- tor-commits - lists.torproject.org

[Git][tpo/applications/tor-browser-update-responses][main] 6 commits: release: new version, 15.0.17 (linux-i686)
by ma1 (＠ma1) 28 Jun '26

28 Jun '26

ma1 pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 8df3c149 by hackademix at 2026-06-29T00:49:18+02:00 release: new version, 15.0.17 (linux-i686) - - - - - d2b55a93 by hackademix at 2026-06-29T00:49:19+02:00 release: new version, 15.0.17 (linux-x86_64) - - - - - 7a5ec720 by hackademix at 2026-06-29T00:49:19+02:00 release: new version, 15.0.17 (macos) - - - - - e7013591 by hackademix at 2026-06-29T00:49:20+02:00 release: new version, 15.0.17 (windows-i686) - - - - - 079d4f83 by hackademix at 2026-06-29T00:49:20+02:00 release: new version, 15.0.17 (windows-x86_64) - - - - - 1def78c4 by hackademix at 2026-06-29T00:49:21+02:00 release: new version, 15.0.17 - - - - - 35 changed files: - update_3/release/download-android-aarch64.json - update_3/release/download-android-armv7.json - update_3/release/download-android-x86.json - update_3/release/download-android-x86_64.json - update_3/release/download-linux-i686.json - update_3/release/download-linux-x86_64.json - update_3/release/download-macos.json - update_3/release/download-windows-i686.json - update_3/release/download-windows-x86_64.json - update_3/release/downloads.json - update_3/release/linux-i686/.htaccess - update_3/release/linux-i686/update-15.0.13-15.0.16-linux-i686.xml → update_3/release/linux-i686/update-15.0.14-15.0.17-linux-i686.xml - update_3/release/linux-i686/update-15.0.14-15.0.16-linux-i686.xml → update_3/release/linux-i686/update-15.0.15-15.0.17-linux-i686.xml - update_3/release/linux-i686/update-15.0.15-15.0.16-linux-i686.xml → update_3/release/linux-i686/update-15.0.16-15.0.17-linux-i686.xml - update_3/release/linux-i686/update-15.0.16-linux-i686.xml → update_3/release/linux-i686/update-15.0.17-linux-i686.xml - update_3/release/linux-x86_64/.htaccess - update_3/release/linux-x86_64/update-15.0.14-15.0.16-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.14-15.0.17-linux-x86_64.xml - update_3/release/linux-x86_64/update-15.0.15-15.0.16-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.15-15.0.17-linux-x86_64.xml - update_3/release/linux-x86_64/update-15.0.13-15.0.16-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.16-15.0.17-linux-x86_64.xml - update_3/release/linux-x86_64/update-15.0.16-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.17-linux-x86_64.xml - update_3/release/macos/.htaccess - update_3/release/macos/update-15.0.15-15.0.16-macos.xml → update_3/release/macos/update-15.0.14-15.0.17-macos.xml - update_3/release/macos/update-15.0.13-15.0.16-macos.xml → update_3/release/macos/update-15.0.15-15.0.17-macos.xml - update_3/release/macos/update-15.0.14-15.0.16-macos.xml → update_3/release/macos/update-15.0.16-15.0.17-macos.xml - update_3/release/macos/update-15.0.16-macos.xml → update_3/release/macos/update-15.0.17-macos.xml - update_3/release/windows-i686/.htaccess - update_3/release/windows-i686/update-15.0.13-15.0.16-windows-i686.xml → update_3/release/windows-i686/update-15.0.14-15.0.17-windows-i686.xml - update_3/release/windows-i686/update-15.0.15-15.0.16-windows-i686.xml → update_3/release/windows-i686/update-15.0.15-15.0.17-windows-i686.xml - update_3/release/windows-i686/update-15.0.14-15.0.16-windows-i686.xml → update_3/release/windows-i686/update-15.0.16-15.0.17-windows-i686.xml - update_3/release/windows-i686/update-15.0.16-windows-i686.xml → update_3/release/windows-i686/update-15.0.17-windows-i686.xml - update_3/release/windows-x86_64/.htaccess - update_3/release/windows-x86_64/update-15.0.14-15.0.16-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.14-15.0.17-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.15-15.0.16-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.15-15.0.17-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.13-15.0.16-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.16-15.0.17-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.16-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.17-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-15.0.17-build1
by Pier Angelo Vendrame (＠pierov) 28 Jun '26

