Pier Angelo Vendrame pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build
Commits:
-
166b1f8f
by Pier Angelo Vendrame at 2026-09-28T19:16:22+02:00
8 changed files:
- projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt
- projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
- projects/browser/config
- projects/firefox/config
- projects/geckoview/config
- projects/tor/config
- projects/translation/config
- rbm.conf
Changes:
| 1 | +Mullvad Browser 15.0.24 - September 29 2026
|
|
| 2 | + * All Platforms
|
|
| 3 | + * Updated Firefox to 140.17.0esr
|
|
| 4 | + * Updated NoScript to 13.6.35.1984
|
|
| 5 | + * Updated uBlock Origin to 1.75.0
|
|
| 6 | + * Bug 583: Rebase Mullvad Browser stable onto 140.17.0esr [mullvad-browser]
|
|
| 7 | + * Bug 45366: Backport Security Fixes from Firefox 157 [tor-browser]
|
|
| 8 | + * Bug 45368: Account for onion aliases in NoScript site parsing [tor-browser]
|
|
| 9 | + * Bug 45371: Hook CharacterData/Range insertion sinks for content patches propagation [tor-browser]
|
|
| 10 | + * Build System
|
|
| 11 | + * All Platforms
|
|
| 12 | + * Bug 41847: Sign all releases using new gpg subkey [tor-browser-build]
|
|
| 13 | + * macOS
|
|
| 14 | + * Bug 41883: Fix sha256sum definition in projects/hfsplus-tools/config [tor-browser-build]
|
|
| 15 | + |
|
| 1 | 16 | Mullvad Browser 15.0.23 - September 15 2026
|
| 2 | 17 | * All Platforms
|
| 3 | 18 | * Updated Firefox to 140.16.0esr
|
| 1 | +Tor Browser 15.0.24 - September 29 2026
|
|
| 2 | + * All Platforms
|
|
| 3 | + * Updated NoScript to 13.6.35.1984
|
|
| 4 | + * Updated Tor to 0.4.9.13
|
|
| 5 | + * Bug 45358: Rebase Tor Browser stable onto 140.17.0esr [tor-browser]
|
|
| 6 | + * Bug 45366: Backport Security Fixes from Firefox 157 [tor-browser]
|
|
| 7 | + * Bug 45368: Account for onion aliases in NoScript site parsing [tor-browser]
|
|
| 8 | + * Bug 45371: Hook CharacterData/Range insertion sinks for content patches propagation [tor-browser]
|
|
| 9 | + * Windows + macOS + Linux
|
|
| 10 | + * Updated Firefox to 140.17.0esr
|
|
| 11 | + * Bug 45218: Implement YEC 2026 Takeover for Desktop Stable [tor-browser]
|
|
| 12 | + * Linux
|
|
| 13 | + * Bug 44996: Change the 32-bit linux message to the expired version for the final 15.0 release [tor-browser]
|
|
| 14 | + * Android
|
|
| 15 | + * Updated GeckoView to 140.17.0esr
|
|
| 16 | + * Bug 45217: Implement YEC 2026 Takeover for Android Stable [tor-browser]
|
|
| 17 | + * Build System
|
|
| 18 | + * All Platforms
|
|
| 19 | + * Bug 41847: Sign all releases using new gpg subkey [tor-browser-build]
|
|
| 20 | + * macOS
|
|
| 21 | + * Bug 41883: Fix sha256sum definition in projects/hfsplus-tools/config [tor-browser-build]
|
|
| 22 | + |
|
| 1 | 23 | Tor Browser 15.0.23 - September 15 2026
|
| 2 | 24 | * All Platforms
|
| 3 | 25 | * Updated NoScript to 13.6.33.1984
|
| ... | ... | @@ -114,15 +114,15 @@ input_files: |
| 114 | 114 | - filename: dmg-root
|
| 115 | 115 | enable: '[% ! c("var/android") %]'
