Mullvad Browser: baixar versions anteriors

- All Platforms
- Bug 45397: Update CA intermediates and other settings dumps [tor-browser]

- All Platforms
- Updated NoScript to 13.6.36.1984
- Bug 45382: Backport Security Fixes from 158 [tor-browser]
Build System
- All Platforms
- Bug 41885: Update changelogs as a last step in relprep.py [tor-browser-build]
- Windows
- Bug 41890: Update sign-exe wrapper to use new Windows signing cert [tor-browser-build]

- All Platforms
- Updated Firefox to 140.17.0esr
- Updated NoScript to 13.6.35.1984
- Updated uBlock Origin to 1.75.0
- Bug 583: Rebase Mullvad Browser stable onto 140.17.0esr [mullvad-browser]
- Bug 45366: Backport Security Fixes from Firefox 157 [tor-browser]
- Bug 45368: Account for onion aliases in NoScript site parsing [tor-browser]
- Bug 45371: Hook CharacterData/Range insertion sinks for content patches propagation [tor-browser]
Build System
- All Platforms
- Bug 41847: Sign all releases using new gpg subkey [tor-browser-build]
- macOS
- Bug 41883: Fix sha256sum definition in projects/hfsplus-tools/config [tor-browser-build]

- All Platforms
- Updated Firefox to 140.16.0esr
- Updated NoScript to 13.6.33.1984
- Bug 577: Rebase Mullvad Browser stable onto 140.16.0esr [mullvad-browser]
- Bug 45296: (H1) SharedWorker Identity Mismatch allows WebAssembly execution at Safer [tor-browser]
- Bug 45297: (H1) Missing setHTMLUnsafe hook leaves a permanent WebAssembly-capable child realm at Safer [tor-browser]
- Bug 45299: Backport Security Fixes from Firefox 156 [tor-browser]

- All Platforms
- Updated Firefox to 140.15.0esr
- Updated NoScript to 13.6.32.1984
- Updated uBlock Origin to 1.74.0
- Bug 572: Websites can initiate a WebSocket connection to a lan/localhost port [mullvad-browser]
- Bug 45259: Backport Security Fixes from Firefox 155 [tor-browser]

- All Platforms
- Updated Firefox to 140.14.0esr
- Updated uBlock Origin to 1.73.0
- Bug 570: Rebase Mullvad Browser stable onto 140.14.0esr [mullvad-browser]
- Bug 45219: Backport Security Fixes from Firefox 154 [tor-browser]
Build System
- All Platforms
- Bug 41850: Update keyring/torbrowser.gpg for new subkey and updated expiration date of the main key [tor-browser-build]

- All Platforms
- Updated Firefox to 140.13.0esr
- Updated NoScript to 13.6.31.1984
- Bug 558: Rebase Mullvad Browser stable onto 140.13.0esr [mullvad-browser]
- Bug 45124: Backport Security Fixes from Firefox 153 [tor-browser]
Build System
- All Platforms
- Bug 41838: Update personal_access_tokens URL in tools/fetch_changelogs.py [tor-browser-build]
- Windows
- Bug 41819: Fix windows-rs URL in projects/firefox/config [tor-browser-build]

- All Platforms
- Updated NoScript to 13.6.30.1984
- Updated uBlock Origin to 1.72.2
- Bug 45111: Cherry-pick latest firefox/esr140 commits on 140.12.0esr [tor-browser]
Build System
- All Platforms
- Bug 41821: Update gpg subkeys for boklm [tor-browser-build]
- Bug 41827: Update morgan's keychain with renewed key [tor-browser-build]

- All Platforms
- Updated Firefox to 140.12.0esr
- Updated NoScript to 13.6.24.1984
- Updated uBlock Origin to 1.71.0
- Bug 553: Rebase Mullvad Browser stable onto 140.12.0esr [mullvad-browser]
- Bug 45044: NS 13.6.19.902 DocStartInjection regressed [tor-browser]
- Bug 45054: Backport Security Fixes from Firefox 152 [tor-browser]
Build System
- All Platforms
- Bug 41802: Remove the tor daemon requirement for signing [tor-browser-build]

