konform-browser/source
3
34
Fork
You've already forked source
5
  • 140.12.0-103 Stable

    kinbot released this 2026年07月05日 12:13:23 +02:00 | 0 commits to main since this release

    Summary

    • ui: Add the original Colorways theme pack (#38)
      • Browser now comes with a set of built-in monochromatic color schemes to choose from
      • The new built-in themes are tucked away separately at the bottom of about:addons#themes in order to keep default view uncluttered.
    • Improve support for using DOM Push without a remote push service,
    • ui: Hide irrelevant Mozilla Firefox links under Help app menu.
    • ui: Fix version display and release notes links on "Help -> About..." app menu.
    • Konform Browser will no longer attempt to override or extend uBlock Origin (or any other add-on) configuration.
      • Fixes where user filter list configuration could unexpectedly be overwritten on upgrade.
    • QuickSuggest feature (disabled by default) can no longer change its behavior depending on estimated user geolocation.

    Lifted fix from Firefox Rapid Release

    • Bug 2047467 - Update vendored mp4parse-rust to b693c7e4a91d. (FF154)
      • Fixes multiple cases where video or audio would play incorrectly or not at all.
      • Includes changes from:
      • If you are having unexpected media playback issues with video or audio that plays fine in either Firefox or an older Konform Browser version, please open an issue.

    Lifted bugfixes pending for Firefox ESR 140.13.0

    • Bug 2050657: ensure numbers are consistent as JSNumbers (FF140)
    • Bug 2050990: Call JS_NumberValue in ClientWebGLContext.cpp (FF140)
    • Bug 2049523: Make ToJSValue for float consistent with double (FF140)
    • Bug 2045396: Abort parser that otherwise could trigger the running of script when it shouldn't (FF140)
    • Bug 2029761: Handle large values returned by strnlen as an error (FF140)
    • Bug 2045414: be consistent with the promise resolve/reject handling (FF140)
    • Bug 2037770: Honor iframe sandbox flags when handling pdf.js downloads (FF140)
    • Bug 2027519: [devtools] Use the real source url for sourcemap resolution (FF140)
    • Bug 2045604: Don't leak the static doc via the relevant global of the context. (FF140)
    • Bug 2045454: Clamp length of regexp captures array for dollar substitution (FF140)
    • Bug 2013230: Use strnlen in mozilla::PrintfTarget::cvt_s (FF140)
    • Bug 2031768: Validate Principals in CookieStore (FF140)
    • Bug 2036591: Use origin attributes in FailDelayManager (FF140)
    • Bug 2043820: Reject javascript URI in nsDocShellLoadState (FF140)
    • update HSTS HPKP remote-settings tld-suffixes ct-logs

    Preset updates

    • BF ✳️: Enable DOM Push (but leave Push connection unchanged)
    • JMIW 🦊: Enable DOM Push connection

    Installing

    Source release

    The provided source release is a ready-to-build browser with prepatched Firefox sources.

    Use Konform Browser git sources directly to make custom builds.
    See BUILD.md for details.

    Arch Linux AUR: https://aur.archlinux.org/packages/konform-browser

    Binary packages

    Prebuilt packages produced by Codeberg CI are available at Codeberg Packages for your convenience.

    v140.12.0-103

    Instructions

    🌐 HTML version

    If you are on arm64, replace x86_64 as appropriate in downloads and filenames.

