Commit Graph

58 Commits

Author SHA1 Message Date
celenity
49addc254c fix: remove the --no-proxy-ntlm curl flag
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-30 17:29:54 +00:00
celenity
3d8c59e515 fix: set proper MIME types for uploaded S3 files
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-30 00:35:49 +00:00
celenity
982f7f8f0d fix: rename IRONFOX_KEYSTORE env vars to IRONFOX_ANDROID_KEYSTORE for clarity/consistency (+ minor formatting)
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-23 21:59:55 -04:00
celenity
bcc3fd371c fix: Do not set default values for S3 env variables
We can instead just set them in `env_ci.sh`

Signed-off-by: celenity <celenity@celenity.dev>
2026-04-23 20:51:48 -04:00
celenity
8a18107402 fix: Download dependencies for update-fdroid-repo and update-site-repo from get_sources.sh (+ replace instances of certain GitLab-specific environment variables with our own generic ones)
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-23 20:40:22 -04:00
celenity
2edb5659bd WIP: 150.0
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-17 05:22:52 +00:00
celenity
31e5a1522e fix: add back separate IRONFOX_GECKOVIEW_BUNDLE_DIRECT env var
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-13 04:28:42 +00:00
celenity
fcf1871f0a feat: Upload releases to releases.ironfoxoss.org (our new S3 storage...)
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-13 03:50:01 +00:00
celenity
43f4ee2206 feat: allow configuration of variables for Fenix and GeckoView outputs, + clean-up and improve handling of the export/output process
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-12 10:40:08 +00:00
celenity
8747e36ff8 feat: use separate IRONFOX_GECKOVIEW_BUNDLE_DIRECT env var for building GeckoView AAR archives directly (like we do in CI), + ensure we fail fast if the necessary GeckoView AAR archives are missing
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-06 06:47:17 +00:00
celenity
cf38d7347e feat: specify different env vars for the location of GeckoView AAR archives to use when building the GeckoView bundle (instead of just hardcoding the outputs directory)
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-06 06:30:11 +00:00
celenity
a3b33454d6 feat: add a separate IRONFOX_SIGN_SKIP_ADB variable to skip the prompt to install IronFox via ADB after signing
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-06 06:08:13 +00:00
celenity
e8e66fb809 feat: add/use env variables to manually override the build date and versions for local dependency substitutions
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-06 06:05:38 +00:00
celenity
2f3bebc23d fix: add global IRONFOX_NAME env variable, set depending on release channel
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-05 20:22:23 +00:00
celenity
923042e2de fix: revert "fix: temporarily revert certain env + CI script changes for now"
This reverts commit 3dd7cf2d5f, as these changes were not related to the issue

Signed-off-by: celenity <celenity@celenity.dev>
2026-04-05 20:12:43 +00:00
celenity
f1799a31f8 fix - ci: ensure GeckoView AAR directories exist
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-05 02:17:15 +00:00
Akash Yadav
aa32e22afb Revert "fix: temporarily decrease verbosity of logs and remove .idsig files for CI to reduce artifact size"
This reverts commit a14e949837a8b37bf05399d681e266152a3b39cc.
2026-04-04 15:39:25 +05:30
celenity
15fec1c063 fix: temporarily decrease verbosity of logs and remove .idsig files for CI to reduce artifact size
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-04 06:50:03 +00:00
celenity
3d598ff7bc fix
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-03 23:49:33 +00:00
celenity
a31d31d977 fix: test to determine wtf is breaking bundle signing (/bundletool)...
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-03 23:36:14 +00:00
celenity
8f9b3d8040 fix: scripts (for now)
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-02 21:31:13 +00:00
celenity
a975f2ca23 fix: env
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-02 18:21:23 +00:00
celenity
5de6982e9b fix: temporarily revert certain env + CI script changes for now
Signed-off-by: celenity <celenity@celenity.dev>
2026-04-02 18:15:05 +00:00
celenity
68acead79e feat: set env variables as readonly where possible, and improve/fix-up env var handling in general
Signed-off-by: celenity <celenity@celenity.dev>
2026-03-31 23:30:53 +00:00
celenity
df79b8151e feat: harden cipher suites and enforce at least TLS 1.2 for various network connections
Signed-off-by: celenity <celenity@celenity.dev>
2026-03-30 15:56:38 -04:00
celenity
57ceb4a389 feat: Switch to using JDK 25 by default, and use JDK 21 where possible for projects that JDK 25 don't support
Signed-off-by: celenity <celenity@celenity.dev>
2026-03-30 15:53:38 -04:00
celenity
2c00b4093d fix: Disable Rust incremental compilation to ensure builds are fresh (+ minor formatting for Rust env vars)
Signed-off-by: celenity <celenity@celenity.dev>
2026-03-30 15:37:27 -04:00
celenity
3618dc3788 feat: Set-up Python with UV directly
(also sets envs to configure Python and UV)

