Bug 40986,40998: Prepare Tor+Mullvad Browser Alpha 13.5a2

projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt

+Mullvad Browser 13.5a2 - November 27 2023
+ * All Platforms
+   * Updated Firefox to 115.5.0esr
+   * Updated uBlock Origin to 1.54.0
+   * Bug 250: Enable storage.sync to fix broken webextensions [mullvad-browser]
+   * Bug 254: Rebase Mullvad Browser Alpha to 115.5.0esr [mullvad-browser]
+   * Bug 42153: Drop dom.enable_resource_timing = false preference [tor-browser]
+   * Bug 42194: Blank Net Error page on name resolution failure [tor-browser]
+   * Bug 42276: Rebase Browsers Alpha to 115.5.0esr [tor-browser]
+   * Bug 42288: Allow language spoofing in status messages [tor-browser]
+ * Linux
+   * Bug 17560: Downloaded URLs disk leak on Linux [tor-browser]
+   * Bug 41017: Disable Nvidia shader cache [tor-browser-build]
+ * Build System
+   * All Platforms
+     * Bug 40884: Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be [tor-browser-build]
+     * Bug 40970: Missing symlink create-blog-post.torbrowser -> create-blog-post symlink [tor-browser-build]
+     * Bug 41006: Fix typo in finished-signing-clean-linux signer [tor-browser-build]
+     * Bug 40063: RBM's chroot fails in Fedora [rbm]
+     * Bug 40064: Using exec on project with no git_url/hg_url is causing warning [rbm]
+   * macOS
+     * Bug 41005: Unpack macOS bundle to /var/tmp instead of /tmp in rcodesign-notary-submit step [tor-browser-build]
+     * Bug 41007: gatekeeper-bundling.sh refers to old .tar.gz archive [tor-browser-build]
+     * Bug 41014: Update libdmg-hfsplus to drop the OpenSSL patch [tor-browser-build]
+     * Bug 41020: Opening MacOS dmg file is causing a warning, since 13.0 [tor-browser-build]
+
+Mullvad Browser 13.0.4 - November 16 2023
+ * All Platforms
+   * Updated Firefox to 115.5.0esr
+   * Updated uBlock Origin to 1.53.0
+   * Bug 250: Enable storage.sync to fix broken webextensions [mullvad-browser]
+   * Bug 253: Rebase Mullvad Browser Stable to 115.5.0esr [mullvad-browser]
+   * Bug 42194: Blank Net Error page on name resolution failure [tor-browser]
+ * Windows + macOS
+   * Bug 42154: Empty the clipboard on browser shutdown only if content comes from private browsing windows [tor-browser]
+ * Build System
+   * All Platforms
+     * Bug 40934: Remove $bundle_locales from signing scripts now that we're on ALL for everything [tor-browser-build]
+     * Bug 40982: Fix logging in tools/signing/do-all-signing [tor-browser-build]
+     * Bug 40989: Add .nobackup files to reproducible and disposable directores [tor-browser-build]
+     * Bug 41006: Fix typo in finished-signing-clean-linux signer [tor-browser-build]
+   * macOS
+     * Bug 29815: Sign our macOS bundles on Linux [tor-browser-build]
+     * Bug 41005: Unpack macOS bundle to /var/tmp instead of /tmp in rcodesign-notary-submit step [tor-browser-build]
+     * Bug 41007: gatekeeper-bundling.sh refers to old .tar.gz archive [tor-browser-build]
+     * Bug 41014: Update libdmg-hfsplus to drop the OpenSSL patch [tor-browser-build]
+     * Bug 41020: Opening MacOS dmg file is causing a warning, since 13.0 [tor-browser-build]
+
 Mullvad Browser 13.5a1 - November 01 2023
  * All Platforms
    * Updated Firefox to 115.4.0esr

projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt

+Tor Browser 13.5a2 - November 27 2023
+ * All Platforms
+   * Updated tor to 0.4.8.9
+   * Bug 42153: Drop dom.enable_resource_timing = false preference [tor-browser]
+   * Bug 42246: Migrate tor connection stuff from browser to toolkit [tor-browser]
+   * Bug 42261: Update the icon of Startpage search engine [tor-browser]
+   * Bug 42276: Rebase Browsers Alpha to 115.5.0esr [tor-browser]
+   * Bug 42277: Enable storage.sync to fix broken webextensions [tor-browser]
+   * Bug 42288: Allow language spoofing in status messages [tor-browser]
+   * Bug 42302: The allowed ports string contains a typo [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 115.5.0esr
+   * Bug 42072: YEC 2023 Takeover for Desktop Stable [tor-browser]
+   * Bug 42188: Donations are asked repeatedly when I click New identity button [tor-browser]
+   * Bug 42194: Blank Net Error page on name resolution failure [tor-browser]
+ * Linux
+   * Bug 17560: Downloaded URLs disk leak on Linux [tor-browser]
+   * Bug 41017: Disable Nvidia shader cache [tor-browser-build]
+ * Android
+   * Updated GeckoView to 115.5.0esr
+   * Bug 41846: firefox-android esr 115 introduced new nimbus use: they need to be disabled [tor-browser]
+   * Bug 42074: YEC 2023 Takeover for Android Stable [tor-browser]
+   * Bug 42258: Replace the current boring "fiery android" icon we use for dev with the cool nightly icon [tor-browser]
+   * Bug 42259: Remove unused firefox branding from Tor Browser for Android [tor-browser]
+   * Bug 42260: Add TBB artifacts to .gitignore [tor-browser]
+   * Bug 42285: Update the gitignore to use the correct paths for tor stuff [tor-browser]
+   * Bug 42287: Backport security fixes (Android & wontfix) from Firefox 120 to 115.5 - based Tor Browser [tor-browser]
+ * Build System
+   * All Platforms
+     * Update Go to 1.21.4
+     * Bug 40884: Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be [tor-browser-build]
+     * Bug 40970: Missing symlink create-blog-post.torbrowser -> create-blog-post symlink [tor-browser-build]
+     * Bug 41006: Fix typo in finished-signing-clean-linux signer [tor-browser-build]
+     * Bug 41023: Update lead.png symlink and blog post template in tools/signing/create-blog-post [tor-browser-build]
+     * Bug 40063: RBM's chroot fails in Fedora [rbm]
+     * Bug 40064: Using exec on project with no git_url/hg_url is causing warning [rbm]
+   * macOS
+     * Bug 41005: Unpack macOS bundle to /var/tmp instead of /tmp in rcodesign-notary-submit step [tor-browser-build]
+     * Bug 41007: gatekeeper-bundling.sh refers to old .tar.gz archive [tor-browser-build]
+     * Bug 41014: Update libdmg-hfsplus to drop the OpenSSL patch [tor-browser-build]
+     * Bug 41020: Opening MacOS dmg file is causing a warning, since 13.0 [tor-browser-build]
+   * Android
+     * Bug 41024: Fix android filenames in Release Prep issue templates [tor-browser-build]
+
+Tor Browser 13.0.5 - November 22 2023
+ * Windows + macOS + Linux
+   * Bug 42072: YEC 2023 Takeover for Desktop Stable [tor-browser]
+ * Build System
+   * All Platforms
+     * Bug 40970: Missing symlink create-blog-post.torbrowser -> create-blog-post symlink [tor-browser-build]
+     * Bug 41023: Update lead.png symlink and blog post template in tools/signing/create-blog-post [tor-browser-build]
+     * Bug 40063: RBM's chroot fails in Fedora [rbm]
+
+Tor Browser 13.0.4 - November 16 2023
+ * All Platforms
+   * Updated OpenSSL to 3.0.12
+   * Updated tor to 0.4.8.9
+   * Bug 42275: Rebase Tor Browser Stable to 115.5.0esr [tor-browser]
+   * Bug 42277: Enable storage.sync to fix broken webextensions [tor-browser]
+ * Windows + macOS + Linux
+   * Updated Firefox to 115.5.0esr
+   * Bug 41341: Fix style and position of "Always Prioritize Onions" wingpanel [tor-browser]
+   * Bug 42108: Tor Circuit button not shown if TLS handshake fails [tor-browser]
+   * Bug 42184: Setting "Homepage and new windows" ignores "Blank Page" value [tor-browser]
+   * Bug 42188: Donations are asked repeatedly when I click New identity button [tor-browser]
+   * Bug 42194: Blank Net Error page on name resolution failure [tor-browser]
+ * Windows + macOS
+   * Bug 42154: Empty the clipboard on browser shutdown only if content comes from private browsing windows [tor-browser]
+ * Android
+   * Updated GeckoView to 115.5.0esr
+   * Bug 42074: YEC 2023 Takeover for Android Stable [tor-browser]
+   * Bug 42287: Backport security fixes (Android & wontfix) from Firefox 120 to 115.5 - based Tor Browser [tor-browser]
+ * Build System
+   * All Platforms
+     * Update Go to 1.21.4
+     * Bug 40934: Remove $bundle_locales from signing scripts now that we're on ALL for everything [tor-browser-build]
+     * Bug 40982: Fix logging in tools/signing/do-all-signing [tor-browser-build]
+     * Bug 40989: Add .nobackup files to reproducible and disposable directores [tor-browser-build]
+     * Bug 41006: Fix typo in finished-signing-clean-linux signer [tor-browser-build]
+   * macOS
+     * Bug 29815: Sign our macOS bundles on Linux [tor-browser-build]
+     * Bug 41005: Unpack macOS bundle to /var/tmp instead of /tmp in rcodesign-notary-submit step [tor-browser-build]
+     * Bug 41007: gatekeeper-bundling.sh refers to old .tar.gz archive [tor-browser-build]
+     * Bug 41014: Update libdmg-hfsplus to drop the OpenSSL patch [tor-browser-build]
+     * Bug 41020: Opening MacOS dmg file is causing a warning, since 13.0 [tor-browser-build]
+
+Tor Browser 13.0.3 - November 06 2023
+ * Android
+   * Bug 42222: Fix TorDomainIsolator initialization on Android [tor-browser]
+
 Tor Browser 13.5a1 - November 01 2023
  * All Platforms
    * Updated OpenSSL to 3.0.12

