Bug 40814: Prepare stable release 12.0.5

projects/browser/Bundle-Data/Docs/ChangeLog.txt

+Tor Browser 12.0.5 - April 06 2023
+ * All Platforms
+   * Updated Translations
+   * Updated NoScript to 11.4.21
+   * Updated Go to 11.9.8
+   * Bug 41688: Rebase Tor Browser Stable to 102.10.0esr [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 102.10esr
+   * Bug 41526: "Cancel" button when establishing a connection should be grey [tor-browser]
+ * Android
+   * Updated GeckoView to 102.10esr
+ * Build System
+   * Windows
+     * Bug 40822: The Tor Browser installer doesn't run with mandatory ASLR on (0xc000007b) [tor-browser-build]
+   * Linux
+     * Bug 40828: Use http://archive.debian.org/debian-archive/ for jessie [tor-browser-build]
+     * Bug 40835: Update faketime URLs in projects/container-image/config [tor-browser-build]
+
+Tor Browser 12.5a4 - March 20 2023
+ * All Platforms
+   * Updated Translations
+   * Updated NoScript to 11.4.20
+   * Bug 40353: Re-enable rlbox [tor-browser-build]
+   * Bug 40810: Enable Finnish (fi) in alpha builds [tor-browser-build]
+   * Bug 40817: Add basebrowser-incrementals-nightly makefile target [tor-browser-build]
+   * Bug 41599: about:networking#networkid should be normalized [tor-browser]
+   * Bug 41635: Disable the Normandy component at compile time [tor-browser]
+   * Bug 41636: Disable back webextension.storage.sync after ensuring NoScript settings won't be lost [tor-browser]
+   * Bug 41646: Regression in 12.5a3: the system font patch should also set a font-size [tor-browser]
+   * Bug 41647: Turn --enable-base-browser in --with-base-browser-version [tor-browser]
+   * Bug 41659: Add canonical color definitions to base-browser [tor-browser]
+   * Bug 41662: Disable about:sync-logs [tor-browser]
+   * Bug 41670: Rebase Tor Browser Alpha to 102.9.0esr [tor-browser]
+   * Bug 41671: Turn media.peerconnection.ice.relay_only to true as defense in depth against WebRTC ICE leaks [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 102.9esr
+   * Bug 40144: about:privatebrowsing Firefox branding [tor-browser]
+   * Bug 40788: Remove all languages but en-US for privacy-browser build target [tor-browser-build]
+   * Bug 40808: Set update URL for nightly base-browser [tor-browser-build]
+   * Bug 41085: Refactor the UI to remove all bridges [tor-browser]
+   * Bug 41093: Users don't understand the purpose of bridge-moji [tor-browser]
+   * Bug 41574: Use --warning-color variable for the "Custom" label in the security level popup. [tor-browser]
+   * Bug 41657: Remove --enable-tor-browser-data-outside-app-dir [tor-browser]
+ * Windows
+   * Bug 40793: Add some metadata also to the Windows installer [tor-browser-build]
+   * Bug 40801: Correct the ExecShell for system-wide installs in the NSIS script [tor-browser-build]
+ * Android
+   * Updated GeckoView to 102.9esr
+   * Bug 40800: WebTunnel Integration in Tor Browser mobile [tor-browser-build]
+   * Bug 41667: Enable media.peerconnection.ice.obfuscate_host_addresses on Android for defense-in-depth [tor-browser]
+   * Bug 41677: Remove the --disable-tor-browser-update flag on Android [tor-browser]
+ * Build System
+   * All Platforms
+     * Updated Go to 1.19.7
+     * Bug 40750: Find why rlbox hurts reproducibility [tor-browser-build]
+     * Bug 40763: Add support for signing multiple browsers in tools/signing/nightly [tor-browser-build]
+     * Bug 40794: Include the build-id in firefox-l10n output name [tor-browser-build]
+     * Bug 40795: Trim down tor-browser-build release prep issue templates [tor-browser-build]
+     * Bug 40796: Bad UX for the changelogs script when using the issue number [tor-browser-build]
+     * Bug 40805: Define the version flag for all browsers [tor-browser-build]
+     * Bug 40807: Add config for signing base-browser nightly in tools/signing/nightly [tor-browser-build]
+     * Bug 40812: Make var/rezip in projects/firefox/config quiet [tor-browser-build]
+     * Bug 41649: Create rebase and security backport gitlab issue templates [tor-browser]
+     * Bug 41682: Add base-browser nightly mar signing key [tor-browser]
+   * Windows + macOS + Linux
+     * Bug 40809: Remove --enable-tor-browser-update and --enable-verify-mar from projects/firefox/mozconfig [tor-browser-build]
+     * Bug 40813: Enable var/updater_enabled for basebrowser nightly [tor-browser-build]
+   * macOS
+     * Bug 40790: Fix dmg2mar after dmg changes from #28124 [tor-browser-build]
+     * Bug 40791: tools/dmg2mar should exit with an error when there is an error creating the mar file [tor-browser-build]
+     * Bug 40792: signing scripts missing project name prefix to make rule [tor-browser-build]
+     * Bug 40798: dmg2mar step also takes care of copying the signed+stabled dmg to the signed directory [tor-browser-build]
+     * Bug 40806: Update the reference to the macOS mozconfig [tor-browser-build]
+     * Bug 41453: Rename mozconfig-macos-x86_64 to mozconfig-macos [tor-browser]
+   * Android
+     * Bug 40789: Broken mirror links for glean: link 404 for version 5.0.1 hosted at aguestuser's tor people storage [tor-browser-build]
+
 Tor Browser 12.0.4 - March 13 2023
  * All Platforms
    * Updated Translations

