Mullvad Browser 13.0.10

All platforms

• Updated Firefox to 115.8.0esr
• Updated mullvad-browser-extension to 0.8.5
• Rebase Mullvad Browser Stable onto Firefox 115.8.0esr [mullvad-browser]
• Spoof english leaks via numberingSystem: numbers (non-latn) or decimal separator (latn) [tor-browser]

Build System

All Platforms

• Set time on signing machine before starting signing [tor-browser-build]
• Use Capture::Tiny instead of IO::CaptureOutput [tor-browser-build]
• Switch from IO::CaptureOutput to Capture::Tiny [rbm]
• Make stdout and stderr utf8 [rbm]

Mullvad Browser 13.5a4

All Platforms

• Updated Firefox to 115.7.0esr
• Updated uBlock Origin to 1.55.0
• Bug 261: Rebase Mullvad Browser Alpha onto Firefox 115.7.0esr
• Bug 41917: Make the appearance of letterboxing look more intentional
• Bug 42374: spoof english leaks via numberingSystem: numbers (non-latn) or decimal separator (latn)

Build System

All Platforms

• Bug 42337: Enable GeckoDriver for all desktop platforms
• Bug 41037: Set time on signing machine before starting signing
• Bug 41045: Dump more information about build times on Firefox
• Bug 41056: Make it possible to use templates in var/torbrowser_incremental_from
• Bug 41057: make fetch is not fetching mullvad repo
• Bug 41059: Update keyring/torbrowser.gpg with updated key

Windows

• Bug 40606: Use Clang to compile NSIS
• Bug 40900: Update NSIS to 3.09
• Bug 41065: Do a cleanup of the NSIS script

Linux

• Bug 41046: Use the final path for Linux debug symbols

Mullvad Browser 13.0.9

All platforms

• Updated Firefox to 115.7.0esr
• Updated uBlock Origin to 1.55.0
• Bug 249: BrowserHost has null mRoot when applying initial window size in debug
• Bug 260: Rebase Mullvad Browser Stable onto Firefox 115.7.0esr
• Bug 42189: Assertion failure: the value of mPrivateBrowsingId in the loadContext and in the loadInfo are not the same!
• Bug 41044: Add tbb_version.json-like file for Mullvad Browser

Linux

• Bug 41050: Improve the disk leak sanitization on start-$browser

Build System

All Platforms

• Bug 41042: Add options to include updates in the changelog
• Bug 41043: Create script to push build requests to Mullvad build servers
• Bug 41056: Make it possible to use templates in var/torbrowser_incremental_from
• Bug 41059: Update keyring/torbrowser.gpg with updated key

Windows + macOS

• Bug 41016: Switch from bullseye to bookworm for desktop platforms

Windows

• Bug 41015: Enable std::filesystem on libc++ on Windows

Mullvad Browser 13.5a3

Browser

All Platforms

• Updated Firefox to 115.6.0esr
• Updated NoScript to 11.4.29
• Bug 249: BrowserHost has null mRoot when applying initial window size in debug [mullvad-browser]
• Bug 256: Update nightly mar signing key [mullvad-browser]
• Bug 258: Rebase Mullvad Browser alpha onto 115.6.0esr [mullvad-browser]
• Bug 42042: view-source:http://ip-address does not work because of HTTPS Only [tor-browser]
• Bug 42189: Assertion failure: the value of mPrivateBrowsingId in the loadContext and in the loadInfo are not the same! [tor-browser]
• Bug 42335: Do not localize the order of locales for app lang [tor-browser]
• Bug 41044: Add tbb_version.json-like file for Mullvad Browser [tor-browser-build]

Windows

• Bug 42163: Make the 3rd party DLL blocklist obey portable mode [tor-browser]

Linux

• Bug 41050: Improve disk leak sanitization on startup [tor-browser]