28 Jun '26

Pier Angelo Vendrame pushed new tag tbb-15.0.17-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][maint-15.0] Bug 41829: Prepare Tor Browser 15.0.17
by Pier Angelo Vendrame (＠pierov) 28 Jun '26

28 Jun '26

Pier Angelo Vendrame pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build Commits: 3171ccd4 by Pier Angelo Vendrame at 2026-06-28T14:33:47+02:00 Bug 41829: Prepare Tor Browser 15.0.17 - - - - - 5 changed files: - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/tor/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,12 @@ +Tor Browser 15.0.17 - June 29 2026 + * All Platforms + * Updated Tor to 0.4.9.11 + * Updated NoScript to 13.6.25.1984 + * Build System + * All Platforms + * Bug 41821: Update gpg subkeys for boklm [tor-browser-build] + * Bug 41827: Update morgan's keychain with renewed key [tor-browser-build] + Tor Browser 15.0.16 - June 16 2026 * All Platforms * Updated NoScript to 13.6.24.1984 ===================================== projects/browser/config ===================================== @@ -114,12 +114,12 @@ input_files: - filename: dmg-root enable: '[% ! c("var/android") %]' - name: fenix-nightly-apk - URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/06/2026-06-15-21-51-40-fenix… + URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/06/2026-06-27-20-33-48-fenix… enable: '[% c("var/android") %]' - sha256sum: 31a4e67fb6bf998e6259104ea734cdbadad5b4da1ab860722576a03d3e3ec9ab - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.24.1984.xpi + sha256sum: 0f320103ec68bc9b648fd2c5fe3928a600a4a3c3b6eddc7138d2adb22d0c54be + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.25.1984.xpi name: noscript - sha256sum: 2669919f5a67ba17069716a7e7fb258d75b454d47b902f237764549a923aae92 + sha256sum: e6329c6a9a6e4e9d2b56606e34a5eca53b9dda8204a185d562a53885df0b0afc - URL: https://addons.mozilla.org/firefox/downloads/file/4814095/ublock_origin-1.7… name: ublock-origin sha256sum: 47f788a1fc2c014830b30bb0ef9588615701b98c5265fb19b8cf4ba779849feb ===================================== projects/tor/config ===================================== @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' -version: 0.4.9.9 +version: 0.4.9.11 git_hash: 'tor-[% c("version") %]' git_url: https://gitlab.torproject.org/tpo/core/tor.git git_submodule: 1 ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 327118384583e8a3e7136a44fdf2161d3a0ae273 + git_hash: 4432a9ab5c10ba53dc1d3ec9329a73a44446ac4c targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: d045de641ff236415c819b436b829fea34cd096d + git_hash: f1579ea805d3d1af56d394893d26561a2945824c targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: cbe938e98c81ce851aa811fb10ba28953b086a19 + git_hash: 925fa40ece33f0c66b11c41b856fc71a1f8bf25c compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -74,11 +74,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '15.0.16' + torbrowser_version: '15.0.17' torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2026/06/16 01:15:30' + browser_release_date: '2026/06/28 12:30:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: release browser_platforms: @@ -128,11 +128,10 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 15.0.16 - '[% IF c("var/tor-browser") %]15.0.15[% END %]' - 15.0.14 - - '[% IF c("var/tor-browser") %]15.0.13[% END %]' - '[% IF c("var/mullvad-browser") %]15.0.12[% END %]' - - '[% IF c("var/mullvad-browser") %]15.0.11[% END %]' mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/3… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/3… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-152.0a1-16.0-2] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 27 Jun '26

