morgan pushed to branch main at The Tor Project / Applications / tor-browser-build

Commits:

11 changed files:

Changes:

  • projects/application-services/config
    ... ... @@ -16,7 +16,7 @@ container:
    16 16 
       use_container: 1
    17 17
    18 18 
     var:
    19 
    -  build_number: 2
    19 
    +  build_number: 3
    20 20 
       # This should be updated when the list of gradle dependencies is changed.
    21 21 
       gradle_dependencies_version: 12
    22 22 
       gradle_version: 8.13

  • projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
    1 
    +Mullvad Browser 15.0a1 - July 29 2025
    2 
    + * All Platforms
    3 
    +   * Updated Firefox to 140.1.0esr
    4 
    +   * Updated NoScript to 13.0.8
    5 
    +   * Updated uBlock Origin to 1.65.0
    6 
    +   * Bug 457: Rebase Mullvad Browser Alpha onto 140.1esr [mullvad-browser]
    7 
    +   * Bug 42738: Tidy up the commit structure for browser updates UI [tor-browser]
    8 
    +   * Bug 43397: Click to play should override "Any capability blocked in the top document must be blocked in its subdocuments too" [tor-browser]
    9 
    +   * Bug 43590: Move letterboxing rules out of browser/base/content/browser.css [tor-browser]
    10 
    +   * Bug 43610: Use newer CSS variable names for ESR 140 [tor-browser]
    11 
    +   * Bug 43629: All migrations in _migrateUIBB are run for new profiles [tor-browser]
    12 
    +   * Bug 43635: Console noise due to the x-load capability not being localized [tor-browser]
    13 
    +   * Bug 43638: Fix up our `<command>` elements [tor-browser]
    14 
    +   * Bug 43772: Do not use official branding for BB/TB/MB [tor-browser]
    15 
    +   * Bug 43776: Set branding files for l10n merging [tor-browser]
    16 
    +   * Bug 43886: Fix new tab for ESR 140 [tor-browser]
    17 
    +   * Bug 43905: base-browser.ftl missing from about:addons [tor-browser]
    18 
    +   * Bug 43906: Extension.sys.mjs change in the wrong commit [tor-browser]
    19 
    +   * Bug 43929: two about:tor pages opened after update [tor-browser]
    20 
    +   * Bug 43947: Console error from ContentBlockingPrefs.init [tor-browser]
    21 
    +   * Bug 43989: Switch off AI chatbot preference [tor-browser]
    22 
    +   * Bug 43993: Backport Security Fixes from Firefox 141 [tor-browser]
    23 
    + * Windows
    24 
    +   * Bug 440: Make abseil use win32 thread model on mingw [mullvad-browser]
    25 
    + * Build System
    26 
    +   * All Platforms
    27 
    +     * Bug 43777: Disable ./mach telemetry [tor-browser]
    28 
    +     * Bug 43891: Update the translation CI to use the new mozilla versions [tor-browser]
    29 
    +     * Bug 34434: Remove unused variables from rbm.conf [tor-browser-build]
    30 
    +     * Bug 40994: Add support in do-all-signing to sign release for some archs only [tor-browser-build]
    31 
    +     * Bug 41227: Update projects/common/list_toolchain_updates-common-firefox-geckoview to include check for binutils [tor-browser-build]
    32 
    +     * Bug 41435: Skip update-responses update entries for versions without incremental or full update mar [tor-browser-build]
    33 
    +     * Bug 41444: Build artifacts to support artifact builds of Tor/Muillvad/Base Browser [tor-browser-build]
    34 
    +     * Bug 41448: Update toolchains for Firefox ESR 140 [tor-browser-build]
    35 
    +     * Bug 41449: Add prefix to update-responses xml files [tor-browser-build]
    36 
    +     * Bug 41451: When update-responses contains multiple versions, .htaccess only has one no-update.xml redirect [tor-browser-build]
    37 
    +     * Bug 41452: Skip update-responses xml files for versions which don't have incrementals [tor-browser-build]
    38 
    +     * Bug 41457: Set mar IDs as env variables in tor-browser-build [tor-browser-build]
    39 
    +     * Bug 41459: Update taskcluster/ci paths in README and comments [tor-browser-build]
    40 
    +     * Bug 41460: Add brizental to the list of people who can sign Tor Browser and Mullvad Browser tags [tor-browser-build]
    41 
    +     * Bug 41465: Disable development artifacts generation by default, keep it enabled for nightly builds [tor-browser-build]
    42 
    +     * Bug 41467: Remove list_toolchain_updates-firefox-android from Makefile [tor-browser-build]
    43 
    +     * Bug 41477: Update keyring/boklm.gpg for new subkeys (2025) [tor-browser-build]
    44 
    +     * Bug 41478: Add vim and others missing basic tools to base container image [tor-browser-build]
    45 
    +     * Bug 41496: Clean up unused projects [tor-browser-build]
    46 
    +     * Bug 41498: Update keyring/morgan.gpg with updated public key [tor-browser-build]
    47 
    +     * Bug 41501: cargo_vendor generated archive maintains timestamps [tor-browser-build]
    48 
    +     * Bug 40084: Always use bash for the debug terminal [rbm]
    49 
    +   * macOS
    50 
    +     * Bug 41503: Error 403 when downloading macOS SDK [tor-browser-build]
    51 
    +   * Linux
    52 
    +     * Bug 41458: Ship geckodriver only on Linux [tor-browser-build]
    53 
    +     * Bug 41488: Disable sys/random.h for Node.js [tor-browser-build]
    54 
    +
    1 55 
     Mullvad Browser 14.5a6 - April 08 2025
    2 56 
      * All Platforms
    3 57 
        * Updated Firefox to 128.9.0esr

  • projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
    1 
    +Tor Browser 15.0a1 - July 29 2025
    2 
    + * All Platforms
    3 
    +   * Updated NoScript to 13.0.8
    4 
    +   * Updated OpenSSL to 3.5.1
    5 
    +   * Bug 43397: Click to play should override "Any capability blocked in the top document must be blocked in its subdocuments too" [tor-browser]
    6 
    +   * Bug 43772: Do not use official branding for BB/TB/MB [tor-browser]
    7 
    +   * Bug 43783: Tighten up the SecurityLevel module to enforce new UX flow [tor-browser]
    8 
    +   * Bug 43784: Get confirmation from NoScript that settings are applied [tor-browser]
    9 
    +   * Bug 43853: DomainFrontedRequests: setData is no longer a function [tor-browser]
    10 
    +   * Bug 43880: Update moat's domain front url [tor-browser]
    11 
    +   * Bug 43993: Backport Security Fixes from Firefox 141 [tor-browser]
    12 
    +   * Bug 44000: Rebase Tor Browse Alpha onto 140.1.0esr [tor-browser]
    13 
    +   * Bug 41502: Application services build is failing on isNetworkAllowed() [tor-browser-build]
    14 
    +   * Bug 41508: Switch built-in meek bridge to meek-unredacted [tor-browser-build]
    15 
    +   * Bug 41515: Bump version of Conjure to include P173 improvements [tor-browser-build]
    16 
    + * Windows + macOS + Linux
    17 
    +   * Updated Firefox to 140.1.0esr
    18 
    +   * Bug 42738: Tidy up the commit structure for browser updates UI [tor-browser]
    19 
    +   * Bug 43590: Move letterboxing rules out of browser/base/content/browser.css [tor-browser]
    20 
    +   * Bug 43610: Use newer CSS variable names for ESR 140 [tor-browser]
    21 
    +   * Bug 43629: All migrations in _migrateUIBB are run for new profiles [tor-browser]
    22 
    +   * Bug 43635: Console noise due to the x-load capability not being localized [tor-browser]
    23 
    +   * Bug 43638: Fix up our `<command>` elements [tor-browser]
    24 
    +   * Bug 43765: Temporarily disable Lox [tor-browser]
    25 
    +   * Bug 43766: Only save the relevant TorSettings changes to preferences. [tor-browser]
    26 
    +   * Bug 43776: Set branding files for l10n merging [tor-browser]
    27 
    +   * Bug 43782: Add new UX flow for changing security level (Desktop) [tor-browser]
    28 
    +   * Bug 43879: tor-branding.css declarations are overwritten [tor-browser]
    29 
    +   * Bug 43886: Fix new tab for ESR 140 [tor-browser]
    30 
    +   * Bug 43905: base-browser.ftl missing from about:addons [tor-browser]
    31 
    +   * Bug 43906: Extension.sys.mjs change in the wrong commit [tor-browser]
    32 
    +   * Bug 43913: Bizarre right-clicking issues: menu items blanked out and/or not working; too many items in the right-click menu; different right-clicking menu displayed initially for links [tor-browser]
    33 
    +   * Bug 43929: two about:tor pages opened after update [tor-browser]
    34 
    +   * Bug 43930: Onionize toggle not centre aligned in about:tor [tor-browser]
    35 
    +   * Bug 43947: Console error from ContentBlockingPrefs.init [tor-browser]
    36 
    +   * Bug 43989: Switch off AI chatbot preference [tor-browser]
    37 
    + * Android
    38 
    +   * Updated GeckoView to 140.1.0esr
    39 
    +   * Bug 43577: Flush settings fails on Android [tor-browser]
    40 
    +   * Bug 43786: Add new UX flow for changing security level (Android) [tor-browser]
    41 
    +   * Bug 43855: brand.properties merging on Android is broken in 140 [tor-browser]
    42 
    +   * Bug 44029: Search/url bar doesn't work on android after ESR 140 [tor-browser]
    43 
    +   * Bug 44036: Crash on opening "Search Settings" on android [tor-browser]
    44 
    +   * Bug 41494: Update GeckoView build scripts for ESR140 [tor-browser-build]
    45 
    + * Build System
    46 
    +   * All Platforms
    47 
    +     * Bug 43615: Add Gitlab Issue and Merge request templates [tor-browser]
    48 
    +     * Bug 43616: Customize Gitlab Issue and Merge templates [tor-browser]
    49 
    +     * Bug 43777: Disable ./mach telemetry [tor-browser]
    50 
    +     * Bug 43891: Update the translation CI to use the new mozilla versions [tor-browser]
    51 
    +     * Bug 43954: Update tb-dev to handle lightweight tags [tor-browser]
    52 
    +     * Bug 43962: update tb-dev auto-fixup for git 2.50 [tor-browser]