|
| 116 | 116 | - name: fenix-nightly-apk
|
| 117 | - URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/09/2026-09-13-21-24-39-fenix-158.0a1-android-arm64-v8a/fenix-158.0a1.multi.android-arm64-v8a.apk
|
|
| 117 | + URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/09/2026-09-28-09-23-19-fenix-159.0a1-android-arm64-v8a/fenix-159.0a1.multi.android-arm64-v8a.apk
|
|
| 118 | 118 | enable: '[% c("var/android") %]'
|
| 119 | - sha256sum: fdb4e2eceee55a0410f6ec1cf9fee0487b6fc44abe5f00ccde4a4def1ceb5bbc
|
|
| 120 | - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.33.1984.xpi
|
|
| 119 | + sha256sum: 98d417769ab6c8d455cd64b9bfdc55cb8948e875e8e52895eeab33c582f05c1f
|
|
| 120 | + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.35.1984.xpi
|
|
| 121 | 121 | name: noscript
|
| 122 | - sha256sum: 1e4e7a1a45b2b2826688c072a35d366610312237778835ce07c8b5179a4cb7e4
|
|
| 123 | - - URL: https://addons.mozilla.org/firefox/downloads/file/4981431/ublock_origin-1.74.0.xpi
|
|
| 122 | + sha256sum: c698283f4cfebc3d154cfbb45776c2aaee061e895a40d0dc419ac4004819f1b9
|
|
| 123 | + - URL: https://addons.mozilla.org/firefox/downloads/file/5034826/ublock_origin-1.75.0.xpi
|
|
| 124 | 124 | name: ublock-origin
|
| 125 | - sha256sum: 175756d74468c9ba45863f7fc333d3be670f82d5b066314e915814dd547d1652
|
|
| 125 | + sha256sum: 5b74415860456370644bd80f16125e865b0e6c356bb5dfcfb84069967eaa5287
|
|
| 126 | 126 | enable: '[% c("var/mullvad-browser") %]'
|
| 127 | 127 | - URL: https://cdn.mullvad.net/browser-extension/0.9.10/mullvad-browser-extension-0.9.10.xpi
|
| 128 | 128 | name: mullvad-extension
|
| ... | ... | @@ -18,12 +18,12 @@ container: |
| 18 | 18 | use_container: 1
|
| 19 | 19 | |
| 20 | 20 | var:
|
| 21 | - firefox_platform_version: '140.16.0'
|
|
| 21 | + firefox_platform_version: '140.17.0'
|
|
| 22 | 22 | firefox_version: '[% c("var/firefox_platform_version") %]esr'
|
| 23 | 23 | browser_series: '15.0'
|
| 24 | 24 | browser_rebase: 1
|
| 25 | 25 | browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
|
| 26 | - browser_build: 2
|
|
| 26 | + browser_build: 4
|
|
| 27 | 27 | copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]'
|
| 28 | 28 | nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'
|
| 29 | 29 | gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
|
| ... | ... | @@ -116,6 +116,7 @@ targets: |
| 116 | 116 | updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/'
|
| 117 | 117 | mar_id_prefix: 'mullvadbrowser-mullvad'
|
| 118 | 118 | nightly_updates_publish_dir_prefix: mullvadbrowser-
|
| 119 | + browser_build: 2
|
|
| 119 | 120 | |
| 120 | 121 | linux-x86_64:
|
| 121 | 122 | var:
|
| ... | ... | @@ -20,12 +20,12 @@ container: |
| 20 | 20 | build_apk: 1
|
| 21 | 21 | |
| 22 | 22 | var:
|
| 23 | - firefox_platform_version: '140.16.0'
|
|
| 23 | + firefox_platform_version: '140.17.0'
|
|
| 24 | 24 | geckoview_version: '[% c("var/firefox_platform_version") %]esr'
|
| 25 | 25 | browser_series: '15.0'
