The Tor Browser 12.5.5 (All Platforms) has been released. (26-September-2023) Tor Browser 12.5.5 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog Spoiler The full changelog since Tor Browser 12.5.4 is: All Platforms Updated tor to 0.4.7.15 Updated NoScript to 11.4.27 Updated Translations Bug tor-browser#42120: Use foursquare as domain front for snowflake Bug tor-browser#42123: Backport security fixes from Firefox 118 to ESR 102.15 / 115.3 – based Tor Browser Windows + macOS + Linux Bug tor-browser#42126: moat and connect assist broken for people who can't reach domain front
The Tor Browser 12.5.6 (All Platforms) has been released. (29-September-2023) Tor Browser 12.5.6 is now available from the Tor Browser download page and also from our distribution directory. This release backports important security updates from Firefox 115.3.1.0esr. Blog/Announcement | Full Changelog Spoiler The full changelog since Tor Browser 12.5.5 is: All Platforms Bug tor-browser#42135: Backport security fixes from Firefox 115.3.1 to 102.15.1 Build System All Platforms Bug tor-browser-build#40957: Update subkey expiration date for Tor Browser gpg key
The Tor Browser 13.0 (All Platforms) has been released. (12-October-2023) Tor Browser 13.0 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog Spoiler Full changelog The full changelog since Tor Browser 12.5.6 is: All Platforms Updated tor to 0.4.8.7 Updated OpenSSL to 3.0.11 Bug tor-browser-spec#40050: FF103 Audit Bug tor-browser-spec#40051: FF104 Audit Bug tor-browser-spec#40052: FF105 Audit Bug tor-browser-spec#40053: FF106 Audit Bug tor-browser-spec#40054: FF107 Audit Bug tor-browser-spec#40055: FF108 Audit Bug tor-browser-spec#40056: FF109 Audit Bug tor-browser-spec#40057: FF110 Audit Bug tor-browser-spec#40058: FF111 Audit Bug tor-browser-spec#40059: FF112 Audit Bug tor-browser-spec#40060: FF113 Audit Bug tor-browser-spec#40061: FF114 Audit Bug tor-browser-spec#40062: FF115 Audit Bug tor-browser#26277: When the “Safest” setting is enabled, searching using duckduckgo should always use the Non-Javascript site for searches Bug tor-browser#40577: Add “suggest url” in DDG onion's manifest Bug tor-browser#40938: Migrate remaining torbutton functionality to tor-browser Bug tor-browser#41092: Enable tracking query parameters stripping Bug tor-browser#41327: Disable UrlbarProviderInterventions Bug tor-browser#41399: Update Mozilla's patch for Bug 1675054 to enable brotli encoding for HTTP onions as well Bug tor-browser#41477: Review some extensions.* preferences Bug tor-browser#41496: Review 000-tor-browser.js and 001-base-profile.js for 115 Bug tor-browser#41576: ESR115: ensure no remote calls for weather & add-on suggestions Bug tor-browser#41605: Remove unused assets from torbutton (preferences-mobile.css) Bug tor-browser#41675: Remove javascript.options.large_arraybuffers Bug tor-browser#41727: WebRTC privacy-hardening settings Bug tor-browser#41740: ESR115: change devicePixelRatio spoof to 2 in alpha for testing Bug tor-browser#41752: Review changes done by Bug 41565 Bug tor-browser#41796: Rebase Tor Browser to Firefox 115 Bug tor-browser#41797: Lock RFP in release builds Bug tor-browser#41934: Websocket raises DOMException on http onions in 13.0a1 Bug tor-browser#41936: Review Mozilla 1770158: Use double-conversion library instead of dtoa for string-to-double conversion Bug tor-browser#41937: Review Mozilla 1780014: Add specific telemetry for conservative and first-try handshakes Bug tor-browser#41938: Review Mozilla 1769994: On systems with IPv6 preferred DNS resolution clients will fail to connect when “localhost” is used as host for the WebSocket server Bug tor-browser#41939: Review Mozilla 1728871: Support fetching data from Remote Setting Bug tor-browser#41941: Review Mozilla 1775254: Improve Math.pow accuracy for large exponents Bug tor-browser#41943: Lock javascript.options.spectre.disable_for_isolated_content to false Bug tor-browser#41945: Review Mozilla 1783019: Add a cookie banner service to automatically handle website cookie banners Bug tor-browser#41946: Review Mozilla 1782579: Add a locale parameter to the text recognition API Bug tor-browser#41947: Review Mozilla 1779005: Broken since Firefox 102.0: no instant fallback to direct connection when proxy became unreachable while runtime Bug tor-browser#41950: Review Mozilla 1788668: Add the possibility to check that the clipboard contains some pdfjs stuff Bug tor-browser#41951: Review Mozilla 1790681: Enable separatePrivateDefault by default Bug tor-browser#41959: Review Mozilla 1795944: Remove descriptionheightworkaround Bug tor-browser#41960: Review Mozilla 1797896: Proxy environment variables should be upper case / case insensitive Bug tor-browser#41961: Review Mozilla 1798868: Hide cookie banner handling UI by default Bug tor-browser#41969: Review Mozilla 1746983: Re-enable pingsender2 Bug tor-browser#41970: Review Mozilla 17909270: WebRTC bypasses Network settings & proxy.onRequest Bug tor-browser#41984: Rename languageNotification.ftl to base-browser.ftl Bug tor-browser#42013: Review Mozilla 1834374: Do not call EmptyClipboard() in nsBaseClipboard destructor Bug tor-browser#42014: Review Mozilla 1832791: Implement a Remote Settings for the Quarantined Domains pref Bug tor-browser#42015: Review Mozilla 1830890: Keep a history window of WebRTC stats for about:WebRTC Bug tor-browser#42019: Empty browser's clipboard on browser shutdown Bug tor-browser#42026: Disable cookie banner service and UI. Bug tor-browser#42029: Defense-in-depth: disable non-proxied UDP WebRTC Bug tor-browser#42034: aboutTBUpdate.dtd is duplicated Bug tor-browser#42043: Disable gUM: media.devices.enumerate.legacy.enabled Bug tor-browser#42061: Move the alpha update channel creation to a commit on its own Bug tor-browser#42084: Race condition with language preferences may make spoof_english ineffective Bug tor-browser#42085: NEWNYM signal missing on Whonix Bug tor-browser#42094: Disable media.aboutwebrtc.hist.enabled as security in-depth Bug tor-browser#42120: Use foursquare as domain front for snowflake Bug tor-browser-build#40887: Update Webtunnel version to 38eb5505 Windows + macOS + Linux Updated Firefox to 115.3.1esr Bug tor-browser#30556: Re-evaluate letterboxing dimension choices Bug tor-browser#32328: Improve error recovery from the red screen of death Bug tor-browser#33282: Increase the max width of new windows Bug tor-browser#33955: Selecting “Copy image” from menu leaks the source URL to the clipboard. This data is often dereferenced by other applications. Bug tor-browser#40175: Connections in reader mode are not FPI Bug tor-browser#40982: Cleanup maps in tor-circuit-display Bug tor-browser#40983: Move not UI-related torbutton.js code to modules Bug tor-browser#41165: Crash with debug assertions enabled Bug tor-browser#41333: Modernize Tor Browser's new-tab page (about:tor) Bug tor-browser#41423: about:tor semantic and accessibility problems Bug tor-browser#41528: Hard-coded English “based on Mozilla Firefox” appears in version in “About” dialog Bug tor-browser#41581: ESR115: figure out extension pinning / unified Extensions Bug tor-browser#41639: Fix the wordmark (title and background) of the “About Tor Browser” window Bug tor-browser#41642: Do not hide new PBM in the hamburger menu if auto PBM is not enabled Bug tor-browser#41651: Use moz-toggle in connection preferences Bug tor-browser#41691: “Firefox Suggest” text appearing in UI Bug tor-browser#41717: Bookmark toolbar visibility on new tabs is not honored when new tab page is not about:blank Bug tor-browser#41739: Remove “Website appearance” Bug tor-browser#41741: Refactor the domain isolator and new circuit Bug tor-browser#41765: TTP-02-006 WP1: Information leaks via custom homepage (Low) Bug tor-browser#41766: TTP-02-001 WP1: XSS in TorConnect's captive portal (Info) Bug tor-browser#41771: Decide what to do for firefoxview Bug tor-browser#41774: Hide the new “Switching to a new device” help menu item Bug tor-browser#41791: Copying page contents also puts the source URL on the clipboard Bug tor-browser#41812: Review layout for XUL elements Bug tor-browser#41813: Look out for links missing underlines in ESR 115-based alphas Bug tor-browser#41821: Fix the proxy type in the proxy modal of aboutreferences in 13.0 Bug tor-browser#41822: The default browser button came back on 115 Bug tor-browser#41833: Reload extensions on new identity Bug tor-browser#41834: Hide “Can't Be Removed - learn more” menu line for uninstallable add-ons Bug tor-browser#41842: Remove the old removal logics from Torbutton Bug tor-browser#41844: Stop using the control port directly Bug tor-browser#41845: Stop forcing (bad) pref values for non-PBM users Bug tor-browser#41852: Review the Tor Check Service UX Bug tor-browser#41864: TOR_CONTROL_HOST and TOR_SOCKS_HOST do not work as expected when the browser launches tor Bug tor-browser#41865: Use --text-color-deemphasized rather than --panel-description-color Bug tor-browser#41874: Visual & A11 regressions in add-on badges Bug tor-browser#41876: Remove Firefox View from title bar Bug tor-browser#41877: NoScript seems to be blocking by default in the first 115-based testbuild Bug tor-browser#41881: Developer tools/Network/New Request remembers requests Bug tor-browser#41886: Downloads drop-down panel has new-line/line-break between every word in the 'Be careful opening downloads' warning Bug tor-browser#41904: The log textarea doesn't resize anymore Bug tor-browser#41906: Hide aboutreferences#privacy > DNS over HTTPS section Bug tor-browser#41907: The bootstrap is interrupted without any errors if the process becomes ready when already bootstrapping Bug tor-browser#41912: “Use Current Bridges” is shown for users even when there aren't any current bridges Bug tor-browser#41922: Unify the bridge line parsers Bug tor-browser#41923: The path normalization results in warnings Bug tor-browser#41924: Small refactors for TorProcess Bug tor-browser#41925: Remove the torbutton startup observer Bug tor-browser#41926: Refactor the control port client implementation Bug tor-browser#41931: Regression: new window leaks outer window Bug tor-browser#41935: Improve new window & letterboxing dimensions Bug tor-browser#41940: Review