- tor-commits - lists.torproject.org

[Git][tpo/applications/mullvad-browser-update-responses][main] 4 commits: alpha: new version, 15.0a2 (linux-x86_64)
by ma1 (＠ma1) 01 Sep '25

01 Sep '25

ma1 pushed to branch main at The Tor Project / Applications / mullvad-browser-update-responses Commits: 5f7d18b5 by hackademix at 2025-09-01T17:57:52+02:00 alpha: new version, 15.0a2 (linux-x86_64) - - - - - a6cd7410 by hackademix at 2025-09-01T17:57:52+02:00 alpha: new version, 15.0a2 (macos) - - - - - 15bad32d by hackademix at 2025-09-01T17:57:53+02:00 alpha: new version, 15.0a2 (windows-x86_64) - - - - - 3b5a988b by hackademix at 2025-09-01T17:57:53+02:00 alpha: new version, 15.0a2 - - - - - 31 changed files: - update_1/alpha/download-linux-x86_64.json - update_1/alpha/download-macos.json - update_1/alpha/download-windows-x86_64.json - update_1/alpha/downloads.json - update_1/alpha/linux-x86_64/.htaccess - − update_1/alpha/linux-x86_64/update-14.5a4-15.0a1-linux-x86_64.xml - − update_1/alpha/linux-x86_64/update-14.5a5-15.0a1-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-14.5a5-15.0a2-linux-x86_64.xml - − update_1/alpha/linux-x86_64/update-14.5a6-15.0a1-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-14.5a6-15.0a2-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-15.0a1-15.0a2-linux-x86_64.xml - − update_1/alpha/linux-x86_64/update-15.0a1-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-15.0a2-linux-x86_64.xml - update_1/alpha/macos/.htaccess - − update_1/alpha/macos/update-14.5a4-15.0a1-macos.xml - − update_1/alpha/macos/update-14.5a5-15.0a1-macos.xml - + update_1/alpha/macos/update-14.5a5-15.0a2-macos.xml - − update_1/alpha/macos/update-14.5a6-15.0a1-macos.xml - + update_1/alpha/macos/update-14.5a6-15.0a2-macos.xml - + update_1/alpha/macos/update-15.0a1-15.0a2-macos.xml - − update_1/alpha/macos/update-15.0a1-macos.xml - + update_1/alpha/macos/update-15.0a2-macos.xml - update_1/alpha/windows-x86_64/.htaccess - − update_1/alpha/windows-x86_64/update-14.5a4-15.0a1-windows-x86_64.xml - − update_1/alpha/windows-x86_64/update-14.5a5-15.0a1-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-14.5a5-15.0a2-windows-x86_64.xml - − update_1/alpha/windows-x86_64/update-14.5a6-15.0a1-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-14.5a6-15.0a2-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-15.0a1-15.0a2-windows-x86_64.xml - − update_1/alpha/windows-x86_64/update-15.0a1-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-15.0a2-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] 6 commits: alpha: new version, 15.0a2 (linux-i686)
by ma1 (＠ma1) 01 Sep '25

