richard pushed to branch maint-13.0 at The Tor Project / Applications / tor-browser-build

Commits: 21242cea by Pier Angelo Vendrame at 2024-03-13T19:27:13+01:00 Bug 41086,41087: Prepare Tor and Mullvad Browser Stable 13.0.12

- - - - -

11 changed files:

- projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/allowed_addons.json - projects/browser/config - projects/firefox-android/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/manual/config - projects/translation/config - rbm.conf

Changes:

===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,54 @@ +Mullvad Browser 13.0.12 - March 19 2024 + * All Platforms + * Updated Firefox to 115.9.0esr + * Updated mullvad-browser-extension to 0.9.0 + * Updated uBlock Origin to 1.56.0 + * Bug 270: Mullvad support email has changed from `support@mullvad.net` to `support@mullvadvpn.net` [mullvad-browser] + * Bug 273: Rebase Mullvad Browser stable onto Firefox 115.9.0esr [mullvad-browser] + * Bug 42376: The placeholder of datetime inputs keeps being localized when spoof English is on [tor-browser] + * Bug 42378: spoof english + htmlform <details> can leak app language [tor-browser] + * Windows + * Bug 42377: Hidden fonts are automatically added to the allow list [tor-browser] + * Build System + * All Platforms + * Bug 41085: kick_devmole_build script prints wrong URL for Mullvad's build hashes [tor-browser-build] + * Bug 41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build] + * Bug 41102: src archive does not match likely due to mismatched xz-utils version [tor-browser-build] + +Mullvad Browser 13.5a5 - February 27 2024 + * All Platforms + * Updated Firefox to 115.8.0esr + * Updated uBlock Origin to 1.56.0 + * Updated mullvad-browser-extension to 0.8.5 + * Bug 262: Mouse-over long links causes the browser element to re-center relative to width of status tooltip [mullvad-browser] + * Bug 268: Rebase Mullvad Browser Alpha onto 115.8.0esr [mullvad-browser] + * Bug 42376: The placeholder of datetime inputs keeps being localized when spoof English is on [tor-browser] + * Bug 42378: spoof english + htmlform <details> can leak app language [tor-browser] + * Bug 42387: Visual noise in 13.5a4 letterboxing [tor-browser] + * Bug 42389: Betterboxing: gradient is never shown [tor-browser] + * Bug 42390: Betterboxing: make the decorator border disappear when the corners are flat [tor-browser] + * Bug 42397: Change RFP-spoofed Timezone from UTC to a real-world, less discriminable one [tor-browser] + * Bug 42398: Include Alpha and Nightly in MOZ_APP_DISPLAYNAME (and possibly in other places) [tor-browser] + * Bug 42423: Move temporary Lox Fluent strings to new file [tor-browser] + * macOS + * Bug 40569: Create build-specific installer for macOS [tor-browser-build] + * Build System + * All Platforms + * Bug 41038: Add RPM dependencies to README [tor-browser-build] + * Bug 41067: Use Capture::Tiny instead of IO::CaptureOutput [tor-browser-build] + * Bug 41072: Set correct updater_url for Mullvad Browser nightly builds [tor-browser-build] + * Bug 41081: Update detailsURL in tools/signing/nightly/update-responses-base-config.yml [tor-browser-build] + * Bug 41085: kick_devmole_build script prints wrong URL for Mullvad's build hashes [tor-browser-build] + * Bug 40068: Switch from IO::CaptureOutput to Capture::Tiny [rbm] + * Bug 40069: Make stdout and stderr utf8 [rbm] + * Bug 40071: Add an option to create zip files using 7z [rbm] + * Bug 40072: Move capture_exec to a separate module [rbm] + * Windows + * Bug 41076: Include the ShellLink plugin in NSIS [tor-browser-build] + * Bug 41077: Draft the new installer for Mullvad Browser [tor-browser-build] + * macOS + * Bug 41084: $app_bundle is missing the final .app in projects/firefox/build [tor-browser-build] + Mullvad Browser 13.0.10 - February 20 2024 * All Platforms * Updated Firefox to 115.8.0esr @@ -49,6 +100,7 @@ Mullvad Browser 13.0.9 - January 23 2024 * Bug 41043: Create script to push build requests to Mullvad build servers [tor-browser-build] * Bug 41056: Make it possible to use templates in var/torbrowser_incremental_from [tor-browser-build] * Bug 41059: Update keyring/torbrowser.gpg with updated key [tor-browser-build] + * Bug 40067: Use --no-verbose wget option when not running in a terminal [rbm] * Windows + macOS * Bug 41016: Switch from bullseye to bookworm for desktop platforms [tor-browser-build] * Windows

