[tbb-commits] [Git][tpo/applications/tor-browser-build][main] 7 commits: Bug 40854: Upgrade to OpenSSL 3

Thu Jul 20 14:33:09 UTC 2023

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build

Commits:
85031e91 by Pier Angelo Vendrame at 2023-07-14T15:31:43+02:00
Bug 40854: Upgrade to OpenSSL 3

- - - - -
b096b32e by Pier Angelo Vendrame at 2023-07-14T15:31:44+02:00
Bug 40487: Bump Python version to 3.11.3

Debian Stretch's Python version is still too old for some of the
projects we need to build under it.
So, since we needed to review the Python options we use anyway, we
decided also to update it to a much more recent version.

- - - - -
30db5fad by Pier Angelo Vendrame at 2023-07-14T15:31:44+02:00
Bug 40410: Get rid of python2

- - - - -
34d9e212 by Pier Angelo Vendrame at 2023-07-14T15:31:44+02:00
Bug 40802: Update the wasi-sdk and remove the patch to make it reproducible.

We already uplifted the patch, and the new version includes it.

- - - - -
4df7d971 by Pier Angelo Vendrame at 2023-07-20T14:05:54+02:00
Bug 40855: Update toolchains for Firefox 115 (common part)

Toolchain updates needed for all platforms.

Bug 31588 (partially): Create cargo vendor archives locally for
cbindgen.

The Rust crates we use provide a Cargo.lock. That should be enough to
make sure they always use a certain version of a dependency.
Therefore, with 115, we could try stop hosting vendor archives on
people.tpo and build them locally.
In this commit we do that for cbindgen.
In next commit we could try to do so for also other projects.

- - - - -
028d15c6 by Pier Angelo Vendrame at 2023-07-20T14:05:56+02:00
Bug 40855: Update toolchains for Firefox 115 (Windows part)

Windows-only toolchain updates.

Also, bug 40832: Unify mingw-w64-clang 32+64 bits

The clang binaries used in the mingw-w64-clang artifacts were exactly
the same, because Clang allows you to set the target at runtime with
CLI options, contrarily to GCC, that allows you to set them at build
time.

Also, i686 and x86_64 parts that differ have different paths, so they
can live in the same mingw-w64 installation.
This allows us to save both time, and space on the out directory, since
we can safely use only one archive for both platforms.

Also, partially bug 40652: drop dependency on libssp.

Libssp is not necessary anymore for _FORTIFY_SOURCE.
So, we match llvm-mingw, and replace it with empty archives.
In the future, we should stop creating these archives, too, when the
compiler users stop including it during linking.

- - - - -
838f290f by Pier Angelo Vendrame at 2023-07-20T14:05:56+02:00
Bug 40855: Update toolchains for Firefox 115 (macOS part)

macOS-only toolchain updates.

With this update, we stop downloading the macOS SDK from people.tpo.
Instead, we download it from apple.com and we use the same scripts as
Mozilla to extract it.
We took them from Firefox source tree, and slightly adapted to our
build system/containers/needs.

Also, we try to be more similar to Mozilla in compiling LLVM runtimes.

- - - - -

30 changed files:

- Makefile
- keyring/python.gpg
- projects/browser/build
- projects/browser/config
- projects/browser/verify_allowed_addons.py
- projects/cbindgen/build
- projects/cbindgen/config
- projects/clang/build
- projects/clang/config
- + projects/clang/use-fixed-chunk-size-for-uuid.patch
- projects/cmake/config
- projects/firefox/build
- projects/firefox/config
- projects/firefox/list_toolchain_updates_checks
- projects/fxc2/config
- projects/llvm-project/config
- projects/macosx-toolchain/build
- − projects/macosx-toolchain/compiler-rt-cross-compile.patch
- − projects/macosx-toolchain/compiler-rt-no-codesign.patch
- projects/macosx-toolchain/config
- + projects/macosx-toolchain/macpkg.py
- + projects/macosx-toolchain/mozbuild_util.py
- + projects/macosx-toolchain/tools.diff
- + projects/macosx-toolchain/unpack-sdk.py
- projects/mingw-w64-clang/build
- projects/mingw-w64-clang/config
- − projects/mingw-w64-clang/libssp-Makefile
- + projects/mingw-w64-clang/mingw-composition.patch
- + projects/mingw-w64-clang/mingw-dispatchqueue.patch
- projects/mingw-w64-clang/mingw-dwrite_3.patch

The diff was not included because it is too large.

View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/693170054285bcf7ce35a1b84773958d59596b7c...838f290f5af85c649dc69e3d9c58e59ee7c1f309

-- 
View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/693170054285bcf7ce35a1b84773958d59596b7c...838f290f5af85c649dc69e3d9c58e59ee7c1f309
You're receiving this email because of your account on gitlab.torproject.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tbb-commits/attachments/20230720/a9632825/attachment-0001.htm>