Mozilla 1739348: When a filetype is set to “always ask” and the user makes a save/open choice in the dialog, we should not also open the downloads panel Bug tor-browser#41949: Review Mozilla 1782578: Implement a context menu modal for text recognition Bug tor-browser#41954: Inputs in the request a bridge dialog are cut-off in 13.0 alpha Bug tor-browser#41957: Revert to Fx's default identity block style for internal pages Bug tor-browser#41958: Console error when closing tor browser with aboutreferences open Bug tor-browser#41964: emojiAnnotations not defined in time in connection preferences Bug tor-browser#41965: TorConnect error when opening browser tools Bug tor-browser#41971: Update Tails URL in downloads warning Bug tor-browser#41973: Custom wingpanels don't line up with their toolbar icons in 13.0 alpha Bug tor-browser#41974: De-emphasized text in custom components is no longer gray in 13.0 alpha Bug tor-browser#41975: Downloads warning text too narrow in 13.0 alpha Bug tor-browser#41976: Bottom padding on collapsed bridge cards has increased in 13.0 alpha Bug tor-browser#41977: Hide the “Learn more” link in bridge cards Bug tor-browser#41980: Circuit display headline is misaligned in 13.0 alpha Bug tor-browser#41981: Review Mozilla 1800675: Add aboutreferences entry for cookie banner handling Bug tor-browser#41983: Review Mozilla 1770447: Create a reusable “support-link” widget Bug tor-browser#41986: Fix the control port password handling Bug tor-browser#41994: CSS (and other assets) of some websites blocked in 13.0 alpha Bug tor-browser#42022: Prevent extension search engines from breaking the whole search system Bug tor-browser#42027: Create a Base Browser version of migrateUI Bug tor-browser#42037: Disable about:firefoxview Bug tor-browser#42041: TBB --allow-remote mixes up with plain Firefox Bug tor-browser#42045: Circuit panel overflows with long ipv6 addresses Bug tor-browser#42046: Remove XUL layout hacks from base browser Bug tor-browser#42047: Remove layout hacks from tor browser preferences Bug tor-browser#42050: Bring back Save As... dialog as default Bug tor-browser#42073: Add simplified onion pattern to the new homepage Bug tor-browser#42075: Fix link spacing and underline on new homepage Bug tor-browser#42079: TorConnect: handle switching from Bootstrapped to Configuring state Bug tor-browser#42083: RemoteSecuritySettings.init throws error in console Bug tor-browser#42091: Onion authorization prompt overflows Bug tor-browser#42092: Onion services key table display problems. Bug tor-browser#42098: Implement Windows installer icons Bug tor-browser#42100: Connect Assist dropdown text not centered Bug tor-browser#42102: TorProcess says the SOCKS port is not valid even though it is Bug tor-browser#42109: Onion services keys table has empty column headers. Bug tor-browser#42110: Add a utility module for shared UI methods needed for several tor browser components Bug tor-browser#42126: moat and connect assist broken for people who can't reach domain front Bug tor-browser#42129: Disable the Tor restart prompt if shouldStartAndOwnTor is false Bug tor-browser#42131: Tor Browser 13.0a5 does not track circuits created before Tor Browser started Bug tor-browser#42132: The new control port handling in Tor Browser 13 breaks a Tails security feature Bug tor-browser#42138: Disable apz.overscroll.enabled pref Bug tor-browser#42155: Drop the unused code for the old bridge removal warning Bug tor-browser#42159: Responsive Design Mode not working correctly Bug tor-browser#42160: Allow specifying a TOR_PROVIDER=none to configure only the proxy settings during the TorProviderBuilder initialization Bug tor-browser#42166: New identity dialog missing accessible name Bug tor-browser#42167: Make the preference auto-focus more reliable Bug tor-browser-build#40821: The update details URL is wrong in alphas Bug tor-browser-build#40893: Update (Noto) fonts for 13.0 Bug tor-browser-build#40924: Customize MOZ_APP_REMOTINGNAME instead of passing --name and --class Bug tor-browser-build#40938: Copy the new tor-browser.ftl file to the appropriate directory Windows + Android Bug tor-browser-build#40930: Upate zlib to 1.3 after 13.0a3 Windows Bug tor-browser#40737: Revert backout of Mozilla's fix for bug 1724777 Bug tor-browser#41658: Create new installer icons for Windows Bug tor-browser#41798: Stop building private_browsing.exe on Windows Bug tor-browser#41806: Prevent Private Browsing start menu item to be added automatically Bug tor-browser#41942: Review Mozilla 1682520: Use the WER runtime exception module to catch early crashes Bug tor-browser#41944: Review Mozilla 1774083: Add Surrogate COM Server to handle native Windows notifications when Firefox is closed. Bug tor-browser#42008: Review Mozilla 1808146: Copying images from Pixiv and pasting them in certain programs is broken Bug tor-browser#42010: Review Mozilla 1810641: Enable overscroll on Windows on all channels Bug tor-browser#42087: Implement Windows application icons Bug tor-browser-build#40954: Implement Windows installer icons macOS Bug tor-browser#41948: Review Mozilla 1782981: Hide the text recognition context menu if the macOS version doesn't support APIs Bug tor-browser#41955: Update macOS volume window background Bug tor-browser#41982: Review Mozilla 1762392: Add Cocoa platform support for paste files Bug tor-browser#42057: Disable Platform text-recognition functionality Bug tor-browser#42078: Implement MacOS application icons Bug tor-browser#42147: Add browser.helperApps.deleteTempFileOnExit to our profile Linux Bug tor-browser#41509: After update, KDE Plasma identifies Tor Browser Nightly window group as “firefox-nightly” Bug tor-browser#41884: Linux: set browser.tabs.searchclipboardfor.middleclick to false Bug tor-browser#42088: Implement Linux application icons Bug tor-browser-build#40576: Fontconfig warning: remove 'blank' configuration Android Updated GeckoView to 115.3.1esr Bug tor-browser#41878: firefox-mobile: refactor tor bootstrap off deleted onboarding path Bug tor-browser#41882: Update DuckDuckGo icons Bug tor-browser#41911: Firefox-Android tor bootstrap connect button css broken Bug tor-browser#41928: Backport Android-specific security fixes from Firefox 116 to ESR 102.14 / 115.1 - based Tor Browser Bug tor-browser#41972: Disable Firefox onboarding in 13.0 Bug tor-browser#41990: Review Mozilla 1811531: Add 'site' query parameter to Pocket sponsored stories request Bug tor-browser#41991: Review Mozilla 1812518: Allow a custom View for 3rd party downloads Bug tor-browser#41993: Review Mozilla 1810761: Add API for saving a PDF Bug tor-browser#41996: App includes com.google.android.gms.permission.AD_ID permission Bug tor-browser#41997: com.adjust.sdk.Adjust library enables AD_ID permission even though we aren't using it Bug tor-browser#41999: TB13.0a2 android: center text on connect button Bug tor-browser#42001: Hide 'Open links in external app' settings option and force defaults Bug tor-browser#42002: Review Mozilla 1809305: Allow user to copy an image to the clipboard Bug tor-browser#42003: Review Mozilla 1819431: Reimplement default browser notification with Nimbus Messaging equivalent Bug tor-browser#42004: Review Mozilla 1818015: Use a custom tab or the view we use for Sync onboarding for the Privacy button Bug tor-browser#42005: Review Mozilla 1816932: Add Maps to app links common sub domains Bug tor-browser#42006: Review Mozilla 1817726: Allow sharing current tab URL from Android's Recents (App Overview) screen. Bug tor-browser#42007: Review Mozilla 1805450: Allow users to submit site support requests in Fenix Bug tor-browser#42012: Review Mozilla 1810629: add an Android shortcut to go straight to the login and passwords page Bug tor-browser#42016: Review Mozilla 1832069: Implement Google Play Referrer Library to fetch referrer URL Bug tor-browser#42018: Rebase Firefox for Android to 115.2.1 Bug tor-browser#42023: Remove FF what's new from Android Bug tor-browser#42038: TBA Alpha - inscriptions Tor Browser Alpha and FireFox Browser simultaneously on the start screen Bug tor-browser#42074: YEC 2023 Takeover for Android Stable Bug tor-browser#42076: Theme is visible in options, but shouldn't be Bug tor-browser#42089: Disable the Cookie Banner Reduction site support requests (Mozilla 1805450) Bug tor-browser#42114: Disable Allow sharing current tab URL from Android's Recents screen in private browsing mode Bug tor-browser#42115: Enhanced Tracking Protection can still be enabled Bug tor-browser#42122: playstore console crashes: java.lang.NoSuchMethodError Bug tor-browser#42133: Remove “Total Cookie Protection” popup Bug tor-browser#42134: Remove Android icon shortcuts Bug tor-browser#42156: Screenshot allowing still blocks homescreen (android) Bug tor-browser#42157: Fix Help button URL Bug tor-browser#42165: Remove “Add to shortcuts” and “Remove from shortcuts” buttons Bug tor-browser#42158: Remove “Customize Homepage” button Bug tor-browser-build#40740: Tor Browser for Android's snowflake ClientTransportPlugin seems to be out of date Bug tor-browser-build#40919: Fix nimbus-fml reproducibility of 13.0a2-build1 Bug tor-browser-build#40941: Remove PT process options on Android Build System All Platforms Updated Go to 1.21.1 Bug tor-browser#42130: Add support for specifying the branch in tb-dev rebase-on-default Bug tor-browser-build#31588: Be smarter about vendoring for Rust projects Bug tor-browser-build#40089: Clean up usage of get-moz-build-date script Bug tor-browser-build#40410: Get rid of python2 Bug tor-browser-build#40487: Bump Python version Bug tor-browser-build#40741: Update browser and tor-android-service projects to pull data from pt_config.json Bug tor-browser-build#40802: Drop the patch for making WASI reproducible Bug tor-browser-build#40829: Review and standardize naming scheme for browser installer/package artifacts Bug tor-browser-build#40854: Update to OpenSSL 3.0 Bug tor-browser-build#40855: Update toolchains for Mozilla 115 Bug tor-browser-build#40868: Bump Rust to 1.69.0 Bug tor-browser-build#40880: The README doesn't include some dependencies needed for building incrementals Bug tor-browser-build#40886: Update README with instructions for Arch linux Bug tor-browser-build#40898: Add doc from tor-browser-spec/processes/ReleaseProcess to gitlab issue templates Bug tor-browser-build#40908: Enable the --enable-gpl config flag in tor to bring in PoW functionality Bug tor-browser-build#40929: Update go to 1.21 series after 13.0a3 Bug tor-browser-build#40932: Remove appname_bundle_android, appname_bundle_macos, appname_bundle_linux, appname_bundle_win32, appname_bundle_win64 from projects/release/update_responses_config.yml Bug tor-browser-build#40935: Fix fallout from build target rename in signing scripts Bug tor-browser-build#40948: Remove lyrebird-vendor sha256sum in nightly Bug tor-browser-build#40957: Expired subkey warning on Tor Browser GPG verification Bug tor-browser-build#40972: Handle Mullvad Browser in the changelog script and group entries by project Windows + macOS + Linux Bug tor-browser#41967: Add a Makefile recipe to create multi-lingual dev builds Bug tor-browser-build#40149: Remove patching of nightly update URL Bug tor-browser-build#40615: Consider adding a readme to the fonts directory Bug tor-browser-build#40907: Sometimes debug information are not deterministic with Clang 16.0.4 Bug tor-browser-build#40922: Use base-browser.ftl instead of languageNotification.ftl Bug tor-browser-build#40931: Fix incrementals after tor-browser-build#40829 Bug tor-browser-build#40933: Fix generating incrementals between 12.5.x and 13.0 Bug tor-browser-build#40942: Use the branch to build Base Browser Bug tor-browser-build#40944: After #40931, updates_responses is using incremental.mar files as if they were non-incremental mar files Bug tor-browser-build#40947: Remove migrate_langs from tools/signing/nightly/update-responses-base-config.yml Bug tor-browser-build#40956: Allow testing the updater also with release and alpha channel Windows Bug tor-browser#41995: Generated headers on Windows aren't reproducible Bug tor-browser-build#40832: Unify mingw-w64-clang 32+64 bits Bug tor-browser-build#40940: Change position of the install|portable in the builds filenames macOS Bug tor-browser#42035: Update tools/torbrowser/ scripts to support macOS dev environment Bug tor-browser-build#40943: Update libdmg-hfsplus to include our uplifted patch Bug tor-browser-build#40951: Firefox fails to build for macOS after tor-browser-build#40938 Linux Bug tor-browser#42071: tor-browser deployed format changed breaking fetch.sh Bug tor-browser-build#40102: Move from Debian Jessie to Debian Stretch for our Linux builds Bug tor-browser-build#40971: Stop shipping Linux i686 debug archive until we actually produce the symbols Android Bug tor-browser#41899: Use LLD for Android Bug tor-browser-build#40867: Create a RBM project for the unified Android repository Bug tor-browser-build#40917: Remove the uniffi-rs project Bug tor-browser-build#40918: The commit hash is still not displayed about:buildconfig on Android Bug tor-browser-build#40920: Non-deterministic generation of baseline.profm file in Android apks Bug tor-browser-build#40963: Tor Browesr 13.0 torbrowser-testbuild-android* targets fail to build Bug tor-browser-build#40974: firefox-android fails to build in release
The Tor Browser 13.0.1 (All Platforms) has been released. (25-October-2023) Tor Browser 13.0.1 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.0 is: All Platforms Bug tor-browser#42185: Rebase stable browsers on top of 115.4.0esr Bug tor-browser#42191: Backport security fixes (Android & wontfix) from Firefox 119 to 115.4 - based Tor Browser Bug tor-browser-build#40975: libstdc++.so.6 is included twice in tor-browser Windows + macOS + Linux Updated Firefox to 115.4.0esr Bug tor-browser#42182: Default Search Engine Does Not Persist Through Shift to New Identity Android Updated GeckoView to 115.4.0esr Build System All Platforms Updated Go to 1.21.3 Bug tor-browser-build#40976: Update download-unsigned-sha256sums-gpg-signatures-from-people-tpo to fetch from tb-build-02 and tb-build-03 Bug rbm#40062: Copy input directories to containers recursively Windows + Linux Bug tor-browser-build#40991: Fix creation of downloads-windows-x86_64.json and downloads-linux-x86_64.json Windows Bug tor-browser-build#40984: The PDBs for .exe are not included Linux Bug tor-browser-build#40979: Add redirects from old Linux bundle filename to the new one applications releases
The Tor Browser 13.0.4 (All Platforms) has been released. (21-November-2023) Tor Browser 13.0.4 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.0.3 is: All Platforms Updated OpenSSL to 3.0.12 Updated tor to 0.4.8.9 Bug tor-browser#42275: Rebase Tor Browser Stable to 115.5.0esr Bug tor-browser#42277: Enable storage.sync to fix broken webextensions Windows + macOS + Linux Updated Firefox to 115.5.0esr Bug tor-browser#41341: Fix style and position of “Always Prioritize Onions” wingpanel Bug tor-browser#42108: Tor Circuit button not shown if TLS handshake fails Bug tor-browser#42184: Setting “Homepage and new windows” ignores “Blank Page” value Bug tor-browser#42188: Donations are asked repeatedly when I click the New identity button Bug tor-browser#42194: Blank Net Error page on name resolution failure Windows + macOS Bug tor-browser#42154: Empty the clipboard on browser shutdown only if content comes from private browsing windows Android Updated GeckoView to 115.5.0esr Bug tor-browser#42074: YEC 2023 Takeover for Android Stable Bug tor-browser#42287: Backport security fixes (Android & wontfix) from Firefox 120 to 115.5 - based Tor Browser Build System All Platforms Update Go to 1.21.4 Bug tor-browser-build#40934: Remove $bundle_locales from signing scripts now that we're on ALL for everything Bug tor-browser-build#40982: Fix logging in tools/signing/do-all-signing Bug tor-browser-build#40989: Add .nobackup files to reproducible and disposable directories Bug tor-browser-build#41006: Fix typo in finished-signing-clean-linux signer macOS Bug tor-browser-build#29815: Sign our macOS bundles on Linux Bug tor-browser-build#41005: Unpack macOS bundle to /var/tmp instead of /tmp in rcodesign-notary-submit step Bug tor-browser-build#41007: gatekeeper-bundling.sh refers to old .tar.gz archive Bug tor-browser-build#41014: Update libdmg-hfsplus to drop the OpenSSL patch Bug tor-browser-build#41020: Opening macOS DMG file is causing a warning, since 13.0
The Tor Browser 13.0.6 (All Platforms) has been released. (05-December-2023) Tor Browser 13.0.6 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.0.5 is: All Platforms Bug tor-browser#42288: Allow language spoofing in status messages Windows + macOS + Linux Bug tor-browser#42302: The allowed ports string contains a typo Bug tor-browser#42231: Improve the network monitor patch for http onion resources Bug tor-browser#42299: After adding an incorrect bridge address on user cannot go back to the Connection page Linux Bug tor-browser#17560: Downloaded URLs disk leak on Linux Bug tor-browser#42306: Tor Browser crashes when extensions popups are opened with Wayland enabled Bug tor-browser-build#41017: Disable Nvidia shader cache Build System All Platforms Bug tor-browser-build#41027: Remove tb-build-04 and tb-build-05 from tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo Bug tor-browser-build#40936: Revert tor-browser-build#40933 Bug tor-browser-build#40995: Use cdn.stagemole.eu instead of cdn.devmole.eu in download-unsigned-sha256sums-gpg-signatures-from-people-tpo Bug rbm#40064: Using exec on project with no git_url/hg_url is causing warning Windows + macOS + Linux Bug tor-browser-build#41031: Add command to unsign .mar files and compare with sha256sums-unsigned-build.txt Windows Bug tor-browser-build#41030: Add command to unsign .exe files and compare with sha256sums-unsigned-build.txt Android Bug tor-browser-build#41024: Fix android filenames in Release Prep issue templates
The Tor Browser 13.0.7 (All Platforms) has been released. (19-December-2023) Tor Browser 13.0.7 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.0.6 is: All Platforms Updated tor to 0.4.8.10 Updated NoScript to 11.4.29 Bug tor-browser#42042: view-source:http://ip-address does not work because of HTTPS Only Bug tor-browser#42261: Update the icon of Startpage search engine Bug tor-browser#42330: Rebase stable browsers to 115.6.0esr Bug tor-browser#42334: Keep returning ERROR_ONION_WITH_SELF_SIGNED_CERT only for .onion sites whose cert throws ERROR_UNKNOWN_ISSUER Windows + macOS + Linux Updated Firefox to 115.6.0esr Bug tor-browser#42283: Tor Browser shouldn't ship blockchair by default Android Updated GekcoView to 115.6.0esr Bug tor-browser#42285: Update the gitignore to use the correct paths for tor stuff Bug tor-browser#42339: Backport Android security fixes from Firefox 121 to 115.6 - based Tor Browser Build System All Platforms Update Go to 1.21.5 Bug tor-browser-build#40884: Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be Bug tor-browser-build#41026: Do not use ~ when uploading the signed hashes Bug tor-browser-build#41036: Remove go_vendor-lyrebird-nightly makefile target, and rename go_vendor-$project-alpha makefile targets to go_vendor-$project Bug tor-browser-build#41039: Update tools/signing/upload-update_responses-to-staticiforme to keep download-*json files from previous release when new release does not include them macOS Bug tor-browser-build#40990: Remove old macOS signing scripts
The Tor Browser 13.0.8 (All Platforms) has been released. (21-December-2023) Tor Browser 13.0.8 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler The full changelog since Tor Browser 13.0.7 is: Windows Bug tor-browser-build#41053: All PT's crash instantly in 13.0.7 Bug tor-browser#42179: PTs on Tor Browser 13 do not work with Windows 7 Linux Bug tor-browser-build#41050: Improve the disk leak sanitization on start-$browser Build System All Platforms Bug tor-browser-build#41042: Add options to include updates in the changelog scripts Bug tor-browser-build#41043: Create script to push build requests to Mullvad build servers
