[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-commits] [Git][tpo/applications/tor-browser-build][main] Bug 41840,41841: Prepare Tor, Mullvad Browser 16.0a10

Title: GitLab

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build

Commits:

  • 55e25c58
    by Morgan at 2026-08-26T15:07:52+00:00 
    Bug 41840,41841: Prepare Tor, Mullvad Browser 16.0a10

10 changed files:

Changes:

  • projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
    1 
    +Mullvad Browser 16.0a10 - August 27 2026
    2 
    + * All Platforms
    3 
    +   * Updated Firefox to 153.1.0esr
    4 
    +   * Updated NoScript to 13.6.31.90301984
    5 
    +   * Updated uBlock Origin to 1.74.0
    6 
    +   * Bug 446: Implement persistent-mode backend [mullvad-browser]
    7 
    +   * Bug 535: Use config to hide settings in mullvad browser [mullvad-browser]
    8 
    +   * Bug 565: Update the selector to hide the help button in about:addons [mullvad-browser]
    9 
    +   * Bug 566: The security level learn mode link is wrong in Mullvad Browser [mullvad-browser]
    10 
    +   * Bug 571: Rebase Mullvad Browser alpha onto 153.1.0esr [mullvad-browser]
    11 
    +   * Bug 572: Websites can initiate a WebSocket connection to a lan/localhost port [mullvad-browser]
    12 
    +   * Bug 43640: Poor screen reader experience when opening preferences and scrolling to element [tor-browser]
    13 
    +   * Bug 44257: Disable locale-based font rules as a defense-in-depth [tor-browser]
    14 
    +   * Bug 44511: Make sure new search suggest features are disabled for 16.0 [tor-browser]
    15 
    +   * Bug 44629: Add a search suggestion warning in the settings [tor-browser]
    16 
    +   * Bug 44699: Amend commit message for "BB 43322: Customize the font visibility lists" [tor-browser]
    17 
    +   * Bug 44802: Hide the "safe browsing" settings [tor-browser]
    18 
    +   * Bug 44830: Migrate our home page adjustments to the settings config [tor-browser]
    19 
    +   * Bug 45039: Make it easier to test ProfileDataUpgrader customization [tor-browser]
    20 
    +   * Bug 45079: Move letterboxing to the appearance setting pane [tor-browser]
    21 
    +   * Bug 45123: Disable profile backup for 16.0 [tor-browser]
    22 
    +   * Bug 45157: Grant "access local files" permission to NoScript (Firefox 153 and above) [tor-browser]
    23 
    +   * Bug 45168: Hide the history search option, again [tor-browser]
    24 
    +   * Bug 45169: Cannot open history sidebar in private browsing window [tor-browser]
    25 
    +   * Bug 45171: Disable split view for 16.0 [tor-browser]
    26 
    +   * Bug 45176: Add "Request English" to the website language config [tor-browser]
    27 
    +   * Bug 45185: Disable network also in the Rust implementation of the remote settings client [tor-browser]
    28 
    +   * Bug 45186: Remove duplicate alert roles in moz-message-bar [tor-browser]
    29 
    +   * Bug 45187: Disable private browsing "delete downloaded files" feature [tor-browser]
    30 
    +   * Bug 45195: Modify our calls to openPreferences to work with the new settings [tor-browser]
    31 
    +   * Bug 45201: Convert security level settings to the new config [tor-browser]
    32 
    +   * Bug 45208: Switch on the setting redesign [tor-browser]
    33 
    +   * Bug 45209: Remove mention of "sync" from new settings [tor-browser]
    34 
    +   * Bug 45211: Add settings for protections from third party applications [tor-browser]
    35 
    +   * Bug 45219: Backport Security Fixes from Firefox 154 [tor-browser]
    36 
    +   * Bug 45228: Drop browser.urlbar.update2.engineAliasRefresh [tor-browser]
    37 
    +   * Bug 45232: Spoof picture-in-picture sizes under RFP [tor-browser]
    38 
    +   * Bug 45245: Fix a ML file inclusion that creates an error [tor-browser]
    39 
    + * Windows
    40 
    +   * Bug 563: Hide the fox icon in about:pdf [mullvad-browser]
    41 
    +   * Bug 44513: Backport Bugzilla 2059471: Do not spoof screen orientation when it is locked [tor-browser]
    42 
    +   * Bug 45144: Do not offer to make the browser a PDF viewer when in portable mode [tor-browser]
    43 
    +   * Bug 45243: Disable taskbar tabs [tor-browser]
    44 
    + * Build System
    45 
    +   * All Platforms
    46 
    +     * Bug 45224: Enable Rust linter in CI [tor-browser]
    47 
    +     * Bug 45231: Backport Bugzilla 2053518: Rust target detection fails to translate the host triple with rustc nightly >= 2026-07-02 (new *-oe-linux-* targets) [tor-browser]
    48 
    +     * Bug 41844: Add scripts to backup/deploy signing keys on signing machines [tor-browser-build]
    49 
    +     * Bug 41850: Update keyring/torbrowser.gpg for new subkey and updated expiration date of the main key [tor-browser-build]
    50 
    +
    1 51 
     Mullvad Browser 16.0a9 - July 23 2026
    2 52 
      * All Platforms
    3 53 
        * Updated Firefox to 153.0esr

  • projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
    1 
    +Tor Browser 16.0a10 - August 27 2026
    2 
    + * All Platforms
    3 
    +   * Updated NoScript to 13.6.31.90301984
    4 
    +   * Updated OpenSSL to 3.5.8
    5 
    +   * Bug 44257: Disable locale-based font rules as a defense-in-depth [tor-browser]
    6 
    +   * Bug 45161: Drop TorProviderBuilder.firstWindowLoaded [tor-browser]
    7 
    +   * Bug 45205: Rebase Tor Browser onto 153.1.0esr [tor-browser]
    8 
    +   * Bug 45219: Backport Security Fixes from Firefox 154 [tor-browser]
    9 
    + * Windows + macOS + Linux
    10 
    +   * Updated Firefox to 153.1.0esr
    11 
    +   * Bug 43570: Report errors in about:torconnect when tor daemon crashes (Desktop) [tor-browser]
    12 
    +   * Bug 43640: Poor screen reader experience when opening preferences and scrolling to element [tor-browser]
    13 
    +   * Bug 43939: Update Bridge settings when connection failed [tor-browser]
    14 
    +   * Bug 44247: Adapt Tor Browser manual to use the new support pages [tor-browser]
    15 
    +   * Bug 44511: Make sure new search suggest features are disabled for 16.0 [tor-browser]
    16 
    +   * Bug 44629: Add a search suggestion warning in the settings [tor-browser]
    17 
    +   * Bug 44699: Amend commit message for "BB 43322: Customize the font visibility lists" [tor-browser]
    18 
    +   * Bug 44802: Hide the "safe browsing" settings [tor-browser]
    19 
    +   * Bug 44830: Migrate our home page adjustments to the settings config [tor-browser]
    20 
    +   * Bug 44831: Misleading banner in "Search engine suggestions" settings [tor-browser]
    21 
    +   * Bug 44855: Use `ariaNotify` for bridge updates [tor-browser]
    22 
    +   * Bug 44959: Integrate the new Tor Browser manual into Tor Browser [tor-browser]
    23 
    +   * Bug 44998: Remove Firefox branding from about:preferences [tor-browser]
    24 
    +   * Bug 45039: Make it easier to test ProfileDataUpgrader customization [tor-browser]
    25 
    +   * Bug 45051: Show a separate Tor error prompt for users who do not see about:torconnect (desktop) [tor-browser]
    26 
    +   * Bug 45058: Convert bridge settings to new design and config approach [tor-browser]
    27 
    +   * Bug 45059: Convert advanced connection settings to new design and config approach [tor-browser]
    28 
    +   * Bug 45079: Move letterboxing to the appearance setting pane [tor-browser]
    29 
    +   * Bug 45123: Disable profile backup for 16.0 [tor-browser]
    30 
    +   * Bug 45125: Tidy up bridge emoji widget [tor-browser]
    31 
    +   * Bug 45143: Modify moz-fieldset to allow focusing the heading [tor-browser]
    32 
    +   * Bug 45156: Remove "Firefox Home" from the appearance settings [tor-browser]
    33 
    +   * Bug 45157: Grant "access local files" permission to NoScript (Firefox 153 and above) [tor-browser]
    34 
    +   * Bug 45168: Hide the history search option, again [tor-browser]
    35 
    +   * Bug 45169: Cannot open history sidebar in private browsing window [tor-browser]
    36 
    +   * Bug 45171: Disable split view for 16.0 [tor-browser]
    37 
    +   * Bug 45176: Add "Request English" to the website language config [tor-browser]
    38 
    +   * Bug 45178: Change support URLs in new settings [tor-browser]
    39 
    +   * Bug 45179: Update the feedback URL to point to the new support page. [tor-browser]
    40 
    +   * Bug 45180: Also show download warning in download settings [tor-browser]
    41 
    +   * Bug 45185: Disable network also in the Rust implementation of the remote settings client [tor-browser]
    42 
    +   * Bug 45186: Remove duplicate alert roles in moz-message-bar [tor-browser]
    43 
    +   * Bug 45187: Disable private browsing "delete downloaded files" feature [tor-browser]
    44 
    +   * Bug 45190: New circuit urlbar icon button is squished [tor-browser]
    45 
    +   * Bug 45192: Some URLs trigger `The proxy server is refusing connections` rather than about:torconnect prior to bootstrap [tor-browser]
    46 
    +   * Bug 45194: "Your bridges" background color [tor-browser]
    47 
    +   * Bug 45195: Modify our calls to openPreferences to work with the new settings [tor-browser]
    48 
    +   * Bug 45196: Replace old connection settings with setting-group widgets [tor-browser]
    49 
    +   * Bug 45197: Hide password settings by default [tor-browser]
    50 
    +   * Bug 45200: Include onion authentication in the new password settings [tor-browser]
    51 
