[Git][tpo/applications/tor-browser-build][maint-15.0] Bug 41804&41805: Prepare Tor, Mullvad Browser 15.0.16

16 Jun 2026


      ma1 pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build


Commits:
527c5de4 by hackademix at 2026-06-16T03:19:11+02:00
Bug 41804&41805: Prepare Tor, Mullvad Browser 15.0.16

- - - - -


9 changed files:

- projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
- projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
- projects/browser/config
- projects/firefox/config
- projects/geckoview/config
- projects/go/config
- projects/openssl/config
- projects/translation/config
- rbm.conf


Changes:

=====================================
projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
=====================================
@@ -1,3 +1,27 @@
+Mullvad Browser 15.0.16 - June 16 2026
+ * All Platforms
+   * Updated Firefox to 140.12.0esr
+   * Updated NoScript to 13.6.24.1984
+   * Updated uBlock Origin to 1.71.0
+   * Bug 553: Rebase Mullvad Browser stable onto 140.12.0esr [mullvad-browser]
+   * Bug 45044: NS 13.6.19.902 DocStartInjection regressed [tor-browser]
+   * Bug 45054: Backport Security Fixes from Firefox 152 [tor-browser]
+ * Build System
+   * All Platforms
+     * Bug 41802: Remove the tor daemon requirement for signing [tor-browser-build]
+
+Mullvad Browser 15.0.16 - June 15 2026
+ * All Platforms
+   * Updated Firefox to 140.12.0esr
+   * Updated NoScript to 13.6.23.1984
+   * Updated uBlock Origin to 1.71.0
+   * Bug 553: Rebase Mullvad Browser stable onto 140.12.0esr [mullvad-browser]
+   * Bug 45044: NS 13.6.19.902 DocStartInjection regressed [tor-browser]
+   * Bug 45054: Backport Security Fixes from Firefox 152 [tor-browser]
+ * Build System
+   * All Platforms
+     * Bug 41802: Remove the tor daemon requirement for signing [tor-browser-build]
+
 Mullvad Browser 15.0.14 - May 19 2026
  * All Platforms
    * Updated Firefox to 140.11.0esr


=====================================
projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
=====================================
@@ -1,3 +1,37 @@
+Tor Browser 15.0.16 - June 16 2026
+ * All Platforms
+   * Updated NoScript to 13.6.24.1984
+   * Updated OpenSSL to 3.5.7
+   * Bug 45044: NS 13.6.19.902 DocStartInjection regressed [tor-browser]
+   * Bug 45046: Rebase Tor Browser stable onto 140.12.0esr [tor-browser]
+   * Bug 45054: Backport Security Fixes from Firefox 152 [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 140.12.0esr
+ * Android
+   * Updated GeckoView to 140.12.0esr
+ * Build System
+   * All Platforms
+     * Bug 41802: Remove the tor daemon requirement for signing [tor-browser-build]
+   * Windows + Linux + Android
+     * Updated Go to 1.25.11
+
+Tor Browser 15.0.16 - June 15 2026
+ * All Platforms
+   * Updated NoScript to 13.6.23.1984
+   * Updated OpenSSL to 3.5.7
+   * Bug 45044: NS 13.6.19.902 DocStartInjection regressed [tor-browser]
+   * Bug 45046: Rebase Tor Browser stable onto 140.12.0esr [tor-browser]
+   * Bug 45054: Backport Security Fixes from Firefox 152 [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 140.12.0esr
+ * Android
+   * Updated GeckoView to 140.12.0esr
+ * Build System
+   * All Platforms
+     * Bug 41802: Remove the tor daemon requirement for signing [tor-browser-build]
+   * Windows + Linux + Android
+     * Updated Go to 1.25.11
+
 Tor Browser 15.0.15 - June 02 2026
  * All Platforms
    * Updated NoScript to 13.6.20.1984


=====================================
projects/browser/config
=====================================
@@ -114,15 +114,15 @@ input_files:
   - filename: dmg-root
     enable: '[% ! c("var/android") %]'
   - name: fenix-nightly-apk
-    URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/06/2026-06-02-09-33-30-fenix-...
+    URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/06/2026-06-15-21-51-40-fenix-...
     enable: '[% c("var/android") %]'
-    sha256sum: aadd1824cad0faa2052c5bea20348ced5c0831bc45e86ac1b35c7d12d8db8330
-  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.20.1984.xpi
+    sha256sum: 31a4e67fb6bf998e6259104ea734cdbadad5b4da1ab860722576a03d3e3ec9ab
+  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.24.1984.xpi
     name: noscript
-    sha256sum: 3950a8844d70dd4ab1cc8c349d779a46d01da2a631607c39a471c7e5749afa21
-  - URL: https://addons.mozilla.org/firefox/downloads/file/4721638/ublock_origin-1.70...
+    sha256sum: 2669919f5a67ba17069716a7e7fb258d75b454d47b902f237764549a923aae92
+  - URL: https://addons.mozilla.org/firefox/downloads/file/4814095/ublock_origin-1.71...
     name: ublock-origin
-    sha256sum: f2730d2877005763a45d765749892e936f49cae713d28f7aa6ea314454b89cf1
+    sha256sum: 47f788a1fc2c014830b30bb0ef9588615701b98c5265fb19b8cf4ba779849feb
     enable: '[% c("var/mullvad-browser") %]'
   - URL: https://cdn.mullvad.net/browser-extension/0.9.10/mullvad-browser-extension-0...
     name: mullvad-extension


