Prepare stable release 11.0.8 (Android)

fenix

• Backport any required patches (forked from last alpha)
• Sign/Tag commit: tor-browser-96.3.0-11.0-1-build1
• Push tag to origin

android-components

• Backport any required patches
• Sign/Tag commit: android-components-96.0.15-11.0-1-build1
• Push tag to origin

geckoview

• Backport any required patches
• Sign/Tag commit: geckoview-96.0-11.0-1-build1
• Push tag to origin

tor-browser-build

• Backport any required patches
• Update rbm.conf
  • var/torbrowser_version : update to next version
  • var/torbrowser_build : update to $(TOR_BROWSER_BUILD_N)
• (Android Only) Update allowed_addons.json by running (from tor-browser-build root)`./tools/fetch_allowed_addons.py > projects/tor-browser/allowed_addons.json
• Check for NoScript updates here : https://addons.mozilla.org/en-US/firefox/addon/noscript
  • NONE
• Check for openssl updates here : https://github.com/openssl/openssl/tags
  • NONE
• Check for tor updates here : http://eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/tpo/core/tor/-/tags ; Tor Browser Alpha uses -alpha tagged tor, while stable uses the stable series
  • If new tor version is available, update projects/tor/config.version -> 0.4.7.4-alpha
• Check for go updates here : https://golang.org/dl (Tor Browser Alpha uses the latest Stable go version, while Tor Browser Stable uses the latest of the previous Stable major series version (eg: if Tor Browser Alpha is on the go1.17 series, Tor Browser Stable is on the go1.16 series)
  • If new go version is available, update projects/go/config
    • version -> 1.16.15
    • input_files/sha256sum for go -> 90a08c689279e35f3865ba510998c33a63255c36089b3ec206c912fc0568c3d3
• Update ChangeLog.txt
• Open MR with above changes
• Sign/Tag commit : make signtag-(alpha|release)
• Push tag to origin

blog

• Duplicate previous Stable or Alpha release blog post as appropriate to new directory under content/blog/new-release-tor-browser-$(TOR_BROWSER_VERSION) and update with info on release :
  • Update Tor Browser version numbers
  • Note any ESR rebase
  • Link to any Firefox security updates
  • Note any updates to :
    • tor
    • openssl
    • go
    • noscript
  • Convert ChangeLog.txt to markdown format used here by : tor-browser-build/tools/changelog-format-blog-post
• Push to origin as new branch, open 'Draft :' MR
• Remove draft from MR once signed-packages are uploaded

website

• databags/versions.ini : Update the downloads versions
  • torbrowser-stable/version : sort of a catch-all for latest stable version
  • torbrowser-stable/win32 : tor version in the expert bundle
  • torbrowser-*-stable/version : platform-specific stable versions
  • torbrowser-*-alpha/version : platform-specific alpha versions
  • tor-stable,tor-alpha : set by tor devs, do not touch
• Push to origin as new branch, open 'Draft :' MR
• Remove draft from MR once signed-packages are uploaded

unsigned build uploads

• Upload unsigned builds to people.torproject.org
• Email tor-qa@lists.torproject.org with links to unsigned builds

signing

TODO

signed build uploads

TODO