[Git][tpo/applications/tor-browser-build][maint-15.0] Bug 41776&41777: Prepare Tor, Mullvad Browser 15.0.10

20 Apr 2026


      Pier Angelo Vendrame pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build


Commits:
6398566d by Pier Angelo Vendrame at 2026-04-20T15:31:49+02:00
Bug 41776&41777: Prepare Tor, Mullvad Browser 15.0.10

- - - - -


11 changed files:

- projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
- projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
- projects/browser/config
- projects/firefox/config
- projects/geckoview/config
- projects/go/config
- projects/moat-settings/config
- projects/openssl/config
- projects/translation/config
- rbm.conf
- tools/relprep.py


Changes:

=====================================
projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
=====================================
@@ -1,3 +1,16 @@
+Mullvad Browser 15.0.10 - April 21 2026
+ * All Platforms
+   * Updated Firefox to 140.10.0esr
+   * Updated Mullvad Browser Extension to 0.9.10
+   * Bug 525: Rebase Mullvad Browser stable onto 140.10.0esr [mullvad-browser]
+   * Bug 44288: New identity fails to block loading a custom home page [tor-browser]
+   * Bug 44749: Check search engines parameter replacements [tor-browser]
+   * Bug 44859: Backport Bugzilla 1666613: Display XML error pages in the browser directionality while force LTRing the XML code itself, without the use of intl.css [tor-browser]
+   * Bug 44863: Backport Security Fixes from Firefox 150 [tor-browser]
+ * Build System
+   * All Platforms
+     * Bug 41767: Add jwilde to allowed signer for browser projects [tor-browser-build]
+
 Mullvad Browser 15.0.9 - April 07 2026
  * All Platforms
    * Updated Firefox to 140.9.1esr


=====================================
projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
=====================================
@@ -1,3 +1,22 @@
+Tor Browser 15.0.10 - April 21 2026
+ * All Platforms
+   * Updated OpenSSL to 3.5.6
+   * Bug 44749: Check search engines parameter replacements [tor-browser]
+   * Bug 44852: Rebase Tor Browser stable onto 140.10.0esr [tor-browser]
+   * Bug 44859: Backport Bugzilla 1666613: Display XML error pages in the browser directionality while force LTRing the XML code itself, without the use of intl.css [tor-browser]
+   * Bug 44863: Backport Security Fixes from Firefox 150 [tor-browser]
+   * Bug 41775: Update list of Snowflake STUN servers in default bridge line, 2026 edition [tor-browser-build]
+ * Windows + macOS + Linux
+   * Updated Firefox to 140.10.0esr
+   * Bug 44288: New identity fails to block loading a custom home page [tor-browser]
+ * Android
+   * Updated GeckoView to 140.10.0esr
+ * Build System
+   * All Platforms
+     * Bug 41767: Add jwilde to allowed signer for browser projects [tor-browser-build]
+   * Windows + Linux + Android
+     * Updated Go to 1.25.9
+
 Tor Browser 15.0.9 - April 07 2026
  * All Platforms
    * Updated Tor to 0.4.9.6


=====================================
projects/browser/config
=====================================
@@ -114,9 +114,9 @@ input_files:
   - filename: dmg-root
     enable: '[% ! c("var/android") %]'
   - name: fenix-nightly-apk
-    URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/04/2026-04-03-21-20-07-fenix-...
+    URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/04/2026-04-20-09-14-06-fenix-...
     enable: '[% c("var/android") %]'
-    sha256sum: 761ac1b0576638ace97ffe9e4aed6a881cebde1ce1d4d1961f593c84f67f5b88
+    sha256sum: 8e7e85644f275ab89b81b070e339a638bb28640c614ef2b14323d87b108e9115
   - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.15.1984.xpi
     name: noscript
     sha256sum: acf9509922b298b4529a434587dc04f5ff82dcb00b035f7efec90fb1ef8a09f3
@@ -124,9 +124,9 @@ input_files:
     name: ublock-origin
     sha256sum: f2730d2877005763a45d765749892e936f49cae713d28f7aa6ea314454b89cf1
     enable: '[% c("var/mullvad-browser") %]'
-  - URL: https://cdn.mullvad.net/browser-extension/0.9.7/mullvad-browser-extension-0....
+  - URL: https://cdn.mullvad.net/browser-extension/0.9.10/mullvad-browser-extension-0...
     name: mullvad-extension
-    sha256sum: 4597ee6fff6a2f19cbf78a6149d38d12ad8a9d6029b7e36f6c639dc3e07dd2c3
+    sha256sum: d8adfd5d83c67d8d50d9466c6564755de79a8a0825f5c67a151919506d411b30
     enable: '[% c("var/mullvad-browser") %]'
   - filename: 'gtk3-settings.ini'
     enable: '[% c("var/linux") %]'