Signed-off-by: celenity <celenity@celenity.dev>
2026-03-29 20:14:28 -04:00
celenity
f7aba43071 feat: re-organize configuration files into separate configs directory
This should also help slightly speed up the build process, as it prevents us unnecessarily copying ex. the mozconfig files

Also includes a few minor tweaks to envs, like Gradle flags and new Phoenix envs (for next release)

Signed-off-by: celenity <celenity@celenity.dev>
2026-03-29 20:10:49 -04:00
celenity
123592bc2c feat: Enable verbose Gradle console logs
Signed-off-by: celenity <celenity@celenity.dev>
2026-03-29 02:46:08 +00:00
celenity
0852d777c2 feat: Handle downloading JDK 17 (Temurin) ourselves directly
Signed-off-by: celenity <celenity@celenity.dev>
2026-03-29 02:45:43 +00:00
celenity
a5f8d5bf45 fix: Node.js woes
Signed-off-by: celenity <celenity@celenity.dev>
2026-03-25 04:45:21 +00:00
celenity
e7f1ba4630 feat: Get Node.js
We need this because we now enable minification for JS (to reduce binary size)

Signed-off-by: celenity <celenity@celenity.dev>
2026-03-23 18:51:47 +00:00
celenity
0ffbdfb612 fix: default location for python on Linux
Signed-off-by: celenity <celenity@celenity.dev>
2026-03-22 20:57:15 +00:00
celenity
b15619cc93 fix: do not dynamically create bundletool script from get_sources.sh (no reason to), + add IRONFOX_JAVA env
Signed-off-by: celenity <celenity@celenity.dev>
2026-03-22 20:14:40 +00:00
celenity
23864b8e26 fix: replace python 3.9 with the latest python(3), + add IRONFOX_PYTHON variable for setting the location of python, and prevent dynamically creating our gradle script from get_source.sh (no reason to)
Signed-off-by: celenity <celenity@celenity.dev>
2026-03-22 20:12:22 +00:00
celenity
d1d3734ec7 v148.0.2.1
ironfox-oss/IronFox!131
# IronFox 148.0.2.1
____

## Changes

- Fixed a critical bug that prevented the onboarding from working as expected for new users.
- Other minor tweaks and adjustments.

MR-author: celenity <celenity@celenity.dev>
Approved-by: celenity <celenity@celenity.dev>
Merged-by: celenity <celenity@celenity.dev>
2026-03-11 22:12:16 +00:00
celenity
cb188dc0f9 IronFox v148.0.2
ironfox-oss/IronFox!130
# IronFox 148.0.2
____

## Changes

- Updated to Firefox [`148.0.2`](https://firefox.com/firefox/android/148.0.2/releasenotes/).
- Updated to Rust [`1.94.0`](https://releases.rs/docs/1.94.0/).
- Minor tweaks, fixes, and enhancements.

