some reason (for example, this is an Andoid or Desktop-only release, or if we need to hold back installers in favor of build-to-build updates if there are signing issues, etc) - [ ] `/srv/cdn-master.torproject.org/htdocs/aus1/torbrowser` - [ ] `/srv/dist-master.torproject.org/htdocs/torbrowser` - [ ] Static update components (again) : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` @@ -236,7 +249,24 @@ Tor Browser Alpha (and Nightly) are on the `main` branch - [ ] Publish after CI passes and website has been updated ### tor-announce mailing list -- [ ] Send an email to tor-announce(a)lists.torproject.org, using the same content as the blog post and subject "Tor Browser $version is released". + <details> + <summary>email template</summary> + + Subject: + New Release: Tor Browser $(TOR_BROWSER_VERSION) (Android, Windows, macOS, Linux) + + Body: + Hi everyone, + + Tor Browser $(TOR_BROWSER_VERSION) has now been published for all platforms. For details please see our blog post: + + - $(BLOG_POST_URL) + + </details> + +- [ ] Email tor-announce mailing list: tor-announce(a)lists.torproject.org + - **(Optional)** Additional information: + - [ ] Link to any known issues </details> ===================================== .gitlab/issue_templates/Release Prep - Tor Browser Stable.md ===================================== @@ -2,33 +2,34 @@ <summary>Explanation of variables</summary> - `$(BUILD_SERVER)` : the server the main builder is using to build a tor-browser release +- `$(BUILDER)` : whomever is building the release on the $(BUILD_SERVER) + - **example** : `pierov` - `$(STAGING_SERVER)` : the server the signer is using to to run the signing process - `$(ESR_VERSION)` : the Mozilla defined ESR version, used in various places for building tor-browser tags, labels, etc - - example : `91.6.0` -- `$(ESR_TAG)` : the Mozilla defined hg (Mercurial) tag associated with `$(ESR_VERSION)` - - exmaple : `FIREFOX_91_7_0esr_BUILD2` -- `$(ESR_TAG_PREV)` : the Mozilla defined hg (Mercurial) tag associated with the previous ESR version when rebasing (ie, the ESR version we are rebasing from) + - **example** : `91.6.0` - `$(TOR_BROWSER_MAJOR)` : the Tor Browser major version - - example : `11` + - **example** : `11` - `$(TOR_BROWSER_MINOR)` : the Tor Browser minor version - - example : either `0` or `5`; Alpha's is always `(Stable + 5) % 10` + - **example** : either `0` or `5`; Alpha's is always `(Stable + 5) % 10` - `$(TOR_BROWSER_VERSION)` : the Tor Browser version in the format - - example: `12.5a3`, `12.0.3` + - **example** : `12.5a3`, `12.0.3` - `$(BUILD_N)` : a project's build revision within a its branch; this is separate from the `$(TOR_BROWSER_BUILD_N)` value; many of the Firefox-related projects have a `$(BUILD_N)` suffix and may differ between projects even when they contribute to the same build. - - example : `build1` + - **example** : `build1` - `$(TOR_BROWSER_BUILD_N)` : the tor-browser build revision for a given Tor Browser release; used in tagging git commits - - example : `build2` - - **NOTE** : A project's `$(BUILD_N)` and `$(TOR_BROWSER_BUILD_N)` may be the same, but it is possible for them to diverge. For example : - - if we have multiple Tor Browser releases on a given ESR branch the two will become out of sync as the `$(BUILD_N)` value will increase, while the `$(TOR_BROWSER_BUILD_N)` value may stay at `build1` (but the `$(TOR_BROWSER_VERSION)` will increase) - - if we have build failures unrelated to `tor-browser`, the `$(TOR_BROWSER_BUILD_N)` value will increase while the `$(BUILD_N)` will stay the same. + - **example** : `build2` + - **NOTE** : A project's `$(BUILD_N)` and `$(TOR_BROWSER_BUILD_N)` may be the same, but it is possible for them to diverge. For example : + - if we have multiple Tor Browser releases on a given ESR branch the two will become out of sync as the `$(BUILD_N)` value will increase, while the `$(TOR_BROWSER_BUILD_N)` value may stay at `build1` (but the `$(TOR_BROWSER_VERSION)` will increase) + - if we have build failures unrelated to `tor-browser`, the `$(TOR_BROWSER_BUILD_N)` value will increase while the `$(BUILD_N)` will stay the same. - `$(TOR_BROWSER_VERSION)` : the published Tor Browser version - - example : `11.5a6`, `11.0.7` + - **example** : `11.5a6`, `11.0.7` +- `$(TBB_BUILD_TAG)` : the `tor-browser-build` build tag used to build a given Tor Browser version + - **example** : `tbb-12.0.7-build1` </details> -**NOTE** It