Commit Graph

117 Commits

Author SHA1 Message Date
mr. m
adc8c92816 gh-9836: Finish the MAR signing workflow (gh-13216) 2026-04-13 15:49:24 +02:00
mr. m
a4f0d01a88 no-bug: Sign mars after building them (gh-13213) 2026-04-11 16:45:24 +02:00
mr. m
97451e23c8 no-bug: Individually download each artifact on release (gh-13199) 2026-04-10 17:17:52 +02:00
mr. m
0a7e81f532 gh-8932: Add more PGO instrumentation (gh-13158) 2026-04-09 22:41:27 +02:00
JDX50S
270db6d671 Merge commit from fork
* security: enable MAR signature verification for updates

Remove `--enable-unverified-updates` from the common mozconfig. This flag
was disabling all MAR (Mozilla ARchive) signature verification in the
updater binary, meaning update packages were applied without any
cryptographic authenticity check.

With this flag removed, the Mozilla build system will:
- Link NSS and signmar into the updater binary
- Enable SecVerifyTransformCreate-based signature verification on macOS
- Require MAR files to contain valid signatures before applying

REQUIRED FOLLOW-UP (maintainer action):
1. Generate a Zen-specific MAR signing keypair (RSA-PKCS1-SHA384)
   See: https://firefox-source-docs.mozilla.org/build/buildsystem/mar.html
2. Place the public key DER file(s) in the source tree at
   toolkit/mozapps/update/updater/release_primary.der
3. Sign MAR files during the release build with the private key
4. Set ACCEPTED_MAR_CHANNEL_IDS in update-settings.ini to restrict
   which update channels the updater will accept

Ref: GHSA-qpj9-m8jc-mw6q

* no-bug: Added signature steps

* no-bug: Export browser/installer/package-manifest.in

---------

Co-authored-by: Maliq Barnard <maliqbarnard@Maliqs-MacBook-Air.local>
Co-authored-by: Mr. M <mr.m@tuta.com>
2026-04-09 19:28:31 +02:00
Hythera
dbf6daebdc chore: add ignored files in recalculate-patches, p=#12642 2026-03-05 16:47:34 +01:00
Hythera
3f0f07ac37 fix: script interpreters and permissions, p=#12641 2026-03-05 14:41:55 +01:00
mr. m
e919e723c7 feat: Add native popover UI for macos, p=#12456 2026-02-21 23:07:30 +01:00
mr. m
c7db15fe9d feat: New ignore rules to moz.configure for patch calculations, b=no-bug, c=scripts 2026-02-11 13:47:34 +01:00
mr. m
af4f336bf5 fix: Make sure to save the state instantly on some occations, b=bug #12152, c=scripts 2026-02-11 11:59:05 +01:00
mr. m
604365dd38 chore: Update external mochitests, b=no-bug, c=tests, scripts, common 2026-02-08 19:20:36 +01:00
mr. m
76f17c3a57 chore: Automatically import patches from phabricator and librewolf, p=#12271
* chore: Automatically import patches from phabricator and librewolf, b=no-bug, c=workflows, scripts

Signed-off-by: mr. m <91018726+mr-cheffy@users.noreply.github.com>

* feat: Remove legacy flag, b=no-bug, c=common, configs

---------
2026-02-07 18:02:40 +01:00
mr. m
a145f83fa8 fix: Fixed MacOS builds having intermitent crashes when building PGO, p=#11924, c=scripts 2026-01-16 14:09:23 +01:00
mr. m
edfb427a23 chore: Update MacOS and Windows SDKs, b=no-bug, c=workflows, windows, scripts 2026-01-09 01:37:43 +01:00
mr. m
7e7d860c9e chore: Sync upstream Firefox to version 147.0, p=#11822
* chore: Sync upstream to `Firefox 147.0`

* chore: Continued migration, b=no-bug, c=tests

* chore: Finish migration without testing, b=no-bug, c=scripts, tabs, media, common, split-view

* feat: Finish migration, b=no-bug, c=common, compact-mode, split-view, workspaces

* feat: Finish basic migration, b=no-bug, c=kbs, common, folders

* feat: Update surfer, b=no-bug, c=scripts
2026-01-08 18:06:05 +01:00
mr. m
02e0cd8717 feat: Apply a language code map for certain locales, p=#11669, c=scripts 2025-12-19 16:13:28 +01:00
mr. m
0ae7c19c30 test: Import some mochitests from firefox, p=#10897
* test: Import some mochitests from firefox, b=no-bug, c=tests, scripts, tabs

* feat: Added lint rules to ignore mochi tests, b=no-bug, c=tests

* chore: Finish importing tests, b=no-bug, c=workflows, tests, scripts, tabs
2025-12-15 12:09:42 +01:00
mr. m
f1c6c1b321 fix: Fixed missing space between update and media player, b=closes #11592, c=scripts, common, tabs, workspaces 2025-12-12 19:54:15 +01:00
mr. m
a6dd6ab984 fix: Move 'Any' import to the JSON with comments module, b=no-bug, c=scripts, tests 2025-12-11 13:31:44 +01:00
mr. m
0c0c982bc2 chore: Implement settings dump schema to update firefox remote servic…, p=#11579
* chore: Implement settings dump schema to update firefox remote services data, b=no-bug, c=configs, scripts

* feat: Also update with timestamps, b=no-bug, c=configs, scripts

* chore: Move JSON with comments to a new module, b=no-bug, c=scripts, tests

---------

Signed-off-by: mr. m <91018726+mr-cheffy@users.noreply.github.com>
2025-12-11 13:26:28 +01:00
mr. m
fa6bb8d27f chore: Sync upstream Firefox to version 146.0, p=#11519 2025-12-03 16:26:18 +01:00
mr. m
47395bf3ce chore: New upstream fetch script, p=#11253, c=workflows, scripts
* chore: New upstream fetch script, b=no-bug, c=workflows, scripts

