- tor-commits - lists.torproject.org

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-15.0.4-build1
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed new tag tbb-15.0.4-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-146.0a1-16.0-2] fixup! TB 43901: Modify about:license for Tor Browser.
by henry (＠henry) 12 Jan '26

12 Jan '26

henry pushed to branch tor-browser-146.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: 2d6a33b3 by Henry Wilkes at 2026-01-08T14:35:23+00:00 fixup! TB 43901: Modify about:license for Tor Browser. TB 44420: Drop "rights" from components.conf. - - - - - 1 changed file: - browser/components/about/components.conf Changes: ===================================== browser/components/about/components.conf ===================================== @@ -22,7 +22,6 @@ pages = [ 'profiling', 'reader', 'restartrequired', - 'rights', # Removed 'rights'. tor-browser#43901. # Removed 'robots'. tor-browser#42831. 'rulesets', View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/2d6a33b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/2d6a33b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-15.0] Bug41657,41658: Prepare Tor, Mullvad Browser 15.0.4
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build Commits: b26388a2 by hackademix at 2026-01-12T13:50:28+01:00 Bug41657,41658: Prepare Tor, Mullvad Browser 15.0.4 - - - - - 8 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/moat-settings/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,18 @@ +Mullvad Browser 15.0.4 - January 13 2025 + * All Platforms + * Updated Firefox to 140.7.0esr + * Updated NoScript to 13.5.7.1984 + * Updated Mullvad Browser Extension to 0.9.7 + * Bug 503: Rebase Mullvad Browser stable onto 140.7.0esr [mullvad-browser] + * Bug 44433: Weird §:domain.com label in the Blocked Objects window [tor-browser] + * Bug 44474: Backport Security Fixes from Firefox 147 [tor-browser] + * Bug 44482: (H1) Script execution in Safest mode via data URI navigation [tor-browser] + * Build System + * All Platforms + * Bug 41682: relprep.py should fail when a GitHub release is not found [tor-browser-build] + * Bug 40090: Make the cleanup faster [rbm] + * Bug 40095: cached checksums should not be used for input files when refresh_input is enabled [rbm] + Mullvad Browser 15.0.3 - December 09 2025 * All Platforms * Updated Firefox to 140.6.0esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,24 @@ +Tor Browser 15.0.4 - January 13 2025 + * All Platforms + * Bug 44418: Update built-in obfs4 bridges [tor-browser] + * Bug 44433: Weird §:domain.com label in the Blocked Objects window [tor-browser] + * Bug 44470: Rebase Tor Browser stable onto 140.7.0esr [tor-browser] + * Bug 44474: Backport Security Fixes from Firefox 147 [tor-browser] + * Bug 44482: (H1) Script execution in Safest mode via data URI navigation [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 140.7.0esr + * Android + * Updated GeckoView to 140.7.0esr + * Bug 41681: Keep public suffixes up-to-date on 140esr-based Tor Browser for Android [tor-browser-build] + * Build System + * All Platforms + * Bug 41654: Make relprep.py update Moat settings [tor-browser-build] + * Bug 41682: relprep.py should fail when a GitHub release is not found [tor-browser-build] + * Bug 40090: Make the cleanup faster [rbm] + * Bug 40095: cached checksums should not be used for input files when refresh_input is enabled [rbm] + * Android + * Bug 41679: Android tor-expert-bundle archives missing version in filename [tor-browser-build] + Tor Browser 15.0.3 - December 09 2025 * All Platforms * Updated NoScript to 13.5.2.1984 ===================================== projects/browser/config ===================================== @@ -117,16 +117,16 @@ input_files: URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/01/2026-01-11-21-42-32-fenix… enable: '[% c("var/android") %]' sha256sum: c39056d428bf573aa9df1d4be11493064f867bc247bda1e8b7e1836d5aae7a31 - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.2.1984.xpi + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.7.1984.xpi name: noscript - sha256sum: 4579c70b69e3198ea0bf064f9912b9341696b9ad4ed177cb19994208872425fd + sha256sum: 502cba045cc36f813adce8931e13d7f8f3962f8ba855173f4ba19bc82a6cfb59 - URL: https://addons.mozilla.org/firefox/downloads/file/4629131/ublock_origin-1.6… name: ublock-origin sha256sum: 5caf4abda494018841222a12156919bbdd8cad82a783c38c36b22dd642704315 enable: '[% c("var/mullvad-browser") %]' - - URL: https://cdn.mullvad.net/browser-extension/0.9.6/mullvad-browser-extension-0… + - URL: https://cdn.mullvad.net/browser-extension/0.9.7/mullvad-browser-extension-0… name: mullvad-extension - sha256sum: b6def913e15f04ea81a768fa9a40bfbea5be59a9dc24ca5a1ce4792dfa180a69 + sha256sum: 4597ee6fff6a2f19cbf78a6149d38d12ad8a9d6029b7e36f6c639dc3e07dd2c3 enable: '[% c("var/mullvad-browser") %]' - filename: 'gtk3-settings.ini' enable: '[% c("var/linux") %]' ===================================== projects/firefox/config ===================================== @@ -16,12 +16,12 @@ container: use_container: 1 var: - firefox_platform_version: '140.6.0' + firefox_platform_version: '140.7.0' firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 5 + browser_build: 2 copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser @@ -114,7 +114,6 @@ targets: updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' mar_id_prefix: 'mullvadbrowser-mullvad' nightly_updates_publish_dir_prefix: mullvadbrowser- - browser_build: 4 linux-x86_64: var: arch_deps: ===================================== projects/geckoview/config ===================================== @@ -18,12 +18,12 @@ container: build_apk: 1 var: - firefox_platform_version: '140.6.0' + firefox_platform_version: '140.7.0' geckoview_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 4 + browser_build: 2 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/moat-settings/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' git_url: https://gitlab.torproject.org/tpo/anti-censorship/rdsys-admin.git -git_hash: c13a8e5909d78abbabf5b853e20e63e38fcc4808 +git_hash: 365b0e65b27e053bece37b70bca0bd5fdb02099f version: '[% c("abbrev") %]' # Use gz for now, since we do not support Zstandard on Linux containers. compress_tar: 'gz' ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: d366318349af0977ff23b492fa87e436e8672fdd + git_hash: fca1605a06b1a9b24cac7de6afb23aa896864e3e targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 45b67d3be52f79e8a4b361fd04ab12f342ab0016 + git_hash: 579dafc751edf73f98da66e548b87d85474104ea targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 4690b13484b82453db1482af32953ee2c9398568 + git_hash: 7263bfcfc42102962e304ec8ea415b3b210411b8 compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -74,11 +74,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '15.0.3' - torbrowser_build: 'build3' + torbrowser_version: '15.0.4' + torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2025/12/08 08:01:36' + browser_release_date: '2026/01/12 12:13:57' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: release browser_platforms: @@ -128,13 +128,13 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 15.0.3 - 15.0.2 - 15.0.1 - - 15.0 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' - torbrowser_legacy_version: 13.5.26 - torbrowser_legacy_platform_version: 115.31.0 + torbrowser_legacy_version: 13.5.27 + torbrowser_legacy_platform_version: 115.32.0 # By default, we sort the list of installed packages. This allows sharing # containers with identical list of packages, even if they are not listed View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.7.0esr-15.0-1] Bug 1996718 - Check whether BrowserChild has not yet been destroyed in each...
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed to branch mullvad-browser-140.7.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 86bb5b91 by Hiroyuki Ikezoe at 2026-01-12T12:19:31+01:00 Bug 1996718 - Check whether BrowserChild has not yet been destroyed in each function of ContentProcessController. r=botond Differential Revision: https://phabricator.services.mozilla.com/D270278 - - - - - 1 changed file: - gfx/layers/apz/util/ContentProcessController.cpp Changes: ===================================== gfx/layers/apz/util/ContentProcessController.cpp ===================================== @@ -32,7 +32,7 @@ void ContentProcessController::NotifyLayerTransforms( void ContentProcessController::RequestContentRepaint( const RepaintRequest& aRequest) { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { mBrowser->UpdateFrame(aRequest); } } @@ -56,7 +56,7 @@ void ContentProcessController::NotifyPinchGesture( void ContentProcessController::NotifyAPZStateChange( const ScrollableLayerGuid& aGuid, APZStateChange aChange, int aArg, Maybe<uint64_t> aInputBlockId) { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { mBrowser->NotifyAPZStateChange(aGuid.mScrollId, aChange, aArg, aInputBlockId); } @@ -64,13 +64,13 @@ void ContentProcessController::NotifyAPZStateChange( void ContentProcessController::NotifyMozMouseScrollEvent( const ScrollableLayerGuid::ViewID& aScrollId, const nsString& aEvent) { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { APZCCallbackHelper::NotifyMozMouseScrollEvent(aScrollId, aEvent); } } void ContentProcessController::NotifyFlushComplete() { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { RefPtr<PresShell> presShell = mBrowser->GetTopLevelPresShell(); APZCCallbackHelper::NotifyFlushComplete(presShell); } @@ -113,7 +113,7 @@ void ContentProcessController::DispatchToRepaintThread( } PresShell* ContentProcessController::GetTopLevelPresShell() const { - if (!mBrowser) { + if (!mBrowser || mBrowser->IsDestroyed()) { return nullptr; } return mBrowser->GetTopLevelPresShell(); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/86b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/86b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-15.0] Bug 41681: Keep public suffixes up-to-date on 140esr-based Tor Browser for Android.