is assumed that the `tor-browser` rebase and security backport tasks have been completed +**NOTE** It is assumed that the `tor-browser` stable rebase and security backport tasks have been completed <details> - <summary>Build Configs</summary> + <summary>Building</summary> ### tor-browser-build: https://gitlab.torproject.org/tpo/applications/tor-browser-build.git Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSER_MINOR)` (and possibly more specific) branches @@ -37,7 +38,7 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE - [ ] `var/torbrowser_version` : update to next version - [ ] `var/torbrowser_build` : update to `$(TOR_BROWSER_BUILD_N)` - [ ] ***(Desktop Only)***`var/torbrowser_incremental_from` : update to previous Desktop version - - **IMPORTANT**: Really *actually* make sure this is the previous Desktop version or else the `make incrementals-*` step will fail + - **IMPORTANT**: Really *actually* make sure this is the previous Desktop version or else the `make torbrowser-incrementals-*` step will fail - [ ] Update Desktop-specific build configs - [ ] Update `projects/firefox/config` - [ ] `browser_build` : update to match `tor-browser` tag @@ -49,7 +50,7 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE - [ ] `steps/tor-browser/git_hash` : update with `HEAD` commit of project's `tor-browser` branch - [ ] `steps/fenix/git_hash` : update with `HEAD` commit of project's `fenix-torbrowserstringsxml` branch - [ ] Update Android-specific build configs - - [ ] ***(Optional)*** Update `projects/geckoview/config` + - [ ] Update `projects/geckoview/config` - [ ] `browser_build` : update to match `tor-browser` tag - [ ] ***(Optional)*** `var/geckoview_version` : update to latest `$(ESR_VERSION)` if rebased - [ ] ***(Optional)*** Update `projects/tor-android-service/config` @@ -58,10 +59,9 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE **NOTE** we don't currently have any of our own patches for this project - [ ] `git_hash` : update to appropriate git commit associated with `$(ESR_VERSION)` - [ ] ***(Optional)*** Update `projects/android-components/config`: - - [ ] `android_components_build` : update to match android-components tag + - [ ] `android_components_build` : update to match stable android-components tag - [ ] ***(Optional)*** Update `projects/fenix/config` - [ ] `fenix_build` : update to match fenix tag - - [ ] ***(Optional)*** `var/fenix_version` : update to latest `$(ESR_VERSION)` if rebased - [ ] Update allowed_addons.json by running (from `tor-browser-build` root): - `./tools/fetch_allowed_addons.py > projects/browser/allowed_addons.json` - [ ] Update common build configs @@ -84,14 +84,13 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE - [ ] ***(Optional)*** Update `projects/go/config` - [ ] `version` : update go version - [ ] `input_files/sha256sum` for `go` : update sha256sum of archive (sha256 sums are displayed on the go download page) - - [ ] Update the manual : https://gitlab.torproject.org/tpo/web/manual/-/jobs/ - - [ ] Download the `artifacts.zip` file from latest build stage row (download icon button on the right) - - [ ] Rename it to `manual_$PIPELINEID.zip` - - [ ] Upload it to people.tpo - - [ ] Update `projects/manual/config` - - [ ] Change the version to `$PIPELINEID` - - [ ] Update the hash in the input_files section - - [ ] Update the URL if you have uploaded to a different people.tpo home + - [ ] Check for manual updates by running (from `tor-browser-build` root): `./tools/fetch-manual.py` + - [ ] ***(Optional)*** If new version is available: + - [ ] Upload the downloaded `manual_$PIPELINEID.zip` file to people.tpo + - [ ] Update `projects/manual/config`: + - [ ] Change the `version` to `$PIPELINEID` + - [ ] Update `sha256sum` in the `input_files` section + - [ ] ***(Optional)*** Update the URL if you have uploaded to a different people.tpo home - [ ] Update `ChangeLog.txt` - [ ] Ensure ChangeLog.txt is sync'd between alpha and stable branches - [ ] Check the linked issues: ask people to check if any are missing, remove the not fixed ones @@ -99,19 +98,26 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE - Make sure you have `requests` installed (e.g., `apt install python3-requests`) - The first time you run this script you will need to generate an access token; the script will guide you - [ ] Copy the output of the script to the beginning of `ChangeLog.txt` and adjust its output - - If you used the issue number, you will need to write the Tor Browser version manually - - [ ] Include any version updates for: - - [ ] translations - - [ ] OpenSSL - - [ ] NoScript + - **NOTE** : If you used the issue number, you will need to write the Tor Browser version manually + - [ ] ***(Optional)*** Under `All Platforms` include any version updates for: + - [ ] Translations + - [ ]OpenSSL + - [ ]NoScript + - [ ]zlib + - [ ] tor daemon + - [ ] ***(Optional)*** Under `Windows + macOS + Linux` include updates for: + - [ ] Firefox + - [ ] ***(Optional)*** Under `Android`, include updates for: + - [ ] Geckoview + - [ ] ***(Optional)*** Under `Build System/All Platforms` include updates for: - [ ] Go - - [ ] zlib - - [ ] Include any ESR rebase for Firefox and GeckoView - [ ] Open MR with above changes -- [ ] Begin build on `$(BUILD_SERVER)` (and fix any issues which come up and update MR) - [ ] Merge - [ ] Sign/Tag commit: `make torbrowser-signtag-release` - [ ] Push tag to `origin` +- [ ] Begin build on `$(BUILD_SERVER)` (fix any issues in subsequent MRs) +- [ ] **TODO** Submit build-tag to Mullvad build infra +- [ ] Ensure builders have matching builds </details> @@ -123,6 +129,10 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE <details> <summary>email template</summary> + Subject: + Tor Browser $(TOR_BROWSER_VERION) (Android, Windows, macOS, Linux) + + Body: Hello All, Unsigned Tor Browser $(TOR_BROWSER_VERSION) release candidate builds are now available for testing: @@ -131,36 +141,31 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE The full changelog can be found here: - - https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/main… + - https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/blob/$(T… </details> - [ ] Email tor-qa mailing list: tor-qa(a)lists.torproject.org - - Additional information: + - ***(Optional)*** Additional information: - [ ] Note any new functionality which needs testing - [ ] Link to any known issues -- [ ] Email downstream consumers: +- [ ] Email packagers: - Recipients: - Tails dev mailing list: tails-dev(a)boum.org - Guardian Project: nathan(a)guardianproject.info - torbrowser-launcher: micah(a)micahflee.com - FreeBSD port: freebsd(a)sysctl.cz  - OpenBSD port: caspar(a)schutijser.com  - - [ ] Note any changes which may affect packaging/downstream integration -- [ ] Email upstream stakeholders: - - ***(Optional, after ESR migration)*** Cloudflare: ask-research(a)cloudflare.com - - **NOTE** : We need to provide them with updated user agent string so they can update their internal machinery to prevent Tor Browser users from getting so many CAPTCHAs + - [ ] ***(Optional)*** Note any changes which may affect packaging/downstream integration </details> <details> <summary>Signing</summary> -### signing + publishing -- [ ] Ensure builders have matching builds +### signing +- **NOTE** : In practice, it's most efficient to have the blog post and website updates ready to merge, since signing doesn't take very long - [ ] On `$(STAGING_SERVER)`, ensure updated: - - [ ] `tor-browser-build/tools/signing/set-config` - - `NSS_DB_DIR` : location of the `nssdb7` directory - [ ] `tor-browser-build/tools/signing/set-config.hosts` - `ssh_host_builder` : ssh hostname of machine with unsigned builds - **NOTE** : `tor-browser-build` is expected to be in the `$HOME` directory) @@ -180,14 +185,14 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE - [ ] On `$(STAGING_SERVER)` in a separate `screen` session, ensure tor daemon is running with SOCKS5 proxy on the default port 9050 - [ ] run do-all-signing script: - `cd tor-browser-build/tools/signing/` - - `./do-all-signing.sh` + - `./do-all-signing.torbrowser` - **NOTE**: at this point the signed binaries should have been copied to `staticiforme` - [ ] Update `staticiforme.torproject.org`: - From `screen` session on `staticiforme.torproject.org`: - [ ] Static update components : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` - [ ] Enable update responses : `sudo -u tb-release ./deploy_update_responses-release.sh` - [ ] Remove old release data from following places: - - **NOTE** : Skip this step if the current release is Android or Desktop *only* + - **NOTE** : Skip this step if we need to hold on to older versions for some reason (for example, this is an Andoid or Desktop-only release, or if we need to hold back installers in favor of build-to-build updates if there are signing issues, etc) - [ ] `/srv/cdn-master.torproject.org/htdocs/aus1/torbrowser` - [ ] `/srv/dist-master.torproject.org/htdocs/torbrowser` - [ ] Static update components (again) : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` @@ -241,7 +246,24 @@ Tor Browser Stable lives in the various `maint-$(TOR_BROWSER_MAJOR).