CVS commit: pkgsrc/www/firefox

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sat Jan 21 01:14:07 UTC 2023

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo mozilla-common.mk

Log Message:
firefox: Update to 109.0

Changelog:
109.0

New
  * Manifest Version 3 (MV3) extension support is now enabled by default (MV2
    remains enabled/supported). This major update also ushers an exciting user
    interface change in the form of the new extensions button.

  * The Arbitrary Code Guard exploit protection has been enabled in the media
    playback utility processes, improving security for Windows users.

  * The native HTML date picker for date and datetime inputs can now be used
    with a keyboard alone, improving its accessibility for screen reader users.
    Users with limited mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.

  * Firefox builds in the Spanish from Spain (es-ES) and Spanish from Argentina
    (es-AR) locales now come with a built-in dictionary for the Firefox
    spellchecker.

Fixed
  * Various security fixes.

Changed
  * Effective on January 16, Colorways will no longer be in Firefox. Users will
    still be able to access saved and active Colorways from the Add-ons and
    themes menu option.

  * On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls the page
    instead of zooming. This avoids accidental zooming and matches the behavior
    of other web browsers on macOS.

  * The Recently Closed section of Firefox View now equips users with the
    ability to manually close/remove url links from the list.

  * The empty state messages and graphic components surfaced in Firefox View
    for the Tab Pickup and Recently Closed sections have been updated for an
    improved user experience.

Developer
  * The ability to automatically break when code on the page hits an events
    handler has been available since Firefox 69. Firefox 109 now adds new
    support for the scrollend event. To use this new event breakpoint, open the
    JS debugger and find and expand the Event Listener Breakpoints section in
    the right hand column (learn more).

Web Platform
  * The scrollend event is now enabled by default. The event is fired when a
    scroll has completed.

  * Firefox now permanently partitions Storage in third-party contexts
    independent of Storage Access to align with other browsers and provide
    better Web compatibility.

Security fixes:
#CVE-2023-23597: Logic bug in process allocation allowed to read arbitrary
 files
#CVE-2023-23598: Arbitrary file read from GTK drag and drop on Linux
#CVE-2023-23599: Malicious command could be hidden in devtools output on
 Windows
#CVE-2023-23600: Notification permissions persisted between Normal and Private
 Browsing on Android
#CVE-2023-23601: URL being dragged from cross-origin iframe into same tab
 triggers navigation
#CVE-2023-23602: Content Security Policy wasn't being correctly applied to
 WebSockets in WebWorkers
#CVE-2023-23603: Calls to <code>console.log</code> allowed bypasing Content
 Security Policy via format directive
#CVE-2023-23604: Creation of duplicate <code>SystemPrincipal</code> from less
 secure contexts
#CVE-2023-23605: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7
#CVE-2023-23606: Memory safety bugs fixed in Firefox 109


To generate a diff of this commit:
cvs rdiff -u -r1.544 -r1.545 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.487 -r1.488 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.247 -r1.248 pkgsrc/www/firefox/mozilla-common.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.544 pkgsrc/www/firefox/Makefile:1.545
--- pkgsrc/www/firefox/Makefile:1.544   Sat Jan  7 23:36:39 2023
+++ pkgsrc/www/firefox/Makefile Sat Jan 21 01:14:07 2023
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.544 2023/01/07 23:36:39 ryoon Exp $
+# $NetBSD: Makefile,v 1.545 2023/01/21 01:14:07 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            108.0
-MOZ_BRANCH_MINOR=      .2
+MOZ_BRANCH=            109.0
+MOZ_BRANCH_MINOR=      
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
@@ -106,15 +106,6 @@ MOZILLA_NAME=              Browser
 MOZILLA_BRANDING=      unofficial
 .endif
 
-.if ${MACHINE_ARCH} == "i386"
-SUBST_CLASSES+=                bindgen
-SUBST_STAGE.bindgen=   pre-configure
-SUBST_MESSAGE.bindgen= Adjust funcation names for i386 architecture
-SUBST_FILES.bindgen+=  toolkit/components/uniffi-js/UniFFIGeneratedScaffolding.cpp
-SUBST_FILES.bindgen+=  toolkit/components/uniffi-bindgen-gecko-js/components/generated/RustTabs.jsm
-SUBST_SED.bindgen=     -e 's,tabs_4d51_,tabs_1c79_,g'
-.endif
-
 pre-configure:
 # As of 106.0, .in template files are not patched.
 #      cd ${WRKSRC} && autoconf

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.487 pkgsrc/www/firefox/distinfo:1.488
--- pkgsrc/www/firefox/distinfo:1.487   Sat Jan  7 23:36:39 2023
+++ pkgsrc/www/firefox/distinfo Sat Jan 21 01:14:07 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.487 2023/01/07 23:36:39 ryoon Exp $
+$NetBSD: distinfo,v 1.488 2023/01/21 01:14:07 ryoon Exp $
 
-BLAKE2s (firefox-108.0.2.source.tar.xz) = 1c8222cfd83d37aae10efb6d5957cb404d30476cd7f34bcf17a2b53a798ebf56
-SHA512 (firefox-108.0.2.source.tar.xz) = f856ef034fa4a526e19968aed092c9ee99e124d2d271ec1c1bbd091d9a03e23293d69c7a9ae17c43258cde7e73c294534b471e36441e576377854f607c9bfa3a
-Size (firefox-108.0.2.source.tar.xz) = 509638740 bytes
+BLAKE2s (firefox-109.0.source.tar.xz) = ac0452efd5ea92e5de2682815e0634ca8b89b5995b0ac6e81f20849dd80575ef
+SHA512 (firefox-109.0.source.tar.xz) = 9e2b6e20353e414da3d2eb9dcd3d77757664a98a4438a8e84f19a1c7c203e40136b08bf96a458fac05ddc627347217d32f1f6337980c5ca918874993657a58e7
+Size (firefox-109.0.source.tar.xz) = 493231972 bytes
 BLAKE2s (nodejs-output-95.0.tgz) = c44b37d3605524a49157002f01c29f568f04194b0e635bc312de7ffdeb9a74c9
 SHA512 (nodejs-output-95.0.tgz) = 2faf326f4e100b66f8597c365cc2eb5d0eee26aae92a7e2446891f2178041aa71ba16eae37000acacd43a657025ec11c18db73b112f5c49cc21cdb882da6d798
 Size (nodejs-output-95.0.tgz) = 200627 bytes

Index: pkgsrc/www/firefox/mozilla-common.mk
diff -u pkgsrc/www/firefox/mozilla-common.mk:1.247 pkgsrc/www/firefox/mozilla-common.mk:1.248
--- pkgsrc/www/firefox/mozilla-common.mk:1.247  Sun Jan  8 03:05:50 2023
+++ pkgsrc/www/firefox/mozilla-common.mk        Sat Jan 21 01:14:07 2023
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.247 2023/01/08 03:05:50 gutteridge Exp $
+# $NetBSD: mozilla-common.mk,v 1.248 2023/01/21 01:14:07 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -203,7 +203,7 @@ BUILDLINK_API_DEPENDS.libevent+=    libeven
 BUILDLINK_API_DEPENDS.nspr+=   nspr>=4.34
 .include "../../devel/nspr/buildlink3.mk"
 .include "../../textproc/icu/buildlink3.mk"
-BUILDLINK_API_DEPENDS.nss+=    nss>=3.85
+BUILDLINK_API_DEPENDS.nss+=    nss>=3.86
 .include "../../devel/nss/buildlink3.mk"
 .include "../../devel/zlib/buildlink3.mk"
 #.include "../../mk/jpeg.buildlink3.mk"