richard pushed to branch maint-12.0 at The Tor Project / Applications / tor-browser-build

Commits: a4c88083 by Richard Pospesel at 2023-05-31T18:32:49+00:00 Bug 40859: Prepare stable release 12.0.7

- - - - -

9 changed files:

- projects/browser/Bundle-Data/Docs/ChangeLog.txt - projects/browser/allowed_addons.json - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/manual/config - projects/openssl/config - projects/translation/config - rbm.conf

Changes:

===================================== projects/browser/Bundle-Data/Docs/ChangeLog.txt ===================================== @@ -1,3 +1,52 @@ +Tor Browser 12.0.7 - May 31 2023 + * All Platforms + * Updated Translations + * Updated NoScript to 11.4.22 + * Updated OpenSSL to 1.1.1u + * Bug 41764: TTP-02-004 OOS: No user-activation required to download files (Low) [tor-browser] + * Bug 41794: Rebase Tor Browser and Base Browser stable to 102.12esr [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 102.12esr + * Bug 41777: Internally shippped manual does not adapt to RTL languages (it always align to the left) [tor-browser] + * Android + * Updated GeckoView to 102.12esr + * Bug 41805: Backport Android-specific security fixes from Firefox 114 to ESR 102.12-based Tor Browser [tor-browser] + +Tor Browser 12.5a6 - May 22 2023 + * All Platforms + * Updated Translations + * Updated Go to 11.9.9 + * Bug 40860: Improve the transition from the old fontconfig file to the new one [tor-browser-build] + * Bug 41728: Pin bridges.torproject.org domains to Let's Encrypt's root cert public key [tor-browser] + * Bug 41738: Replace the patch to disable live reload with its preference [tor-browser] + * Bug 41757: Rebase Tor Browser Alpha to 102.11.0esr [tor-browser] + * Bug 41763: TTP-02-003 WP1: Data URI allows JS execution despite safest security level (Low) [tor-browser] + * Bug 41764: TTP-02-004 OOS: No user-activation required to download files (Low) [tor-browser] + * Bug 41775: Avoid re-defining some macros in nsUpdateDriver.cpp [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 102.11esr + * Bug 41607: Update "New Circuit" icon [tor-browser] + * Bug 41736: Customize the default CustomizableUI toolbar using CustomizableUI.jsm [tor-browser] + * Bug 41770: Keyboard navigation broken leaving the toolbar tor circuit button [tor-browser] + * Bug 41777: Internally shippped manual does not adapt to RTL languages (it always align to the left) [tor-browser] + * Windows + Linux + * Bug 41654: UpdateInfo jumped into Data [tor-browser] + * Linux + * Bug 41732: implement linux font whitelist as defense-in-depth [tor-browser] + * Bug 41776: System fonts are temporarily leaked on Linux after the browser is updated from 12.5a4 or earlier [tor-browser] + * Android + * Updated GeckoView to 102.11esr + * Build System + * All Platforms + * Bug 33953: Provide a way for easily updating Go dependencies of projects [tor-browser-build] + * Bug 40673: Avoid building each go module separately [tor-browser-build] + * Bug 40818: Enable wasm target for rust compiler [tor-browser-build] + * Bug 40841: Adapt signing scripts to new signing machines [tor-browser-build] + * Bug 40849: Move Go dependencies to the projects dependent on them, not as a standalone projects [tor-browser-build] + * Bug 40856: Unblock nightly builds [tor-browser-build] + * Windows + * Bug 40846: Temporarily disable Windows signing [tor-browser-build] + Tor Browser 12.0.6 - May 09 2023 * All Platforms * Updated Translations