01 Sep '25

ma1 pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: dc9fa649 by hackademix at 2025-09-01T17:56:11+02:00 alpha: new version, 15.0a2 (linux-i686) - - - - - 25195a5a by hackademix at 2025-09-01T17:56:12+02:00 alpha: new version, 15.0a2 (linux-x86_64) - - - - - c7192a84 by hackademix at 2025-09-01T17:56:12+02:00 alpha: new version, 15.0a2 (macos) - - - - - 14a067ef by hackademix at 2025-09-01T17:56:13+02:00 alpha: new version, 15.0a2 (windows-i686) - - - - - 2d6691d8 by hackademix at 2025-09-01T17:56:13+02:00 alpha: new version, 15.0a2 (windows-x86_64) - - - - - 50e88572 by hackademix at 2025-09-01T17:56:14+02:00 alpha: new version, 15.0a2 - - - - - 43 changed files: - update_3/alpha/download-android-aarch64.json - update_3/alpha/download-android-armv7.json - update_3/alpha/download-android-x86.json - update_3/alpha/download-android-x86_64.json - update_3/alpha/download-linux-i686.json - update_3/alpha/download-linux-x86_64.json - update_3/alpha/download-macos.json - update_3/alpha/download-windows-i686.json - update_3/alpha/download-windows-x86_64.json - update_3/alpha/downloads.json - update_3/alpha/linux-i686/.htaccess - update_3/alpha/linux-i686/update-14.5a4-15.0a1-linux-i686.xml → update_3/alpha/linux-i686/update-14.5a5-15.0a2-linux-i686.xml - update_3/alpha/linux-i686/update-14.5a5-15.0a1-linux-i686.xml → update_3/alpha/linux-i686/update-14.5a6-15.0a2-linux-i686.xml - update_3/alpha/linux-i686/update-14.5a6-15.0a1-linux-i686.xml → update_3/alpha/linux-i686/update-15.0a1-15.0a2-linux-i686.xml - update_3/alpha/linux-i686/update-15.0a1-linux-i686.xml → update_3/alpha/linux-i686/update-15.0a2-linux-i686.xml - update_3/alpha/linux-x86_64/.htaccess - update_3/alpha/linux-x86_64/update-14.5a4-15.0a1-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-14.5a5-15.0a2-linux-x86_64.xml - update_3/alpha/linux-x86_64/update-14.5a5-15.0a1-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-14.5a6-15.0a2-linux-x86_64.xml - update_3/alpha/linux-x86_64/update-14.5a6-15.0a1-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-15.0a1-15.0a2-linux-x86_64.xml - update_3/alpha/linux-x86_64/update-15.0a1-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-15.0a2-linux-x86_64.xml - update_3/alpha/macos/.htaccess - update_3/alpha/macos/update-14.5a6-15.0a1-macos.xml → update_3/alpha/macos/update-14.5a5-15.0a2-macos.xml - update_3/alpha/macos/update-14.5a4-15.0a1-macos.xml → update_3/alpha/macos/update-14.5a6-15.0a2-macos.xml - update_3/alpha/macos/update-14.5a5-15.0a1-macos.xml → update_3/alpha/macos/update-15.0a1-15.0a2-macos.xml - update_3/alpha/macos/update-15.0a1-macos.xml → update_3/alpha/macos/update-15.0a2-macos.xml - update_3/alpha/windows-i686/.htaccess - − update_3/alpha/windows-i686/update-14.5a4-15.0a1-windows-i686.xml - − update_3/alpha/windows-i686/update-14.5a5-15.0a1-windows-i686.xml - + update_3/alpha/windows-i686/update-14.5a5-15.0a2-windows-i686.xml - − update_3/alpha/windows-i686/update-14.5a6-15.0a1-windows-i686.xml - + update_3/alpha/windows-i686/update-14.5a6-15.0a2-windows-i686.xml - + update_3/alpha/windows-i686/update-15.0a1-15.0a2-windows-i686.xml - − update_3/alpha/windows-i686/update-15.0a1-windows-i686.xml - + update_3/alpha/windows-i686/update-15.0a2-windows-i686.xml - update_3/alpha/windows-x86_64/.htaccess - − update_3/alpha/windows-x86_64/update-14.5a4-15.0a1-windows-x86_64.xml - − update_3/alpha/windows-x86_64/update-14.5a5-15.0a1-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-14.5a5-15.0a2-windows-x86_64.xml - − update_3/alpha/windows-x86_64/update-14.5a6-15.0a1-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-14.5a6-15.0a2-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-15.0a1-15.0a2-windows-x86_64.xml - − update_3/alpha/windows-x86_64/update-15.0a1-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-15.0a2-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: Bug 41064: Update tools/signing/README
by morgan (＠morgan) 01 Sep '25

