NotAlexNoyleandClaude Fable 5.1
62af6e82c7
The owner's choice of 2026-11-02 after T-551's check found the tag: the update now, patch 0060 (the roots, byte-identical upstream) dropped, special attention to the certificate and HTTPS changes. - update-engine.sh RB_20261027 / --finish: the 72 patches on the tag (0060 fell away as already applied), jihad/uxp-RB_20261027 at 52ad9ab66e in third_party/uxp, the queue rewritten and renumbered from 0060, the pins (engine-version.env, the OE recipe, .gitmodules, the UA and the three start pages: UXP/6b18be9), JIHAD_APP_BUILD_ID 20261103000000; patch-queue.sh --check, check-engine-pins.sh and check-engine-api.py (baseline rewritten, unchanged) agree. - docs/ENGINE-SOURCE.md: the base, the dropped 0060, the renumbering, and the range's 12 commits each with its disposition — the two NSS certificate commits (emSign removed after the eMudhra compromise; certdata to Sept 2026) were on the device since the roots of 2026-10-25 and are the base's now; no PSM, TLS protocol, HSTS or certificate-UI change in the range; the memory-safety fixes (the JS OOB array copy, the jar: flag, feTile, the layout frame table, the mutation observer's strong ref, SQLite 3.54.1) taken with the base. - audit-roots.py against the fetched release certdata and the CCADB report: identical set and trust, none removed, RESULT OK (docs/rounds/certs-2026-11-03). - Desktop: the full build clean; 14 of 18 tests pass, the four left are the desktop GTK path's known read-back limit. ARM: libxul, the daemon, the bundle, the three packages; full pushes to all three variants; default-check x3 faults 0; the daemon's start line 28 of 29 optional exports as before. The areas the commits touch, on the device (tools/device/engine-checks.sh, new): about:settings, about:personas and about:addons through jar: under the flag change, cookies through the new SQLite, an SVG filter page with feTile and its overflow case (render/goanna/test/jihad-svg-filter.html, new), a long press's selection; faults 0. The certificate kit's checks (tools/device/cert-checks.sh): the TLS 1.0 refusal, the clean loads, expired / wrong.host / self-signed / untrusted-root with the SSL confirm's right flags, OCSP revocation enforced on grc.com, ssl.com and DigiCert's demos, revoked.badssl.com's CRL-only case invisible as before: nothing changed with the base. Records: docs/rounds/engine-rb27-2026-11-03/notes.txt. - tools/device/cert-checks.sh and t502/enyo-restore-job.sh (new): the certificate kit's device checks under a hand-started daemon, and the Enyo job put back after any spike round. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
23 lines
1.4 KiB
Bash
23 lines
1.4 KiB
Bash
# The engine this build embeds — one place for every pin and version string an update changes.
|
|
# build/engine/check-engine-pins.sh fails when anything in the repo disagrees with this file;
|
|
# docs/ENGINE.md says how to update the engine and which of these to bump.
|
|
|
|
# The upstream UXP release our engine branch sits on, and its commit (pristine;
|
|
# repo.palemoon.org MoonchildProductions/UXP). build/engine/update-engine.sh moves these.
|
|
UXP_TAG=RB_20261027
|
|
UXP_BASE=6b18be917d462369593bfe611230a7003fd7d945
|
|
# The tip of our engine branch (NotAlexNoyle/UXP-Jihad, jihad/uxp-<UXP_TAG>: one commit per patch
|
|
# in build/desktop/patches) the build uses. The third_party/uxp gitlink and the OE recipe's SRCREV
|
|
# must both be this commit.
|
|
UXP_PIN=52ad9ab66ebbc1c28133a330ee2f35819565d61e
|
|
# What the user agent and the start pages say: Goanna version and the short UPSTREAM base.
|
|
GOANNA_VERSION=6.9
|
|
UXP_SHORT=6b18be9
|
|
# The ICU data file the engine ships (make-device-bundle.sh, gen-variant-scripts.sh).
|
|
ICU_DATA=icudt78l.dat
|
|
# The built-in roots (cavekit-certificate-trust.md R2): the certdata.txt shipped is UXP release's, by SHA-256.
|
|
# ROOTS_SOURCE is that branch's commit for the file, ROOTS_DATE its date; audit-roots.py and check-engine-pins.sh use these.
|
|
ROOTS_SHA256=3ec2b4d240dc12c747eaf450061db84af757c483bbda302f9e29ceb5d70be510
|
|
ROOTS_SOURCE=037cc5f614c8a2d54b3bd17d9e967b89014a57ff
|
|
ROOTS_DATE=2026-10-24
|