Build System

All Platforms

• Bug 40995: Use cdn.stagemole.eu instead of cdn.devmole.eu in download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
• Bug 41026: Do not use ~ when uploading the signed hashes [tor-browser-build]
• Bug 41027: Remove tb-build-04 and tb-build-05 from tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
• Bug 41031: Add command to unsign .mar files and compare with sha256sums-unsigned-build.txt [tor-browser-build]
• Bug 41039: Update tools/signing/upload-update_responses-to-staticiforme to keep download-*json files from previous release when new release does not include them [tor-browser-build]
• Bug 41041: Sign mullvad-browser nightly updates [tor-browser-build]
• Bug 41042: Add options to include updates in the changelog scripts [tor-browser-build]
• Bug 41043: Create script to push build requests to Mullvad build servers [tor-browser-build]

Windows + macOS

• Bug 41016: Switch from bullseye to bookworm for desktop platforms [tor-browser-build]

Windows

• Bug 41015: Enable std::filesystem on libc++ on Windows [tor-browser-build]
• Bug 41030: Add command to unsign .exe files and compare with sha256sums-unsigned-build.txt [tor-browser-build]

macOS

• Bug 40990: Remove old macos signing scripts [tor-browser-build]

Mullvad Browser 13.0.7

All Platforms

Updated Firefox to 115.6.0esr

• Bug 42042: view-source:http://ip-address does not work because of HTTPS Only [tor-browser]

Build System

All Platforms

• Bug 40884: Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be [tor-browser-build]
• Bug 41026: Do not use ~ when uploading the signed hashes [tor-browser-build]
• Bug 41039: Update tools/signing/upload-update_responses-to-staticiforme to keep download-*json files from previous release when new release does not include them [tor-browser-build]

macOS

• Bug 40990: Remove old macos signing scripts [tor-browser-build]

Mullvad Browser 13.0.6

All Platforms

• Bug 42288: Allow language spoofing in status messages [tor-browser]
• Updated uBlock Origin to 1.54.0

Linux

• Bug 17560: Downloaded URLs disk leak on Linux [tor-browser]
• Bug 42306: Tor Browser crashes when extensions popups are opened with Wayland enabled [tor-browser]
• Bug 41017: Disable Nvidia shader cache [tor-browser-build]

Build System

All Platforms

• Bug 41027: Remove tb-build-04 and tb-build-05 from tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
• Bug 40936: Revert tor-browser-build#40933 [tor-browser-build]
• Bug 40970: Missing symlink create-blog-post.torbrowser -> create-blog-post symlink [tor-browser-build]
• Bug 40995: Use cdn.stagemole.eu instead of cdn.devmole.eu in download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
• Bug 40063: RBM's chroot fails in Fedora [rbm]
• Bug 40064: Using exec on project with no git_url/hg_url is causing warning [rbm]
• Windows + macOS + Linux
• Bug 41031: Add command to unsign .mar files and compare with sha256sums-unsigned-build.txt [tor-browser-build]

Windows

• Bug 41030: Add command to unsign .exe files and compare with sha256sums-unsigned-build.txt [tor-browser-build]

Mullvad Browser 13.5a2

All Platforms

• Updated Firefox to 115.5.0esr
• Updated uBlock Origin to 1.54.0
• Bug 250: Enable storage.sync to fix broken webextensions [mullvad-browser]
• Bug 254: Rebase Mullvad Browser Alpha to 115.5.0esr [mullvad-browser]
• Bug 42153: Drop dom.enable_resource_timing = false preference [tor-browser]
• Bug 42194: Blank Net Error page on name resolution failure [tor-browser]
• Bug 42276: Rebase Browsers Alpha to 115.5.0esr [tor-browser]
• Bug 42288: Allow language spoofing in status messages [tor-browser]

Linux

• Bug 17560: Downloaded URLs disk leak on Linux [tor-browser]
• Bug 41017: Disable Nvidia shader cache [tor-browser-build]

