Hi everyone,

Tor Browser 13.5a8 has now been published for all platforms. For details please see our blog post: - https://blog.torproject.org/new-alpha-release-tor-browser-135a8/

Changelog:

Tor Browser 13.5a8 - May 16 2024

• All Platforms
  • Bug 42290: "DuckDuckGoOnion" is a weird naming format for onion search engines [tor-browser]
  • Bug 42549: Remove brand.dtd [tor-browser]
  • Bug 42560: Rebase Tor Browser alpha onto 115.11.0esr [tor-browser]
  • Bug 42565: Backport Android and desktop security fixes from Firefox 126 [tor-browser]
  • Bug 42583: Modify moz-support-link [tor-browser]
  • Bug 41137: Build gcc-cross and tor-expert-bundle for linux-aarch64 [tor-browser-build]
  • Bug 241: Move network.proxy.failover_direct=false pref to base-browser [mullvad-browser]
• Windows + macOS + Linux
  • Updated Firefox to 115.11.0esr
  • Bug 41621: Tweak about:torconnect styling [tor-browser]
  • Bug 41930: intl.accept_languages gets into a stuck modifed state [tor-browser]
  • Bug 42391: IndexDB's private directory not removed on browser shutdown in global private browsing mode [tor-browser]
  • Bug 42405: Fix betterboxing + findbar horizontal bounce if the scrollbar is not an overlay [tor-browser]
  • Bug 42541: Circuit Display does not work when using Conjure pluggable transport [tor-browser]
  • Bug 42542: Quirks when onion authentication prompt is shared between two tabs [tor-browser]
  • Bug 42557: Fix regression in Onion Services authentication prompt focus [tor-browser]
  • Bug 42573: Tweak language notification to avoid formatValue [tor-browser]
  • Bug 42574: Exempt pdf.js from letterboxing [tor-browser]
• Windows + macOS
  • Bug 41405: Win ≤8.1 and macOS ≤10.14 not supported in ESR 128 [tor-browser]
  • Bug 42347: Add a banner warning users about the upcoming EOL for Win ≤8.1 and macOS ≤10.14 [tor-browser]
• Linux
  • Bug 41136: Include *.deb in the list of files to gpg sign [tor-browser-build]
• Android
  • Updated GeckoView to 115.11.0esr
  • Bug 42317: Update "Security Settings" menu item [tor-browser]
  • Bug 42409: TTP-03-011 WP3: Potential DoS due to Deep Link abuse [tor-browser]
  • Bug 42552: TBA: formatting APIs are en-US only [tor-browser]
  • Bug 42562: Restrict the accepted languages to the ones whose localization is available [tor-browser]
  • Bug 42566: Remove 'Enable beta connection features' menu item in stable release channel [tor-browser]
  • Bug 42567: Remove 'Enable beta connection features' toggle [tor-browser]
  • Bug 42571: The new bootstrap on Android breaks if the browser goes in background [tor-browser]
  • Bug 42576: Backport Bug 1885171: use the private keyboard for prompts on Android [tor-browser]
  • Bug 42578: Reject Android "open in Tor Browser" intent [tor-browser]
  • Bug 42582: Accepted languages should use id and he on Android [tor-browser]
  • Bug 41143: Enable multi-locales also on GeckoView [tor-browser-build]
• Build System
  • All Platforms
    • Updated Go to 1.21.10
    • Bug 41001: Create Release Prep MR generating script [tor-browser-build]
    • Bug 41148: Update projects/browser/Bundle-Data/Docs/Licenses/NoScript.txt [tor-browser-build]
    • Bug 40076: Correctly refresh file when computing input_files_id and a file is set as refresh_input [rbm]
  • Android
    • Bug 42568: Remove legacy tor dependencies from firefox-android [tor-browser]

best, -richard