Bug 40668: Prepare alpha release 12.0a5

projects/android-components/config

 # vim: filetype=yaml sw=2
 version: '[% c("abbrev") %]'
 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz'
-git_hash: '[% project %]-[% c("var/android_components_version") %]-[% c("var/torbrowser_branch") %]-1-build3'
+git_hash: '[% project %]-[% c("var/android_components_version") %]-[% c("var/torbrowser_branch") %]-1-build5'
 git_url: https://gitlab.torproject.org/tpo/applications/android-components.git
 tag_gpg_id: 1
 gpg_keyring: torbutton.gpg

projects/browser/Bundle-Data/Docs/ChangeLog.txt

+Tor Browser 12.0a5 - November 30 2022
+ * All Platforms
+   * Update Translations
+   * Update OpenSSL to 1.1.1s
+   * Update NoScript to 11.4.13
+   * Update tor to 0.4.7.11
+   * Update zlib to 1.2.13
+   * Bug 17228: Consideration for disabling/trimming referrers within TBB [tor-browser]
+   * Bug 27258: font whitelist means we don't have to set gfx.downloadable_fonts.fallback_delay [tor-browser]
+   * Bug 40183: Consider disabling TLS ciphersuites containing SHA-1 [tor-browser]
+   * Bug 40622: Update obfs4proxy to 0.0.14 in Tor Browser [tor-browser-build]
+   * Bug 40674: Add Secondary Snowflake Bridge [tor-browser-build]
+   * Bug 40783: Review 000-tor-browser.js and 001-base-profile.js for 102 [tor-browser]
+   * Bug 41406: Do not define `--without-wasm-sandboxed-libraries` if `WASI_SYSROOT` is defined [tor-browser]
+   * Bug 41420: Remove brand.dtd customization on nightly [tor-browser]
+   * Bug 41457: Remove more Mozilla permissions [tor-browser]
+   * Bug 41460: Migrate new identity and security level preferences in 11.5.8 [tor-browser]
+   * Bug 41473: Add support for Albanian (sq) [tor-browser]
+ * Windows + macOS + Linux
+   * Update Firefox to 102.5.0esr
+   * Bug 31064: Letterboxing is enabled in priviledged contexts too [tor-browser]
+   * Bug 31821: reapply window.open() clamping [tor-browser]
+   * Bug 32411: Consider adding about:tor and others to the list of pages that do not need letterboxing [tor-browser]
+   * Bug 40081: Letterboxing since 32220 affected by layout.css.devPixelsPerPx [tor-browser]
+   * Bug 40767: 1px white border visible on fullscreen video playback [tor-browser]
+   * Bug 41293: Incomplete branding in German with 12.0a2 [tor-browser]
+   * Bug 41378: Inform users when Tor Browser sets their language automatically [tor-browser]
+   * Bug 41409: Circuit display is broken on Tails [tor-browser]
+   * Bug 41410: Opening and closing HTTPS-Only settings make the identity panel shrink [tor-browser]
+   * Bug 41412: New Identity shows "Tor Browser" instead of "Restart Tor Browser" in unstranslated locales [tor-browser]
+   * Bug 41417: Prompt users to restart after changing language [tor-browser]
+   * Bug 41429: TorConnect and TorSettings are initialized twice [tor-browser]
+   * Bug 41433: Should letterboxing take in account optional components' heights? [tor-browser]
+   * Bug 41434: Letterboxing bypass through secondary tab (popup/popunder...) [tor-browser]
+   * Bug 41436: The new tor-launcher handles arrays in the wrong way [tor-browser]
+   * Bug 41437: Use the new media query for dark theme for the "Connected" pill in bridges [tor-browser]
+   * Bug 41449: Onion authentication's learn more should link to the offline manual [tor-browser]
+   * Bug 41451: Still using requestedLocales in torbutton [tor-browser]
+   * Bug 41455: Tor Browser dev build cannot launch tor [tor-browser]
+   * Bug 41458: Prevent `mach package-multi-locale` from actually creating a package [tor-browser]
+   * Bug 41462: Add anchors to bridge-moji and onion authentication entries [tor-browser]
+   * Bug 41498: The Help panel is empty in 12.0a4 [tor-browser]
+ * Windows
+   * Bug 41426: base-browser nightly fails to build for windows-i686 [tor-browser]
+ * macOS
+   * Bug 23451: Adapt font whitelist to changes on macOS (zh locales) [tor-browser]
+   * Bug 40687: macOS nightly builds with packaged locales fail [tor-browser-build]
+ * Android
+   * Update GeckoView to 102.5.0esr
+   * Bug 40014: Check which of our mobile prefs and configuration changes are still valid for GeckoView [tor-browser]
+   * Bug 41471: Update targetSdkVersion to 31 [tor-browser]
+   * Bug 41481: Tor Browser 11.5.9 for Android crashes on launch on Android 12+ after targetSdkVersion update [tor-browser]
+ * Build System
+   * All Platforms
+     * Update Go to 1.19.3
+     * Bug 40675: Update tb_builders list in set-config [tor-browser-build]
+     * Bug 40667: Update Node.js to 12.22.12 [tor-browser-build]
+     * Bug 40690: Revert fix for zlib build break [tor-browser-build]
+     * Bug 41446: Multi-lingual alpha bundles break make fetch [tor-browser]
+   * Windows + macOS + Linux
+     * Bug 40503: Update Release Prep issue template with base-browser and privacy browser changes [tor-browser-build]
+     * Bug 40641: Fetch Firefox locales from l10n-central [tor-browser-build]
+     * Bug 40685: Remove targets/nightly/var/mar_locales from rbm.conf [tor-browser-build]
+     * Bug 40686: Add a temporary project to fetch Fluent tranlations for base-browser [tor-browser-build]