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build Commits: 5d84e9bf by hackademix at 2026-01-12T11:45:22+01:00 Bug 41681: Keep public suffixes up-to-date on 140esr-based Tor Browser for Android. - - - - - 4 changed files: - projects/browser/build.android - projects/browser/config - tools/relprep.py - + tools/update_fenix_nightly_apk.py Changes: ===================================== projects/browser/build.android ===================================== @@ -29,6 +29,8 @@ unzip $rootdir/[% c('input_files_by_name/noscript') %] }) %] popd +unzip -o "$rootdir"/[% c('input_files_by_name/fenix-nightly-apk') %] assets/publicsuffixes + [%IF c("var/tor-browser") -%] tar -xaf "$rootdir/[% c('input_files_by_name/tor-expert-bundle') %]/tor-expert-bundle.tar.gz" tor/pluggable_transports/pt_config.json tar -xf "$rootdir/[% c('input_files_by_name/moat-settings') %]" ===================================== projects/browser/config ===================================== @@ -113,6 +113,10 @@ input_files: enable: '[% ! c("var/android") %]' - filename: dmg-root enable: '[% ! c("var/android") %]' + - name: fenix-nightly-apk + URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/01/2026-01-11-21-42-32-fenix… + enable: '[% c("var/android") %]' + sha256sum: c39056d428bf573aa9df1d4be11493064f867bc247bda1e8b7e1836d5aae7a31 - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.2.1984.xpi name: noscript sha256sum: 4579c70b69e3198ea0bf064f9912b9341696b9ad4ed177cb19994208872425fd ===================================== tools/relprep.py ===================================== @@ -18,7 +18,7 @@ import ruamel.yaml import fetch_changelogs from update_manual import update_manual - +from update_fenix_nightly_apk import update_fenix_nightly_apk logger = logging.getLogger(__name__) @@ -140,6 +140,7 @@ class ReleasePreparation: self.update_zlib() if self.android: self.update_zstd() + update_fenix_nightly_apk(self.base_path) self.update_go() self.update_manual() self.update_moat_settings() ===================================== tools/update_fenix_nightly_apk.py ===================================== @@ -0,0 +1,78 @@ +#!/usr/bin/env python3 +import hashlib +import re +from pathlib import Path + +import requests +import ruamel.yaml + + +def find_apk_url(): + base_url = "https://ftp.mozilla.org" + path = "/pub/fenix/nightly/" + while True: + url = f"{base_url}{path}" + r = requests.get(url) + r.raise_for_status() + match = re.match(f'.*"({re.escape(path)}.*)"', r.text, re.DOTALL) + if not match: + raise Exception(f"Could not find apk url from {url}!") + # we want to get the smallest apk, which is arm64-v8a + path = match.group(1).replace("-android/", "-android-arm64-v8a/") + if path.endswith(".apk"): + return f"{base_url}{path}" + + +def update_config(base_path, url): + yaml = ruamel.yaml.YAML() + yaml.indent(mapping=2, sequence=4, offset=2) + yaml.width = 150 + yaml.preserve_quotes = True + + config_path = base_path / "projects/browser/config" + config_name = "fenix-nightly-apk" + config = yaml.load(config_path) + + for input_file in config["input_files"]: + if input_file.get("name") == config_name: + apk_file_path = base_path / "out/browser" / url.split("/")[-1] + if url == input_file["URL"]: + if apk_file_path.exists(): + print(f"{apk_file_path} exists, checking hash...") + sha256 = hashlib.sha256() + with apk_file_path.open("rb") as f: + while chunk := f.read(16384): + sha256.update(chunk) + sha256sum = sha256.hexdigest() + if sha256sum == input_file["sha256sum"]: + print(f"{config_name}/URL is up-to-date, nothing to do.") + return False + sha256sum = download_apk(url, apk_file_path) + input_file["sha256sum"] = sha256sum + input_file["URL"] = url + with config_path.open("w") as f: + yaml.dump(config, f) + print(f"Updated input_files/{config_name} in {config_path}.") + return True + raise Exception(f"Cannot find input_files/{config_name} in {config_path}!") + + +def download_apk(url, dest): + print(f"Downloading {url} to {dest}....") + r = requests.get(url, stream=True) + r.raise_for_status() + sha256 = hashlib.sha256() + with dest.open("wb") as f: + for chunk in r.iter_content(chunk_size=8192): + f.write(chunk) + sha256.update(chunk) + return sha256.hexdigest() + + +def update_fenix_nightly_apk(base_path): + url = find_apk_url() + return update_config(base_path, url) + + +if __name__ == "__main__": + update_fenix_nightly_apk(Path(__file__).parent.parent) View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/5… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/5… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-140.7.0esr-15.0-1-build2
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed new tag mullvad-browser-140.7.0esr-15.0-1-build2 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-140.7.0esr-15.0-1-build2
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed new tag tor-browser-140.7.0esr-15.0-1-build2 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.7.0esr-15.0-1] Bug 1996718 - Check whether BrowserChild has not yet been destroyed in each...
by ma1 (＠ma1) 12 Jan '26

