x Restore asynchronous policy fetching for about:blank
(tentative fix for #598)


x More robust patch propagation (tor-browser#45371)
- Credit: Warisjeet Singh (sin99xx)
x [nscl] Account for tor.onion aliases (tor-browser#40458,
tor-browser#45368) - Credit: Warisjeet Singh (sin99xx)
x [nscl][test] Fix policy tests

x [nscl] Reduce disruption of already loaded pages creating
MutationObserver objects after an extension update
x [XSS] Updated IC_EVENT_PATTERN
x [UX] Fix regressions from container support (#579, #558)
x [Chromium] Prevent main world leaks
x Do not try to adopt document nodes (issue #438)

x Fix placeholders regression (thanks barbaz/laniakea64 for
patch)
x Automate AMO submission of stable releases
x [L10n] Updated bn, fi from Localization Lab

x [nscl] Minor fixes
x [nscl] Better xray argument handling and reduced console
noise
x [nscl] Updated with several xray-related fixes
x [L10n] Updated fi from Localization Lab

x [nscl] Fix xray issues with MutationObserver patching (#572)

x Earlier DOM freezing on file:// URLs (fixes
tor-browser#45089)
x Fix sandboxed blob: frames permissions inheritance
x Fix data: and blob: request not properly garbage collected
x [L10n] Updated fi from Localization Lab
x [nscl] Higher fidelity naming for patched properties
x [nscl] Work-around for Gecko MutationObserver recursion
(thanks Libor Polčák for reporting)

v 13.6.25

x [nscl] Improved worker/worklet patching web compatibility
(thanks Juho Forsén for reports)

v 13.6.24

x [nscl] Stop using XHR for worklet retrieval
x [nscl] Avoid potential races between DocStartInjection
start and end events

v 13.6.23

x [nscl] Improve DocStartInjection transition management

v 13.6.20

x [Android] [UX] Fix closing site permissions UI reverts to
the wrong tab
x new translations from weblate (#561)
x Improved policy fetching
x Avoid contentScript.register() (see JShelter issue #175)
x [A11y] Honor prefers-reduce-motion (issue #560)
x [XSS] Updated IC_EVENT_PATTERN
x [L10n] Updated ko from Localization Lab
x [l10n] Created empty ko localization
x [XSS] Updated IC_EVENT_PATTERN
x [UX][Android] Prevent site label truncation (issue #503)
x Reduce page layout disruption from placeholders

v 13.6.19

x [UX][Android] Auto-size gesture label
x [UX][Android] Adapt automatically to bigger font sizes
(issue #503)
x [L10n] Updated it from Localization Lab
x [UX] Fix wss: URLs being styled as unsafe (issue #551)
x Fixed race condition causing intermittent Cloudflare
challenges failures (issue #549)
x [nscl] Handle RFC 4291 (thanks Security Research Labs for
report)
x [TabGuard] Avoid function serialization pitfalls (thanks
Security Research Labs for report)
x [TabGuard] Fix wrong key used in redundancy optimization

v 13.6.16

x Remove sync fetching exception for network-served
embedding documents (thanks Security Research Labs for
report)
x [UX] Improved gesture calibration
x Prevent horizontal scrolling caused by options tab panels
x Reduce console spam on startup
x [A11y] Fix aria-expanded management for customizable
presets
x [L10n] Updated bn, fi, fr, ja, ru, tr, zh_Hans from
Localization Lab
x [XSS] Updated IC_EVENT_PATTERN
x [UX] Improved rendering and tab-switching performance for
very large site lists
x Fix container options still shown if "Enable support for
containers tabs" is unchecked=
x [Containers] Make Default policy label in options
localizable (thanks fatboy for report)
x Restore README.md logo image lost during webp migration
(73d6ed0) (#545)
x [L10n] Updated bn, de, ru from Localization Lab
x Translations update from Localization Lab (#542)
x [Containers] Gracefully degrade when containers are
disabled by browser options
x [UX][Containers] UI integration
x Enable container support (Firefox pre-releases only)
x Add support for container tabs (#218, thanks to
@aaronkollasch for this huge contribution)
x Slight policy fetching optimization in edge cases
x [nscl] Fix frozen srcdoc frames having "null" as their
content
x [nscl] Improved attributes freezing (thanks Security
Research Labs for report)
x [build] Local github release automation script
x Better changelog formatting in release management action
x Fix release management action always using HEAD
x Consider wss: in secure protocol checks (thanks barbaz for
reporting)
x [Android] Fireproof UI tab closing
x [nscl] Fix dead objects interfering with window.event
patch
x [nscl] Consider wss: in SecureDomainKey checks
x Add missing license information
x Remove "fetch" capability from DEFAULT preset unless
"script" is there too (thanks Security Research Labs for
suggestion)
x Block websocket connections where the fetch capability is
disabled (thanks Security Research Labs for report)
x Improved origin normalization for sandboxed content
(thanks Security Research Labs for report)

