All Platforms

• Updated Firefox to 153.6.0esr
• Updated NoScript to 13.6.37.1984
• Bug 446: Implement persistent-mode backend [mullvad-browser]
• Bug 483: Add the "No AI" version of DuckDuckGo to available search engines [mullvad-browser]
• Bug 489: Drop about:rights [mullvad-browser]
• Bug 502: Some bugs in the about popup [mullvad-browser]
• Bug 514: Revert New Identity commit [mullvad-browser]
• Bug 516: Use CSS size and space tokens in mullvad-browser [mullvad-browser]
• Bug 534: Migrate DoH DNS to Quad9 provider [mullvad-browser]
• Bug 535: Use config to hide settings in mullvad browser [mullvad-browser]
• Bug 537: Automatically migrate Mullvad DoH provider to Quad9 [mullvad-browser]
• Bug 538: Notify user of DoH provider migration in message bar [mullvad-browser]
• Bug 549: Update DoH UI in about:settings [mullvad-browser]
• Bug 565: Update the selector to hide the help button in about:addons [mullvad-browser]
• Bug 569: Remove Firefox branding from about:preferences [mullvad-browser]
• Bug 576: Update about:preferences after redesign [mullvad-browser]
• Bug 580: Migrate hiding feedbackPage menuitem to Mullvad Browser patchset [mullvad-browser]
• Bug 581: Change the "Review settings" button destination [mullvad-browser]
• Bug 43640: Poor screen reader experience when opening preferences and scrolling to element [tor-browser]
• Bug 43824: Switch resource:// modules to use moz-src: [tor-browser]
• Bug 44118: Decide how to deal with upstream feature gates in a RR world [tor-browser]
• Bug 44257: Disable locale-based font rules as a defense-in-depth [tor-browser]
• Bug 44289: RFPHelper console error when --toolbar-field-color is set to inherit [tor-browser]
• Bug 44302: Fix the flags of some about pages [tor-browser]
• Bug 44439: Remove translate action from urlbar [tor-browser]
• Bug 44459: Letterboxing content alignment setting is missing styling [tor-browser]
• Bug 44460: Payment methods and addresses setting headings are visible in settings [tor-browser]
• Bug 44511: Make sure new search suggest features are disabled for 16.0 [tor-browser]
• Bug 44520: Make sure "Firefox labs" is hidden by default [tor-browser]
• Bug 44522: Move common changes to about dialog to base-browser [tor-browser]
• Bug 44528: Make sure desktop IP Protection is disabled on desktop [tor-browser]
• Bug 44535: Letterboxing background colour is no longer used [tor-browser]
• Bug 44560: Customize the flags for alternate 'Application Data' directories [tor-browser]
• Bug 44562: Set the new online Suggest prefs to false [tor-browser]
• Bug 44571: Disable restrict_to_adults for potential fingerprintability [tor-browser]
• Bug 44629: Add a search suggestion warning in the settings [tor-browser]
• Bug 44630: Use settings config to hide settings, rather than data-hidden-from-search or commenting out [tor-browser]
• Bug 44647: Clean up patch for SearchEngineSelector.sys.mjs. [tor-browser]
• Bug 44685: Use border radius for letterboxing [tor-browser]
• Bug 44706: creating a new profiles causes crash ENOTTY [tor-browser]
• Bug 44709: Hide the AI settings panel [tor-browser]
• Bug 44710: Hide about:preferences#translations [tor-browser]
• Bug 44755: Trusted Types (Firefox 148 and above) + Web Workers broken on Safer Level [tor-browser]
• Bug 44763: Disable WebGPU until audited [tor-browser]
• Bug 44764: Hide some AI settings using browser.ai.control.default [tor-browser]
• Bug 44765: Restore the limited sidebar description [tor-browser]
• Bug 44767: Safer Level's worker patching throws on new about:blank frames with Trusted Types [tor-browser]
• Bug 44778: Safer Level: xray causes patched TrustedTypePolicy instances to be unusable by content. [tor-browser]
• Bug 44793: privacy.spoof_english console error in about:preferences [tor-browser]
• Bug 44795: Revert BB 27604 patch as not needed anymore [tor-browser]
• Bug 44801: Redact onion origins from Location.ancestorOrigins. [tor-browser]
• Bug 44802: Hide the "safe browsing" settings [tor-browser]
• Bug 44811: Remove the lock on pdfjs.disable. [tor-browser]
• Bug 44814: Disable trustpanel until our new designs are ready [tor-browser]
