Mullvad Browser 14.0a6

All Platforms

• Bug 344: set media.navigator.enabled = true [mullvad-browser]
• Bug 42718: Remove the firefox-view button from UI, even when always-on private-browsing mode is disabled [tor-browser]
• Bug 42740: Stop trying to hide "Restore previous session" [tor-browser]
• Bug 42831: Remove the shopping components [tor-browser]
• Bug 43072: moz-message-bar does not get announced on Orca screen-reader [tor-browser]
• Bug 43083: Backport fix for Mozilla 1436462 [tor-browser]
• Bug 43144: Ensure non-privacy browsing also sets the GPC header [tor-browser]

Linux

• Bug 43141: Hardcode Arimo as a system-ui font [tor-browser]
• Bug 41237: Add some aliases to our Linux font config for compatibility [tor-browser-build]

Mullvad Browser 14.0a5

All Platforms

• Updated NoScript to 11.4.37
• Bug 328: Provide search engine icons [mullvad-browser]
• Bug 42255: pdfjs.disabled used to be part of RFP until Bug 1838415; lock pref to false in stable [tor-browser]
• Bug 42647: "Switching to a new device" regressed on 128 [tor-browser]
• Bug 42653: The Neterror page has a checkbox to report iframe origin errors to TPO [tor-browser]
• Bug 42777: Remove 'Website Privacy Preferences' and ensure sensible default prefs [tor-browser]
• Bug 43046: Review Mozilla 1866927: Adds ability to enable email tracker blocking protection in private mode [tor-browser]
• Bug 43054: check bounceTrackingProtection in PB mode does not persist to disk [tor-browser]
• Bug 43109: Remove mention of Firefox Relay from settings [tor-browser]
• Bug 43117: Hide 'Always underline links' option [tor-browser]

Linux

• Bug 334: When set as default browser on Linux in standard mode, links don't open correctly [mullvad-browser]

Build System

macOS

• Bug 41231: Use var/browser_release_date in tools/signing/gatekeeper-bundling.sh [tor-browser-build]

Mullvad Browser 14.0a4

All Platforms

• Updated NoScript to 11.4.35
• Bug 329: Remove the Security Levels icon from the toolbar [mullvad-browser]
• Bug 30862: 10ms time precision via EXSLT date-time function [tor-browser]
• Bug 40147: Re-enable Picture-in-Picture mode [tor-browser]
• Bug 41309: Re-enable screenshots component [tor-browser]
• Bug 42601: Check Bug 1894779: Allow font-face urls to be resource:// urls and relax CORS for resource:// URLs [tor-browser]
• Bug 42617: Restore the HTML form on DDG when using safest in 128 [tor-browser]
• Bug 42630: Review LaterRun in 128 [tor-browser]
• Bug 42640: Disable Firefox Flame button due to unknown interactions with New Identity [tor-browser]
• Bug 42684: Disable network prefetch [tor-browser]
• Bug 42685: compat: ESR128: enable textmetrics [tor-browser]
• Bug 42686: Backport Mozilla 1885101 [tor-browser]
• Bug 42730: Make RemoteSettings use only local dumps [tor-browser]
• Bug 42735: Disable recent search suggestions [tor-browser]
• Bug 42745: Remove some residuals from update scripts [tor-browser]
• Bug 42764: Unconditionally disable find-bar transition animation [tor-browser]
• Bug 42867: Disable contentRelevancy component [tor-browser]
• Bug 43100: Backport security fixes from Firefox 130 [tor-browser]
• Bug 43103: Verify whether an update is unsupported before choosing one [tor-browser]

macOS

• Bug 42494: mac: add Arial Black and Arial Narrow to allowlist [tor-browser]

Linux

• Bug 42773: Replace ~ with the original HOME [tor-browser]
• Bug 43092: Disable Wayland by default in 14.0 [tor-browser]

Build System

All Platforms

• Bug 41096: Set SOURCE_DATE_EPOCH in the default env variables [tor-browser-build]
• Bug 41188: Upgrade binutils to 2.41 [tor-browser-build]