=====================================
projects/firefox/config
=====================================
@@ -18,12 +18,12 @@ container:
   use_container: 1
 
 var:
-  firefox_platform_version: '140.9.1'
+  firefox_platform_version: '140.10.0'
   firefox_version: '[% c("var/firefox_platform_version") %]esr'
   browser_series: '15.0'
   browser_rebase: 1
   browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
-  browser_build: 1
+  browser_build: 2
   copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
   nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'
   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser


=====================================
projects/geckoview/config
=====================================
@@ -20,12 +20,12 @@ container:
     build_apk: 1
 
 var:
-  firefox_platform_version: '140.9.1'
+  firefox_platform_version: '140.10.0'
   geckoview_version: '[% c("var/firefox_platform_version") %]esr'
   browser_series: '15.0'
   browser_rebase: 1
   browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
-  browser_build: 1
+  browser_build: 2
   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
   git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
   deps:


=====================================
projects/go/config
=====================================
@@ -1,11 +1,11 @@
 # vim: filetype=yaml sw=2
-version: '1.25.8'
+version: '1.25.9'
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 container:
   use_container: 1
 
 var:
-  source_sha256: e988d4a2446ac7fe3f6daa089a58e9936a52a381355adec1c8983230a8d6c59e
+  source_sha256: 0ec9ef8ebcea097aac37decae9f09a7218b451cd96be7d6ed513d8e4bcf909cf
   no_crosscompile: 1
   setup: |
     mkdir -p /var/tmp/dist


=====================================
projects/moat-settings/config
=====================================
@@ -1,7 +1,7 @@
 # vim: filetype=yaml sw=2
 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 git_url: https://gitlab.torproject.org/tpo/anti-censorship/rdsys-admin.git
-git_hash: b99317d18b69d878700e124bbfe575495581270d
+git_hash: 0061ce86ee2dfc8c451a78d28d0ef09e4ed7f36e
 version: '[% c("abbrev") %]'
 # Use gz for now, since we do not support Zstandard on Linux containers.
 compress_tar: 'gz'


=====================================
projects/openssl/config
=====================================
@@ -1,5 +1,5 @@
 # vim: filetype=yaml sw=2
-version: 3.5.5
+version: 3.5.6
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 container:
   use_container: 1
@@ -33,5 +33,5 @@ input_files:
   - name: '[% c("var/compiler") %]'
     project: '[% c("var/compiler") %]'
   - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz'
-    sha256sum: b28c91532a8b65a1f983b4c28b7488174e4a01008e29ce8e69bd789f28bc2a89
+    sha256sum: deae7c80cba99c4b4f940ecadb3c3338b13cb77418409238e57d7f31f2a3b736
     name: openssl


=====================================
projects/translation/config
=====================================
@@ -12,13 +12,13 @@ compress_tar: 'gz'
 steps:
   base-browser:
     base-browser: '[% INCLUDE build %]'
-    git_hash: ce651a6f8aa3a6c5ff9c3f9c77d3cb9585dcc903
+    git_hash: b09d79a755bda88aa22580243e335b7187099aef
     targets:
       nightly:
         git_hash: 'base-browser'
   tor-browser:
     tor-browser: '[% INCLUDE build %]'
-    git_hash: 685a144cb5cfdb50afc1e4effae48a63b3a81ee3
+    git_hash: acc7524bf476d29487aa85641c68b99e28c47e7d
     targets:
       nightly:
         git_hash: 'tor-browser'
@@ -32,7 +32,7 @@ steps:
     fenix: '[% INCLUDE build %]'
     # We need to bump the commit before releasing but just pointing to a branch
     # might cause too much rebuidling of the Firefox part.
-    git_hash: 0ed9941918bf17ced5568616f421a5d1f3accab9
+    git_hash: a5667904fa74aed3772a4d306ed4fbc2d83ea252
     compress_tar: 'zst'
     targets:
       nightly:


=====================================
rbm.conf
=====================================
@@ -74,11 +74,11 @@ buildconf:
   git_signtag_opt: '-s'
 
 var:
-  torbrowser_version: '15.0.9'
+  torbrowser_version: '15.0.10'
   torbrowser_build: 'build1'
   # This should be the date of when the build is started. For the build
   # to be reproducible, browser_release_date should always be in the past.
-  browser_release_date: '2026/04/04 07:30:00'
+  browser_release_date: '2026/04/20 13:30:00'
   browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
   browser_default_channel: release
   browser_platforms:
@@ -128,9 +128,9 @@ var:
   updater_enabled: 1
   build_mar: 1
   torbrowser_incremental_from:
+    - 15.0.9
     - 15.0.8
     - 15.0.7
-    - 15.0.6
   mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
 
   # By default, we sort the list of installed packages. This allows sharing


=====================================
tools/relprep.py
=====================================
@@ -141,8 +141,7 @@ class ReleasePreparation:
             if self.android:
                 self.update_zstd()
                 update_fenix_nightly_apk(self.base_path)
-            # The version of Go we use is EOL, skip the update.
-            # self.update_go()
+            self.update_go()
             self.update_manual()
             self.update_moat_settings()
 



View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/63...

-- 
View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/63...
You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

    

Pier Angelo Vendrame (＠pierov)

tags

participants (1)