Pier Angelo Vendrame pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build

Commits:

12 changed files:

Changes:

  • projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
    1 
    +Mullvad Browser 15.0.8 - March 24 2026
    2 
    + * All Platforms
    3 
    +   * Updated Firefox to 140.9.0esr
    4 
    +   * Updated NoScript to 13.6.12.1984
    5 
    +   * Updated uBlock Origin to 1.70.0
    6 
    +   * Bug 521: Rebase Mullvad Browser stable onto 140.9.0esr [mullvad-browser]
    7 
    +   * Bug 44663: NoScript behavior on “Safer” security level prevents integrity checks for dynamically loaded javascript [tor-browser]
    8 
    +   * Bug 44680: Properly handle subdocuments created by data: URLs [tor-browser]
    9 
    +   * Bug 44761: Safer Level's worker patching filters out Worker constructor options [tor-browser]
    10 
    +   * Bug 44784: Backport Security Fixes from Firefox 149 [tor-browser]
    11 
    +   * Bug 41738: Allow to specify an unsupportedURL on update responses [tor-browser-build]
    12 
    + * Linux
    13 
    +   * Bug 44657: Backport tor-browser#44394: Do not read default prefs from /etc/firefox [tor-browser]
    14 
    +
    1 15 
     Mullvad Browser 15.0.7 - February 24 2026
    2 16 
      * All Platforms
    3 17 
        * Updated Firefox to 140.8.0esr

  • projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
    No preview for this file type
  • projects/browser/config
    ... ... @@ -114,15 +114,15 @@ input_files:
    114 114 
       - filename: dmg-root
    115 115 
         enable: '[% ! c("var/android") %]'
    116 116 
       - name: fenix-nightly-apk
    117 
    -    URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/02/2026-02-22-21-34-44-fenix-149.0a1-android-arm64-v8a/fenix-149.0a1.multi.android-arm64-v8a.apk
    117 
    +    URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/03/2026-03-21-20-51-52-fenix-150.0a1-android-arm64-v8a/fenix-150.0a1.multi.android-arm64-v8a.apk
    118 118 
         enable: '[% c("var/android") %]'
    119 
    -    sha256sum: 029f2f48f7ec2e58e06ccc0caba7d69578b3e1fa9cb85447f7c3fa63e11bf26e
    120 
    -  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.14.1984.xpi
    119 
    +    sha256sum: 84932e0e1288bfd0678d39d96e89530cce4d5f2c4ad37126338e060b0b89204e
    120 
    +  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.12.1984.xpi
    121 121 
         name: noscript
    122 
    -    sha256sum: ba55c6ad73f048468f14fb3da7acb5a8e8ffd822aa1a26ae8850933acbc92cfa
    123 
    -  - URL: https://addons.mozilla.org/firefox/downloads/file/4675310/ublock_origin-1.69.0.xpi
    122 
    +    sha256sum: fe0fe0b582723ba2187def77746aab6b8f5f884729465de746f846ed00a87201
    123 
    +  - URL: https://addons.mozilla.org/firefox/downloads/file/4721638/ublock_origin-1.70.0.xpi
    124 124 
         name: ublock-origin
    125 
    -    sha256sum: 785bcde68a25faa8a0949964ec5ffe9bdcb85d3f0ae21c23f607c6c8f91472cf
    125 
    +    sha256sum: f2730d2877005763a45d765749892e936f49cae713d28f7aa6ea314454b89cf1
    126 126 
         enable: '[% c("var/mullvad-browser") %]'
    127 127 
       - URL: https://cdn.mullvad.net/browser-extension/0.9.7/mullvad-browser-extension-0.9.7.xpi
    128 128 
         name: mullvad-extension

  • projects/conjure/config
    ... ... @@ -24,3 +24,5 @@ steps:
    24 24 
               '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64'
    25 25 
           - name: go-licenses
    26 26 
             project: go-licenses
    27 
    +        target_replace:
    28 
    +          '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64'