Mullvad Browser 13.5.3

All Platforms

• Updated Firefox to 115.15.0esr
• Updated NoScript to 11.4.35
• Bug 332: Rebase Mullvad Browser Stable onto 115.15.0esr [mullvad-browser]
• Bug 40056: Ensure that the lazy loading attribute is ignored on script-disabled documents [tor-browser]
• Bug 42686: Backport Mozilla 1885101 [tor-browser]
• Bug 42829: Prevent CSS-based scriptless interaction tracking [tor-browser]
• Bug 43100: Backport security fixes from Firefox 130 [tor-browser]

Linux

• Bug 43064: Make copy/paste and drag/drop file filtering more specific [tor-browser]

Build System

All Platforms

• Bug 41218: Use new Tor Browser gpg subkey for signing stable releases [tor-browser-build]
• Bug 41222: link_old_mar_filenames still referenced in torbrowser-incrementals-{release,alpha}-unsigned [tor-browser-build]

Mullvad Browser 14.0a3

All Platforms

• Updated Firefox to 128.2.0esr
• Bug 333: Rebase Mullvad Browser Alpha onto 128.2.0esr [mullvad-browser]
• Bug 40056: Ensure that the lazy loading attribute is ignored on script-disabled documents [tor-browser]
• Bug 41817: Add more color aliases that take dark mode into account [tor-browser]
• Bug 42603: Remove safebrowsing URLs [tor-browser]
• Bug 42611: Set clipboard.imageAsFile.enabled to false [tor-browser]
• Bug 42646: Drop patch for tor-browser#40166 [tor-browser]
• Bug 42665: Drop "Learn More" spacing [tor-browser]

Linux

• Bug 43064: Make copy/paste and drag/drop file filtering more specific [tor-browser]

Build System

All Platforms

• Bug 41013: Add a README to each project [tor-browser-build]
• Bug 41222: link_old_mar_filenames still referenced in torbrowser-incrementals-{release,alpha}-unsigned [tor-browser-build]

Mullvad Browser 14.0a2

All Platforms

• Updated Firefox to 128.1.0esr
• Updated NoScript to 11.4.34
• Updated uBlock Origin to 1.59.0
• Bug 326: Rebase Mullvad Browser Alpha onto 128.1.0esr [mullvad-browser]
• Bug 42596: Several console errors: Console.maxLogLevelPref used with a non-existing pref: [tor-browser]
• Bug 42641: Move from panel-footer class to moz-button-group [tor-browser]
• Bug 42644: toolbar rules in panelUI-shared.css are unneccessary [tor-browser]
• Bug 42667: Add description-deemphasized class to our additions to about:preferences [tor-browser]
• Bug 42679: Use a more robust approach to hide the "tracking protection" urlbar button [tor-browser]
• Bug 42699: Drop level="top" attribute from panels [tor-browser]
• Bug 42704: Drop the badged="true" attribute from security level button [tor-browser]
• Bug 42705: Update our preferences to account for new line height [tor-browser]
• Bug 42762: Review Mozilla 1498512: Enable by default setSinkId pref [tor-browser]
• Bug 42788: Review Mozilla 1828606: Add Recently Closed tabs to its own page [tor-browser]
• Bug 42789: Review Mozilla 1830157: Add new telemetry probe to determine how often an extension process had to be... [tor-browser]
• Bug 42792: Review Mozilla 1837097: Implement "Show less frequently" behavior for Pocket suggestions [tor-browser]
• Bug 42810: Review Mozilla 1840584: Support autofilling first name and last name field in a credit card form [tor-browser]
• Bug 42814: Opt out from Firefox relay by default. [tor-browser]
• Bug 42818: Review Mozilla 1841295: Update PocketSuggestions for the final suggestions schema [tor-browser]
• Bug 42835: Filter data transfers containing files [tor-browser]
• Bug 42846: Review Mozilla 1841995: Enable Credit Card Autofill in ES and IT in nightly [tor-browser]
• Bug 42847: Review Mozilla 1841996: Enable Credit Card Autofill in AT, BE, and PL in nightly [tor-browser]
• Bug 42848: Review Mozilla 1841998: Enable Credit Card Autofill for ES,IT,AT,BE and PL locales in release. r=dimi... [tor-browser]
• Bug 42855: Review Mozilla 1843130: Pocket newtab use new recs api for locale list config if new api pref is set [tor-browser]
• Bug 42862: Review Mozilla 1845428: Instrument Translations Panel With Telemetry [tor-browser]
• Bug 42863: Review Mozilla 1847150: Add more TranslationsTelemetry event keys for panel open r=gregtatum, a=dsmith [tor-browser]
• Bug 42864: Review Mozilla 1848845: Pocket newtab migrate existing markets to new API. r=gvn a=RyanVM [tor-browser]
• Bug 42872: Disable translations until audited and solved the UX problems [tor-browser]
• Bug 42886: Review Mozilla 1848048: Add a result menu to disable trending results. r=dao,fluent-reviewers,setting... [tor-browser]
• Bug 42996: Review Mozilla 1517786: Implement and ship CanvasRenderingContext2D.getContextAttributes() [tor-browser]