27 Jun '26

Pier Angelo Vendrame pushed to branch tor-browser-152.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: 5b410a2f by Pier Angelo Vendrame at 2026-06-27T11:40:41+02:00 fixup! Firefox preference overrides. BB 45072: Disable XSLT. XSLT eventually is going to be disabled in all major browsers. While Mozilla has not started the process yet, it makes sense for us to do it, since XSLT has been a source of security bugs and fingerprinting vectors in the past. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -476,6 +476,9 @@ pref("dom.push.enabled", false); // See tor-browser#18801. pref("dom.push.serverURL", ""); +// tor-browser#45072: Disable XSLT even before Mozilla does it for Firefox. +pref("dom.xslt.enabled", false); + // Fingerprinting // tor-browser#41797: For release builds, lock RFP // tor-browser#42125: Set (and lock in release) also exempted domains. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/5b410a2… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/5b410a2… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-152.0a1-16.0-2] fixup! BB 44528: Disable the IP Protection feature
by Pier Angelo Vendrame (＠pierov) 25 Jun '26

25 Jun '26

Pier Angelo Vendrame pushed to branch mullvad-browser-152.0a1-16.0-2 at The Tor Project / Applications / Mullvad Browser Commits: 2774e5e6 by Pier Angelo Vendrame at 2026-06-25T17:52:12+02:00 fixup! BB 44528: Disable the IP Protection feature BB 45083: Restore some ipprotections files. Let's restore those for 16.0a8 and defer their removal to 16.0a9. - - - - - 1 changed file: - browser/components/moz.build Changes: ===================================== browser/components/moz.build ===================================== @@ -41,7 +41,7 @@ DIRS += [ "enterprisepolicies", "extensions", # Exclude "genai" component. tor-browser#44045. - # Exclude "ipprotection" component. tor-browser#44528. + "ipprotection", "messagepreview", "migration", "mozcachedohttp", View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/277… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/277… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-152.0a1-16.0-2] fixup! BB 44528: Disable the IP Protection feature
by Pier Angelo Vendrame (＠pierov) 25 Jun '26

25 Jun '26

Pier Angelo Vendrame pushed to branch tor-browser-152.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: d678e8c1 by Pier Angelo Vendrame at 2026-06-25T13:49:02+02:00 fixup! BB 44528: Disable the IP Protection feature BB 45083: Restore some ipprotections files. Let's restore those for 16.0a8 and defer their removal to 16.0a9. - - - - - 1 changed file: - browser/components/moz.build Changes: ===================================== browser/components/moz.build ===================================== @@ -44,7 +44,7 @@ DIRS += [ "enterprisepolicies", "extensions", # Exclude "genai" component. tor-browser#44045. - # Exclude "ipprotection" component. tor-browser#44528. + "ipprotection", "messagepreview", "migration", "mozcachedohttp", View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d678e8c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d678e8c… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: Bug 41823: Add version for cbindgen and clang in toolchain updates list
by boklm (＠boklm) 25 Jun '26

