All Platforms
- Updated Tor to 0.4.8.16
- Bug tor-browser#43580: Backport tor-browser#43443: Drop effective top level domain for au.securedrop.tor.onion
- Bug tor-browser#43584: Rebase Tor Browser stable onto 128.9.0esr
- Bug tor-browser#43601: Backport security fixes from Firefox 137
Windows + macOS + Linux
- Updated Firefox to 128.9.0esr
macOS + Linux + Android
- Bug tor-browser#43553: Backport tor-browser#43504: Implement User Survey UX (Desktop)
Android
- Updated GeckoView to 128.9.0esr
- Bug tor-browser#43552: Backport tor-browser#43505: Impement User Survey UX (Android)
- Bug tor-browser#43578: Backport tor-browser#43556: Add the “Dismiss” translations in the survey banner
Build System
- All Platforms
- Updated Go to 1.22.12
- Bug tor-browser-build#41407: Use Lyrebird also for the Snowflake PT
- Bug tor-browser-build#41420: Update the changelog script for label updates
- Windows + macOS + Linux
- Bug tor-browser-build#41378: Backport Bug 41363: Make separate update_responses commit for each platform
- macOS + Linux + Android
- Bug tor-browser-build#41375: Backport Bug 41374+40799: Remove support for migrate_archs and migrate_langs in update_responses + Remove legacy locale iteration in update-responses and dmg2mar
- Bug tor-browser-build#41383: Add clairehurst to list of accepted firefox/geckoview signers
- Bug tor-browser-build#41384: OpenSSL hash files have changed format
- Bug tor-browser-build#41399: Update snowflake to 2.11.0 and lyrebird to 0.6.0
- Bug tor-browser-build#41378: Backport Bug 41363: Make separate update_responses commit for each platform
- Linux
- Bug tor-browser-build#41337: Remove libstdc++ from Linux tor-expert-bundle
- Android
- Bug tor-browser-build#41410: Use the Lyrebird name on Android