    53 
    +     * Bug 34434: Remove unused variables from rbm.conf [tor-browser-build]
    54 
    +     * Bug 40994: Add support in do-all-signing to sign release for some archs only [tor-browser-build]
    55 
    +     * Bug 41227: Update projects/common/list_toolchain_updates-common-firefox-geckoview to include check for binutils [tor-browser-build]
    56 
    +     * Bug 41432: Bump OpenSSL to >= 3.5.0 [tor-browser-build]
    57 
    +     * Bug 41434: Go updates shouldn't target all platforms until macOS is on legacy in the changelogs [tor-browser-build]
    58 
    +     * Bug 41435: Skip update-responses update entries for versions without incremental or full update mar [tor-browser-build]
    59 
    +     * Bug 41444: Build artifacts to support artifact builds of Tor/Muillvad/Base Browser [tor-browser-build]
    60 
    +     * Bug 41448: Update toolchains for Firefox ESR 140 [tor-browser-build]
    61 
    +     * Bug 41449: Add prefix to update-responses xml files [tor-browser-build]
    62 
    +     * Bug 41451: When update-responses contains multiple versions, .htaccess only has one no-update.xml redirect [tor-browser-build]
    63 
    +     * Bug 41459: Update taskcluster/ci paths in README and comments [tor-browser-build]
    64 
    +     * Bug 41460: Add brizental to the list of people who can sign Tor Browser and Mullvad Browser tags [tor-browser-build]
    65 
    +     * Bug 41465: Disable development artifacts generation by default, keep it enabled for nightly builds [tor-browser-build]
    66 
    +     * Bug 41467: Remove list_toolchain_updates-firefox-android from Makefile [tor-browser-build]
    67 
    +     * Bug 41477: Update keyring/boklm.gpg for new subkeys (2025) [tor-browser-build]
    68 
    +     * Bug 41478: Add vim and others missing basic tools to base container image [tor-browser-build]
    69 
    +     * Bug 41486: Track bundletool and osslicenses-plugin versions in list_toolchain_updates_checks [tor-browser-build]
    70 
    +     * Bug 41496: Clean up unused projects [tor-browser-build]
    71 
    +     * Bug 41498: Update keyring/morgan.gpg with updated public key [tor-browser-build]
    72 
    +     * Bug 41501: cargo_vendor generated archive maintains timestamps [tor-browser-build]
    73 
    +     * Bug 41514: Remove var/build_go_lib from projects/go/config [tor-browser-build]
    74 
    +     * Bug 40084: Always use bash for the debug terminal [rbm]
    75 
    +   * Windows + macOS + Linux
    76 
    +     * Bug 41452: Skip update-responses xml files for versions which don't have incrementals [tor-browser-build]
    77 
    +     * Bug 41457: Set mar IDs as env variables in tor-browser-build [tor-browser-build]
    78 
    +   * Windows + Linux + Android
    79 
    +     * Updated Go to 1.23.11
    80 
    +   * macOS
    81 
    +     * Bug 41503: Error 403 when downloading macOS SDK [tor-browser-build]
    82 
    +   * Linux
    83 
    +     * Bug 41458: Ship geckodriver only on Linux [tor-browser-build]
    84 
    +     * Bug 41488: Disable sys/random.h for Node.js [tor-browser-build]
    85 
    +   * Android
    86 
    +     * Bug 43984: Update android build scripts and docs for ESR 140 [tor-browser]
    87 
    +     * Bug 43987: 140 Android is not reproducible [tor-browser]
    88 
    +     * Bug 41280: download-android-<arch>.json does not get updated for android-only releases [tor-browser-build]
    89 
    +     * Bug 41453: Update application-services and uniffi-rs for ESR140 [tor-browser-build]
    90 
    +     * Bug 41483: geckoview_example-withGeckoBinaries-....apk doesn't exist anymore in Firefox 140 [tor-browser-build]
    91 
    +     * Bug 41484: Create a fork of application-services [tor-browser-build]
    92 
    +     * Bug 41499: Android nightly builds are broken [tor-browser-build]
    93 
    +     * Bug 41500: Optimize tor and its dependencies for size on Android [tor-browser-build]
    94 
    +     * Bug 41506: Use appilcation-services branch for nightlies builds [tor-browser-build]
    95 
    +     * Bug 41507: Single-arch build fails because artifacts don't have arch subdirectories [tor-browser-build]
    96 
    +
    1 97 
     Tor Browser 14.5a6 - April 08 2025
    2 98 
      * All Platforms
    3 99 
        * Updated Tor to 0.4.9.2-alpha

