Commit Graph

95 Commits

Author SHA1 Message Date
mr. m
1659838194 no-bug: Prevent active attribute from being set when a popup opens (gh-13695) 2026-05-14 09:41:20 +02:00
mr. m
e9634e1057 no-bug: Move API keys to release script (gh-13309) 2026-04-19 01:11:44 +02:00
mr. m
5163cf68d6 no-bug: update script execution to use bash for mar_sign.sh (gh-13181) 2026-04-09 19:57:59 +02:00
JDX50S
270db6d671 Merge commit from fork
* security: enable MAR signature verification for updates

Remove `--enable-unverified-updates` from the common mozconfig. This flag
was disabling all MAR (Mozilla ARchive) signature verification in the
updater binary, meaning update packages were applied without any
cryptographic authenticity check.

With this flag removed, the Mozilla build system will:
- Link NSS and signmar into the updater binary
- Enable SecVerifyTransformCreate-based signature verification on macOS
- Require MAR files to contain valid signatures before applying

REQUIRED FOLLOW-UP (maintainer action):
1. Generate a Zen-specific MAR signing keypair (RSA-PKCS1-SHA384)
   See: https://firefox-source-docs.mozilla.org/build/buildsystem/mar.html
2. Place the public key DER file(s) in the source tree at
   toolkit/mozapps/update/updater/release_primary.der
3. Sign MAR files during the release build with the private key
4. Set ACCEPTED_MAR_CHANNEL_IDS in update-settings.ini to restrict
   which update channels the updater will accept