- All Platforms
- Updated Firefox to 140.11.0esr
- Updated NoScript to 13.6.19.1984
- Bug 44958: Backport Security Fixes from Firefox 151 [tor-browser]
Build System
- All Platforms
- Bug 41781: Fix clean section in rbm.local.conf.example [tor-browser-build]

- All Platforms
- Updated Firefox to 140.10.2esr
Build System
- All Platforms
- Bug 41781: Fix clean section in rbm.local.conf.example [tor-browser-build]

- All Platforms
- Updated Firefox to 140.10.1esr
- Updated NoScript to 13.6.18.1984
- Bug 529: Rebase Mullvad Browser stable onto 140.10.1esr [mullvad-browser]

- All Platforms
- Updated Firefox to 140.10.0esr
- Updated Mullvad Browser Extension to 0.9.10
- Bug 525: Rebase Mullvad Browser stable onto 140.10.0esr [mullvad-browser]
- Bug 44288: New identity fails to block loading a custom home page [tor-browser]
- Bug 44749: Check search engines parameter replacements [tor-browser]
- Bug 44859: Backport Bugzilla 1666613: Display XML error pages in the browser directionality while force LTRing the XML code itself, without the use of intl.css [tor-browser]
- Bug 44863: Backport Security Fixes from Firefox 150 [tor-browser]
Build System
- All Platforms
- Bug 41767: Add jwilde to allowed signer for browser projects [tor-browser-build]

- All Platforms
- Updated Firefox to 140.9.1esr
- Updated NoScript to 13.6.15.1984
- Bug 524: Rebase Mullvad Browser stable onto 140.9.1esr [mullvad-browser]
Build System
- All Platforms
- Bug 41758: Rename tools/signing/deploy-legacy to tools/signing/redeploy-update_responses-release [tor-browser-build]

- All Platforms
- Updated Firefox to 140.9.0esr
- Updated NoScript to 13.6.12.1984
- Updated uBlock Origin to 1.70.0
- Bug 521: Rebase Mullvad Browser stable onto 140.9.0esr [mullvad-browser]
- Bug 44663: NoScript behavior on “Safer” security level prevents integrity checks for dynamically loaded javascript [tor-browser]
- Bug 44680: Properly handle subdocuments created by data: URLs [tor-browser]
- Bug 44761: Safer Level's worker patching filters out Worker constructor options [tor-browser]
- Bug 44784: Backport Security Fixes from Firefox 149 [tor-browser]
- Bug 41738: Allow to specify an unsupportedURL on update responses [tor-browser-build]
- Linux
- Bug 44657: Backport tor-browser#44394: Do not read default prefs from /etc/firefox [tor-browser]

- All Platforms
- Updated Firefox to 140.8.0esr
- Updated NoScript to 13.5.14.1984
- Bug 509: Rebase Mullvad Browser onto 140.8.0esr [mullvad-browser]
- Bug 44681: Backport Security Fixes from Firefox 148 [tor-browser]

- All Platforms
- Updated Firefox to 140.7.1esr
- Updated NoScript to 13.5.13.1984
- Updated uBlock Origin to 1.69.0
- Bug 508: Rebase Mullvad Browser stable onto 140.7.1esr [mullvad-browser]
- Bug 44625: metamask.io won't load on Safer security level [tor-browser]
- Bug 44626: Propagate WASM blocking to workers [tor-browser]
Build System
- All Platforms
- Bug 40338: Running make release multiple times fails [tor-browser-build]
- Bug 41708: relprep.py fails to update extensions when out/browser does not exist [tor-browser-build]
- Bug 41720: cp -l in release/build fails when crossing file systems [tor-browser-build]

