We update tools/signing/nightly to fix signing of nightly incrementals.

We also update tools/update-responses/update_responses to fix the regexp
to match .mar and incremental.mar filenames, since the OS now includes
a `-` (except for macos).

We change the incremental filenames to use `--` instead of `-` to
separate OS and old_version, to make it easier to parse since both of
those can include a `-`.

Remove appname_bundle_android, appname_bundle_macos, appname_bundle_linux,
appname_bundle_win32, appname_bundle_win64 from
projects/release/update_responses_config.yml since they are not used
anymore after 9f201283.

- replaced android-components and fenix entries with firefox-android entry
  in
- updated openssl entry to reflect the 3.0.X series tor now uses

FontConfig removed the possibility to configure blanks in its
configuration in 2015, but we kept it, which caused runtime warnings
for years.
In 2017, FontConfig removed the support for this feature altogether, so
it should be safe to remove this part of the configuration.

We have finally renamed the file for Base Browser strings, and moved it
to the same branch as other Base Browser string files.
So, we needed to change the references to the Fluent file (we have one
in Firefox's build file), and then we could drop the references to the
basebrowser-newidentity branch, since it is not used anymore.

Firefox uses the remote name also as GTK's prgname, which is then shown
in some UI elements like GNOME's Alt-Tab.
We used to customize it with --class and --name on Linux, but these
options are lost when restarting the browser after an update.

On other platforms it should not have evident consequences.

Bug 40921: staticiforme-prepare-cdn-dist-upload uses hardcoded torbrowser path for .htacess file generation

fixes tor-browser#41996: App includes com.google.android.gms.permission.AD_ID permission

We added the commit hashes to GeckoView. However, we might have tested
it only with the single-arch testbuilds, because it is not displayed in
regular builds.
Adding the information also to the mozconfig-android-all makes the
commit link available also on them.

We build an old version of uniffi-rs which is consumed only by
application-services.
However, AS includes a newer version in its Cargo.lock and it is
automatically added to the vendor archive, so it can build completely
fine also without this project.

So, we can remove it.

We need to use the -L option when copying MB's Fluent files because on
macOS we symlink ja-JP-mac to ja.

boklm authored 1 year ago and Pier Angelo Vendrame committed 1 year ago

In order to generate incrementals, get mar files from the previous
version from archive.tpo instead of the Mullvad mirrors, since that
release is not always there but should always be on archive.tpo.

Also MB 199: Inject Mullvad Browser-specific localized strings in
projects/firefox.

This project replaces Android Components and Fenix.

Application services needs NSS and SQLCipher.
We had two projects for them, but they are used only by AS.
So, our build scripts were a copy of Mozilla's, and we applied the same
patches.
This meant we needed to keep the build scripts up to date, with all the
additional changes for RBM.
Since no other project depended on them, we can build these libraries
here with Mozilla's scripts, without the need to keep theirs and ours
in sync.

In addition to that, this commit updates the list of Java dependencies.

Android-only toolchain updates.

The previous commit removed zstd from the list of the dependencies in
the README.
This commit restores it and sorts the dependencies.

In some places we use target_replace to replace .*browser-.* targets, in
order to replace the torbrowser-$os-$arch targets. However the regexp we
used would also replace the torbrowser-testbuild target, so we need to
update the regexp to exclude the testbuild target.

FlexFoot authored 1 year ago and Pier Angelo Vendrame committed 1 year ago

Include a README in the final fonts directory to discourage users from
modifying the bundled fonts and to warn them about the consequences
this could have.

We encountered the same problem as llvm-project#62546: we did not have
complete reproducibility on debug symbols.
So, we need to backport the patch that fixes the problem upstream.

To solve a macOS reproducibility project, we backported a patch from
LLVM, but we applied it only to clang and only to macOS to prevent a
rebuild for all the other platforms.
However, a new rebuild is now needed, so we can apply the patch to all
the platforms and all the project using the LLVM source code for
consistency, even though the previous solution was completely fine.

Also copy debug symbols after stripping on Linux 32-bit (we only copied
them in Linux 64-bit) and for all our browsers (previously we copied
them only for Tor Browser).

Include the headers directory with the symbols, because some of them
are generated during the build, but they are needed for debugging.

Adjust indentation and always trim newlines after the template blocks.

The version of tar in stretch does not know how to extract tar.zst
files, so we don't switch to zst for linux builds yet.

var/essential_deps is the same as var/deps, except that we never
redefine it in projects config. This is for the packages we want to
include in every container (even those of projects where we redefine var/deps).