• Bug 44815: Disable harmful addon URL blocking [tor-browser]
• Bug 44828: Remove browser module references from toolkit/modules/ActorManagerParent.sys.mjs [tor-browser]
• Bug 44829: Hide the settings privacy card [tor-browser]
• Bug 44830: Migrate our home page adjustments to the settings config [tor-browser]
• Bug 44832: Hide the Firefox mascot in about:neterror [tor-browser]
• Bug 44847: Drop letterboxing sidebar rounded corner logic [tor-browser]
• Bug 44857: Drop browser.display.use_system_colors from our preference list [tor-browser]
• Bug 44865: Block chrome:///locale/ to content [tor-browser]
• Bug 44870: Remove legacy branch from gitlab templates [tor-browser]
• Bug 44896: Drop privacy.partition.network_state [tor-browser]
• Bug 44902: Error in privacy preference initialisation due to missing dataCollectionViewProfilesMultiProfileBackupWarning [tor-browser]
• Bug 44903: Use the support-page instead of tor-manual-page in moz-support-link [tor-browser]
• Bug 44955: Use context-fill for about-wordmark.svg [tor-browser]
• Bug 44956: Switch colours in letterboxing setting icons to match the tab-alignment icons [tor-browser]
• Bug 44990: CI failing due to dubious ownership of cached repo [tor-browser]
• Bug 45037: Potential runtime errors in the search service when changing JS status [tor-browser]
• Bug 45039: Make it easier to test ProfileDataUpgrader customization [tor-browser]
• Bug 45047: Cross-site oracle via worklet rejection error in Safer Mode [tor-browser]
• Bug 45072: Disable XSLT already for 16.0 [tor-browser]
• Bug 45073: Review preference changes between Firefox 141 and 153 [tor-browser]
• Bug 45079: Move letterboxing to the appearance setting pane [tor-browser]
• Bug 45080: Keep the Reporting API disabled. [tor-browser]
• Bug 45083: Error in about:preferences due to ipprotection missing [tor-browser]
• Bug 45123: Disable profile backup for 16.0 [tor-browser]
• Bug 45131: Security level is using an unsafe getBoolPref [tor-browser]
• Bug 45132: nsAppFileLocationProvider.cpp: use of undeclared identifier 'XRE_EXECUTABLE_FILE' [tor-browser]
• Bug 45133: Disable browser.toolbars.share-button.enabled [tor-browser]
• Bug 45157: Grant "access local files" permission to NoScript (Firefox 153 and above) [tor-browser]
• Bug 45168: Hide the history search option, again [tor-browser]
• Bug 45169: Cannot open history sidebar in private browsing window [tor-browser]
• Bug 45171: Disable split view for 16.0 [tor-browser]
• Bug 45176: Add "Request English" to the website language config [tor-browser]
• Bug 45177: Remove websiteSpoofEnglishControl [tor-browser]
• Bug 45185: Disable network also in the Rust implementation of the remote settings client [tor-browser]
• Bug 45186: Remove duplicate alert roles in moz-message-bar [tor-browser]
• Bug 45187: Disable private browsing "delete downloaded files" feature [tor-browser]
• Bug 45195: Modify our calls to openPreferences to work with the new settings [tor-browser]
• Bug 45201: Convert security level settings to the new config [tor-browser]
• Bug 45208: Switch on the setting redesign [tor-browser]
• Bug 45209: Remove mention of "sync" from new settings [tor-browser]
• Bug 45211: Add settings for protections from third party applications [tor-browser]
• Bug 45228: Drop browser.urlbar.update2.engineAliasRefresh [tor-browser]
• Bug 45232: Spoof picture-in-picture sizes under RFP [tor-browser]
• Bug 45249: Remove the duplicate "Verified by" from the old site identity panel [tor-browser]
• Bug 45278: Explicitly disable WebXR [tor-browser]
• Bug 45336: Pass --disable-proxy-direct-failover in our mozconfigs [tor-browser]
• Bug 45360: Port our language preference customization to the new settings design [tor-browser]
• Bug 45403: Ensure RemoteSetting dumps are loaded ASAP [tor-browser]
• Bug 45410: Incomplete Safer Level propagation to nested workers [tor-browser]
• Bug 41713: Try to find a component for bugs found with commits in triage spreadsheets [tor-browser-build]
• Bug 41742: Make the Mullvad Browser publishing script work even if the BB branch being missing [tor-browser-build]
• Bug 41846: Sign alpha releases using new gpg subkey [tor-browser-build]