- All Platforms
- Updated Firefox to 140.7.0esr
- Updated NoScript to 13.5.7.1984
- Updated Mullvad Browser Extension to 0.9.7
- Bug 503: Rebase Mullvad Browser stable onto 140.7.0esr [mullvad-browser]
- Bug 44433: Weird §:domain.com label in the Blocked Objects window [tor-browser]
- Bug 44474: Backport Security Fixes from Firefox 147 [tor-browser]
- Bug 44482: (H1) Script execution in Safest mode via data URI navigation [tor-browser]
Build System
- All Platforms
- Bug 41682: relprep.py should fail when a GitHub release is not found [tor-browser-build]
- Bug 40090: Make the cleanup faster [rbm]
- Bug 40095: cached checksums should not be used for input files when refresh_input is enabled [rbm]

- All Platforms
- Updated Firefox to 140.6.0esr
- Updated NoScript to 13.5.2.1984
- Updated uBlock Origin to 1.68.0
- Bug 497: Rebase Mullvad Browser stable onto 140.6.0esr [mullvad-browser]
- Bug 22974: Self-host NoScript Updates [tor-browser]
- Bug 44348: Backport Bugzilla 1999126: Protect whether PDF.js is enabled/disabled to improve fingerprinting protection [tor-browser]
- Bug 44391: Restrictions cascade blocks every capability in subframes (e.g. captchas) [tor-browser]
- Bug 44409: Backport Security Fixes from Firefox 146 [tor-browser]
- Bug 44414: Disable Zucchini for the 15.0 series. [tor-browser]
Build System
- All Platforms
- Bug 493: Automatically check whether the signed build is avaliable on dist.torproject.org before notifying Mullvad for QA [mullvad-browser]
- Bug 41644: Self-hosted browser extensions support in relprep.py [tor-browser-build]

- All Platforms
- Updated Mullvad Browser Extension to 0.9.6
- Bug 486: Possible race condition for upgrade message in about:mullvad-browser [mullvad-browser]
- Bug 488: Remove Leta search engine and migrate users to DuckDuckGo [mullvad-browser]

- All Platforms
- Updated Firefox to 140.5.0esr
- Updated NoScript to 13.4
- Updated uBlock Origin to 1.67.0
- Bug 484: Rebase Mullvad Browser stable onto 140.5.0esr [mullvad-browser]
- Bug 487: Search engines are sorted alphabetically rather than the desired order [mullvad-browser]
- Bug 44275: Reduce console noise on security level guessing [tor-browser]
- Bug 44310: Default zoom always resets to 100% [tor-browser]
- Bug 44325: Backport Security Fixes from Firefox 145 [tor-browser]
- Bug 44333: Add the "No AI" version of DuckDuckGo to available search engines [tor-browser]
- Linux
- Bug 44273: Restore Noto CJK as Jigmo has a too low readability [tor-browser]
- Bug 44315: Font/text issue with self-upgrade window [tor-browser]

