ma1 pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build

Commits:

9 changed files:

Changes:

  • projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
    1
    +Mullvad Browser 15.0.3 - December 09 2025
    
    2
    + * All Platforms
    
    3
    +   * Updated Firefox to 140.6.0esr
    
    4
    +   * Updated NoScript to 13.5.2.1984
    
    5
    +   * Updated uBlock Origin to 1.68.0
    
    6
    +   * Bug 497: Rebase Mullvad Browser stable onto 140.6.0esr [mullvad-browser]
    
    7
    +   * Bug 22974: Self-host NoScript Updates [tor-browser]
    
    8
    +   * Bug 44334: TB does not render image in PDF file [tor-browser]
    
    9
    +   * Bug 44348: Backport Bugzilla 1999126: Protect whether PDF.js is enabled/disabled to improve fingerprinting protection [tor-browser]
    
    10
    +   * Bug 44391: Restrictions cascade blocks every capability in subframes (e.g. captchas) [tor-browser]
    
    11
    +   * Bug 44409: Backport Security Fixes from Firefox 146 [tor-browser]
    
    12
    + * Build System
    
    13
    +   * All Platforms
    
    14
    +     * Bug 493: Automatically check whether the signed build is avaliable on dist.torproject.org before notifying Mullvad for QA [mullvad-browser]
    
    15
    +     * Bug 41644: Self-hosted browser extensions support in relprep.py [tor-browser-build]
    
    16
    +
    
    17
    +Mullvad Browser 15.0.3 - December 09 2025
    
    18
    + * All Platforms
    
    19
    +   * Updated Firefox to 140.6.0esr
    
    20
    +   * Updated NoScript to 13.5.2.1984
    
    21
    +   * Updated uBlock Origin to 1.68.0
    
    22
    +   * Bug 497: Rebase Mullvad Browser stable onto 140.6.0esr [mullvad-browser]
    
    23
    +   * Bug 22974: Self-host NoScript Updates [tor-browser]
    
    24
    +   * Bug 44348: Backport Bugzilla 1999126: Protect whether PDF.js is enabled/disabled to improve fingerprinting protection [tor-browser]
    
    25
    +   * Bug 44391: Restrictions cascade blocks every capability in subframes (e.g. captchas) [tor-browser]
    
    26
    +   * Bug 44409: Backport Security Fixes from Firefox 146 [tor-browser]
    
    27
    + * Build System
    
    28
    +   * All Platforms
    
    29
    +     * Bug 493: Automatically check whether the signed build is avaliable on dist.torproject.org before notifying Mullvad for QA [mullvad-browser]
    
    30
    +     * Bug 41644: Self-hosted browser extensions support in relprep.py [tor-browser-build]
    
    31
    +
    
    1 32
     Mullvad Browser 15.0.2 - November 20 2025
    
    2 33
      * All Platforms
    
    3 34
        * Updated Mullvad Browser Extension to 0.9.6
    

  • projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
    1
    +Tor Browser 15.0.3 - December 09 2025
    
    2
    + * All Platforms
    
    3
    +   * Bug 22974: Self-host NoScript Updates [tor-browser]
    
    4
    +   * Bug 44334: TB does not render image in PDF file [tor-browser]
    
    5
    +   * Bug 44348: Backport Bugzilla 1999126: Protect whether PDF.js is enabled/disabled to improve fingerprinting protection [tor-browser]
    
    6
    +   * Bug 44391: Restrictions cascade blocks every capability in subframes (e.g. captchas) [tor-browser]
    
    7
    +   * Bug 44399: Rebase Tor Browser 15.0 stable onto 140.6.0esr [tor-browser]
    
    8
    +   * Bug 44409: Backport Security Fixes from Firefox 146 [tor-browser]
    
    9
    +   * Bug 41646: Update lyrebird version to v0.7.0 [tor-browser-build]
    
    10
    + * Windows + macOS + Linux
    
    11
    +   * Updated Firefox to 140.6.0esr
    
    12
    + * Android
    
    13
    +   * Updated GeckoView to 140.6.0esr
    
    14
    +   * Updated Zstandard to 1.5.7
    
    15
    +   * Bug 44346: Webrender broken on Adreno 510 devices with esr140 [tor-browser]
    
    16
    + * Build System
    
    17
    +   * All Platforms
    
    18
    +     * Bug 41644: Self-hosted browser extensions support in relprep.py [tor-browser-build]
    
    19
    +   * Windows + Linux + Android
    
    20
    +     * Updated Go to 1.24.11
    
    21
    +
    
    22
    +Tor Browser 15.0.3 - December 09 2025
    
    23
    + * All Platforms
    
    24
    +   * Updated NoScript to 13.5.2.1984
    
    25
    +   * Bug 22974: Self-host NoScript Updates [tor-browser]
    