Windows

• Bug 552: ABI::Windows::Graphics::Capture::IID_IGraphicsCaptureSession2 is used again in wgc_capture_session.cc [mullvad-browser]
• Bug 555: Fix our wchar_t to char conversion in desktop_capture_utils.cc [mullvad-browser]
• Bug 563: Hide the fox icon in about:pdf [mullvad-browser]
• Bug 44461: Window controls are missing on Windows [tor-browser]
• Bug 44513: Backport Bugzilla 2059471: Do not spoof screen orientation when it is locked [tor-browser]
• Bug 44633: Move D3D11 function from local webrtc changes to tbb webrtc patches [tor-browser]
• Bug 44745: Change how we hide SSO setting for windows [tor-browser]
• Bug 44862: Fontvis is missing Segoe MDL2 Assets [tor-browser]
• Bug 45144: Do not offer to make the browser a PDF viewer when in portable mode [tor-browser]
• Bug 45243: Disable taskbar tabs [tor-browser]
• Bug 45293: Set widget.windows.tablet_detection_override to -1 [tor-browser]

macOS

• Bug 44728: Bundled fonts are broken on macOS when the GPU process is enabled [tor-browser]
• Bug 45108: Artifact generation fails due to missing .DS_Store in the branding directories [tor-browser]

Linux

• Bug 44050: Change the domain in DBus interfaces [tor-browser]
• Bug 44410: Use system's size for UI font on Linux [tor-browser]
• Bug 44521: Disable widget.wayland.fractional-scale.enabled [tor-browser]
• Bug 45048: Backport Bugzilla 2041887: Crash in [@ libfontconfig.so.1] after users upgraded to fontconfig 2.18.0 [tor-browser]

Build System

All Platforms

• Bug 501: Support Firefox nightly tags in publishing automation for RR-based alphas [mullvad-browser]
• Bug 44452: Improve tb-dev range-diff and diff-diff [tor-browser]
• Bug 44498: Update translations CI to account for 1.0 version gap between alpha and stable [tor-browser]
• Bug 45224: Enable Rust linter in CI [tor-browser]
• Bug 45334: Update marionette harness to accept multiple tags [tor-browser]
• Bug 31860: Start using LTO for firefox project [tor-browser-build]
• Bug 40903: Make xz multi-threaded [tor-browser-build]
• Bug 41427: Drop the openURL property from the update [tor-browser-build]
• Bug 41647: Add a XZ_DEFAULTS to set_default_env [tor-browser-build]
• Bug 41660: Add a Firefox target to build unpatched Firefox in tor-browser-build [tor-browser-build]
• Bug 41662: Add python-zstandard to desktop containers [tor-browser-build]
• Bug 41664: Investigate and fix issue with unexpected build_id changes [tor-browser-build]
• Bug 41668: Build mozharness.zip when building dev artifacts [tor-browser-build]
• Bug 41678: Use set -u and set -o pipefail [tor-browser-build]
• Bug 41685: Add henry to list of taggers in relevant projects. [tor-browser-build]
• Bug 41687: Add single make list_toolchain_updates command to list all toolchain updates [tor-browser-build]
• Bug 41690: Merge list_toolchain_updates-firefox-* commands into one [tor-browser-build]
• Bug 41693: Drop base-browser targets [tor-browser-build]
• Bug 41707: firefox-l10n fails to build with fetch_locale: 1: set: Illegal option -o pipefail [tor-browser-build]
• Bug 41726: Check in list_toolchain_updates that the sha512sum we have for the macOS SDK is the same as Mozilla [tor-browser-build]
• Bug 41727: Split the list_toolchain_updates_checks script in two [tor-browser-build]
• Bug 41728: Update projects/application-services/list_toolchain_updates_checks to check nss sha256sum [tor-browser-build]
• Bug 41778: Remove base-browser from protected-branches.py [tor-browser-build]
• Bug 41780: Create sha256sums-unsigned-build.txt in artifacts/$platform directories [tor-browser-build]
• Bug 41786: Add comment to rbm.local.conf.example warning about potential recursive loops in tmp_dir definition [tor-browser-build]
• Bug 41806: make list_toolchain_updates should check var/firefox_platform_version [tor-browser-build]
• Bug 41807: Incorrectly generated Bugzilla query link in generate-bugzilla-triage-csv.py [tor-browser-build]
• Bug 41823: Add versions information to the toolchain list update [tor-browser-build]
• Bug 41838: Update personal_access_tokens URL in tools/fetch_changelogs.py [tor-browser-build]
• Bug 41844: Add scripts to backup/deploy signing keys on signing machines [tor-browser-build]
• Bug 41860: Change GCC sources mirror to https://gcc.gnu.org [tor-browser-build]
• Bug 41898: Separate MB and TB toolchain archives in https://nightlies.tbb.torproject.org/nightly-builds/toolchains/ [tor-browser-build]
• Bug 40093: Make it easy to get the sha256sum of an input_files file [rbm]
• Bug 40096: container extract is showing confusing error when target directory already exists [rbm]
• Bug 40100: The GZIP variable makes set -u fail [rbm]
• Bug 40103: Allow having multiple tmp_dir values [rbm]
• Bug 40106: Improve error message in case of recursive definition [rbm]

Windows + macOS

• Bug 41535: Update macOS and Windows containers to Debian trixie [tor-browser-build]

Windows

• Bug 44853: Update target in mozconfig-windows-x86_64 and mozconfig-windows-i686 [tor-browser]
• Bug 41810: Define GetAddrInfoExCancel on mingw [tor-browser-build]
• Bug 41877: make list_toolchain_updates is not checking windows-app-sdk [tor-browser-build]
• Bug 41878: Update the Windows app SDK and add some additional DLLs [tor-browser-build]

macOS

• Bug 41665: Update macos signing wrapper for new executable gpu-helper.app [tor-browser-build]
• Bug 41773: Change the position of -mindepth when creating the dmg [tor-browser-build]
• Bug 41793: Stop copying permissions from .mar in dmg2mar [tor-browser-build]

Linux

• Bug 41627: Firefox build system needs a more recent version of OpenSSL on Linux [tor-browser-build]
• Bug 41632: Ship Linux aarch64 builds in Alpha Release Channel [tor-browser-build]
• Bug 41639: Remove linux-arm target [tor-browser-build]
• Bug 41640: Clean the GCC config file [tor-browser-build]