+     * Bug 40691: Update firefox config to point to base-browser branch rather than a particular tag in nightly [tor-browser-build]
+     * Bug 40699: Fix input_files in projects/firefox-l10n/config [tor-browser-build]
+   * Windows
+     * Bug 40666: Fix compiler depedencies for Firefox on Windows [tor-browser-build]
+   * macOS
+     * Bug 40067: Rename "OS X" to "macOS" [tor-browser-build]
+     * Bug 40439: Create universal x86-64/arm64 mac builds [tor-browser-build]
+
+Tor Browser 11.5.10 - November 28 2022
+ * Android
+   * Update NoScript to 11.4.13
+   * Bug 41481: Tor Browser 11.5.9 for Android crashes on launch on Android 12+ after targetSdkVersion update [tor-browser]
+
+Tor Browser 11.5.9 - November 22 2022
+ * Android
+   * Bug 41471: Update targetSdkVersion to 31 [tor-browser]
+
+Tor Browser 11.5.8 - November 18 2022
+ * All Platforms
+   * Update Translations
+   * Update OpenSSL to 1.1.1s
+   * Update NoScript to 11.4.12
+   * Update tor to 0.4.7.11
+   * Update zlib to 1.2.13
+   * Bug 40622: Update obfs4proxy to 0.0.14 in Tor Browser [tor-browser-build]
+  * Windows + macOS + Linux
+   * Bug 31064: Letterboxing is enabled in priviledged contexts too [tor-browser]
+   * Bug 32411: Consider adding about:tor and others to the list of pages that do not need letterboxing [tor-browser]
+   * Bug 41105: Tor Browser Does Not Clear CORS Preflight Cache despite creating a “New Identity” [tor-browser]
+   * Bug 41413: Backup intl.locale.requested in 11.5.x [tor-browser]
+   * Bug 41434: Letterboxing bypass through secondary tab (popup/popunder...) [tor-browser]
+   * Bug 41456: Backport ESR 102.5 security fixes to 91.13-based Tor Browser [tor-browser]
+   * Bug 41460: Migrate new identity and security level preferences in 11.5.8 [tor-browser]
+   * Bug 41463: Backport fix for CVE-2022-43680 [tor-browser]
+ * Android
+   * Update GeckoView to 102.5.0esr
+   * Bug 41461: Backport Android-specific 107-rr security fixes to 102.5-esr based Geckoview [tor-browser]
+ * Build System
+   * All Platforms
+     * Update Go to 1.18.8
+     * Bug 40658: Create an anticensorship team keyring [tor-browser-build]
+     * Bug 40690: Revert fix for zlib build break [tor-browser-build]
+
+Tor Browser 11.5.7 - November 2 2022
+ * Windows + macOS + Linux
+   * Bug 41413: Backup intl.locale.requested in 11.5.x [tor-browser]
+
 Tor Browser 12.0a4 - October 28 2022
  * All Plaforms
    * Update Translations
@@ -62,12 +173,13 @@ Tor Browser 12.0a4 - October 28 2022
    * Bug 40631: Stop bundling HTTPS Everywhere on Android [tor-browser-build]
    * Bug 41360: Backport Android-specific Firefox 106 to ESR 102.4-based Tor Browser [tor-browser]
    * Bug 41394: Implement a setting to always prefer onion sites [tor-browser]
- * Build
+ * Build System
    * All Platforms
      * Update Go to 1.19.2
      * Bug 23656: Use .mozconfig files in tor-browser repo for rbm builds [tor-browser-build]
      * Bug 28754: make testbuild-android-armv7 stalls during sha256sum step [tor-browser-build]
      * Bug 40397: Create a new build target to package tor daemon, pluggable transports and dependencies [tor-browser-build]
+     * Bug 40585: Prune the manual more [tor-browser-build]
      * Bug 40619: Make sure translations are taken from gitlab.tpo and not git.tpo [tor-browser-build]
      * Bug 40627: Add boklm to torbutton.gpg [torbrowser-build]
      * Bug 40634: Update the project/browser path in tools/changelog-format-blog-post and other files [tor-browser-build]
@@ -79,13 +191,12 @@ Tor Browser 12.0a4 - October 28 2022
      * Bug 40658: Create an anticensorship team keyring [tor-browser-build]
      * Bug 40660: Update changelog-format-blog-post script to point gitlab rather than gitolite [tor-browser-build]
      * Bug 40662: Make base-browser nightly build from tag [tor-browser-build]
+     * Bug 40663: Do not ship bookmarks in tor-browser-build anymore [tor-browser-build]
+     * Bug 40669: Remove HTTPS-Everywhere keyring [tor-browser-build]
      * Bug 40671: Update langpacks URL [tor-browser-build]
      * Bug 41308: Use the same branch for Desktop and GeckoView [tor-browser]
      * Bug 41340: Opt in to some of the NIGHTLY_BUILD features [tor-browser]
      * Bug 41343: Add -without-wam-sandboxed-libraries to mozconfig-linux-x86_64-dev for local builds [tor-browser]
-     * Bug 40585: Prune the manual more [tor-browser-build]
-     * Bug 40663: Do not ship bookmarks in tor-browser-build anymore [tor-browser-build]
-     * Bug 40669: Remove HTTPS-Everywhere keyring [tor-browser-build]
      * Bug 41357: Enable browser toolbox debugging by default for dev builds [tor-browser]
    * macOS
      * Bug 40158: Add support for macOS AArch64 [tor-browser-build]
@@ -114,7 +225,7 @@ Tor Browser 11.5.5 - October 20 2022
    * Bug 40650: Rebase geckoview-102.3.0esr-11.5-1 to ESR 102.4 [tor-browser-build]
    * Bug 41360: Backport Android-specific Firefox 106 to ESR 102.4-based Tor Browser [tor-browser]
    * Bug 41365: Amends to YEC 2022 Takeover on Android [tor-browser]
- * Build
+ * Build System
    * Windows + macOS + Linux
      * Update Go to 1.18.7
      * Bug 40464: go 1.18 fails to build on macOS [tor-browser-build]

