eliott/desktop
1
0
Fork 0
mirror of https://github.com/zen-browser/desktop synced 2026-04-25 17:15:00 +02:00
Code Issues Packages Projects Releases Wiki Activity
6,614 Commits 10 Branches 165 Tags
270db6d6713d2c6c14d9df0b4bc7662843d3d54e
Commit Graph

137 Commits

Author SHA1 Message Date
JDX50S
270db6d671 Merge commit from fork 
* security: enable MAR signature verification for updates

Remove `--enable-unverified-updates` from the common mozconfig. This flag
was disabling all MAR (Mozilla ARchive) signature verification in the
updater binary, meaning update packages were applied without any
cryptographic authenticity check.

With this flag removed, the Mozilla build system will:
- Link NSS and signmar into the updater binary
- Enable SecVerifyTransformCreate-based signature verification on macOS
- Require MAR files to contain valid signatures before applying

REQUIRED FOLLOW-UP (maintainer action):
1. Generate a Zen-specific MAR signing keypair (RSA-PKCS1-SHA384)
   See: https://firefox-source-docs.mozilla.org/build/buildsystem/mar.html
2. Place the public key DER file(s) in the source tree at
   toolkit/mozapps/update/updater/release_primary.der
3. Sign MAR files during the release build with the private key
4. Set ACCEPTED_MAR_CHANNEL_IDS in update-settings.ini to restrict
   which update channels the updater will accept

Ref: GHSA-qpj9-m8jc-mw6q

* no-bug: Added signature steps

* no-bug: Export browser/installer/package-manifest.in

---------

Co-authored-by: Maliq Barnard <maliqbarnard@Maliqs-MacBook-Air.local>
Co-authored-by: Mr. M <mr.m@tuta.com>
 2026-04-09 19:28:31 +02:00
mr. m
9bd76d3ad0 no-bug: Fix release builds (gh-12825) 2026-03-18 22:56:24 +01:00
mr. m
3e2e27d893 no-bug: Remove code linter checks (gh-12801) 2026-03-17 15:13:39 +01:00
mr. m
4ae9f81a68 feat: Add workflow to import expternal patches, b=no-bug, c=workflows, windows 2026-02-25 16:11:41 +01:00
mr. m
6e71a23ed8 feat: Change twilight tag name, b=no-bug, c=workflows 2026-02-21 11:58:53 +01:00
mr. m
368cb06d77 Revert "chore: Change the twilight release tag name to canary, b=no-bug, c=workflows" 
This reverts commit d28622e749.
 2026-02-21 11:37:28 +01:00
mr. m
d28622e749 chore: Change the twilight release tag name to canary, b=no-bug, c=workflows 2026-02-21 10:30:28 +01:00
mr. m
214fd4aff0 feat: Include X-AppImage-Version into the AppImage .desktop file, b=closes #12412, c=workflows 2026-02-17 12:13:41 +01:00
mr. m
37eed5fcfe fix: Start working on more eslint rules, p=#11874 
* fix: Start working on more eslint rules, b=no-bug, c=common, mods, workspaces

* chore: Continue migration, b=no-bug, c=workflows, windows, glance, mods, welcome, workspaces, common, compact-mode, folders, tests, kbs, media, split-view, tabs

* chore: Finish, b=no-bug, c=common, compact-mode, folders, glance, tests, kbs, media, mods, split-view, tabs, workspaces, welcome

* fix: Fix installing deps, b=no-bug, c=common

* feat: Dont initialize git on download checks, b=no-bug, c=workflows

* feat: Remove empty JS docs, b=no-bug, c=common, compact-mode, folders, glance, kbs, media, mods, split-view, tabs, tests, workspaces