12 Jan '26

ma1 pushed to branch tor-browser-140.7.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: bd9b3c0d by Hiroyuki Ikezoe at 2026-01-08T23:37:39+01:00 Bug 1996718 - Check whether BrowserChild has not yet been destroyed in each function of ContentProcessController. r=botond Differential Revision: https://phabricator.services.mozilla.com/D270278 - - - - - 1 changed file: - gfx/layers/apz/util/ContentProcessController.cpp Changes: ===================================== gfx/layers/apz/util/ContentProcessController.cpp ===================================== @@ -32,7 +32,7 @@ void ContentProcessController::NotifyLayerTransforms( void ContentProcessController::RequestContentRepaint( const RepaintRequest& aRequest) { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { mBrowser->UpdateFrame(aRequest); } } @@ -56,7 +56,7 @@ void ContentProcessController::NotifyPinchGesture( void ContentProcessController::NotifyAPZStateChange( const ScrollableLayerGuid& aGuid, APZStateChange aChange, int aArg, Maybe<uint64_t> aInputBlockId) { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { mBrowser->NotifyAPZStateChange(aGuid.mScrollId, aChange, aArg, aInputBlockId); } @@ -64,13 +64,13 @@ void ContentProcessController::NotifyAPZStateChange( void ContentProcessController::NotifyMozMouseScrollEvent( const ScrollableLayerGuid::ViewID& aScrollId, const nsString& aEvent) { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { APZCCallbackHelper::NotifyMozMouseScrollEvent(aScrollId, aEvent); } } void ContentProcessController::NotifyFlushComplete() { - if (mBrowser) { + if (mBrowser && !mBrowser->IsDestroyed()) { RefPtr<PresShell> presShell = mBrowser->GetTopLevelPresShell(); APZCCallbackHelper::NotifyFlushComplete(presShell); } @@ -113,7 +113,7 @@ void ContentProcessController::DispatchToRepaintThread( } PresShell* ContentProcessController::GetTopLevelPresShell() const { - if (!mBrowser) { + if (!mBrowser || mBrowser->IsDestroyed()) { return nullptr; } return mBrowser->GetTopLevelPresShell(); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bd9b3c0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bd9b3c0… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-13.5.27-build1
by Pier Angelo Vendrame (＠pierov) 12 Jan '26

