- All Platforms
- Updated Firefox to 140.4.0esr
- Updated NoScript to 13.2.2
- Bug 451: The restart to apply button doesn't work [mullvad-browser]
- Bug 463: Fix typo in MimeType entry in .desktop file included in deb/rpm package (application/xhtml_xml instead of application/xhtml+xml) [mullvad-browser]
- Bug 468: Drop the Metager search engine [mullvad-browser]
- Bug 478: Update to the Mullvad Browser extension to 0.9.5 [mullvad-browser]
- Bug 19741: Opensearch (contextual search) does not obey FPI [tor-browser]
- Bug 42738: Tidy up the commit structure for browser updates UI [tor-browser]
- Bug 43009: Backport Bug 1973265 - Put WebCodecs API behind RFP Target [tor-browser]
- Bug 43093: Refactor the patch to disable LaterRun [tor-browser]
- Bug 43111: Delete our webextensions for search engines when Bug 1885953 is fixed upstream [tor-browser]
- Bug 43525: Check if our search engine customization still works after ESR 140 transition [tor-browser]
- Bug 43590: Move letterboxing rules out of browser/base/content/browser.css [tor-browser]
- Bug 43610: Use newer CSS variable names for ESR 140 [tor-browser]
- Bug 43629: All migrations in migrateUIBB are run for new profiles [tor-browser]
- Bug 43638: Fix up our
<command>elements [tor-browser] - Bug 43664: Review Mozilla 1842832: Move the private browsing toggle to initial install dialog [tor-browser]
- Bug 43728: Update search engine icon sizes [tor-browser]
- Bug 43745: Disable HEVC (H265) playback support [tor-browser]
- Bug 43749: Replace the newtab component and addon with our home page [tor-browser]
- Bug 43770: Bugzilla 1958070: More BrowserGlue simplification/splitting [tor-browser]
- Bug 43772: Do not use official branding for BB/TB/MB [tor-browser]
- Bug 43776: Set branding files for l10n merging [tor-browser]
- Bug 43795: Restore the URL classifier XPCOM components. [tor-browser]
- Bug 43844: Security level shield icon should be flipped for RTL locales [tor-browser]
- Bug 43850: Modify the Contrast Control settings for RFP [tor-browser]
- Bug 43864: Remove features from the unified search button [tor-browser]
- Bug 43869: Hide pens with RFP [tor-browser]
- Bug 43874: Incorporate our unified extension button hiding logic into mozilla's changes for ESR 140 [tor-browser]
- Bug 43886: Fix new tab for ESR 140 [tor-browser]
- Bug 43900: Open newtab rather than firefoxview when unloading the last tab [tor-browser]
- Bug 43902: Hide Sidebar buttons [tor-browser]
- Bug 43903: Report broken site is disabled rather than hidden [tor-browser]
- Bug 43905: base-browser.ftl missing from about:addons [tor-browser]
- Bug 43906: Extension.sys.mjs change in the wrong commit [tor-browser]
- Bug 43913: Context menu not properly populated [tor-browser]
- Bug 43947: Console error from ContentBlockingPrefs.init [tor-browser]
- Bug 43966: Notify the user when they are in a custom security level (desktop) [tor-browser]
- Bug 43989: Switch off AI chatbot preference [tor-browser]
- Bug 44030: Security Level selector does not get confirmation before restarting [tor-browser]
- Bug 44034: Update string used for checkbox on New Identity confirmation dialog [tor-browser]
- Bug 44040: Modify nsIPrompt and the commonDialog code to allow destructive buttons [tor-browser]
- Bug 44045: Drop AI and machine learning components [tor-browser]
- Bug 44090: Several of our XUL pages cause a crash because of missing CSP [tor-browser]
- Bug 44106: Make sure background tasks are not used for shutdown cleanup [tor-browser]
- Bug 44107: Switch tab search action is missing an icon [tor-browser]
- Bug 44108: Fix the new history sidebar [tor-browser]
- Bug 44123: Do not trim protocol off of URLs ever [tor-browser]
- Bug 44125: Do not offer to save signatures by default in Private Browsing Mode [tor-browser]
- Bug 44140: Refactored patch to prevent writing temp PDF files to disk [tor-browser]
- Bug 44141: Hide "Report broken site" items by default [tor-browser]
- Bug 44142: Missing document_pdf.svg from our branding directories [tor-browser]
- Bug 44153: Test search engine customization [tor-browser]
- Bug 44159: Change or hide the sidebar settings description [tor-browser]
- Bug 44177: Remove more urlbar actions [tor-browser]
- Bug 44178: Search preservation does not work with duckduckgo in safest security level [tor-browser]
- Bug 44187: TLS session tickets leak Private Browsing mode [tor-browser]
- Bug 44213: Reduce linkability concerns of the "Search with" contextual search action [tor-browser]
- Bug 44214: Update letterboxing to reflect changes in ESR 140 [tor-browser]