===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,22 @@ +Tor Browser 13.0.12 - March 19 2024 + * All Platforms + * Bug 42376: The placeholder of datetime inputs keeps being localized when spoof English is on [tor-browser] + * Bug 42378: spoof english + htmlform <details> can leak app language [tor-browser] + * Bug 42444: Remove the "Prioritize .onion sites when known" option [tor-browser] + * Bug 42448: Rebase Tor Browser stable onto Firefox 115.9.0esr [tor-browser] + * Bug 42459: Add startpage onion service to list of search providers [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 115.9.0esr + * Android + * Updated GeckoView to 115.9.0esr + * Bug 42407: TTP-03-010 WP3: Potential phishing [tor-browser] + * Windows + * Bug 42377: Hidden fonts are automatically added to the allow list [tor-browser] + * Build System + * All Platforms + * Updated Go to 1.21.8 + * Bug 41102: src archive does not match likely due to mismatched xz-utils version [tor-browser-build] + Tor Browser 13.0.11 - March 06 2024 * All Platforms * Bug 42435: Update moat domain fronting configuration [tor-browser]

===================================== projects/browser/allowed_addons.json ===================================== @@ -17,7 +17,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/34/9734/13299734/13299734.png..." } ], - "average_daily_users": 1156101, + "average_daily_users": 1159924, "categories": { "firefox": [ "web-development", @@ -218,10 +218,10 @@ "category": "recommended" }, "ratings": { - "average": 4.5383, - "bayesian_average": 4.537199119336593, - "count": 5475, - "text_count": 1727 + "average": 4.5365, + "bayesian_average": 4.535401175675945, + "count": 5491, + "text_count": 1733 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/reviews/", "requires_payment": false, @@ -318,7 +318,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/versions/", - "weekly_downloads": 23635 + "weekly_downloads": 23726 }, "notes": null }, @@ -334,7 +334,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/56/7656/6937656/6937656.png?m..." } ], - "average_daily_users": 267126, + "average_daily_users": 267400, "categories": { "firefox": [ "privacy-security" @@ -547,9 +547,9 @@ "category": "recommended" }, "ratings": { - "average": 4.7977, - "bayesian_average": 4.793130609775481, - "count": 1409, + "average": 4.7982, + "bayesian_average": 4.793635080149146, + "count": 1412, "text_count": 254 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/reviews/", @@ -635,7 +635,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions/", - "weekly_downloads": 3273 + "weekly_downloads": 3038 }, "notes": null }, @@ -651,7 +651,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/73/4073/5474073/5474073.png?m..." } ], - "average_daily_users": 1233259, + "average_daily_users": 1235058, "categories": { "firefox": [ "privacy-security" @@ -1170,9 +1170,9 @@ "category": "recommended" }, "ratings": { - "average": 4.7974, - "bayesian_average": 4.79471376173004, - "count": 2399, + "average": 4.7979, + "bayesian_average": 4.795218830409015, + "count": 2405, "text_count": 457 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/reviews/", @@ -1197,7 +1197,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/versions/", - "weekly_downloads": 20288 + "weekly_downloads": 19773 }, "notes": null }, @@ -1213,7 +1213,7 @@ "picture_url": null } ], - "average_daily_users": 7782292, + "average_daily_users": 7806685, "categories": { "firefox": [ "privacy-security" @@ -1379,7 +1379,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2024-03-04T01:35:20Z", + "last_updated": "2024-03-11T17:35:25Z", "name": { "ar": "uBlock Origin", "bg": "uBlock Origin", @@ -1524,10 +1524,10 @@ "category": "recommended" }, "ratings": { - "average": 4.7889, - "bayesian_average": 4.78852910141135, - "count": 17348, - "text_count": 4523 + "average": 4.7893, + "bayesian_average": 4.78892933338675, + "count": 17378, + "text_count": 4532 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/reviews/", "requires_payment": false, @@ -1590,7 +1590,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions/", - "weekly_downloads": 