    +   * Bug 45201: Convert security level settings to the new config [tor-browser]
    52 
    +   * Bug 45208: Switch on the setting redesign [tor-browser]
    53 
    +   * Bug 45209: Remove mention of "sync" from new settings [tor-browser]
    54 
    +   * Bug 45211: Add settings for protections from third party applications [tor-browser]
    55 
    +   * Bug 45214: Keep megalist (contextual password manager) disabled for 16.0 [tor-browser]
    56 
    +   * Bug 45220: about:torconnect doesn't show when launching the browser in non-PBM [tor-browser]
    57 
    +   * Bug 45226: Stylelint issues on browser/components/torpreferences/content/torPreferences.css [tor-browser]
    58 
    +   * Bug 45228: Drop browser.urlbar.update2.engineAliasRefresh [tor-browser]
    59 
    +   * Bug 45232: Spoof picture-in-picture sizes under RFP [tor-browser]
    60 
    +   * Bug 45236: Resolve miscellaneus accessibility issues in about:torconnect [tor-browser]
    61 
    +   * Bug 45245: Fix a ML file inclusion that creates an error [tor-browser]
    62 
    + * Windows + Android
    63 
    +   * Bug 44513: Backport Bugzilla 2059471: Do not spoof screen orientation when it is locked [tor-browser]
    64 
    + * Windows
    65 
    +   * Bug 45144: Do not offer to make the browser a PDF viewer when in portable mode [tor-browser]
    66 
    +   * Bug 45243: Disable taskbar tabs [tor-browser]
    67 
    + * macOS
    68 
    +   * Bug 45163: Consistently do not disable app group container support [tor-browser]
    69 
    + * Android
    70 
    +   * Updated GeckoView to 153.1.0esr
    71 
    +   * Bug 41758: Don't allow PDFs to be opened by 3rd party apps [tor-browser]
    72 
    +   * Bug 43571: Implement improved error handling and tor restart flow (Android) [tor-browser]
    73 
    +   * Bug 44054: Review Mozilla 1970806: [Download v2] Implement new UI for External Download Manager dialog [tor-browser]
    74 
    +   * Bug 44210: Consider dropping shouldDisableNormalMode setting [tor-browser]
    75 
    +   * Bug 44448: Trivialise assets rather than delete them in "[android] Delete unused media" [tor-browser]
    76 
    +   * Bug 44758: Disable email mask feature [tor-browser]
    77 
    +   * Bug 44881: Remove link sharing setting on android [tor-browser]
    78 
    +   * Bug 44921: Disable Google Lens feature [tor-browser]
    79 
    +   * Bug 45049: Opening a pdf from outside TBA crashes TBA after bootstrapping it not already bootstrapped [tor-browser]
    80 
    +   * Bug 45085: Disable GooglePlay Integrity [tor-browser]
    81 
    +   * Bug 45098: Share link button shows in landscape mode on android despite being removed elsewhere [tor-browser]
    82 
    +   * Bug 45115: Padlock always shows insecure even for HTTPS and Onion sites [tor-browser]
    83 
    +   * Bug 45159: Fix Android Padlock security pane colors [tor-browser]
    84 
    +   * Bug 45170: Tab Switcher shows Firefox's private browsing mask badge on tab switcher icon [tor-browser]
    85 
    +   * Bug 45173: Disable Search Optimizations for android [tor-browser]
    86 
    +   * Bug 45203: Rebase error with: TB 40041: [android] Implement Tor Network Settings [tor-browser]
    87 
    +   * Bug 45221: Remove "Manage downloads with another app" setting from TBA download settings [tor-browser]
    88 
    +   * Bug 45227: Remove "Default search engine for Standard Mode" [tor-browser]
    89 
    +   * Bug 45234: Do not spoof secondary screen orientations if they were requested by a lock [tor-browser]
    90 
    + * Build System
    91 
    +   * All Platforms
    92 
    +     * Bug 45224: Enable Rust linter in CI [tor-browser]
    93 
    +     * Bug 45231: Backport Bugzilla 2053518: Rust target detection fails to translate the host triple with rustc nightly >= 2026-07-02 (new *-oe-linux-* targets) [tor-browser]
    94 
    +     * Bug 41844: Add scripts to backup/deploy signing keys on signing machines [tor-browser-build]
    95 
    +     * Bug 41850: Update keyring/torbrowser.gpg for new subkey and updated expiration date of the main key [tor-browser-build]
    96 
    +   * Windows + macOS + Linux
    97 
    +     * Bug 41711: Update our manual machinery for its new home [tor-browser-build]
    98 
    +   * Windows + Linux + Android
    99 
    +     * Updated Go to 1.26.7
    100 
    +   * Android
    101 
    +     * Bug 41843: Remove unused universal apk from geckoview [tor-browser-build]
    102 
    +
    1 103 
     Tor Browser 16.0a9 - July 23 2026
    2 104 
      * All Platforms
    3 105 
        * Updated NoScript to 13.6.30.90201984

