Mullvad Browser 13.0.12

All Platforms

• Updated Firefox to 115.9.0esr
• Updated mullvad-browser-extension to 0.9.0
• Updated uBlock Origin to 1.56.0
• Mullvad support email has changed from [email protected] to [email protected] [mullvad-browser]
• Rebase Mullvad Browser stable onto Firefox 115.9.0esr [mullvad-browser]
• The placeholder of datetime inputs keeps being localized when spoof English is on [tor-browser]
• spoof english + htmlform <details> can leak app language [tor-browser]

Windows

• Hidden fonts are automatically added to the allow list [tor-browser]

Build System

All Platforms

• kick_devmole_build script prints wrong URL for Mullvad's build hashes [tor-browser-build]
• authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build]
• src archive does not match likely due to mismatched xz-utils version [tor-browser-build]

Mullvad Browser 13.5a5

All Platforms

• Updated Firefox to 115.8.0esr
• Updated uBlock Origin to 1.56.0
• Updated mullvad-browser-extension to 0.8.5
• Bug 262: Mouse-over long links causes the browser element to re-center relative to width of status tooltip [mullvad-browser]
• Bug 268: Rebase Mullvad Browser Alpha onto 115.8.0esr [mullvad-browser]
• Bug 42376: The placeholder of datetime inputs keeps being localized when spoof English is on [tor-browser]
• Bug 42378: spoof english + htmlform
  can leak app language [tor-browser]
• Bug 42387: Visual noise in 13.5a4 letterboxing [tor-browser]
• Bug 42389: Betterboxing: gradient is never shown [tor-browser]
• Bug 42390: Betterboxing: make the decorator border disappear when the corners are flat [tor-browser]
• Bug 42397: Change RFP-spoofed Timezone from UTC to a real-world, less discriminable one [tor-browser]
• Bug 42398: Include Alpha and Nightly in MOZ_APP_DISPLAYNAME (and possibly in other places) [tor-browser]
• Bug 42423: Move temporary Lox Fluent strings to new file [tor-browser]

macOS

• Bug 40569: Create build-specific installer for macOS [tor-browser-build]

Build System

All Platforms

• Bug 41038: Add RPM dependencies to README [tor-browser-build]
• Bug 41067: Use Capture::Tiny instead of IO::CaptureOutput [tor-browser-build]
• Bug 41072: Set correct updater_url for Mullvad Browser nightly builds [tor-browser-build]
• Bug 41081: Update detailsURL in tools/signing/nightly/update-responses-base-config.yml [tor-browser-build]
• Bug 41085: kick_devmole_build script prints wrong URL for Mullvad's build hashes [tor-browser-build]
• Bug 40068: Switch from IO::CaptureOutput to Capture::Tiny [rbm]
• Bug 40069: Make stdout and stderr utf8 [rbm]
• Bug 40071: Add an option to create zip files using 7z [rbm]
• Bug 40072: Move capture_exec to a separate module [rbm]

Windows

• Bug 41076: Include the ShellLink plugin in NSIS [tor-browser-build]
• Bug 41077: Draft the new installer for Mullvad Browser [tor-browser-build]

macOS

• Bug 41084: $app_bundle is missing the final .app in projects/firefox/build [tor-browser-build]

Mullvad Browser 13.0.10

All platforms

• Updated Firefox to 115.8.0esr
• Updated mullvad-browser-extension to 0.8.5
• Rebase Mullvad Browser Stable onto Firefox 115.8.0esr [mullvad-browser]
• Spoof english leaks via numberingSystem: numbers (non-latn) or decimal separator (latn) [tor-browser]

Build System

All Platforms

• Set time on signing machine before starting signing [tor-browser-build]
• Use Capture::Tiny instead of IO::CaptureOutput [tor-browser-build]
• Switch from IO::CaptureOutput to Capture::Tiny [rbm]
• Make stdout and stderr utf8 [rbm]

Mullvad Browser 13.5a4

All Platforms

• Updated Firefox to 115.7.0esr
• Updated uBlock Origin to 1.55.0
• Bug 261: Rebase Mullvad Browser Alpha onto Firefox 115.7.0esr
• Bug 41917: Make the appearance of letterboxing look more intentional
• Bug 42374: spoof english leaks via numberingSystem: numbers (non-latn) or decimal separator (latn)

