CVS commit: pkgsrc/www/firefox

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Tue May 13 20:56:25 UTC 2025

Modified Files:
        pkgsrc/www/firefox: Makefile PLIST distinfo
        pkgsrc/www/firefox/files: node-wrapper.sh

Log Message:
www/firefox: Update to 130.0.3

* F11 fullscreen causes crash.
* WebRTC webcam detection does not work *at least for me).

Changelog:
138.0.3:
Fixed

  * Fixed a crash that could occur when viewing websites that use WebGL. (Bug
    1961191)

  * Fixed an issue where the browser could repeatedly crash when certain SVG
    effects (like blur or drop shadow) were applied to very small areas. (Bug
    1924241)

  * On Linux, fixed an issue where video playback would appear washed-out on
    Wayland when HDR support was unavailable. (Bug 1961610)

  * Fixed an issue where the "Match Case" shortcut Alt+C in the find-in-page
    toolbar did not toggle the checkbox as expected. (Bug 1952611)

138.0.1:
Fixed

  * Fixed an issue which caused a blank page to be shown for Home and New Tab
    pages for some users. (Bug 1963537)

  * Added a workaround for a bug in outlook.office.com/outlook.live.com where
    attachment filenames are incorrectly prefixed with UTF-8 when saved. (Bug
    1961710)

138.0:
New

  * Profile management helps protect your privacy and stay focused by
    separating your online life into distinct profiles -- for work, school,
    vacation planning, or whatever you choose. You can now name your profiles
    and customize them with avatars and color themes for easy recognition, then
    quickly switch between them -- all while keeping bookmarks, tabs, and
    browsing history completely separate.

  * Users in the United States can now trigger weather suggestions in the
    address bar! Simply type a weather-related term or a city name, and view
    the result directly in the address bar dropdown.

  * Tab Groups, a new way to organize and take control of your tabs, is now
    available to almost all users worldwide. You can create a group by dragging
    one tab onto another, pausing, then dropping it. You can also now
    reposition a tab group on the tab bar by dragging it.

  * Firefox on Windows 11 now uses acrylic-style menus for popup windows, which
    better match the operating system's aesthetic.

  * You can now copy links from background tabs using the tabstrip context menu
    on MacOS and Linux.

Fixed

  * Various security fixes.

Changed

  * Improved the address and credit card autofill experience to better handle
    forms that update dynamically as users input information. Autofill now
    correctly fills newly revealed fields??such as those shown after selecting
    a country.

  * Rededicated previous color settings to Contrast Control settings. (Learn
    more)

Security fixes:
Mozilla Foundation Security Advisory 2025-28
#CVE-2025-2817: Privilege escalation in Firefox Updater
#CVE-2025-4082: WebGL shader attribute memory corruption in Firefox for macOS
#CVE-2025-4083: Process isolation bypass using "javascript:" URI links in
 cross-origin frames
#CVE-2025-4085: Potential information leakage and privilege escalation in
 UITour actor
#CVE-2025-4086: Specially crafted filename could be used to obscure download
 type
#CVE-2025-4087: Unsafe attribute access during XPath parsing
#CVE-2025-4088: Cross-site request forgery via storage access API redirects
#CVE-2025-4089: Potential local code execution in "copy as cURL" command
#CVE-2025-4090: Leaked library paths in Firefox for Android
#CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138,
 Firefox ESR 128.10, and Thunderbird 128.10
#CVE-2025-4092: Memory safety bugs fixed in Firefox 138 and Thunderbird 138


To generate a diff of this commit:
cvs rdiff -u -r1.633 -r1.634 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.189 -r1.190 pkgsrc/www/firefox/PLIST
cvs rdiff -u -r1.555 -r1.556 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.28 -r1.29 pkgsrc/www/firefox/files/node-wrapper.sh

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.633 pkgsrc/www/firefox/Makefile:1.634
--- pkgsrc/www/firefox/Makefile:1.633   Fri May  9 19:37:15 2025
+++ pkgsrc/www/firefox/Makefile Tue May 13 20:56:25 2025
@@ -1,18 +1,17 @@
-# $NetBSD: Makefile,v 1.633 2025/05/09 19:37:15 wiz Exp $
+# $NetBSD: Makefile,v 1.634 2025/05/13 20:56:25 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            137.0
-MOZ_BRANCH_MINOR=      .2
+MOZ_BRANCH=            138.0
+MOZ_BRANCH_MINOR=      .3
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
-PKGREVISION=   1
 CATEGORIES=    www
 MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
 MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/}
 EXTRACT_SUFX=  .tar.xz
 
-NODEJSKIT=             nodejs-output-137.0.tgz
+NODEJSKIT=             nodejs-output-138.0.1.tgz
 DISTFILES=             ${DEFAULT_DISTFILES} ${NODEJSKIT}
 SITES.${NODEJSKIT}=    ${MASTER_SITE_LOCAL}
 