- Bug 44215: Hide Firefox home settings in about:preferences [tor-browser]
- Bug 44221: Backport MozBug 1984333 Bump Spoofed Processor Count [tor-browser]
- Bug 44234: No images in PDF [tor-browser]
- Bug 44242: Hand over Security Level's WebAssembly controls to NoScript [tor-browser]
- Bug 44262: Disable adding search engines from HTML forms [tor-browser]
- Bug 44270: Match Firefox's TLS fingerprint [tor-browser]
- Bug 44275: Reduce console noise on security level guess [tor-browser]
- Bug 44279: Disable contextual search install prompt [tor-browser]
- Windows
- Bug 440: Make abseil use win32 thread model on mingw [mullvad-browser]
- Bug 44046: Replace BASE_BROWSER_UPDATE with BASE_BROWSER_VERSION in the font visibility list [tor-browser]
- Bug 44062: Force touch enabled on Windows and Android [tor-browser]
- Linux
- Bug 43950: Review Mozilla 1894818: Support HEVC playback on Linux [tor-browser]
- Bug 43959: Make Noto Color Emoji the default emoji font on Linux [tor-browser]
- Bug 44227: Some CJK characters cannot be rendered by Tor which uses the Noto font family [tor-browser]
- Bug 44286: Hardcode GTK system font [tor-browser]
- Bug 41586: Replace Noto CJK with Jigmo on Linux [tor-browser-build]
Build System
- All Platforms
- Bug 466: Automate the release process / replace the new build email [mullvad-browser]
- Bug 43891: Update the translation CI to use the new mozilla versions [tor-browser]
- Bug 44067: Move --enable-geckodriver only to Linux-only mozconfigs [tor-browser]
- Bug 44103: git's export-subst is a reproducibility problem [tor-browser]
- Bug 44104: Don't run linter when there are no overall changes [tor-browser]
- Bug 26408: Make MAR signature checks clearer when creating incremental MAR files [tor-browser-build]
- Bug 34434: Remove unused variables from rbm.conf [tor-browser-build]
- Bug 40697: Delete repackage_browser.sh [tor-browser-build]
- Bug 40698: Update locale in tbb_version.json [tor-browser-build]
- Bug 40994: Add support in do-all-signing to sign release for some archs only [tor-browser-build]
- Bug 41064: Update tools/signing/README and add a tools/signing/machines-setup/README [tor-browser-build]
- Bug 41227: Update projects/common/list_toolchain_updates-common-firefox-geckoview to include check for binutils [tor-browser-build]
- Bug 41373: Remove
_ALLfrom mar filenames [tor-browser-build] - Bug 41444: Build artifacts to support artifact builds of Tor/Muillvad/Base Browser [tor-browser-build]
- Bug 41448: Update toolchains for Firefox ESR 140 [tor-browser-build]
- Bug 41452: Skip update-responses xml files for versions which don't have incrementals [tor-browser-build]
- Bug 41457: Set mar IDs as env variables in tor-browser-build [tor-browser-build]
- Bug 41459: Update taskcluster/ci paths in README and comments [tor-browser-build]
- Bug 41465: Disable development artifacts generation by default, keep it enabled for nightly builds [tor-browser-build]
- Bug 41478: Add vim and others missing basic tools to base container image [tor-browser-build]
- Bug 41496: Clean up unused projects [tor-browser-build]
- Bug 41501: cargo_vendor generated archive maintains timestamps [tor-browser-build]
- Bug 41517: Add morgan's key to the setup account on the signing machine [tor-browser-build]
- Bug 41534: Copy geckodriver only for Linux x86-64 [tor-browser-build]
- Bug 41539: Update Ubuntu version used to run mmdebstrap to 24.04.3 [tor-browser-build]
- Bug 41568: Update instructions for manually building 7zip [tor-browser-build]
- Bug 41579: Add zip to the list of Tor Browser Build dependencies [tor-browser-build]
- Bug 40084: Always use bash for the debug terminal [rbm]
- Bug 40087: Downloaded files getting stricter permissions than expected [rbm]
- Windows
- Bug 44167: Move the nsis-uninstall.patch to tor-browser repository [tor-browser]
- macOS
- Bug 41503: Error 403 when downloading macOS SDK [tor-browser-build]
- Bug 41527: Update libdmg-hfsplus and enable LZMA compression on dmgs [tor-browser-build]
- Bug 41538: Bump macOS SDK to 15.5 [tor-browser-build]
- Bug 41571: Work-around to prevent older 7z versions to break rcodesign. [tor-browser-build]
- Linux
- Bug 41458: Ship geckodriver only on Linux [tor-browser-build]
- Bug 41488: Disable sys/random.h for Node.js [tor-browser-build]
- Bug 41558: Share descriptions between Linux packages and archives [tor-browser-build]
- Bug 41561: Ship Noto Color Emoji on Linux [tor-browser-build]
- Bug 41569: Use var/display_name in .desktop files [tor-browser-build]