As the xz version on the host can be different and produce different
output, we compress the firefox source tarball inside a container.

At the same time we use xz's --threads option to make compression
faster by using multiple threads.

We also move the src-tarballs step definition from rbm.conf to
projects/firefox/config since it's not used in any other project.

This is a Tor Browser-only release to update the domain front CDN.

Cecylia Bocovich authored 1 year ago and Pier Angelo Vendrame committed 1 year ago

As of March 1st, foursquare.com renewed its certificate and domain
fronting stopped working through this front according to fastly's new
policy: https://github.com/net4people/bbs/issues/309

(cherry picked from commit 800e2fff)

(cherry picked from commit 6778ba32)

(cherry picked from commit 98943bdf)

The IO::CaptureOutput perl module is deprecated, so we switch to
Capture::Tiny. We also remove some uses of IO::CaptureOutput where it
was not needed.

- add #41066 to changelog

Our APK was refused by the Play Store as too big.
As a workaround, for this release we can try to compress the APK more,
by extracting it and repacking it with 7-zip.
The preferred and long-term solution would be to switch to Android App
Bundles, but this might require some changes to our signing scripts.

- updated changelog

After a reboot, the time on our signing machine is incorrect. To avoid
signing a release with incorrect timestamps, we set the time on the
signing machine at the beginning of the signing process.


(cherry picked from commit de4e1feb)

(cherry picked from commit 0fe87b4a)

Tor Browser gpg key has been updated with a new expiration date on its
current subkey.


(cherry picked from commit 07f2eace)

(cherry picked from commit 4ea089e4)

We need to do some path manipulation in some Firefox code that is run
before initializing XPCOM.
So, the alternatives are either Path* functions from shlwapi, or
std::filesystem, which is disabled in Firefox 115.

Mozilla enabled it starting from 116, but we have been told it is okay
to enable it also in 115, so we do it with this patch.

Debian bookworm became the new stable in June 2023, so we should update
our containers to use it.

On macOS the update did not cause any issue, and just updating the
suite name worked.
On Windows, it caused some problems where we used the strip provided by
the OS (only for tor, it seems), because the new version of strip seems
to update the timestamps by default.

We are delaying the process for Android because there are still a
couple of projects that require Java 11, which is not available on
bookworm.

Go 1.21 removed support for Windows 7 and 8.
However, Firefox still supports them, so some users try Tor Browser but
cannot use PTs.
We cannot replicate the problem on our Windows 7 systems, but using Go
1.20.x for Windows should solve the problem for them.
Snowflake is still on 1.21 because it is needed for some Pion changes.

Pass the new version of components as arguments to avoid having to
change the changelog output after it has been generated by the script.

Add a file to make it easier to detect the version of Mullvad Browser
installed, like the tbb_version.json file we have in Tor Browser.