Tor Browser

What's new in this version:

Fixed:
- Refactor about:torconnects relation to TorConnectParent
- Clean up initialisation and bridges conflict between TorSettings and TorConnect
- Do not store logs inside TorProvider
- Only allow "about:" pages to have access to contentaccessible branding assets
- Expose a stable asset from chrome:// to identify Tor, Base, and Mullvad Browser
- Developer Tools lacks data for Responsive Design Mode and Compatibility
- Move branding files out of torbutton
- Add branding files to translation CI
- Translation CI: Exclude android strings from the legacy branch
- Change the Tor Browser name between releases
- Include moat circumvention countries in the build (tor-browser part)
- Handle Moat connection errors and other non-bootstrapping errors in TorConnect
- Use lower case "n" for "Tor network" in the UI
- Enable new locales: be, bg and pt-PT
- AutoBootstrapAttempt cancel does not await BootstrapAttempt.cancel
- Backport Mozilla Bug 1924070 - modify H.264 extradata to match sample conversion code.
- Cleanup channel preferences
- Handle unavailability of NetworkLinkService API in Tor Connect
- Tor logs UI not updated as new logs come in
- Replace Noto Sans Myanmar with Pyidaungsu
- Show the link to about:support in the help menu
- Some .tor.onion sites are not displaying the underlying V3 onion address
- Add temporarily visible web content-size overlay after resizing window when letterboxing is enabled
- Drop about:tbupdate
- Do not re-try auto-bootstrapping after the user selects a specific region in about:torconnect
- Lox.generateInvite does not convert JSON object to string
- about:torconnect new url location override (maybeUpdateOpenLocationForTorConnect) mostly does nothing
- Letterboxing sometimes visible even if disabled
- Link to release notes missing from "About Tor Browser" window
- Fix localization in the profile error dialog
- Make use of :has CSS selector
- Adjust preferences for contrast theme or forced colors
- Remove privacy.resistFingerprinting.spoofOsInUserAgentHeader machinery entirely
- newwin / letterboxing rounding with subpixels is off
- Tweak Tor circuit display panel for screen readers
- Cancel Moat requests when no longer needed
- Onion site keys: add some alerts for screen readers
- Replace Actor willDestroy with didDestroy
- Tidy up connection preferences for screen readers and keyboard users
- Improve how bridge settings appear in search results
- Do not focus the connect button if the user has never connected before
- Improve tor log dialog
- tor-urlbar-button-plain hover styling is overwritten by tor-button rule
- Handle failing to apply tor settings
- Hide the "Onion Available" button whilst the "Connect" button is shown
- Drop our wordmark padding
- Use NetworkLinkService instead of Moat for the internet test
- Show the urlbar Connect button during a bootstrap or final error
- Drop unnecessary CSS rules in branding aboutDialog.css
- Race condition in about:tor prevents displaying localised survey banner
- Rename "Quickstart" toggle as "Connect automatically" (Desktop)
- Move openTorConnect and getRedirectUrl to TorConnectParent
- Use "label" attribute rather than textContent for the bridge dialog XUL buttons
- Cannot remove the final bridge
- TorConnect country/region names should change based on the app language
- Letterboxing size indicator may display data from a background tab
- New tab shows letterboxing size indicator
- privacy.resistFingerprinting.spoofOsInUserAgentHeader is still in our pref file even though we ripped out the code
- set browser.startup.blankWindow false

Build System:
- Add configuration to rbm.conf to select channel and platforms
- Use the official Go binaries for bootstrapping
- Better dev defaults for fetch variable
- Avoid unneeded git checkouts when possible
- Add a browser commit tag+signing script
- Container dependencies are sorted before resolving templates
- Container dependencies are not filtered for duplicates
- Remove var/torbrowser_legacy_version from rbm.conf in alpha/nightly
- Update sign-tag script to handle rapid-release nightly branches
- Indent download*.json files
- Handle branding names in tor-browser-build
- Include moat circumvention countries in the build (tor-browser-build part)
- Usability improvements for the browser commit tagging script
- Remove need to update set-config.tbb-version
- Fix upload-update_responses-to-staticiforme for mullvadbrowser
- Build snowflake from main on nightlies
- Restore -desktop and -android Makefile targets.
- Create a script for quickly setting up protected branches
- Update licenses for PTs
- Bump the conjure version we ship
- Add comment in downloads.json to mention that the file is deprecated, and that download-$platform.json should be used instead
- Set the Lyrebird version
- Bug rbm#40006: Add option to avoid doing a git checkout when using the exec template function
- Bug rbm#40079: Make fetch: if_needed fetch existing branches
- Bug rbm#40081: Support apt option for not installing recommended dependencies
- Bug rbm#40082: With fetch: if_needed, rbm is doing a git fetch when it shouldn't, when using a fixed commit
- Bug rbm#40083: rbm creates out/$project directories with mode 0700
- Updated Go to 1.23.8
- Upgrade Go to 1.23 for Windows, Linux, and Android
- Remove legacy locale iteration in build and signing scripts
- Add redirects to make 14.0a4 a watershed
- Change update-response generation script to create one commit per OS+arch tuple
- Remove support for migrate_archs and migrate_langs in update_responses
- Replace Noto Sans Myanmar with Pyidaungsu
- Windows + macOS
- Wrong copyright year makes build non-reproducible