projects/browser/config

@@ -100,9 +100,9 @@ input_files:
     enable: '[% ! c("var/android") %]'
   - filename: Bundle-Data
     enable: '[% ! c("var/android") %]'
-  - URL: https://addons.mozilla.org/firefox/downloads/file/4077959/noscript-11.4.18.xpi
+  - URL: https://addons.mozilla.org/firefox/downloads/file/4090970/noscript-11.4.21.xpi
     name: noscript
-    sha256sum: 229c8d463d1f5403adb5c940d0b6ecd6432e60dcf0b8075eabd27c253267f8ce
+    sha256sum: 0fd3b66a2780d03a5b3cd460216105f3df2b27c6d3a552c1769c5de48c9e2338
   - filename: 'gtk3-settings.ini'
     enable: '[% c("var/linux") %]'
   - project: hfsplus-tools

projects/firefox/config

@@ -12,10 +12,10 @@ container:
   use_container: 1
 
 var:
-  firefox_platform_version: 102.9.0
+  firefox_platform_version: 102.10.0
   firefox_version: '[% c("var/firefox_platform_version") %]esr'
   browser_branch: '12.0-1'
-  browser_build: 2
+  browser_build: 1
   branding_directory: 'browser/branding/alpha'
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   nightly_updates_osname: '[% c("var/osname") %]'

projects/geckoview/config

@@ -12,9 +12,9 @@ container:
   use_container: 1
 
 var:
-  geckoview_version: 102.9.0esr
+  geckoview_version: 102.10.0esr
   torbrowser_branch: 12.0-1
-  browser_build: 2
+  browser_build: 1
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   deps:
     - build-essential

projects/go/config

 # vim: filetype=yaml sw=2
-version: 1.19.7
+version: 1.19.8
 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz'
 container:
   use_container: 1
@@ -121,7 +121,7 @@ input_files:
     enable: '[% ! c("var/linux") %]'
   - URL: 'https://golang.org/dl/go[% c("version") %].src.tar.gz'
     name: go
-    sha256sum: 775bdf285ceaba940da8a2fe20122500efd7a0b65dbcee85247854a8d7402633
+    sha256sum: 1d7a67929dccafeaf8a29e55985bc2b789e0499cb1a17100039f084e3238da2f
   - URL: 'https://golang.org/dl/go[% c("var/go14_version") %].src.tar.gz'
     name: go14
     sha256sum: 9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959

projects/manual/config

 # vim: filetype=yaml sw=2
 # To update, see doc/how-to-update-the-manual.txt
 # Remember to update also the package's hash, with the version!
-version: 69278
+version: 72637
 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.gz'
 container:
   use_container: 1
@@ -17,8 +17,8 @@ var:
 
 input_files:
   - project: container-image
-  - URL: 'https://people.torproject.org/~richard/tbb_files/manual_[% c("version") %].zip'
+  - URL: 'https://people.torproject.org/~ma1/tbb_files/manual_[% c("version") %].zip'
     name: manual
-    sha256sum: a03e723d3dded1fe23dfa261bfc5a7f7810db286b0f1addf9e2ce2665bc2e4b5
+    sha256sum: 28379bdb31989d26a4cb735b9cbcd9ee52089f72153881f3802d291743b8cf06
   - filename: packagemanual.py
     name: package_script

projects/translation/config

@@ -6,19 +6,19 @@ version: '[% c("abbrev") %]'
 steps:
   base-browser:
     base-browser: '[% INCLUDE build %]'
-    git_hash: 732c9aa3c3afb02f3f4698504c2f7ccde59efdc2
+    git_hash: a7f7d59e21395ba563033060a55903f4f7163c02
     targets:
       nightly:
         git_hash: 'base-browser'
   base-browser-fluent:
     base-browser-fluent: '[% INCLUDE build %]'
-    git_hash: 1743eebf1a33faad8cba737e6aaf779add860e6c
+    git_hash: 32c09e1c5282cf3c7369d45fc199eb35c10a4fcc
     targets:
       nightly:
         git_hash: 'basebrowser-newidentityftl'
   tor-browser:
     tor-browser: '[% INCLUDE build %]'
-    git_hash: 26fa7436160a5d8e3f078a27407b40284d016a84
+    git_hash: a7be13f5b46a2bd3684146556390d62b1caa2f52
     targets:
       nightly:
         git_hash: 'tor-browser'
@@ -26,7 +26,7 @@ steps:
     fenix: '[% INCLUDE build %]'
     # We need to bump the commit before releasing but just pointing to a branch
     # might cause too much rebuidling of the Firefox part.
-    git_hash: 99524194b9fb86345db13923fce94e31bfd06aea
+    git_hash: b2691020553c5e81bacfe3ed33cc66226754c98d
     targets:
       nightly:
         git_hash: 'fenix-torbrowserstringsxml'

rbm.conf

@@ -71,10 +71,10 @@ buildconf:
   git_signtag_opt: '-s'
 
 var:
-  torbrowser_version: '12.0.4'
-  torbrowser_build: 'build2'
+  torbrowser_version: '12.0.5'
+  torbrowser_build: 'build1'
   torbrowser_incremental_from:
-    - 12.0.3
+    - 12.0.4
   build_mar: 1
   # By default, we sort the list of installed packages. This allows sharing
   # containers with identical list of packages, even if they are not listed