Build System

All Platforms

• Bug 40884: Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be [tor-browser-build]
• Bug 40970: Missing symlink create-blog-post.torbrowser -> create-blog-post symlink [tor-browser-build]
• Bug 41006: Fix typo in finished-signing-clean-linux signer [tor-browser-build]
• Bug 40063: RBM's chroot fails in Fedora [rbm]
• Bug 40064: Using exec on project with no git_url/hg_url is causing warning [rbm]

macOS

• Bug 41005: Unpack macOS bundle to /var/tmp instead of /tmp in rcodesign-notary-submit step [tor-browser-build]
• Bug 41007: gatekeeper-bundling.sh refers to old .tar.gz archive [tor-browser-build]
• Bug 41014: Update libdmg-hfsplus to drop the OpenSSL patch [tor-browser-build]
• Bug 41020: Opening MacOS dmg file is causing a warning, since 13.0 [tor-browser-build]

Mullvad Browser 13.0.4

All Platforms

• Updated Firefox to 115.5.0esr
• Updated uBlock Origin to 1.53.0
• Bug 250: Enable storage.sync to fix broken webextensions [mullvad-browser]
• Bug 253: Rebase Mullvad Browser Stable to 115.5.0esr [mullvad-browser]
• Bug 42194: Blank Net Error page on name resolution failure [tor-browser]

Windows + macOS

• Bug 42154: Empty the clipboard on browser shutdown only if content comes from private browsing windows [tor-browser]

Build

All Platforms

• Bug 40934: Remove $bundle_locales from signing scripts now that we're on ALL for everything [tor-browser-build]
• Bug 40982: Fix logging in tools/signing/do-all-signing [tor-browser-build]
• Bug 40989: Add .nobackup files to reproducible and disposable directores [tor-browser-build]
• Bug 41006: Fix typo in finished-signing-clean-linux signer [tor-browser-build]

macOS

• Bug 29815: Sign our macOS bundles on Linux [tor-browser-build]
• Bug 41005: Unpack macOS bundle to /var/tmp instead of /tmp in rcodesign-notary-submit step [tor-browser-build]
• Bug 41007: gatekeeper-bundling.sh refers to old .tar.gz archive [tor-browser-build]
• Bug 41014: Update libdmg-hfsplus to drop the OpenSSL patch [tor-browser-build]
• Bug 41020: Opening MacOS dmg file is causing a warning, since 13.0 [tor-browser-build]

Mullvad Browser 13.5a1

All Platforms

• Updated Firefox to 115.4.0esr
• Updated NoScript to 11.4.28
• Bug 246: Add the last Mullvad Browser Extension (0.8.4) to 13.0 [mullvad-browser]
• Bug 42182: Default Search Engine Does Not Persist Through Shift to New Identity [tor-browser]
• Bug 42191: Backport security fixes (Android & wontfix) from Firefox 119 to 115.4 - based Tor Browser [tor-browser]

Windows + macOS

• Bug 42154: Empty the clipboard on browser shutdown only if content comes from private browsing windows [tor-browser]

Build System

All Platforms

• Bug 40934: Remove $bundle_locales from signing scripts now that we're on ALL for everything [tor-browser-build]
• Bug 40982: Fix logging in tools/signing/do-all-signing [tor-browser-build]
• Bug 40983: Bump the various branches to 13.5 on main [tor-browser-build]
• Bug 40989: Add .nobackup files to reproducible and disposable directores [tor-browser-build]

Windows

• Bug 40984: The PDBs for .exe are not included [tor-browser-build]

macOS

• Bug 29815: Sign our macOS bundles on Linux [tor-browser-build]

Mullvad Browser 13.0.1

All Platforms

• Updated Firefox to 115.4.0esr
• Bug 42182: Default Search Engine Does Not Persist Through Shift to New Identity [tor-browser]
• Bug 42185: Rebase stable browsers on top of 115.4.0esr [tor-browser]
• Bug 42191: Backport security fixes (Android & wontfix) from Firefox 119 to 115.4 - based Tor Browser [tor-browser]

Build System

Windows + Linux

• Bug 40991: Fix creation of downloads-windows-x86_64.json and downloads-linux-x86_64.json [tor-browser-build]

Windows

• Bug 40984: The PDBs for .exe are not included [tor-browser-build]