ma1 pushed to branch main at The Tor Project / Applications / tor-browser-build

Commits:

11 changed files:

Changes:

  • projects/application-services/config
    ... ... @@ -16,7 +16,7 @@ container:
    16 16 
       use_container: 1
    17 17
    18 18 
     var:
    19 
    -  build_number: 4
    19 
    +  build_number: 5
    20 20 
       # This should be updated when the list of gradle dependencies is changed.
    21 21 
       gradle_dependencies_version: 12
    22 22 
       gradle_version: 8.13

  • projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
    1 
    +Mullvad Browser 15.0a2 - August 29 2025
    2 
    + * All Platforms
    3 
    +   * Updated Firefox to 140.2.0esr
    4 
    +   * Updated NoScript to 13.0.9
    5 
    +   * Bug 451: The restart to apply button doesn't work [mullvad-browser]
    6 
    +   * Bug 460: Rebase Mullvad Browser alpha onto 140.2.0esr [mullvad-browser]
    7 
    +   * Bug 43111: Delete our webextensions for search engines when Bug 1885953 is fixed upstream [tor-browser]
    8 
    +   * Bug 43728: Update search engine icon sizes [tor-browser]
    9 
    +   * Bug 43795: Restore the URL classifier XPCOM components. [tor-browser]
    10 
    +   * Bug 43844: Security level shield icon should be flipped for RTL locales [tor-browser]
    11 
    +   * Bug 43864: Remove features from the unified search button [tor-browser]
    12 
    +   * Bug 43874: Incorporate our unified extension button hiding logic into mozilla's changes for ESR 140 [tor-browser]
    13 
    +   * Bug 43902: Hide Sidebar buttons [tor-browser]
    14 
    +   * Bug 43903: Report broken site is disabled rather than hidden [tor-browser]
    15 
    +   * Bug 44030: Security Level selector does not get confirmation before restarting [tor-browser]
    16 
    +   * Bug 44034: Update string used for checkbox on New Identity confirmation dialog [tor-browser]
    17 
    +   * Bug 44040: Modify nsIPrompt and the commonDialog code to allow destructive buttons [tor-browser]
    18 
    +   * Bug 44041: Letterboxing causes greyed out alert background to be mis-aligned [tor-browser]
    19 
    +   * Bug 44045: Drop AI and machine learning components [tor-browser]
    20 
    +   * Bug 44048: Backport Bug 1979608 [tor-browser]
    21 
    +   * Bug 44090: Several of our XUL pages cause a crash because of missing CSP [tor-browser]
    22 
    +   * Bug 44100: Backport Security Fixes from Firefox 142 [tor-browser]
    23 
    +   * Bug 44106: Make sure background tasks are not used for shutdown cleanup [tor-browser]
    24 
    +   * Bug 44125: Do not offer to save signatures by default in Private Browsing Mode [tor-browser]
    25 
    +   * Bug 44140: Align PDF changes to 140esr [tor-browser]
    26 
    + * Windows
    27 
    +   * Bug 44046: Replace BASE_BROWSER_UPDATE with BASE_BROWSER_VERSION in the font visibility list [tor-browser]
    28 
    +   * Bug 44062: Force touch enabled on Windows and Android [tor-browser]
    29 
    + * Build System
    30 
    +   * All Platforms
    31 
    +     * Bug 44067: Move --enable-geckodriver only to Linux-only mozconfigs [tor-browser]
    32 
    +     * Bug 44103: git's export-subst is a reproducibility problem [tor-browser]
    33 
    +     * Bug 44104: Don't run linter when there are no overall changes [tor-browser]
    34 
    +     * Bug 26408: Make MAR signature checks clearer when creating incremental MAR files [tor-browser-build]
    35 
    +     * Bug 40697: Delete repackage_browser.sh [tor-browser-build]
    36 
    +     * Bug 40698: Update locale in tbb_version.json [tor-browser-build]
    37 
    +     * Bug 41517: Add morgan's key to the setup account on the signing machine [tor-browser-build]
    38 
    +     * Bug 41529: Automate publishing browser release branch and tags to Mullvad repository [tor-browser-build]
    39 
    +     * Bug 41534: Copy geckodriver only for Linux x86-64 [tor-browser-build]
    40 
    +     * Bug 41539: Update Ubuntu version used to run mmdebstrap to 24.04.3 [tor-browser-build]
    41 
    +     * Bug 40087: Downloaded files getting stricter permissions than expected [rbm]
    42 
    +   * macOS
    43 
    +     * Bug 41527: Update libdmg-hfsplus and enable LZMA compression on dmgs [tor-browser-build]
    44 
    +     * Bug 41538: Bump macOS SDK to 15.5 [tor-browser-build]
    45 
    +
    1 46 
     Mullvad Browser 15.0a1 - July 29 2025
    2 47 
      * All Platforms
    3 48 
        * Updated Firefox to 140.1.0esr

  • projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
    1 
    +Tor Browser 15.0a2 - August 29 2025
    2 
    + * All Platforms
    3 
    +   * Updated NoScript to 13.0.9
    4 
    +   * Updated OpenSSL to 3.5.2
    5 
    +   * Bug 43727: Update moz-toggle customisation for ESR 140 [tor-browser]
    6 
    +   * Bug 43832: Drop eslint-env [tor-browser]
    7 
    +   * Bug 43864: Remove features from the unified search button [tor-browser]
    8 
    +   * Bug 44045: Drop AI and machine learning components [tor-browser]
    9 
    +   * Bug 44048: Backport Bug 1979608 [tor-browser]
    10 
    +   * Bug 44069: Update `meek-azure` related strings to `meek` [tor-browser]
    11 
    +   * Bug 44094: Rebase Tor Browser alpha onto 140.2.0esr [tor-browser]
    12 
    +   * Bug 44100: Backport Security Fixes from Firefox 142 [tor-browser]
    13 
    +   * Bug 44140: Align PDF changes to 140esr [tor-browser]
    14 
    +   * Bug 41442: Update our audit CSVs to use the new Audit template [tor-browser-build]
    15 
    + * Windows + macOS + Linux
    16 
    +   * Updated Firefox to 140.2.0esr
    17 
    +   * Bug 43111: Delete our webextensions for search engines when Bug 1885953 is fixed upstream [tor-browser]
    18 
    +   * Bug 43519: Replace tor-loading.png with SVG [tor-browser]
    19 
    +   * Bug 43525: Check if our search engine customization still works after ESR 140 transition [tor-browser]
    20 
    +   * Bug 43728: Update search engine icon sizes [tor-browser]
    21 
    +   * Bug 43795: Restore the URL classifier XPCOM components. [tor-browser]
    22 
    +   * Bug 43817: Write e2e test for verifying if the browser is connected to the Tor network [tor-browser]
    23 
    +   * Bug 43844: Security level shield icon should be flipped for RTL locales [tor-browser]
    24 
    +   * Bug 43874: Incorporate our unified extension button hiding logic into mozilla's changes for ESR 140 [tor-browser]
    25 
    +   * Bug 43901: Modify about:license for Tor Browser and drop about:rights [tor-browser]
    26 
    +   * Bug 43902: Hide Sidebar buttons [tor-browser]
    27 
    +   * Bug 43903: Report broken site is disabled rather than hidden [tor-browser]
    28 
    +   * Bug 44030: Security Level selector does not get confirmation before restarting [tor-browser]
    29 
    +   * Bug 44034: Update string used for checkbox on New Identity confirmation dialog [tor-browser]
    30 
    +   * Bug 44040: Modify nsIPrompt and the commonDialog code to allow destructive buttons [tor-browser]
    31 
    +   * Bug 44041: Letterboxing causes greyed out alert background to be mis-aligned [tor-browser]
    32 
    +   * Bug 44090: Several of our XUL pages cause a crash because of missing CSP [tor-browser]
    33 
    +   * Bug 44095: Rename connectionPane.xhtml and remove it from the jar [tor-browser]
    34 
    +   * Bug 44106: Make sure background tasks are not used for shutdown cleanup [tor-browser]
    35 
    +   * Bug 44115: Make remove all bridges dialog use a destructive red button [tor-browser]
    36 
    +   * Bug 44125: Do not offer to save signatures by default in Private Browsing Mode [tor-browser]
    37 
    + * Windows + Android
    38 
    +   * Bug 44062: Force touch enabled on Windows and Android [tor-browser]
    39 
    + * Windows
    40 
    +   * Bug 44046: Replace BASE_BROWSER_UPDATE with BASE_BROWSER_VERSION in the font visibility list [tor-browser]
    41 
    + * macOS
    42 
    +   * Bug 44127: Do not show macOS Privacy hint on network error pages [tor-browser]
    43 
    + * Android
    44 
    +   * Updated GeckoView to 140.2.0esr
    45 
    +   * Bug 43179: Make persistent 'private tabs' notification distinct from Firefox's [tor-browser]