25 Jun '26

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 4f672e71 by Nicolas Vigier at 2026-06-25T15:22:50+02:00 Bug 41823: Add version for cbindgen and clang in toolchain updates list In addition to the revision (git hash) that we were already checking. - - - - - f9fed927 by Nicolas Vigier at 2026-06-25T15:25:15+02:00 Bug 41823: Update how we define version and var/llvm_major in llvm-project This will make it easier to automate the update of `version`. Suggested by @pierov in https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/merge_re…. Co-authored-by: Pier Angelo Vendrame <pierov(a)torproject.org> - - - - - 2 changed files: - projects/llvm-project/config - tools/toolchain-updates/extract-firefox-versions-infos Changes: ===================================== projects/llvm-project/config ===================================== @@ -1,10 +1,10 @@ # vim: filetype=yaml sw=2 -version: "[% c('var/llvm_major') %].1.8" +version: "20.1.8" git_hash: 87f0227cb60147a26a1eeb4fb06e3b505e9c7261 git_url: https://github.com/llvm/llvm-project filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' var: - llvm_major: '20' + llvm_major: "[% c('version').split('\\.').0 %]" input_files: ===================================== tools/toolchain-updates/extract-firefox-versions-infos ===================================== @@ -129,9 +129,16 @@ sub get_clang_info { } my $fetch = YAML::XS::LoadFile('taskcluster/kinds/fetch/toolchains.yml'); - set_version_info("clang-$os", $fetch->{$clang_fetch}{fetch}{revision}); + my ($clang_version) = $fetch->{$clang_fetch}{description} =~ m/^clang (.+) source code$/; + set_version_info("clang-${os}_version", $clang_version); + set_version_info("clang-${os}_revision", $fetch->{$clang_fetch}{fetch}{revision}); - set_rbm_info("clang-$os", { + set_rbm_info("clang-${os}_version", { + project => 'llvm-project', + option => 'version', + targets => [ $rbm_os_target{$os} ], + }); + set_rbm_info("clang-${os}_revision", { project => 'llvm-project', option => 'git_hash', targets => [ $rbm_os_target{$os} ], @@ -142,17 +149,23 @@ sub get_clang_info { ## cbindgen sub get_cbindgen_info { my $fetch = YAML::XS::LoadFile('taskcluster/kinds/fetch/toolchains.yml'); - my $revision; + my ($revision, $version); T: foreach my $t (keys %$fetch) { next unless $fetch->{$t}{'fetch-alias'}; if ($fetch->{$t}{'fetch-alias'} eq 'cbindgen') { $revision = $fetch->{$t}{fetch}{revision}; + ($version) = $t =~ m/^cbindgen-(.+)/; last T; } } return 0 unless $revision; - set_version_info('cbindgen', $revision); - set_rbm_info('cbindgen', { + set_version_info('cbindgen_version', $version); + set_rbm_info('cbindgen_version', { + project => 'cbindgen', + option => 'version', + }); + set_version_info('cbindgen_revision', $revision); + set_rbm_info('cbindgen_revision', { project => 'cbindgen', option => 'git_hash', }); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-152.0a1-16.0-2] 2 commits: fixup! TB 42247: Android helpers for the TorProvider
by Pier Angelo Vendrame (＠pierov) 25 Jun '26