- All Platforms
- Updated Firefox to 140.4.0esr
- Updated NoScript to 13.2.2
- Bug 451: The restart to apply button doesn't work [mullvad-browser]
- Bug 463: Fix typo in MimeType entry in .desktop file included in deb/rpm package (application/xhtml_xml instead of application/xhtml+xml) [mullvad-browser]
- Bug 468: Drop the Metager search engine [mullvad-browser]
- Bug 478: Update to the Mullvad Browser extension to 0.9.5 [mullvad-browser]
- Bug 19741: Opensearch (contextual search) does not obey FPI [tor-browser]
- Bug 42738: Tidy up the commit structure for browser updates UI [tor-browser]
- Bug 43009: Backport Bug 1973265 - Put WebCodecs API behind RFP Target [tor-browser]
- Bug 43093: Refactor the patch to disable LaterRun [tor-browser]
- Bug 43111: Delete our webextensions for search engines when Bug 1885953 is fixed upstream [tor-browser]
- Bug 43525: Check if our search engine customization still works after ESR 140 transition [tor-browser]
- Bug 43590: Move letterboxing rules out of browser/base/content/browser.css [tor-browser]
- Bug 43610: Use newer CSS variable names for ESR 140 [tor-browser]
- Bug 43629: All migrations in migrateUIBB are run for new profiles [tor-browser]
- Bug 43638: Fix up our <command> elements [tor-browser]
- Bug 43664: Review Mozilla 1842832: Move the private browsing toggle to initial install dialog [tor-browser]
- Bug 43728: Update search engine icon sizes [tor-browser]
- Bug 43745: Disable HEVC (H265) playback support [tor-browser]
- Bug 43749: Replace the newtab component and addon with our home page [tor-browser]
- Bug 43770: Bugzilla 1958070: More BrowserGlue simplification/splitting [tor-browser]
- Bug 43772: Do not use official branding for BB/TB/MB [tor-browser]
- Bug 43776: Set branding files for l10n merging [tor-browser]
- Bug 43795: Restore the URL classifier XPCOM components. [tor-browser]
- Bug 43844: Security level shield icon should be flipped for RTL locales [tor-browser]
- Bug 43850: Modify the Contrast Control settings for RFP [tor-browser]
- Bug 43864: Remove features from the unified search button [tor-browser]
- Bug 43869: Hide pens with RFP [tor-browser]
- Bug 43874: Incorporate our unified extension button hiding logic into mozilla's changes for ESR 140 [tor-browser]
- Bug 43886: Fix new tab for ESR 140 [tor-browser]
- Bug 43900: Open newtab rather than firefoxview when unloading the last tab [tor-browser]
- Bug 43902: Hide Sidebar buttons [tor-browser]
- Bug 43903: Report broken site is disabled rather than hidden [tor-browser]
- Bug 43905: base-browser.ftl missing from about:addons [tor-browser]
- Bug 43906: Extension.sys.mjs change in the wrong commit [tor-browser]
- Bug 43913: Context menu not properly populated [tor-browser]
- Bug 43947: Console error from ContentBlockingPrefs.init [tor-browser]
- Bug 43966: Notify the user when they are in a custom security level (desktop) [tor-browser]
- Bug 43989: Switch off AI chatbot preference [tor-browser]
- Bug 44030: Security Level selector does not get confirmation before restarting [tor-browser]
- Bug 44034: Update string used for checkbox on New Identity confirmation dialog [tor-browser]
- Bug 44040: Modify nsIPrompt and the commonDialog code to allow destructive buttons [tor-browser]
- Bug 44045: Drop AI and machine learning components [tor-browser]
- Bug 44090: Several of our XUL pages cause a crash because of missing CSP [tor-browser]
- Bug 44106: Make sure background tasks are not used for shutdown cleanup [tor-browser]
- Bug 44107: Switch tab search action is missing an icon [tor-browser]
- Bug 44108: Fix the new history sidebar [tor-browser]
- Bug 44123: Do not trim protocol off of URLs ever [tor-browser]
- Bug 44125: Do not offer to save signatures by default in Private Browsing Mode [tor-browser]
- Bug 44140: Refactored patch to prevent writing temp PDF files to disk [tor-browser]
- Bug 44141: Hide "Report broken site" items by default [tor-browser]
- Bug 44142: Missing document_pdf.svg from our branding directo

All Platforms
- Updated NoScript to 13.2.1
- Updated Mullvad Browser Extension to 0.9.5
- Updated uBlock Origin to 1.66.4
- Bug 44239: DDG HTML page and search results displayed incorrectly with Safest security setting [tor-browser]
- Bug 44240: Typo on dom.security.https_first_add_exception_on_failure [tor-browser]
- Bug 44244: Backport Security Fixes from Firefox 144 [tor-browser]

All Platforms
- Updated uBlock Origin to 1.66.0
- Bug 44199: Backport Security Fixes from Firefox 143 [tor-browser]
- Bug 41462: Backport #40994 and #41280: Add support in signing scripts to sign release for some archs only & Update download-android-*.json files for android-only releases [tor-browser-build]
- Bug 41543: mmdebstrap-image fails to build bookworm images on maint-14.5 [tor-browser-build]
Build System
Linux
- Bug 41560: Backport mullvad-browser#463: Fix typo in MimeType entry in .desktop file included in deb/rpm package [tor-browser-build]