Windows + macOS

• Bug 42774: Review Mozilla 1848815: Add a user-facing setting to enable enterprise roots import, and enable it by default [tor-browser]
• Bug 43021: Revert the OS deprecation notification introduced in #42347 [tor-browser]

Windows

• Bug 43051: windows: remove UI for "open Tor Browser automatically when computer starts" [tor-browser]

Build System

All Platforms

• Bug 42799: Do not run lint pipelines on new tag [tor-browser]
• Bug 41204: NoScript isn't added automatically to Mullvad Browser changelogs [tor-browser-build]

Windows

• Bug 41185: Drop Windows 7 support for 14.0 from build tools [tor-browser-build]
• Bug 41201: Bump the Windows version checked by the installer [tor-browser-build]

Mullvad Browser 13.5.2

All Platforms

• Updated Firefox to 115.14.0esr
• Updated NoScript to 11.4.31
• Updated uBlock Origin to 1.59.
• Bug 325: Rebase Mullvad Browser Stable onto 115.14.0esr [mullvad-browser]

Mullvad Browser 14.0a1

⚠️ macOS crash

Due to an update of the signing toolchain, the macOS build is crashing. We have removed it.

All Platforms

• Updated Firefox to 128.0esr
• Bug 42441: Evaluate RR version-by-RR version rebases instead of ESR-to-ESR [tor-browser]
• Bug 42683: Create script to generate issue triage csv's from bugzilla query and git scraping [tor-browser]
• Bug 42687: Disable Privacy-Preserving Attribution [tor-browser]

Windows

• Bug 320: Temporarily disable WebRTC and the default browser agent on Windows [mullvad-browser]

Linux

• Bug 314: Mullvad Browser is not listed as a possible default browser application for Gnome on Ubuntu / Fedora [mullvad-browser]

Build System

All Platforms

• Bug 42470: Add merge request CI for linting [tor-browser]
• Bug 42722: clang-format and localization linters are not running [tor-browser]
• Bug 40964: Create new Tor Browser gpg subkey [tor-browser-build]
• Bug 41155: Update toolchains for ESR128 [tor-browser-build]
• Bug 41156: Split the Rust configuration options [tor-browser-build]
• Bug 41166: Use the GitHub repository for firefox-l10n [tor-browser-build]
• Bug 41176: Update list of people with github commit access in MB issue templates [tor-browser-build]
• Bug 41190: Add morgan.gpg to keyrings and list of valid keyrings in firefox+geckoview [tor-browser-build]
• Bug 41191: Remove richard.gpg from keyrings and list of valid keyrings in firefox+geckoview [tor-browser-build]
• Bug 40078: Update tools/tb-build-06-start-nightly-build after tor-browser-build#40829 [tor-browser-bundle-testsuite]

Windows

• Bug 29318: Drop mingw-w64/gcc toolchain [tor-browser-build]
• Bug 29320: Use mingw-w64/clang toolchain to build Rust [tor-browser-build]
• Bug 41167: Stop generating an MB "portable" windows install and output a single build from 13.5 release [tor-browser-build]
• Bug 41177: Include Windows installer without -portable- in download json files [tor-browser-build]

Linux

• Bug 41173: Fix permission issue on files in the debian directory [tor-browser-build]

Windows + macOS

• Bug 41197: Modify update-responses to prevent upgrades on unsupported Windows and macOS versions [tor-browser-build]

Mullvad Browser 13.5.1

All Platforms

• Updated Firefox to 115.13.0esr
• Bug 317: Rebase Mullvad Browser stable onto 115.13.0esr [mullvad-browser]
• Bug 42693: Backports security fixes from Firefox 128 [tor-browser]

Linux

• Bug 314: Mullvad Browser is not listed as a possible default browser application for Gnome on Ubuntu / Fedora [mullvad-browser]

Build System

All Platforms

• Bug 41166: Use the GitHub repository for firefox-l10n [tor-browser-build]
• Bug 41173: Fix permission issue on files in the debian directory [tor-browser-build]

Windows

• Bug 41177: Include Windows installer without -portable- in download json files [tor-browser-build]

Mullvad Browser 13.5

ℹ️ Deb and rpm packages are now available through our repositories.

These packages are designed exclusively for installation via our repositories to ensure automatic updates.
Installing them directly bypasses this mechanism, and you won't receive in-browser notifications about new updates.

To add the repositories to Fedora/Ubuntu/Debian, follow the instructions on the download page.

Blog post

Check our the corresponding blog post.

Changelog

All Platforms

• Hide "List all tabs" when the tabs don't overflow [mullvad-browser]
• Make User-Agent request header match RFP's navigator.userAgent [mullvad-browser]
• Move network.proxy.failover_direct=false pref to base-browser [mullvad-browser]
• Update nightly mar signing key [mullvad-browser]
• Mouse-over long links causes the browser element to re-center relative to width of status tooltip [mullvad-browser]
• Should we reflect the actual channel in about:debugging? [mullvad-browser]
• The Letterboxing>Content Alignment heading doesn't follow the Firefox design document capitalization [mullvad-browser]
• Add default bookmarks in the alpha channels for testing [mullvad-browser]
• Consider dropping protection against line-height introduced in #23104 [tor-browser]
• compat: beacon: re-enable the API but transform it to a no-op [tor-browser]
• Letterboxing preferences UI [tor-browser]
• Make the appearance of letterboxing look more intentional [tor-browser]
• Add option to reuse last window size when letterboxing is enabled [tor-browser]
• intl.accept_languages gets into a stuck modifed state [tor-browser]
• Drop dom.enable_resource_timing = false preference [tor-browser]
• browser.startup.homepage and TOR_DEFAULT_HOMEPAGE are ignored for the new window opened by New Identity [tor-browser]
• Correctly round new windows when bookmarks toolbar is set to "Only Show on New Tab" [tor-browser]
• Fluent migration: new identity [tor-browser]
• Fluent migration: security level [tor-browser]
• compat: why is eventCounts undefined? [tor-browser]
• Visual noise in 13.5a4 letterboxing [tor-browser]
• Betterboxing: gradient is never shown [tor-browser]
• Betterboxing: make the decorator border disappear when the corners are flat [tor-browser]
• Change RFP-spoofed Timezone from UTC to a real-world, less discriminable one [tor-browser]
• Include Alpha and Nightly in MOZ_APP_DISPLAYNAME (and possibly in other places) [tor-browser]
• Fix betterboxing + findbar horizontal bounce if the scrollbar is not an overlay [tor-browser]
• Shrink the window to match letterboxing size when the emtpy area is doble-clicked [tor-browser]
• Install svg from branding theme to browser/chrome/icons/default [tor-browser]
• When startup window is maximized per letterboxing.rememberSize on startup, the restore button shrinks it to its minimum size [tor-browser]
• Update the profile directory patch to check both for system-install and for is-packaged-app file [tor-browser]
• Correctly record new initial window size after auto-shrinking [tor-browser]
• Try not to spoof system-ui in contexts exempt from RFP [tor-browser]
• Move base-browser.ftl Fluent file from "browser" to "toolkit" [tor-browser]
• Exempt pdf.js from letterboxing [tor-browser]
• Modify moz-support-link [tor-browser]