The Tor Browser 13.0.9 (All Platforms) has been released. (23-January-2024) Tor Browser 13.0.9 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Tor Browser 13.0.9 is now available from the Tor Browser download page and also from our distribution directory. This version includes important security updates to Firefox. This release updates Firefox to 115.7.0esr and Snowflake to 2.8.1. It also includes various bug fixes (see changelog for details). Send us your feedback If you find a bug or have a suggestion for how we could improve this release, please let us know. Full changelog The full changelog since Tor Browser 13.0.8 is: All Platforms Updated Snowflake to 2.8.1 Bug tor-browser#42363: Tab thumbnails enhancements Bug tor-browser#42365: Rebase Tor Browser Stable onto Firefox 115.7.0esr Bug tor-browser#42367: Backport Android security fixes from Firefox 122 Bug tor-browser#42369: Revert YEC 2023 changes Bug tor-browser-build#41058: Update Snowflake to 2.8.1 Windows + macOS + Linux Updated Firefox to 115.7.0esr Bug tor-browser#42099: Blind cross-origin requests to .tor.onion domains Bug tor-browser#42189: Assertion failure: the value of mPrivateBrowsingId in the loadContext and in the loadInfo are not the same! Android Updated GeckoView to 115.7.0esr Bug tor-browser#42313: Enable One UI Sans KR as a possible font for Korean (MozBug 186523 Bug tor-browser#42324: Onion Location on Android is ignored Bug tor-browser#42346: Crash in firefox-android originating in backported FullScreenNotificationDialog patch Bug tor-browser#42353: Fix Android NoScript automatic updates Bug tor-browser#42355: Fullscreen on Android doesn't hide system bars Build System All Platforms Updated Go to 1.20.13 and 1.21.6 Bug tor-browser-build#41059: Update keyring/torbrowser.gpg with updated key Bug tor-browser-build#41063: Run "file $keyring" in tools/keyring/list-all-keyrings Windows + macOS + Linux Bug tor-browser-build#41056: Make it possible to use templates in var/torbrowser_incremental_from Windows + macOS Bug tor-browser-build#41016: Switch from bullseye to bookworm for desktop platforms Windows Bug tor-browser-build#41015: Enable std::filesystem on libc++ on Windows Android Bug tor-browser-build#41066: The Android x86 APK for 13.0.9 is too big
The Tor Browser 13.0.10 (All Platforms) has been released. (20-February-2024) Tor Browser 13.0.10 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Tor Browser 13.0.10 is now available from the Tor Browser download page and also from our distribution directory. This version includes important security updates to Firefox. This release updates Firefox to 115.8.0esr, OpenSSL to 3.0.13, zlib to 1.3.1, and Snowflake to 2.9.0. It also includes various bug fixes (see changelog for details). Send us your feedback If you find a bug or have a suggestion for how we could improve this release, please let us know. Full changelog The full changelog since Tor Browser 13.0.9 is: All Platforms Updated OpenSSL to 3.0.13 Updated zlib to 1.3.1 Updated Snowflake to 2.9.0 Bug tor-browser#42374: spoof english leaks via numberingSystem: numbers (non-latn) or decimal separator (latn) Bug tor-browser#42411: Rebase Tor Browser stable onto 115.8.0esr Bug tor-browser-build#41079: Bump version of Snowflake to v2.9.0 Windows + macOS + Linux Updated Firefox to 115.8.0esr Bug tor-browser#42338: Changing circuit programmatically in Tor Browser not working anymore! Android Updated GeckoView to 115.8.0esr Bug tor-browser#42402: Remove Android YEC strings Bug tor-browser#42416: Backport Android security fixes from Firefox 123 Linux Bug tor-browser#42293: Updater is disabled when tor-browser is run by torbrowser-launcher flatpak Build System All Platforms Updated Go to 1.20.14 and 1.21.7 Bug tor-browser-build#41067: Use Capture::Tiny instead of IO::CaptureOutput Bug rbm#40067: Use --no-verbose wget option when not running in a terminal Bug rbm#40068: Switch from IO::CaptureOutput to Capture::Tiny Bug rbm#40069: Make stdout and stderr utf8 Bug rbm#40072: Move capture_exec to a separate module
NOTE: The Tor Project folk have identified this as an emergency release. The Tor Browser 13.0.11 (All Platforms) has been released. (06-March-2024) Tor Browser 13.0.11 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Tor Browser 13.0.11 is now available from the Tor Browser download page and also from our distribution directory. This is an emergency release which updates our domain fronting configuration for the Snowflake pluggable transport and the moat connection to the rdsys backend used by the censorship circumvention system. A known issue is that the source archives do not match, likely due to a change in xz-utils (the underlying source in the archive is identical, only the compressed archive differs). This is not considered a blocker for this release and is being tracked here: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/41102 Send us your feedback If you find a bug or have a suggestion for how we could improve this release, please let us know. Full changelog The full changelog since Tor Browser 13.0.10 is: All Platforms Bug tor-browser#42435: Update moat domain fronting configuration Build System All Platforms Bug tor-browser-build#41085: kick_devmole_build script prints wrong URL for Mullvad's build hashes Bug tor-browser-build#41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists
The Tor Browser 13.0.12 (All Platforms) has been released. (19-March-2024) Tor Browser 13.0.12 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler The Tor Project has recently been notified of a potential fingerprinting vulnerability with automatic Onion-Location redirects. In an abundance of caution, we have removed the 'prioritize .onion sites when known' option from Tor Browser. We are looking further into this issue and will provide timely updates as more research and additional recommendations become available. Send us your feedback If you find a bug or have a suggestion for how we could improve this release, please let us know. Full changelog The full changelog since Tor Browser 13.0.11 is: All Platforms Updated Snowflake to 2.9.2 Bug tor-browser#42376: The placeholder of datetime inputs keeps being localized when spoof English is on Bug tor-browser#42378: spoof English + htmlform <details> can leak app language Bug tor-browser#42444: Remove the “Prioritize .onion sites when known” option Bug tor-browser#42448: Rebase Tor Browser stable onto Firefox 115.9.0esr Bug tor-browser#42459: Add startpage onion service to list of search providers Bug tor-browser-build#41105: Bump version of snowflake to v2.9.2 Windows + macOS + Linux Updated Firefox to 115.9.0esr Windows Bug tor-browser#42377: Hidden fonts are automatically added to the allow list Android Updated GeckoView to 115.9.0esr Bug tor-browser#42407: TTP-03-010 WP3: Potential phishing Build System All Platforms Updated Go to 1.21.8 Bug tor-browser-build#41102: src archive does not match, likely due to mismatched xz-utils version
The Tor Browser 13.0.13 (All Platforms) has been released. (22-March-2024) Tor Browser 13.0.13 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Tor Browser 13.0.13 is now available from the Tor Browser download page and also from our distribution directory. This is an unscheduled emergency release with important security updates to Firefox for Desktop platforms. Android is unaffected. Send us your feedback If you find a bug or have a suggestion for how we could improve this release, please let us know. Full changelog The full changelog since Tor Browser 13.0.12 is: Windows + macOS + Linux Updated Firefox to 115.9.1esr Bug tor-browser#42473: ESR 115.9.1 fixes Bug tor-browser#42474: Rebase stable browsers on 115.9.1
The Tor Browser 13.0.14 (All Platforms) has been released. (16-April-2024) Tor Browser 13.0.14 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.0.13 is: All Platforms Updated Tor to 0.4.8.11 Bug tor-browser#41676: Set privacy.resistFingerprinting.testing.setTZtoUTC as a defense-in-depth Bug tor-browser#42335: Do not localize the order of locales for app lang Bug tor-browser#42428: Timezone offset leak via document.lastModified Bug tor-browser#42472: Timezone may leak from XSLT Date function Bug tor-browser#42508: Rebase Tor Browser stable onto 115.10.0esr Windows + macOS + Linux Updated Firefox to 115.10.0esr Bug tor-browser#42172: browser.startup.homepage and TOR_DEFAULT_HOMEPAGE are ignored for the new window opened by New Identity Bug tor-browser#42236: Let users decide whether to load their home page on new identity. Bug tor-browser#42468: App languages not sorted correctly in stable Linux Bug tor-browser-build#41110: Avoid Fontconfig warning about “ambiguous path” Android Updated GeckoView to 115.10.0esr Bug tor-browser#42509: Backport Android security fixes from Firefox 125 Build System All Platforms Updated, Go to 1.21.8 Bug tor-browser-build#41107: Update download-unsigned-sha256sums-gpg-signatures-from-people-tpo for new type of URL Bug tor-browser-build#41122: Add release date to rbm.conf Android Bug tor-browser-build#40992: Updated torbrowser_version number is not enough to change firefox-android versionCode number
The Tor Browser 13.0.15 (All Platforms) has been released. (13-May2024) Tor Browser 13.0.15 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Tor Browser 13.0.15 - May 14 2024 * All Platforms * Bug 42559: Rebase Tor Browser stable onto 115.11.0esr [tor-browser] * Windows + macOS + Linux * Updated Firefox to 115.11.0esr * Bug 42391: IndexDB's private directory not removed on browser shutdown in global private browsing mode [tor-browser] * Bug 42532: Use the HomePage module for new identity checks [tor-browser] * Bug 42557: Fix regression in Onion Services authentication prompt focus [tor-browser] * Bug 42565: Backport Android and desktop security fixes from Firefox 126 [tor-browser] * Android * Updated GeckoView to 115.11.0esr * Bug 42195: Fix “What's new” URL to direct to latest version [tor-browser] * Bug 42562: Restrict the accepted languages to the ones whose localization is available [tor-browser] * Build System * macOS * Bug 42535: mac: app change to ja doesn't apply ja translations to most (all?) chrome [tor-browser]
