Commit Graph

358 Commits

Author SHA1 Message Date
mr. m
f828d2eb20 no-bug: Add more PGO training and enable clang plugins (gh-13325) 2026-04-20 22:21:06 +02:00
mr. m
e9634e1057 no-bug: Move API keys to release script (gh-13309) 2026-04-19 01:11:44 +02:00
mr. m
fc2eb5a20b no-bug: Re-enable maintenance service (gh-13186) 2026-04-09 22:40:38 +02:00
mr. m
4ca83bfe33 no-bug: remove unnecessary verification option from build configuration (gh-13182) 2026-04-09 20:06:27 +02:00
JDX50S
270db6d671 Merge commit from fork
* security: enable MAR signature verification for updates

Remove `--enable-unverified-updates` from the common mozconfig. This flag
was disabling all MAR (Mozilla ARchive) signature verification in the
updater binary, meaning update packages were applied without any
cryptographic authenticity check.

With this flag removed, the Mozilla build system will:
- Link NSS and signmar into the updater binary
- Enable SecVerifyTransformCreate-based signature verification on macOS
- Require MAR files to contain valid signatures before applying

REQUIRED FOLLOW-UP (maintainer action):
1. Generate a Zen-specific MAR signing keypair (RSA-PKCS1-SHA384)
   See: https://firefox-source-docs.mozilla.org/build/buildsystem/mar.html
2. Place the public key DER file(s) in the source tree at
   toolkit/mozapps/update/updater/release_primary.der
3. Sign MAR files during the release build with the private key
4. Set ACCEPTED_MAR_CHANNEL_IDS in update-settings.ini to restrict
   which update channels the updater will accept

Ref: GHSA-qpj9-m8jc-mw6q

* no-bug: Added signature steps

* no-bug: Export browser/installer/package-manifest.in

---------

Co-authored-by: Maliq Barnard <maliqbarnard@Maliqs-MacBook-Air.local>
Co-authored-by: Mr. M <mr.m@tuta.com>
2026-04-09 19:28:31 +02:00
mr. m
3ed2fb7197 no-bug: Remove hardcoded SDK path for macos (gh-12930) 2026-03-26 16:41:22 +01:00
mr. m
f2be086123 no-bug: Update Visual C++ Redistributable version in signing scripts (gh-12859) 2026-03-20 18:20:23 +01:00
mr. m
1d6f8e33b3 no-bug: Update Visual C++ Redistributable version in signing scripts (gh-12858) 2026-03-20 17:25:46 +01:00
mr. m
5fb931daad gh-12841: Fixed creating an unexpected folder in a second window when a new space is created (gh-12857) 2026-03-20 16:56:06 +01:00
mr. m
cb7fbe43ee no-bug: Update rust deps and VS version (gh-12850) 2026-03-20 14:07:14 +01:00
mr. m
894fbd6a4f fix: Fixed selected space not being highlighted, b=closes #12368, c=configs, common 2026-02-13 20:22:49 +01:00
mr. m
76f17c3a57 chore: Automatically import patches from phabricator and librewolf, p=#12271
* chore: Automatically import patches from phabricator and librewolf, b=no-bug, c=workflows, scripts

Signed-off-by: mr. m <91018726+mr-cheffy@users.noreply.github.com>

* feat: Remove legacy flag, b=no-bug, c=common, configs

---------
2026-02-07 18:02:40 +01:00
mr. m
950f6dfb66 Revert "feat: Implement new wizzard watermarks, b=no-bug, c=configs"
This reverts commit 956841a76e.
2026-01-26 01:47:28 +01:00
mr. m
956841a76e feat: Implement new wizzard watermarks, b=no-bug, c=configs 2026-01-25 09:51:17 +01:00
Mr. M
e88530da19 chore: Set a proper user app dir for legacy unix paths, b=bug #11917, c=common, configs 2026-01-19 11:57:53 +01:00
mr. m
d5727a6a1b chore: Clean up build flags to stay more close to firefox defaults, b=no-bug, c=common, configs, windows 2026-01-10 01:24:20 +01:00
mr. m
6bce6f4874 chore: Update SDK version to 26.2 for MacOS artifact builds, b=no-bug, c=workflows, configs 2026-01-09 03:06:31 +01:00
mr. m
0d080ffc38 chore: Specify the new MacOSX SDK dir for artifact builds, b=no-bug, c=configs 2026-01-09 02:49:43 +01:00
mr. m
ec4a55e1f8 chore: Revert linking with ld64 due to big compile times and resource usage, b=no-bug, c=configs 2026-01-07 00:28:56 +01:00
mr. m
b0f3839426 feat: Limit the number of threads when building macos releases, b=no-bug, c=configs 2026-01-06 20:20:38 +01:00
mr. m
481163a756 feat: Correctly initialize new restored windows, p=#11821
* feat: Correctly initialize new restored windows, b=no-bug, c=no-component

* chore: Experiment with different build flags for optimization and build time, b=no-bug, c=common, configs

