Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 954ed2c0 by Pier Angelo Vendrame at 2026-05-04T19:10:06+02:00 Bug 41768&41769: Prepare Tor&Mullvad Browser 16.0a6. - - - - - 11 changed files: - projects/application-services/config - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/moat-settings/config - projects/openssl/config - projects/translation/config - rbm.conf Changes: ===================================== projects/application-services/config ===================================== @@ -20,7 +20,7 @@ container: build: '[% !c("var/generate_gradle_dependencies_list") %]' var: - build_number: 1 + build_number: 2 gradle_version: 8.14.3 # NSS version ans sha256 are in libs/build-all.sh. nss_version: '3.121' ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,39 @@ +Mullvad Browser 16.0a6 - May 05 2026 + * All Platforms + * Updated Firefox to 150.0a1 + * Updated NoScript to 13.6.17.90101984 + * Updated Mullvad Browser Extension to 0.9.10 + * Bug 528: Rebase Mullvad Browser alpha onto 150.0a1 [mullvad-browser] + * Bug 44402: Re-enable ESLint rule mozilla/no-browser-refs-in-toolkit as an error + * Bug 44560: Customize the flags for alternate 'Application Data' directories [tor-browser] + * Bug 44685: Use border radius for letterboxing [tor-browser] + * Bug 44749: Check search engines parameter replacements [tor-browser] + * Bug 44828: Remove browser module references from toolkit/modules/ActorManagerParent.sys.mjs [tor-browser] + * Bug 44832: Hide the Firefox mascot in about:neterror [tor-browser] + * Bug 44847: Drop letterboxing sidebar rounded corner logic [tor-browser] + * Bug 44865: Block chrome://*/locale/* to content [tor-browser] + * Bug 44870: Remove legacy branch from gitlab templates [tor-browser] + * Bug 44895: Undo the patch for #44772 [tor-browser] + * Bug 44902: Error in privacy preference initialisation due to missing `dataCollectionViewProfilesMultiProfileBackupWarning` [tor-browser] + * Bug 31860: Start using LTO for firefox project [tor-browser-build] + * Windows + * Bug 44862: Fontvis is missing Segoe MDL2 Assets [tor-browser] + * Bug 44868: Backport 138c33ea964b2e0a4875aadc39d8a948e0c2aace to 150 to fix Windows builds [tor-browser] + * Linux + * Bug 44521: Disable widget.wayland.fractional-scale.enabled [tor-browser] + * Build System + * All Platforms + * Bug 41764: Update toolchains for Firefox 150 [tor-browser-build] + * Bug 41767: Add jwilde to allowed signer for browser projects [tor-browser-build] + * Bug 41778: Remove base-browser from protected-branches.py [tor-browser-build] + * Bug 41780: Create sha256sums-unsigned-build.txt in artifacts/$platform directories [tor-browser-build] + * Bug 41786: Add comment to rbm.local.conf.example warning about potential recursive loops in tmp_dir definition [tor-browser-build] + * Bug 40106: Improve error message in case of recursive definition [rbm] + * Windows + * Bug 44853: Update target in mozconfig-windows-x86_64 and mozconfig-windows-i686 [tor-browser] + * macOS + * Bug 41773: Change the position of -mindepth when creating the dmg [tor-browser-build] + Mullvad Browser 16.0a5 - April 01 2026 * All Platforms * Updated Firefox to 149.0a1 ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,67 @@ +Tor Browser 16.0a6 - May 05 2026 + * All Platforms + * Updated NoScript to 13.6.17.90101984 + * Updated OpenSSL to 3.5.6 + * Bug 43857: Review in-source TODOs [tor-browser] + * Bug 44402: Re-enable ESLint rule mozilla/no-browser-refs-in-toolkit as an error + * Bug 44749: Check search engines parameter replacements [tor-browser] + * Bug 44792: Rebase alpha onto 150.0a1 [tor-browser] + * Bug 44796: Adjust TorProviderBuilder to report the provider state to consumers [tor-browser] + * Bug 44828: Remove browser module references from toolkit/modules/ActorManagerParent.sys.mjs [tor-browser] + * Bug 44841: TorDomainIsolator proxy filter returns null on exception instead of