Bug 40758: Prepare alpha release 12.5a4

projects/android-components/config

@@ -14,7 +14,7 @@ container:
 var:
   android_components_version: 102.0.14
   browser_branch: 12.5-1
-  android_components_build: 1
+  android_components_build: 2
   # This should be updated when the list of gradle dependencies is changed.
   gradle_dependencies_version: 37
   gradle_version: 7.0.2

projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt

+Tor Browser 12.5a4 - March 20 2023
+ * All Platforms
+   * Updated Translations
+   * Updated NoScript to 11.4.20
+   * Bug 40353: Re-enable rlbox [tor-browser-build]
+   * Bug 40810: Enable Finnish (fi) in alpha builds [tor-browser-build]
+   * Bug 40817: Add basebrowser-incrementals-nightly makefile target [tor-browser-build]
+   * Bug 41599: about:networking#networkid should be normalized [tor-browser]
+   * Bug 41635: Disable the Normandy component at compile time [tor-browser]
+   * Bug 41636: Disable back webextension.storage.sync after ensuring NoScript settings won't be lost [tor-browser]
+   * Bug 41646: Regression in 12.5a3: the system font patch should also set a font-size [tor-browser]
+   * Bug 41647: Turn --enable-base-browser in --with-base-browser-version [tor-browser]
+   * Bug 41659: Add canonical color definitions to base-browser [tor-browser]
+   * Bug 41662: Disable about:sync-logs [tor-browser]
+   * Bug 41670: Rebase Tor Browser Alpha to 102.9.0esr [tor-browser]
+   * Bug 41671: Turn media.peerconnection.ice.relay_only to true as defense in depth against WebRTC ICE leaks [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 102.9esr
+   * Bug 40144: about:privatebrowsing Firefox branding [tor-browser]
+   * Bug 40788: Remove all languages but en-US for privacy-browser build target [tor-browser-build]
+   * Bug 40808: Set update URL for nightly base-browser [tor-browser-build]
+   * Bug 41085: Refactor the UI to remove all bridges [tor-browser]
+   * Bug 41093: Users don't understand the purpose of bridge-moji [tor-browser]
+   * Bug 41574: Use --warning-color variable for the "Custom" label in the security level popup. [tor-browser]
+   * Bug 41657: Remove --enable-tor-browser-data-outside-app-dir [tor-browser]
+ * Windows
+   * Bug 40793: Add some metadata also to the Windows installer [tor-browser-build]
+   * Bug 40801: Correct the ExecShell for system-wide installs in the NSIS script [tor-browser-build]
+ * Android
+   * Updated GeckoView to 102.9esr
+   * Bug 40800: WebTunnel Integration in Tor Browser mobile [tor-browser-build]
+   * Bug 41667: Enable media.peerconnection.ice.obfuscate_host_addresses on Android for defense-in-depth [tor-browser]
+   * Bug 41677: Remove the --disable-tor-browser-update flag on Android [tor-browser]
+ * Build System
+   * All Platforms
+     * Updated Go to 1.19.7
+     * Bug 40750: Find why rlbox hurts reproducibility [tor-browser-build]
+     * Bug 40763: Add support for signing multiple browsers in tools/signing/nightly [tor-browser-build]
+     * Bug 40794: Include the build-id in firefox-l10n output name [tor-browser-build]
+     * Bug 40795: Trim down tor-browser-build release prep issue templates [tor-browser-build]
+     * Bug 40796: Bad UX for the changelogs script when using the issue number [tor-browser-build]
+     * Bug 40805: Define the version flag for all browsers [tor-browser-build]
+     * Bug 40807: Add config for signing base-browser nightly in tools/signing/nightly [tor-browser-build]
+     * Bug 40812: Make var/rezip in projects/firefox/config quiet [tor-browser-build]
+     * Bug 41649: Create rebase and security backport gitlab issue templates [tor-browser]
+     * Bug 41682: Add base-browser nightly mar signing key [tor-browser]
+   * Windows + macOS + Linux
+     * Bug 40809: Remove --enable-tor-browser-update and --enable-verify-mar from projects/firefox/mozconfig [tor-browser-build]
+     * Bug 40813: Enable var/updater_enabled for basebrowser nightly [tor-browser-build]
+   * macOS
+     * Bug 40790: Fix dmg2mar after dmg changes from #28124 [tor-browser-build]
+     * Bug 40791: tools/dmg2mar should exit with an error when there is an error creating the mar file [tor-browser-build]
+     * Bug 40792: signing scripts missing project name prefix to make rule [tor-browser-build]
+     * Bug 40798: dmg2mar step also takes care of copying the signed+stabled dmg to the signed directory [tor-browser-build]
+     * Bug 40806: Update the reference to the macOS mozconfig [tor-browser-build]
+     * Bug 41453: Rename mozconfig-macos-x86_64 to mozconfig-macos [tor-browser]
+   * Android
+     * Bug 40789: Broken mirror links for glean: link 404 for version 5.0.1 hosted at aguestuser's tor people storage [tor-browser-build]
+
+Tor Browser 12.0.4 - March 13 2023
+ * All Platforms
+   * Updated Translations
+   * Updated NoScript to 11.4.18
+   * Bug 41598: Prevent NoScript from being removed / disabled until core functionality has been migrated to Tor Browser [tor-browser]
+   * Bug 41603: Customize the creation of MOZ_SOURCE_URL [tor-browser]
+   * Bug 41627: Enable network.http.referer.hideOnionSource in base-browser [tor-browser]
+   * Bug 41637: cherry-pick Mozilla 1814416: Generalize the app name in about:buildconfig. r=ahochheiden [tor-browser]
+   * Bug 41659: Add canonical color definitions to base-browser [tor-browser]
+   * Bug 41669: Rebase Tor Browser stable to 102.9.0esr [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 102.9esr
+   * Bug 41542: Disable the creation of a default profile [tor-browser]
+   * Bug 41574: Use --warning-color variable for the "Custom" label in the security level popup. [tor-browser]
+   * Bug 41606: Move the changes to the hamburger menu out of the Torbutton commit [tor-browser]
+   * Bug 41626: Bridge-emojii tooltips not localized in ES locale [tor-browser]
+ * Android
+   * Updated GeckoView to 102.9esr
+   * Bug 41679: Backport Android-specific security fixes from Firefox 111 to ESR 102.9-based Tor Browser [tor-browser]
+ * Build System
+   * All Platforms
+     * Updated Go to 1.19.7
+     * Bug 40764: Embed repo URL and git revision in Firefox [tor-browser-build]
+     * Bug 40782: Update tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo to fetch from tb-build-04 and tb-build-05 [tor-browser-build]
+   * macOS
+     * Bug 40790: Fix dmg2mar after dmg changes from #28124 [tor-browser-build]
+     * Bug 40791: tools/dmg2mar should exit with an error when there is an error creating the mar file [tor-browser-build]
+   * Android
+     * Bug 40789: Broken mirror links for glean: link 404 for version 5.0.1 hosted at aguestuser's tor people storage [tor-browser-build]
+
 Tor Browser 12.5a3 - February 16 2023
  * All Platforms
    * Updated Translations