  • projects/browser/config
    ... ... @@ -87,12 +87,12 @@ input_files:
    87 87 
         enable: '[% !c("var/android") %]'
    88 88 
       - filename: dmg-root
    89 89 
         enable: '[% c("var/macos") %]'
    90 
    -  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.30.90201984.xpi
    90 
    +  - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.31.90301984.xpi
    91 91 
         name: noscript
    92 
    -    sha256sum: ef7b48702916f86d44f0578fcc18dcd4ed4a013481abafca96891e10af1bcf85
    93 
    -  - URL: https://addons.mozilla.org/firefox/downloads/file/4888680/ublock_origin-1.72.2.xpi
    92 
    +    sha256sum: 37026b2449ed18e4f85dea3d870e43c5813db144334f98fd61220f698a351163
    93 
    +  - URL: https://addons.mozilla.org/firefox/downloads/file/4981431/ublock_origin-1.74.0.xpi
    94 94 
         name: ublock-origin
    95 
    -    sha256sum: 40c315b0da7871868155ecfae7a50a58dfa0920aebd865e008214986f1b7c578
    95 
    +    sha256sum: 175756d74468c9ba45863f7fc333d3be670f82d5b066314e915814dd547d1652
    96 96 
         enable: '[% c("var/mullvad-browser") %]'
    97 97 
       - URL: https://cdn.mullvad.net/browser-extension/0.9.10/mullvad-browser-extension-0.9.10.xpi
    98 98 
         name: mullvad-extension