01 Sep '25

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 7d122642 by Nicolas Vigier at 2025-09-01T16:53:45+02:00 Bug 41064: Update tools/signing/README - - - - - 7b232a13 by Nicolas Vigier at 2025-09-01T17:22:25+02:00 Bug 41064: Add tools/signing/machines-setup/README.md - - - - - 2 changed files: - tools/signing/README - + tools/signing/machines-setup/README.md Changes: ===================================== tools/signing/README ===================================== @@ -1,10 +1,11 @@ -The files in this directory are a large part of what we use when signing -releases. The scripts are meant to be templates, though, at the moment -omitting specific paths and credential information. +This directory contains the scripts used to sign Tor Browser, Mullvad +Browser and Tor VPN. -Additionally, when starting to use them for your own signing setup don't forget -to adapt the locale list if needed. The entitlement files, however, are kept -up-to-date. +For information about using those scripts, see the `Release Prep` gitlab +issue templates in the `.gitlab/issue_templates` directory. + +The scripts in the machines-setup/ directory are used to setup the +signing machines (see README.md file in that directory for more details). The scripts in the nightly/ directory are used to sign and publish the nightly updates. ===================================== tools/signing/machines-setup/README.md ===================================== @@ -0,0 +1,37 @@ +This directory contains the scripts used to setup the signing machines. + +It handles everything in the setup, except installation of the signing +keys, which is done manually. + +# Deploying changes on the signing machines + +To deploy changes on the signing machines you need: +* access to the `root` account (either running `su -` and entering the + `root` password, or having your ssh key in `~root/.ssh/authorized_keys`) +* access to the `setup` account via ssh (the `setup-signing-machine` + script should be updated to add your key there) + +Deploying changes to the signing machines is done with the following two scripts: +* upload-tbb-to-signing-machine +* setup-signing-machine + +## upload-tbb-to-signing-machine + +This script should be run from your local machine (from which you access +the signing machine). It will create a tarball of tor-browser-build from +the `HEAD` commit, upload it to the signing machine and extract it in +the `/signing` directory. In addition it will download and upload to +the signing machine the tools used in the signing process. + +Before running the script you may edit the line +`signing_machine='linux-signer'` to change the hostname of the signing +machine. + +## setup-signing-machine + +This script should be run on the signing machine as root. It will install +required packages, create user accounts and setup signing tools. + +After running `upload-tbb-to-signing-machine`, open a root shell on the +signing machine and run +`/signing/tor-browser-build/tools/signing/machines-setup/setup-signing-machine`. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.2.0esr-15.0-1] 2 commits: fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in...
by morgan (＠morgan) 01 Sep '25

01 Sep '25

morgan pushed to branch tor-browser-140.2.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: d6e3fcfd by Henry Wilkes at 2025-09-01T16:30:49+01:00 fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection TB 44145: Use --icon-color and --icon-color-critical for the connection status icons. - - - - - cf3594e3 by Henry Wilkes at 2025-09-01T16:32:22+01:00 fixup! TB 27476: Implement about:torconnect captive portal within Tor Browser TB 44145: Use --icon-color and --icon-color-critical for the connection status icons. - - - - - 2 changed files: - browser/components/torpreferences/content/torPreferences.css - toolkit/components/torconnect/content/torConnectTitlebarStatus.css Changes: ===================================== browser/components/torpreferences/content/torPreferences.css ===================================== @@ -57,8 +57,8 @@ button.spoof-button-disabled { height: 18px; margin-inline-end: 8px; -moz-context-properties: fill, stroke; - fill: currentColor; - stroke: currentColor; + fill: var(--icon-color); + stroke: var(--icon-color); } #network-status-internet-area .network-status-icon { @@ -79,13 +79,7 @@ button.spoof-button-disabled { #network-status-tor-area.status-blocked .network-status-icon { /* Same as .tor-connect-status-potentially-blocked. */ - stroke: #c50042; -} - -@media (prefers-color-scheme: dark) { - #network-status-tor-area.status-blocked .network-status-icon { - stroke: #ff9aa2; - } + stroke: var(--icon-color-critical); } .network-status-label { ===================================== toolkit/components/torconnect/content/torConnectTitlebarStatus.css ===================================== @@ -12,8 +12,8 @@ #tor-connect-titlebar-status img { -moz-context-properties: fill, stroke; - fill: currentColor; - stroke: currentColor; + fill: var(--icon-color); + stroke: var(--icon-color); width: 16px; height: 16px; object-fit: none; @@ -30,21 +30,23 @@ * we assign the potentially-blocked class, we do *not* expect to be connected * at the same time, so we only expect this first frame to be visible in this * state. */ - stroke: #c50042; -} - -@media (prefers-color-scheme: dark) { - #tor-connect-titlebar-status.tor-connect-status-potentially-blocked img { - stroke: #ff9aa2; - } + stroke: var(--icon-color-critical); } #tor-connect-titlebar-status.tor-connect-status-connected img { object-position: var(--tor-connected-offset); } -#tor-connect-titlebar-status.tor-connect-status-connected { - color: var(--tor-text-color); +@media not ((prefers-contrast) or (forced-colors)) { + /* Make the connected text and icon purple. */ + #tor-connect-titlebar-status.tor-connect-status-connected { + color: var(--tor-text-color); + } + + #tor-connect-titlebar-status.tor-connect-status-connected img { + fill: var(--tor-text-color); + stroke: var(--tor-text-color); + } } @keyframes onion-not-connected-to-connected { @@ -63,6 +65,7 @@ } #tor-connect-titlebar-status.tor-connect-status-connected.tor-connect-status-animate-transition img { + transition: fill 1000ms, stroke 1000ms; animation-name: onion-not-connected-to-connected; animation-delay: 200ms; animation-fill-mode: both; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/3cf311… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/3cf311… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41517: Fix use of authorized_keys in setup-signing-machine
by morgan (＠morgan) 01 Sep '25