* chore: Format, b=no-bug, c=no-component
2026-01-06 12:38:22 +01:00
mr. m
2fd0935bf5 chore: Mark ld64 as known for automated macos builds, b=no-bug, c=configs 2026-01-05 18:37:30 +01:00
mr. m
ea7024aae4 feat: Start using ld64 for macos builds, b=no-bug, c=configs, compact-mode 2026-01-05 13:31:08 +01:00
mr. m
beb4f94fd2 chore: Change compile flags for macos to fix potential memory leaks, b=bug #9649, c=configs 2026-01-05 02:22:44 +01:00
mr. m
bdfb810212 fix: Dont use a new timestamp when changing config dumps, b=closes #11601, c=configs 2025-12-13 21:15:37 +01:00
mr. m
0c0c982bc2 chore: Implement settings dump schema to update firefox remote servic…, p=#11579
* chore: Implement settings dump schema to update firefox remote services data, b=no-bug, c=configs, scripts

* feat: Also update with timestamps, b=no-bug, c=configs, scripts

* chore: Move JSON with comments to a new module, b=no-bug, c=scripts, tests

---------

Signed-off-by: mr. m <91018726+mr-cheffy@users.noreply.github.com>
2025-12-11 13:26:28 +01:00
mr. m
c2f9097983 chore: Disable sccache for windows builds, b=no-bug, c=configs 2025-11-10 17:07:32 +01:00
mr. m
37eb6f85eb chore: Fixed using the wrong location for wine, b=no-bug, c=configs 2025-11-05 00:08:18 +01:00
mr. m
2c31564f5d Revert "chore: Re-enable updater service, p=#10654, c=configs", p=#10660 2025-10-01 23:45:22 +02:00
mr. m
58a939f2ad chore: Re-enable updater service, p=#10654, c=configs 2025-10-01 15:42:23 +02:00
mr. m
31f6b2ab12 chore: Disabled crashreporter, b=closes #10560, c=common, configs 2025-09-27 14:07:20 +02:00
Mr. M
5ec8badab4 chore: Cleanup firefox build flags since they are on by default now, b=no-bug, c=common, configs 2025-09-25 02:00:22 +02:00
Mr. M
d962cf9949 fix: Fixed closing last tab not closing the window and other refactors, b=closes #10455, c=common, configs, kbs, split-view, folders, tests, workspaces 2025-09-21 17:29:40 +02:00
Mr. M
2ed55a22a6 feat: Remove safe ICF flags for linux, b=no-bug, c=configs 2025-09-21 15:33:57 +02:00
Mr. M
4744a4cf6d feat: Enable crash reports and use npm ci, b=no-bug, c=workflows, common, configs 2025-09-21 15:10:29 +02:00
mr. m
c8e58ad525 fix: Fixed flashing on essential tabs when switching workspaces, b=no-bug, c=configs, common, folders, workspaces 2025-08-15 20:13:29 +02:00
mr. m
3bb8686024 chore: Move PGO builds for macos behind a pref, b=no-bug, c=configs 2025-08-09 21:57:07 +02:00
mr. m
e6b1cbd02a chore: Cleaned up macos mozconfig for packaging, b=no-bug, c=configs 2025-08-09 20:54:38 +02:00
Mr. M
2c5a7612f8 chore: Added release checks to the mozconfig, b=no-bug, c=common, configs 2025-08-09 13:33:23 +02:00
Mr. M
d786c6927f feat: security: Enable google safebrowsing and populate the API keys, b=no-bug, c=workflows, common, configs 2025-06-09 19:11:09 +02:00
Mr. M
3d9a40beb9 feat: Added better privacy and less connections on startup, b=(no-bug), c=common, configs, tabs, welcome 2025-04-27 19:52:06 +02:00
mr. m
6de445eaa1 chore: [security]: Finish up wrapping event listeners and other small fixes, b=(no-bug), c=configs, common, compact-mode, split-view, tabs, workspaces 2025-04-23 00:30:56 +02:00
mr. m
7dc4bb728b Fixed twilight builds with invalid eme enabling
Signed-off-by: mr. m  <91018726+mauro-balades@users.noreply.github.com>
2025-04-22 16:52:12 +02:00
mr. m
4cc687e2cd fix: Fixed DRM not installed for arm64 builds, b=(closes #7759), c=configs 2025-04-22 16:25:31 +02:00
mr. m
92e49efdc6 fix: Removed dead link from readme, b=(closes #7817), c=configs 2025-04-22 15:31:16 +02:00
mr. m
f7a19e8b14 fix: Fixed macos builds having an invalid app ID, b=(no-bug), c=configs 2025-04-22 15:29:45 +02:00
Mr. M
b0d10919d7 fix: closes #7630 - Fixed windows packages not containing redistributable files, r=configs 2025-04-15 22:58:02 +02:00
mr. M
aa673cc361 fix: ensure SCCACHE_GHA_ENABLED is set to 'true' or 'false' based on input 2025-04-01 19:51:17 +02:00
mr. m
2010c3a5c7 fix: update branding options in mozconfig and adjust JS preference handling 2025-03-31 19:01:59 +02:00
mr. M
baf2bc9527 chore: update @zen-browser/surfer dependency to version 1.11.3 and adjust build scripts for Windows 2025-03-31 00:41:07 +02:00