All Platforms
- Updated Firefox to 128.14.0esr
- Updated NoScript to 13.0.9
- Bug 459: Rebase Mullvad Browser onto 128.14.0esr [mullvad-browser]
- Bug 44041: Letterboxing causes greyed out alert background to be mis-aligned [tor-browser]
- Bug 44048: Backport Bug 1979608 [tor-browser]
- Bug 44100: Backport Security Fixes from Firefox 142 [tor-browser]
Build System
All Platforms
- Bug 41529: Automate publishing browser release branch and tags to Mullvad repository [tor-browser-build]

All Platforms
- Updated Firefox to 128.13.0esr
- Updated uBlock Origin to 1.65.0
- Bug 453: Rebase Mulvad Browser Stable onto 128.13.0esr [mullvad-browser]
- Bug 43993: Backport Security Fixes from Firefox 141 [tor-browser]

All Platforms
- Updated Firefox to 128.12.0esr
- Updated NoScript to 13.0.8
- Bug 450: Rebase Mullvad Browser stable onto 128.12.0esr [mullvad-browser]
- Bug 43782: Add new UX flow for changing security level (Desktop) [tor-browser]
- Bug 43783: Tighten up the SecurityLevel module to enforce new UX flow [tor-browser]
- Bug 43784: Get confirmation from NoScript that settings are applied [tor-browser]
- Bug 43911: Backport security fixes from Firefox 140 [tor-browser]
Build System
All Platforms
- Bug 41477: Update keyring/boklm.gpg for new subkeys (2025) [tor-browser-build]
- Bug 41498: Update keyring/morgan.gpg with updated public key [tor-browser-build]

All Platforms
- Updated Firefox to 128.11.0esr
- Updated NoScript to 13.0.6
- Bug 439: Rebase Mullvad Browser stable onto 128.11.0esr [mullvad-browser]
- Bug 43811: Backport security fixes from Firefox 139 [tor-browser]

All Platforms
- Updated Firefox to 128.10.1esr-
- Updated NoScript to 12.6
- Updated uBlock Origin to 1.64.0
- Bug 438: Rebase Mullvad Browser stable onto 128.10.1 [mullvad-browser]
- Bug 43397: Click to play should override "Any capability blocked in the top document must be blocked in its subdocuments too" [tor-browser]
- Bug 43635: Console noise due to the x-load capability not being localized [tor-browser]
- Bug 43738: Backport Bugzilla 1947157: Move linux security warning content into own page [tor-browser]
- Bug 41460: Add brizental to the list of people who can sign Tor Browser and Mullvad Browser tags [tor-browser-build]
Build System
All Platforms
- Bug 43777: Disable ./mach telemetry [tor-browser]
- Bug 41449: Add prefix to update-responses xml files [tor-browser-build]
- Bug 41451: When update-responses contains multiple versions, .htaccess only has one no-update.xml redirect [tor-browser-build]
- Bug 41452: Skip update-responses xml files for versions which don't have incrementals [tor-browser-build]

All Platforms
- Updated Firefox to 128.10.0esr
- Bug 421: Rebase Mullvad Browser release onto 128.10.0esr [mullvad-browser]
- Bug 43659: Set new tabs to default to Tor Browser Home (about:tor) on desktop [tor-browser]
- Bug 43672: Incorrect initial letterbox size when the interface font size is 13px. [tor-browser]
- Bug 43691: Backport security fixes from Firefox 138 [tor-browser]
Build System
All Platforms
- Bug 41435: Skip update-responses update entries for versions without incremental or full update mar [tor-browser-build]

