Bug 40820: Prepare stable release 12.0.6

projects/browser/Bundle-Data/Docs/ChangeLog.txt

+Tor Browser 12.0.6 - May 09 2023
+ * All Platforms
+   * Updated Translations
+   * Updated Go to 11.9.9
+   * Bug 41728: Pin bridges.torproject.org domains to Let's Encrypt's root cert public key [tor-browser]
+   * Bug 41756: Rebase Tor Browser Stable to 102.11.0esr [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 102.11esr
+   * Bug 40501: High CPU load after tor exits unexpectedly [tor-browser]
+ * Windows
+   * Bug 41683: Disable the network process on Windows [tor-browser]
+ * Android
+   * Updated GeckoView to 102.11esr
+ * Build System
+   * Windows + macOS + Linux
+     * Bug 41730: Bridge lines in tools/torbrowser/bridges.js out of date [tor-browser]
+   * macOS
+     * Bug 40844: Fix DMG reproducibility problem on 12.0.5 [tor-browser-build]
+
+Tor Browser 12.5a5 - April 18 2023
+ * All Platforms
+   * Updated Translations
+   * Updated NoScript to 11.4.21
+   * Updated Go to 11.9.8
+   * Bug 40833: base-browser nightly is using the default channel instead of nightly [tor-browser-build]
+   * Bug 41687: Rebase Tor Browser Alpha to 102.10.0esr [tor-browser]
+   * Bug 41689: Remove startup.homepage_override_url from Base Browser [tor-browser]
+   * Bug 41704: Immediately return on remoteSettings.pollChanges [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 102.10esr
+   * Bug 165: Fix maximization warning x button and preference [mullvad-browser]
+   * Bug 40501: High CPU load after tor exits unexpectedly [tor-browser]
+   * Bug 40701: Improve security warning when downloading a file [tor-browser]
+   * Bug 40788: Tor Browser 11.0.4-11.0.6 phoning home [tor-browser]
+   * Bug 40811: Make testing the updater easier [tor-browser-build]
+   * Bug 40831: Fix update URL for base-browser nightly [tor-browser-build]
+   * Bug 40958: The number of relays displayed for an onion site can be misleading [tor-browser]
+   * Bug 41038: Update "Click to Copy" button label in circuit display [tor-browser]
+   * Bug 41109: "New circuit..." button gets cut-off when onion name wraps [tor-browser]
+   * Bug 41350: Move the implementation of Bug 19273 out of Torbutton [tor-browser]
+   * Bug 41521: Improve localization notes [tor-browser]
+   * Bug 41533: Page Info window for view-source:http://...onion addresses says Connection Not Encrypted [tor-browser]
+   * Bug 41600: Some users have difficulty finding the circuit display [tor-browser]
+   * Bug 41617: Improve the UX of the built-in bridges dialog [tor-browser]
+   * Bug 41668: Move part of the updater patches to base browser [tor-browser]
+   * Bug 41686: Move the 'Bug 11641: Disable remoting by default' commit from base-browser to tor-browser [tor-browser]
+   * Bug 41695: Port warning on maximized windows without letterboxing from torbutton [tor-browser]
+   * Bug 41699: Tighten up the tor onion alias regular expression [tor-browser]
+   * Bug 41701: Reporting an extension does not work [tor-browser]
+   * Bug 41702: The connection pill needs to be centered vertically [tor-browser]
+   * Bug 41709: sendCommand should not try to send a command forever [tor-browser]
+   * Bug 41711: Race condition when opening a new window in New Identity [tor-browser]
+   * Bug 41713: “Remove All Bridges” button only appears after hitting “Show All Bridges" [tor-browser]
+   * Bug 41714: “Show Fewer Bridges” button missing from refactored remove all bridges UI [tor-browser]
+   * Bug 41719: Update title and button strings in the new circuit display to sentence case [tor-browser]
+   * Bug 41722: Regression: window maximization warning cannot be closed by the X button [tor-browser]
+   * Bug 41725: Stray connectionPane.xhtml patch [tor-browser]
+ * Windows
+   * Bug 41459: WebRTC fails to build under mingw [tor-browser]
+   * Bug 41678: WebRTC build fix patches incorrectly defining pid_t [tor-browser]
+   * Bug 41683: Disable the network process on Windows [tor-browser]
+ * Linux
+   * Bug 40830: The fontconfig directory is missing in Base Browser [tor-browser-build]
+   * Bug 41163: Many bundled fonts are blocked in Ubuntu/Fedora because of RFP [tor-browser]
+ * Android
+   * Updated GeckoView to 102.10esr
+   * Bug 41724: Backport Android-specific security fixes from Firefox 112 to ESR 102.10-based Tor Browser [tor-browser]
+ * Build System
+   * All Platforms
+     * Bug 40828: Use http://archive.debian.org/debian-archive/ for jessie [tor-browser-build]
+     * Bug 40837: Rebase mullvad-browser build changes onto main [tor-browser-build]
+   * Windows + macOS + Linux
+     * Bug 40823: Update appname_* variables in projects/release/update_responses_config.yml [tor-browser-build]
+     * Bug 40826: Correctly set appname_marfile for basebrowser in tools/signing/nightly/update-responses-base-config.yml [tor-browser-build]
+     * Bug 40827: MAR generation uses (mostly) hard-coded MAR update channel [tor-browser-build]
+     * Bug 41730: Bridge lines in tools/torbrowser/bridges.js out of date [tor-browser]
+   * Windows
+     * Bug 40822: The Tor Browser installer doesn't run with mandatory ASLR on (0xc000007b) [tor-browser-build]
+   * macOS
+     * Bug 40824: dmg2mar script using hardcoded project names for paths [tor-browser-build]
+     * Bug 40844: DMG reproducibility problem on 12.0.5 [tor-browser-build]
+   * Linux
+     * Bug 40835: Update faketime URLs in projects/container-image/config [tor-browser-build]
+   * Android
+     * Bug 41684: Android improvements for local dev builds [tor-browser]
+
 Tor Browser 12.0.5 - April 12 2023
  * All Platforms
    * Updated Translations