Build System

All Platforms

• Bug 42337: Enable GeckoDriver for all desktop platforms
• Bug 41037: Set time on signing machine before starting signing
• Bug 41045: Dump more information about build times on Firefox
• Bug 41056: Make it possible to use templates in var/torbrowser_incremental_from
• Bug 41057: make fetch is not fetching mullvad repo
• Bug 41059: Update keyring/torbrowser.gpg with updated key

Windows

• Bug 40606: Use Clang to compile NSIS
• Bug 40900: Update NSIS to 3.09
• Bug 41065: Do a cleanup of the NSIS script

Linux

• Bug 41046: Use the final path for Linux debug symbols

Mullvad Browser 13.0.9

All platforms

• Updated Firefox to 115.7.0esr
• Updated uBlock Origin to 1.55.0
• Bug 249: BrowserHost has null mRoot when applying initial window size in debug
• Bug 260: Rebase Mullvad Browser Stable onto Firefox 115.7.0esr
• Bug 42189: Assertion failure: the value of mPrivateBrowsingId in the loadContext and in the loadInfo are not the same!
• Bug 41044: Add tbb_version.json-like file for Mullvad Browser

Linux

• Bug 41050: Improve the disk leak sanitization on start-$browser

Build System

All Platforms

• Bug 41042: Add options to include updates in the changelog
• Bug 41043: Create script to push build requests to Mullvad build servers
• Bug 41056: Make it possible to use templates in var/torbrowser_incremental_from
• Bug 41059: Update keyring/torbrowser.gpg with updated key

Windows + macOS

• Bug 41016: Switch from bullseye to bookworm for desktop platforms

Windows

• Bug 41015: Enable std::filesystem on libc++ on Windows

Mullvad Browser 13.5a3

Browser

All Platforms

• Updated Firefox to 115.6.0esr
• Updated NoScript to 11.4.29
• Bug 249: BrowserHost has null mRoot when applying initial window size in debug [mullvad-browser]
• Bug 256: Update nightly mar signing key [mullvad-browser]
• Bug 258: Rebase Mullvad Browser alpha onto 115.6.0esr [mullvad-browser]
• Bug 42042: view-source:http://ip-address does not work because of HTTPS Only [tor-browser]
• Bug 42189: Assertion failure: the value of mPrivateBrowsingId in the loadContext and in the loadInfo are not the same! [tor-browser]
• Bug 42335: Do not localize the order of locales for app lang [tor-browser]
• Bug 41044: Add tbb_version.json-like file for Mullvad Browser [tor-browser-build]

Windows

• Bug 42163: Make the 3rd party DLL blocklist obey portable mode [tor-browser]

Linux

• Bug 41050: Improve disk leak sanitization on startup [tor-browser]

Build System

All Platforms

• Bug 40995: Use cdn.stagemole.eu instead of cdn.devmole.eu in download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
• Bug 41026: Do not use ~ when uploading the signed hashes [tor-browser-build]
• Bug 41027: Remove tb-build-04 and tb-build-05 from tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
• Bug 41031: Add command to unsign .mar files and compare with sha256sums-unsigned-build.txt [tor-browser-build]
• Bug 41039: Update tools/signing/upload-update_responses-to-staticiforme to keep download-*json files from previous release when new release does not include them [tor-browser-build]
• Bug 41041: Sign mullvad-browser nightly updates [tor-browser-build]
• Bug 41042: Add options to include updates in the changelog scripts [tor-browser-build]
• Bug 41043: Create script to push build requests to Mullvad build servers [tor-browser-build]

Windows + macOS

• Bug 41016: Switch from bullseye to bookworm for desktop platforms [tor-browser-build]

Windows

• Bug 41015: Enable std::filesystem on libc++ on Windows [tor-browser-build]
• Bug 41030: Add command to unsign .exe files and compare with sha256sums-unsigned-build.txt [tor-browser-build]

macOS

• Bug 40990: Remove old macos signing scripts [tor-browser-build]

Mullvad Browser 13.0.7

All Platforms

Updated Firefox to 115.6.0esr

• Bug 42042: view-source:http://ip-address does not work because of HTTPS Only [tor-browser]

Build System

All Platforms

• Bug 40884: Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be [tor-browser-build]
• Bug 41026: Do not use ~ when uploading the signed hashes [tor-browser-build]
• Bug 41039: Update tools/signing/upload-update_responses-to-staticiforme to keep download-*json files from previous release when new release does not include them [tor-browser-build]

macOS

• Bug 40990: Remove old macos signing scripts [tor-browser-build]

Mullvad Browser 13.0.6

All Platforms

• Bug 42288: Allow language spoofing in status messages [tor-browser]
• Updated uBlock Origin to 1.54.0