25 Jun '26

Pier Angelo Vendrame pushed to branch tor-browser-152.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: e62750ca by Henry Wilkes at 2026-06-25T11:46:27+00:00 fixup! TB 42247: Android helpers for the TorProvider TB 45052: Initialise Tor modules on android in the same order as desktop. - - - - - be028307 by Henry Wilkes at 2026-06-25T11:46:27+00:00 fixup! TB 3455: Add DomainIsolator, for isolating circuit by domain. TB 45052: Move the initialisation of TorDomainIsolator into TorAndroidIntegration. - - - - - 2 changed files: - mobile/shared/components/geckoview/GeckoViewStartup.sys.mjs - toolkit/modules/TorAndroidIntegration.sys.mjs Changes: ===================================== mobile/shared/components/geckoview/GeckoViewStartup.sys.mjs ===================================== @@ -18,8 +18,6 @@ ChromeUtils.defineESModuleGetters(lazy, { RFPHelper: "resource://gre/modules/RFPHelper.sys.mjs", TorAndroidIntegration: "moz-src:///toolkit/modules/TorAndroidIntegration.sys.mjs", - TorDomainIsolator: - "moz-src:///toolkit/components/tor-launcher/TorDomainIsolator.sys.mjs", }); const { debug, warn } = GeckoViewUtils.initLogging("Startup"); @@ -330,8 +328,6 @@ export class GeckoViewStartup { this.#migratePreferences(); lazy.TorAndroidIntegration.init(); - lazy.TorDomainIsolator.init(); - Services.obs.addObserver(this, "browser-idle-startup-tasks-finished"); Services.obs.addObserver(this, "handlersvc-store-initialized"); ===================================== toolkit/modules/TorAndroidIntegration.sys.mjs ===================================== @@ -7,6 +7,8 @@ ChromeUtils.defineESModuleGetters(lazy, { EventDispatcher: "resource://gre/modules/Messaging.sys.mjs", TorConnect: "moz-src:///toolkit/modules/TorConnect.sys.mjs", TorConnectTopics: "moz-src:///toolkit/modules/TorConnect.sys.mjs", + TorDomainIsolator: + "moz-src:///toolkit/components/tor-launcher/TorDomainIsolator.sys.mjs", TorSettingsTopics: "moz-src:///toolkit/modules/TorSettings.sys.mjs", TorProviderBuilder: "moz-src:///toolkit/components/tor-launcher/TorProviderBuilder.sys.mjs", @@ -62,7 +64,7 @@ class TorAndroidIntegrationImpl { /** * Register our listeners. * We want this function to block GeckoView initialization, so it should not be - * async. Any async task should be moved to #deferredInit, instead. + * async. */ init() { if (this.#initialized) { @@ -86,26 +88,21 @@ class TorAndroidIntegrationImpl { Services.obs.addObserver(this, lazy.TorSettingsTopics[topic]); } + // Match the initialisation order from desktop's TorStartupService. + lazy.TorSettings.init().catch(error => { + logger.error("Cannot initailize TorSettings", error); + }); + lazy.TorProviderBuilder.init(); + + lazy.TorConnect.init(); + + lazy.TorDomainIsolator.init(); + // On Android immediately call firstWindowLoaded. This should be safe to // call since it will await the initialisation of the TorProvider set up // by TorProviderBuilder.init. lazy.TorProviderBuilder.firstWindowLoaded(); - - this.#deferredInit(); - } - - /** - * Perform our init tasks that should not block the initialization of - * GeckoView. This function will not be awaited, so errors can only be logged. - */ - async #deferredInit() { - try { - await lazy.TorSettings.init(); - await lazy.TorConnect.init(); - } catch (e) { - logger.error("Cannot initialize TorSettings or TorConnect", e); - } } observe(subj, topic) { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/52dc11… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/52dc11… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-152.0a1-16.0-2-build2
by Pier Angelo Vendrame (＠pierov) 25 Jun '26

25 Jun '26

Pier Angelo Vendrame pushed new tag mullvad-browser-152.0a1-16.0-2-build2 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41811&41812: Prepare Tor&Mullvad Browser 16.0a8.
by Pier Angelo Vendrame (＠pierov) 25 Jun '26