MR-author: celenity <celenity@celenity.dev>
Approved-by: Akash Yadav <itsaky01@gmail.com>
Merged-by: celenity <celenity@celenity.dev>
2026-03-10 19:55:16 +00:00
celenity
4559d300f1 IronFox v148.0.1
ironfox-oss/IronFox!129
# IronFox 148.0.1
____

## Changes

- Updated to Firefox [`148.0.1`](https://firefox.com/firefox/android/148.0.1/releasenotes/).
- Implemented `SHA512sum` validation for external sources/dependencies at build-time to improve security and reproducability.
- [Added missing Gecko(View) assets](https://gitlab.com/ironfox-oss/IronFox/-/merge_requests/129/diffs?commit_id=4704ea7c3cb19aad045507aad63f6f9cadcd8ba7) to fix issues and improve display of internal *(`about:`)* pages.
- [Removed `about:restricted`](https://gitlab.com/ironfox-oss/IronFox/-/merge_requests/129/diffs?commit_id=55aa1f030173c68bf2a30cbc8d9632bb71dad532) *(used for parental controls/filtering)*.
- [Removed certain unused/unwanted Gecko assets](https://gitlab.com/ironfox-oss/IronFox/-/merge_requests/129/diffs?commit_id=d4e4623668776b895c9f06449f9b7cf47050c048).
- Minor tweaks, fixes, and enhancements.

MR-author: celenity <celenity@celenity.dev>
Co-authored-by: Weblate <hosted@weblate.org>
Approved-by: celenity <celenity@celenity.dev>
Merged-by: celenity <celenity@celenity.dev>
2026-03-03 07:56:04 +00:00
celenity
1d091878ed IronFox v148.0
ironfox-oss/IronFox!127
# IronFox 148.0
____

## Changes

- Updated to Firefox [`148.0`](https://firefox.com/firefox/android/148.0/releasenotes/).
- Updated to Phoenix [`2026.02.23.1`](https://codeberg.org/celenity/Phoenix/releases/tag/2026.02.23.1).
- Minor tweaks, fixes, and enhancements.

MR-author: celenity <celenity@celenity.dev>
Co-authored-by: Weblate <hosted@weblate.org>
Approved-by: Akash Yadav <itsaky01@gmail.com>
Merged-by: celenity <celenity@celenity.dev>
2026-02-26 18:04:16 +00:00
celenity
478782f687 IronFox v147.0.4
ironfox-oss/IronFox!125
# IronFox 147.0.4
____

## Changes

- Updated to Firefox [`147.0.4`](https://firefox.com/firefox/android/147.0.4/releasenotes/).
- Updated to Phoenix [`2026.02.16.1`](https://codeberg.org/celenity/Phoenix/releases/tag/2026.02.16.1).
- Updated to microG [`v0.3.13.250932`](https://github.com/microg/GmsCore/releases/tag/v0.3.13.250932).
- Updated to Rust [`1.93.1`](https://releases.rs/docs/1.93.1/).
- Disabled the [Date Decoder *(RDD)* process](https://firefox-source-docs.mozilla.org/dom/ipc/process_model.html#data-decoder-rdd-process) by default, due to potential [memory safety issues](https://codeberg.org/ironfox-oss/IronFox/issues/94).
    - This means that when isolated content process support is enabled, media playback will not work properly for many websites.
    - As a result, we've unfortunately disabled isolated content process support by default for now - but it can still be enabled from secret settings if desired, at the cost of breakage for media playback on certain websites. We hope to enable it again by default in the near future.
- [Enabled canvas randomization for solid colors](e8e5976010).
    - Adapted from [LibreWolf](343645241e) - thanks to [any1here](https://codeberg.org/any1here)! <3
- [Removed the OpenAI backend](ecc15b7d11).
- Various improvements to the overall build process.
- Other minor tweaks, fixes, and enhancements.

