Pier Angelo Vendrame pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build Commits: 166b1f8f by Pier Angelo Vendrame at 2026-09-28T19:16:22+02:00 Bug 41881&41882: Prepared Tor, Mullvad Browser 15.0.24 - - - - - 8 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/tor/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,18 @@ +Mullvad Browser 15.0.24 - September 29 2026 + * All Platforms + * Updated Firefox to 140.17.0esr + * Updated NoScript to 13.6.35.1984 + * Updated uBlock Origin to 1.75.0 + * Bug 583: Rebase Mullvad Browser stable onto 140.17.0esr [mullvad-browser] + * Bug 45366: Backport Security Fixes from Firefox 157 [tor-browser] + * Bug 45368: Account for onion aliases in NoScript site parsing [tor-browser] + * Bug 45371: Hook CharacterData/Range insertion sinks for content patches propagation [tor-browser] + * Build System + * All Platforms + * Bug 41847: Sign all releases using new gpg subkey [tor-browser-build] + * macOS + * Bug 41883: Fix sha256sum definition in projects/hfsplus-tools/config [tor-browser-build] + Mullvad Browser 15.0.23 - September 15 2026 * All Platforms * Updated Firefox to 140.16.0esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,25 @@ +Tor Browser 15.0.24 - September 29 2026 + * All Platforms + * Updated NoScript to 13.6.35.1984 + * Updated Tor to 0.4.9.13 + * Bug 45358: Rebase Tor Browser stable onto 140.17.0esr [tor-browser] + * Bug 45366: Backport Security Fixes from Firefox 157 [tor-browser] + * Bug 45368: Account for onion aliases in NoScript site parsing [tor-browser] + * Bug 45371: Hook CharacterData/Range insertion sinks for content patches propagation [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 140.17.0esr + * Bug 45218: Implement YEC 2026 Takeover for Desktop Stable [tor-browser] + * Linux + * Bug 44996: Change the 32-bit linux message to the expired version for the final 15.0 release [tor-browser] + * Android + * Updated GeckoView to 140.17.0esr + * Bug 45217: Implement YEC 2026 Takeover for Android Stable [tor-browser] + * Build System + * All Platforms + * Bug 41847: Sign all releases using new gpg subkey [tor-browser-build] + * macOS + * Bug 41883: Fix sha256sum definition in projects/hfsplus-tools/config [tor-browser-build] + Tor Browser 15.0.23 - September 15 2026 * All Platforms * Updated NoScript to 13.6.33.1984 ===================================== projects/browser/config ===================================== @@ -114,15 +114,15 @@ input_files: - filename: dmg-root enable: '[% ! c("var/android") %]' - name: fenix-nightly-apk - URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/09/2026-09-13-21-24-39-fenix-... + URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/09/2026-09-28-09-23-19-fenix-... enable: '[% c("var/android") %]' - sha256sum: fdb4e2eceee55a0410f6ec1cf9fee0487b6fc44abe5f00ccde4a4def1ceb5bbc - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.33.1984.xpi + sha256sum: 98d417769ab6c8d455cd64b9bfdc55cb8948e875e8e52895eeab33c582f05c1f + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.35.1984.xpi name: noscript - sha256sum: 1e4e7a1a45b2b2826688c072a35d366610312237778835ce07c8b5179a4cb7e4 - - URL: https://addons.mozilla.org/firefox/downloads/file/4981431/ublock_origin-1.74... + sha256sum: c698283f4cfebc3d154cfbb45776c2aaee061e895a40d0dc419ac4004819f1b9 + - URL: https://addons.mozilla.org/firefox/downloads/file/5034826/ublock_origin-1.75... name: ublock-origin - sha256sum: 175756d74468c9ba45863f7fc333d3be670f82d5b066314e915814dd547d1652 + sha256sum: 5b74415860456370644bd80f16125e865b0e6c356bb5dfcfb84069967eaa5287 enable: '[% c("var/mullvad-browser") %]' - URL: https://cdn.mullvad.net/browser-extension/0.9.10/mullvad-browser-extension-0... name: mullvad-extension ===================================== projects/firefox/config ===================================== @@ -18,12 +18,12 @@ container: use_container: 1 var: - firefox_platform_version: '140.16.0' + firefox_platform_version: '140.17.0' firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 2 + browser_build: 4 copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser @@ -116,6 +116,7 @@ targets: updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' mar_id_prefix: 'mullvadbrowser-mullvad' nightly_updates_publish_dir_prefix: mullvadbrowser- + browser_build: 2 linux-x86_64: var: ===================================== projects/geckoview/config ===================================== @@ -20,12 +20,12 @@ container: build_apk: 1 var: - firefox_platform_version: '140.16.0' + firefox_platform_version: '140.17.0' geckoview_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 2 + browser_build: 4 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/tor/config ===================================== @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' -version: 0.4.9.12 +version: 0.4.9.13 git_hash: 'tor-[% c("version") %]' git_url: https://gitlab.torproject.org/tpo/core/tor.git git_submodule: 1 ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 42c240fa39334d44b52a082ece7ea992ce4ff03c + git_hash: c62d7c244409d6d6ca37cd7f4819260ffc3cf60b targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: b43f67013b014d128543404f8e159dd51250da8f + git_hash: 8cae94965791def3a7e63a1acb9e998ce8133de9 targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 086dbaa310f8aa50530f28d68c937d378208a1ad + git_hash: 61d9e9dc2c94ca0e071ce3be0b018c5a5958101f compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -74,11 +74,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '15.0.23' + torbrowser_version: '15.0.24' torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2026/09/14 10:00:00' + browser_release_date: '2026/09/28 08:30:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: release browser_platforms: @@ -128,10 +128,10 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 15.0.23 - '[% IF c("var/tor-browser") %]15.0.22[% END %]' - 15.0.21 - 15.0.20 - - '[% IF c("var/mullvad-browser") %]15.0.19[% END %]' mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/16... -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/16... You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help