    46 
    +   * Bug 43346: Remove the "[android] Stop PrivateNotificationService" patch [tor-browser]
    47 
    +   * Bug 43645: Swiping away doesn't always disconnect from tor [tor-browser]
    48 
    +   * Bug 43699: Dummy "about:" pages are not cleared from recently closed tabs (and possibly elsewhere) because they are normal tabs, not private tabs. [tor-browser]
    49 
    +   * Bug 43826: Review Mozilla 1960122: Use `MOZ_BUILD_DATE` in Fenix build configuration [tor-browser]
    50 
    +   * Bug 44021: Android settings page colors are sometimes messed up (seems to be on the first launch) [tor-browser]
    51 
    +   * Bug 44042: Debug crash when opening settings too quickly after launching app [tor-browser]
    52 
    +   * Bug 44047: Tor Browser's home doesn't have the background at the first load on Android [tor-browser]
    53 
    +   * Bug 44080: Further remove "Analytics data collection and usage" [tor-browser]
    54 
    +   * Bug 44081: Swiping away the "private tabs" notification requires rebootstrapping. [tor-browser]
    55 
    +   * Bug 44083: "snowflake" is lower case on Android [tor-browser]
    56 
    +   * Bug 44098: Bookmarks offer a way to go to sync in 15.0a1 [tor-browser]
    57 
    +   * Bug 44139: Restore the (inactive) YouTube and Reddit search plugins on Android [tor-browser]
    58 
    + * Build System
    59 
    +   * All Platforms
    60 
    +     * Bug 44061: "Contributing" link is broken [tor-browser]
    61 
    +     * Bug 44067: Move --enable-geckodriver only to Linux-only mozconfigs [tor-browser]
    62 
    +     * Bug 44103: git's export-subst is a reproducibility problem [tor-browser]
    63 
    +     * Bug 44104: Don't run linter when there are no overall changes [tor-browser]
    64 
    +     * Bug 26408: Make MAR signature checks clearer when creating incremental MAR files [tor-browser-build]
    65 
    +     * Bug 40551: Drop go reproducibility patches [tor-browser-build]
    66 
    +     * Bug 40697: Delete repackage_browser.sh [tor-browser-build]
    67 
    +     * Bug 40698: Update locale in tbb_version.json [tor-browser-build]
    68 
    +     * Bug 41517: Add morgan's key to the setup account on the signing machine [tor-browser-build]
    69 
    +     * Bug 41522: Adapt our signing scripts to be able to sign the VPN app [tor-browser-build]
    70 
    +     * Bug 41534: Copy geckodriver only for Linux x86-64 [tor-browser-build]
    71 
    +     * Bug 41537: Add script to count mar downloads from web logs [tor-browser-build]
    72 
    +     * Bug 41539: Update Ubuntu version used to run mmdebstrap to 24.04.3 [tor-browser-build]
    73 
    +     * Bug 40087: Downloaded files getting stricter permissions than expected [rbm]
    74 
    +   * Windows + Linux + Android
    75 
    +     * Updated Go to 1.24.6
    76 
    +   * macOS
    77 
    +     * Bug 41527: Update libdmg-hfsplus and enable LZMA compression on dmgs [tor-browser-build]
    78 
    +     * Bug 41538: Bump macOS SDK to 15.5 [tor-browser-build]
    79 
    +   * Android
    80 
    +     * Bug 44078: Modify ./autopublish-settings.gradle for building a-s and glean with uniffi-bindgen no-op [tor-browser]
    81 
    +     * Bug 41523: Use custom built Glean package on Android [tor-browser-build]
    82 
    +     * Bug 41531: Update relprep.py script to handle application-services updates [tor-browser-build]
    83 
    +     * Bug 41548: Hide tor's symbols on Android and add other linker options to save space [tor-browser-build]
    84 
    +
    1 85 
     Tor Browser 15.0a1 - July 29 2025
    2 86 
      * All Platforms
    3 87 
        * Updated NoScript to 13.0.8