MR-author: celenity <celenity@celenity.dev>
Co-authored-by: Weblate <hosted@weblate.org>
Co-authored-by: Akash Yadav <contact@itsaky.com>
Approved-by: Akash Yadav <itsaky01@gmail.com>
Merged-by: celenity <celenity@celenity.dev>
2026-02-17 07:45:17 +00:00
celenity
636a1ca017 IronFox v147.0.2
ironfox-oss/IronFox!121
____

## Changes

- Updated to Firefox [`147.0.2`](https://firefox.com/firefox/android/147.0.2/releasenotes/).
- Updated to Rust [`1.93.0`](https://releases.rs/docs/1.93.0/).
- Other minor tweaks, fixes, and enhancements.

MR-author: celenity <celenity@celenity.dev>
Co-authored-by: Weblate <hosted@weblate.org>
Approved-by: Akash Yadav <itsaky01@gmail.com>
Merged-by: celenity <celenity@celenity.dev>
2026-01-27 21:18:49 +00:00
celenity
be520f64b3 IronFox v147.0.0.1
ironfox-oss/IronFox!117
____

## Changes

- [Fixed a bug that caused the Android search widget to appear transparent](https://gitlab.com/ironfox-oss/IronFox/-/issues/225).
- [Fixed a bug that prevented the user's real locale from being reflected in certain cases when locale spoofing was disabled](f495970cda).
- [Fixed a crash that occurred upon navigating to certain settings from private browsing](7ac50880c6).
- [Fixed an issue that prevented Gecko preferences from being properly applied for Bundle builds](https://gitlab.com/ironfox-oss/IronFox/-/issues/227).
- [Updated certificate pinning entries](86733dcd35).
- Other minor tweaks and fixes.

MR-author: celenity <celenity@celenity.dev>
Co-authored-by: Weblate <hosted@weblate.org>
Approved-by: celenity <celenity@celenity.dev>
Merged-by: celenity <celenity@celenity.dev>
2026-01-16 04:01:45 +00:00
celenity
4c342f1f48 IronFox v147.0
ironfox-oss/IronFox!115
____

## Changes

- [Added an OLED theme](7008b9c865).
- Enable content process isolation by default.
    - **NOTE**: This may cause issues with live streaming on certain websites *(such as `rumble.com`)*. If desired, at the cost of security, you can disable content process isolation by navigating to `Settings` -> `About` -> `About IronFox`, tapping the IronFox logo 7 times, navigating back to `Secret settings`, disabling the setting to enable content process isolation, and restarting your browser.
- Created and integrated a new separate [`UnifiedPush-AC`](https://gitlab.com/ironfox-oss/unifiedpush-ac) component to support UnifiedPush functionality.
- Implemented support for Gecko localizations *(ex. for `about:` pages)*.
- [Prevented exposing the browser name and vendor to extensions](8fa2ceaa9c) to improve privacy and resolve compatibility issues with certain extensions.
- Updated to Firefox [`147.0`](https://firefox.com/firefox/android/147.0/releasenotes/).
- Other tweaks, enhancements, and refinements.

MR-author: celenity <celenity@celenity.dev>
Co-authored-by: Weblate <hosted@weblate.org>
Co-authored-by: Akash Yadav <itsaky01@gmail.com>
Co-authored-by: techaddict <20232669-techaddict@users.noreply.gitlab.com>
Co-authored-by: user <user@localhost.localdomain>
Approved-by: Akash Yadav <itsaky01@gmail.com>
Merged-by: celenity <celenity@celenity.dev>
2026-01-13 21:21:00 +00:00
celenity
5f80ede13b IronFox v146.0.1
ironfox-oss/IronFox!112
____

## Changes

- [Enabled memory tagging](e24a24e63c) *(via [Android's Arm Memory Tagging Extension](https://developer.android.com/ndk/guides/arm-mte))* to improve security for supported devices *(such as the Pixel 8 and newer)*.
- [Fixed an issue with Obtainium app installation](6026d6524f).
- Updated Bundletool to [`1.18.3`](https://github.com/google/bundletool/releases/tag/1.18.3).
- Updated to Firefox [`146.0.1`](https://firefox.com/firefox/android/146.0.1/releasenotes/).
- Updated microG to [`v0.3.11.250932`](https://github.com/microg/GmsCore/releases/tag/v0.3.11.250932).
- Updated Rust to [`1.92.0`](https://releases.rs/docs/1.92.0/).
- [Various tweaks, fixes, and refinements - especially to the build process](https://gitlab.com/ironfox-oss/IronFox/-/merge_requests/112/diffs).