The Tor Browser 13.0.16 (All Platforms) has been released. (11-June-2024) Tor Browser 13.0.16 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Tor Browser 13.0.16 is now available from the Tor Browser download page and also from our distribution directory. This version includes important security updates to Firefox. Send us your feedback If you find a bug or have a suggestion for how we could improve this release, please let us know. Full changelog The full changelog since Tor Browser 13.0.15 is: All Platforms Updated Tor to 0.4.8.12 Updated OpenSSL to 3.0.14 Bug tor-browser#42625: Rebase Tor Browser Stable 13.0 onto 115.12.0esr Windows + macOS + Linux Updated Firefox to 115.12.0esr Android Updated GeckoView to 115.12.0esr Bug tor-browser#42621: Backport security fixes from Firefox 127 Build System All Platforms Updated, Go to 1.21.11
The Tor Browser 13.5 (All Platforms) has been released. (20-June-2024) Tor Browser 13.5 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.0.16 is: All Platforms Bug tor-browser#40856: Add a default for preferences in TorSettings Bug tor-browser#40919: Consider dropping protection against line-height introduced in #23104 Bug tor-browser#41114: Fix no-async-promise-executor on TorConnect Bug tor-browser#41467: compat: beacon: re-enable the API but transform it to a no-op Bug tor-browser#42153: Drop dom.enable_resource_timing = false preference Bug tor-browser#42246: Migrate tor connection stuff from browser to toolkit Bug tor-browser#42290: "DuckDuckGoOnion" is a weird naming format for onion search engines Bug tor-browser#42302: The allowed ports string contains a typo Bug tor-browser#42308: Update README for tor browser Bug tor-browser#42315: compat: why is eventCounts undefined? Bug tor-browser#42336: Review the relationship between TorSettings and the TorProvider Bug tor-browser#42340: TorBridgeChanged notification sends out "[object Object]" as its data Bug tor-browser#42343: Consume pt_config.json in the browser Bug tor-browser#42354: Refactor exclusions in ShouldSanitizePreference() to the pref list. Bug tor-browser#42358: Separate the domain fronted requests from Moat Bug tor-browser#42359: Handle firewall and proxy in TorSettings.setSettings Bug tor-browser#42390: Betterboxing: make the decorator border disappear when the corners are flat Bug tor-browser#42397: Change RFP-spoofed Timezone from UTC to a real-world, less discriminable one Bug tor-browser#42437: Drop "torbrowser.version" preference Bug tor-browser#42466: Drop the "Onion Logo" from trademark statement Bug tor-browser#42479: Switch from localized strings to error codes in TorConnect errors Bug tor-browser#42481: Modularize SecurityLevel Bug tor-browser#42521: Remove unused onboarding strings Bug tor-browser#42529: Try not to spoof system-ui in contexts exempt from RFP Bug tor-browser#42537: Move Fluent files from "browser" to "toolkit" Bug tor-browser#42538: Move onion icons to toolkit Bug tor-browser#42549: Remove brand.dtd Bug tor-browser#42604: Add some debug logs about circuits Bug mullvad-browser#241: Move network.proxy.failover_direct=false pref to base-browser Bug tor-browser-build#41111: Use Lyrebird to provide WebTunnel PT Client Windows + macOS + Linux Bug tor-browser#40843: Add a working state to the Internet test button in connection settings Bug tor-browser#41621: Tweak about:torconnect styling Bug tor-browser#41622: Convert onion site errors to the new neterror template Bug tor-browser#41814: Change "vanilla bridge:" to "Tor bridge:" in bridge cards Bug tor-browser#41916: Letterboxing preferences UI Bug tor-browser#41917: Make the appearance of letterboxing look more intentional Bug tor-browser#41918: Add option to reuse last window size when letterboxing is enabled Bug tor-browser#41930: intl.accept_languages gets into a stuck modifed state Bug tor-browser#41966: Cannot remove locales from the locale alternatives list Bug tor-browser#42036: Design and build a user interface for Lox Bug tor-browser#42192: Correctly round new windows when bookmarks toolbar is set to "Only Show on New Tab" Bug tor-browser#42202: Fluent migration: crypto safety Bug tor-browser#42203: Fluent migration: about dialog Bug tor-browser#42204: Drop unused aboutTor.dtd Bug tor-browser#42206: Fluent migration: about:rulesets Bug tor-browser#42207: Fluent migration: preferences Bug tor-browser#42209: Fluent migration: tor circuit Bug tor-browser#42210: Fluent migration: download warning Bug tor-browser#42211: Fluent migration: new identity Bug tor-browser#42214: Fluent migration: security level Bug tor-browser#42270: Implement design changes to QR code dialog Bug tor-browser#42303: Remove unused "help" button logic in tor dialogs Bug tor-browser#42319: Make all the wordmark of the same size Bug tor-browser#42387: Visual noise in 13.5a4 letterboxing Bug tor-browser#42389: Betterboxing: gradient is never shown Bug tor-browser#42398: Include Alpha and Nightly in MOZ_APP_DISPLAYNAME (and possibly in other places) Bug tor-browser#42405: Fix betterboxing + findbar horizontal bounce if the scrollbar is not an overlay Bug tor-browser#42414: Show ellipsis when the tor bridge address overflows Bug tor-browser#42415: Improve focus styling for forced focus in bridge settings Bug tor-browser#42421: Remove bridge option should be hidden for Lox bridges Bug tor-browser#42423: Move temporary Lox Fluent strings to new file Bug tor-browser#42425: Improve accessibility of the bridge emoji cells Bug tor-browser#42443: Shrink the window to match letterboxing size when the emtpy area is doble-clicked Bug tor-browser#42446: Improve accessible descriptions in built-in dialog Bug tor-browser#42457: Loading icon for bridge pass (Lox) invites Bug tor-browser#42458: Update the "Submit Feedback" link in "About Tor Browser" Bug tor-browser#42476: Only allow Lox (invites) in alpha and nightly builds Bug tor-browser#42489: Lox module notifications Bug tor-browser#42490: Install svg from branding theme to browser/chrome/icons/default Bug tor-browser#42496: Moat refresh bug Bug tor-browser#42500: When startup window is maximized per letterboxing.rememberSize on startup, the restore button shrinks it to its minimum size Bug tor-browser#42504: TB Bookmarks: Add the Tor forum .onion to the bookmarks Bug tor-browser#42510: SETCONF Tor control protocol command should not be used when system Tor is configured / TOR_SKIP_LAUNCH=1 is not honored Bug tor-browser#42511: false positive message: browser tab bar shows "Not connected" even though connected in a system Tor etc. context Bug tor-browser#42520: Correctly record new initial window size after auto-shrinking Bug tor-browser#42533: Add Lox notification for activeLoxId Bug tor-browser#42540: Fix gNetworkStatus.deinint typo Bug tor-browser#42541: Circuit Display does not work when using Conjure pluggable transport Bug tor-browser#42542: Quirks when onion authentication prompt is shared between two tabs Bug tor-browser#42573: Tweak language notification to avoid formatValue Bug tor-browser#42574: Exempt pdf.js from letterboxing Bug tor-browser#42583: Modify moz-support-link Bug mullvad-browser#262: Mouse-over long links causes the browser element to re-center relative to width of status tooltip Bug mullvad-browser#289: The Letterboxing>Content Alignment heading doesn't follow the Firefox design document capitalization Bug tor-browser-build#41149: Add be, bg and pt-PT translations to nightlies Windows + macOS Bug tor-browser#41405: Win ≤8.1 and macOS ≤10.14 not supported in ESR 128 Bug tor-browser#42347: Add a banner warning users about the upcoming EOL for Win ≤8.1 and macOS ≤10.14 Bug tor-browser#42586: Add support link to OS deprecation message Windows Bug tor-browser#41859: Font used for IPs in circuit display is illegible Bug tor-browser#41901: windows: FontSubstitutes can leak system locale Bug tor-browser#42163: Make the 3rd party DLL blocklist obey portable mode macOS Bug tor-browser-build#40569: Create build-specific installer for macOS Linux Bug tor-browser#42438: Adapt the data import wizard to use the original $HOME on Linux Bug tor-browser-build#41112: Fix indentation of projects/browser/RelativeLink/start-browser Bug tor-browser-build#41136: Include *.deb in the list of files to gpg sign Android Bug tor-browser#41187: Improve Android's bridge settings UI Bug tor-browser#41846: Disable new nimbus use in firefox-android 115 Bug tor-browser#42017: TBA13: system/widget font tests: font-family not returned in getComputedStyle Bug tor-browser#42248: Allow GeckoView to launch tor Bug tor-browser#42249: Allow GeckoView to launch lyrebird Bug tor-browser#42250: Allow Moat.sys.mjs to invoke lyrebird on Android Bug tor-browser#42252: Plumb down TorConnect commands from firefox-android to GeckoView Bug tor-browser#42253: Remove "New private tab" action and widget Bug tor-browser#42259: Remove unused firefox branding from Tor Browser for Android Bug tor-browser#42260: Add TBB artifacts to .gitignore Bug tor-browser#42301: Make TorSettings interact with the old Android Settings Bug tor-browser#42317: Update "Security Settings" menu item Bug tor-browser#42323: Add a checkbox to enable the connect assist experiments on alpha Bug tor-browser#42409: TTP-03-011 WP3: Potential DoS due to Deep Link abuse Bug tor-browser#42427: Do not ship bridges as prefences anymore Bug tor-browser#42486: firefox-android bridge settings sometimes dont save Bug tor-browser#42522: The quick connect switch on Android seems too much on the right side Bug tor-browser#42552: TBA: formatting APIs are en-US only Bug tor-browser#42566: Remove 'Enable beta connection features' menu item in stable release channel Bug tor-browser#42567: Remove 'Enable beta connection features' toggle Bug tor-browser#42571: The new bootstrap on Android breaks if the browser goes in background Bug tor-browser#42576: Backport Bug 1885171: use the private keyboard for prompts on Android Bug tor-browser#42578: Reject Android "open in Tor Browser" intent Bug tor-browser#42582: Accepted languages should use id and he on Android Bug tor-browser#42593: Unable to disable bridges after they have been configured and successfully bootstrapped Bug tor-browser#42618: Addons on Android have a stale cache Bug tor-browser#42619: Cannot install Android addons from AMO Bug tor-browser#42632: Don't display builtin bridges in provide bridge popup Bug tor-browser#42636: A bad bridge line might get TBA stuck Bug tor-browser#42648: Don't cancel tor bootstrap when opening settings from bootstrap Bug tor-browser-build#41143: Enable multi-locales also on GeckoView Build System All Platforms