  • projects/firefox/config
    ... ... @@ -16,12 +16,12 @@ container:
    16 16 
       use_container: 1
    17 17
    18 18 
     var:
    19 
    -  firefox_platform_version: '140.8.0'
    19 
    +  firefox_platform_version: '140.9.0'
    20 20 
       firefox_version: '[% c("var/firefox_platform_version") %]esr'
    21 21 
       browser_series: '15.0'
    22 22 
       browser_rebase: 1
    23 23 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    24 
    -  browser_build: 3
    24 
    +  browser_build: 2
    25 25 
       copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
    26 26 
       nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'
    27 27 
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
    ... ... @@ -114,7 +114,6 @@ targets:
    114 114 
           updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/'
    115 115 
           mar_id_prefix: 'mullvadbrowser-mullvad'
    116 116 
           nightly_updates_publish_dir_prefix: mullvadbrowser-
    117 
    -      browser_build: 2
    118 117
    119 118 
       linux-x86_64:
    120 119 
         var:

  • projects/geckoview/config
    ... ... @@ -18,12 +18,12 @@ container:
    18 18 
         build_apk: 1
    19 19
    20 20 
     var:
    21 
    -  firefox_platform_version: '140.8.0'
    21 
    +  firefox_platform_version: '140.9.0'
    22 22 
       geckoview_version: '[% c("var/firefox_platform_version") %]esr'
    23 23 
       browser_series: '15.0'
    24 24 
       browser_rebase: 1
    25 25 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    26 
    -  browser_build: 3
    26 
    +  browser_build: 2
    27 27 
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
    28 28 
       git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
    29 29 
       deps:

  • projects/go-licenses/config
    1 1 
     # vim: filetype=yaml sw=2
    2 2 
     # The last stable release is not compatible with our go version, therefore use
    3 3 
     # the last available pre-release.
    4 
    -version: 2.0.0-alpha.1
    4 
    +version: 2.0.1
    5 5 
     git_url: https://github.com/google/go-licenses.git
    6 
    -git_hash: d01822334fba5896920a060f762ea7ecdbd086e8
    6 
    +git_hash: 3e084b0caf710f7bfead967567539214f598c0a2
    7 7
    8 8 
     container:
    9 9 
       use_container: 1
    ... ... @@ -22,6 +22,6 @@ steps:
    22 22 
             pkg_type: go_vendor
    23 23 
             project: go-licenses
    24 24 
             norec:
    25 
    -          sha256sum: b3799f5445ce9f1d48893227287846c689ab67bbdc76b607d5d228739b5c19a2
    25 
    +          sha256sum: 924d0e45d1ec723b29f667547ac43444ff5c432862317b5e5a246de3871ec9a5
    26 26 
             target_replace:
    27 27 
               '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64'

  • projects/go/config
    1 1 
     # vim: filetype=yaml sw=2
    2 
    -version: '1.24.13'
    2 
    +version: '1.25.8'
    3 3 
     filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    4 4 
     container:
    5 5 
       use_container: 1
    6 6
    7 7 
     var:
    8 
    -  source_sha256: 639a6204c2486b137df1eb6e78ee3ed038f9877d0e4b5a465e796a2153f858d7
    8 
    +  source_sha256: e988d4a2446ac7fe3f6daa089a58e9936a52a381355adec1c8983230a8d6c59e
    9 9 
       no_crosscompile: 1
    10 10 
       setup: |
    11 11 
         mkdir -p /var/tmp/dist

  • projects/lyrebird/config
    ... ... @@ -38,3 +38,5 @@ steps:
    38 38 
               '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64'
    39 39 
           - name: go-licenses
    40 40 
             project: go-licenses
    41 
    +        target_replace:
    42 
    +          '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64'