  • projects/firefox/config
    ... ... @@ -23,7 +23,7 @@ var:
    23 23 
       browser_series: '16.0'
    24 24 
       browser_rebase: 1
    25 25 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    26 
    -  browser_build: 1
    26 
    +  browser_build: 4
    27 27 
       upstream_firefox_commit: FIREFOX_NIGHTLY_153_END
    28 28 
       copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
    29 29 
       nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'
    ... ... @@ -114,6 +114,7 @@ targets:
    114 114 
           updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/'
    115 115 
           mar_id_prefix: 'mullvadbrowser-mullvad'
    116 116 
           nightly_updates_publish_dir_prefix: mullvadbrowser-
    117 
    +      browser_build: 3
    117 118 
       linux-x86_64:
    118 119 
         var:
    119 120 
           arch_deps:

  • projects/geckoview/config
    ... ... @@ -26,7 +26,7 @@ var:
    26 26 
       browser_series: '16.0'
    27 27 
       browser_rebase: 1
    28 28 
       browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
    29 
    -  browser_build: 1
    29 
    +  browser_build: 4
    30 30 
       gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
    31 31 
       git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
    32 32 
       deps:

  • projects/go/config
    1 1 
     # vim: filetype=yaml sw=2
    2 
    -version: '1.26.5'
    2 
    +version: '1.26.7'
    3 3 
     filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    4 4 
     container:
    5 5 
       use_container: 1
    6 6
    7 7 
     var:
    8 
    -  source_sha256: 495be4bc87176ac567392e5b4116abd98466d33d7b49d41e764ccc6976b2dc42
    8 
    +  source_sha256: 0ed24eac755105085b89fe9cabc2742b91a0ad7b94b59d3ad364918ebc8956ad
    9 9 
       no_crosscompile: 1
    10 10 
       setup: |
    11 11 
         mkdir -p /var/tmp/dist

  • projects/manual/config
    1 1 
     # vim: filetype=yaml sw=2
    2 2 
     # To update, see doc/how-to-update-the-manual.txt
    3 3 
     # Remember to update also the package's hash, with the version!
    4 
    -version: 402523
    4 
    +version: 415198
    5 5 
     filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    6 6 
     container:
    7 7 
       use_container: 1
    ... ... @@ -23,6 +23,6 @@ input_files:
    23 23 
       - project: container-image
    24 24 
       - URL: 'https://build-sources.tbb.torproject.org/marble-support_[% c("version") %].zip'
    25 25 
         name: manual
    26 
    -    sha256sum: e0f09c869719bf9dc0ae2761f121cae7cd9b5324f817f2cc0a5861c58442f3ff
    26 
    +    sha256sum: c5223af6931d03be5b5e17e9be3d64c4223008a591a3acd3d553f86c6bd8df37
    27 27 
       - filename: package_marble_build_artifacts.py
    28 28 
         name: package_script