    Release PGP key

    konform-cb-ci.pgp

    -----BEGIN PGP PUBLIC KEY BLOCK-----
    mDMEaXIKBhYJKwYBBAHaRw8BAQdAzN92p4yHsUx2pjqudvUDFBQd/dwDrsPy0lwf
    wDiPpGyI0QQfFgoAgwWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A
    IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ7KCtG86t6GXU2apW5cqfM6G
    94NVwoc0/X/wFhWvkuDRAxUKCAKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtBoOJi
    AACFNgEAmcgMNhYGBmHrMqAZIN/ahHjyR/oszi8lXu6Jknc+h+ABAObBZLrv4SdI
    zEm5rBwGEmAKKNDokDoPOTCxM/87TRYGtBtrb25mb3JtLWJyb3dzZXIgQ29kZWJl
    cmcgQ0mI1AQTFgoAhgWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A
    IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ4OULsvKqiWCKJQa001Pnaqh
    v9EiJQ8lrOd8z64JPSKkAxUKCAKZAQKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtB
    oOJiAACamAD/YkftgU34HhA2Rg5hKeZiHKaPM+zUSt4jlaTnORmH4d8A/jASwSgw
    VGB6XILqX0RAVPPLx5zXGZ/WskTY1onHuCsHuDMEaXIKBhYJKwYBBAHaRw8BAQdA
    ECfy7Io7p8rRCQ+w+oPmpYK9nIK9ul9rghOCqerU2i6JAYUEGBYKATcFgmlyCgYF
    iRLPNHYJECtv1YtBoOJiRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEt
    cGdwLm9yZ4M13ftkODzpCQGsB+421T3OonXNlfjPGB6t7zaTdxrYApsgvqAEGRYK
    AG8FgmlyCgYJEELMHs4swHDgRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVv
    aWEtcGdwLm9yZzRwT8U9tcWMp/0ddAbK9Pj7MMPvksAF/gouiXwon0ANFiEEKEHG
    VnaYVVNDLh5+QswezizAcOAAAJkWAP9oaT/HUxHNRtKHceGJ8R3Tg8ZoKwzFTkKW
    I8OvUK5dmQEA8am8MZBkCMJhk9pQL4/s3zocj02XZQBAdA0zFGHlmwEWIQSVEf2b
    1kzPFx8LKKcrb9WLQaDiYgAA4HoBALs4Xw6pDTirdrxbBObN+TjOAiQ7ea0eY4wM
    e4uq6X1rAQD55zXMiIHBK3K43fkvzkFDHBw7HBayP9g2cnDS4bPiDrgzBGlyCgYW
    CSsGAQQB2kcPAQEHQHqz1r4tn17FIFnJ+2EB67d2j/EaQ45uRvMjTlFekvrZiQGF
    BBgWCgE3BYJpcgoGBYkSzzR2CRArb9WLQaDiYkcUAAAAAAAeACBzYWx0QG5vdGF0
    aW9ucy5zZXF1b2lhLXBncC5vcmee9nn/HfCZmKx0gEwuP/UeqIsMYHQs8s+hJCnk
    LGPkFQKbAr6gBBkWCgBvBYJpcgoGCRBQnCndtw+Y+0cUAAAAAAAeACBzYWx0QG5v
    dGF0aW9ucy5zZXF1b2lhLXBncC5vcmdgywCWJ2SMNlv/Q11fnKYDqpjkj/pdCISe
    QrdhjoHnpRYhBBEDzJQhL4Xk9OoPrVCcKd23D5j7AABMqgEAuvN/zU4Dp6Gxz+oi
    aLjhJ1g/OUKeiXY1yl7CcinPk8YBALjglJ5R57foLUjQfu+NWZCsn48kWFdBqNzn
    Il8ZYXkLFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIAAMbmAP0bzf8Yfsf4Z/33GEvI
    yhMRKo93duvHEBM2B0N+Lzjx/wEAjwOglA8MtSclVfIB3VlKAjNlVEnXxxTVKQkp
    A7LpLwy4OARpcgoGEgorBgEEAZdVAQUBAQdAXznR4LrhCln5N6oXS3NzLT80kKMI
    H5hfej3E/nZF4XsDAQgHiMYEGBYKAHgFgmlyCgYFiRLPNHYJECtv1YtBoOJiRxQA
    AAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ+4V5CTBmCn92ITd
    jROoWd8gG6l0GZ3iv468SLcqyYt3ApsMFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIA
    AIx6AQC0u+JwAIqNhAhP1hO4eHVY5jrem4wXr/4DRJ1oXOIe+AD8D9shkbiuUq3N
    IT0rng2rbFCjhZrNmcBV6URfD3Pf/go=
    =7IDH
    -----END PGP PUBLIC KEY BLOCK-----
    

    Debian/apt-based

    To receive future updates and install, run:

    sudo apt -U install extrepo && \
    sudo extrepo enable konform-browser && \
    sudo apt -U install konform-browser
    

    This will enable Konform apt repository.