  • projects/browser/config
    ... ... @@ -113,12 +113,12 @@ input_files:
    113 113 
         enable: '[% ! c("var/android") %]'
    114 114 
       - filename: dmg-root
    115 115 
         enable: '[% ! c("var/android") %]'
    116 
    -  - URL: https://addons.mozilla.org/firefox/downloads/file/4411102/noscript-12.1.1.xpi
    116 
    +  - URL: https://addons.mozilla.org/firefox/downloads/file/4497468/noscript-13.0.8.xpi
    117 117 
         name: noscript
    118 
    -    sha256sum: f9639e63ffcfc352036de00e4ff6694bb0ca65a0bb8fbd103bd08f32dc1ff31a
    119 
    -  - URL: https://addons.mozilla.org/firefox/downloads/file/4458450/ublock_origin-1.63.2.xpi
    118 
    +    sha256sum: 9d978cfe083cb9cce120b5ee41e8933d752d7ab4680bf517c5ec4b29c4cfd2dc
    119 
    +  - URL: https://addons.mozilla.org/firefox/downloads/file/4531307/ublock_origin-1.65.0.xpi
    120 120 
         name: ublock-origin
    121 
    -    sha256sum: d93176cef4dc042e41ba500aa2a90e5d57b5be77449cbd522111585e3a0cd158
    121 
    +    sha256sum: 3e73c96a29a933866065f0756fe032984bf5b254af8dd1afd7a7f7e0668a33cf
    122 122 
         enable: '[% c("var/mullvad-browser") %]'
    123 123 
       - URL: https://cdn.mullvad.net/browser-extension/0.9.4/mullvad-browser-extension-0.9.4.xpi
    124 124 
         name: mullvad-extension