Ref: GHSA-qpj9-m8jc-mw6q

* no-bug: Added signature steps

* no-bug: Export browser/installer/package-manifest.in

---------

Co-authored-by: Maliq Barnard <maliqbarnard@Maliqs-MacBook-Air.local>
Co-authored-by: Mr. M <mr.m@tuta.com>
2026-04-09 19:28:31 +02:00
Hythera
3f0f07ac37 fix: script interpreters and permissions, p=#12641 2026-03-05 14:41:55 +01:00
Mr. M
78b1088b41 fix: Make sure to source cargo env before building, b=no-bug, c=workflows 2025-07-24 16:38:02 +02:00
UnownPlain
9c8aba3dcd Update release notes script (#8739) 2025-05-31 22:16:55 +02:00
mr. m
a7d652ddca fix: Installing packages on linux and windows builds, b=(no-bug), c=workflows 2025-04-24 07:50:02 +02:00
UnownPlain
762d5de441 Fix empty release notes sections 2025-04-20 17:32:31 +00:00
UnownPlain
0da5653fef Fix files paths in release notes generation 2025-03-14 19:08:11 +00:00
UnownPlain
e315ff24e1 Generate release notes for Github releases 2025-03-13 01:37:02 +00:00
mr. M
24d8e7a5d7 Replace pnpm with npm in workflows and scripts for consistency across the project 2025-02-03 21:20:29 +01:00
mr. M
dd5461273c Fix package manager commands in release build script 2025-01-14 18:59:19 +01:00
mr. M
9b8b9f5e14 Update release build script to enhance Xvfb configuration by adding -nolisten tcp and -noreset options 2025-01-06 20:07:17 +01:00
mr. M
6c4af27ec6 Update Linux release build workflow and improve package installation; add checks for window.docShell in ZenUIManager 2025-01-06 20:01:52 +01:00
mr. M
ee965e4b74 Update Git configuration and improve release build scripts for consistency 2025-01-06 18:57:06 +01:00
mr. M
5de241c2c6 Clean up whitespace and formatting in various files; update CODEOWNERS and .gitignore 2025-01-04 02:33:00 +01:00
larzie
cc5f813f5e Quick fix
Signed-off-by: larzie <lunar@lavache.com>
2024-11-26 20:38:12 +03:00
mauro-balades
3012c0ad1f Refactor build workflow to include release branch parameter 2024-09-30 22:28:04 +02:00
AltCode
6b20c47f06 Remove Homebrew Cask files
These are not needed any more; Zen has been accepted into the Homebrew Cask repository
2024-09-10 15:45:39 +02:00
AltCode
c1c616e431 Update update-homebrew.sh
Updates update-homebrew.sh to work with the style conformant cask
2024-09-05 20:12:59 +02:00
mauro 🤙
7636a1f015 chore: Update alpha.yml workflow to output version and move releases.xml 2024-09-03 21:04:10 +00:00
HarryHeres
5ce28c0136 Updating update-homebrew script 2024-09-01 20:13:26 +02:00
HarryHeres
74f304ef18 Fixing update-homebrew script 2024-09-01 20:10:58 +02:00
HarryHeres
467b444535 PR changes 2024-09-01 20:04:36 +02:00
HarryHeres
cf9b266bca Adding Homebrew compatibility 2024-09-01 19:10:25 +02:00
Mauro Balades
d810608a8c chore: Remove unused set-global-vars.sh script and update MOZ_APP_UA_NAME in moz-build.patch 2024-08-07 10:02:12 +02:00
Mauro Balades
de19bdf2b4 Update Zen browser components submodule commit reference 2024-08-07 00:06:45 +02:00
Mauro Balades
eef45c8007 Pathetic. 2024-08-05 14:11:56 +02:00
Mauro Balades
9ce7c60d4a Added license checks 2024-08-05 13:31:49 +02:00
Mauro Balades
2927b58924 Here we go! 2024-08-01 14:15:43 +02:00
Mauro Balades
b1a3f97592 chore: Update Xvfb installation check in alpha-build.sh 2024-07-30 23:04:06 +02:00
Mauro Balades
3304259383 refactor: Update alpha.yml workflow to remove unused Windows build steps 2024-07-27 00:57:34 +02:00
Mauro Balades
7e0e3f4145 refactor: Update profile data path in alpha.yml workflow 2024-07-26 14:57:29 +02:00
Mauro Balades
22dfa8daec refactor: Update alpha.yml workflow to use flat-manager v6.1 for uploading flatpak bundle 2024-07-26 09:19:18 +02:00
Mauro Balades
cfd1ef11aa Revert testing 2024-07-26 01:03:06 +02:00
Mauro Balades
b82530c890 testing 2024-07-26 01:02:28 +02:00
Mauro Balades
e5eba4496f chore: Update alpha.yml workflow to consistently use the use-warp-build input 2024-07-24 23:32:05 +02:00
Mauro Balades
cffdd29121 chore: Update @zen-browser/surfer dependency to version 1.1.4 2024-07-24 12:12:15 +02:00
Mauro Balades
17598a2725 chore: Refactor Windows profile build workflow to improve efficiency and remove unnecessary steps 2024-07-24 11:51:56 +02:00
Mauro Balades
5ca89116e7 chore: Update Windows profile build workflow to remove unnecessary steps and improve efficiency 2024-07-24 00:35:06 +02:00
Mauro Balades
6f47ee3ffa chore: Update Windows profile build workflow to use x86_64-pc-windows-msvc target 2024-07-23 20:35:06 +02:00
Mauro Balades
85b76f525c chore: Update disk-setup-and-swap.sh to conditionally execute 'free -h' and 'df -h' commands 2024-07-23 13:46:32 +02:00
Mauro Balades
a7fe238a71 chore: Update Windows profile build workflow to use x86_64-pc-mingw32 target 2024-07-23 11:56:09 +02:00
Mauro Balades
9c6b0912a5 chore: Update theme pill-button default value and styles 2024-07-23 11:35:26 +02:00
Mauro Balades
26b633553c testing 2024-07-23 09:49:11 +02:00
Mauro Balades
93668396da chore: Update Xvfb installation in alpha-build.sh to only run if not cross-compiling 2024-07-22 23:39:16 +02:00
Mauro Balades
7355138f14 chore: Update Windows profile build workflow to include version bump step and disable wasm sandboxed libraries 2024-07-22 21:30:36 +02:00
Mauro Balades
acb1750bba chore: Update build workflows and mozconfig files 2024-07-21 11:54:54 +02:00
Mauro Balades
0c0de72a2c chore: Remove unnecessary packages and directories 2024-07-21 10:07:52 +02:00