    For a one-off manual installation:

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-103-linux-x86_64-deb.deb ./konform-browser-140.12.0-103-linux-x86_64-deb.deb
    sudo apt-get install ./konform-browser-140.12.0-103-linux-x86_64-deb.deb
    

    Fedora/rpm-based

    To receive future updates, configure Konform rpm repository and then run
    sudo dnf install konform-browser.

    ⚠️ There is a known issue with the instructions for Codeberg RPM repository resulting in Signature verification failed error due to mismatching PGP key. See #20 for status and fix.

    For a one-off manual installation:

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-103-linux-x86_64-rpm.rpm.sig ./konform-browser-140.12.0-103-linux-x86_64-rpm.rpm
    sudo dnf install ./konform-browser-140.12.0-103-linux-x86_64-rpm.rpm
    

    Arch Linux

    See konform-browser/Arch.

    Alpine Linux

    See the Alpine Linux package registry.

    Tarball

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-103-linux-x86_64-package.tar.xz.sig ./konform-browser-140.12.0-103-linux-x86_64-package.tar.xz
    tar -xvf ./konform-browser-140.12.0-103-linux-x86_64-package.tar.xz
    
    Downloads
  • 140.12.0-103rc2 Pre-release

    kinbot released this 2026年07月05日 08:12:56 +02:00 | 0 commits to main since this release

    release candidate for testers

    Downloads
  • 140.12.0-103rc1 Pre-release

    kinbot released this 2026年07月04日 10:14:27 +02:00 | 18 commits to main since this release

    release candidate for testers

    Downloads
  • 140.12.0-102 Stable

    kinbot released this 2026年06月29日 14:58:31 +02:00 | 30 commits to main since this release

    Summary

    • Make Konform Browser defaults into actual browser defaults. (#33)
      • In previous versions, the browser would read its defaults from a shipped librewolf.cfg file for its base defaults. If this file was missing or corrupt, it would fall back to Firefox defaults.
      • Konform Browser base preferences are now actual defaults.
      • Aforementioned configuration file is still read from at startup for backward-compatibility but is now delivered empty.
    • ui: Tweaks and improvements to the sidebar (#36)
    • Fixes and improvements to newtabpage and its related components (#37)
      • Default new tab page is now blank. To get the search bar back, change to "Homepage" under about:preferences:#home.
      • Homepage can no longer trigger background network requests. Previously this could happen if user customized their Homepage to include "Shortcuts" or "Recent activity". This should no longer happen.
    • ui: Picture of cute fox mascot are now absent
    • fix: Fix errors being logged in browser console when searching with formfill disabled
    • ui: New tab groups will no longer be created by drag-and-dropping tabs onto each other.
      • Preference browser.tabs.dragDrop.createGroup.enabled re-enables the feature.
    • (削除) Konform Browser will no longer attempt to override or extend uBlock Origin (or any other add-on) configuration. (削除ここまで) (fixed in 140.12.0-103)
    • fix: Properly set default preference privacy.partition.network_state.connection_with_proxy
      • Strict enforcement of proxy configuration is already in place on deeper level. This pref is being set as defense-in-depth measure to protect against potential related bugs.
    • ui: Fix rendering of detailed preset view under about:welcome.
    • presets: Webcompat interventions will now be enabled when choosing ✳️ Basic Functionality or 🦊 Just Make It Work presets. Otherwise it remains disabled.
    • Removal of calls to telemetry subsystems
    • fix: Profile backup restore is now properly handling backups where profile telemetry is absent.

    Ported change from Waterfox

    Uplifted changes from Firefox Rapid Release:

    • Bug 2020730: add setting "Drag tabs together to create tag groups" (FF150)
    • Bug 2005628: create preference to disable drag-and-drop creation of tab groups (FF150)
    • Bug 2021765: Ignore the thumbnails folder not existing in PageThumbs.worker.js (FF149)
    • Bug 1996813: Change network.trr.retry_on_recoverable_errors to false and cycle connections when confirmation fails (FF147)

    See commit log for details.

    Installing

    Source release

    The provided source release is a ready-to-build browser with prepatched Firefox sources.

    Use Konform Browser git sources directly to make custom builds.
    See BUILD.md for details.