MR-author: celenity <celenity@celenity.dev>
Co-authored-by: Weblate <hosted@weblate.org>
Co-authored-by: Akash Yadav <itsaky01@gmail.com>
Co-authored-by: techaddict <20232669-techaddict@users.noreply.gitlab.com>
Co-authored-by: user <user@localhost.localdomain>
Approved-by: Akash Yadav <itsaky01@gmail.com>
Merged-by: celenity <celenity@celenity.dev>
2025-12-19 16:16:28 +00:00
celenity
4b02ef03d9 IronFox v144.0.1
ironfox-oss/IronFox!94
____

## Important

We are currently unable to provide updates to IronFox on **Accrescent**, [due to ongoing client and server issues that Accrescent is facing](https://infosec.exchange/@accrescent/115408303090609483). This impacts **all** apps on Accrescent, and is not just limited to IronFox.

**For the time being, we would highly recommend Accrescent users use our `Nightly` CI builds**. As we now use a separate package ID for these builds, it is possible to install Nightly builds *alongside* your existing, standard install of IronFox. This ensures that you can continue to receive the latest security updates and fixes from us, without losing any existing data. **Once updates resume on Accrescent, you can *(and **should**)* simply switch back to your existing standard install.**

Please see [here](https://gitlab.com/ironfox-oss/IronFox/-/blob/dev/docs/FAQ.md#how-can-i-download-nightly-builds) for details on how to install our `Nightly` builds.

## Changes

- [Enabled the display of certain advanced options](bb47aee7e6) at [`about:support`](about:support).
- [Implemented support to block/filter unwanted Remote Settings collections on the Application Services level](33373ec291), similar to [the current Remote Settings Blocker patch](e6c69ef28d/patches/gecko-rs-blocker.patch) *(derived from LibreWolf)* for Gecko. This is necessary due to this Remote Settings instance being separate from Gecko's instance.
- Replaced the `Enable WebGL` settings toggle with a **`Disable WebGL`** toggle that disables WebGL instead, to improve clarity and help avoid confusion.
- Updated to Firefox [`144.0.1`](https://firefox.com/firefox/android/144.0.1/releasenotes/).
- [Other minor tweaks and adjustments](https://gitlab.com/ironfox-oss/IronFox/-/merge_requests/94/diffs).

MR-author: celenity <celenity@celenity.dev>
Co-authored-by: Weblate <hosted@weblate.org>
Co-authored-by: Akash Yadav <itsaky01@gmail.com>
Approved-by: Akash Yadav <itsaky01@gmail.com>
Merged-by: celenity <celenity@celenity.dev>
2025-10-22 19:20:53 +00:00
celenity
1dcb479bbe IronFox v143.0.2
ironfox-oss/IronFox!82
____

## Changes

- Rebased onto Firefox [`143.0.2`](https://firefox.com/firefox/android/143.0.2/releasenotes/).
- [Added a toggle to enable or disable collections](235eb6e018), **enabled** by default, located at `Settings` -> `IronFox` -> `IronFox settings` -> `Miscellaneous` -> `Enable collections`.
- [Added a toggle to enable or disable `Firefox Translations`](0b96f35fb0), **enabled** by default, located at `Settings` -> `IronFox` -> `IronFox settings` -> `Miscellaneous` -> `Enable Firefox Translations` *(Related Gecko preferences: `browser.translations.enable`, `browser.translations.simulateUnsupportedEngine`)*.
- [Disabled speculative connections](3456e56222).
- [Enabled alternate app icon selection](ee2c38ab26).
- [Other minor tweaks and adjustments](https://gitlab.com/ironfox-oss/IronFox/-/merge_requests/82/diffs).

