Tor Browser 14.0

What's new in this version:

All Platforms:
- Bug tor-browser#30543: compat: make spoofed orientation reflect spoofed screen dimensions
- Bug tor-browser#30862: 10ms time precision via EXSLT date-time function
- Bug tor-browser#41328: Follow firefox ESMify for Bug 1308512
- Bug tor-browser#42054: ESR128: investigate - thorin's list
- Bug tor-browser#42220: Flip all the possible preferences to prevent any automatic download
- Bug tor-browser#42255: pdfjs.disabled used to be part of RFP until Bug 1838415; lock pref to false in stable
- Bug tor-browser#42356: Review 000-tor-browser.js and 001-base-profile.js for 128
- Bug tor-browser#42601: Check Bug 1894779: Allow font-face urls to be resource:// urls and relax CORS for resource:// URLs
- Bug tor-browser#42611: Set clipboard.imageAsFile.enabled to false
- Bug tor-browser#42646: Drop patch for tor-browser#40166
- Bug tor-browser#42683: Create script to generate issue triage csv's from bugzilla query and git scraping
- Bug tor-browser#42684: Disable network prefetch
- Bug tor-browser#42685: compat: ESR128: enable textmetrics
- Bug tor-browser#42716: Disable unwanted about:* pages
- Bug tor-browser#42730: Make RemoteSettings use only local dumps
- Bug tor-browser#42746: Extend prefers-contrast rules to include forced-colors
- Bug tor-browser#42759: CI: remove localization file names that are in neither 14.0 nor 13.5 branches
- Bug tor-browser#42814: Opt out from Firefox relay by default.
- Bug tor-browser#42830: Enable WebAudio APIs
- Bug tor-browser#42831: Remove the shopping components
- Bug tor-browser#42867: Disable contentRelevancy component
- Bug tor-browser#43011: Ship only one copy of the MIT license, like upstream.
- Bug tor-browser#43012: Mixed content: browser requests HTTPS images from onion domain accessed via HTTP
- Bug tor-browser#43013: security.mixed_content.upgrade_display_content.image is true by default
- Bug tor-browser#43054: check bounceTrackingProtection in PB mode does not persist to disk
- Bug tor-browser#43074: Pass the browser to TorDomainIsolator.newCircuitForBrowser
- Bug tor-browser#43144: Ensure non-privacy browsing also sets the GPC header
- Bug tor-browser#43163: Disable offscreen canvas until verified it is not fingerprintable
- Bug tor-browser#43170: Disable user-agent spoofing in HTTP header
- Bug tor-browser#43178: Audit fingerprinting overrides (MozBug 1834274)
- Bug tor-browser#43184: Backport Bugzilla 1922294: RFP: fixup square spoofed orientation
- Bug tor-browser#43197: Disable automatic exception for HTTPS-First

