* Bug 44348: Backport Bugzilla 1999126: Protect whether PDF.js is enabled/disabled to improve fingerprinting protection [tor-browser]

    * Bug 44391: Restrictions cascade blocks every capability in subframes (e.g. captchas) [tor-browser]

    * Bug 44409: Backport Security Fixes from Firefox 146 [tor-browser]

  * Build System

    * All Platforms

      * Bug 493: Automatically check whether the signed build is avaliable on dist.torproject.org before notifying Mullvad for QA [mullvad-browser]

    * Bug 41646: Update lyrebird version to v0.7.0 [tor-browser-build]

  * Windows + macOS + Linux

    * Updated Firefox to 140.6.0esr

  * Android

    * Updated GeckoView to 140.6.0esr

    * Bug 44346: Webrender broken on Adreno 510 devices with esr140 [tor-browser]

   browser_series: '15.0'

   browser_rebase: 1

   browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'

   copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'

   nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'

   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser

       updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/'

       mar_id_prefix: 'mullvadbrowser-mullvad'

       nightly_updates_publish_dir_prefix: mullvadbrowser-

   linux-x86_64:

     var:

       arch_deps:

 var:

   torbrowser_version: '15.0.3'

   # This should be the date of when the build is started. For the build

   # to be reproducible, browser_release_date should always be in the past.

   browser_release_date: '2025/12/08 08:01:36'