    Arch Linux AUR: https://aur.archlinux.org/packages/konform-browser

    Binary packages

    Prebuilt packages produced by Codeberg CI are available at Codeberg Packages for your convenience.

    v140.12.0-102

    Instructions

    🌐 HTML version

    If you are on arm64, replace x86_64 as appropriate in downloads and filenames.

    Release PGP key

    konform-cb-ci.pgp

    -----BEGIN PGP PUBLIC KEY BLOCK-----
    mDMEaXIKBhYJKwYBBAHaRw8BAQdAzN92p4yHsUx2pjqudvUDFBQd/dwDrsPy0lwf
    wDiPpGyI0QQfFgoAgwWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A
    IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ7KCtG86t6GXU2apW5cqfM6G
    94NVwoc0/X/wFhWvkuDRAxUKCAKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtBoOJi
    AACFNgEAmcgMNhYGBmHrMqAZIN/ahHjyR/oszi8lXu6Jknc+h+ABAObBZLrv4SdI
    zEm5rBwGEmAKKNDokDoPOTCxM/87TRYGtBtrb25mb3JtLWJyb3dzZXIgQ29kZWJl
    cmcgQ0mI1AQTFgoAhgWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A
    IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ4OULsvKqiWCKJQa001Pnaqh
    v9EiJQ8lrOd8z64JPSKkAxUKCAKZAQKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtB
    oOJiAACamAD/YkftgU34HhA2Rg5hKeZiHKaPM+zUSt4jlaTnORmH4d8A/jASwSgw
    VGB6XILqX0RAVPPLx5zXGZ/WskTY1onHuCsHuDMEaXIKBhYJKwYBBAHaRw8BAQdA
    ECfy7Io7p8rRCQ+w+oPmpYK9nIK9ul9rghOCqerU2i6JAYUEGBYKATcFgmlyCgYF
    iRLPNHYJECtv1YtBoOJiRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEt
    cGdwLm9yZ4M13ftkODzpCQGsB+421T3OonXNlfjPGB6t7zaTdxrYApsgvqAEGRYK
    AG8FgmlyCgYJEELMHs4swHDgRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVv
    aWEtcGdwLm9yZzRwT8U9tcWMp/0ddAbK9Pj7MMPvksAF/gouiXwon0ANFiEEKEHG
    VnaYVVNDLh5+QswezizAcOAAAJkWAP9oaT/HUxHNRtKHceGJ8R3Tg8ZoKwzFTkKW
    I8OvUK5dmQEA8am8MZBkCMJhk9pQL4/s3zocj02XZQBAdA0zFGHlmwEWIQSVEf2b
    1kzPFx8LKKcrb9WLQaDiYgAA4HoBALs4Xw6pDTirdrxbBObN+TjOAiQ7ea0eY4wM
    e4uq6X1rAQD55zXMiIHBK3K43fkvzkFDHBw7HBayP9g2cnDS4bPiDrgzBGlyCgYW
    CSsGAQQB2kcPAQEHQHqz1r4tn17FIFnJ+2EB67d2j/EaQ45uRvMjTlFekvrZiQGF
    BBgWCgE3BYJpcgoGBYkSzzR2CRArb9WLQaDiYkcUAAAAAAAeACBzYWx0QG5vdGF0
    aW9ucy5zZXF1b2lhLXBncC5vcmee9nn/HfCZmKx0gEwuP/UeqIsMYHQs8s+hJCnk
    LGPkFQKbAr6gBBkWCgBvBYJpcgoGCRBQnCndtw+Y+0cUAAAAAAAeACBzYWx0QG5v
    dGF0aW9ucy5zZXF1b2lhLXBncC5vcmdgywCWJ2SMNlv/Q11fnKYDqpjkj/pdCISe
    QrdhjoHnpRYhBBEDzJQhL4Xk9OoPrVCcKd23D5j7AABMqgEAuvN/zU4Dp6Gxz+oi
    aLjhJ1g/OUKeiXY1yl7CcinPk8YBALjglJ5R57foLUjQfu+NWZCsn48kWFdBqNzn
    Il8ZYXkLFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIAAMbmAP0bzf8Yfsf4Z/33GEvI
    yhMRKo93duvHEBM2B0N+Lzjx/wEAjwOglA8MtSclVfIB3VlKAjNlVEnXxxTVKQkp
    A7LpLwy4OARpcgoGEgorBgEEAZdVAQUBAQdAXznR4LrhCln5N6oXS3NzLT80kKMI
    H5hfej3E/nZF4XsDAQgHiMYEGBYKAHgFgmlyCgYFiRLPNHYJECtv1YtBoOJiRxQA
    AAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ+4V5CTBmCn92ITd
    jROoWd8gG6l0GZ3iv468SLcqyYt3ApsMFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIA
    AIx6AQC0u+JwAIqNhAhP1hO4eHVY5jrem4wXr/4DRJ1oXOIe+AD8D9shkbiuUq3N
    IT0rng2rbFCjhZrNmcBV6URfD3Pf/go=
    =7IDH
    -----END PGP PUBLIC KEY BLOCK-----
    

