Bug 41099, 41100: Prepare Tor and Mullvad Browser Stable 13.0.14

projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt

+Mullvad Browser 13.0.14 - April 16 2024
+ * All Platforms
+   * Updated Firefox to 115.10.0esr
+   * Updated uBlock Origin to 1.57.2
+   * Bug 271: After update, don't open the release page on Github. Instead link it in the startpage, like in Tor Browser [mullvad-browser]
+   * Bug 283: New identity complains about about:mullvad-browser [mullvad-browser]
+   * Bug 285: Rebase Mullvad Browser stable onto 115.10.0esr [mullvad-browser]
+   * Bug 41676: Set privacy.resistFingerprinting.testing.setTZtoUTC as a defense-in-depth [tor-browser]
+   * Bug 42236: Let users decide whether to load their home page on new identity. [tor-browser]
+   * Bug 42335: Do not localize the order of locales for app lang [tor-browser]
+   * Bug 42428: Timezone offset leak via document.lastModified [tor-browser]
+   * Bug 42468: App languages not sorted correctly in stable [tor-browser]
+   * Bug 42472: Timezone May leak from XSLT Date function [tor-browser]
+ * Linux
+   * Bug 41110: Avoid Fontconfig warning about "ambiguous path" [tor-browser-build]
+
+Mullvad Browser 13.5a6 - March 28 2024
+ * All Platforms
+   * Updated Firefox to 115.9.0esr
+   * Updated mullvad-browser-extension to 0.9.0
+   * Bug 234: Make User-Agent request header match RFP's navigator.userAgent [mullvad-browser]
+   * Bug 271: After update, don't open the release page on Github. Instead link it in the startpage, like in Tor Browser [mullvad-browser]
+   * Bug 274: Rebase Mullvad Browser alpha onto Firefox 115.9.0esr [mullvad-browser]
+   * Bug 41676: Set privacy.resistFingerprinting.testing.setTZtoUTC as a defense-in-depth [tor-browser]
+   * Bug 41916: Letterboxing preferences UI [tor-browser]
+   * Bug 41918: Add option to reuse last window size when letterboxing is enabled [tor-browser]
+   * Bug 42211: Fluent migration: new identity [tor-browser]
+   * Bug 42214: Fluent migration: security level [tor-browser]
+   * Bug 42236: Let users decide whether to load their home page on new identity. [tor-browser]
+   * Bug 42428: Timezone offset leak via document.lastModified [tor-browser]
+   * Bug 42443: Shrink the window to match letterboxing size when the emtpy area is doble-clicked [tor-browser]
+   * Bug 42472: Timezone May leak from XSLT Date function [tor-browser]
+   * Bug 42473: ESR 115.9.1 fixes [tor-browser]
+ * Windows
+   * Bug 80: Make 'Mullvad your default browser' does not work on Windows [mullvad-browser]
+   * Bug 42377: Hidden fonts are automatically added to the allow list [tor-browser]
+   * Bug 41089: Add filetype association to the installer of Mullvad Browser [tor-browser-build]
+ * Linux
+   * Bug 42438: Adapt the data import wizard to use the original $HOME on Linux [tor-browser]
+   * Bug 41110: Avoid Fontconfig warning about "ambiguous path" [tor-browser-build]
+ * Build System
+   * All Platforms
+     * Bug 41088: Remove use of projects/browser/run_scripts [tor-browser-build]
+     * Bug 41102: src archive does not match likely due to mismatched xz-utils version [tor-browser-build]
+     * Bug 40073: We should remove ./ when using 7-zip for zip files [rbm]
+   * Windows
+     * Bug 41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build]
+
 Mullvad Browser 13.0.13 - March 22 2024
  * Windows + macOS + Linux
    * Updated Firefox to 115.9.1esr

projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt

+Tor Browser 13.0.14 - April 16 2024
+ * All Platforms
+   * Updated Tor to 0.4.8.11
+   * Bug 41676: Set privacy.resistFingerprinting.testing.setTZtoUTC as a defense-in-depth [tor-browser]
+   * Bug 42335: Do not localize the order of locales for app lang [tor-browser]
+   * Bug 42428: Timezone offset leak via document.lastModified [tor-browser]
+   * Bug 42472: Timezone May leak from XSLT Date function [tor-browser]
+   * Bug 42508: Rebase Tor Browser stable onto 115.10.0esr [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 115.10.0esr
+   * Bug 42236: Let users decide whether to load their home page on new identity. [tor-browser]
+   * Bug 42468: App languages not sorted correctly in stable [tor-browser]
+ * Android
+   * Updated GeckoView to 115.10.0esr
+ * Linux
+   * Bug 41110: Avoid Fontconfig warning about "ambiguous path" [tor-browser-build]
+ * Build System
+   * All Platforms
+     * Updated Go to 1.21.8
+     * Bug 41107: Update download-unsigned-sha256sums-gpg-signatures-from-people-tpo for new type of URL [tor-browser-build]
+
+Tor Browser 13.5a6 - March 28 2024
+ * All Platforms
+   * Bug 41114: Fix no-async-promise-executor on TorConnect [tor-browser]
+   * Bug 41676: Set privacy.resistFingerprinting.testing.setTZtoUTC as a defense-in-depth [tor-browser]
+   * Bug 42336: Review the relationship between TorSettings and the TorProvider [tor-browser]
+   * Bug 42428: Timezone offset leak via document.lastModified [tor-browser]
+   * Bug 42435: Update moat domain fronting configuration [tor-browser]
+   * Bug 42437: Drop "torbrowser.version" preference [tor-browser]
+   * Bug 42444: Remove the "Prioritize .onion sites when known" option [tor-browser]
+   * Bug 42449: Rebase Tor Browser alpha onto Firefox 115.9.0esr [tor-browser]
+   * Bug 42459: Add startpage onion service to list of search providers [tor-browser]
+   * Bug 42466: Drop the "Onion Logo" from trademark statement [tor-browser]
+   * Bug 42472: Timezone May leak from XSLT Date function [tor-browser]
+   * Bug 42473: ESR 115.9.1 fixes [tor-browser]
+   * Bug 42481: Modularize SecurityLevel [tor-browser]
+   * Bug 41105: Bump version of snowflake to v2.9.2 [tor-browser-build]
+ * Windows + macOS + Linux
+   * Updated Firefox to 115.9.0esr
+   * Bug 41916: Letterboxing preferences UI [tor-browser]
+   * Bug 41918: Add option to reuse last window size when letterboxing is enabled [tor-browser]
+   * Bug 42203: Fluent migration: about dialog [tor-browser]
+   * Bug 42209: Fluent migration: tor circuit [tor-browser]
+   * Bug 42211: Fluent migration: new identity [tor-browser]
+   * Bug 42214: Fluent migration: security level [tor-browser]
+   * Bug 42236: Let users decide whether to load their home page on new identity. [tor-browser]
+   * Bug 42443: Shrink the window to match letterboxing size when the emtpy area is doble-clicked [tor-browser]
+   * Bug 42446: Improve accessible descriptions in built-in dialog [tor-browser]
+   * Bug 42458: Update the "Submit Feedback" link in "About Tor Browser" [tor-browser]
+ * Windows
+   * Bug 42377: Hidden fonts are automatically added to the allow list [tor-browser]
+ * Linux
+   * Bug 42438: Adapt the data import wizard to use the original $HOME on Linux [tor-browser]
+   * Bug 41110: Avoid Fontconfig warning about "ambiguous path" [tor-browser-build]
+ * Android
+   * Updated GeckoView to 115.9.0esr
+   * Bug 41187: Improve Android's bridge settings UI [tor-browser]
+   * Bug 42427: Do not ship bridges as prefences anymore [tor-browser]
+ * Build System
+   * All Platforms
+     * Updated Go to 1.21.8
+     * Bug 41102: src archive does not match likely due to mismatched xz-utils version [tor-browser-build]
+     * Bug 41107: Update download-unsigned-sha256sums-gpg-signatures-from-people-tpo for new type of URL [tor-browser-build]
+     * Bug 40073: We should remove ./ when using 7-zip for zip files [rbm]
+   * Windows + macOS + Linux
+     * Bug 42305: (Semi-)Automatically merge translation resources across tor browser releases (desktop) [tor-browser]
+     * Bug 41088: Remove use of projects/browser/run_scripts [tor-browser-build]
+   * Windows
+     * Bug 41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build]
+   * Android
+     * Bug 40502: Do not recommend addons on Tor Browser [tor-browser]
+     * Bug 41082: Package tor expert bundle on android as .aar that firefox-android can use in lieu of tor-android-service with geckoview bootstrap [tor-browser-build]
+
 Tor Browser 13.0.13 - March 22 2024
  * Windows + macOS + Linux
    * Updated Firefox to 115.9.1esr

