Commit Graph

323 Commits

Author SHA1 Message Date
Akash Yadav
f92fb0a46c fix: invalid switch-case for variant check
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-05-18 02:15:13 +05:30
Akash Yadav
b25035e20b fix: update env var names to better reflect their purpose
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-05-18 01:59:32 +05:30
Akash Yadav
cc16f49c66 fix: disallow manual version specification
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-05-18 01:59:32 +05:30
Akash Yadav
9084915aeb fix: allow build date overrides using system env vars
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-05-18 01:59:31 +05:30
celenity
915f6aecd2 feat: update to v138.0.3
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 11:59:42 -04:00
celenity
02de41af05 fix: Minor fix to patches.yaml
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 11:58:31 -04:00
celenity
a6dd044071 feat: Include fonts at build-time (like ex. Tor Browser)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 11:46:30 -04:00
celenity
0a74a1b0ca fix: Update link for v138.0.2
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-12 18:26:12 -04:00
celenity
17f991f688 feat: update to v138.0.2 - fixes https://gitlab.com/ironfox-oss/IronFox/-/issues/98
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 19:38:20 -04:00
celenity
babfc26392 feat: Disable HLS at build-time
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 19:36:58 -04:00
celenity
5807ba450f feat: Disable PHC (Probabilistic Memory Checker - only relevant for use with the crash reporter
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 19:22:03 -04:00
celenity
46e4cdd90b feat: Enable the ability to replace the memory allocator implementation (replace-malloc)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 19:21:02 -04:00
celenity
7f9626d249 feat: Allow configuring more preferences via the about:config (+ ensure we disable android:debuggable)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 17:19:21 -04:00
celenity
f7530d12c6 fix: Limit scope of certificate pinning - unfortunately too difficult to maintain in its current state, and causing issues for users. In the future, I'd like to look into expanding this again though (and if you run/operate a website, please reach out and we'd be glad to add you!).
That being said, we still improve upon Firefox's standard certificate pinning, notably:

* We remove AffirmTrust & Entrust for Google's domains (as Google no longer uses these CAs, and in fact even plans to distrust them in Chrome entirely...)
* We pin our domains
* We pin Brave's domains (with info they provide from https://github.com/brave/brave-core/blob/master/chromium_src/net/tools/transport_security_state_generator/input_file_parsers.cc)
* We pin `aus4.mozilla.org`, `aus5.mozilla.org`, `firefox.com`, & `telemetry.mozilla.org` (which are typically only set to `test` mode, meaning they're not enforced)
* We remove the pin for `dns.google.com` (to ensure Google DNS is always available for those who use it)

Signed-off-by: celenity <celenity@celenity.dev>
2025-05-05 02:47:25 -04:00
celenity
bf4f77d50b feat: Update build arguments:
Most of these are related to debugging/development/testing (and likely already set elsewhere) or currently just default - but it's a good idea to set them explicitly and ensure we're always covered

Though there are a few notable exceptions that may be of interest:

`--disable-artifact-builds` - Ensures Mozilla's artifacts/prebuilds are disabled, to ensure we're building from source

`--disable-backgroundtasks` - Disables `background tasks` - currently only used for Mozilla's updater (which we disable) & telemetry

`--disable-negotiateauth` - Disables GSS-API/Negotiate authentication

`MOZ_LTO`, `MOZ_PGO`, & `RUSTC_OPT_LEVEL` - Enables various performance optimizations. This does unfortunately appear to cause builds to take longer - but I'm seeing a noticeable improvement in performance on my device, and I think optimizations like this are especially important for us to potentially help compensate for ex. disabling JIT, so I think the trade-off is probably worth it.