01 Sep '25

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 1679268e by Nicolas Vigier at 2025-09-01T16:35:11+02:00 Bug 41517: Fix use of authorized_keys in setup-signing-machine Fixing a regression from ca3c988042b00424f53a0c9bb85ee4d2cc172282: all keys added to the setup account should be set with a single call to the `authorized_keys` function. - - - - - 1 changed file: - tools/signing/machines-setup/setup-signing-machine Changes: ===================================== tools/signing/machines-setup/setup-signing-machine ===================================== @@ -69,8 +69,7 @@ install_packages build-essential rsync unzip install_packages sudo vim tmux gnupg create_user setup -authorized_keys setup boklm-yk1.pub -authorized_keys setup morgan.pub +authorized_keys setup boklm-yk1.pub morgan.pub mkdir -p /signing chmod 0755 /signing chown setup /signing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/1… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.2.0esr-15.0-1] 3 commits: fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in...
by morgan (＠morgan) 01 Sep '25

01 Sep '25

morgan pushed to branch tor-browser-140.2.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 398f7ef4 by Henry Wilkes at 2025-09-01T15:08:11+00:00 fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection TB 42025: Use new purple colours. - - - - - ad2c3e94 by Henry Wilkes at 2025-09-01T15:08:11+00:00 fixup! TB 27476: Implement about:torconnect captive portal within Tor Browser TB 42025: Use new purple colours. - - - - - 3cf3111e by Henry Wilkes at 2025-09-01T15:08:11+00:00 fixup! TB 41817: tor-browser semantic colors. TB 42025: Use new purple colours. - - - - - 3 changed files: - browser/components/torpreferences/content/torPreferences.css - toolkit/components/torconnect/content/torConnectTitlebarStatus.css - toolkit/themes/shared/tor-colors.css Changes: ===================================== browser/components/torpreferences/content/torPreferences.css ===================================== @@ -20,7 +20,10 @@ button.spoof-button-disabled { width: 16px; height: 16px; -moz-context-properties: fill; - fill: var(--tor-accent-color); + /* Use --tor-text-color. This will have good contrast for this small icon + * against the background. And it will match the surrounding text for high + * contrast and forced colour themes. */ + fill: var(--tor-text-color); content: url("chrome://global/skin/icons/loading.svg"); } @@ -168,7 +171,7 @@ button.spoof-button-disabled { * using it for text colors, so we only enable these rules when not using a * high contrast theme or forced colors. */ .bridge-status-badge.bridge-status-connected { - color: var(--tor-accent-color); + color: var(--tor-text-color); } .bridge-status-badge.bridge-status-current-built-in { ===================================== toolkit/components/torconnect/content/torConnectTitlebarStatus.css ===================================== @@ -44,7 +44,7 @@ } #tor-connect-titlebar-status.tor-connect-status-connected { - color: var(--tor-accent-color); + color: var(--tor-text-color); } @keyframes onion-not-connected-to-connected { ===================================== toolkit/themes/shared/tor-colors.css ===================================== @@ -1,21 +1,13 @@ @namespace xul "http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"; :root { - /* Photon colors not available in Firefox. */ - --purple-30: #c069ff; - --purple-40: #ad3bff; - --purple-50: #9400ff; - --purple-60: #8000d7; - --purple-70: #6200a4; - --purple-80: #440071; - --purple-90: #25003e; - /* On light backgrounds. */ - --tor-accent-color-light: var(--purple-60); - --tor-accent-color-hover-light: var(--purple-70); - --tor-accent-color-active-light: var(--purple-80); - - /* Acorn color grey light 05. */ + --tor-accent-color-light: var(--color-purple-60); + --tor-accent-color-hover-light: var(--color-purple-70); + --tor-accent-color-active-light: var(--color-purple-80); + /* Color for text on --background-color-canvas. */ + --tor-text-color-light: var(--color-purple-60); + /* Buttons. */ --tor-button-text-color-light: var(--color-gray-05); --tor-button-text-color-hover-light: var(--color-gray-05); --tor-button-text-color-active-light: var(--color-gray-05); @@ -23,26 +15,27 @@ --tor-button-background-color-hover-light: var(--tor-accent-color-hover-light); --tor-button-background-color-active-light: var(--tor-accent-color-active-light); --tor-focus-outline-color-light: var(--tor-accent-color-light); + /* Links. */ --tor-link-color-light: var(--tor-accent-color-light); --tor-link-color-hover-light: var(--tor-accent-color-hover-light); --tor-link-color-active-light: var(--tor-accent-color-active-light); /* On dark backgrounds. */ - /* TODO: Need a dark theme purple color that gets *lighter* with hover and - * active states, see tor-browser#42025 */ - --tor-accent-color-dark: var(--purple-30); - --tor-accent-color-hover-dark: var(--purple-40); - --tor-accent-color-active-dark: var(--purple-50); - - /* TODO: Use a dark text color for dark theme. tor-browser#41787. */ - --tor-button-text-color-dark: var(--color-gray-05); - --tor-button-text-color-hover-dark: var(--color-gray-05); - --tor-button-text-color-active-dark: var(--color-gray-05); + --tor-accent-color-dark: var(--color-purple-30); + --tor-accent-color-hover-dark: var(--color-purple-20); + --tor-accent-color-active-dark: var(--color-purple-10); + /* Color for text on --background-color-canvas. */ + --tor-text-color-dark: var(--color-purple-20); + /* Buttons. */ + --tor-button-text-color-dark: var(--color-gray-100); + --tor-button-text-color-hover-dark: var(--color-gray-100); + --tor-button-text-color-active-dark: var(--color-gray-100); --tor-button-background-color-dark: var(--tor-accent-color-dark); --tor-button-background-color-hover-dark: var(--tor-accent-color-hover-dark); --tor-button-background-color-active-dark: var(--tor-accent-color-active-dark); --tor-focus-outline-color-dark: var(--tor-accent-color-dark); + /* Links. */ --tor-link-color-dark: var(--tor-accent-color-dark); --tor-link-color-hover-dark: var(--tor-accent-color-hover-dark); --tor-link-color-active-dark: var(--tor-accent-color-active-dark); @@ -61,6 +54,10 @@ var(--tor-accent-color-active-light), var(--tor-accent-color-active-dark) ); + --tor-text-color: light-dark( + var(--tor-text-color-light), + var(--tor-text-color-dark) + ); --tor-button-text-color: light-dark( var(--tor-button-text-color-light), var(--tor-button-text-color-dark) @@ -110,6 +107,9 @@ --tor-accent-color-hover: var(--color-accent-primary-hover); --tor-accent-color-active: var(--color-accent-primary-active); + /* Match surrounding text. */ + --tor-text-color: currentColor; + /* Use Firefox design system primary button colors. */ --tor-button-text-color: var(--button-text-color-primary); --tor-button-text-color-hover: var(--button-text-color-primary-hover); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/2e79fc… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/2e79fc… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41522: Fix issue in tools/signing/wrappers/sign-apk
by boklm (＠boklm) 01 Sep '25

