Bug 41058: Update Snowflake to 2.8.1

Merge Info

Related Issues

• #41058 (closed)

Backporting

Timeline

• Immediate: patchset needed as soon as possible
• Next Minor Stable Release: patchset that needs to be verified in nightly before backport
• Eventually: patchset that needs to be verified in alpha before backport
• No Backport (preferred): patchset for the next major stable

(Optional) Justification

• Emergency security update: patchset fixes CVEs, 0-days, etc
• Censorship event: patchset enables censorship circumvention
• Critical bug-fix: patchset fixes a bug in core-functionality
• Consistency: patchset which would make development easier if it were in both the alpha and release branches; developer tools, build system changes, etc
• Sponsor required: patchset required for sponsor
• Other: please explain

Issue Tracking

• Link resolved issues with appropriate Release Prep issue for changelog generation

Review

Request Reviewer

• Request review from an applications developer depending on modified system:
  • NOTE: if the MR modifies multiple areas, please /cc all the relevant reviewers (since gitlab only allows 1 reviewer)
  • accessibility : henry
  • android : clairehurst, dan
  • build system : boklm
  • extensions : ma1
  • firefox internals (XUL/JS/XPCOM) : ma1
  • fonts : pierov
  • frontend (implementation) : henry
  • frontend (review) : donuts, richard
  • localization : henry, pierov
  • macos : clairehurst, dan
  • nightly builds : boklm
  • rebases/release-prep : boklm, dan, ma1, pierov, richard
  • security : ma1
  • signing : boklm, richard
  • updater : pierov
  • misc/other : pierov, richard

Change Description

Updates the Snowflake to tag v2.8.1 and enables gpg tag and anti-censorship.gpg keyring requirement to the project.

How Tested

Doing a local build now.

EDIT: verified linux builds the v2.8.1 tag and the sig is verified:

$ ./rbm/rbm build snowflake --target torbrowser-linux-x86_64
Using file /home/pospeselr/Projects/tor-browser-build-alpha/out/container-image/container-image_stretch-amd64-323180213d81.tar.gz
Using file /home/pospeselr/Projects/tor-browser-build-alpha/out/go/go-1.21.5-linux-x86_64-2d5332.tar.gz
Using file /home/pospeselr/Projects/tor-browser-build-alpha/out/snowflake/go_vendor/snowflake-vendor-a0e3e871c464-7eec2d.tar.gz
Tag v2.8.1 is signed with key 5A618CE840883942BAF1334F009DE379FD9B7B90
Created /home/pospeselr/Projects/tor-browser-build-alpha/tmp/rbm-GyaPFD/rbm-dqD0J/snowflake-a0e3e871c464.tar.gz
Build log: /home/pospeselr/Projects/tor-browser-build-alpha/logs/snowflake-linux-x86_64.log