12 Jan '26

Pier Angelo Vendrame pushed new tag tbb-13.5.27-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-13.5] Bug 41659: Prepare Tor Browser 13.5.27.
by Pier Angelo Vendrame (＠pierov) 12 Jan '26

12 Jan '26

Pier Angelo Vendrame pushed to branch maint-13.5 at The Tor Project / Applications / tor-browser-build Commits: c6dd99c6 by Pier Angelo Vendrame at 2026-01-12T11:50:08+01:00 Bug 41659: Prepare Tor Browser 13.5.27. - - - - - 5 changed files: - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,16 @@ +Tor Browser 13.5.27 - January 13 2026 + * All Platforms + * Updated Firefox to 115.32.0esr + * Updated NoScript to 13.5.7.1984 + * Bug 44418: Update built-in obfs4 bridges [tor-browser] + * Bug 44433: Weird §:domain.com label in the Blocked Objects window [tor-browser] + * Bug 44471: Rebase Tor Browser legacy onto 115.32.0esr [tor-browser] + * Bug 44474: Backport Security Fixes from Firefox 147 [tor-browser] + * Bug 44482: (H1) Script execution in Safest mode via data URI navigation [tor-browser] + * Build System + * All Platforms + * Bug 41682: relprep.py should fail when a GitHub release is not found [tor-browser-build] + Tor Browser 13.5.26 - December 09 2025 * All Platforms * Updated Firefox to 115.31.0esr ===================================== projects/browser/config ===================================== @@ -103,9 +103,9 @@ input_files: enable: '[% ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.2.1984.xpi + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.7.1984.xpi name: noscript - sha256sum: 4579c70b69e3198ea0bf064f9912b9341696b9ad4ed177cb19994208872425fd + sha256sum: 502cba045cc36f813adce8931e13d7f8f3962f8ba855173f4ba19bc82a6cfb59 - URL: https://addons.mozilla.org/firefox/downloads/file/4359936/ublock_origin-1.6… name: ublock-origin sha256sum: e2cda9b2a1b0a7f6e5ef0da9f87f28df52f8560587ba2e51a3003121cfb81600 ===================================== projects/firefox/config ===================================== @@ -16,7 +16,7 @@ container: use_container: 1 var: - firefox_platform_version: 115.31.0 + firefox_platform_version: 115.32.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '13.5' browser_rebase: 1 ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: d366318349af0977ff23b492fa87e436e8672fdd + git_hash: fca1605a06b1a9b24cac7de6afb23aa896864e3e targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 45b67d3be52f79e8a4b361fd04ab12f342ab0016 + git_hash: 579dafc751edf73f98da66e548b87d85474104ea targets: nightly: git_hash: 'tor-browser' ===================================== rbm.conf ===================================== @@ -73,11 +73,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '13.5.26' + torbrowser_version: '13.5.27' torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2025/12/07 18:15:20' + browser_release_date: '2026/01/12 10:30:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_platforms: # is_android_release and is_desktop_release are used to quickly @@ -115,9 +115,9 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 13.5.26 - 13.5.25 - 13.5.24 - - 13.5.23 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… You're receiving this email because of your account on gitlab.torproject.org.

1 0