Bug tor-browser#42331: tb-dev fetch command is missing repository argument Bug tor-browser#42516: Make tb-dev worktree-compatible Bug tor-browser#42594: Update mach to work with Python 3.12 Bug tor-browser-build#40852: Reproducible build of the the lox client library to wasm Bug tor-browser-build#40983: Bump the various branches to 13.5 on main Bug tor-browser-build#41001: Create Release Prep MR generating script Bug tor-browser-build#41037: Set time on signing machine before starting signing Bug tor-browser-build#41038: Add RPM dependencies to README Bug tor-browser-build#41045: Dump more information about build times on Firefox Bug tor-browser-build#41048: Drop the kcp-go project Bug tor-browser-build#41073: Update documention about required packages for container-less build Bug tor-browser-build#41081: Update detailsURL in tools/signing/nightly/update-responses-base-config.yml Bug tor-browser-build#41148: Update projects/browser/Bundle-Data/Docs/Licenses/NoScript.txt Bug tor-browser-build#41153: Update README for Ubuntu 24.04 unprivileged user namespace changes Bug tor-browser-build#41154: Update keyring/boklm.gpg for new subkeys Bug tor-browser-build#41161: Explicitly fetch tags in the release preparation script Bug rbm#40071: Add an option to create zip files using 7z Bug rbm#40073: We should remove ./ when using 7-zip for zip files Bug rbm#40076: Correctly refresh file when computing input_files_id and a file is set as refresh_input Windows + macOS + Linux Bug tor-browser#42305: (Semi-)Automatically merge translation resources across tor browser releases (desktop) Bug tor-browser#42501: Move --disable-eme to OS- and architecture-specific mozconfigs Bug tor-browser#42519: Update the profile directory patch to check both for system-install and for is-packaged-app file Bug tor-browser-build#41057: make fetch is not fetching mullvad repo Bug tor-browser-build#41078: pt_config.json not touch'd before adding to omni.ja, resulting in build non-determinism Bug tor-browser-build#41088: Remove use of projects/browser/run_scripts Windows Bug tor-browser-build#40606: Use Clang to compile NSIS Bug tor-browser-build#40900: Update NSIS to 3.09 Bug tor-browser-build#41065: Do a cleanup of the NSIS script Bug tor-browser-build#41076: Include the ShellLink plugin in NSIS Bug tor-browser-build#41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists Bug tor-browser-build#41150: Do not check for SSE2 on the Windows installer macOS Bug tor-browser-build#41084: $app_bundle is missing the final .app in projects/firefox/build Bug tor-browser-build#41124: Since TB/MB 13.5a5 macos signed installers contain all .DS_Store Linux Bug tor-browser#42491: Add mozconfig-linux-aarch64 Bug tor-browser-build#41046: Use the final path for Linux debug symbols Bug tor-browser-build#41126: Make deb and rpm packages for Tor Browser Bug tor-browser-build#41137: Build gcc-cross and tor-expert-bundle for linux-aarch64 Bug tor-browser-build#41160: Enable build of Tor Browser rpm/deb packages for nightly only Android Bug tor-browser#40502: Do not recommend addons on Tor Browser Bug tor-browser#42399: Re-enable minimization of JS for Android Bug tor-browser#42568: Remove legacy tor dependencies from firefox-android Bug tor-browser#42569: Remove tor-onion-proxy-library and and tor-android-service deployment/ingestion steps from firefox-android dev tools/scripts Bug tor-browser#42570: Add tor-expert-bundle aar depoyment/ingestion step to firefox-android dev tools/scripts Bug tor-browser#42581: Check if a file exists before trying to sign it in tools/tba-sign-devbuild.sh Bug tor-browser-build#41080: Re-pack omni.ja with 7-zip on Android Bug tor-browser-build#41082: Package tor expert bundle on android as .aar that firefox-android can use in lieu of tor-android-service with geckoview bootstrap Bug tor-browser-build#41092: Use an uncompressed omni.ja to improve final apk compression. Bug tor-browser-build#41093: Sign unsigned APKs instead of the QA-signed ones Bug tor-browser-build#41127: Android testbuilds fail because of the too early MOZ_BUILD_DATE Bug tor-browser-build#41139: Remove tor-android-service and tor-onion-proxy-library dependencies and ingestion steps from firefox-android config and build script Bug tor-browser-build#41140: Remove tor-onion-proxy-library and tor-android-service projects from tor-browser-build Bug tor-browser-build#41141: Add tor-expert-bundle aar dependency to firefox-android Bug tor-browser#42201: Make the script sign all the channels for local builds Bug tor-browser#42258: Replace the current boring "fiery android" icon we use for dev with the cool nightly icon
The Tor Browser 13.5.1 (All Platforms) has been released. (10-July-2024) Tor Browser 13.5.1 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog |
The Tor Browser 13.5.2 (All Platforms) has been released. (06-August-2024) Tor Browser 13.5.2 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.5.2 is: All Platforms Updated NoScript to 11.4.31 Bug tor-browser#42835: Filter data transfers containing files Bug tor-browser#42998: Rebase Tor Browser stable onto 115.14.0esr Bug tor-browser#43005: Backport security fixes from Firefox 129 Windows + macOS + Linux Updated Firefox to 115.14.0esr Android Updated GeckoView to 115.14.0esr Build System All Platforms Bug tor-browser#42470: Add merge request CI for linting Bug tor-browser-build#40964: Create new Tor Browser gpg subkey Bug tor-browser-build#41168: deploy_update_responses-$channel.sh should check that it is not reverting an update in another channel Bug tor-browser-build#41184: Update generate blog post script to use new blog header images Bug tor-browser-build#41190: Add morgan.gpg to keyrings and list of valid keyrings in firefox+geckoview Bug tor-browser-build#41191: Remove richard.gpg from keyrings and list of valid keyrings in firefox+geckoview Bug tor-browser-build#41204: NoScript isn't added automatically to Mullvad Browser changelogs
The Tor Browser 13.5.3 (All Platforms) has been released. (04-September-2024) Tor Browser 13.5.3 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.5.2 is: All Platforms Updated NoScript to 11.4.35 Bug tor-browser#40056: Ensure that the lazy loading attribute is ignored on script-disabled documents Bug tor-browser#42686: Backport Mozilla 1885101 Bug tor-browser#42829: Prevent CSS-based scriptless interaction tracking Bug tor-browser#43084: Rebase Tor Browser Stable onto 115.15.0esr Bug tor-browser#43100: Backport security fixes from Firefox 130 Bug tor-browser-build#41207: Upgrade lyrebird to 0.3.0 Windows + macOS + Linux Updated Firefox to 115.15.0esr Bug tor-browser#42596: Several console errors: Console.maxLogLevelPref used with a non-existing pref: Bug tor-browser#42622: Offline state is unreachable in about:torconnect (first bootstrap attempt) Bug tor-browser#42642: Downloads button warning no longer announced on Orca Bug tor-browser#42661: Re-run update_emojis.py and update locales Bug tor-browser#42691: Simplified bridge cards prevent censored users from modifying built-in bridges Bug tor-browser#42696: Update mail icon used in “Find more bridges” Bug tor-browser#42697: Remove padding to left of tor-bridges-provider-list under “Find more bridges” Bug tor-browser#43059: Drag and Drop issue in new update 13.5.2 Bug tor-browser#43066: about:torconnect no longer changes the title icon on errors Linux Bug tor-browser#43064: Make copy/paste and drag/drop file filtering more specific Android Updated GeckoView to 115.15.0esr Build System All Platforms Updated Go to 1.21.13 Bug tor-browser-build#41213: Update the update_manual.py script to notify when no changes needed Bug tor-browser-build#41218: Use new Tor Browser gpg subkey for signing stable releases Bug tor-browser-build#41222: link_old_mar_filenames still referenced in torbrowser-incrementals-{release,alpha}-unsigned Android Bug tor-browser-build#41206: GeckoView ignores the number of processors
The Tor Browser 13.5.4 (All Platforms) has been released. (17-September-2024) Tor Browser 13.5.4 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.5.3 is: All Platforms Updated NoScript to 11.4.37 Updated OpenSSL to 3.0.15 Windows + macOS + Linux Bug tor-browser#41835: Review default search engine options Android Bug tor-browser#43124: Implement a migration procedure for Android Bug tor-browser#43145: Backport Android security fix from 130.0.1 Build System All Platforms Bug tor-browser-build#41229: Migrate OpenSSL download location to github releases macOS Bug tor-browser-build#41231: Use var/browser_release_date in tools/signing/gatekeeper-bundling.sh
The Tor Browser 13.5.5 (Windows, macOS, and Linux) has been released. (26-September-2024) Tor Browser 13.5.5 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.5.4 is: Windows + macOS Bug tor-browser#43125: Update message for legacy OS (windows ≤8.1, macOS ≤10.14) users. Linux Bug mullvad-browser#334: When set as default browser on Linux in standard mode, links don't open correctly.
The Tor Browser 13.5.6 (All Platforms) has been released. (01-October-2024) Tor Browser 13.5.6 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.5.4 is: All Platforms Updated NoScript to 11.4.40 Bug tor-browser#42832: Download spam prevention should not affect browser extensions Bug tor-browser#43167: Rebase Tor Browser Stable onto 115.16.0esr Bug tor-browser#43173: Backport security fixes from Firefox 131 Windows + macOS + Linux Updated Firefox to 115.16.0esr Bug tor-browser#42737: Drop the hash check on updates Bug tor-browser#43098: YEC 2024 Takeover for Desktop Stable Windows + macOS Bug tor-browser#42747: Windows 7/8 and macOS 10.12-10.14 Legacy/Maintenance Android Updated GeckoView to 115.16.0esr Bug tor-browser#43099: YEC 2024 Takeover for Android Stable
The Tor Browser 13.5.7 (All Platforms) has been released. (09-October-2024) Tor Browser 13.5.7 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler Full changelog The full changelog since Tor Browser 13.5.6 is: All Platforms Bug tor-browser#43201: Security fixes from Firefox 131.0.2. Bug mullvad-browser#361: SSL_ERROR_NO_CYPHER_OVERLAP on some Brazilian government websites. Build System Windows + macOS + Linux Bug tor-browser-build#41254: Drop cryptoSafetyPrompt.properties line.