    26
    +   * Bug 44348: Backport Bugzilla 1999126: Protect whether PDF.js is enabled/disabled to improve fingerprinting protection [tor-browser]
    
    27
    +   * Bug 44391: Restrictions cascade blocks every capability in subframes (e.g. captchas) [tor-browser]
    
    28
    +   * Bug 44399: Rebase Tor Browser 15.0 stable onto 140.6.0esr [tor-browser]
    
    29
    +   * Bug 44409: Backport Security Fixes from Firefox 146 [tor-browser]
    
    30
    +   * Bug 41646: Update lyrebird version to v0.7.0 [tor-browser-build]
    
    31
    + * Windows + macOS + Linux
    
    32
    +   * Updated Firefox to 140.6.0esr
    
    33
    + * Android
    
    34
    +   * Updated GeckoView to 140.6.0esr
    
    35
    +   * Bug 44346: Webrender broken on Adreno 510 devices with esr140 [tor-browser]
    
    36
    + * Build System
    
    37
    +   * All Platforms
    
    38
    +     * Bug 41644: Self-hosted browser extensions support in relprep.py [tor-browser-build]
    
    39
    +   * Windows + Linux + Android
    
    40
    +     * Updated Go to 1.24.11
    
    41
    +
    
    1 42
     Tor Browser 15.0.2 - November 19 2025
    
    2 43
      * All Platforms
    
    3 44
        * Updated Tor to 0.4.8.21
    

  • projects/browser/config
    ... ... @@ -113,12 +113,12 @@ input_files:
    113 113
         enable: '[% ! c("var/android") %]'
    
    114 114
       - filename: dmg-root
    
    115 115
         enable: '[% ! c("var/android") %]'
    
    116
    -  - URL: https://addons.mozilla.org/firefox/downloads/file/4609561/noscript-13.4.xpi
    
    116
    +  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.2.1984.xpi
    
    117 117
         name: noscript
    
    118
    -    sha256sum: 9496d2bc785f2b6dff36a3d6f60fa1a70d7b9a1895bc738c30387c94cd945168
    
    119
    -  - URL: https://addons.mozilla.org/firefox/downloads/file/4598854/ublock_origin-1.67.0.xpi
    
    118
    +    sha256sum: 4579c70b69e3198ea0bf064f9912b9341696b9ad4ed177cb19994208872425fd
    
    119
    +  - URL: https://addons.mozilla.org/firefox/downloads/file/4629131/ublock_origin-1.68.0.xpi
    
    120 120
         name: ublock-origin
    
    121
    -    sha256sum: b83c6ec49f817a8d05d288b53dbc7005cceccf82e9490d8683b3120aab3c133a
    
    121
    +    sha256sum: 5caf4abda494018841222a12156919bbdd8cad82a783c38c36b22dd642704315
    
    122 122
         enable: '[% c("var/mullvad-browser") %]'
    
    123 123
       - URL: https://cdn.mullvad.net/browser-extension/0.9.6/mullvad-browser-extension-0.9.6.xpi
    
    124 124
         name: mullvad-extension
    

  • projects/firefox/config
    ... ... @@ -16,12 +16,12 @@ container:
    16 16
       use_container: 1
    
    17 17
     
    
    18 18
     var:
    
    19
    -  firefox_platform_version: '140.5.0'
    
    19
    +  firefox_platform_version: '140.6.0'
    
    20 20
       firefox_version: '[% c("var/firefox_platform_version") %]esr'
    
    21 21
       browser_series: '15.0'
    
    22 22
       browser_rebase: 1
    
    23 23
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    
    24
    -  browser_build: 3
    
    24
    +  browser_build: 4
    
    25 25
       copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
    
    26 26
       nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'
    
    27 27
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
    
    ... ... @@ -114,6 +114,7 @@ targets:
    114 114
           updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/'
    
    115 115
           mar_id_prefix: 'mullvadbrowser-mullvad'
    
    116 116
           nightly_updates_publish_dir_prefix: mullvadbrowser-
    
    117
    +      browser_build: 3
    
    117 118
       linux-x86_64:
    
    118 119
         var:
    
    119 120
           arch_deps:
    

  • projects/geckoview/config
    ... ... @@ -18,12 +18,12 @@ container:
    18 18
         build_apk: 1
    
    19 19
     
    
    20 20
     var:
    
    21
    -  firefox_platform_version: '140.5.0'
    
    21
    +  firefox_platform_version: '140.6.0'
    
    22 22
       geckoview_version: '[% c("var/firefox_platform_version") %]esr'
    
    23 23
       browser_series: '15.0'
    
    24 24
       browser_rebase: 1
    
    25 25
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    
    26
    -  browser_build: 2
    