=====================================
projects/firefox/config
=====================================
@@ -18,12 +18,12 @@ container:
   use_container: 1
 
 var:
-  firefox_platform_version: '140.11.0'
+  firefox_platform_version: '140.12.0'
   firefox_version: '[% c("var/firefox_platform_version") %]esr'
   browser_series: '15.0'
   browser_rebase: 1
   browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
-  browser_build: 4
+  browser_build: 2
   copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
   nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'
   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
@@ -112,7 +112,6 @@ targets:
   mullvadbrowser:
     git_url: https://gitlab.torproject.org/tpo/applications/mullvad-browser.git
     var:
-      browser_build: 2
       gitlab_project: https://gitlab.torproject.org/tpo/applications/mullvad-browser
       updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/'
       mar_id_prefix: 'mullvadbrowser-mullvad'


=====================================
projects/geckoview/config
=====================================
@@ -20,12 +20,12 @@ container:
     build_apk: 1
 
 var:
-  firefox_platform_version: '140.11.0'
+  firefox_platform_version: '140.12.0'
   geckoview_version: '[% c("var/firefox_platform_version") %]esr'
   browser_series: '15.0'
   browser_rebase: 1
   browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
-  browser_build: 4
+  browser_build: 2
   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
   git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
   deps:


=====================================
projects/go/config
=====================================
@@ -1,11 +1,11 @@
 # vim: filetype=yaml sw=2
-version: '1.25.10'
+version: '1.25.11'
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 container:
   use_container: 1
 
 var:
-  source_sha256: 20cf04a92e5af99748e341bc8996fa28090c9ac98765fa115ec5ddf41d7af41d
+  source_sha256: 7b4e5b079b3c9bc420373ca68621a296b4d13c10735d4acac4171928d70f5480
   no_crosscompile: 1
   setup: |
     mkdir -p /var/tmp/dist


=====================================
projects/openssl/config
=====================================
@@ -1,5 +1,5 @@
 # vim: filetype=yaml sw=2
-version: 3.5.6
+version: 3.5.7
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 container:
   use_container: 1
@@ -33,5 +33,5 @@ input_files:
   - name: '[% c("var/compiler") %]'
     project: '[% c("var/compiler") %]'
   - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz'
-    sha256sum: deae7c80cba99c4b4f940ecadb3c3338b13cb77418409238e57d7f31f2a3b736
+    sha256sum: a8c0d28a529ca480f9f36cf5792e2cd21984552a3c8e4aa11a24aa31aeac98e8
     name: openssl


=====================================
projects/translation/config
=====================================
@@ -12,13 +12,13 @@ compress_tar: 'gz'
 steps:
   base-browser:
     base-browser: '[% INCLUDE build %]'
-    git_hash: 1d60e454a106f032f83e1c76f7dee5309efe8938
+    git_hash: 327118384583e8a3e7136a44fdf2161d3a0ae273
     targets:
       nightly:
         git_hash: 'base-browser'
   tor-browser:
     tor-browser: '[% INCLUDE build %]'
-    git_hash: 2d7a502a0fe2ab313e03440999003d21f3df1d20
+    git_hash: d045de641ff236415c819b436b829fea34cd096d
     targets:
       nightly:
         git_hash: 'tor-browser'
@@ -32,7 +32,7 @@ steps:
     fenix: '[% INCLUDE build %]'
     # We need to bump the commit before releasing but just pointing to a branch
     # might cause too much rebuidling of the Firefox part.
-    git_hash: 85e4fdaea34266fdc7f0ef88c68606edc3f280f4
+    git_hash: cbe938e98c81ce851aa811fb10ba28953b086a19
     compress_tar: 'zst'
     targets:
       nightly:


=====================================
rbm.conf
=====================================
@@ -74,11 +74,11 @@ buildconf:
   git_signtag_opt: '-s'
 
 var:
-  torbrowser_version: '15.0.15'
+  torbrowser_version: '15.0.16'
   torbrowser_build: 'build1'
   # This should be the date of when the build is started. For the build
   # to be reproducible, browser_release_date should always be in the past.
-  browser_release_date: '2026/06/02 11:57:55'
+  browser_release_date: '2026/06/16 01:15:30'
   browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
   browser_default_channel: release
   browser_platforms:
@@ -128,9 +128,10 @@ var:
   updater_enabled: 1
   build_mar: 1
   torbrowser_incremental_from:
+    - '[% IF c("var/tor-browser") %]15.0.15[% END %]'
     - 15.0.14
     - '[% IF c("var/tor-browser") %]15.0.13[% END %]'
-    - 15.0.12
+    - '[% IF c("var/mullvad-browser") %]15.0.12[% END %]'
     - '[% IF c("var/mullvad-browser") %]15.0.11[% END %]'
   mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
 



View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/52...

-- 
View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/52...
You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

    

ma1 (＠ma1)

tags

participants (1)