  • projects/firefox/config
    ... ... @@ -21,7 +21,7 @@ var:
    21 21 
       browser_series: '15.0'
    22 22 
       browser_rebase: 1
    23 23 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    24 
    -  browser_build: 1
    24 
    +  browser_build: 3
    25 25 
       copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
    26 26 
       nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'
    27 27 
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
    ... ... @@ -115,6 +115,7 @@ targets:
    115 115 
           mar_id_prefix: 'mullvadbrowser-mullvad'
    116 116 
           nightly_updates_publish_dir_prefix: mullvadbrowser-
    117 117
    118 
    +      browser_build: 1
    118 119 
       linux-x86_64:
    119 120 
         var:
    120 121 
           arch_deps:

  • projects/geckoview/config
    ... ... @@ -23,7 +23,7 @@ var:
    23 23 
       browser_series: '15.0'
    24 24 
       browser_rebase: 1
    25 25 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    26 
    -  browser_build: 1
    26 
    +  browser_build: 3
    27 27 
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
    28 28 
       git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
    29 29 
       deps:

  • projects/go/config
    1 1 
     # vim: filetype=yaml sw=2
    2 
    -version: '1.23.8'
    2 
    +version: '1.23.11'
    3 3 
     filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    4 4 
     container:
    5 5 
       use_container: 1
    6 6
    7 7 
     var:
    8 
    -  source_sha256: 0ca1f1e37ea255e3ce283af3f4e628502fb444587da987a5bb96d6c6f15930d4
    8 
    +  source_sha256: 296381607a483a8a8667d7695331752f94a1f231c204e2527d2f22e1e3d1247d
    9 9 
       no_crosscompile: 1
    10 10 
       setup: |
    11 11 
         mkdir -p /var/tmp/dist

  • projects/manual/config
    1 1 
     # vim: filetype=yaml sw=2
    2 2 
     # To update, see doc/how-to-update-the-manual.txt
    3 3 
     # Remember to update also the package's hash, with the version!
    4 
    -version: 263551
    4 
    +version: 295391
    5 5 
     filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    6 6 
     container:
    7 7 
       use_container: 1
    ... ... @@ -23,6 +23,6 @@ input_files:
    23 23 
       - project: container-image
    24 24 
       - URL: 'https://build-sources.tbb.torproject.org/manual_[% c("version") %].zip'
    25 25 
         name: manual
    26 
    -    sha256sum: f8d312081457b1cab3e8fcafda1d0e534852b5d3c3cb1bd32100f13298cb7839
    26 
    +    sha256sum: feff63a5611438ae31c8237c9ce5cb463ec96cab07bd71f51a80ac5020d4e465
    27 27 
       - filename: packagemanual.py
    28 28 
         name: package_script