  • projects/openssl/config
    1 1 
     # vim: filetype=yaml sw=2
    2 
    -version: 3.5.7
    2 
    +version: 3.5.8
    3 3 
     filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
    4 4 
     container:
    5 5 
       use_container: 1
    ... ... @@ -41,5 +41,5 @@ input_files:
    41 41 
       - name: '[% c("var/compiler") %]'
    42 42 
         project: '[% c("var/compiler") %]'
    43 43 
       - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz'
    44 
    -    sha256sum: a8c0d28a529ca480f9f36cf5792e2cd21984552a3c8e4aa11a24aa31aeac98e8
    44 
    +    sha256sum: a8f84a39918ec6415ce765d9b429d313ba97b8143169c172e734b9514464f5b2
    45 45 
         name: openssl

  • projects/translation/config
    ... ... @@ -12,13 +12,13 @@ compress_tar: 'gz'
    12 12 
     steps:
    13 13 
       base-browser:
    14 14 
         base-browser: '[% INCLUDE build %]'
    15 
    -    git_hash: 7bd0a8e7226bbf29f16d477ff92d0024b1d48a7c
    15 
    +    git_hash: 1ebbe4b676d03428a8091e9ce6c64e5f0046b0f9
    16 16 
         targets:
    17 17 
           nightly:
    18 18 
             git_hash: 'base-browser'
    19 19 
       tor-browser:
    20 20 
         tor-browser: '[% INCLUDE build %]'
    21 
    -    git_hash: 43635f68f04d7e5645e5b28bbab7cd7f0fc2ffa5
    21 
    +    git_hash: ea6fbf3c7c1e2ded1613285560d927806dd82337
    22 22 
         targets:
    23 23 
           nightly:
    24 24 
             git_hash: 'tor-browser'
    ... ... @@ -32,7 +32,7 @@ steps:
    32 32 
         fenix: '[% INCLUDE build %]'
    33 33 
         # We need to bump the commit before releasing but just pointing to a branch
    34 34 
         # might cause too much rebuidling of the Firefox part.
    35 
    -    git_hash: f3757f734f6d08ff5aecc18f9f4b05e35c9bcbc4
    35 
    +    git_hash: 0a527bd20d6649a5dc6d648aa355e884b80654a9
    36 36 
         compress_tar: 'zst'
    37 37 
         targets:
    38 38 
           nightly:

  • rbm.conf
    ... ... @@ -81,11 +81,11 @@ buildconf:
    81 81 
       git_signtag_opt: '-s'
    82 82
    83 83 
     var:
    84 
    -  torbrowser_version: '16.0a9'
    84 
    +  torbrowser_version: '16.0a10'
    85 85 
       torbrowser_build: 'build1'
    86 86 
       # This should be the date of when the build is started. For the build
    87 87 
       # to be reproducible, browser_release_date should always be in the past.
    88 
    -  browser_release_date: '2026/07/22 13:30:00'
    88 
    +  browser_release_date: '2026/08/26 14:53:16'
    89 89 
       browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
    90 90 
       browser_default_channel: alpha
    91 91 
       browser_platforms:
    ... ... @@ -131,9 +131,9 @@ var:
    131 131 
       updater_enabled: 1
    132 132 
       build_mar: 1
    133 133 
       torbrowser_incremental_from:
    134 
    +    - 16.0a9
    134 135 
         - 16.0a8
    135 136 
         - 16.0a7
    136 
    -    - 16.0a6
    137 137 
       mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
    138 138
    139 139 
       # By default, we sort the list of installed packages. This allows sharing

    • —
    View it on GitLab.
    You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help Notification message regarding https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/55e25c58822af5e3dd10fe94ecd0497b09d55a7c at 1787757520 

    _______________________________________________
tor-commits mailing list -- tor-commits@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-commits-leave@xxxxxxxxxxxxxxxxxxxx