  • projects/browser/config
    ... ... @@ -113,9 +113,9 @@ input_files:
    113 113 
         enable: '[% ! c("var/android") %]'
    114 114 
       - filename: dmg-root
    115 115 
         enable: '[% ! c("var/android") %]'
    116 
    -  - URL: https://addons.mozilla.org/firefox/downloads/file/4497468/noscript-13.0.8.xpi
    116 
    +  - URL: https://addons.mozilla.org/firefox/downloads/file/4551629/noscript-13.0.9.xpi
    117 117 
         name: noscript
    118 
    -    sha256sum: 9d978cfe083cb9cce120b5ee41e8933d752d7ab4680bf517c5ec4b29c4cfd2dc
    118 
    +    sha256sum: 525ab61aff21f67d10c3e20965a86ed479631549908a658f54692adc47d771f5
    119 119 
       - URL: https://addons.mozilla.org/firefox/downloads/file/4531307/ublock_origin-1.65.0.xpi
    120 120 
         name: ublock-origin
    121 121 
         sha256sum: 3e73c96a29a933866065f0756fe032984bf5b254af8dd1afd7a7f7e0668a33cf

  • projects/firefox/config
    ... ... @@ -21,7 +21,7 @@ var:
    21 21 
       browser_series: '15.0'
    22 22 
       browser_rebase: 1
    23 23 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    24 
    -  browser_build: 1
    24 
    +  browser_build: 3
    25 25 
       copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
    26 26 
       nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'
    27 27 
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser

  • projects/geckoview/config
    ... ... @@ -23,7 +23,7 @@ var:
    23 23 
       browser_series: '15.0'
    24 24 
       browser_rebase: 1
    25 25 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    26 
    -  browser_build: 1
    26 
    +  browser_build: 3
    27 27 
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
    28 28 
       git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
    29 29 
       deps:

  • projects/go/config
    1 1 
     # vim: filetype=yaml sw=2
    2 
    -version: '1.23.11'
    2 
    +version: '1.24.6'
    3 3 
     filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    4 4 
     container:
    5 5 
       use_container: 1
    6 6
    7 7 
     var:
    8 
    -  source_sha256: 296381607a483a8a8667d7695331752f94a1f231c204e2527d2f22e1e3d1247d
    8 
    +  source_sha256: e1cb5582aab588668bc04c07de18688070f6b8c9b2aaf361f821e19bd47cfdbd
    9 9 
       no_crosscompile: 1
    10 10 
       setup: |
    11 11 
         mkdir -p /var/tmp/dist

  • projects/manual/config
    1 1 
     # vim: filetype=yaml sw=2
    2 2 
     # To update, see doc/how-to-update-the-manual.txt
    3 3 
     # Remember to update also the package's hash, with the version!
    4 
    -version: 295391
    4 
    +version: 309462
    5 5 
     filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    6 6 
     container:
    7 7 
       use_container: 1
    ... ... @@ -23,6 +23,6 @@ input_files:
    23 23 
       - project: container-image
    24 24 
       - URL: 'https://build-sources.tbb.torproject.org/manual_[% c("version") %].zip'
    25 25 
         name: manual
    26 
    -    sha256sum: feff63a5611438ae31c8237c9ce5cb463ec96cab07bd71f51a80ac5020d4e465
    26 
    +    sha256sum: 602b930213509b829192969f01082b227abb92cf1cc3ff3309970ffd2a5f4fba
    27 27 
       - filename: packagemanual.py
    28 28 
         name: package_script