Windows + macOS

• Win ≤8.1 and macOS ≤10.14 not supported in ESR 128 [tor-browser]
• Add a banner warning users about the upcoming EOL for Win ≤8.1 and macOS ≤10.14 [tor-browser]
• Add support link to OS deprecation message [tor-browser]

Windows

• Create asset(s) for the Mullvad Browser installer [mullvad-browser]
• Disable setting default browser on Windows [mullvad-browser]
• windows: FontSubstitutes can leak system locale [tor-browser]
• Add filetype association to the installer of Mullvad Browser [tor-browser-build]

macOS

• Create build-specific installer for macOS [tor-browser-build]

Linux

• Include *.deb in the list of files to gpg sign [tor-browser-build]
• deb installation package for Linux [mullvad-browser]
• rpm installation package for Linux [mullvad-browser]
• Filepicker string chars are tofu for the .deb package in Ubuntu 22.04 / Debian 11 [mullvad-browser]
• Adapt the data import wizard to use the original $HOME on Linux [tor-browser]
• 13.5a7's start-tor-browser seems to break KeePassXC-Browser? [tor-browser-build]

Build System

All Platforms

• Move --disable-eme to OS- and architecture-specific mozconfigs [mullvad-browser]
• Deb package in the debian software installer is showing the License as "Proprietary" [mullvad-browser]
• Enable GeckoDriver for all desktop platforms [tor-browser]
• Update mach to work with python 3.12 [tor-browser]
• Bump the various branches to 13.5 on main [tor-browser-build]
• Create Release Prep MR generating script [tor-browser-build]
• Add command to unsign .mar files and compare with sha256sums-unsigned-build.txt [tor-browser-build]
• Add RPM dependencies to README [tor-browser-build]
• Sign mullvad-browser nightly updates [tor-browser-build]
• Dump more information about build times on Firefox [tor-browser-build]
• make fetch is not fetching mullvad repo [tor-browser-build]
• Set correct updater_url for Mullvad Browser nightly builds [tor-browser-build]
• Update detailsURL in tools/signing/nightly/update-responses-base-config.yml [tor-browser-build]
• Remove use of projects/browser/run_scripts [tor-browser-build]
• Update projects/browser/Bundle-Data/Docs/Licenses/NoScript.txt [tor-browser-build]
• Update README for Ubuntu 24.04 unprivileged user namespace changes [tor-browser-build]
• Update keyring/boklm.gpg for new subkeys [tor-browser-build]
• Explicitly fetch tags in the release preparation script [tor-browser-build]
• Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be [tor-browser-build]
• Add an option to create zip files using 7z [rbm]
• Move capture_exec to a separate module [rbm]
• We should remove ./ when using 7-zip for zip files [rbm]
• Correctly refresh file when computing input_files_id and a file is set as refresh_input [rbm]

Windows

• Build system installer for Mullvad Browser on Windows [mullvad-browser]
• Use Clang to compile NSIS [tor-browser-build]
• Update NSIS to 3.09 [tor-browser-build]
• Do a cleanup of the NSIS script [tor-browser-build]
• Include the ShellLink plugin in NSIS [tor-browser-build]
• Draft the new installer for Mullvad Browser [tor-browser-build]
• $app_bundle is missing the final .app in projects/firefox/build [tor-browser-build]
• authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build]
• Explicitly initialize the plugin directory on the Windows installer [tor-browser-build]
• Stop generating an MB "portable" windows install [tor-browser-build]

macOS

• Remove old macos signing scripts [tor-browser-build]
• Since TB/MB 13.5a5 macos signed installers contain all .DS_Store [tor-browser-build]

Linux

• Add mozconfig-linux-aarch64 [tor-browser]
• Use the final path for Linux debug symbols [tor-browser-build]
• Make deb package for Mullvad Browser [tor-browser-build]
• Fix indentation of projects/browser/RelativeLink/start-browser [tor-browser-build]
• Make rpm package for Mullvad Browser [tor-browser-build]