164561 + "weekly_downloads": 159165 }, "notes": null }, @@ -1606,7 +1606,7 @@ "picture_url": null } ], - "average_daily_users": 178548, + "average_daily_users": 178990, "categories": { "firefox": [ "photos-music-videos", @@ -1702,10 +1702,10 @@ "category": "recommended" }, "ratings": { - "average": 4.4478, - "bayesian_average": 4.442927736258425, - "count": 1206, - "text_count": 462 + "average": 4.4476, + "bayesian_average": 4.442740710153104, + "count": 1211, + "text_count": 466 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/rev...", "requires_payment": false, @@ -1727,7 +1727,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/ver...", - "weekly_downloads": 351 + "weekly_downloads": 350 }, "notes": null }, @@ -1743,7 +1743,7 @@ "picture_url": null } ], - "average_daily_users": 78821, + "average_daily_users": 78537, "categories": { "firefox": [ "privacy-security", @@ -1853,10 +1853,10 @@ ], "promoted": null, "ratings": { - "average": 4.3787, - "bayesian_average": 4.364570736907983, - "count": 404, - "text_count": 113 + "average": 4.3753, + "bayesian_average": 4.3611016639271964, + "count": 405, + "text_count": 114 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/reviews/", "requires_payment": false, @@ -1878,7 +1878,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions/", - "weekly_downloads": 1812 + "weekly_downloads": 1672 }, "notes": null }, @@ -1894,7 +1894,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/64/9064/12929064/12929064.png..." } ], - "average_daily_users": 307636, + "average_daily_users": 308991, "categories": { "firefox": [ "search-tools", @@ -2111,10 +2111,10 @@ "category": "recommended" }, "ratings": { - "average": 4.6443, - "bayesian_average": 4.639930009440798, - "count": 1417, - "text_count": 274 + "average": 4.6435, + "bayesian_average": 4.639139586780839, + "count": 1422, + "text_count": 276 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/reviews/", "requires_payment": false, @@ -2137,7 +2137,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/versions/", - "weekly_downloads": 5954 + "weekly_downloads": 5686 }, "notes": null }, @@ -2160,7 +2160,7 @@ "picture_url": null } ], - "average_daily_users": 124882, + "average_daily_users": 125273, "categories": { "firefox": [ "search-tools", @@ -2441,9 +2441,9 @@ "category": "recommended" }, "ratings": { - "average": 4.3743, - "bayesian_average": 4.369989496152543, - "count": 1336, + "average": 4.3752, + "bayesian_average": 4.37089257689689, + "count": 1338, "text_count": 378 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/reviews/", @@ -2464,7 +2464,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/versions/", - "weekly_downloads": 44 + "weekly_downloads": 22 }, "notes": null }, @@ -2480,7 +2480,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/43/0143/143/143.png?modified=..." } ], - "average_daily_users": 309662, + "average_daily_users": 309704, "categories": { "firefox": [ "web-development", @@ -2667,10 +2667,10 @@ "category": "recommended" }, "ratings": { - "average": 4.396, - "bayesian_average": 4.393343568847512, - "count": 2182, - "text_count": 840 + "average": 4.3973, + "bayesian_average": 4.394644655920732, + "count": 2187, + "text_count": 841 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/reviews/", "requires_payment": false, @@ -2714,7 +2714,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/", - "weekly_downloads": 7462 + "weekly_downloads": 7679 }, "notes": null }, @@ -2730,7 +2730,7 @@ "picture_url": null } ], - "average_daily_users": 163018, + "average_daily_users": 163565, "categories": { "firefox": [ "photos-music-videos", @@ -2839,10 +2839,10 @@ "category": "recommended" }, "ratings": { - "average": 3.8731, - "bayesian_average": 3.8690686700002854, - "count": 1229, - "text_count": 445 + "average": 3.8716, + "bayesian_average": 3.867573249528433, + "count": 1231, + "text_count": 446 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/revie...", "requires_payment": false, @@ -2861,7 +2861,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/versi...", - "weekly_downloads": 2750 + "weekly_downloads": 2672 }, "notes": null }