$(TOR_BROWSE - [ ] Publish after CI passes and website has been updated ### tor-announce mailing list -- [ ] Send an email to tor-announce(a)lists.torproject.org, using the same content as the blog post and subject "Tor Browser $version is released". + <details> + <summary>email template</summary> + + Subject: + New Release: Tor Browser $(TOR_BROWSER_VERSION) (Android, Windows, macOS, Linux) + + Body: + Hi everyone, + + Tor Browser $(TOR_BROWSER_VERSION) has now been published for all platforms. For details please see our blog post: + + - $(BLOG_POST_URL) + + </details> + +- [ ] Email tor-announce mailing list: tor-announce(a)lists.torproject.org + - **(Optional)** Additional information: + - [ ] Link to any known issues </details> ===================================== .gitlab/merge_request_templates/default.md ===================================== @@ -2,20 +2,52 @@  -- ### Related Issues - - tor-browser#xxxxx - - tor-browser-build#xxxxx - - etc +### Related Issues +- tor-browser#xxxxx +- mullvad-browser#xxxxx +- tor-browser-build#xxxxx -- ### Backport Timeline - - [ ] **Immediate** - patchsets for critical bug fixes or other major blocker (e.g. fixes for a 0-day exploit) OR patchsets with trivial changes which do not need testing (e.g. fixes for typos or fixes easily verified in a local developer build) - - [ ] **Next Minor Stable Release** - patchset that needs to be verified in nightly before backport - - [ ] **Eventually** - patchset that needs to be verified in alpha before backport - - [ ] **No Backport** - patchset for the next major stable +### Backporting -- ### Issue Tracking - - [ ] Link resolved issues with appropriate [Release Prep issue](https://gitlab.torproject.org/groups/tpo/applications/-/issues/?sort… for changelog generation +#### Timeline +- [ ] **Immediate**: patchset needed as soon as possible +- [ ] **Next Minor Stable Release**: patchset that needs to be verified in nightly before backport +- [ ] **Eventually**: patchset that needs to be verified in alpha before backport +- [ ] **No Backport (preferred)**: patchset for the next major stable -## Change Description +#### (Optional) Justification +- [ ] **Emergency security update**: patchset fixes CVEs, 0-days, etc +- [ ] **Censorship event**: patchset enables censorship circumvention +- [ ] **Critical bug-fix**: patchset fixes a bug in core-functionality +- [ ] **Consistency**: patchset which would make development easier if it were in both the alpha and release branches; developer tools, build system changes, etc +- [ ] **Sponsor required**: patchset required for sponsor +- [ ] **Other**: please explain - \ No newline at end of file +### Issue Tracking +- [ ] Link resolved issues with appropriate [Release Prep issue](https://gitlab.torproject.org/groups/tpo/applications/-/issues/?sort… for changelog generation + +### Review + +#### Request Reviewer + +- [ ] Request review from an applications developer depending on modified system: + - **NOTE**: if the MR modifies multiple areas, please `/cc` all the relevant reviewers (since gitlab only allows 1 reviewer) + - **accessibility** : henry + - **android** : dan + - **build system** : boklm + - **extensions** : ma1 + - **firefox internals (XUL/JS/XPCOM)** : ma1 + - **fonts** : pierov + - **frontend (implementation)** : henry + - **frontend (review)** : donuts, richard + - **localization** : henry, pierov + - **nightly builds** : boklm + - **rebases/release-prep** : dan_b, ma1, pierov, richard + - **security** : ma1 + - **signing** : boklm, richard + - **updater** : pierov + - **misc/other** : pierov, richard + +#### Change Description + + View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-12.5-build2
by richard (＠richard) 21 Jun '23

21 Jun '23

richard pushed new tag tbb-12.5-build2 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-12.5] Bug 40730: Tor Browser 12.5 (build2)
by richard (＠richard) 21 Jun '23

21 Jun '23