projects/browser/config

@@ -91,9 +91,9 @@ input_files:
   - URL: https://addons.mozilla.org/firefox/downloads/file/4178438/noscript-11.4.28.xpi
     name: noscript
     sha256sum: 54d076b3226d454216117547f6441d2f95af3057d20f726e55d94b0f22573c14
-  - URL: https://addons.mozilla.org/firefox/downloads/file/4171020/ublock_origin-1.52.2.xpi
+  - URL: https://addons.mozilla.org/firefox/downloads/file/4198829/ublock_origin-1.54.0.xpi
     name: ublock-origin
-    sha256sum: e8ee3f9d597a6d42db9d73fe87c1d521de340755fd8bfdd69e41623edfe096d6
+    sha256sum: 9797160908191710ff0858536ba6dc29ecad9923c30b2ad6d3e5e371d759e44d
     enable: '[% c("var/mullvad-browser") %]'
   - URL: https://cdn.mullvad.net/browser-extension/0.8.4/mullvad-browser-extension-0.8.4.xpi
     name: mullvad-extension

projects/firefox-android/config

@@ -16,7 +16,7 @@ container:
 var:
   fenix_version: 115.2.1
   browser_branch: 13.5-1
-  browser_build: 1
+  browser_build: 2
   variant: Beta
   # This should be updated when the list of gradle dependencies is changed.
   gradle_dependencies_version: 1