Signed-off-by: mr. m <91018726+mr-cheffy@users.noreply.github.com>

---------

Signed-off-by: mr. m <91018726+mr-cheffy@users.noreply.github.com>
2025-11-11 09:46:52 +01:00
mr. m
f273cd8fd1 chore: Refactor glance animtions, p=#10690 2025-10-05 18:57:35 +02:00
mr. m
5933c55c13 chore: Update to Firefox 143.0, c=l10n, common (#10304) 2025-09-11 18:00:10 +02:00
mr. m
199da1f824 chore: Updated to firefox 142.0, p=#9870
* chore: Updateed to firefox 142.0, b=no-bug, c=l10n, folders

* chore: Finish updating to firefox, b=no-bug, c=tabs

* chore: Fixed mods builds, b=no-bug, c=mods

* feat: Small changes to tabs layout, b=no-bug, c=tabs, compact-mode, folders, workspaces

* test: Fixed tests, b=no-bug, c=scripts, tests, folders

* test: Fixed tests, b=no-bug, c=tabs, tests, welcome
2025-08-13 23:21:38 +02:00
mr. m
36a84261b3 chore: Migrate l10n repo to the main repository, p=#9662, c=l10n 2025-07-28 14:26:41 +02:00
mr. m
ca289363c3 test: Added drag and drop automatic testing, b=no-bug, c=tests, scripts, tabs 2025-07-23 01:33:12 +02:00
Mr. M
f862e184a6 test: Removed replaced-newtab for the mochitest profile and did an overall license check and clanup, b=no-bug, c=scripts, flatpak, tests, common, media, mods, split-view, glance, welcome, workspaces, vendor 2025-07-18 13:36:02 +02:00
Mr. M
addc318f29 test: Added more tests for glance, b=(no-bug), c=tests, scripts, tabs, glance, workspaces 2025-05-22 16:57:27 +02:00
Mr. M
ad124c9d95 chore: Recalcultae patches, b=(no-bug), c=tests, scripts, tabs, glance 2025-05-22 13:57:30 +02:00
Mr. M
641d4d0f87 chore: Updated to firefox 138.0.3, b=(no-bug), c=scripts, common 2025-05-13 15:58:39 +02:00
Mr. M
8136387a75 style: Formatted the project, b=(no-bug), c=scripts 2025-04-21 00:05:34 +02:00
Mr. M
a7846a64d0 chore: Started adding typescript to zen, b=(no-bug), c=scripts, workspaces 2025-04-21 00:02:19 +02:00
Mr. M
b0d10919d7 fix: closes #7630 - Fixed windows packages not containing redistributable files, r=configs 2025-04-15 22:58:02 +02:00
Mr. M
f1fe363083 refactor(scripts): no-bug - Added extra git components for commit messages 2025-04-15 14:26:59 +02:00
Mr. M
1135744520 refactor(common, compact-mode, folders, fonts, glance, images, kbs, media, mods, split-view, tabs, tests, workspaces, vendor, welcome): closes #7628 - Refactor zen components file structure for easier understanding 2025-04-15 14:03:55 +02:00
Mr. M
87124fdaf4 fix(sign.ps1): append arm64 executable files to the list for signing
fix(download-language-packs.sh): remove carriage returns from supported languages file
2025-04-13 22:42:26 +02:00
Mr. M
897932f954 fix(build): clean up temporary files and update surfer dependency to 1.11.7 2025-04-13 18:04:47 +02:00
Mr. M
af026cfe66 Improved signing strategy for windows by including files inside the installer (https://github.com/zen-browser/desktop/issues/37) 2025-04-12 22:41:31 +02:00
mr. M
f8b6b05a25 refactor: improve script readability and maintainability in recalculate-patches.sh and remove-failed-jobs.sh 2025-03-30 10:05:54 +02:00
mr. M
9bd7b5a900 Update dependencies and refine configuration files for improved compatibility and performance 2025-03-30 10:03:50 +02:00
mr. m
7b18c40781 Fixed fetching l10n from mozilla
Signed-off-by: mr. m  <91018726+mauro-balades@users.noreply.github.com>
2025-03-29 21:24:17 +01:00
mr. m
923b049b85 Fixed path for updating l10n hashes
Signed-off-by: mr. m  <91018726+mauro-balades@users.noreply.github.com>
2025-03-29 21:23:55 +01:00
mr. M
dac08aa448 Remove obsolete update_newtab script and associated dependency management 2025-03-29 15:43:09 +01:00
mr. M
c60c9fbd30 Refactor build process to use a new directory structure and remove deprecated files 2025-03-29 15:42:33 +01:00
mr. M
bd5d3c00f1 Formatted the project 2025-03-24 22:19:49 +01:00
Jarm7
796a52625e Update update_newtab.py
feat: Enhance error handling and logging in newtab update script

Add directory existence validation for NEW_TAB_DIR and ENGINE_DIR
Implement detailed subprocess output capturing with error logging
Introduce comprehensive exception handling with specific error types

Signed-off-by: Jarm7 <kotek.moorkotek@gmail.com>
2025-03-23 00:22:08 +01:00
mr. m
025f994c62 fix: enhance tab unloading logic with permitUnload check and update candidate version and update to firefox 136.0.2 2025-03-18 15:46:13 +01:00
mr. M
f14f87b54e Update @zen-browser/surfer to version 1.10.2, remove outdated test, and add new test for browser workspaces 2025-03-13 00:42:17 +01:00
mr. M
f7995f6da7 Update to firefox 136.0 2025-02-26 20:14:31 +01:00