  • projects/moat-settings/config
    1 1 
     # vim: filetype=yaml sw=2
    2 2 
     filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    3 3 
     git_url: https://gitlab.torproject.org/tpo/anti-censorship/rdsys-admin.git
    4 
    -git_hash: 365b0e65b27e053bece37b70bca0bd5fdb02099f
    4 
    +git_hash: b99317d18b69d878700e124bbfe575495581270d
    5 5 
     version: '[% c("abbrev") %]'
    6 6 
     # Use gz for now, since we do not support Zstandard on Linux containers.
    7 7 
     compress_tar: 'gz'

  • projects/translation/config
    ... ... @@ -12,13 +12,13 @@ compress_tar: 'gz'
    12 12 
     steps:
    13 13 
       base-browser:
    14 14 
         base-browser: '[% INCLUDE build %]'
    15 
    -    git_hash: 2f74a0bbbaf9a4324225be31337909a7b9043e72
    15 
    +    git_hash: 1603108043c6fd4f8efbdc48b0c1efdb1a75e23f
    16 16 
         targets:
    17 17 
           nightly:
    18 18 
             git_hash: 'base-browser'
    19 19 
       tor-browser:
    20 20 
         tor-browser: '[% INCLUDE build %]'
    21 
    -    git_hash: c424a64fb1d100df5de66455a3290cd0e846f70c
    21 
    +    git_hash: fc03771326c446f5eed1e0675fdf88769ca3daf2
    22 22 
         targets:
    23 23 
           nightly:
    24 24 
             git_hash: 'tor-browser'
    ... ... @@ -32,7 +32,7 @@ steps:
    32 32 
         fenix: '[% INCLUDE build %]'
    33 33 
         # We need to bump the commit before releasing but just pointing to a branch
    34 34 
         # might cause too much rebuidling of the Firefox part.
    35 
    -    git_hash: 0bae51aacdd03293cdf527ff4ee55a08e45189d8
    35 
    +    git_hash: 50f7678e7090753d1ca795b87bd2827c0cbfbba6
    36 36 
         compress_tar: 'zst'
    37 37 
         targets:
    38 38 
           nightly:

  • rbm.conf
    ... ... @@ -74,11 +74,11 @@ buildconf:
    74 74 
       git_signtag_opt: '-s'
    75 75
    76 76 
     var:
    77 
    -  torbrowser_version: '15.0.7'
    77 
    +  torbrowser_version: '15.0.8'
    78 78 
       torbrowser_build: 'build1'
    79 79 
       # This should be the date of when the build is started. For the build
    80 80 
       # to be reproducible, browser_release_date should always be in the past.
    81 
    -  browser_release_date: '2026/02/23 09:30:00'
    81 
    +  browser_release_date: '2026/03/23 08:00:00'
    82 82 
       browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
    83 83 
       browser_default_channel: release
    84 84 
       browser_platforms:
    ... ... @@ -128,14 +128,14 @@ var:
    128 128 
       updater_enabled: 1
    129 129 
       build_mar: 1
    130 130 
       torbrowser_incremental_from:
    131 
    +    - 15.0.7
    131 132 
         - 15.0.6
    132 133 
         - '[% IF c("var/tor-browser") %]15.0.5[% END %]'
    133 
    -    - 15.0.4
    134 
    -    - '[% IF c("var/mullvad-browser") %]15.0.3[% END %]'
    134 
    +    - '[% IF c("var/mullvad-browser") %]15.0.4[% END %]'
    135 135 
       mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
    136 136
    137 
    -  torbrowser_legacy_version: 13.5.28
    138 
    -  torbrowser_legacy_platform_version: 115.32.1
    137 
    +  torbrowser_legacy_version: 13.5.29
    138 
    +  torbrowser_legacy_platform_version: 115.33.0
    139 139
    140 140 
       # By default, we sort the list of installed packages. This allows sharing
    141 141 
       # containers with identical list of packages, even if they are not listed

    • —
    View it on GitLab.
    You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help Notification message regarding https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/afd233e60e9ef3a2fc3a40ffc91a9dd32afafb8e...26a901e2b7d26c18b2e0af37e47c561d5a5efa5b at 1774276606