Tor Browser 8.0

What's new in this version:

All platforms:
- Update Firefox to 60.2.0esr
- Update Tor to 0.3.3.9
- Update OpenSSL to 1.0.2p
- Update Libevent to 2.1.8
- Update Torbutton to 2.0.6
- Update HTTPS Everywhere to 2018.8.22
- Update NoScript to 10.1.9.1
- Update obfs4proxy to v0.0.7 (bug 25356)
- Enable a limited UITour for user onboarding
- New user onboarding
- New feature onboarding
- The onboarding bubble is not always displayed
- Fix first-party isolation for UI tour
- Update about:tbupdate to new (about:tor) layout
- Enable TLS session identifiers with first-party isolation
- Prevent speculative connects that violate first-party isolation
- Make canvas permission prompt respect first-party isolation
- Use en-US strings in HTML forms if locale is spoofed to english
- HTTP .onion sites inherit previous page's certificate information
- .onion images are not displayed
- Move 'New Identity', 'New Circuit' to File, hamburger menus
- Backport Mozilla's bug 1473247
- Backport Mozilla's bug 1470156
- Clean up toolbar for ESR60-based Tor Browser
- Avoid Firefox icons in ESR60
- Load our preferences that modify extensions (fixup)
- Update Tor Browser blog post URLs
- Fix broken MAR file generation
- Remove spoofed locale implementation
- Rebase Tor Browser patches for ESR60
- Show security state of .onions
- Load our preferences that modify extensions
- Isolate HPKP and HSTS to URL bar domain
- Spoof en-US for date picker
- Disable WebVR for now until it is properly audited
- Disable wasm for now until it is properly audited
- Disable Web Authentication API until it is properly audited
- Enable Reader View mode again
- Don't expose navigator.mozAddonManager to websites
- Update about:tbupdate handling for e10s
- Fix potentially confusing "restart to update" message
- Purge startup cache if Tor Browser version changed
- Reduce delay for showing update prompt to 1 hour
- Add potential AltSvc support
- Fix broken hardware acceleration on Windows and enable it
- Add new MAR signing keys
- Revert bug 18619 (we are not disabling IndexedDB any longer)
- Rip out optimistic data socks handshake variant (#3875)
- Hide Firefox Sync
- Disable updater telemetry
- Make sure Torbutton and Tor Launcher are not treated as legacy extensions
- Disable randomised Firefox HTTP cache decay user tests
- Firefox downgrades VP9 videos to VP8 for some users
- Include git hash in tor --version
- Preferences clean-up
- Migrate general.useragent.locale to intl.locale.requested
- Make Tor Browser available in ca, ga, id, is, nb, da, he, sv, and zh-TW
- Include Hebrew translation into Tor Browser
- Add danish (da) translation

Update Tor Launcher to 0.2.16.3:
- Moat integration (fetch bridges for the user)
- Update Tor Launcher to make it compatible with Firefox 60 ESR
- Help button icons missing
- Improve the proxy help text
- Remove sv-SE from tracking for releases
- Add locales ca, ga, id, is, nb, da, he, sv, and zh-TW
- Translations update

Update meek to 0.31:
- Make meek extension compatible with ESR 60

Enable HTTP2 and AltSvc:
- Tor Browser stalls while loading Facebook login page

OS X:
- After loading file:// URLs clicking on links is broken on OS X
- Tor Browser only renders HTML for local pages via file://
- Tor Browser does not run extension scripts if loaded via about:debugging
- Don't open AF_INET/AF_INET6 sockets when AF_LOCAL is configured

BUILD SYSTEM:
All Platforms:
- Use old MAR format for first ESR60-based stable
- RBM build fails with runc version 1.0.1
- Use GitHub repository for STIX
- Add --verbose to the ./mach build flag for firefox
- Don't package up Tor Browser in the `mach package` step
- Add support for xz compression in mar files
- Clean up

OS X:
- Update macOS toolchain for ESR 60
- Build our own cctools for macOS cross-compilation
- Update macOS SDK for Tor Browser builds to 10.11
- Clean up our mozconfig-osx-x86_64 file
- Use new cctools in our macosx-toolchain project
- Get a rust cross-compiler for macOS
- Disable Stylo to make macOS build reproducible
- Fix .app directory name in tools/dmg2mar