13.6.13

x Remove source comments from installable packages
x Replace browser-polyfill.js with an empty stub in Firefox
builds
x Reduce console spam by deferring the logging of messaging
errors due to premature unloading (tor-browser#44673)
x Ensure event hooking does not break window-level listeners

v 13.6.12

x [nscl] Do not limit CSS prefetching to 3rd party / DNS
when used beyond PP0 mitigation
x Better support for debug builds
x Ensure NavCache is awake when used

v 13.6.11

x Remove -webkit-appearance and -moz-appearance occurrences
x [UX] Restore 12px as the base font size on desktop
(related to #529)
x [UX] Fix onboarding page dismissed when clicking on the
background
x Safer version bumping

v 13.6.10

x [nscl] Account for xray being unrelevant and missing in
Worker scope when patching trustedTypes

v 13.6.9

x [nscl] Multiple xray-related fixes (tor-browser#44778)
x Allow building if tree changes are not in the source code

v 13.6.8

x [L10n] Updated el, ru from Localization Lab
x [nscl] Fix XrayWrapper problems with Worker constructor
arguments (tor-browser#44761)
x [XSS] Updated IC_EVENT_PATTERN generation (thanks Security
Research Labs for report)
x [nscl] Use xray to proxify trustedTypes.createPolicy when
needed (fixes tor-browser#44767)=
x [UX] Better approach to ensure customizer is visible on
the bottom of the scrollable area
x [UX] Prevent longer URLs from breaking customizer layout
and force unwanted horizontal scrolling
x [UX][Android] Improved gesture event activation
x [XSS] Unconditionally include acorn.js dependency to
account for some browsers (IronFox?) breaking native
syntax checking (#535)
x Fix misleading CASCADED labels for DEFAULT entries when
full addresses are shown (thanks fatboy for reporting)
x [nscl] Fix breakages on older browser versions not
supporting Trusted Types yet
x Support deployment completion after automatic signing
failure and manual re

v 13.6.6

x [XSS] Fix false positives regression due to the MV3 WIP
(issue #520)

v 13.6.5

x [UX] "S" gesture: change default to disabled
x [UX] "S" gesture on-screen description and lower
activation threshold (issue #519)

v 13.6.3

x [UI] Improved gesture initiation calibration
x [Android] Fixed gesture not opening the popup on Firefox
Nightly

v 13.6.2

x [Android] Auto-close the site UI tab when right-swiping to
home
x Add "S" gesture to open NoScript UI

v 13.6.1

x [nscl] Fix manifest version filter omitting scripts from
html documents (thanks ppxxbu for reporting)

v 13.6

x Hardened subcontext environment modification machinery
x Improved stable/pre channel assignment by version number
matching
x Autoreload extension on UI initialization failure
x Simplify policy fetching
x Refactor and rationalize edge case sync/async policy
fetching
x [Chromium] Fix null origin subdocuments always getting the
fallback locked down policy
x [nscl] [Chromium] Prevent uuid() from polluting Main World
browser contexts (#508)
x [nscl] [Chromium] Cross-browser worklet patching

v 13.5.12

x Convert PNG images to WEBP
x [UX][Android] Improve support for increased font size
configurations
x Make deploy2tor.sh default to latest unpacked firefox
manifest.json
x [UX] Fix first selected preset not being focused
automatically on popup opening (issue #506)
x Prevent mid-session updates on Android in global PMB
(tor-browser#44398)
x [UX] Fix keyboard navigation regression (issue #506)
x [UX] Improved readability of focused icon buttons

v 13.5.10

x [UX] Smoother popup initialization
x [UX] Scrolling area optimization
x [UX] Fickering reduction
x [UX] Various visual tweaks

v 13.5.9

x Fix missing https-only icon regression (thanks Ingo
Brückl for reporting)

v 13.5.8

x Fix site label misalignment (thanks Ingo Brückl for
reporting)

v 13.5.7

x [nscl] Improved document freezing and CSP insertion
x Control manually navigated top-level data: URIs
(tor-browser#44482)

v 13.5.6

x file:// quirk mode compatibility, thanks peterbg for
reporting
x Add option to disable automatic page reloading on
permissions change (fixes issue #42)

v 13.5.5

x [nscl] DocumentFreezer bug fixes and improvements (fixes
#496)
x [nscl] Improved DocRewriter web compatibility (see
tor-browser#44450)