* chore: Run lint, b=no-bug, c=common, folders, glance, kbs, mods, split-view, tabs, workspaces
 2026-01-12 15:11:43 +01:00
mr. m
6a218d109a feat: Use github runners instead of blacksmith for less intensive tasks, b=no-bug, c=workflows 2025-12-11 13:35:17 +01:00
mr. m
450623aa69 chore: Include language packs into tarball, b=closes #10865, c=workflows 2025-10-19 15:23:52 +02:00
Kamil Monicz
d9bc654fc7 fix: zen.source missing vsc from nested modules that are checksummed (#10607) 2025-09-28 21:03:59 +02:00
Kamil Monicz
bc5e4eb48f fix: zen.source ignore VCS data, p=#10606 2025-09-28 17:48:01 +02:00
Kamil Monicz
cc8dfc693b fix: zen.source builds missing dotfiles (#10599) 2025-09-28 16:06:59 +02:00
Mr. M
4744a4cf6d feat: Enable crash reports and use npm ci, b=no-bug, c=workflows, common, configs 2025-09-21 15:10:29 +02:00
Mr. M
e533f722ff fix: Fixed flathub missing attributes, b=no-bug, c=workflows, flatpak, folders, workspaces 2025-09-04 12:16:08 +02:00
Mr. M
5040df2416 chore: [no-lint] Fix action runners for blacksmith, b=no-bug, c=workflows 2025-06-20 14:13:23 +02:00
blacksmith-sh[bot]
8bc4c97215 .github/workflows: Migrate workflows to Blacksmith runners (#9104) 
Co-authored-by: blacksmith-sh[bot] <157653362+blacksmith-sh[bot]@users.noreply.github.com>
Co-authored-by: mr. m <91018726+mr-cheffy@users.noreply.github.com>
 2025-06-20 14:02:23 +02:00
mr. m
fcff502d1a chore: Updated to firefox 139.0.4 and fixed gh release version (see https://github.com/softprops/action-gh-release/issues/627), b=no-bug, c=workflows 2025-06-10 18:00:13 +02:00
Mr. M
aa4e385b6b chore: Bump release action upload, b=no-bug, c=workflows 2025-06-10 11:18:12 +02:00
Mr. M
7b99f227cd chore: Format with only a maximum of 10 columns, b=(no-bug), c=workflows, common, compact-mode, folders, glance, kbs, media, mods, split-view, tabs, tests, workspaces, welcome 2025-05-10 21:22:16 +02:00
Mr. M
826802df21 chore: Cleaned up workflows, b=(no-bug), c=workflows 2025-05-10 15:02:26 +02:00
mr. m
7b3dae8bea fix(build.yml): optimize git clone command by using --depth 1 for faster downloads 2025-04-14 19:39:38 +02:00
mr. m
683bb7eb41 fix: update path for zen metainfo file in build workflow 2025-04-03 19:50:09 +02:00
mr. m
8b0fd0af85 Merge branch 'dev' of https://github.com/zen-browser/desktop into dev 2025-04-03 19:49:35 +02:00
mr. m
80d177aa92 fix: update template root path in build workflow configuration 2025-04-03 19:49:30 +02:00
mr. m
dea4ccbe58 Fixed flatpak upload path 
Signed-off-by: mr. m  <91018726+mauro-balades@users.noreply.github.com>
 2025-04-03 10:35:03 -07:00
mr. m
5473afac23 Added option to use sccache for release builds 
Signed-off-by: mr. m  <91018726+mauro-balades@users.noreply.github.com>
 2025-04-03 00:04:45 +02:00
mr. M
b4269b9001 fix: conditionally download aws-cli in build workflow for release branches 2025-04-01 19:36:05 +02:00
mr. M
dfc9119bbc feat: add 'use-sccache' input to build workflows for improved caching options 2025-04-01 19:34:31 +02:00
mr. M
c60c9fbd30 Refactor build process to use a new directory structure and remove deprecated files 2025-03-29 15:42:33 +01:00
mr. M
569ee488f5 fix(build): remove duplicate echo statement for GITHUB_REPOSITORY_OWNER in workflow 2025-03-23 11:31:21 +01:00
UnownPlain
09c0f5143d Fix stable build release notes generation 2025-03-18 18:45:20 -04:00
UnownPlain
e315ff24e1 Generate release notes for Github releases 2025-03-13 01:37:02 +00:00
mr. M
94714e4f39 Add README generation for release builds and update session store attributes 2025-03-10 21:15:22 +01:00
mr. M
4c7955b099 Add actions cache variable exposure to build workflows 2025-03-07 17:04:27 +01:00
Samuel
0d499b3c25 fix crash on sleep by switching appimage runtime 
This also has the benefit of faster launch times

Signed-off-by: Samuel <36420837+Samueru-sama@users.noreply.github.com>
 2025-03-06 22:33:54 -04:00
mr. m
cf6ed8c382 Removed flatpak artifacts once build and commits has been done 2025-02-25 17:53:43 +01:00
mr. M
12891ab238 Refactor tab management and styles for improved functionality and user experience 2025-02-23 21:53:07 +01:00
mr. m
7b6b69356c FIxed uploading twilight assets 2025-02-16 12:28:48 +01:00
mr. m
06a29292cc Fixed twilight builds upload path 2025-02-16 07:50:40 +01:00
mr. m
ceefc07609 Changed automatic release API 2025-02-16 00:48:03 +01:00
mr. M
846b24603e Refactor npm commands in workflows for consistency and improved clarity 2025-02-03 21:39:04 +01:00
mr. M
42dbff273f Refactor npm commands in workflows for consistency and improved clarity 2025-02-03 21:27:38 +01:00
mr. M
b1b83ae32a Refactor Surfer CI commands in workflows for consistency and improved readability 2025-02-03 21:24:05 +01:00
mr. M
24d8e7a5d7 Replace pnpm with npm in workflows and scripts for consistency across the project 2025-02-03 21:20:29 +01:00
mr. M
faff428afb Update Linux build artifacts to use .tar.xz format 2025-02-01 10:32:53 +01:00
mr. m
7975494bd6 Fixed uploading mac builds 2025-01-30 18:23:11 +01:00
mr. m
c19748bbbe Update @zen-browser/surfer dependency to version 1.9.15 and refine macOS build workflows 2025-01-28 14:02:55 +00:00
mr. M
d3f14bd9c3 Refactor macOS build workflows to unify artifact naming and update dependencies 2025-01-26 19:54:03 +01:00