01 Sep '25

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: d7536498 by Nicolas Vigier at 2025-09-01T15:03:50+02:00 Bug 41522: Fix issue in tools/signing/wrappers/sign-apk Fix issue introduced in 821c192ed9def86b92a20bc8878a7c519230996f. - - - - - 1 changed file: - tools/signing/wrappers/sign-apk Changes: ===================================== tools/signing/wrappers/sign-apk ===================================== @@ -23,7 +23,7 @@ case "$SIGNING_PROJECTNAME" in esac android_signing_key_dir=/home/signing-apk/keys -android_signing_key_path="$android_signing_key_dir/$pname_$tbb_version_type.p12" +android_signing_key_path="$android_signing_key_dir/tba_$tbb_version_type.p12" test -n "$SIGNING_PROJECTNAME" && test "$SIGNING_PROJECTNAME" = 'torvpn' && \ android_signing_key_path="$android_signing_key_dir/torvpn.p12" test -f "$android_signing_key_path" || exit_error "$android_signing_key_path is missing" View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-15.0a2-build1
by ma1 (＠ma1) 29 Aug '25

29 Aug '25

ma1 pushed new tag mb-15.0a2-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-15.0a2-build1
by ma1 (＠ma1) 29 Aug '25

29 Aug '25

ma1 pushed new tag tbb-15.0a2-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41525,41526: Release Prep Tor,Mullvad Browser 15.0a2
by ma1 (＠ma1) 29 Aug '25