projects/browser/config

@@ -103,9 +103,9 @@ input_files:
     enable: '[% ! c("var/android") %]'
   - filename: Bundle-Data
     enable: '[% ! c("var/android") %]'
-  - URL: https://addons.mozilla.org/firefox/downloads/file/4067473/noscript-11.4.16.xpi
+  - URL: https://addons.mozilla.org/firefox/downloads/file/4086528/noscript-11.4.20.xpi
     name: noscript
-    sha256sum: 44bdddd89bee11e52e09ea967aebd3aa996dc2d66c1a819e8dfdaf9a16cc753b
+    sha256sum: 014aec3ce142222338372d227eaadfa2ae13c9e3861f6d43869615b932ce4b53
   - URL: https://addons.mozilla.org/firefox/downloads/file/4047353/ublock_origin-1.46.0.xpi
     name: ublock-origin
     sha256sum: 6bf8af5266353fab5eabdc7476de026e01edfb7901b0430c5e539f6791f1edc8

projects/fenix/config

@@ -14,7 +14,7 @@ container:
 var:
   fenix_version: 102.2.1
   browser_branch: 12.5-1
-  fenix_build: 2
+  fenix_build: 3
   git_branch: 'tor-browser-[% c("var/fenix_version") %]-[% c("var/browser_branch") %]'
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   # This should be updated when the list of gradle dependencies is changed.