    26
    +  browser_build: 4
    
    27 27
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
    
    28 28
       git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
    
    29 29
       deps:
    

  • projects/go/config
    1 1
     # vim: filetype=yaml sw=2
    
    2
    -version: '1.24.10'
    
    2
    +version: '1.24.11'
    
    3 3
     filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    
    4 4
     container:
    
    5 5
       use_container: 1
    
    6 6
     
    
    7 7
     var:
    
    8
    -  source_sha256: 34000dcc47a517b78fcf2657ee7d033328a57079fe60c4ed8b7b84260d1d19d3
    
    8
    +  source_sha256: ffdf97766a4c4b135cd53809713978e9ee1a943b2c8e28ad221a5429de30e210
    
    9 9
       no_crosscompile: 1
    
    10 10
       setup: |
    
    11 11
         mkdir -p /var/tmp/dist
    

  • projects/moat-settings/config
    1 1
     # vim: filetype=yaml sw=2
    
    2 2
     filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    
    3 3
     git_url: https://gitlab.torproject.org/tpo/anti-censorship/rdsys-admin.git
    
    4
    -git_hash: 810fb24bd5fe36c8c0a67ecf8f8ec47b479eee31
    
    4
    +git_hash: c13a8e5909d78abbabf5b853e20e63e38fcc4808
    
    5 5
     version: '[% c("abbrev") %]'
    
    6 6
     # Use gz for now, since we do not support Zstandard on Linux containers.
    
    7 7
     compress_tar: 'gz'

  • projects/translation/config
    ... ... @@ -12,13 +12,13 @@ compress_tar: 'gz'
    12 12
     steps:
    
    13 13
       base-browser:
    
    14 14
         base-browser: '[% INCLUDE build %]'
    
    15
    -    git_hash: fbef59e3ea6d685abd47b6506db44a0f4e517869
    
    15
    +    git_hash: d366318349af0977ff23b492fa87e436e8672fdd
    
    16 16
         targets:
    
    17 17
           nightly:
    
    18 18
             git_hash: 'base-browser'
    
    19 19
       tor-browser:
    
    20 20
         tor-browser: '[% INCLUDE build %]'
    
    21
    -    git_hash: 4fcb19da2c6b62bdd96828172162bea89ee3231e
    
    21
    +    git_hash: 45b67d3be52f79e8a4b361fd04ab12f342ab0016
    
    22 22
         targets:
    
    23 23
           nightly:
    
    24 24
             git_hash: 'tor-browser'
    
    ... ... @@ -32,7 +32,7 @@ steps:
    32 32
         fenix: '[% INCLUDE build %]'
    
    33 33
         # We need to bump the commit before releasing but just pointing to a branch
    
    34 34
         # might cause too much rebuidling of the Firefox part.
    
    35
    -    git_hash: d9fe5b503d0795a584caa2ce99ee101831967220
    
    35
    +    git_hash: 4690b13484b82453db1482af32953ee2c9398568
    
    36 36
         compress_tar: 'zst'
    
    37 37
         targets:
    
    38 38
           nightly:
    

  • rbm.conf
    ... ... @@ -74,11 +74,11 @@ buildconf:
    74 74
       git_signtag_opt: '-s'
    
    75 75
     
    
    76 76
     var:
    
    77
    -  torbrowser_version: '15.0.2'
    
    77
    +  torbrowser_version: '15.0.3'
    
    78 78
       torbrowser_build: 'build1'
    
    79 79
       # This should be the date of when the build is started. For the build
    
    80 80
       # to be reproducible, browser_release_date should always be in the past.
    
    81
    -  browser_release_date: '2025/11/20 07:40:03'
    
    81
    +  browser_release_date: '2025/12/08 08:01:36'
    
    82 82
       browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
    
    83 83
       browser_default_channel: release
    
    84 84
       browser_platforms:
    
    ... ... @@ -128,14 +128,13 @@ var:
    128 128
       updater_enabled: 1
    
    129 129
       build_mar: 1
    
    130 130
       torbrowser_incremental_from:
    
    131
    +    - 15.0.2
    
    131 132
         - 15.0.1
    
    132
    -    - '15.0'
    
    133
    -    - 14.5.8
    
    134
    -    - 14.5.7
    
    133
    +    - 15.0
    
    135 134
       mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
    
    136 135
     
    
    137
    -  torbrowser_legacy_version: 13.5.25
    
    138
    -  torbrowser_legacy_platform_version: 115.30.0
    
    136
    +  torbrowser_legacy_version: 13.5.26
    
    137
    +  torbrowser_legacy_platform_version: 115.31.0
    
    139 138
     
    
    140 139
       # By default, we sort the list of installed packages. This allows sharing
    
    141 140
       # containers with identical list of packages, even if they are not listed