All Platforms
- Bug 312: Apply Alpha and Nightly branding to unstable release channels [mullvad-browser]
- Bug 324: Figure out how to handle string differences between mullvad release and mullvad tip [mullvad-browser]
- Bug 410: Update learn more link text in about:mullvad-browser [mullvad-browser]
- Bug 411: Use the same logic in about:mullvad-browser as the about dialog for the release notes [mullvad-browser]
- Bug 412: Link the release page in the about dialog and clean brand-related preferences [mullvad-browser]
- Bug 419: Create a Mullvad Browser version of migrateUI [mullvad-browser]
- Bug 41051: Replace Noto Sans Myanmar with Pyidaungsu [tor-browser]
- Bug 41755: Show the link to about:support in the help menu [tor-browser]
- Bug 41919: Add temporarily visible web content-size overlay after resizing window when letterboxing is enabled [tor-browser]
- Bug 42670: Letterboxing visible even if disable with tiled window managers [tor-browser]
- Bug 42739: Fix localization in the profile error dialog [tor-browser]
- Bug 43189: Remove privacy.resistFingerprinting.spoofOsInUserAgentHeader machinery entirely [tor-browser]
- Bug 43205: newwin / letterboxing rounding with subpixels is off [tor-browser]
- Bug 43257: NoScript-blocked content placeholders causing slow downs [tor-browser]
- Bug 43323: Expose a stable asset from chrome:// to identify Tor, Base, and Mullvad Browser [tor-browser]
- Bug 43334: Developer Tools lacks data for Responsive Design Mode and Compatibility [tor-browser]
- Bug 43340: Support linux-aarch64 dev builds [tor-browser]
- Bug 43551: Backport Mozilla Bug 1924070 - modify H.264 extradata to match sample conversion code. [tor-browser]
- Bug 43632: Letterboxing size indicator may display data from a background tab [tor-browser]
- Bug 43642: New tab shows letterboxing size indicator [tor-browser]
- Bug 43653: privacy.resistFingerprinting.spoofOsInUserAgentHeader is still in our pref file even though we ripped out the code [tor-browser]
Windows
- Bug 43402: set browser.startup.blankWindow false [tor-browser]
Linux
- Bug 415: Load apparmor profile when configuring deb package [mullvad-browser]
- Bug 30970: Different window borders in XFCE can lead to different, not rounded window sizes [tor-browser]
- Bug 41799: Make lack of fonts.conf less of a footgun [tor-browser]
- Bug 43140: Ship our FontConfig configuration with the browser [tor-browser]
- Bug 43330: System fonts leak when emptying the allow list on Linux [tor-browser]
- Bug 41297: Add video codecs dependencies (recommends) on the Debian package [tor-browser-build]
- Bug 41298: Remove --detach parameter from .desktop files [tor-browser-build]
- Bug 41312: Remove comment in start-browser about --class and --name parameters [tor-browser-build]
Build System
All Platforms
- Bug 43295: Update MR templates [tor-browser]
- Bug 43373: Do not run all CI jobs for scheduled jobs. [tor-browser]
- Bug 40799: Remove legacy locale iteration in build and signing scripts [tor-browser-build]
- Bug 41040: Add configuration to rbm.conf to select channel and platforms [tor-browser-build]
- Bug 41281: Better dev defaults for fetch variable [tor-browser-build]
- Bug 41288: Avoid unneeded git checkouts when possible [tor-browser-build]
- Bug 41304: Add a browser commit tag+signing script [tor-browser-build]
- Bug 41306: Container dependencies are sorted before resolving templates [tor-browser-build]
- Bug 41307: Container dependencies are not filtered for duplicates [tor-browser-build]
- Bug 41315: Fix the Mullvad Extension update in relprep.py [tor-browser-build]
- Bug 41358: Update sign-tag script to handle rapid-release nightly branches [tor-browser-build]
- Bug 41363: Change update-response generation script to create one commit per OS+arch tuple [tor-browser-build]
- Bug 41365: Indent download*.json files [tor-browser-build]
- Bug 41374: Remove support for migrate_archs and migrate_langs in update_responses [tor-browser-build]
- Bug 41381: Usability improvements for the brow

All Platforms
- Updated Firefox to 128.9.0esr
- Updated uBlock Origin to 1.63.2
- Bug 416: Rebase Mullvad Browser stable onto 128.9.0esr [mullvad-browser]
- Bug 43601: Backport security fixes from Firefox 137 [tor-browser]
macOS + Linux
- Bug 404: Incorrect information in about:rights [mullvad-browser]
#Build System
All Platforms
- Bug 41420: Update the changelog script for label updates [tor-browser-build]
macOS + Linux
- Bug 41375: Backport Bug 41374+40799: Remove support for migrate_archs and migrate_langs in update_responses + Remove legacy locale iteration in update-responses and dmg2mar [tor-browser-build]
- Bug 41378: Backport Bug 41363: Make separate update_responses commit for each platform [tor-browser-build]
- Bug 41383: Add clairehurst to list of accepted firefox/geckoview signers [tor-browser-build]

This is a emergency security release for Windows.