The Tor Browser 14.0 (All Platforms) has been released. (21-October-2024) Tor Browser 14.0 is now available from the Tor Browser download page and also from our distribution directory. Blog/Announcement | Full Changelog | Spoiler What's new? New circuit for Android In previous versions of Tor Browser for Android, users could request a "New identity" by interacting with a persistent notification that appeared while Tor Browser was running. However this was unusual for a couple of reasons – firstly, no such feature was available in the app's user interface itself, and it could only be enabled outside the app via Android's notification drawer. Secondly, this feature did not perform the same steps as Tor Browser for desktop to reset your identity, such as closing all tabs, clearing all cookies and wiping your browsing history. In actuality, it functioned more like a "refresh all circuits" button. We've since learned that most Android users were relying on this feature as workaround to request a new circuit for a broken website, rather than reset their identity as such. So when this notification inadvertently disappeared in Tor Browser 13.5, we didn't rush to bring it back in its original state. Instead, we chose to focus our efforts on porting the desktop feature "New circuit for this site" to Android, allowing our mobile users to request a new circuit in a more targeted fashion. https://blog.torproject.org/new-release-tor-browser-140/140-new-circuit.png Extended support for legacy platforms With the release of Tor Browser 13.5, we began warning users of Windows 7, 8 and 8.1 and macOS 10.12, 10.13 and 10.14 that this would be the last major release to support their platforms. In short, that situation has now changed, and users of these legacy platforms will continue to receive critical security updates updates on a temporary basis until at least March 2025. Microsoft ended support for Windows 7, 8 and 8.1 in January of 2023, and Apple typically provides support for the previous three versions of macOS. In turn, Mozilla moved support for these versions to the Extended Support Release (ESR) of Firefox last year, and ESR 115 will be the final version of Firefox to support these platforms. However, Mozilla have since announced that ESR 115 will continue to receive critical security updates until at least March 2025, with the intention to re-evaluate the situation at the beginning of the year. So how does this affect Tor Browser users? That's where it gets a little complicated: Tor Browser 13 is currently based on Firefox ESR 115, whereas Tor Browser 14 is based on ESR 128 – which doesn't support these legacy platforms. This means that the Tor Browser user base will be split across two update paths: Users of Windows 10 or later and macOS 10.15 or later will be updated to Tor Browser 14.0. User of Windows 7, 8 and 8.1 and macOS 10.12, 10.13 and 10.14 will remain on Tor Browser 13.5. In turn, the Tor Project will continue to release new versions of Tor Browser 13.5 whenever critical security updates are made available for Firefox ESR 115. Ultimately, this support is only temporary, and is dependent on Mozilla's timetable. Therefore we strongly recommend users of legacy Windows and macOS platforms upgrade their operating systems in order to update to Tor Browser 14.0 before the extended support window ends. Keeping Tor Browser up to date is critical to protect your privacy, security and anonymity online. https://blog.torproject.org/new-release-tor-browser-140/140-legacy-support.png Known issues Tor Browser 14.0 comes with a number of known issues that are searchable on Tor Browser's Gitlab project. In particular, Windows and Android users should be aware of the following: Android We are currently working on a fix for an issue with Guardian Project's F-Droid repo that's been preventing F-Droid users from updating since Tor Browser 13.5.3's release. Until this issue is resolved, Android users who have installed Tor Browser via Guardian Project's F-Droid repo will not receive the 14.0 update. Google Play is unaffected by this issue, and Tor Browser 14.0 can be downloaded from there in the interim. Alternatively, affected users may download and install the APK for Tor Browser 14.0 directly from our download page, however please note that APKs do not update automatically. For more details, see tor-browser#43208. Windows Running Tor Browser in compatibility mode in Windows 10 and 11 can make it appear as though you're using Windows 7 instead. Given the minimum support requirements for Tor Browser 14.0 described above, Windows 10 and 11 users will need to ensure compatibility mode is switched off before they can update to 14.0. Contributors <3 Thanks to all of the teams across Tor, and the wider community, who contributed to this release. In particular we'd like to extend our gratitude to the following volunteers who have contributed their expertise, labour, and time to this release: cypherpunks1 Thank you for tackling the (now shrinking) list of Android bugs, UI discrepencies, and packaging problems. The Android release is more polished than it otherwise would be because of your help. tor-browser#41550 tor-browser#43052 tor-browser#43129 tor-browser#43146 tor-browser#43147 tor-browser#43202 tor-browser#43223 tor-browser#43225 tor-browser#43227 tor-browser#43228 tor-browser-build#41261 NoisyCoil Thank you for bringing us one step closer to reproducible aarch64 Linux builds. This merge-request was long in the making. tor-browser-build#41142 thorin Last but not least, a big thank you to thorin for your help keeping track of and flagging upstream issues, developing tests, verifying our fixes, maximizing Tor Browser's fingerprinting protections, and for being an ever present advocate for user privacy in general. If you would like to contribute to a future release, please see our guide for new contributors to get started. If you find a bug or have a suggestion for how we could improve this release, we'd love to hear your feedback. Full changelog The full changelog since Tor Browser 13.5.7 for desktop and Tor Browser 13.5.8 for Android is: All Platforms Bug tor-browser#30543: compat: make spoofed orientation reflect spoofed screen dimensions Bug tor-browser#30862: 10ms time precision via EXSLT date-time function Bug tor-browser#41328: Follow firefox ESMify for Bug 1308512 Bug tor-browser#42054: ESR128: investigate - thorin's list Bug tor-browser#42220: Flip all the possible preferences to prevent any automatic download Bug tor-browser#42255: pdfjs.disabled used to be part of RFP until Bug 1838415; lock pref to false in stable Bug tor-browser#42356: Review 000-tor-browser.js and 001-base-profile.js for 128 Bug tor-browser#42601: Check Bug 1894779: Allow font-face urls to be resource:// urls and relax CORS for resource:// URLs Bug tor-browser#42611: Set clipboard.imageAsFile.enabled to false Bug tor-browser#42646: Drop patch for tor-browser#40166 Bug tor-browser#42683: Create script to generate issue triage csv's from bugzilla query and git scraping Bug tor-browser#42684: Disable network prefetch Bug tor-browser#42685: compat: ESR128: enable textmetrics Bug tor-browser#42716: Disable unwanted about:* pages Bug tor-browser#42730: Make RemoteSettings use only local dumps Bug tor-browser#42746: Extend prefers-contrast rules to include forced-colors Bug tor-browser#42759: CI: remove localization file names that are in neither 14.0 nor 13.5 branches Bug tor-browser#42814: Opt out from Firefox relay by default. Bug tor-browser#42830: Enable WebAudio APIs Bug tor-browser#42831: Remove the shopping components Bug tor-browser#42867: Disable contentRelevancy component Bug tor-browser#43011: Ship only one copy of the MIT license, like upstream. Bug tor-browser#43012: Mixed content: browser requests HTTPS images from onion domain accessed via HTTP Bug tor-browser#43013: security.mixed_content.upgrade_display_content.image is true by default Bug tor-browser#43054: check bounceTrackingProtection in PB mode does not persist to disk Bug tor-browser#43074: Pass the browser to TorDomainIsolator.newCircuitForBrowser Bug tor-browser#43144: Ensure non-privacy browsing also sets the GPC header Bug tor-browser#43163: Disable offscreen canvas until verified it is not fingerprintable Bug tor-browser#43170: Disable user-agent spoofing in HTTP header Bug tor-browser#43178: Audit fingerprinting overrides (MozBug 1834274) Bug tor-browser#43184: Backport Bugzilla 1922294: RFP: fixup square spoofed orientation Bug tor-browser#43197: Disable automatic exception for HTTPS-First Windows + macOS + Linux Updated Firefox to 128.3.0esr Updated NoScript to 11.4.42 Bug tor-browser#40147: Re-enable Picture-in-Picture mode Bug tor-browser#41309: Re-enable screenshots component Bug tor-browser#41811: Primary buttons that result in a connection attempt should be purple Bug tor-browser#41817: Add more color aliases that take dark mode into account Bug tor-browser#41820: Downloads warning styling improvements (use moz-message-bar) Bug tor-browser#42070: Backport Bugzilla 1834307 and hide smooth-scroll UX Bug tor-browser#42212: Fluent migration: onion services Bug tor-browser#42362: "New window" missing from File menu Bug tor-browser#42441: Evaluate RR version-by-RR version rebases instead of ESR-to-ESR Bug tor-browser#42488: ESR 128: Remove role="code" from tor circuit panel Bug tor-browser#42603: Remove safebrowsing URLs Bug tor-browser#42612: Re-implement moz-toggle customizations for ESR 128 Bug tor-browser#42617: Restore the HTML form on DDG when using safest in 128 Bug tor-browser#42629: Tweak isOnNewTabPage patch Bug tor-browser#42630: Review LaterRun in 128 Bug tor-browser#42640: Disable Firefox Flame button due to unknown interactions with New Identity Bug tor-browser#42641: Move from panel-footer class to moz-button-group Bug tor-browser#42643: downloads panel separator has mismatched margin Bug tor-browser#42644: toolbar rules in panelUI-shared.css are unneccessary Bug tor-browser#42647: "Switching to a new device" regressed on 128 Bug tor-browser#42653: The Neterror page has a checkbox to report iframe origin errors to TPO Bug tor-browser#42662: Use data-hidden-from-search for hiding the firefox connection settings Bug tor-browser#42663: Tor Browser "Connection" settings missing a tooltip Bug tor-browser#42665: Drop "Learn More" spacing Bug tor-browser#42667: Add description-deemphasized class to our additions to aboutreferences Bug tor-browser#42679: Use a more robust approach to hide the "tracking protection" urlbar button Bug tor-browser#42687: Disable Privacy-Preserving Attribution Bug tor-browser#42695: Use --arrowpanel- variables for tor circuit panel spacing Bug tor-browser#42698: Bridge card background contrast is low for bridge-moji Bug tor-browser#42699: Drop level="top" attribute from panels Bug tor-browser#42700: Remove !nodes condition from gTorCircuitPanel._updateCurrentBrowser Bug tor-browser#42704: Drop the badged="true" attribute from security level button Bug tor-browser#42705: Update our preferences to account for new line height Bug tor-browser#42713: Some --in-content CSS variables were renamed/removed Bug tor-browser#42718: Remove the firefox-view button from UI, even when always-on private-browsing mode is disabled Bug tor-browser#42735: Disable recent search suggestions Bug tor-browser#42740: Stop trying to hide "Restore previous session" Bug tor-browser#42742: Inconsistent use of "New private window" vs "New window" Bug tor-browser#42743: Invalid onion sites are shown as secure in the page info window Bug tor-browser#42744: Light theme override for "about:tor" is inherited by chrome error pages. Bug tor-browser#42745: Remove some residuals from update scripts Bug tor-browser#42764: Unconditionally disable find-bar transition animation Bug tor-browser#42777: Remove 'Website Privacy Preferences' and ensure sensible default prefs Bug tor-browser#42803: Lost focus styling for built-in bridges radio options Bug tor-browser#42806: Use the lh CSS unit Bug tor-browser#42872: Disable translations until audited and solved the UX problems Bug tor-browser#43015: Missing region-name-skr fluent entry when fetching TorConnect country names Bug tor-browser#43067: Use html:link rather than xml-stylesheet in our dialogs Bug tor-browser#43071: Make sure "tor-button" elements that are also "primary" still use the tor colors Bug tor-browser#43072: moz-message-bar does not get announced on Orca screen-reader Bug tor-browser#43075: Should we drop link spacing in about:tor Bug tor-browser#43081: Remove hard-coded CSS line-height Bug tor-browser#43082: Search engine icon is not shown while typing in the address bar Bug tor-browser#43083: Backport fix for Mozilla 1436462 Bug tor-browser#43087: Onion pattern on about:torconnect needs a dark theme asset Bug tor-browser#43103: Verify whether an update is unsupported before choosing one Bug tor-browser#43104: Local files and extensions can't be loaded in new windows before bootstrap Bug tor-browser#43105: Migrating Disconnect is not needed anymore Bug tor-browser#43109: Remove mention of Firefox Relay from settings Bug tor-browser#43115: Height of search bar has collapsed on about:tor Bug tor-browser#43117: Hide 'Always underline links' option Bug tor-browser#43118: hide CFR Bug tor-browser#43131: Reduce layout jank when loading about:tor Bug tor-browser#43134: Backport Bugzilla 1436226 Hardcode VP8/VP9 Bug tor-browser#43164: Prevent search-bar from being auto-hidden when not used for awhile Bug tor-browser#43169: compat: align userAgent in navigator + HTTP Header Bug tor-browser#43174: Issue with custom home page on local filesystem Bug tor-browser#43209: UI freezes when clipboard is empty after screen lock Bug tor-browser#43217: Fullscreen videos have rounded letterboxing corners Bug tor-browser#43218: Switch to browser.reload, since Browser:Reload signal was dropped upstream Bug tor-browser-build#41248: Check and update bundled font versions Windows + macOS Bug tor-browser#43021: Revert the OS deprecation notification introduced in #42347 macOS + Linux Bug tor-browser#42467: Make OS HTTP User-Agent OS spoofing configurable by pref Windows Bug tor-browser#43051: windows: remove UI for "open Tor Browser automatically when computer starts" macOS Bug tor-browser#42494: mac: add Arial Black and Arial Narrow to allowlist Linux Bug tor-browser#42702: Cannot access the clipboard for the crypto address check (wayland) Bug tor-browser#42773: Replace ~ with the original HOME Bug tor-browser#43092: Disable Wayland by default in 14.0 Bug tor-browser#43101: Security features warning links to Firefox installation support page with incomplete info Bug tor-browser#43141: Hardcode Arimo as a system-ui font Bug tor-browser#43196: Remove the vendor name from the "is playing media" notification on Linux Bug tor-browser-build#41237: Add some aliases to our Linux font config for compatibility Android Updated GeckoView to 128.3.0esr Bug tor-browser#41550: Remove unused extensions from Tor Browser for Android Bug tor-browser#42386: Remove unused assets to reduce APK size Bug tor-browser#42590: “Tor browser” text in top left of home fragment/new tab view gets cut off with larger text sizes Bug tor-browser#42655: Implement "New circuit for this site" on Android Bug tor-browser#42660: Review the patch on Android's ProxySelector Bug tor-browser#42731: Verify privacy.spoof_english still works once we have Android builds Bug tor-browser#42954: Remove product recommendation API integration (Review Mozilla 1857215) Bug tor-browser#43006: Disable RFP for Font Visibility on Android Bug tor-browser#43016: Re-disable Nimbus Bug tor-browser#43043: Remove credit card autofill UI elements from menu Bug tor-browser#43048: Firefox logo on splash Bug tor-browser#43050: Center text in connect buttons Bug tor-browser#43052: Remove non private tabs icon and "other device tabs" from tab view Bug tor-browser#43057: fenix/.../search/list.json failing linting Bug tor-browser#43078: Disable Sharing Links to TBA Bug tor-browser#43088: Query stripping is disabled on Android Bug tor-browser#43094: Remove "Open in regular tab" button Bug tor-browser#43097: NoScript fails to install on Android Bug tor-browser#43102: Android notifications tell to make Firefox your default browser Bug tor-browser#43108: Backport Android fullscreen notifications refactoring on ESR128 Bug tor-browser#43114: Reader view uses the catch-all circuit on Android Bug tor-browser#43116: The lack of GeoIP databases produces a lot of spam in the console on Android Bug tor-browser#43128: Use DuckDuckGo HTML on the Safest security level for Android Bug tor-browser#43129: about:neterror cannot display SVG on Android with Security Level Safest Bug tor-browser#43132: Enable extensions installation on Tor Browser 14 for Android. Bug tor-browser#43146: Update the icon of DuckDuckGo onion search engine on Android Bug tor-browser#43147: Remove unused search plugins from the apk files Bug tor-browser#43151: MOZ_DATA_REPORTING, MOZ_TELEMETRY_REPORTING, MOZ_CRASHREPORTER, and MOZ_BACKGROUNDTASKS enabled on Android Bug tor-browser#43172: remove remote settings and SERPTelemetry Bug tor-browser#43202: Extensions page unnecessarily fetches recommended addons on Android Bug tor-browser#43223: Hide option to open bookmarks in non-private tabs on Android Bug tor-browser#43225: Hide non-private tab settings and history search on Android Bug tor-browser#43227: Hide the Firefox Suggest label above search suggestions on Android Bug tor-browser#43228: Fix the "What's new" URL and text on Android Bug tor-browser-build#41223: Tor Browser Alpha version not displayed correctly Build System All Platforms Updated Go to 1.22.8 Bug tor-browser#42722: clang-format and localization linters are not running Bug tor-browser#42799: Do not run lint pipelines on new tag Bug tor-browser#43014: Add purgecaches to the dev build Bug tor-browser#43156: Update translation CI to account for the extended 13.5 release Bug tor-browser#43157: Move tb-dev to base-browser Bug tor-browser#43181: Run translation CI if there is a change in a string.xml file Bug tor-browser-build#41013: Add a README to each project Bug tor-browser-build#41096: Set SOURCE_DATE_EPOCH in the default env variables Bug tor-browser-build#41155: Update toolchains for ESR128 Bug tor-browser-build#41156: Split the Rust configuration options Bug tor-browser-build#41180: Some files do not need to be copied when building tor-expert-bundle Bug tor-browser-build#41188: Upgrade binutils to 2.41 Bug tor-browser-build#41189: Add matzfan to list of downstream projects in alpha release-prep template Bug tor-browser-build#41195: Update Go to 1.22 Bug tor-browser-build#41198: Update release-prep issue template to include notifiying anti-censorship team of package name changes for GetTor distributor Bug tor-browser-build#41203: Tor Blog generation script uses the wrong url scheme for alpha releases Bug tor-browser-build#41236: Remove binutils when not needed Bug tor-browser-build#41273: relprep.py: bump Firefox and GV to a (yet) non-existing tag when the last one does not match HEAD Bug tor-browser-build#41274: Improve fetch_changelogs.py for major releases Bug tor-browser-bundle-testsuite#40078: Update tools/tb-build-06-start-nightly-build after tor-browser-build#40829 Windows + macOS + Linux Bug tor-browser#42668: Drop torconnect rule in eslint-plugin-mozilla Bug tor-browser-build#41247: Adapt tools/update-responses/update_responses to support multiple versions in the same xml files Bug tor-browser-build#41256: tools/signing/upload-update_responses-to-staticiforme should regenerate update-responses when it already exists Bug tor-browser-build#41259: Don't try to generate incrementals for versions which don't set incremental_from Bug tor-browser-build#41270: Add updater rewriterules to make 13.5.7 a watershed Windows + macOS Bug tor-browser-build#41197: Modify update-responses to prevent upgrades on unsupported Windows and macOS versions Windows Bug tor-browser-build#29318: Drop mingw-w64/gcc toolchain Bug tor-browser-build#29320: Use mingw-w64/clang toolchain to build Rust Bug tor-browser-build#41185: Drop Windows 7 support for 14.0 from build tools Bug tor-browser-build#41201: Bump the Windows version checked by the installer macOS Bug tor-browser-build#41267: Go dropping support for macOS <= 11.0 in Go 1.23 Android Bug tor-browser#42480: Use translation CI in android Bug tor-browser-build#40544: Bump Java 8 version to something more recent Bug tor-browser-build#41106: Non matching builds after application-services not being rebuilt in a long time Bug tor-browser-build#41123: Drop the firefox-android project Bug tor-browser-build#41171: Switch Android containers to Debian bookworm Bug tor-browser-build#41172: Refactor the android-toolchain project Bug tor-browser-build#41178: Force IPv4 when downloading in fix_gradle_deps.py Bug tor-browser-build#41200: Remove allowed_addons.json and the related tools Bug tor-browser-build#41210: Use tor-expert-bundle-aar in geckoview/build_apk Bug tor-browser-build#41211: The Android license file is not deterministic anymore Bug tor-browser-build#41214: Update geckoview/config to be more like firefox/config Bug tor-browser-build#41217: Update realprep.py script to handle Firefox 128-based Tor Browser Android Bug tor-browser-build#41224: Do not ship Conjure and GeoIP databases on Android x86, x86-64 to save some space Bug tor-browser-build#41232: Re-implement single-arch builds after the monorepo migration Bug tor-browser-build#41234: More dependencies are needed when building Android as a release Bug tor-browser-build#41261: Use an uncompressed NoScript xpi file to improve apk compression