Signed-off-by: celenity <celenity@celenity.dev>
2025-05-04 02:56:44 -04:00
Akash Yadav
6bdff67cd6 fix: remove version code override
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-05-02 15:20:37 +05:30
celenity
268b5c1b91 feat: update to v138.0.1
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-01 12:25:32 -04:00
celenity
2cab330694 feat: Update prebuild.sh per Fennec F-Droid's recent changes - 7b64e3934b
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-30 04:05:22 -04:00
celenity
0c20decdc8 fix: prebuild.sh
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-29 19:35:55 -04:00
celenity
3f2cdbfe8b fix: branding.patch
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-29 18:51:00 -04:00
Akash Yadav
fb7869f6c0 fix: update to v138
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-30 00:02:37 +05:30
Akash Yadav
440329f733 fix: remove extension-recommendations.patch from patches.yaml
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-29 14:55:18 +05:30
celenity
58c3a8b606 fix: Allow building without legacy/unnecessary AutoConfig functionality
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-29 00:20:56 -04:00
celenity
67fbef34d5 fix: Update enable-secret-settings.patch for 138
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-29 00:19:52 -04:00
Akash Yadav
63d5d9d68c fix(ci): ensure ANDROID_NDK always set to expected version in CI
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 18:01:43 +05:30
Akash Yadav
d47eb764da fix: update sed command to update ConfigPlugin in android-components
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 17:47:50 +05:30
Akash Yadav
ef52e7a3f5 fix: do not join mach commands
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 14:44:37 +05:30
Akash Yadav
ec9f28e358 fix: update build-tools to v35.0.1
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 14:39:31 +05:30
Akash Yadav
4ccca48d3b fix: update cbindgen to version 0.28.0
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 14:38:39 +05:30
Akash Yadav
5d6472147d fix: set default NDK version to r28
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 14:33:23 +05:30
Akash Yadav
9718af4790 fix: broken branding.patch
Why are we manually registering the ANDROID_PACKAGE_NAME option, when it is already registered?

Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 14:31:16 +05:30
Akash Yadav
5eedbd11b4 fix: don't specify ANDROID_PACKAGE_NAME at all
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 14:07:01 +05:30
Akash Yadav
3829b6251f fix: remove ANDROID_PACKAGE_NAME definition from branding configure.sh
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 13:35:57 +05:30
Akash Yadav
b72ddd06d5 fix: add warning message for rebase_patch function
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 12:39:19 +05:30
Akash Yadav
e7ff46ac39 fix: remove duplicate definition of ANDROID_PACKAGE_NAME
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 12:37:54 +05:30
Akash Yadav
f45f5a3c69 fix: add helper function for patch rebase
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 11:56:30 +05:30
Akash Yadav
244640369a fix: update version for v138
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-28 11:56:30 +05:30
celenity
5381df4827 feat: Enable Proxy Bypass Protection
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-27 14:16:35 -04:00
celenity
d0b5e747bb feat: Ensure we enable mobile optimizations
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-27 14:13:34 -04:00
celenity
4409fe56a9 feat: Disable Netscape Autoconfig/Mission Control Desktop functionality - old, unnecessary, and not relevant to us on Android anyways
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-27 14:12:33 -04:00
celenity
0a2136332e feat: Ensure SpiderMonkey performance telemetry is disabled
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-27 14:07:04 -04:00
celenity
46ae43c488 feat: Ensure more unnecessary debugging/development features are disabled at build-time
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-27 14:06:29 -04:00
celenity
0414bafb2a feat: Ensure system extensions + system policies are disabled
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-27 14:03:58 -04:00
celenity
7db781c77d fix: Fix order of build options, remove unnecessary MOZ_DISABLE_PARENTAL_CONTROLS variable (we set --disable-parental-controls), and add ANDROID_PACKAGE_NAME variable
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-27 14:02:16 -04:00
celenity
8a9b269ff2 feat: Disable Mozilla's GeoIP/Region Service
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-27 13:56:11 -04:00
celenity
b72cab8bc4 feat: Update gecko-liberate.patch to ensure MediaDrm is disabled (and remove internal GMP sources for redundancy)
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-27 13:49:38 -04:00
celenity
b0d578afd3 fix: Branding
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-25 01:15:21 -04:00
celenity
c0deb2be3a feat: Disable the new Unified Trust Panel by default due to phishing concerns, as it unfortunately doesn't currently display the full URL if it's too long. Hopefully we can re-enable this in the future once it's ready and this issue has been resolved.
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-24 16:13:41 -04:00
celenity
dcfcfc7bb8 feat: Add toggles to enable/disable JavaScript, JIT, & WASM
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-24 04:25:17 -04:00
celenity
395605f194 feat: Disable CSP Reporting - (We already block them by default with uBlock Origin, but this disables them on the browser level to better ensure users are always expected, especially if they ex. don't use uBlock Origin or just disable it for certain sites (or globally altogether)
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-23 00:28:50 -04:00