Windows
- Bug 404: Incorrect information in about:rights [mullvad-browser]
- Bug 43592: Backport security fixes from Firefox 128.8.1esr [tor-browser]
Build System
Windows
- Bug 41375: Backport Bug 41374+40799: Remove support for migrate_archs and migrate_langs in update_responses + Remove legacy locale iteration in update-responses and dmg2mar [tor-browser-build]
- Bug 41378: Backport Bug 41363: Make separate update_responses commit for each platform [tor-browser-build]
- Bug 41383: Add clairehurst to list of accepted firefox/geckoview signers [tor-browser-build]

All Platforms
- Updated Firefox to 128.8.0esr
- Bug 395: Set Mullvad Leta as default search engine [mullvad-browser]
- Bug 398: Rebase Mullvad Browser release onto Firefox 128.8.0esr [mullvad-browser]
- Bug 403: Backport Bugzilla 1915093: Don't prefetch HTTPS RR if proxyDNS is enabled [mullvad-browser]
- Bug 43536: Backport security fixes from Firefox 136 [tor-browser]
macOS
- Bug 43468: ScreenCaptureKit framework should be a weak link [tor-browser]
Linux
- Bug 394: Missing package when try to install Mullvad Browser in Debian Trixie [mullvad-browser]
Build System
All Platforms
- Bug 41380: Update kick-devmole script to use Mullvad's new GitHub action [tor-browser-build]
Linux
- Bug 41385: Copy only libstdc++.so.6 on Linux [tor-browser-build]

All Platforms
- Updated Firefox to 128.6.0esr
- Updated NoScript to 12.1.1
- Updated uBlock Origin to 1.61.2
- Bug 359: Remove 13.5 mullvad-browser fluent files from translation [mullvad-browser]
- Bug 388: Rebase Mullvad Browser stable onto Firefox 128.6.0esr [mullvad-browser]
- Bug 42125: lock RFP part 2 [tor-browser]
- Bug 43176: noscript-marker CSP warnings in the console [tor-browser]
- Bug 43269: NoScript localization issue [tor-browser]
- Bug 43282: Unable to click/tap/select anything adjacent the WebGL placeholders [tor-browser]
- Bug 43296: NoScript-blocked video content placeholder is not centered [tor-browser]
- Bug 43338: Custom zoom + "Zoom text only" breaks pdfjs [tor-browser]
- Bug 43352: Failing connection attempts to multicast IPv6 ff00:::443 logged during NoScript updates [tor-browser]
- Bug 43366: Do not use system accent color in inputs [tor-browser]
- Bug 43384: Backport security fixes from Firefox 134 [tor-browser]
Linux
- Bug 41311: AppArmor profile fails on Debian stable [tor-browser-build]
- Bug 41313: Show waiting cursor while app opens [tor-browser-build]
Build System
All Platforms
- Bug 41321: Update PieroV's expired keys [tor-browser-build]
- Bug 41340: Update kick_devmole_build script with Mullvad's new GitHub workflow endpoint [tor-browser-build]
macOS
- Bug 41325: Newer versions of 7z fail to extract our dmg files because of the /Applications symlink [tor-browser-build]
- Bug 41327: Print more logs when make_full_update.sh failed to generate mar file in dmg2mar [tor-browser-build]