projects/firefox/config

@@ -12,10 +12,10 @@ container:
   use_container: 1
 
 var:
-  firefox_platform_version: 102.10.0
+  firefox_platform_version: 102.11.0
   firefox_version: '[% c("var/firefox_platform_version") %]esr'
   browser_branch: '12.0-1'
-  browser_build: 2
+  browser_build: 1
   branding_directory: 'browser/branding/alpha'
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   nightly_updates_osname: '[% c("var/osname") %]'

projects/geckoview/config

@@ -12,9 +12,9 @@ container:
   use_container: 1
 
 var:
-  geckoview_version: 102.10.0esr
+  geckoview_version: 102.11.0esr
   torbrowser_branch: 12.0-1
-  browser_build: 2
+  browser_build: 1
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   deps:
     - build-essential

projects/go/config

 # vim: filetype=yaml sw=2
-version: 1.19.8
+version: 1.19.9
 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz'
 container:
   use_container: 1
@@ -121,7 +121,7 @@ input_files:
     enable: '[% ! c("var/linux") %]'
   - URL: 'https://golang.org/dl/go[% c("version") %].src.tar.gz'
     name: go
-    sha256sum: 1d7a67929dccafeaf8a29e55985bc2b789e0499cb1a17100039f084e3238da2f
+    sha256sum: 131190a4697a70c5b1d232df5d3f55a3f9ec0e78e40516196ffb3f09ae6a5744
   - URL: 'https://golang.org/dl/go[% c("var/go14_version") %].src.tar.gz'
     name: go14
     sha256sum: 9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959

projects/manual/config

 # vim: filetype=yaml sw=2
 # To update, see doc/how-to-update-the-manual.txt
 # Remember to update also the package's hash, with the version!
-version: 72637
+version: 74065
 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.gz'
 container:
   use_container: 1
@@ -17,8 +17,8 @@ var:
 
 input_files:
   - project: container-image
-  - URL: 'https://people.torproject.org/~ma1/tbb_files/manual_[% c("version") %].zip'
+  - URL: 'https://people.torproject.org/~pierov/tbb_files/manual_[% c("version") %].zip'
     name: manual
-    sha256sum: 28379bdb31989d26a4cb735b9cbcd9ee52089f72153881f3802d291743b8cf06
+    sha256sum: 788c2dc2bfacbc6961ce443c5639706cc23fbb7b7730ed7f71a26396511305be
   - filename: packagemanual.py
     name: package_script

projects/translation/config

@@ -6,19 +6,19 @@ version: '[% c("abbrev") %]'
 steps:
   base-browser:
     base-browser: '[% INCLUDE build %]'
-    git_hash: a7f7d59e21395ba563033060a55903f4f7163c02
+    git_hash: 97c76d5183b16b069e66feaaf10e00c1d2c7d9e0
     targets:
       nightly:
         git_hash: 'base-browser'
   base-browser-fluent:
     base-browser-fluent: '[% INCLUDE build %]'
-    git_hash: 32c09e1c5282cf3c7369d45fc199eb35c10a4fcc
+    git_hash: d473c4dd005325d1be40bae0f816974e195a972d
     targets:
       nightly:
         git_hash: 'basebrowser-newidentityftl'
   tor-browser:
     tor-browser: '[% INCLUDE build %]'
-    git_hash: a7be13f5b46a2bd3684146556390d62b1caa2f52
+    git_hash: 267f3c208a323df636ed11e7143164956d3d9d9b
     targets:
       nightly:
         git_hash: 'tor-browser'
@@ -26,7 +26,7 @@ steps:
     fenix: '[% INCLUDE build %]'
     # We need to bump the commit before releasing but just pointing to a branch
     # might cause too much rebuidling of the Firefox part.
-    git_hash: b2691020553c5e81bacfe3ed33cc66226754c98d
+    git_hash: 0deec2a78dea0013e8c4eaec1d40ef5aac4e43b0
     targets:
       nightly:
         git_hash: 'fenix-torbrowserstringsxml'

rbm.conf

@@ -71,10 +71,13 @@ buildconf:
   git_signtag_opt: '-s'
 
 var:
-  torbrowser_version: '12.0.5'
-  torbrowser_build: 'build2'
+  torbrowser_version: '12.0.6'
+  torbrowser_build: 'build1'
   torbrowser_incremental_from:
+    # Build incrementals also from 12.0.4 until we have a new certificate for
+    # Windows installers.
     - 12.0.4
+    - 12.0.5
   build_mar: 1
   # By default, we sort the list of installed packages. This allows sharing
   # containers with identical list of packages, even if they are not listed