===================================== projects/browser/allowed_addons.json ===================================== @@ -17,7 +17,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/34/9734/13299734/13299734.png..." } ], - "average_daily_users": 976883, + "average_daily_users": 973594, "categories": { "android": [ "experimental", @@ -221,10 +221,10 @@ "category": "recommended" }, "ratings": { - "average": 4.5607, - "bayesian_average": 4.559531365183289, - "count": 4987, - "text_count": 1578 + "average": 4.5606, + "bayesian_average": 4.559432842250225, + "count": 5014, + "text_count": 1582 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/reviews/", "requires_payment": false, @@ -321,7 +321,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/versions/", - "weekly_downloads": 24385 + "weekly_downloads": 24071 }, "notes": null }, @@ -337,7 +337,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/56/7656/6937656/6937656.png?m..." } ], - "average_daily_users": 258784, + "average_daily_users": 254357, "categories": { "android": [ "security-privacy" @@ -553,10 +553,10 @@ "category": "recommended" }, "ratings": { - "average": 4.8166, - "bayesian_average": 4.811948101281903, - "count": 1336, - "text_count": 237 + "average": 4.8142, + "bayesian_average": 4.809547541054201, + "count": 1340, + "text_count": 238 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/reviews/", "requires_payment": false, @@ -641,7 +641,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions/", - "weekly_downloads": 3623 + "weekly_downloads": 3420 }, "notes": null }, @@ -657,7 +657,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/73/4073/5474073/5474073.png?m..." } ], - "average_daily_users": 1128787, + "average_daily_users": 1107746, "categories": { "android": [ "security-privacy" @@ -669,7 +669,7 @@ "contributions_url": "https://paypal.me/SupportEFF?utm_content=product-page-contribute&utm_med...", "created": "2014-05-01T18:23:16Z", "current_version": { - "id": 5520250, + "id": 5564707, "compatibility": { "firefox": { "min": "60.0", @@ -680,7 +680,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-badger17/versions/...", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-badger17/versions/...", "is_strict_compatibility_enabled": false, "license": { "id": 6, @@ -691,22 +691,22 @@ "url": "http://www.gnu.org/licenses/gpl-3.0.html" }, "release_notes": { - "en-US": "<ul><li>Added a note to the popup to explain that if you would like to log into websites with your Google account, you need to fully allow <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/361ac6552f690217a6c9f06..." rel="nofollow">accounts.google.com</a></li><li>Added dark theme support to widget replacement placeholders</li><li>Fixed blocking service worker-initiated requests in Chrome</li><li>Fixed various site breakages</li><li>Added Hindi translations</li><li>Improved Traditional Chinese translations</li></ul>" + "en-US": "<ul><li>Expanded protection for "cookieblocked" (slider set to yellow) domains. These domains are allowed to load without access to cookies, as a compromise to avoid breaking websites. However, sometimes the same domain is used to serve both unobjectionable content as well as obnoxious fingerprinters that do not need cookies to track your browsing. Privacy Badger will now fully block these fingerprinters.</li><li>Disabled Google's Topics API by default. The Topics API replaces Federated Learning of Cohorts (FLoC).