All Platforms
- Updated Firefox to 115.10.0esr
- Updated uBlock Origin to 1.57.2
- After update, don't open the release page on Github. Instead link it in the startpage, like in Tor Browser [mullvad-browser]
- New identity complains about about:mullvad-browser [mullvad-browser]
- Rebase Mullvad Browser stable onto 115.10.0esr [mullvad-browser]
- Set privacy.resistFingerprinting.testing.setTZtoUTC as a defense-in-depth [tor-browser]
- Let users decide whether to load their home page on new identity. [tor-browser]
- Do not localize the order of locales for app lang [tor-browser]
- Timezone offset leak via document.lastModified [tor-browser]
- App languages not sorted correctly in stable [tor-browser]
- Timezone May leak from XSLT Date function [tor-browser]
Linux
- Avoid Fontconfig warning about "ambiguous path" [tor-browser-build]

All Platforms
- Updated Firefox to 115.9.1esr
- ESR 115.9.1 fixes [tor-browser]
- Rebase Mullvad Browser stable onto Firefox 115.9.1esr [mullvad-browser]

All Platforms
- Updated Firefox to 115.9.0esr
- Updated mullvad-browser-extension to 0.9.0
- Updated uBlock Origin to 1.56.0
- Mullvad support email has changed from support@mullvad.net to support@mullvadvpn.net [mullvad-browser]
- Rebase Mullvad Browser stable onto Firefox 115.9.0esr [mullvad-browser]
- The placeholder of datetime inputs keeps being localized when spoof English is on [tor-browser]
- spoof english + htmlform <details> can leak app language [tor-browser]
Windows
- Hidden fonts are automatically added to the allow list [tor-browser]
Build System
All Platforms
- kick_devmole_build script prints wrong URL for Mullvad's build hashes [tor-browser-build]
- authenticode-timestamping.sh fails to run again because tmp-timestamp already exists [tor-browser-build]
- src archive does not match likely due to mismatched xz-utils version [tor-browser-build]

All platforms
- Updated Firefox to 115.8.0esr
- Updated mullvad-browser-extension to 0.8.5
- Rebase Mullvad Browser Stable onto Firefox 115.8.0esr [mullvad-browser]
- Spoof english leaks via numberingSystem: numbers (non-latn) or decimal separator (latn) [tor-browser]
Build System
All Platforms
- Set time on signing machine before starting signing [tor-browser-build]
- Use Capture::Tiny instead of IO::CaptureOutput [tor-browser-build]
- Switch from IO::CaptureOutput to Capture::Tiny [rbm]
- Make stdout and stderr utf8 [rbm]

All platforms
- Updated Firefox to 115.7.0esr
- Updated uBlock Origin to 1.55.0
- Bug 249: BrowserHost has null mRoot when applying initial window size in debug
- Bug 260: Rebase Mullvad Browser Stable onto Firefox 115.7.0esr
- Bug 42189: Assertion failure: the value of mPrivateBrowsingId in the loadContext and in the loadInfo are not the same!
- Bug 41044: Add tbb_version.json-like file for Mullvad Browser
Linux
- Bug 41050: Improve the disk leak sanitization on start-$browser
All Platforms
- Bug 41042: Add options to include updates in the changelog
- Bug 41043: Create script to push build requests to Mullvad build servers
- Bug 41056: Make it possible to use templates in var/torbrowser_incremental_from
- Bug 41059: Update keyring/torbrowser.gpg with updated key
Windows + macOS
- Bug 41016: Switch from bullseye to bookworm for desktop platforms
Windows
- Bug 41015: Enable std::filesystem on libc++ on Windows

All Platforms
Updated Firefox to 115.6.0esr
- Bug 42042: view-source:http://ip-address does not work because of HTTPS Only [tor-browser]
Build System
All Platforms
- Bug 40884: Script to automate uploading sha256s and signatures to location signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo expects them to be [tor-browser-build]
- Bug 41026: Do not use ~ when uploading the signed hashes [tor-browser-build]
- Bug 41039: Update tools/signing/upload-update_responses-to-staticiforme to keep download-*json files from previous release when new release does not include them [tor-browser-build]
macOS
- Bug 40990: Remove old macos signing scripts [tor-browser-build]