|
| 26 | 26 | browser_rebase: 1
|
| 27 | 27 | browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]'
|
| 28 | - browser_build: 2
|
|
| 28 | + browser_build: 4
|
|
| 29 | 29 | gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
|
| 30 | 30 | git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]'
|
| 31 | 31 | deps:
|
| 1 | 1 | # vim: filetype=yaml sw=2
|
| 2 | 2 | filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
|
| 3 | -version: 0.4.9.12
|
|
| 3 | +version: 0.4.9.13
|
|
| 4 | 4 | git_hash: 'tor-[% c("version") %]'
|
| 5 | 5 | git_url: https://gitlab.torproject.org/tpo/core/tor.git
|
| 6 | 6 | git_submodule: 1
|
| ... | ... | @@ -12,13 +12,13 @@ compress_tar: 'gz' |
| 12 | 12 | steps:
|
| 13 | 13 | base-browser:
|
| 14 | 14 | base-browser: '[% INCLUDE build %]'
|
| 15 | - git_hash: 42c240fa39334d44b52a082ece7ea992ce4ff03c
|
|
| 15 | + git_hash: c62d7c244409d6d6ca37cd7f4819260ffc3cf60b
|
|
| 16 | 16 | targets:
|
| 17 | 17 | nightly:
|
| 18 | 18 | git_hash: 'base-browser'
|
| 19 | 19 | tor-browser:
|
| 20 | 20 | tor-browser: '[% INCLUDE build %]'
|
| 21 | - git_hash: b43f67013b014d128543404f8e159dd51250da8f
|
|
| 21 | + git_hash: 8cae94965791def3a7e63a1acb9e998ce8133de9
|
|
| 22 | 22 | targets:
|
| 23 | 23 | nightly:
|
| 24 | 24 | git_hash: 'tor-browser'
|
| ... | ... | @@ -32,7 +32,7 @@ steps: |
| 32 | 32 | fenix: '[% INCLUDE build %]'
|
| 33 | 33 | # We need to bump the commit before releasing but just pointing to a branch
|
| 34 | 34 | # might cause too much rebuidling of the Firefox part.
|
| 35 | - git_hash: 086dbaa310f8aa50530f28d68c937d378208a1ad
|
|
| 35 | + git_hash: 61d9e9dc2c94ca0e071ce3be0b018c5a5958101f
|
|
| 36 | 36 | compress_tar: 'zst'
|
| 37 | 37 | targets:
|
| 38 | 38 | nightly:
|
| ... | ... | @@ -74,11 +74,11 @@ buildconf: |
| 74 | 74 | git_signtag_opt: '-s'
|
| 75 | 75 | |
| 76 | 76 | var:
|
| 77 | - torbrowser_version: '15.0.23'
|
|
| 77 | + torbrowser_version: '15.0.24'
|
|
| 78 | 78 | torbrowser_build: 'build1'
|
| 79 | 79 | # This should be the date of when the build is started. For the build
|
| 80 | 80 | # to be reproducible, browser_release_date should always be in the past.
|
| 81 | - browser_release_date: '2026/09/14 10:00:00'
|
|
| 81 | + browser_release_date: '2026/09/28 08:30:00'
|
|
| 82 | 82 | browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]'
|
| 83 | 83 | browser_default_channel: release
|
| 84 | 84 | browser_platforms:
|
| ... | ... | @@ -128,10 +128,10 @@ var: |
| 128 | 128 | updater_enabled: 1
|
| 129 | 129 | build_mar: 1
|
| 130 | 130 | torbrowser_incremental_from:
|
| 131 | + - 15.0.23
|
|
| 131 | 132 | - '[% IF c("var/tor-browser") %]15.0.22[% END %]'
|
| 132 | 133 | - 15.0.21
|
| 133 | 134 | - 15.0.20
|
| 134 | - - '[% IF c("var/mullvad-browser") %]15.0.19[% END %]'
|
|
| 135 | 135 | mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'
|
| 136 | 136 | |
| 137 | 137 | # By default, we sort the list of installed packages. This allows sharing
|