Changes between Version 208 and Version 209 of firefox

Timestamp:

09/30/2024 04:29:04 PM (6 months ago)

Author:

ken@…

Comment:

--

firefox

@@ -19 +19 @@
 Newer versions tended to need newer versions of rust, but this has caused problems with other packages which use rust. In particular, thunderbird releases are based on the firefox esr (extended support releases) code and tended to have code which did not build with the latest version of rust. Nowadays, seamonkey might also be in that situation.
 
-There are only a few packages in BLFS which use rust and the editors aim to ensure that all the versions in the book can be built with the same version of rust.
+There were only a few packages in BLFS which use rust and the editors aim to ensure that all the versions in the book can be built with the same version of rust.
 
 As a result, after firefox-69 the book moved to the esr versions of firefox which for 68esr was technically a downgrade ''(see details about profiles above)'', but contained all the relevant security fixes. 
@@ -25 +25 @@
 '''You should always use the latest release, either the latest esr or the latest mainline version (or the latest beta for bleeding edge)'''. And you should remember to update your ca-certificates when building a new version of firefox. 
 
+== Identifying MINIMUM dependencies ==
+
+In the interests of avoiding wasting electricity by unnecessarily rebuilding packages which were adequate, I have reviewed changes in newer versions of firefox. As noted below, I cannot keep up with BLFS-dev any more. My notes on what to look at (up to date for firefox-131) and my 'slimfox' script to reduce the diffs so that irrelevant items are not in the 'slim' diff are at [https://www.linuxfromscratch.org/~ken/mozilla-notes/].
+
 == Dependencies for the 115esr series ==
 
-**You should aim to move to the firefox-128esr series before the 115esr series goes out of support in September 2024. If you are on a current BLFS development system with ffmpeg-7 or greater you should move to 128esr ASAP because mp4 playback in 115esr was broken with system ffmpeg-7.**
-
-cbindgen >= 0.24.3
-
-icu >= 73.1
-
-The shipped libpng is now 1.6.39, using system libpng-1.6.43 with the apng patch works.
-
-libvpx >= v1.13.0 (shipped version has various changes, seems to be ok with system libvpx-1.14.1.
-
-libwebp : An upstream patch was cherry-picked for ff112 (and ff102.10.0) to fix builds with the shipped libwebp.Use system libwebp-1.4.0
- 
-nss >= 3.90.0 (for 3.90 use the patch for haswell and earlier machines, fixed in 3.91). Using current nss (and current nspr if that needs to be updated) is recommended.
-
-nspr >= 4.35
-
-rustc >= 1.66.0
-
-''If you need to build rustc-1.70.0, that requires LLVM >= 14. LLVM-16.0.5 builds ok with (at least) gcc-11.2.0 from BLFS-11.1.''
-
-The minimum version of node-js has now been updated to v12.22.1, that old out of support version is apparently still used on old debian which might be what some of the build-bots at mozilla use. You should use a supported version of node-js, updated as necessary to fix its vulnerabilities.
-
-**firefox-115esr reaches End of Life at the beginning of October **
-
+** There will be no further firefox-115esr releases after 115.16.0esr. As with all graphical browsers, keeping up to date will reduce the attack surface. Therefore you should move to firefox-130.0esr or later as soon as possible.**
 
 == Dependencies for 128.0esr series (latest extended support series) ==
@@ -77 +58 @@
 Note that point releases of the current stable versions are not specifically monitored, if you use the current stable version you should check for updates and their release note and any security fixes.
 
-=== Firefox-130 series ===
+=== Firefox-131 series ===
 
 cbindgen >= 0.26.0
@@ -83 +64 @@
 shipped libvpx is now 1.14.1, system 1.13 or 1.14.0 should be compatible.
 
-nss >= 3.103.0
+nss >= 3.104.0
 
 rust >= 1.76.0, the workaround for rustc => 1.78.0 to remove code only useful for ARM which fails to compile is probably still needed (removing does no harm).
@@ -97 +78 @@
 For the moment, g++ can be used if you pass --without-wasm-sandboxed-libraries but the changes in gcc-12 mean that the book has moved to using clang++, still without wasm.
 
-== Dependencies for 131.0beta ==
+== Dependencies for 132.0beta ==
 
- As is normal, nss has been bumped - to 3.104.0
+ Details may follow. At a mimimum, the nss version is always bumped for a new series, sp probably 3.105.0 for firefox-131beta.
 
-  Please be advised that I (ken) no-longer normally test this while EARLY_BETA_OR_EARLIER is defined, because of apparent opt-ins for various things. That define used to be unset in b9 but it is now unset in b7.
+ Please be advised that I (ken) no-longer normally test this while EARLY_BETA_OR_EARLIER is defined, because of apparent opt-ins for various things. That define used to be unset in b9 but it is now unset in b7.
+
+ Similarly, I cannot keep up with the churn in BLFS-dev, so fixes to build either latest esr or latest stable or beta are outwith my abilities.  
+