Windows + macOS + Linux:
- Updated Firefox to 128.3.0esr
- Updated NoScript to 11.4.42
- Bug tor-browser#40147: Re-enable Picture-in-Picture mode
- Bug tor-browser#41309: Re-enable screenshots component
- Bug tor-browser#41811: Primary buttons that result in a connection attempt should be purple
- Bug tor-browser#41817: Add more color aliases that take dark mode into account
- Bug tor-browser#41820: Downloads warning styling improvements (use moz-message-bar)
- Bug tor-browser#42070: Backport Bugzilla 1834307 and hide smooth-scroll UX
- Bug tor-browser#42212: Fluent migration: onion services
- Bug tor-browser#42362: "New window" missing from File menu
- Bug tor-browser#42441: Evaluate RR version-by-RR version rebases instead of ESR-to-ESR
- Bug tor-browser#42488: ESR 128: Remove role="code" from tor circuit panel
- Bug tor-browser#42603: Remove safebrowsing URLs
- Bug tor-browser#42612: Re-implement moz-toggle customizations for ESR 128
- Bug tor-browser#42617: Restore the HTML form on DDG when using safest in 128
- Bug tor-browser#42629: Tweak isOnNewTabPage patch
- Bug tor-browser#42630: Review LaterRun in 128
- Bug tor-browser#42640: Disable Firefox Flame button due to unknown interactions with New Identity
- Bug tor-browser#42641: Move from panel-footer class to moz-button-group
- Bug tor-browser#42643: downloads panel separator has mismatched margin
- Bug tor-browser#42644: toolbar rules in panelUI-shared.css are unneccessary
- Bug tor-browser#42647: "Switching to a new device" regressed on 128
- Bug tor-browser#42653: The Neterror page has a checkbox to report iframe origin errors to TPO
- Bug tor-browser#42662: Use data-hidden-from-search for hiding the firefox connection settings
- Bug tor-browser#42663: Tor Browser "Connection" settings missing a tooltip
- Bug tor-browser#42665: Drop "Learn More" spacing
- Bug tor-browser#42667: Add description-deemphasized class to our additions to about:preferences
- Bug tor-browser#42679: Use a more robust approach to hide the "tracking protection" urlbar button
- Bug tor-browser#42687: Disable Privacy-Preserving Attribution
- Bug tor-browser#42695: Use --arrowpanel- variables for tor circuit panel spacing
- Bug tor-browser#42698: Bridge card background contrast is low for bridge-moji
- Bug tor-browser#42699: Drop level="top" attribute from panels
- Bug tor-browser#42700: Remove !nodes condition from gTorCircuitPanel._updateCurrentBrowser
- Bug tor-browser#42704: Drop the badged="true" attribute from security level button
- Bug tor-browser#42705: Update our preferences to account for new line height
- Bug tor-browser#42713: Some --in-content CSS variables were renamed/removed
- Bug tor-browser#42718: Remove the firefox-view button from UI, even when always-on private-browsing mode is disabled
- Bug tor-browser#42735: Disable recent search suggestions
- Bug tor-browser#42740: Stop trying to hide "Restore previous session"
- Bug tor-browser#42742: Inconsistent use of "New private window" vs "New window"
- Bug tor-browser#42743: Invalid onion sites are shown as secure in the page info window
- Bug tor-browser#42744: Light theme override for "about:tor" is inherited by chrome error pages.
- Bug tor-browser#42745: Remove some residuals from update scripts
- Bug tor-browser#42764: Unconditionally disable find-bar transition animation
- Bug tor-browser#42777: Remove 'Website Privacy Preferences' and ensure sensible default prefs
- Bug tor-browser#42803: Lost focus styling for built-in bridges radio options
- Bug tor-browser#42806: Use the lh CSS unit
- Bug tor-browser#42872: Disable translations until audited and solved the UX problems
- Bug tor-browser#43015: Missing region-name-skr fluent entry when fetching TorConnect country names
- Bug tor-browser#43067: Use html:link rather than xml-stylesheet in our dialogs
- Bug tor-browser#43071: Make sure "tor-button" elements that are also "primary" still use the tor colors
- Bug tor-browser#43072: moz-message-bar does not get announced on Orca screen-reader
- Bug tor-browser#43075: Should we drop link spacing in about:tor
- Bug tor-browser#43081: Remove hard-coded CSS line-height
- Bug tor-browser#43082: Search engine icon is not shown while typing in the address bar
- Bug tor-browser#43083: Backport fix for Mozilla 1436462
- Bug tor-browser#43087: Onion pattern on about:torconnect needs a dark theme asset
- Bug tor-browser#43103: Verify whether an update is unsupported before choosing one
- Bug tor-browser#43104: Local files and extensions can't be loaded in new windows before bootstrap
- Bug tor-browser#43105: Migrating Disconnect is not needed anymore
- Bug tor-browser#43109: Remove mention of Firefox Relay from settings
- Bug tor-browser#43115: Height of search bar has collapsed on about:tor
- Bug tor-browser#43117: Hide 'Always underline links' option
- Bug tor-browser#43118: hide CFR
- Bug tor-browser#43131: Reduce layout jank when loading about:tor
- Bug tor-browser#43134: Backport Bugzilla 1436226 Hardcode VP8/VP9
- Bug tor-browser#43164: Prevent search-bar from being auto-hidden when not used for awhile
- Bug tor-browser#43169: compat: align userAgent in navigator + HTTP Header
- Bug tor-browser#43174: Issue with custom home page on local filesystem
- Bug tor-browser#43209: UI freezes when clipboard is empty after screen lock
- Bug tor-browser#43217: Fullscreen videos have rounded letterboxing corners
- Bug tor-browser#43218: Switch to browser.reload, since Browser:Reload signal was dropped upstream
- Bug tor-browser-build#41248: Check and update bundled font versions