Linux

• Bug 17560: Downloaded URLs disk leak on Linux [tor-browser]
• Bug 42306: Tor Browser crashes when extensions popups are opened with Wayland enabled [tor-browser]
• Bug 41017: Disable Nvidia shader cache [tor-browser-build]

Build System

All Platforms

• Bug 41027: Remove tb-build-04 and tb-build-05 from tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
• Bug 40936: Revert tor-browser-build#40933 [tor-browser-build]
• Bug 40970: Missing symlink create-blog-post.torbrowser -> create-blog-post symlink [tor-browser-build]
• Bug 40995: Use cdn.stagemole.eu instead of cdn.devmole.eu in download-unsigned-sha256sums-gpg-signatures-from-people-tpo [tor-browser-build]
• Bug 40063: RBM's chroot fails in Fedora [rbm]
• Bug 40064: Using exec on project with no git_url/hg_url is causing warning [rbm]
• Windows + macOS + Linux
• Bug 41031: Add command to unsign .mar files and compare with sha256sums-unsigned-build.txt [tor-browser-build]

Windows

• Bug 41030: Add command to unsign .exe files and compare with sha256sums-unsigned-build.txt [tor-browser-build]

Mullvad Browser 13.5a2

All Platforms

• Updated Firefox to 115.5.0esr
• Updated uBlock Origin to 1.54.0
• Bug 250: Enable storage.sync to fix broken webextensions [mullvad-browser]
• Bug 254: Rebase Mullvad Browser Alpha to 115.5.0esr [mullvad-browser]
• Bug 42153: Drop dom.enable_resource_timing = false preference [tor-browser]
• Bug 42194: Blank Net Error page on name resolution failure [tor-browser]
• Bug 42276: Rebase Browsers Alpha to 115.5.0esr [tor-browser]
• Bug 42288: Allow language spoofing in status messages [tor-browser]

Linux

• Bug 17560: Downloaded URLs disk leak on Linux [tor-browser]
• Bug 41017: Disable Nvidia shader cache [tor-browser-build]

Build System

All Platforms

• Bug 40884: Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be [tor-browser-build]
• Bug 40970: Missing symlink create-blog-post.torbrowser -> create-blog-post symlink [tor-browser-build]
• Bug 41006: Fix typo in finished-signing-clean-linux signer [tor-browser-build]
• Bug 40063: RBM's chroot fails in Fedora [rbm]
• Bug 40064: Using exec on project with no git_url/hg_url is causing warning [rbm]

macOS

• Bug 41005: Unpack macOS bundle to /var/tmp instead of /tmp in rcodesign-notary-submit step [tor-browser-build]
• Bug 41007: gatekeeper-bundling.sh refers to old .tar.gz archive [tor-browser-build]
• Bug 41014: Update libdmg-hfsplus to drop the OpenSSL patch [tor-browser-build]
• Bug 41020: Opening MacOS dmg file is causing a warning, since 13.0 [tor-browser-build]

Mullvad Browser 13.0.4

All Platforms

• Updated Firefox to 115.5.0esr
• Updated uBlock Origin to 1.53.0
• Bug 250: Enable storage.sync to fix broken webextensions [mullvad-browser]
• Bug 253: Rebase Mullvad Browser Stable to 115.5.0esr [mullvad-browser]
• Bug 42194: Blank Net Error page on name resolution failure [tor-browser]

Windows + macOS

• Bug 42154: Empty the clipboard on browser shutdown only if content comes from private browsing windows [tor-browser]

Build

All Platforms

• Bug 40934: Remove $bundle_locales from signing scripts now that we're on ALL for everything [tor-browser-build]
• Bug 40982: Fix logging in tools/signing/do-all-signing [tor-browser-build]
• Bug 40989: Add .nobackup files to reproducible and disposable directores [tor-browser-build]
• Bug 41006: Fix typo in finished-signing-clean-linux signer [tor-browser-build]

macOS

• Bug 29815: Sign our macOS bundles on Linux [tor-browser-build]
• Bug 41005: Unpack macOS bundle to /var/tmp instead of /tmp in rcodesign-notary-submit step [tor-browser-build]
• Bug 41007: gatekeeper-bundling.sh refers to old .tar.gz archive [tor-browser-build]
• Bug 41014: Update libdmg-hfsplus to drop the OpenSSL patch [tor-browser-build]
• Bug 41020: Opening MacOS dmg file is causing a warning, since 13.0 [tor-browser-build]