preserving SOCKS proxy [tor-browser] + * Bug 44865: Block chrome://*/locale/* to content [tor-browser] + * Bug 44870: Remove legacy branch from gitlab templates [tor-browser] + * Bug 44895: Undo the patch for #44772 [tor-browser] + * Bug 41775: Update list of Snowflake STUN servers in default bridge line, 2026 edition [tor-browser-build] + * Windows + macOS + Linux + * Updated Firefox to 150.0a1 + * Bug 44288: New identity fails to block loading a custom home page [tor-browser] + * Bug 44560: Customize the flags for alternate 'Application Data' directories [tor-browser] + * Bug 44648: Unexpected changes to SearchService.sys.mjs [tor-browser] + * Bug 44685: Use border radius for letterboxing [tor-browser] + * Bug 44798: Don't load `about:torconnect` into iframes [tor-browser] + * Bug 44832: Hide the Firefox mascot in about:neterror [tor-browser] + * Bug 44846: about:torconnect redirect doesn't work with the new neterror page [tor-browser] + * Bug 44847: Drop letterboxing sidebar rounded corner logic [tor-browser] + * Bug 44902: Error in privacy preference initialisation due to missing `dataCollectionViewProfilesMultiProfileBackupWarning` [tor-browser] + * Bug 31860: Start using LTO for firefox project [tor-browser-build] + * Windows + * Bug 44862: Fontvis is missing Segoe MDL2 Assets [tor-browser] + * Bug 44868: Backport 138c33ea964b2e0a4875aadc39d8a948e0c2aace to 150 to fix Windows builds [tor-browser] + * macOS + * Bug 41476: Since 13.5-legacy is not longer supported, remove tools/signing/wrappers/sign-rcodesign [tor-browser-build] + * Linux + * Bug 44361: Notify Linux i686 users that they won't receive updates anymore [tor-browser] + * Bug 44521: Disable widget.wayland.fractional-scale.enabled [tor-browser] + * Android + * Updated GeckoView to 150.0a1 + * Bug 44615: Remove ability to "Rate/Review in Google Play" in app [tor-browser] + * Bug 44827: Always enable noscript for android [tor-browser] + * Bug 44842: Replace instances of SwitchPreference with SwitchPreferenceCompat [tor-browser] + * Bug 44848: Do not overwrite Android toolchains on default mozconfigs [tor-browser] + * Bug 44880: Fix edgeToEdge display issue presented in 150 android rebase [tor-browser] + * Bug 44925: Fix bootstrap screen color styling for light mode presented in one of the rebases between 140 and 150 [tor-browser] + * Build System + * All Platforms + * Bug 41591: Remove support for old mar filenames when 13.5 legacy branch is EOL [tor-browser-build] + * Bug 41764: Update toolchains for Firefox 150 [tor-browser-build] + * Bug 41767: Add jwilde to allowed signer for browser projects [tor-browser-build] + * Bug 41778: Remove base-browser from protected-branches.py [tor-browser-build] + * Bug 41780: Create sha256sums-unsigned-build.txt in artifacts/$platform directories [tor-browser-build] + * Bug 41786: Add comment to rbm.local.conf.example warning about potential recursive loops in tmp_dir definition [tor-browser-build] + * Bug 40106: Improve error message in case of recursive definition [rbm] + * Windows + macOS + Linux + * Bug 41759: Remove references to legacy release in tor-browser-build [tor-browser-build] + * Windows + Linux + Android + * Bug 41770: Update Go to 1.26.x [tor-browser-build] + * Updated Go to 1.26.2 + * Windows + * Bug 44853: Update target in mozconfig-windows-x86_64 and mozconfig-windows-i686 [tor-browser] + * macOS + * Bug 41773: Change the position of -mindepth when creating the dmg [tor-browser-build] + * Linux + * Bug 44555: Remove mozconfig-linux-i686 [tor-browser] + Tor Browser 16.0a5 - April 01 2026 * All Platforms * Updated NoScript to 13.6.14.90101984 ===================================== projects/browser/config ===================================== @@ -87,16 +87,16 @@ input_files: enable: '[% !c("var/android") %]' - filename: dmg-root enable: '[% c("var/macos") %]' - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.14.90101984.xp... + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.17.90101984.xp... name: noscript - sha256sum: e02bcdecaa47512a116ae7367f70c327aaa084817fe64e66ac6fbb52dc2c492a + sha256sum: 625cac7e3a275398c2cdb38667b20ad57fde9015a9ab2c39f1b77bb42c32c639 - URL: https://addons.mozilla.org/firefox/downloads/file/4721638/ublock_origin-1.70... name: ublock-origin sha256sum: f2730d2877005763a45d765749892e936f49cae713d28f7aa6ea314454b89cf1 enable: '[% c("var/mullvad-browser") %]' - - URL: https://cdn.mullvad.net/browser-extension/0.9.7/mullvad-browser-extension-0.... + - URL: https://cdn.mullvad.net/browser-extension/0.9.10/mullvad-browser-extension-0... name: mullvad-extension - sha256sum: 4597ee6fff6a2f19cbf78a6149d38d12ad8a9d6029b7e36f6c639dc3e07dd2c3 + sha256sum: d8adfd5d83c67d8d50d9466c6564755de79a8a0825f5c67a151919506d411b30 enable: '[% c("var/mullvad-browser") %]' - project: manual name: manual ===================================== projects/firefox/config ===================================== @@ -23,7 +23,7 @@ var: browser_series: '16.0' browser_rebase: 2 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 2 upstream_firefox_commit: FIREFOX_NIGHTLY_150_END copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' ===================================== projects/geckoview/config ===================================== @@ -26,7 +26,7 @@ var: browser_series: '16.0' browser_rebase: 2 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 2 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.26.1' +version: '1.26.2' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: 3172293d04b209dc1144698e7ba13f0477f6ba8c5ffd0be66c20fdbc9785dfbb + source_sha256: 2e91ebb6947a96e9436fb2b3926a8802efe63a6d375dffec4f82aa9dbd6fd43b no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist ===================================== projects/moat-settings/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' git_url: https://gitlab.torproject.org/tpo/anti-censorship/rdsys-admin.git -git_hash: b99317d18b69d878700e124bbfe575495581270d +git_hash: 0061ce86ee2dfc8c451a78d28d0ef09e4ed7f36e version: '[% c("abbrev") %]' # Use gz for now, since we do not support Zstandard on Linux containers. compress_tar: 'gz' ===================================== projects/openssl/config ===================================== @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 3.5.5 +version: 3.5.6 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -41,5 +41,5 @@ input_files: - name: '[% c("var/compiler") %]' project: '[% c("var/compiler") %]' - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz' - sha256sum: b28c91532a8b65a1f983b4c28b7488174e4a01008e29ce8e69bd789f28bc2a89 + sha256sum: deae7c80cba99c4b4f940ecadb3c3338b13cb77418409238e57d7f31f2a3b736 name: openssl ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 25f648dc77b9fe7a6f376a009f2e0073df66b62e + git_hash: bca639ef183dba065e6f9dc0bab86aedb03f9335 targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: df0ed48b6e007f4e078ea03cbe2c06a5756af991 + git_hash: 20629720924f89d8a8561f84c8808e4feaf78135 targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 8451b06e9473a2b137d2f19cd604062891396788 + git_hash: 2c08eef67c3e6d720b23b9766d12807e25fb805e compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -81,11 +81,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '16.0a5' - torbrowser_build: 'build2' + torbrowser_version: '16.0a6' + torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2026/03/31 17:00:00' + browser_release_date: '2026/05/04 16:00:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: alpha browser_platforms: @@ -131,9 +131,9 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 16.0a5 - 16.0a4 - 16.0a3 - - 16.0a2 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/95... -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/95... You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help