richard pushed to branch maint-12.5 at The Tor Project / Applications / tor-browser-build Commits: 0ef39bda by Richard Pospesel at 2023-06-21T15:46:21+00:00 Bug 40730: Tor Browser 12.5 (build2) - updated manual to latest - updated translations - updated allowed_addons.json - tor-browser#41851 - keep circuit panel open when requesting a new circuit - tor-browser#41729 - fix screen readers on windows - tor-browser#41854 - revert fix for spam protection since it breaks some sites due to upstream firefox bug take bug fix for circuit display, revert download spam protection, and fix screen readers on windows - - - - - 6 changed files: - projects/browser/allowed_addons.json - projects/firefox/config - projects/geckoview/config - projects/manual/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/allowed_addons.json ===================================== @@ -17,7 +17,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/34/9734/13299734/13299734.pn…" } ], - "average_daily_users": 980657, + "average_daily_users": 982673, "categories": { "android": [ "experimental", @@ -221,10 +221,10 @@ "category": "recommended" }, "ratings": { - "average": 4.5606, - "bayesian_average": 4.559435650064087, - "count": 5034, - "text_count": 1584 + "average": 4.5607, + "bayesian_average": 4.559536123193746, + "count": 5044, + "text_count": 1586 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/reviews/", "requires_payment": false, @@ -321,7 +321,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/versions/", - "weekly_downloads": 23575 + "weekly_downloads": 22770 }, "notes": null }, @@ -337,7 +337,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/56/7656/6937656/6937656.png?…" } ], - "average_daily_users": 256477, + "average_daily_users": 256947, "categories": { "android": [ "security-privacy" @@ -553,10 +553,10 @@ "category": "recommended" }, "ratings": { - "average": 4.8142, - "bayesian_average": 4.8095378952749845, - "count": 1340, - "text_count": 238 + "average": 4.8119, + "bayesian_average": 4.807250604207324, + "count": 1345, + "text_count": 239 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/reviews/", "requires_payment": false, @@ -641,7 +641,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions/", - "weekly_downloads": 3518 + "weekly_downloads": 3251 }, "notes": null }, @@ -657,7 +657,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/73/4073/5474073/5474073.png?…" } ], - "average_daily_users": 1114212, + "average_daily_users": 1115434, "categories": { "android": [ "security-privacy" @@ -669,7 +669,7 @@ "contributions_url": "https://paypal.me/SupportEFF?utm_content=product-page-contribute&utm_medium…", "created": "2014-05-01T18:23:16Z", "current_version": { - "id": 5564707, + "id": 5580775, "compatibility": { "firefox": { "min": "60.0", @@ -680,7 +680,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-badger17/versions…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-badger17/versions…", "is_strict_compatibility_enabled": false, "license": { "id": 6, @@ -691,22 +691,22 @@ "url": "http://www.gnu.org/licenses/gpl-3.0.html" }, "release_notes": { - "en-US": "<ul><li>Expanded protection for \"cookieblocked\" (slider set to yellow) domains. These domains are allowed to load without access to cookies, as a compromise to avoid breaking websites. However, sometimes the same domain is used to serve both unobjectionable content as well as obnoxious fingerprinters that do not need cookies to track your browsing. Privacy Badger will now fully block these fingerprinters.</li><li>Disabled Google's Topics API by default. The Topics API replaces Federated Learning of Cohorts (FLoC).</li><li>You can now see where Privacy Badger observed tracking by a given domain by clicking on the domain name in the list of tracking domains on the options page</li><li>Fixed various site breakages</li><li>Added Vietnamese translations</li><li>Improved translations (Finnish, French, Hebrew, Persian, European Portuguese, Russian, Spanish)</li></ul>" + "en-US": "<ul><li>Privacy Badger now comes with the largest blocklist yet, thanks to improved tracking detection and continually expanding <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e7679342a72ee118b720d9…" rel=\"nofollow\">pre-training</a>. In addition to learning from tracking techniques like cookies and canvas fingerprinting, Privacy Badger now also learns from the <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/5a177129df8c5230a116e1…" rel=\"nofollow\">Beacon API</a>.