projects/firefox/config

@@ -18,7 +18,7 @@ var:
   firefox_version: '[% c("var/firefox_platform_version") %]esr'
   browser_series: '13.5'
   browser_branch: '[% c("var/browser_series") %]-1'
-  browser_build: 1
+  browser_build: 2
   branding_directory_prefix: 'tb'
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]'

projects/geckoview/config

@@ -16,7 +16,7 @@ container:
 var:
   geckoview_version: 115.5.0esr
   browser_branch: 13.5-1
-  browser_build: 1
+  browser_build: 2
   copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]'
   gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser
   git_commit: '[% exec("git rev-parse HEAD") %]'

projects/go/config

 # vim: filetype=yaml sw=2
-version: 1.21.3
+version: 1.21.4
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 container:
   use_container: 1
@@ -119,7 +119,7 @@ input_files:
     enable: '[% ! c("var/linux") %]'
   - URL: 'https://golang.org/dl/go[% c("version") %].src.tar.gz'
     name: go
-    sha256sum: 186f2b6f8c8b704e696821b09ab2041a5c1ee13dcbc3156a13adcf75931ee488
+    sha256sum: 47b26a83d2b65a3c1c1bcace273b69bee49a7a7b5168a7604ded3d26a37bd787
   - project: go-bootstrap
     name: go-bootstrap
     target_replace:

projects/manual/config

 # vim: filetype=yaml sw=2
 # To update, see doc/how-to-update-the-manual.txt
 # Remember to update also the package's hash, with the version!
-version: 112775
+version: 122062
 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
 container:
   use_container: 1
@@ -23,6 +23,6 @@ input_files:
   - project: container-image
   - URL: 'https://build-sources.tbb.torproject.org/manual_[% c("version") %].zip'
     name: manual
-    sha256sum: 57c9c02f5209fdbcb333d902b7ec4bbec3bb08baf34cb97845cf55bc5bdcb744
+    sha256sum: d51ebe27077817bcdabc0b5616c0c58fc14ea6d06f1a0b459051d67a4c13c348
   - filename: packagemanual.py
     name: package_script

projects/tor/config

 # vim: filetype=yaml sw=2
 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]'
-version: 0.4.8.7
+version: 0.4.8.9
 git_hash: 'tor-[% c("version") %]'
 git_url: https://gitlab.torproject.org/tpo/core/tor.git
 git_submodule: 1

projects/translation/config

@@ -12,13 +12,13 @@ compress_tar: 'gz'
 steps:
   base-browser:
     base-browser: '[% INCLUDE build %]'
-    git_hash: 8795469632fe36606cfdd89a4ff90dc4e94b7a83
+    git_hash: 784b5a73a7fd8c75c13097ec6608536dca2780d5
     targets:
       nightly:
         git_hash: 'base-browser'
   tor-browser:
     tor-browser: '[% INCLUDE build %]'
-    git_hash: 791740ded992dea01065a483d761225c30c93ecf
+    git_hash: bae2b2e3b2ef060f7b8c80790b4014041e789288
     targets:
       nightly:
         git_hash: 'tor-browser'
@@ -32,7 +32,7 @@ steps:
     fenix: '[% INCLUDE build %]'
     # We need to bump the commit before releasing but just pointing to a branch
     # might cause too much rebuidling of the Firefox part.
-    git_hash: 546c1131528ab3af0c2300ac9b7ae2c6ca15a4f8
+    git_hash: feb0fdc86630328409dab952e22b78d9b8e6c3cd
     compress_tar: 'zst'
     targets:
       nightly:

rbm.conf

@@ -81,12 +81,12 @@ buildconf:
   git_signtag_opt: '-s'
 
 var:
-  torbrowser_version: '13.5a1'
+  torbrowser_version: '13.5a2'
   torbrowser_build: 'build1'
   torbrowser_incremental_from:
-    - '13.0a4'
     - '13.0a5'
     - '13.0a6'
+    - '13.5a1'
   updater_enabled: 1
   build_mar: 1
   mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]'