    Debian/apt-based

    To receive future updates and install, run:

    sudo apt -U install extrepo && \
    sudo extrepo enable konform-browser && \
    sudo apt -U install konform-browser
    

    This will enable Konform apt repository.

    For a one-off manual installation:

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-102-linux-x86_64-deb.deb ./konform-browser-140.12.0-102-linux-x86_64-deb.deb
    sudo apt-get install ./konform-browser-140.12.0-102-linux-x86_64-deb.deb
    

    Fedora/rpm-based

    To receive future updates, configure Konform rpm repository and then run
    sudo dnf install konform-browser.

    ⚠️ There is a known issue with the instructions for Codeberg RPM repository resulting in Signature verification failed error due to mismatching PGP key. See #20 for status and fix.

    For a one-off manual installation:

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-102-linux-x86_64-rpm.rpm.sig ./konform-browser-140.12.0-102-linux-x86_64-rpm.rpm
    sudo dnf install ./konform-browser-140.12.0-102-linux-x86_64-rpm.rpm
    

    Arch Linux

    See konform-browser/Arch.

    Alpine Linux

    See the Alpine Linux package registry.

    Tarball

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-102-linux-x86_64-package.tar.xz.sig ./konform-browser-140.12.0-102-linux-x86_64-package.tar.xz
    tar -xvf ./konform-browser-140.12.0-102-linux-x86_64-package.tar.xz
    
    Downloads
  • 140.12.0-101 Stable

    kinbot released this 2026年06月22日 14:49:30 +02:00 | 73 commits to main since this release

    Summary

    • Remove and reduce calling into unnecessary telemetry and Nimbus subsystems
      • Improved efficiency and reduced resource usage by less busywork and bookeeping.
      • Glean DB is no longer written to disk.
      • Removes spurious log errors from now inactive ExtensionTelemetry
    • fix: race-condition in Picture-in-Picture component
      • Fixes error in js console on video mouseOut event.
    • fix: Remove potential of certain browser system http requests bypassing configured proxy
    • Disable "Wallpaper" feature and widgets on homepage which is unfortunately buggy and depends on internet connection.

    Improvements to RemoteSettings integration

    • RemoteSettingsClient.get syncIfEmpty parameter is now false by default.
      • Less collections will now not be pre-emptively remotely fetched over network without explicit sync.
    • Disable polling of unused activity-stream feeds
    • Allow RemoteSettingsClient.synchronize to use existing local data even when network offline.
    • Failing to fetch initial startup bundle due to network error is now handled as "empty result" instead of "error"
    • Reduce background polling of hijack-blocklists (for search engine and ml model censorship) and associated background busywork for homepage search.
    • fix: Add rs-blocker restrictions validation for codepaths that previously did not observe them
      • As previously, fetching from RemoteSettings is gated by preferences librewolf.services.settings.allowedCollections (online) and librewolf.services.settings.allowedCollectionsFromDump (local)
      • In a future version, these will be renamed to services.settings.allowedCollections and librewolf.services.settings.allowedCollectionsFromDump.
    • Allow loading translation data from local dumps regardless of timestamp.
    • Introduce pref services.settings.server.attachments
      • When not set to empty, requests using the configured RS server (set with services.settings.server) will use this endpoint instead of performing service discovery of CDN endpoints before proceeding.
    • Force all network requests to use configured HTTP proxy, if any, removing potential for proxy bypasses.
    • Improve logging by consistent use of logging facilities.
    • Remove "Unreachable code" warning