25 Jun '26

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 9b217e29 by Pier Angelo Vendrame at 2026-06-25T11:48:14+02:00 Bug 41811&41812: Prepare Tor&Mullvad Browser 16.0a8. - - - - - 10 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/openssl/config - projects/tor/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,35 @@ +Mullvad Browser 16.0a8 - June 25 2026 + * All Platforms + * Updated Firefox to 152.0a1 + * Updated NoScript to 13.6.24.90101984 + * Bug 44528: Make sure desktop IP Protection is disabled on desktop [tor-browser] + * Bug 44795: Revert BB 27604 patch as not needed anymore [tor-browser] + * Bug 44857: Drop `browser.display.use_system_colors` from our preference list [tor-browser] + * Bug 44896: Review Mozilla 2030929: Remove unused pref privacy.partition.network_state [tor-browser] + * Bug 44955: Use `context-fill` for `about-wordmark.svg` [tor-browser] + * Bug 44956: Switch colours in letterboxing setting icons to match the tab-alignment icons [tor-browser] + * Bug 45016: Several errors about EngineProcess.sys.mjs in 152 [tor-browser] + * Bug 45017: Wrong letterboxing background in 152 [tor-browser] + * Bug 45018: resistfingerprinting not available in appearance.mjs in 152 [tor-browser] + * Bug 45019: ReportBrokenSite startup error in 152 [tor-browser] + * Bug 45037: Potential runtime errors in the search service when changing JS status [tor-browser] + * Bug 45043: Re-add missing changes to settings after 151/152 rebase [tor-browser] + * Bug 45047: Cross-site oracle via worklet rejection error in Safer Mode [tor-browser] + * Bug 45072: Disable XSLT already for 16.0 [tor-browser] + * Bug 41821: Update gpg subkeys for boklm [tor-browser-build] + * Windows + * Bug 552: ABI::Windows::Graphics::Capture::IID_IGraphicsCaptureSession2 is used again in wgc_capture_session.cc [mullvad-browser] + * macOS + * Bug 44728: Bundled fonts are broken on macOS when the GPU process is enabled [tor-browser] + * Linux + * Bug 45048: Backport Bugzilla 2041887: Crash in [@ libfontconfig.so.1] after users upgraded to fontconfig 2.18.0 [tor-browser] + * Build System + * All Platforms + * Bug 41802: Remove the tor daemon requirement for signing [tor-browser-build] + * Bug 41809: Update toolchains for Firefox 152 [tor-browser-build] + * Bug 41813: Disable build artifacts in `make generate_gradle_dependencies_list-geckoview` [tor-browser-build] + * Bug 41827: Update morgan's keychain with renewed key [tor-browser-build] + Mullvad Browser 16.0a7 - June 03 2026 * All Platforms * Updated Firefox to 151.0a1 ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,48 @@ +Tor Browser 16.0a8 - June 25 2026 + * All Platforms + * Updated Tor to 0.4.9.10 + * Updated NoScript to 13.6.24.90101984 + * Updated OpenSSL to 3.5.7 + * Bug 44857: Drop `browser.display.use_system_colors` from our preference list [tor-browser] + * Bug 44896: Review Mozilla 2030929: Remove unused pref privacy.partition.network_state [tor-browser] + * Bug 45018: resistfingerprinting not available in appearance.mjs in 152 [tor-browser] + * Bug 45019: ReportBrokenSite startup error in 152 [tor-browser] + * Bug 45047: Cross-site oracle via worklet rejection error in Safer Mode [tor-browser] + * Bug 45072: Disable XSLT already for 16.0 [tor-browser] + * Bug 41821: Update gpg subkeys for boklm [tor-browser-build] + * Windows + macOS + Linux + * Updated Firefox to 152.0a1 + * Bug 44528: Make sure desktop IP Protection is disabled on desktop [tor-browser] + * Bug 44795: Revert BB 27604 patch as not needed anymore [tor-browser] + * Bug 44844: Use new urlbar CSS variables [tor-browser] + * Bug 44888: Use `--button-opacity-disabled` for disabled styling. [tor-browser] + * Bug 44955: Use `context-fill` for `about-wordmark.svg` [tor-browser] + * Bug 44956: Switch colours in letterboxing setting icons to match the tab-alignment icons [tor-browser] + * Bug 45016: Several errors about EngineProcess.sys.mjs in 152 [tor-browser] + * Bug 45017: Wrong letterboxing background in 152 [tor-browser] + * Bug 45037: Potential runtime errors in the search service when changing JS status [tor-browser] + * Bug 45043: Re-add missing changes to settings after 151/152 rebase [tor-browser] + * macOS + * Bug 44728: Bundled fonts are broken on macOS when the GPU process is enabled [tor-browser] + * Linux + * Bug 45048: Backport Bugzilla 2041887: Crash in [@ libfontconfig.so.1] after users upgraded to fontconfig 2.18.0 [tor-browser] + * Android + * Updated GeckoView to 152.0a1 + * Bug 43856: Fix onBackPressed() deprecation [tor-browser] + * Bug 44091: Add frequent regions to tor connection assist for android [tor-browser] + * Bug 44175: Remove all default browser functionality (Android) [tor-browser] + * Bug 44769: TBA crash screen has firefox asset as well as a "Send crash report" button [tor-browser] + * Build System + * All Platforms + * Bug 41802: Remove the tor daemon requirement for signing [tor-browser-build] + * Bug 41809: Update toolchains for Firefox 152 [tor-browser-build] + * Bug 41813: Disable build artifacts in `make generate_gradle_dependencies_list-geckoview` [tor-browser-build] + * Bug 41827: Update morgan's keychain with renewed key [tor-browser-build] + * Windows + Linux + Android + * Updated Go to 1.26.4 + * Windows + * Bug 41810: Define GetAddrInfoExCancel on mingw [tor-browser-build] + Tor Browser 16.0a7 - June 03 2026 * All Platforms * Updated NoScript to 13.6.19.90401984 ===================================== projects/browser/config ===================================== @@ -87,9 +87,9 @@ input_files: enable: '[% !c("var/android") %]' - filename: dmg-root enable: '[% c("var/macos") %]' - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.19.90401984.x… + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.24.90101984.x… name: noscript - sha256sum: a387b412f24dc3fe3730ab9f0a5a1a4367875a6206e9266012167bc8e67723c9 + sha256sum: 58df96b190024a33785e5af2281994be65c380674049adeaa2318c11add099ee - URL: https://addons.mozilla.org/firefox/downloads/file/4814095/ublock_origin-1.7… name: ublock-origin sha256sum: 47f788a1fc2c014830b30bb0ef9588615701b98c5265fb19b8cf4ba779849feb ===================================== projects/firefox/config ===================================== @@ -23,7 +23,7 @@ var: browser_series: '16.0' browser_rebase: 2 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 3 upstream_firefox_commit: FIREFOX_NIGHTLY_152_END copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' ===================================== projects/geckoview/config ===================================== @@ -26,7 +26,7 @@ var: browser_series: '16.0' browser_rebase: 2 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 3 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.26.3' +version: '1.26.4' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: 1c646875d0aa8799133184ed57cf79ff24bdefe8c8820470602a9d3d6d9192b8 + source_sha256: 4f668a32fbfc1132e6a881fb968c2f1dada631492a339211735fbb255a42602d no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist ===================================== projects/openssl/config ===================================== @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 3.5.6 +version: 3.5.7 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -41,5 +41,5 @@ input_files: - name: '[% c("var/compiler") %]' project: '[% c("var/compiler") %]' - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz' - sha256sum: deae7c80cba99c4b4f940ecadb3c3338b13cb77418409238e57d7f31f2a3b736 + sha256sum: a8c0d28a529ca480f9f36cf5792e2cd21984552a3c8e4aa11a24aa31aeac98e8 name: openssl ===================================== projects/tor/config ===================================== @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' -version: 0.4.9.9 +version: 0.4.9.10 git_hash: 'tor-[% c("version") %]' git_url: https://gitlab.torproject.org/tpo/core/tor.git git_submodule: 1 ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 1d60e454a106f032f83e1c76f7dee5309efe8938 + git_hash: 4432a9ab5c10ba53dc1d3ec9329a73a44446ac4c targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 2d7a502a0fe2ab313e03440999003d21f3df1d20 + git_hash: 565e67ca7ebbf7d1b478bff1a9c6c779023f5211 targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 85e4fdaea34266fdc7f0ef88c68606edc3f280f4 + git_hash: 41c4edad95ca1dca84f3c8d127956545518e00da compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -81,11 +81,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '16.0a7' - torbrowser_build: 'build3' + torbrowser_version: '16.0a8' + torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2026/06/02 12:37:12' + browser_release_date: '2026/06/25 10:00:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: alpha browser_platforms: @@ -131,9 +131,9 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 16.0a7 - 16.0a6 - 16.0a5 - - 16.0a4 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0