</li><li>You can now see where Privacy Badger observed tracking by a given domain by clicking on the domain name in the list of tracking domains on the options page</li><li>Fixed various site breakages</li><li>Added Vietnamese translations</li><li>Improved translations (Finnish, French, Hebrew, Persian, European Portuguese, Russian, Spanish)</li></ul>" }, - "reviewed": "2023-02-02T18:47:37Z", - "version": "2023.1.31", + "reviewed": "2023-05-16T10:58:52Z", + "version": "2023.5.10", "files": [ { - "id": 4064595, - "created": "2023-01-31T16:05:01Z", - "hash": "sha256:0082d8ffe7b25f370a313d9b899b0c1ba1669b21b3a11791fe5ecf031aeb6a6c", + "id": 4109050, + "created": "2023-05-10T19:28:15Z", + "hash": "sha256:8ff7650d1ce133894293d1a3e268bb24d300e77a1c25488ed17846e71d8b33e8", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 1834581, + "size": 1975567, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4064595/privacy_badger17-2...", + "url": "https://addons.mozilla.org/firefox/downloads/file/4109050/privacy_badger17-2...", "permissions": [ "tabs", "http://*/*", @@ -1134,7 +1134,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-02-02T18:47:37Z", + "last_updated": "2023-05-16T10:58:52Z", "name": { "en-US": "Privacy Badger" }, @@ -1180,10 +1180,10 @@ "category": "recommended" }, "ratings": { - "average": 4.8012, - "bayesian_average": 4.79841359051625, - "count": 2223, - "text_count": 426 + "average": 4.8019, + "bayesian_average": 4.7991176799749775, + "count": 2236, + "text_count": 428 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/reviews/", "requires_payment": false, @@ -1207,7 +1207,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/versions/", - "weekly_downloads": 18076 + "weekly_downloads": 16871 }, "notes": null }, @@ -1223,7 +1223,7 @@ "picture_url": null } ], - "average_daily_users": 6319454, + "average_daily_users": 6290605, "categories": { "android": [ "security-privacy" @@ -1388,7 +1388,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-05-08T12:35:48Z", + "last_updated": "2023-05-30T13:20:46Z", "name": { "ar": "uBlock Origin", "bg": "uBlock Origin", @@ -1533,10 +1533,10 @@ "category": "recommended" }, "ratings": { - "average": 4.7808, - "bayesian_average": 4.780398687268275, - "count": 15366, - "text_count": 3994 + "average": 4.7807, + "bayesian_average": 4.78029998149622, + "count": 15480, + "text_count": 4023 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/reviews/", "requires_payment": false, @@ -1598,7 +1598,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions/", - "weekly_downloads": 131497 + "weekly_downloads": 129742 }, "notes": null }, @@ -1614,7 +1614,7 @@ "picture_url": null } ], - "average_daily_users": 167016, + "average_daily_users": 168553, "categories": { "android": [ "photos-media" @@ -1713,10 +1713,10 @@ "category": "recommended" }, "ratings": { - "average": 4.4874, - "bayesian_average": 4.4822747330216925, - "count": 1114, - "text_count": 416 + "average": 4.4853, + "bayesian_average": 4.4801851669083215, + "count": 1119, + "text_count": 419 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/rev...", "requires_payment": false, @@ -1738,7 +1738,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/ver...", - "weekly_downloads": 411 + "weekly_downloads": 369 }, "notes": null }, @@ -1754,7 +1754,7 @@ "picture_url": null } ], - "average_daily_users": 88255, + "average_daily_users": 87582, "categories": { "android": [ "experimental", @@ -1867,9 +1867,9 @@ ], "promoted": null, "ratings": { - "average": 4.3684, - "bayesian_average": 4.354580970236878, - "count": 399, + "average": 4.37, + "bayesian_average": 4.356186612333998, + "count": 400, "text_count": 112 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/reviews/", @@ -1892,7 +1892,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions/", - "weekly_downloads": 900 + "weekly_downloads": 1654 }, "notes": null }, @@ -1908,7 +1908,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/64/9064/12929064/12929064.png..." } ], - "average_daily_users": 259842, + "average_daily_users": 259693, "categories": { "android": [ "photos-media", @@ -2127,10 +2127,10 @@ "category": "recommended" }, "ratings": { - "average": 4.6521, - "bayesian_average": 4.647356516825427, - "count": 1256, - "text_count": 241 + "average": 4.6514, + "bayesian_average": 4.646681076783187, + "count": 1268, + "text_count": 244 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/reviews/", "requires_payment": false, @@ -2151,7 +2151,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/versions/", - "weekly_downloads": 4089 + "weekly_downloads": 4107 }, "notes": null }, @@ -2174,7 +2174,7 @@ "picture_url": null } ], - "average_daily_users": 110772, + "average_daily_users": 111400, "categories": { "android": [ "other" @@ -2457,10 +2457,10 @@ "category": "recommended" }, "ratings": { - "average": 4.443, - "bayesian_average": 4.438340772354168, - "count": 1210, - "text_count": 322 + "average": 4.4415, + "bayesian_average": 4.436837247090715, + "count": 1214, + "text_count": 323 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/reviews/", "requires_payment": false, @@ -2480,7 +2480,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/versions/", - "weekly_downloads": 40 + "weekly_downloads": 50 }, "notes": null }, @@ -2496,7 +2496,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/43/0143/143/143.png?modified=..." } ], - "average_daily_users": 313446, + "average_daily_users": 307454, "categories": { "android": [ "performance", @@ -2510,7 +2510,7 @@ "contributions_url": "https://www.paypal.com/donate/?hosted_button_id=9ERKTU5MBH4EW&utm_conten...", "created": "2005-05-13T10:51:32Z", "current_version": { - "id": 5546627, + "id": 5566736, "compatibility": { "firefox": { "min": "59.0", @@ -2521,7 +2521,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/noscript/versions/5546627", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/noscript/versions/5566736", "is_strict_compatibility_enabled": false, "license": { "id": 13, @@ -2532,22 +2532,22 @@ "url": "http://www.gnu.org/licenses/gpl-2.0.html" }, "release_notes": { - "en-US": "v 11.4.21\n============================================================\nx Fixed mislabeled Tor Browser settings override option\nx [L10n] Updated mk" + "en-US": "v 11.4.22\n============================================================\nx [L10n] Updated uk\nx Consistently apply DEFAULT policy to top-level data: URLs" }, - "reviewed": "2023-04-04T12:01:03Z", - "version": "11.4.21", + "reviewed": "2023-05-18T09:07:59Z", + "version": "11.4.22", "files": [ { - "id": 4090970, - "created": "2023-03-30T09:39:24Z", - "hash": "sha256:0fd3b66a2780d03a5b3cd460216105f3df2b27c6d3a552c1769c5de48c9e2338", + "id": 4111078, + "created": "2023-05-15T08:32:54Z", + "hash": "sha256:46a84c85df4c6be11905388ad2b66aeb5a010ed615484112c8c1710ad13bc36e", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 951542, + "size": 948900, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4090970/noscript-11.4.21.x...", + "url": "https://addons.mozilla.org/firefox/downloads/file/4111078/noscript-11.4.22.x...", "permissions": [ "contextMenus", "storage", @@ -2614,7 +2614,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-04-04T12:01:03Z", + "last_updated": "2023-05-21T21:36:00Z", "name": { "de": "NoScript", "el": "NoScript", @@ -2686,10 +2686,10 @@ "category": "recommended" }, "ratings": { - "average": 4.4106, - "bayesian_average": 4.407881097196251, - "count": 2058, - "text_count": 799 + "average": 4.4061, + "bayesian_average": 4.403390290765897, + "count": 2071, + "text_count": 804 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/reviews/", "requires_payment": false, @@ -2733,7 +2733,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/", - "weekly_downloads": 7698 + "weekly_downloads": 7195 }, "notes": null }, @@ -2749,7 +2749,7 @@ "picture_url": null } ], - "average_daily_users": 150188, + "average_daily_users": 150677, "categories": { "android": [ "performance", @@ -2864,10 +2864,10 @@ "category": "recommended" }, "ratings": { - "average": 3.9071, - "bayesian_average": 3.902833394829747, - "count": 1130, - "text_count": 402 + "average": 3.9026, + "bayesian_average": 3.898323122758472, + "count": 1129, + "text_count": 401 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/revie...", "requires_payment": false, @@ -2886,7 +2886,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/versi...", - "weekly_downloads": 2266 + "weekly_downloads": 1722 }, "notes": null }