    Multi-Account Containers lite

    Uplifted changes from Firefox Rapid Release:

    • Bug 2039463: Fix UBSan function-type-mismatch for fGetString (FF152)
    • Bug 2036932: Fix nsSocketTransport2 DNS result field data races (FF152)
    • Bug 2036931: Fix CookiePersistentStorage::mCorruptFlag data race (FF152)
    • Bug 2036898: Fix nsSocketTransportService2::mKeepaliveEnabledPref data race (FF152)
    • Bug 2036907: Fix WebTransportSessionBase::mListener data race (FF152)
    • Bug 2036666: Fix UrlClassifierFeatureBase mTables/mHosts (FF152)
    • Bug 2036895: Fix Dashboard::mEnableLogging data race (FF152)
    • Bug 2035907: wasm: Align WasmTableObject::growImpl with Instance::tableGrow. (FF152)
    • Bug 2034816: Change some ImmPtr uses to ImmGCPtr. (FF152)
    • Bug 2025960: Use nsMainThreadPtrHandle in WorkerDebugger runnables. (FF152)
    • Bug 2021955: drop extra channels when out of downmixer's capability. (FF152)
    • Bug 1767455 (FF152)

    Uplifted changes from upcoming Firefox esr-140 branch:

    • Bug 2044612: Use ClientInfo for font loading in Worker (FF140)
    • Bug 2041902: For WebTransport require a ClientInfo (FF140)
    • repo-update HSTS HPKP remote-settings tld-suffixes ct-logs

    Developer-facing changes

    • Potentiallty breaking for builders: scripts/librewolf-patches.py has been renamed to scripts/apply-patches.py
    • Files copied over verbatim from Konform Browser source git repo to source archive have been moved to matching locations.
    • Repo clean-up, some minor fixes and improvements to build and develpoment scripts, restructuring and preparing for ESR153. See git log for details.

    Installing

    Source release

    The provided source release is a ready-to-build browser with prepatched Firefox sources.

    Use Konform Browser git sources directly to make custom builds.
    See BUILD.md for details.

    Arch Linux AUR: https://aur.archlinux.org/packages/konform-browser

    Binary packages

    Prebuilt packages produced by Codeberg CI are available at Codeberg Packages for your convenience.

    v140.12.0-101

    Instructions

    🌐 HTML version

    If you are on arm64, replace x86_64 as appropriate in downloads and filenames.