29 Aug '25

ma1 pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: f04ab8cd by hackademix at 2025-08-29T17:41:20+02:00 Bug 41525,41526: Release Prep Tor,Mullvad Browser 15.0a2 - - - - - 11 changed files: - projects/application-services/config - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/manual/config - projects/openssl/config - projects/translation/config - rbm.conf Changes: ===================================== projects/application-services/config ===================================== @@ -16,7 +16,7 @@ container: use_container: 1 var: - build_number: 4 + build_number: 5 # This should be updated when the list of gradle dependencies is changed. gradle_dependencies_version: 12 gradle_version: 8.13 ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,48 @@ +Mullvad Browser 15.0a2 - August 29 2025 + * All Platforms + * Updated Firefox to 140.2.0esr + * Updated NoScript to 13.0.9 + * Bug 451: The restart to apply button doesn't work [mullvad-browser] + * Bug 460: Rebase Mullvad Browser alpha onto 140.2.0esr [mullvad-browser] + * Bug 43111: Delete our webextensions for search engines when Bug 1885953 is fixed upstream [tor-browser] + * Bug 43728: Update search engine icon sizes [tor-browser] + * Bug 43795: Restore the URL classifier XPCOM components. [tor-browser] + * Bug 43844: Security level shield icon should be flipped for RTL locales [tor-browser] + * Bug 43864: Remove features from the unified search button [tor-browser] + * Bug 43874: Incorporate our unified extension button hiding logic into mozilla's changes for ESR 140 [tor-browser] + * Bug 43902: Hide Sidebar buttons [tor-browser] + * Bug 43903: Report broken site is disabled rather than hidden [tor-browser] + * Bug 44030: Security Level selector does not get confirmation before restarting [tor-browser] + * Bug 44034: Update string used for checkbox on New Identity confirmation dialog [tor-browser] + * Bug 44040: Modify nsIPrompt and the commonDialog code to allow destructive buttons [tor-browser] + * Bug 44041: Letterboxing causes greyed out alert background to be mis-aligned [tor-browser] + * Bug 44045: Drop AI and machine learning components [tor-browser] + * Bug 44048: Backport Bug 1979608 [tor-browser] + * Bug 44090: Several of our XUL pages cause a crash because of missing CSP [tor-browser] + * Bug 44100: Backport Security Fixes from Firefox 142 [tor-browser] + * Bug 44106: Make sure background tasks are not used for shutdown cleanup [tor-browser] + * Bug 44125: Do not offer to save signatures by default in Private Browsing Mode [tor-browser] + * Bug 44140: Align PDF changes to 140esr [tor-browser] + * Windows + * Bug 44046: Replace BASE_BROWSER_UPDATE with BASE_BROWSER_VERSION in the font visibility list [tor-browser] + * Bug 44062: Force touch enabled on Windows and Android [tor-browser] + * Build System + * All Platforms + * Bug 44067: Move --enable-geckodriver only to Linux-only mozconfigs [tor-browser] + * Bug 44103: git's export-subst is a reproducibility problem [tor-browser] + * Bug 44104: Don't run linter when there are no overall changes [tor-browser] + * Bug 26408: Make MAR signature checks clearer when creating incremental MAR files [tor-browser-build] + * Bug 40697: Delete repackage_browser.sh [tor-browser-build] + * Bug 40698: Update locale in tbb_version.json [tor-browser-build] + * Bug 41517: Add morgan's key to the setup account on the signing machine [tor-browser-build] + * Bug 41529: Automate publishing browser release branch and tags to Mullvad repository [tor-browser-build] + * Bug 41534: Copy geckodriver only for Linux x86-64 [tor-browser-build] + * Bug 41539: Update Ubuntu version used to run mmdebstrap to 24.04.3 [tor-browser-build] + * Bug 40087: Downloaded files getting stricter permissions than expected [rbm] + * macOS + * Bug 41527: Update libdmg-hfsplus and enable LZMA compression on dmgs [tor-browser-build] + * Bug 41538: Bump macOS SDK to 15.5 [tor-browser-build] + Mullvad Browser 15.0a1 - July 29 2025 * All Platforms * Updated Firefox to 140.1.0esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,87 @@ +Tor Browser 15.0a2 - August 29 2025 + * All Platforms + * Updated NoScript to 13.0.9 + * Updated OpenSSL to 3.5.2 + * Bug 43727: Update moz-toggle customisation for ESR 140 [tor-browser] + * Bug 43832: Drop eslint-env [tor-browser] + * Bug 43864: Remove features from the unified search button [tor-browser] + * Bug 44045: Drop AI and machine learning components [tor-browser] + * Bug 44048: Backport Bug 1979608 [tor-browser] + * Bug 44069: Update `meek-azure` related strings to `meek` [tor-browser] + * Bug 44094: Rebase Tor Browser alpha onto 140.2.0esr [tor-browser] + * Bug 44100: Backport Security Fixes from Firefox 142 [tor-browser] + * Bug 44140: Align PDF changes to 140esr [tor-browser] + * Bug 41442: Update our audit CSVs to use the new Audit template [tor-browser-build] + * Windows + macOS + Linux + * Updated Firefox to 140.2.0esr + * Bug 43111: Delete our webextensions for search engines when Bug 1885953 is fixed upstream [tor-browser] + * Bug 43519: Replace tor-loading.png with SVG [tor-browser] + * Bug 43525: Check if our search engine customization still works after ESR 140 transition [tor-browser] + * Bug 43728: Update search engine icon sizes [tor-browser] + * Bug 43795: Restore the URL classifier XPCOM components. [tor-browser] + * Bug 43817: Write e2e test for verifying if the browser is connected to the Tor network [tor-browser] + * Bug 43844: Security level shield icon should be flipped for RTL locales [tor-browser] + * Bug 43874: Incorporate our unified extension button hiding logic into mozilla's changes for ESR 140 [tor-browser] + * Bug 43901: Modify about:license for Tor Browser and drop about:rights [tor-browser] + * Bug 43902: Hide Sidebar buttons [tor-browser] + * Bug 43903: Report broken site is disabled rather than hidden [tor-browser] + * Bug 44030: Security Level selector does not get confirmation before restarting [tor-browser] + * Bug 44034: Update string used for checkbox on New Identity confirmation dialog [tor-browser] + * Bug 44040: Modify nsIPrompt and the commonDialog code to allow destructive buttons [tor-browser] + * Bug 44041: Letterboxing causes greyed out alert background to be mis-aligned [tor-browser] + * Bug 44090: Several of our XUL pages cause a crash because of missing CSP [tor-browser] + * Bug 44095: Rename connectionPane.xhtml and remove it from the jar [tor-browser] + * Bug 44106: Make sure background tasks are not used for shutdown cleanup [tor-browser] + * Bug 44115: Make remove all bridges dialog use a destructive red button [tor-browser] + * Bug 44125: Do not offer to save signatures by default in Private Browsing Mode [tor-browser] + * Windows + Android + * Bug 44062: Force touch enabled on Windows and Android [tor-browser] + * Windows + * Bug 44046: Replace BASE_BROWSER_UPDATE with BASE_BROWSER_VERSION in the font visibility list [tor-browser] + * macOS + * Bug 44127: Do not show macOS Privacy hint on network error pages [tor-browser] + * Android + * Updated GeckoView to 140.2.0esr + * Bug 43179: Make persistent 'private tabs' notification distinct from Firefox's [tor-browser] + * Bug 43346: Remove the "[android] Stop PrivateNotificationService" patch [tor-browser] + * Bug 43645: Swiping away doesn't always disconnect from tor [tor-browser] + * Bug 43699: Dummy "about:" pages are not cleared from recently closed tabs (and possibly elsewhere) because they are normal tabs, not private tabs. [tor-browser] + * Bug 43826: Review Mozilla 1960122: Use `MOZ_BUILD_DATE` in Fenix build configuration [tor-browser] + * Bug 44021: Android settings page colors are sometimes messed up (seems to be on the first launch) [tor-browser] + * Bug 44042: Debug crash when opening settings too quickly after launching app [tor-browser] + * Bug 44047: Tor Browser's home doesn't have the background at the first load on Android [tor-browser] + * Bug 44080: Further remove "Analytics data collection and usage" [tor-browser] + * Bug 44081: Swiping away the "private tabs" notification requires rebootstrapping. [tor-browser] + * Bug 44083: "snowflake" is lower case on Android [tor-browser] + * Bug 44098: Bookmarks offer a way to go to sync in 15.0a1 [tor-browser] + * Bug 44139: Restore the (inactive) YouTube and Reddit search plugins on Android [tor-browser] + * Build System + * All Platforms + * Bug 44061: "Contributing" link is broken [tor-browser] + * Bug 44067: Move --enable-geckodriver only to Linux-only mozconfigs [tor-browser] + * Bug 44103: git's export-subst is a reproducibility problem [tor-browser] + * Bug 44104: Don't run linter when there are no overall changes [tor-browser] + * Bug 26408: Make MAR signature checks clearer when creating incremental MAR files [tor-browser-build] + * Bug 40551: Drop go reproducibility patches [tor-browser-build] + * Bug 40697: Delete repackage_browser.sh [tor-browser-build] + * Bug 40698: Update locale in tbb_version.json [tor-browser-build] + * Bug 41517: Add morgan's key to the setup account on the signing machine [tor-browser-build] + * Bug 41522: Adapt our signing scripts to be able to sign the VPN app [tor-browser-build] + * Bug 41534: Copy geckodriver only for Linux x86-64 [tor-browser-build] + * Bug 41537: Add script to count mar downloads from web logs [tor-browser-build] + * Bug 41539: Update Ubuntu version used to run mmdebstrap to 24.04.3 [tor-browser-build] + * Bug 40087: Downloaded files getting stricter permissions than expected [rbm] + * Windows + Linux + Android + * Updated Go to 1.24.6 + * macOS + * Bug 41527: Update libdmg-hfsplus and enable LZMA compression on dmgs [tor-browser-build] + * Bug 41538: Bump macOS SDK to 15.5 [tor-browser-build] + * Android + * Bug 44078: Modify ./autopublish-settings.gradle for building a-s and glean with uniffi-bindgen no-op [tor-browser] + * Bug 41523: Use custom built Glean package on Android [tor-browser-build] + * Bug 41531: Update relprep.py script to handle application-services updates [tor-browser-build] + * Bug 41548: Hide tor's symbols on Android and add other linker options to save space [tor-browser-build] + Tor Browser 15.0a1 - July 29 2025 * All Platforms * Updated NoScript to 13.0.8 ===================================== projects/browser/config ===================================== @@ -113,9 +113,9 @@ input_files: enable: '[% ! c("var/android") %]' - filename: dmg-root enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4497468/noscript-13.0.8.x… + - URL: https://addons.mozilla.org/firefox/downloads/file/4551629/noscript-13.0.9.x… name: noscript - sha256sum: 9d978cfe083cb9cce120b5ee41e8933d752d7ab4680bf517c5ec4b29c4cfd2dc + sha256sum: 525ab61aff21f67d10c3e20965a86ed479631549908a658f54692adc47d771f5 - URL: https://addons.mozilla.org/firefox/downloads/file/4531307/ublock_origin-1.6… name: ublock-origin sha256sum: 3e73c96a29a933866065f0756fe032984bf5b254af8dd1afd7a7f7e0668a33cf ===================================== projects/firefox/config ===================================== @@ -21,7 +21,7 @@ var: browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 3 copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser ===================================== projects/geckoview/config ===================================== @@ -23,7 +23,7 @@ var: browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 3 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.23.11' +version: '1.24.6' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: 296381607a483a8a8667d7695331752f94a1f231c204e2527d2f22e1e3d1247d + source_sha256: e1cb5582aab588668bc04c07de18688070f6b8c9b2aaf361f821e19bd47cfdbd no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist ===================================== projects/manual/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 # To update, see doc/how-to-update-the-manual.txt # Remember to update also the package's hash, with the version! -version: 295391 +version: 309462 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -23,6 +23,6 @@ input_files: - project: container-image - URL: 'https://build-sources.tbb.torproject.org/manual_[% c("version") %].zip' name: manual - sha256sum: feff63a5611438ae31c8237c9ce5cb463ec96cab07bd71f51a80ac5020d4e465 + sha256sum: 602b930213509b829192969f01082b227abb92cf1cc3ff3309970ffd2a5f4fba - filename: packagemanual.py name: package_script ===================================== projects/openssl/config ===================================== @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 3.5.1 +version: 3.5.2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -33,5 +33,5 @@ input_files: - name: '[% c("var/compiler") %]' project: '[% c("var/compiler") %]' - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz' - sha256sum: 529043b15cffa5f36077a4d0af83f3de399807181d607441d734196d889b641f + sha256sum: c53a47e5e441c930c3928cf7bf6fb00e5d129b630e0aa873b08258656e7345ec name: openssl ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 96a559c7c1f7b9231db2b5cece7ecae980ae835d + git_hash: 948fad2286cb59fe168a949009b67d986fd9c153 targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 3becb908fbf68aa77accc1f2e03e2c29f4fe40e2 + git_hash: ec17987af29cb2614d114789996a3b4a09cbc3e7 targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 674a3f4d2d75b9688a54e5f1a0139feb617339d3 + git_hash: 0beea4b4b7b964d8e6624a04f3e9ec24c5be28b8 compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -74,11 +74,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '15.0a1' + torbrowser_version: '15.0a2' torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2025/07/29 10:33:44' + browser_release_date: '2025/08/29 13:09:47' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: alpha browser_platforms: @@ -128,9 +128,9 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 15.0a1 - 14.5a6 - 14.5a5 - - 14.5a4 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… You're receiving this email because of your account on gitlab.torproject.org.

1 0