GitLab

at 2025-10-28T09:48:31+00:00

Bug 41584,41585: Prepare Tor, Mullvad Browser 15.0 build2

-Mullvad Browser 15.0 - October 28

+Mullvad Browser 15.0 - October 28 2025

  * All Platforms

    * Updated Firefox to 140.4.0esr

    * Updated NoScript to 13.2.2

    * Bug 44234: No images in PDF [tor-browser]

    * Bug 44242: Hand over Security Level's WebAssembly controls to NoScript [tor-browser]

    * Bug 44262: Disable adding search engines from HTML forms [tor-browser]

+   * Bug 44270: Match Firefox's TLS fingerprint [tor-browser]

+   * Bug 44275: Reduce console noise on security level guess [tor-browser]

    * Bug 44279: Disable contextual search install prompt [tor-browser]

  * Windows

    * Bug 440: Make abseil use win32 thread model on mingw [mullvad-browser]

    * Bug 43950: Review Mozilla 1894818: Support HEVC playback on Linux [tor-browser]

    * Bug 43959: Make Noto Color Emoji the default emoji font on Linux [tor-browser]

    * Bug 44227: Some CJK characters cannot be rendered by Tor which uses the Noto font family [tor-browser]

+   * Bug 44286: Hardcode GTK system font [tor-browser]

    * Bug 41586: Replace Noto CJK with Jigmo on Linux [tor-browser-build]

  * Build System

    * All Platforms

+     * Bug 466: Automate the release process / replace the new build email [mullvad-browser]

      * Bug 43891: Update the translation CI to use the new mozilla versions [tor-browser]

      * Bug 44067: Move --enable-geckodriver only to Linux-only mozconfigs [tor-browser]

      * Bug 44103: git's export-subst is a reproducibility problem [tor-browser]

    * Bug 44069: Update `meek-azure` related strings to `meek` [tor-browser]

    * Bug 44140: Refactored patch to prevent writing temp PDF files to disk [tor-browser]

    * Bug 44234: No images in PDF [tor-browser]

+   * Bug 44275: Reduce console noise on security level guess [tor-browser]

+   * Bug 44280: Test stream isolation [tor-browser]

    * Bug 41429: Add a note about user safety to Tor Browser Alpha blog posts [tor-browser-build]

    * Bug 41442: Update our audit CSVs to use the new Audit template [tor-browser-build]

    * Bug 41502: Application services build is failing on isNetworkAllowed() [tor-browser-build]

+   * Bug 41609: Use new CDN77 fronts for snowflake [tor-browser-build]

  * Windows + macOS + Linux

    * Updated Firefox to 140.4.0esr

    * Bug 42025: Purple elements (e.g. Tor buttons) need dark theme variants [tor-browser]

    * Bug 44221: Backport MozBug 1984333 Bump Spoofed Processor Count [tor-browser]

    * Bug 44239: DDG HTML page and search results displayed incorrectly with Safest security setting [tor-browser]

    * Bug 44262: Disable adding search engines from HTML forms [tor-browser]

+   * Bug 44270: Match Firefox's TLS fingerprint [tor-browser]

    * Bug 44279: Disable contextual search install prompt [tor-browser]

  * Windows + Android

    * Bug 44062: Force touch enabled on Windows and Android [tor-browser]

    * Bug 43950: Review Mozilla 1894818: Support HEVC playback on Linux [tor-browser]

    * Bug 43959: Make Noto Color Emoji the default emoji font on Linux [tor-browser]

    * Bug 44227: Some CJK characters cannot be rendered by Tor which uses the Noto font family [tor-browser]

+   * Bug 44286: Hardcode GTK system font [tor-browser]

    * Bug 41586: Replace Noto CJK with Jigmo on Linux [tor-browser-build]

  * Android

    * Updated GeckoView to 140.4.0esr

    * Bug 43676: Preemptively disable unified trust panel by default so we are tracking for next ESR [tor-browser]

    * Bug 43699: Dummy "about:" pages are not cleared from recently closed tabs (and possibly elsewhere) because they are normal tabs, not private tabs. [tor-browser]

    * Bug 43755: Restore functionality of "switch to tab" urlbar suggestion [tor-browser]

+   * Bug 43757: Disable setting for trending search [tor-browser]

    * Bug 43826: Review Mozilla 1960122: Use `MOZ_BUILD_DATE` in Fenix build configuration [tor-browser]

    * Bug 43855: brand.properties merging on Android is broken in 140 [tor-browser]

    * Bug 43943: Review Mozilla 1928705: Ship Android Font Restrictions as part of FPP [tor-browser]

    * Bug 44133: Hide the "Allow in private browsing" checkboxes from WebExtension management UI [tor-browser]

    * Bug 44139: Restore the (inactive) YouTube and Reddit search plugins on Android [tor-browser]

    * Bug 44172: Fix crash in TorAndroidIntegration.handleMessage() [tor-browser]

+   * Bug 44196: Persistent notification sometimes does not clear [tor-browser]

    * Bug 44237: Revoke access to all advertising ids available in Android [tor-browser]

+   * Bug 44293: Force immediate NoScript update checks after bootstrap [tor-browser]

    * Bug 41494: Update GeckoView build scripts for ESR140 [tor-browser-build]

  * Build System

    * All Platforms

   browser_series: '15.0'

   browser_rebase: 1

   browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'

-  browser_build: 4

+  browser_build: 5

   copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'

   nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'

   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser

       updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/'

       mar_id_prefix: 'mullvadbrowser-mullvad'

       nightly_updates_publish_dir_prefix: mullvadbrowser-

-      browser_build: 3

+      browser_build: 4

   linux-x86_64:

     var:

   browser_series: '15.0'

   browser_rebase: 1

   browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'

-  browser_build: 4

+  browser_build: 5

   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser

   git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'

   deps:

 var:

   torbrowser_version: '15.0'

-  torbrowser_build: 'build1'

+  torbrowser_build: 'build2'

   # This should be the date of when the build is started. For the build

   # to be reproducible, browser_release_date should always be in the past.

-  browser_release_date: '2025/10/20 17:00:00'

+  browser_release_date: '2025/10/28 09:45:00'

   browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'

   browser_default_channel: release

   browser_platforms:

morgan pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build

Commits:

5 changed files:

Changes: