Commits:
-
45639909
by Pier Angelo Vendrame at 2026-03-23T09:24:56+01:00
Bug 41580: Updated go to 1.25.8.
This is a major Go update, which introduces incompatibilities.
For this reason, we needed to update also go-licenses.
However, the new version does not build with the Go compiler built to
output Windows binaries (and possibly Android as well).
Therefore, we changed the projects that use it to use the Linux
arfiacts of the tool.
-
26a901e2
by Pier Angelo Vendrame at 2026-03-23T15:34:31+01:00
Bug41739&41740: Prepare Tor, Mullvad Browser 15.0.8
12 changed files:
Changes:
projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
|
|
1
|
+Mullvad Browser 15.0.8 - March 24 2026
|
|
|
2
|
+ * All Platforms
|
|
|
3
|
+ * Updated Firefox to 140.9.0esr
|
|
|
4
|
+ * Updated NoScript to 13.6.12.1984
|
|
|
5
|
+ * Updated uBlock Origin to 1.70.0
|
|
|
6
|
+ * Bug 521: Rebase Mullvad Browser stable onto 140.9.0esr [mullvad-browser]
|
|
|
7
|
+ * Bug 44663: NoScript behavior on “Safer” security level prevents integrity checks for dynamically loaded _javascript_ [tor-browser]
|
|
|
8
|
+ * Bug 44680: Properly handle subdocuments created by data: URLs [tor-browser]
|
|
|
9
|
+ * Bug 44761: Safer Level's worker patching filters out Worker constructor options [tor-browser]
|
|
|
10
|
+ * Bug 44784: Backport Security Fixes from Firefox 149 [tor-browser]
|
|
|
11
|
+ * Bug 41738: Allow to specify an unsupportedURL on update responses [tor-browser-build]
|
|
|
12
|
+ * Linux
|
|
|
13
|
+ * Bug 44657: Backport tor-browser#44394: Do not read default prefs from /etc/firefox [tor-browser]
|
|
|
14
|
+
|
|
1
|
15
|
Mullvad Browser 15.0.7 - February 24 2026
|
|
2
|
16
|
* All Platforms
|
|
3
|
17
|
* Updated Firefox to 140.8.0esr
|
projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
No preview for this file type
projects/browser/config
| ... |
... |
@@ -114,15 +114,15 @@ input_files: |
|
114
|
114
|
- filename: dmg-root
|
|
115
|
115
|
enable: '[% ! c("var/android") %]'
|
|
116
|
116
|
- name: fenix-nightly-apk
|
|
117
|
|
- URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/02/2026-02-22-21-34-44-fenix-149.0a1-android-arm64-v8a/fenix-149.0a1.multi.android-arm64-v8a.apk
|
|
|
117
|
+ URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/03/2026-03-21-20-51-52-fenix-150.0a1-android-arm64-v8a/fenix-150.0a1.multi.android-arm64-v8a.apk
|
|
118
|
118
|
enable: '[% c("var/android") %]'
|
|
119
|
|
- sha256sum: 029f2f48f7ec2e58e06ccc0caba7d69578b3e1fa9cb85447f7c3fa63e11bf26e
|
|
120
|
|
- - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.5.14.1984.xpi
|
|
|
119
|
+ sha256sum: 84932e0e1288bfd0678d39d96e89530cce4d5f2c4ad37126338e060b0b89204e
|
|
|
120
|
+ - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.12.1984.xpi
|
|
121
|
121
|
name: noscript
|
|
122
|
|
- sha256sum: ba55c6ad73f048468f14fb3da7acb5a8e8ffd822aa1a26ae8850933acbc92cfa
|
|
123
|
|
- - URL: https://addons.mozilla.org/firefox/downloads/file/4675310/ublock_origin-1.69.0.xpi
|
|
|
122
|
+ sha256sum: fe0fe0b582723ba2187def77746aab6b8f5f884729465de746f846ed00a87201
|
|
|
123
|
+ - URL: https://addons.mozilla.org/firefox/downloads/file/4721638/ublock_origin-1.70.0.xpi
|
|
124
|
124
|
name: ublock-origin
|
|
125
|
|
- sha256sum: 785bcde68a25faa8a0949964ec5ffe9bdcb85d3f0ae21c23f607c6c8f91472cf
|
|
|
125
|
+ sha256sum: f2730d2877005763a45d765749892e936f49cae713d28f7aa6ea314454b89cf1
|
|
126
|
126
|
enable: '[% c("var/mullvad-browser") %]'
|
|
127
|
127
|
- URL: https://cdn.mullvad.net/browser-extension/0.9.7/mullvad-browser-extension-0.9.7.xpi
|
|
128
|
128
|
name: mullvad-extension
|
projects/conjure/config
| ... |
... |
@@ -24,3 +24,5 @@ steps: |
|
24
|
24
|
'^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64'
|
|
25
|
25
|
- name: go-licenses
|
|
26
|
26
|
project: go-licenses
|
|
|
27
|
+ target_replace:
|
|
|
28
|
+ '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64' |
projects/firefox/config
| ... |
... |
@@ -16,12 +16,12 @@ container: |
|
16
|
16
|
use_container: 1
|
|
17
|
17
|
|
|
18
|
18
|
var:
|
|
19
|
|
- firefox_platform_version: '140.8.0'
|
|
|
19
|
+ firefox_platform_version: '140.9.0'
|
|
20
|
20
|
firefox_version: '[% c("var/firefox_platform_version") %]esr'
|
|
21
|
21
|
browser_series: '15.0'
|
|
22
|
22
|
browser_rebase: 1
|
|
23
|
23
|
browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
|
|
24
|
|
- browser_build: 3
|
|
|
24
|
+ browser_build: 2
|
|
25
|
25
|
copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
|
|
26
|
26
|
nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'
|
|
27
|
27
|
gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
|
| ... |
... |
@@ -114,7 +114,6 @@ targets: |
|
114
|
114
|
updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/'
|
|
115
|
115
|
mar_id_prefix: 'mullvadbrowser-mullvad'
|
|
116
|
116
|
nightly_updates_publish_dir_prefix: mullvadbrowser-
|
|
117
|
|
- browser_build: 2
|
|
118
|
117
|
|
|
119
|
118
|
linux-x86_64:
|
|
120
|
119
|
var:
|
projects/geckoview/config
| ... |
... |
@@ -18,12 +18,12 @@ container: |
|
18
|
18
|
build_apk: 1
|
|
19
|
19
|
|
|
20
|
20
|
var:
|
|
21
|
|
- firefox_platform_version: '140.8.0'
|
|
|
21
|
+ firefox_platform_version: '140.9.0'
|
|
22
|
22
|
geckoview_version: '[% c("var/firefox_platform_version") %]esr'
|
|
23
|
23
|
browser_series: '15.0'
|
|
24
|
24
|
browser_rebase: 1
|
|
25
|
25
|
browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
|
|
26
|
|
- browser_build: 3
|
|
|
26
|
+ browser_build: 2
|
|
27
|
27
|
gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
|
|
28
|
28
|
git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
|
|
29
|
29
|
deps:
|
projects/go-licenses/config
|
1
|
1
|
# vim: filetype=yaml sw=2
|
|
2
|
2
|
# The last stable release is not compatible with our go version, therefore use
|
|
3
|
3
|
# the last available pre-release.
|
|
4
|
|
-version: 2.0.0-alpha.1
|
|
|
4
|
+version: 2.0.1
|
|
5
|
5
|
git_url: https://github.com/google/go-licenses.git
|
|
6
|
|
-git_hash: d01822334fba5896920a060f762ea7ecdbd086e8
|
|
|
6
|
+git_hash: 3e084b0caf710f7bfead967567539214f598c0a2
|
|
7
|
7
|
|
|
8
|
8
|
container:
|
|
9
|
9
|
use_container: 1
|
| ... |
... |
@@ -22,6 +22,6 @@ steps: |
|
22
|
22
|
pkg_type: go_vendor
|
|
23
|
23
|
project: go-licenses
|
|
24
|
24
|
norec:
|
|
25
|
|
- sha256sum: b3799f5445ce9f1d48893227287846c689ab67bbdc76b607d5d228739b5c19a2
|
|
|
25
|
+ sha256sum: 924d0e45d1ec723b29f667547ac43444ff5c432862317b5e5a246de3871ec9a5
|
|
26
|
26
|
target_replace:
|
|
27
|
27
|
'^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64' |
projects/go/config
|
1
|
1
|
# vim: filetype=yaml sw=2
|
|
2
|
|
-version: '1.24.13'
|
|
|
2
|
+version: '1.25.8'
|
|
3
|
3
|
filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
|
|
4
|
4
|
container:
|
|
5
|
5
|
use_container: 1
|
|
6
|
6
|
|
|
7
|
7
|
var:
|
|
8
|
|
- source_sha256: 639a6204c2486b137df1eb6e78ee3ed038f9877d0e4b5a465e796a2153f858d7
|
|
|
8
|
+ source_sha256: e988d4a2446ac7fe3f6daa089a58e9936a52a381355adec1c8983230a8d6c59e
|
|
9
|
9
|
no_crosscompile: 1
|
|
10
|
10
|
setup: |
|
|
11
|
11
|
mkdir -p /var/tmp/dist
|
projects/lyrebird/config
| ... |
... |
@@ -38,3 +38,5 @@ steps: |
|
38
|
38
|
'^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64'
|
|
39
|
39
|
- name: go-licenses
|
|
40
|
40
|
project: go-licenses
|
|
|
41
|
+ target_replace:
|
|
|
42
|
+ '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64' |
projects/moat-settings/config
|
1
|
1
|
# vim: filetype=yaml sw=2
|
|
2
|
2
|
filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
|
|
3
|
3
|
git_url: https://gitlab.torproject.org/tpo/anti-censorship/rdsys-admin.git
|
|
4
|
|
-git_hash: 365b0e65b27e053bece37b70bca0bd5fdb02099f
|
|
|
4
|
+git_hash: b99317d18b69d878700e124bbfe575495581270d
|
|
5
|
5
|
version: '[% c("abbrev") %]'
|
|
6
|
6
|
# Use gz for now, since we do not support Zstandard on Linux containers.
|
|
7
|
7
|
compress_tar: 'gz' |
projects/translation/config
| ... |
... |
@@ -12,13 +12,13 @@ compress_tar: 'gz' |
|
12
|
12
|
steps:
|
|
13
|
13
|
base-browser:
|
|
14
|
14
|
base-browser: '[% INCLUDE build %]'
|
|
15
|
|
- git_hash: 2f74a0bbbaf9a4324225be31337909a7b9043e72
|
|
|
15
|
+ git_hash: 1603108043c6fd4f8efbdc48b0c1efdb1a75e23f
|
|
16
|
16
|
targets:
|
|
17
|
17
|
nightly:
|
|
18
|
18
|
git_hash: 'base-browser'
|
|
19
|
19
|
tor-browser:
|
|
20
|
20
|
tor-browser: '[% INCLUDE build %]'
|
|
21
|
|
- git_hash: c424a64fb1d100df5de66455a3290cd0e846f70c
|
|
|
21
|
+ git_hash: fc03771326c446f5eed1e0675fdf88769ca3daf2
|
|
22
|
22
|
targets:
|
|
23
|
23
|
nightly:
|
|
24
|
24
|
git_hash: 'tor-browser'
|
| ... |
... |
@@ -32,7 +32,7 @@ steps: |
|
32
|
32
|
fenix: '[% INCLUDE build %]'
|
|
33
|
33
|
# We need to bump the commit before releasing but just pointing to a branch
|
|
34
|
34
|
# might cause too much rebuidling of the Firefox part.
|
|
35
|
|
- git_hash: 0bae51aacdd03293cdf527ff4ee55a08e45189d8
|
|
|
35
|
+ git_hash: 50f7678e7090753d1ca795b87bd2827c0cbfbba6
|
|
36
|
36
|
compress_tar: 'zst'
|
|
37
|
37
|
targets:
|
|
38
|
38
|
nightly:
|
rbm.conf
| ... |
... |
@@ -74,11 +74,11 @@ buildconf: |
|
74
|
74
|
git_signtag_opt: '-s'
|
|
75
|
75
|
|
|
76
|
76
|
var:
|
|
77
|
|
- torbrowser_version: '15.0.7'
|
|
|
77
|
+ torbrowser_version: '15.0.8'
|
|
78
|
78
|
torbrowser_build: 'build1'
|
|
79
|
79
|
# This should be the date of when the build is started. For the build
|
|
80
|
80
|
# to be reproducible, browser_release_date should always be in the past.
|
|
81
|
|
- browser_release_date: '2026/02/23 09:30:00'
|
|
|
81
|
+ browser_release_date: '2026/03/23 08:00:00'
|
|
82
|
82
|
browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
|
|
83
|
83
|
browser_default_channel: release
|
|
84
|
84
|
browser_platforms:
|
| ... |
... |
@@ -128,14 +128,14 @@ var: |
|
128
|
128
|
updater_enabled: 1
|
|
129
|
129
|
build_mar: 1
|
|
130
|
130
|
torbrowser_incremental_from:
|
|
|
131
|
+ - 15.0.7
|
|
131
|
132
|
- 15.0.6
|
|
132
|
133
|
- '[% IF c("var/tor-browser") %]15.0.5[% END %]'
|
|
133
|
|
- - 15.0.4
|
|
134
|
|
- - '[% IF c("var/mullvad-browser") %]15.0.3[% END %]'
|
|
|
134
|
+ - '[% IF c("var/mullvad-browser") %]15.0.4[% END %]'
|
|
135
|
135
|
mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
|
|
136
|
136
|
|
|
137
|
|
- torbrowser_legacy_version: 13.5.28
|
|
138
|
|
- torbrowser_legacy_platform_version: 115.32.1
|
|
|
137
|
+ torbrowser_legacy_version: 13.5.29
|
|
|
138
|
+ torbrowser_legacy_platform_version: 115.33.0
|
|
139
|
139
|
|
|
140
|
140
|
# By default, we sort the list of installed packages. This allows sharing
|
|
141
|
141
|
# containers with identical list of packages, even if they are not listed
|
|