MR-author: celenity <celenity@celenity.dev>
Co-authored-by: Akash Yadav <itsaky01@gmail.com>
Co-authored-by: Weblate <hosted@weblate.org>
Co-authored-by: LucasMZ <git@lucasmz.dev>
Approved-by: celenity <celenity@celenity.dev>
Merged-by: celenity <celenity@celenity.dev>
2025-09-25 06:33:58 +00:00
celenity
594372f418 IronFox v143.0
ironfox-oss/IronFox!80
____

## Changes

- [Fixed an issue that caused the browser to always attempt to install uBlock Origin, even if deselected on the onboarding](https://gitlab.com/ironfox-oss/IronFox/-/issues/180).
- [Fixed and added back the `Debug Drawer` secret setting](c6e1c4cd68).
- [Glean](https://github.com/mozilla/glean) is now built with [Tor Browser's no-op UniFFI binding generator](766e179979).
- Prevented the browser from initializing the [Nimbus *(Experimentation)* library](https://experimenter.info/getting-started/engineers/getting-started-for-android-engineers/).
- Rebased onto Application Services [`v143.0`](https://github.com/mozilla/application-services/releases/tag/v143.0).
- Rebased onto Firefox [`143.0`](https://firefox.com/firefox/android/143.0/releasenotes/).
- Rebased onto Glean [`v64.5.5`](https://github.com/mozilla/glean/releases/tag/v64.5.5).
- Removed additional unwanted/unnecessary components used for data collection and marketing.
- Removed [Glean](https://github.com/mozilla/glean) from Mozilla's [Android Components](https://searchfox.org/firefox-main/source/mobile/android/android-components/README.md).
- Removed [Glean](https://github.com/mozilla/glean) from [Application Services](https://github.com/mozilla/application-services).
- Removed the `Enable disk cache for secure webpages` UI setting toggle. Note that the `Enable disk cache` toggle is a master-switch, it disables disk cache for *both* insecure *and* secure websites, and it remains off by default.
- Removed the `Hard-fail OCSP revocation checks` UI setting toggle, as we no longer enable or use OCSP by default, in favor of CRLite *([See details](e599bd459e))*.
- Removed [Nimbus](https://experimenter.info/getting-started/engineers/getting-started-for-android-engineers/) from the [`engine-gecko` Android component](https://searchfox.org/firefox-main/source/mobile/android/android-components/components/browser/engine-gecko/README.md).
- [Stubbed `PlayStoreReviewPromptController`, and removed the now-unnecessary microG `Tasks` library](52791d3500).
- Updated the default Rust version [for **Gecko** and **Glean**](ec6ee31f83) to [`1.89.0`](https://doc.rust-lang.org/stable/releases.html#version-1890-2025-08-07).
- Updated Phoenix to [`2025.09.07.1`](https://codeberg.org/celenity/Phoenix/releases/tag/2025.09.07.1).
- [Other tweaks, refinements, and minor enhancements](https://gitlab.com/ironfox-oss/IronFox/-/merge_requests/80/diffs).

MR-author: celenity <celenity@celenity.dev>
Co-authored-by: Weblate <hosted@weblate.org>
Co-authored-by: LucasMZ <git@lucasmz.dev>
Co-authored-by: Akash Yadav <itsaky01@gmail.com>
Approved-by: Akash Yadav <itsaky01@gmail.com>
Merged-by: celenity <celenity@celenity.dev>
2025-09-17 13:46:08 +00:00
celenity
c483a9c943 feat: Create separate repo for management of external/out of band resources, like uBlock Origin assets, to allow for easier management and maintenance
Signed-off-by: celenity <celenity@celenity.dev>
2025-08-19 15:30:50 -04:00
celenity
d839b9e42e Disable Mach telemetry with an environment variable + machrc config file instead of using a patch
Signed-off-by: celenity <celenity@celenity.dev>
2025-07-26 01:00:31 -04:00