projects/firefox/config

@@ -11,11 +11,11 @@ container:
   use_container: 1
 
 var:
-  firefox_platform_version: 102.8.0
+  firefox_platform_version: 102.9.0
   firefox_version: '[% c("var/firefox_platform_version") %]esr'
   browser_series: '12.5'
   browser_branch: '[% c("var/browser_series") %]-1'
-  browser_build: 3
+  browser_build: 2
   branding_directory_prefix: 'tb'
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %][% c("var/osname") %]'

projects/geckoview/config

@@ -11,9 +11,9 @@ container:
   use_container: 1
 
 var:
-  geckoview_version: 102.8.0esr
+  geckoview_version: 102.9.0esr
   browser_branch: 12.5-1
-  browser_build: 3
+  browser_build: 2
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   deps:
     - build-essential

projects/go/config

 # vim: filetype=yaml sw=2
-version: 1.19.6
+version: 1.19.7
 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz'
 container:
   use_container: 1
@@ -121,7 +121,7 @@ input_files:
     enable: '[% ! c("var/linux") %]'
   - URL: 'https://golang.org/dl/go[% c("version") %].src.tar.gz'
     name: go
-    sha256sum: d7f0013f82e6d7f862cc6cb5c8cdb48eef5f2e239b35baa97e2f1a7466043767
+    sha256sum: 775bdf285ceaba940da8a2fe20122500efd7a0b65dbcee85247854a8d7402633
   - URL: 'https://golang.org/dl/go[% c("var/go14_version") %].src.tar.gz'
     name: go14
     sha256sum: 9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959

projects/manual/config

 # vim: filetype=yaml sw=2
 # To update, see doc/how-to-update-the-manual.txt
 # Remember to update also the package's hash, with the version!
-version: 66168
+version: 69998
 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.gz'
 container:
   use_container: 1
@@ -19,6 +19,6 @@ input_files:
   - project: container-image
   - URL: 'https://people.torproject.org/~richard/tbb_files/manual_[% c("version") %].zip'
     name: manual
-    sha256sum: efb88be6217f7cb6879157678963bc90c47a2b91380ae3ba9a52d748eabf9568
+    sha256sum: 236ad8b877d9bdb3ad5309deee8acb4025e10e4faf4626d063cbf6c87fc209a4
   - filename: packagemanual.py
     name: package_script

projects/translation/config

@@ -6,19 +6,19 @@ version: '[% c("abbrev") %]'
 steps:
   base-browser:
     base-browser: '[% INCLUDE build %]'
-    git_hash: d862d323bd78e100de5f51f2f8742d21de3a76d0
+    git_hash: 50ec65bc65e510156c1e9f5c835eb6ea034450d0
     targets:
       nightly:
         git_hash: 'base-browser'
   base-browser-fluent:
     base-browser-fluent: '[% INCLUDE build %]'
-    git_hash: 71869a9fd722c36eb57d08d7ef5a1fa5270ddb54
+    git_hash: 667a6daeba46b7aeb0a8b664bd9ae006f8ac233d
     targets:
       nightly:
         git_hash: 'basebrowser-newidentityftl'
   tor-browser:
     tor-browser: '[% INCLUDE build %]'
-    git_hash: b3d9033d2229e82d30771aa7a1b77667d9a80628
+    git_hash: e9ad920fc7427ff1b84e3723a97212ccd78dfe26
     targets:
       nightly:
         git_hash: 'tor-browser'
@@ -26,7 +26,7 @@ steps:
     fenix: '[% INCLUDE build %]'
     # We need to bump the commit before releasing but just pointing to a branch
     # might cause too much rebuidling of the Firefox part.
-    git_hash: d19129475bae8943d3ee4ca6b6ed114a9a6db94e
+    git_hash: f9fd1869f6904e3a9fe99fa3626382b20ff33e66
     targets:
       nightly:
         git_hash: 'fenix-torbrowserstringsxml'

rbm.conf

@@ -71,10 +71,10 @@ buildconf:
   git_signtag_opt: '-s'
 
 var:
-  torbrowser_version: '12.5a3'
+  torbrowser_version: '12.5a4'
   torbrowser_build: 'build1'
   torbrowser_incremental_from:
-    - 12.5a2
+    - 12.5a3
   updater_enabled: 1
   build_mar: 1
   # By default, we sort the list of installed packages. This allows sharing