  • projects/openssl/config
    1 1 
     # vim: filetype=yaml sw=2
    2 
    -version: 3.5.1
    2 
    +version: 3.5.2
    3 3 
     filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    4 4 
     container:
    5 5 
       use_container: 1
    ... ... @@ -33,5 +33,5 @@ input_files:
    33 33 
       - name: '[% c("var/compiler") %]'
    34 34 
         project: '[% c("var/compiler") %]'
    35 35 
       - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz'
    36 
    -    sha256sum: 529043b15cffa5f36077a4d0af83f3de399807181d607441d734196d889b641f
    36 
    +    sha256sum: c53a47e5e441c930c3928cf7bf6fb00e5d129b630e0aa873b08258656e7345ec
    37 37 
         name: openssl

  • projects/translation/config
    ... ... @@ -12,13 +12,13 @@ compress_tar: 'gz'
    12 12 
     steps:
    13 13 
       base-browser:
    14 14 
         base-browser: '[% INCLUDE build %]'
    15 
    -    git_hash: 96a559c7c1f7b9231db2b5cece7ecae980ae835d
    15 
    +    git_hash: 948fad2286cb59fe168a949009b67d986fd9c153
    16 16 
         targets:
    17 17 
           nightly:
    18 18 
             git_hash: 'base-browser'
    19 19 
       tor-browser:
    20 20 
         tor-browser: '[% INCLUDE build %]'
    21 
    -    git_hash: 3becb908fbf68aa77accc1f2e03e2c29f4fe40e2
    21 
    +    git_hash: ec17987af29cb2614d114789996a3b4a09cbc3e7
    22 22 
         targets:
    23 23 
           nightly:
    24 24 
             git_hash: 'tor-browser'
    ... ... @@ -32,7 +32,7 @@ steps:
    32 32 
         fenix: '[% INCLUDE build %]'
    33 33 
         # We need to bump the commit before releasing but just pointing to a branch
    34 34 
         # might cause too much rebuidling of the Firefox part.
    35 
    -    git_hash: 674a3f4d2d75b9688a54e5f1a0139feb617339d3
    35 
    +    git_hash: 0beea4b4b7b964d8e6624a04f3e9ec24c5be28b8
    36 36 
         compress_tar: 'zst'
    37 37 
         targets:
    38 38 
           nightly:

  • rbm.conf
    ... ... @@ -74,11 +74,11 @@ buildconf:
    74 74 
       git_signtag_opt: '-s'
    75 75
    76 76 
     var:
    77 
    -  torbrowser_version: '15.0a1'
    77 
    +  torbrowser_version: '15.0a2'
    78 78 
       torbrowser_build: 'build1'
    79 79 
       # This should be the date of when the build is started. For the build
    80 80 
       # to be reproducible, browser_release_date should always be in the past.
    81 
    -  browser_release_date: '2025/07/29 10:33:44'
    81 
    +  browser_release_date: '2025/08/29 13:09:47'
    82 82 
       browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
    83 83 
       browser_default_channel: alpha
    84 84 
       browser_platforms:
    ... ... @@ -128,9 +128,9 @@ var:
    128 128 
       updater_enabled: 1
    129 129 
       build_mar: 1
    130 130 
       torbrowser_incremental_from:
    131 
    +    - 15.0a1
    131 132 
         - 14.5a6
    132 133 
         - 14.5a5
    133 
    -    - 14.5a4
    134 134 
       mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
    135 135
    136 136 
       # By default, we sort the list of installed packages. This allows sharing

    • —
    View it on GitLab.
    You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help Notification message regarding https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f04ab8cdf968dde150f4ea8af5a19b268152872f at 1756482351