</li><li>Fixed blocking trackers from just-closed tabs or from pages you recently navigated away from</li><li>Improved display of tracking domains on the options page on larger screens</li><li>Fixed various site breakages</li><li>Improved Italian translations</li></ul>" }, - "reviewed": "2023-05-16T10:58:52Z", - "version": "2023.5.10", + "reviewed": "2023-06-19T17:01:43Z", + "version": "2023.6.14", "files": [ { - "id": 4109050, - "created": "2023-05-10T19:28:15Z", - "hash": "sha256:8ff7650d1ce133894293d1a3e268bb24d300e77a1c25488ed17846e71d8b33e8", + "id": 4125117, + "created": "2023-06-14T17:05:30Z", + "hash": "sha256:feacbe17f76ebb6be90e9f981f6ae396534818b5c1e14c790d70802ed188738d", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 1975567, + "size": 1998602, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4109050/privacy_badger17-…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4125117/privacy_badger17-…", "permissions": [ "tabs", "http://*/*", @@ -1134,7 +1134,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-05-16T10:58:52Z", + "last_updated": "2023-06-19T17:01:43Z", "name": { "en-US": "Privacy Badger" }, @@ -1180,10 +1180,10 @@ "category": "recommended" }, "ratings": { - "average": 4.8017, - "bayesian_average": 4.798917135524207, - "count": 2239, - "text_count": 429 + "average": 4.7999, + "bayesian_average": 4.797120240256834, + "count": 2244, + "text_count": 430 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/reviews/", "requires_payment": false, @@ -1207,7 +1207,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/versions/", - "weekly_downloads": 16504 + "weekly_downloads": 16215 }, "notes": null }, @@ -1223,7 +1223,7 @@ "picture_url": null } ], - "average_daily_users": 6354698, + "average_daily_users": 6378625, "categories": { "android": [ "security-privacy" @@ -1388,7 +1388,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-06-12T17:49:10Z", + "last_updated": "2023-06-21T13:30:28Z", "name": { "ar": "uBlock Origin", "bg": "uBlock Origin", @@ -1533,10 +1533,10 @@ "category": "recommended" }, "ratings": { - "average": 4.7814, - "bayesian_average": 4.781000601597927, - "count": 15540, - "text_count": 4042 + "average": 4.7817, + "bayesian_average": 4.781300892645942, + "count": 15576, + "text_count": 4053 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/reviews/", "requires_payment": false, @@ -1598,7 +1598,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions/", - "weekly_downloads": 129391 + "weekly_downloads": 126617 }, "notes": null }, @@ -1614,7 +1614,7 @@ "picture_url": null } ], - "average_daily_users": 168582, + "average_daily_users": 168607, "categories": { "android": [ "photos-media" @@ -1713,10 +1713,10 @@ "category": "recommended" }, "ratings": { - "average": 4.4866, - "bayesian_average": 4.481483186522829, - "count": 1122, - "text_count": 422 + "average": 4.4915, + "bayesian_average": 4.486363954483497, + "count": 1121, + "text_count": 420 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/re…", "requires_payment": false, @@ -1738,7 +1738,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/ve…", - "weekly_downloads": 340 + "weekly_downloads": 389 }, "notes": null }, @@ -1754,7 +1754,7 @@ "picture_url": null } ], - "average_daily_users": 88127, + "average_daily_users": 88146, "categories": { "android": [ "experimental", @@ -1892,7 +1892,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions/", - "weekly_downloads": 1678 + "weekly_downloads": 1518 }, "notes": null }, @@ -1908,7 +1908,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/64/9064/12929064/12929064.pn…" } ], - "average_daily_users": 260714, + "average_daily_users": 261388, "categories": { "android": [ "photos-media", @@ -2127,10 +2127,10 @@ "category": "recommended" }, "ratings": { - "average": 4.6502, - "bayesian_average": 4.645509748588421, - "count": 1278, - "text_count": 245 + "average": 4.6521, + "bayesian_average": 4.64742573695812, + "count": 1285, + "text_count": 247 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/reviews/", "requires_payment": false, @@ -2151,7 +2151,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/versions/", - "weekly_downloads": 3782 + "weekly_downloads": 3796 }, "notes": null }, @@ -2174,7 +2174,7 @@ "picture_url": null } ], - "average_daily_users": 111852, + "average_daily_users": 111758, "categories": { "android": [ "other" @@ -2480,7 +2480,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/versions/", - "weekly_downloads": 42 + "weekly_downloads": 29 }, "notes": null }, @@ -2496,7 +2496,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/43/0143/143/143.png?modified…" } ], - "average_daily_users": 308857, + "average_daily_users": 309632, "categories": { "android": [ "performance", @@ -2614,7 +2614,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-05-21T21:36:00Z", + "last_updated": "2023-06-16T07:25:26Z", "name": { "de": "NoScript", "el": "NoScript", @@ -2686,10 +2686,10 @@ "category": "recommended" }, "ratings": { - "average": 4.4035, - "bayesian_average": 4.400795824655386, + "average": 4.4054, + "bayesian_average": 4.402692912971343, "count": 2077, - "text_count": 808 + "text_count": 807 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/reviews/", "requires_payment": false, @@ -2733,7 +2733,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/", - "weekly_downloads": 7459 + "weekly_downloads": 7146 }, "notes": null }, @@ -2749,7 +2749,7 @@ "picture_url": null } ], - "average_daily_users": 151067, + "average_daily_users": 151172, "categories": { "android": [ "performance", @@ -2864,9 +2864,9 @@ "category": "recommended" }, "ratings": { - "average": 3.8996, - "bayesian_average": 3.8953447616895223, - "count": 1136, + "average": 3.9016, + "bayesian_average": 3.897342889562755, + "count": 1138, "text_count": 402 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/revi…", @@ -2886,7 +2886,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/vers…", - "weekly_downloads": 1631 + "weekly_downloads": 1813 }, "notes": null } ===================================== projects/firefox/config ===================================== @@ -15,7 +15,7 @@ var: firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '12.5' browser_branch: '[% c("var/browser_series") %]-1' - browser_build: 2 + browser_build: 4 branding_directory_prefix: 'tb' copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' ===================================== projects/geckoview/config ===================================== @@ -13,7 +13,7 @@ container: var: geckoview_version: 102.12.0esr browser_branch: 12.5-1 - browser_build: 3 + browser_build: 4 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse HEAD") %]' ===================================== projects/manual/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 # To update, see doc/how-to-update-the-manual.txt # Remember to update also the package's hash, with the version! -version: 79869 +version: 85332 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 @@ -17,8 +17,8 @@ var: input_files: - project: container-image - - URL: 'https://people.torproject.org/~pierov/tbb_files/manual_[% c("version") %].zip' + - URL: 'https://people.torproject.org/~richard/tbb_files/manual_[% c("version") %].zip' name: manual - sha256sum: ee4c6e4ce4998736ae44dc3e6f92875a481b9e03860517764ea9af6c2bba24e0 + sha256sum: b1d628f541231e1764cb9b155a7950918e65da6b342f9c9871587284c0e51573 - filename: packagemanual.py name: package_script ===================================== projects/translation/config ===================================== @@ -6,19 +6,19 @@ version: '[% c("abbrev") %]' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 142fc4c709c2c5feee837a8aa7aa8ff89f9a38e1 + git_hash: 481e743d406d38b7cb2504e19e0d5107b1dd8442 targets: nightly: git_hash: 'base-browser' base-browser-fluent: base-browser-fluent: '[% INCLUDE build %]' - git_hash: 5625681dc2e6320f82a3d4037c81421fc642b85a + git_hash: 86657602203218195d7590040d059932175d0291 targets: nightly: git_hash: 'basebrowser-newidentityftl' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: b41ec1d4c1e11668191d9e778ad4732c765bccdd + git_hash: 9eab586de15310d8384e1f3a2dc5adc8932247e4 targets: nightly: git_hash: 'tor-browser' @@ -26,7 +26,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 0391f2fee1299923d67a836043a109656457e0e8 + git_hash: 0d1e2c85507303006e692496f81e164335e3e385 targets: nightly: git_hash: 'fenix-torbrowserstringsxml' ===================================== rbm.conf ===================================== @@ -94,8 +94,8 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '12.5.0' - torbrowser_build: 'build1' + torbrowser_version: '12.5' + torbrowser_build: 'build2' torbrowser_incremental_from: - 12.0.7 - 12.0.6 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… You're receiving this email because of your account on gitlab.torproject.org.

1 0