projects/browser/config

@@ -97,9 +97,9 @@ input_files:
     enable: '[% ! c("var/android") %]'
   - filename: Bundle-Data
     enable: '[% ! c("var/android") %]'
-  - URL: https://addons.mozilla.org/firefox/downloads/file/4002416/noscript-11.4.11.xpi
+  - URL: https://addons.mozilla.org/firefox/downloads/file/4033638/noscript-11.4.13.xpi
     name: noscript
-    sha256sum: d1430ddc3f3bc3a5c403dbf39ff8c8275a2e7ecd4a2f079be39c193d462a2a0b
+    sha256sum: 078026ae894fe516ce9e61a1084d1b6dc883cd72c51027de342132141ca7f00d
   - filename: 'gtk3-settings.ini'
     enable: '[% c("var/linux") %]'
   - project: libdmg-hfsplus

projects/fenix/config

 # vim: filetype=yaml sw=2
 version: '[% c("abbrev") %]'
 filename: 'fenix-[% c("version") %]-[% c("var/build_id") %].tar.gz'
-git_hash: 'tor-browser-[% c("var/fenix_version") %]-[% c("var/torbrowser_branch") %]-1-build5'
+git_hash: 'tor-browser-[% c("var/fenix_version") %]-[% c("var/torbrowser_branch") %]-1-build6'
 git_url: https://gitlab.torproject.org/tpo/applications/fenix.git
 tag_gpg_id: 1
 gpg_keyring: torbutton.gpg

projects/firefox/config

@@ -10,10 +10,10 @@ container:
   use_container: 1
 
 var:
-  firefox_platform_version: 102.4.0
+  firefox_platform_version: 102.5.0
   firefox_version: '[% c("var/firefox_platform_version") %]esr'
-  browser_branch: '12.0-2'
-  browser_build: 1
+  browser_branch: '12.0-1'
+  browser_build: 4
   branding_directory: 'browser/branding/alpha'
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   nightly_updates_osname: '[% c("var/osname") %]'

projects/geckoview/config

 # vim: filetype=yaml sw=2
 version: '[% c("abbrev") %]'
 filename: 'geckoview-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz'
-git_hash: 'tor-browser-[% c("var/geckoview_version") %]-[% c("var/torbrowser_branch") %]-2-build1'
+git_hash: 'tor-browser-[% c("var/geckoview_version") %]-[% c("var/torbrowser_branch") %]-1-build4'
 tag_gpg_id: 1
 git_url: https://gitlab.torproject.org/tpo/applications/tor-browser.git
 git_submodule: 1
@@ -10,7 +10,7 @@ container:
   use_container: 1
 