projects/browser/config

@@ -99,9 +99,9 @@ input_files:
   - URL: https://addons.mozilla.org/firefox/downloads/file/4206186/noscript-11.4.29.xpi
     name: noscript
     sha256sum: 05b98840b05ef2acbac333543e4b7c3d40fee2ce5fb4e29260b05e2ff6fe24cd
-  - URL: https://addons.mozilla.org/firefox/downloads/file/4237670/ublock_origin-1.56.0.xpi
+  - URL: https://addons.mozilla.org/firefox/downloads/file/4261710/ublock_origin-1.57.2.xpi
     name: ublock-origin
-    sha256sum: f5fbeeac511ca4e10a74723413727fda8e6f9236c726d16eb54ade1fbe7be5be
+    sha256sum: 9928e79a52cecf7cfa231fdb0699c7d7a427660d94eb10d711ed5a2f10d2eb89
     enable: '[% c("var/mullvad-browser") %]'
   - URL: https://cdn.mullvad.net/browser-extension/0.9.0/mullvad-browser-extension-0.9.0.xpi
     name: mullvad-extension

projects/firefox/config

@@ -14,7 +14,7 @@ container:
   use_container: 1
 
 var:
-  firefox_platform_version: 115.9.1
+  firefox_platform_version: 115.10.0
   firefox_version: '[% c("var/firefox_platform_version") %]esr'
   browser_series: '13.0'
   browser_branch: '[% c("var/browser_series") %]-1'

projects/geckoview/config

@@ -14,9 +14,9 @@ container:
   use_container: 1
 
 var:
-  geckoview_version: 115.9.0esr
+  geckoview_version: 115.10.0esr
   browser_branch: 13.0-1
-  browser_build: 3
+  browser_build: 1
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
   git_commit: '[% exec("git rev-parse HEAD") %]'

projects/go/config

 # vim: filetype=yaml sw=2
-version: '[% IF c("var/use_go_1_20") %]1.20.14[% ELSE %]1.21.8[% END %]'
+version: '[% IF c("var/use_go_1_20") %]1.20.14[% ELSE %]1.21.9[% END %]'
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 container:
   use_container: 1
@@ -121,7 +121,7 @@ input_files:
     enable: '[% ! c("var/linux") %]'
   - URL: 'https://go.dev/dl/go[% c("version") %].src.tar.gz'
     name: go
-    sha256sum: dc806cf75a87e1414b5b4c3dcb9dd3e9cc98f4cfccec42b7af617d5a658a3c43
+    sha256sum: 58f0c5ced45a0012bce2ff7a9df03e128abcc8818ebabe5027bb92bafe20e421
     enable: '[% !c("var/use_go_1_20") %]'
   - URL: 'https://go.dev/dl/go[% c("version") %].src.tar.gz'
     name: go

projects/tor/config

 # vim: filetype=yaml sw=2
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
-version: 0.4.8.10
+version: 0.4.8.11
 git_hash: 'tor-[% c("version") %]'
 git_url: https://gitlab.torproject.org/tpo/core/tor.git
 git_submodule: 1

projects/translation/config

@@ -12,13 +12,13 @@ compress_tar: 'gz'
 steps:
   base-browser:
     base-browser: '[% INCLUDE build %]'
-    git_hash: 8e04ca3c5f440ed8f16b2069ae9565e4b044ec29
+    git_hash: d31e6b16c372e2eb235c4f2b0eae0b573a5515ba
     targets:
       nightly:
         git_hash: 'base-browser'
   tor-browser:
     tor-browser: '[% INCLUDE build %]'
-    git_hash: bf2fac60a6c41aa67b8147f22a638d498ac2dcdd
+    git_hash: d37455a56f966b4f87f5f326b534a91f71fd5c88
     targets:
       nightly:
         git_hash: 'tor-browser'
@@ -32,7 +32,7 @@ steps:
     fenix: '[% INCLUDE build %]'
     # We need to bump the commit before releasing but just pointing to a branch
     # might cause too much rebuidling of the Firefox part.
-    git_hash: c5d462fc3513f23fc74193c7a5c31027fc07672d
+    git_hash: aa60141af05cd3cabf2479de52da46d436822d61
     compress_tar: 'zst'
     targets:
       nightly:

rbm.conf

@@ -73,13 +73,13 @@ buildconf:
   git_signtag_opt: '-s'
 
 var:
-  torbrowser_version: '13.0.13'
+  torbrowser_version: '13.0.14'
   torbrowser_build: 'build1'
   torbrowser_incremental_from:
+    - '13.0.13'
     - '13.0.12'
     - '[% IF c("var/tor-browser") %]13.0.11[% END %]'
-    - '13.0.10'
-    - '[% IF c("var/mullvad-browser") %]13.0.9[% END %]'
+    - '[% IF c("var/mullvad-browser") %]13.0.10[% END %]'
   updater_enabled: 1
   build_mar: 1
   mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'