Windows + macOS:
- Bug tor-browser#43021: Revert the OS deprecation notification introduced in #42347

macOS:
- Bug tor-browser#42467: Make OS HTTP User-Agent OS spoofing configurable by pref

Windows:
- Bug tor-browser#43051: windows: remove UI for "open Tor Browser automatically when computer starts"

macOS:
- Bug tor-browser#42494: mac: add Arial Black and Arial Narrow to allowlist

Build System:
- Updated Go to 1.22.8
- Bug tor-browser#42722: clang-format and localization linters are not running
- Bug tor-browser#42799: Do not run lint pipelines on new tag
- Bug tor-browser#43014: Add purgecaches to the dev build
- Bug tor-browser#43156: Update translation CI to account for the extended 13.5 release
- Bug tor-browser#43157: Move tb-dev to base-browser
- Bug tor-browser#43181: Run translation CI if there is a change in a string.xml file
- Bug tor-browser-build#41013: Add a README to each project
- Bug tor-browser-build#41096: Set SOURCE_DATE_EPOCH in the default env variables
- Bug tor-browser-build#41155: Update toolchains for ESR128
- Bug tor-browser-build#41156: Split the Rust configuration options
- Bug tor-browser-build#41180: Some files do not need to be copied when building tor-expert-bundle
- Bug tor-browser-build#41188: Upgrade binutils to 2.41
- Bug tor-browser-build#41189: Add matzfan to list of downstream projects in alpha release-prep template
- Bug tor-browser-build#41195: Update Go to 1.22
- Bug tor-browser-build#41198: Update release-prep issue template to include notifiying anti-censorship team of package name changes for GetTor distributor
- Bug tor-browser-build#41203: Tor Blog generation script uses the wrong url scheme for alpha releases
- Bug tor-browser-build#41236: Remove binutils when not needed
- Bug tor-browser-build#41273: relprep.py: bump Firefox and GV to a (yet) non-existing tag when the last one does not match HEAD
- Bug tor-browser-build#41274: Improve fetch_changelogs.py for major releases
- Bug tor-browser-bundle-testsuite#40078: Update tools/tb-build-06-start-nightly-build after tor-browser-build#40829
- Windows + macOS + Linux:
- Bug tor-browser#42668: Drop torconnect rule in eslint-plugin-mozilla
- Bug tor-browser-build#41247: Adapt tools/update-responses/update_responses to support multiple versions in the same xml files
- Bug tor-browser-build#41256: tools/signing/upload-update_responses-to-staticiforme should regenerate update-responses when it already exists
- Bug tor-browser-build#41259: Don't try to generate incrementals for versions which don't set incremental_from
- Bug tor-browser-build#41270: Add updater rewriterules to make 13.5.7 a watershed

Windows + macOS:
- Bug tor-browser-build#41197: Modify update-responses to prevent upgrades on unsupported Windows and macOS versions

Windows:
- Bug tor-browser-build#29318: Drop mingw-w64/gcc toolchain
- Bug tor-browser-build#29320: Use mingw-w64/clang toolchain to build Rust
- Bug tor-browser-build#41185: Drop Windows 7 support for 14.0 from build tools
- Bug tor-browser-build#41201: Bump the Windows version checked by the installer

macOS:
- Bug tor-browser-build#41267: Go dropping support for macOS