 var:
-  geckoview_version: 102.4.0esr
+  geckoview_version: 102.5.0esr
   torbrowser_branch: 12.0
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   deps:

projects/go/config

 # vim: filetype=yaml sw=2
-version: 1.19.2
+version: 1.19.3
 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz'
 container:
   use_container: 1
@@ -121,7 +121,7 @@ input_files:
     enable: '[% ! c("var/linux") %]'
   - URL: 'https://golang.org/dl/go[% c("version") %].src.tar.gz'
     name: go
-    sha256sum: 2ce930d70a931de660fdaf271d70192793b1b240272645bf0275779f6704df6b
+    sha256sum: 18ac263e39210bcf68d85f4370e97fb1734166995a1f63fb38b4f6e07d90d212
   - URL: 'https://golang.org/dl/go[% c("var/go14_version") %].src.tar.gz'
     name: go14
     sha256sum: 9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959

projects/manual/config

 # vim: filetype=yaml sw=2
 # To update, see doc/how-to-update-the-manual.txt
 # Remember to update also the package's hash, with the version!
-version: 54156
+version: 56847
 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.gz'
 container:
   use_container: 1
@@ -19,6 +19,6 @@ input_files:
   - project: container-image
   - URL: 'https://people.torproject.org/~richard/tbb_files/manual_[% c("version") %].zip'
     name: manual
-    sha256sum: 9f366a1d6a37da7a7294e47844da3af570f654dc097577832d1285d2b5507b5f
+    sha256sum: f22d6206c668eee194e19bc27f39e4bbe1d21c20dc69064f67dc3f9db52525e9
   - filename: packagemanual.py
     name: package_script

projects/openssl/config

 # vim: filetype=yaml sw=2
-version: 1.1.1q
+version: 1.1.1s
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz'
 container:
   use_container: 1
@@ -31,4 +31,4 @@ input_files:
   - name: '[% c("var/compiler") %]'
     project: '[% c("var/compiler") %]'
   - URL: 'https://www.openssl.org/source/openssl-[% c("version") %].tar.gz'
-    sha256sum: d7939ce614029cdff0b6c20f0e2e5703158a489a72b2507b8bd51bf8c8fd10ca
+    sha256sum: c5ac01e760ee6ff0dab61d6b2bbd30146724d063eb322180c6f18a6f74e4b6aa

projects/tba-translation/config

@@ -3,5 +3,5 @@ filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz'
 git_url: https://gitlab.torproject.org/tpo/translation.git
 # We need to bump the commit before releasing but just pointing to a branch
 # might cause too much rebuidling of the Firefox part.
-git_hash: 9ed8ec8aef95cd3b4e61e7e77e2113cbd13c4528
+git_hash: 462686c5f3fc57ba17ea8804c76e425682ed522f
 version: '[% c("abbrev") %]'

projects/tor-android-service/config

 # vim: filetype=yaml sw=2
 version: '[% c("abbrev") %]'
 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %]'
-git_hash: 0f264c8891904b63057c46a4e3902cc73b6b860c
+git_hash: f324999c1773a8d8c83c50106a2cac30be93aabf
 git_url: https://gitlab.torproject.org/tpo/applications/tor-android-service.git
 git_submodule: 1
 container:

projects/tor/config

 # vim: filetype=yaml sw=2
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz'
-version: 0.4.7.10
+version: 0.4.7.11
 git_hash: 'tor-[% c("version") %]'
 git_url: https://gitlab.torproject.org/tpo/core/tor.git
 git_submodule: 1

projects/translation-base-browser-fluent/config

 # vim: filetype=yaml sw=2
 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz'
 git_url: https://gitlab.torproject.org/tpo/translation.git
-git_hash: 38d0311207c47104247d4bd740e766901ee45f63
+git_hash: 55b370953218b77f3bee6fc7b819bc8c9a7bb699
 version: '[% c("abbrev") %]'
 
 targets:

projects/translation-base-browser/config

 # vim: filetype=yaml sw=2
 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz'
 git_url: https://gitlab.torproject.org/tpo/translation.git
-git_hash: 3ec44fe585f12a7a6e0f272382235004f4feb9ce
+git_hash: 7bcd63fc23945231facd75d1316c534c12f08a31
 version: '[% c("abbrev") %]'

rbm.conf

@@ -71,10 +71,10 @@ buildconf:
   git_signtag_opt: '-s'
 
 var:
-  torbrowser_version: '12.0a4'
+  torbrowser_version: '12.0a5'
   torbrowser_build: 'build1'
   torbrowser_incremental_from:
-    - 12.0a3
+    - 12.0a4
   build_mar: 1
   # By default, we sort the list of installed packages. This allows sharing
   # containers with identical list of packages, even if they are not listed