===================================== projects/browser/config ===================================== @@ -99,13 +99,13 @@ input_files: - URL: https://addons.mozilla.org/firefox/downloads/file/4206186/noscript-11.4.29.x... name: noscript sha256sum: 05b98840b05ef2acbac333543e4b7c3d40fee2ce5fb4e29260b05e2ff6fe24cd - - URL: https://addons.mozilla.org/firefox/downloads/file/4216633/ublock_origin-1.55... + - URL: https://addons.mozilla.org/firefox/downloads/file/4237670/ublock_origin-1.56... name: ublock-origin - sha256sum: a02ca1d32737c3437f97553e5caaead6479a66ac1f8ff3b84a06cfa6bb0c7647 + sha256sum: f5fbeeac511ca4e10a74723413727fda8e6f9236c726d16eb54ade1fbe7be5be enable: '[% c("var/mullvad-browser") %]' - - URL: https://cdn.mullvad.net/browser-extension/0.8.5/mullvad-browser-extension-0.... + - URL: https://cdn.mullvad.net/browser-extension/0.9.0/mullvad-browser-extension-0.... name: mullvad-extension - sha256sum: b8208cc73d3c3c87342b25367b1a5fa330cb528f3213a4c4de30512f1662ff45 + sha256sum: 65bf235aa1015054ae0a54a40c5a663e67fe1d0f0799e7b4726f98cccc7f3eab enable: '[% c("var/mullvad-browser") %]' - filename: 'gtk3-settings.ini' enable: '[% c("var/linux") %]'

===================================== projects/firefox-android/config ===================================== @@ -16,7 +16,7 @@ container: var: fenix_version: 115.2.1 browser_branch: 13.0-1 - browser_build: 14 + browser_build: 15 variant: Beta # This should be updated when the list of gradle dependencies is changed. gradle_dependencies_version: 1

===================================== projects/firefox/config ===================================== @@ -14,7 +14,7 @@ container: use_container: 1

var: - firefox_platform_version: 115.8.0 + firefox_platform_version: 115.9.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '13.0' browser_branch: '[% c("var/browser_series") %]-1'

===================================== projects/geckoview/config ===================================== @@ -14,9 +14,9 @@ container: use_container: 1

var: - geckoview_version: 115.8.0esr + geckoview_version: 115.9.0esr browser_branch: 13.0-1 - browser_build: 1 + browser_build: 2 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse HEAD") %]'

===================================== projects/go/config ===================================== @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: '[% IF c("var/use_go_1_20") %]1.20.14[% ELSE %]1.21.7[% END %]' +version: '[% IF c("var/use_go_1_20") %]1.20.14[% ELSE %]1.21.8[% END %]' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -121,7 +121,7 @@ input_files: enable: '[% ! c("var/linux") %]' - URL: 'https://go.dev/dl/go%5B% c("version") %].src.tar.gz' name: go - sha256sum: 00197ab20f33813832bff62fd93cca1c42a08cc689a32a6672ca49591959bff6 + sha256sum: dc806cf75a87e1414b5b4c3dcb9dd3e9cc98f4cfccec42b7af617d5a658a3c43 enable: '[% !c("var/use_go_1_20") %]' - URL: 'https://go.dev/dl/go%5B% c("version") %].src.tar.gz' name: go

===================================== projects/manual/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 # To update, see doc/how-to-update-the-manual.txt # Remember to update also the package's hash, with the version! -version: 148707 +version: 150100 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -23,6 +23,6 @@ input_files: - project: container-image - URL: 'https://build-sources.tbb.torproject.org/manual_%5B% c("version") %].zip' name: manual - sha256sum: a765497eaec3a926823812930a78d25048a1df0c4d765b53e87888db09f5d8d8 + sha256sum: 039bdb04f97b803f0db2f12a6ba0a03a2091e8d8bd794e178c297e571f04eb7f - filename: packagemanual.py name: package_script

===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 16211a4b8524d71525f0ea73c07771c634132b30 + git_hash: 595dcd5efe752cddc1b6ba47082ad9f5f4917fee targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 012f643d2d6b04ebf868bf62cdb7ad5b727734f5 + git_hash: 9b6914a85be61ad6975e8bf483d4484d39bf5f7a targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: e7d263c7ee81d7d9db3410ca880b1aeb107ef784 + git_hash: 7374fbc72d2c37a4d5354447dec3b5c543fd0380 compress_tar: 'zst' targets: nightly:

===================================== rbm.conf ===================================== @@ -73,13 +73,12 @@ buildconf: git_signtag_opt: '-s'

var: - torbrowser_version: '13.0.11' + torbrowser_version: '13.0.12' torbrowser_build: 'build1' torbrowser_incremental_from: - # 13.0.11 is Tor Browser-only + - '[% IF c("var/tor-browser") %]13.0.11[% END %]' - '13.0.10' - '13.0.9' - - '[% IF c("var/tor-browser") %]13.0.8[% END %]' - '[% IF c("var/mullvad-browser") %]13.0.7[% END %]' updater_enabled: 1 build_mar: 1

View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/21...