===================================== projects/browser/config ===================================== @@ -100,9 +100,9 @@ input_files: enable: '[% ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4090970/noscript-11.4.21.x... + - URL: https://addons.mozilla.org/firefox/downloads/file/4111078/noscript-11.4.22.x... name: noscript - sha256sum: 0fd3b66a2780d03a5b3cd460216105f3df2b27c6d3a552c1769c5de48c9e2338 + sha256sum: 46a84c85df4c6be11905388ad2b66aeb5a010ed615484112c8c1710ad13bc36e - filename: 'gtk3-settings.ini' enable: '[% c("var/linux") %]' - project: hfsplus-tools

===================================== projects/firefox/config ===================================== @@ -12,7 +12,7 @@ container: use_container: 1

var: - firefox_platform_version: 102.11.0 + firefox_platform_version: 102.12.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_branch: '12.0-1' browser_build: 1

===================================== projects/geckoview/config ===================================== @@ -12,7 +12,7 @@ container: use_container: 1

var: - geckoview_version: 102.11.0esr + geckoview_version: 102.12.0esr torbrowser_branch: 12.0-1 browser_build: 1 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'

===================================== projects/manual/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 # To update, see doc/how-to-update-the-manual.txt # Remember to update also the package's hash, with the version! -version: 74065 +version: 79869 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 @@ -17,8 +17,8 @@ var:

input_files: - project: container-image - - URL: 'https://people.torproject.org/~pierov/tbb_files/manual_%5B% c("version") %].zip' + - URL: 'https://people.torproject.org/~richard/tbb_files/manual_%5B% c("version") %].zip' name: manual - sha256sum: 788c2dc2bfacbc6961ce443c5639706cc23fbb7b7730ed7f71a26396511305be + sha256sum: ee4c6e4ce4998736ae44dc3e6f92875a481b9e03860517764ea9af6c2bba24e0 - filename: packagemanual.py name: package_script

===================================== projects/openssl/config ===================================== @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 1.1.1t +version: 1.1.1u filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' container: use_container: 1 @@ -31,4 +31,4 @@ input_files: - name: '[% c("var/compiler") %]' project: '[% c("var/compiler") %]' - URL: 'https://www.openssl.org/source/openssl-%5B% c("version") %].tar.gz' - sha256sum: 8dee9b24bdb1dcbf0c3d1e9b02fb8f6bf22165e807f45adeb7c9677536859d3b + sha256sum: e2f8d84b523eecd06c7be7626830370300fbcc15386bf5142d72758f6963ebc6

===================================== projects/translation/config ===================================== @@ -6,19 +6,19 @@ version: '[% c("abbrev") %]' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 97c76d5183b16b069e66feaaf10e00c1d2c7d9e0 + git_hash: 12b7ac4074f64be4d62c4a7e134244988941ca88 targets: nightly: git_hash: 'base-browser' base-browser-fluent: base-browser-fluent: '[% INCLUDE build %]' - git_hash: d473c4dd005325d1be40bae0f816974e195a972d + git_hash: 7a5fa6b283ac0a983250dfb3870fb1ed9d9ec1ad targets: nightly: git_hash: 'basebrowser-newidentityftl' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 267f3c208a323df636ed11e7143164956d3d9d9b + git_hash: 96ce5976d1c1752ee1d920df58e1755464b9d575 targets: nightly: git_hash: 'tor-browser' @@ -26,7 +26,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 0deec2a78dea0013e8c4eaec1d40ef5aac4e43b0 + git_hash: 12c25e54e3a80c22c3c5fd6ccbc00effd37fc538 targets: nightly: git_hash: 'fenix-torbrowserstringsxml'

===================================== rbm.conf ===================================== @@ -71,13 +71,14 @@ buildconf: git_signtag_opt: '-s'

var: - torbrowser_version: '12.0.6' + torbrowser_version: '12.0.7' torbrowser_build: 'build1' torbrowser_incremental_from: # Build incrementals also from 12.0.4 until we have a new certificate for # Windows installers. - 12.0.4 - 12.0.5 + - 12.0.6 build_mar: 1 # By default, we sort the list of installed packages. This allows sharing # containers with identical list of packages, even if they are not listed

View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/a4...