  • projects/openssl/config
    1 1 
     # vim: filetype=yaml sw=2
    2 
    -version: 3.5.0
    2 
    +version: 3.5.1
    3 3 
     filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    4 4 
     container:
    5 5 
       use_container: 1
    ... ... @@ -33,5 +33,5 @@ input_files:
    33 33 
       - name: '[% c("var/compiler") %]'
    34 34 
         project: '[% c("var/compiler") %]'
    35 35 
       - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz'
    36 
    -    sha256sum: 344d0a79f1a9b08029b0744e2cc401a43f9c90acd1044d09a530b4885a8e9fc0
    36 
    +    sha256sum: 529043b15cffa5f36077a4d0af83f3de399807181d607441d734196d889b641f
    37 37 
         name: openssl

  • projects/translation/config
    ... ... @@ -12,19 +12,19 @@ compress_tar: 'gz'
    12 12 
     steps:
    13 13 
       base-browser:
    14 14 
         base-browser: '[% INCLUDE build %]'
    15 
    -    git_hash: b54e21b36db35ad390c4f385b76cbd293a58cbc6
    15 
    +    git_hash: 96a559c7c1f7b9231db2b5cece7ecae980ae835d
    16 16 
         targets:
    17 17 
           nightly:
    18 18 
             git_hash: 'base-browser'
    19 19 
       tor-browser:
    20 20 
         tor-browser: '[% INCLUDE build %]'
    21 
    -    git_hash: 94aae5dcdfa2e99b516acb6a834a54f7de76e54f
    21 
    +    git_hash: 3becb908fbf68aa77accc1f2e03e2c29f4fe40e2
    22 22 
         targets:
    23 23 
           nightly:
    24 24 
             git_hash: 'tor-browser'
    25 25 
       mullvad-browser:
    26 26 
         mullvad-browser: '[% INCLUDE build %]'
    27 
    -    git_hash: 34b45a7417145b1f26784825ef6c873497cbda0a
    27 
    +    git_hash: bf09d9c070f72ad3aee24c54cb154bab2570247b
    28 28 
         targets:
    29 29 
           nightly:
    30 30 
             git_hash: 'mullvad-browser'
    ... ... @@ -32,7 +32,7 @@ steps:
    32 32 
         fenix: '[% INCLUDE build %]'
    33 33 
         # We need to bump the commit before releasing but just pointing to a branch
    34 34 
         # might cause too much rebuidling of the Firefox part.
    35 
    -    git_hash: b5bc0929fbfff8343a8c57e26ffa70ea4d38c2ce
    35 
    +    git_hash: 674a3f4d2d75b9688a54e5f1a0139feb617339d3
    36 36 
         compress_tar: 'zst'
    37 37 
         targets:
    38 38 
           nightly:

  • rbm.conf
    ... ... @@ -78,7 +78,7 @@ var:
    78 78 
       torbrowser_build: 'build1'
    79 79 
       # This should be the date of when the build is started. For the build
    80 80 
       # to be reproducible, browser_release_date should always be in the past.
    81 
    -  browser_release_date: '2025/04/08 17:53:31'
    81 
    +  browser_release_date: '2025/07/29 10:33:44'
    82 82 
       browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
    83 83 
       browser_default_channel: alpha
    84 84 
       browser_platforms:
    ... ... @@ -128,9 +128,9 @@ var:
    128 128 
       updater_enabled: 1
    129 129 
       build_mar: 1
    130 130 
       torbrowser_incremental_from:
    131 
    +    - 14.5a6
    131 132 
         - 14.5a5
    132 133 
         - 14.5a4
    133 
    -    - 14.5a3
    134 134 
       mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
    135 135
    136 136 
       # By default, we sort the list of installed packages. This allows sharing

    • —
    View it on GitLab.
    You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help Notification message regarding https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/47f95213418da25d0a412889477990ba7bd53898 at 1753790455