Index: pkgsrc/www/firefox/PLIST
diff -u pkgsrc/www/firefox/PLIST:1.189 pkgsrc/www/firefox/PLIST:1.190
--- pkgsrc/www/firefox/PLIST:1.189      Wed Apr 30 03:17:59 2025
+++ pkgsrc/www/firefox/PLIST    Tue May 13 20:56:25 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.189 2025/04/30 03:17:59 ryoon Exp $
+@comment $NetBSD: PLIST,v 1.190 2025/05/13 20:56:25 ryoon Exp $
 bin/firefox
 lib/firefox/application.ini
 lib/firefox/browser/chrome/icons/default/default128.png
@@ -6,11 +6,6 @@ lib/firefox/browser/chrome/icons/default
 lib/firefox/browser/chrome/icons/default/default32.png
 lib/firefox/browser/chrome/icons/default/default48.png
 lib/firefox/browser/chrome/icons/default/default64.png
-lib/firefox/browser/features/formautofill%mozilla.org.xpi@localhost
-lib/firefox/browser/features/pictureinpicture%mozilla.org.xpi@localhost
-lib/firefox/browser/features/screenshots%mozilla.org.xpi@localhost
-lib/firefox/browser/features/webcompat-reporter%mozilla.org.xpi@localhost
-lib/firefox/browser/features/webcompat%mozilla.org.xpi@localhost
 lib/firefox/browser/omni.ja
 lib/firefox/defaults/pref/channel-prefs.js
 lib/firefox/dependentlibs.list

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.555 pkgsrc/www/firefox/distinfo:1.556
--- pkgsrc/www/firefox/distinfo:1.555   Wed Apr 30 03:17:59 2025
+++ pkgsrc/www/firefox/distinfo Tue May 13 20:56:25 2025
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.555 2025/04/30 03:17:59 ryoon Exp $
+$NetBSD: distinfo,v 1.556 2025/05/13 20:56:25 ryoon Exp $
 
-BLAKE2s (firefox-137.0.2.source.tar.xz) = c7d6f34a783453383d45c0afca52ec41e87d4d24504bc3e33c8f1c44358e6b3b
-SHA512 (firefox-137.0.2.source.tar.xz) = 82140c4325233ea2e2f579088cebb98c0e8db8848b4018cff95d4ed42bf847049ed6520fc051d930ee267a5acb008908170825d381589da0d109ca04a61e1c24
-Size (firefox-137.0.2.source.tar.xz) = 599825260 bytes
-BLAKE2s (nodejs-output-137.0.tgz) = 75c811b9883a91702477ca4e339c7f8af6419390d48d683dbd460a8033390987
-SHA512 (nodejs-output-137.0.tgz) = 2014cc019fcd60f6898ab0db9a43142285f494c4f763c82cb53bcd62dd4a72dfe970cb1df03c3bbd6a4a2f0228e7fbb323483b50b6598a2dec7a1e6899b3a7dd
-Size (nodejs-output-137.0.tgz) = 254823 bytes
+BLAKE2s (firefox-138.0.3.source.tar.xz) = 87628486ce2ceba9996ec686e329a047fde2a0dea7f22db5e1f9e674c664b849
+SHA512 (firefox-138.0.3.source.tar.xz) = 0f1c8ee05bec465b55429c18d788856574c5b2e31d911f15f76d31c00de84d8b8681961799c4101cd1540bd228afd201a4b59fd7c9a88918695040965b9dc0f1
+Size (firefox-138.0.3.source.tar.xz) = 632959048 bytes
+BLAKE2s (nodejs-output-138.0.1.tgz) = cc0d5b7303d19718144296e8d388c375906c3716d99aa9a05e656d03ecfc1bc6
+SHA512 (nodejs-output-138.0.1.tgz) = 468966859f12b9648c13b7e552db242f02978ff8ca56a8ba6534ef444778ef4434c33d0ac7c809526364ee2d895abd1dcc839f04c4e5c5384f1a9045e81e8b4a
+Size (nodejs-output-138.0.1.tgz) = 257148 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = bc719edef37d18655ba79b030270438ee166fdaf
 SHA1 (patch-build_moz.configure_init.configure) = 65deb3c233df0aab81eb1fca05d708e5a4ed169a
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678

Index: pkgsrc/www/firefox/files/node-wrapper.sh
diff -u pkgsrc/www/firefox/files/node-wrapper.sh:1.28 pkgsrc/www/firefox/files/node-wrapper.sh:1.29
--- pkgsrc/www/firefox/files/node-wrapper.sh:1.28       Wed Apr 30 03:17:59 2025
+++ pkgsrc/www/firefox/files/node-wrapper.sh    Tue May 13 20:56:25 2025
@@ -1,6 +1,6 @@
 #! /bin/sh
 
-VERS=v23.10.0
+VERS=v23.11.0
 
 if [ "$1" = "-v" ] || [ "$1" = "--version" ]; then
        printf "${VERS}\n"