    Release PGP key

    konform-cb-ci.pgp

    -----BEGIN PGP PUBLIC KEY BLOCK-----
    mDMEaXIKBhYJKwYBBAHaRw8BAQdAzN92p4yHsUx2pjqudvUDFBQd/dwDrsPy0lwf
    wDiPpGyI0QQfFgoAgwWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A
    IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ7KCtG86t6GXU2apW5cqfM6G
    94NVwoc0/X/wFhWvkuDRAxUKCAKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtBoOJi
    AACFNgEAmcgMNhYGBmHrMqAZIN/ahHjyR/oszi8lXu6Jknc+h+ABAObBZLrv4SdI
    zEm5rBwGEmAKKNDokDoPOTCxM/87TRYGtBtrb25mb3JtLWJyb3dzZXIgQ29kZWJl
    cmcgQ0mI1AQTFgoAhgWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A
    IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ4OULsvKqiWCKJQa001Pnaqh
    v9EiJQ8lrOd8z64JPSKkAxUKCAKZAQKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtB
    oOJiAACamAD/YkftgU34HhA2Rg5hKeZiHKaPM+zUSt4jlaTnORmH4d8A/jASwSgw
    VGB6XILqX0RAVPPLx5zXGZ/WskTY1onHuCsHuDMEaXIKBhYJKwYBBAHaRw8BAQdA
    ECfy7Io7p8rRCQ+w+oPmpYK9nIK9ul9rghOCqerU2i6JAYUEGBYKATcFgmlyCgYF
    iRLPNHYJECtv1YtBoOJiRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEt
    cGdwLm9yZ4M13ftkODzpCQGsB+421T3OonXNlfjPGB6t7zaTdxrYApsgvqAEGRYK
    AG8FgmlyCgYJEELMHs4swHDgRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVv
    aWEtcGdwLm9yZzRwT8U9tcWMp/0ddAbK9Pj7MMPvksAF/gouiXwon0ANFiEEKEHG
    VnaYVVNDLh5+QswezizAcOAAAJkWAP9oaT/HUxHNRtKHceGJ8R3Tg8ZoKwzFTkKW
    I8OvUK5dmQEA8am8MZBkCMJhk9pQL4/s3zocj02XZQBAdA0zFGHlmwEWIQSVEf2b
    1kzPFx8LKKcrb9WLQaDiYgAA4HoBALs4Xw6pDTirdrxbBObN+TjOAiQ7ea0eY4wM
    e4uq6X1rAQD55zXMiIHBK3K43fkvzkFDHBw7HBayP9g2cnDS4bPiDrgzBGlyCgYW
    CSsGAQQB2kcPAQEHQHqz1r4tn17FIFnJ+2EB67d2j/EaQ45uRvMjTlFekvrZiQGF
    BBgWCgE3BYJpcgoGBYkSzzR2CRArb9WLQaDiYkcUAAAAAAAeACBzYWx0QG5vdGF0
    aW9ucy5zZXF1b2lhLXBncC5vcmee9nn/HfCZmKx0gEwuP/UeqIsMYHQs8s+hJCnk
    LGPkFQKbAr6gBBkWCgBvBYJpcgoGCRBQnCndtw+Y+0cUAAAAAAAeACBzYWx0QG5v
    dGF0aW9ucy5zZXF1b2lhLXBncC5vcmdgywCWJ2SMNlv/Q11fnKYDqpjkj/pdCISe
    QrdhjoHnpRYhBBEDzJQhL4Xk9OoPrVCcKd23D5j7AABMqgEAuvN/zU4Dp6Gxz+oi
    aLjhJ1g/OUKeiXY1yl7CcinPk8YBALjglJ5R57foLUjQfu+NWZCsn48kWFdBqNzn
    Il8ZYXkLFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIAAMbmAP0bzf8Yfsf4Z/33GEvI
    yhMRKo93duvHEBM2B0N+Lzjx/wEAjwOglA8MtSclVfIB3VlKAjNlVEnXxxTVKQkp
    A7LpLwy4OARpcgoGEgorBgEEAZdVAQUBAQdAXznR4LrhCln5N6oXS3NzLT80kKMI
    H5hfej3E/nZF4XsDAQgHiMYEGBYKAHgFgmlyCgYFiRLPNHYJECtv1YtBoOJiRxQA
    AAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ+4V5CTBmCn92ITd
    jROoWd8gG6l0GZ3iv468SLcqyYt3ApsMFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIA
    AIx6AQC0u+JwAIqNhAhP1hO4eHVY5jrem4wXr/4DRJ1oXOIe+AD8D9shkbiuUq3N
    IT0rng2rbFCjhZrNmcBV6URfD3Pf/go=
    =7IDH
    -----END PGP PUBLIC KEY BLOCK-----
    

    Debian/apt-based

    To receive future updates and install, run:

    sudo apt -U install extrepo && \
    sudo extrepo enable konform-browser && \
    sudo apt -U install konform-browser
    

    This will enable Konform apt repository.

    For a one-off manual installation:

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-101-linux-x86_64-deb.deb ./konform-browser-140.12.0-101-linux-x86_64-deb.deb
    sudo apt-get install ./konform-browser-140.12.0-101-linux-x86_64-deb.deb
    

    Fedora/rpm-based

    To receive future updates, configure Konform rpm repository and then run
    sudo dnf install konform-browser.

    ⚠️ There is a known issue with the instructions for Codeberg RPM repository resulting in Signature verification failed error due to mismatching PGP key. See #20 for status and fix.

    For a one-off manual installation:

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-101-linux-x86_64-rpm.rpm.sig ./konform-browser-140.12.0-101-linux-x86_64-rpm.rpm
    sudo dnf install ./konform-browser-140.12.0-101-linux-x86_64-rpm.rpm
    

    Arch Linux

    See konform-browser/Arch.

    Alpine Linux

    See the Alpine Linux package registry.

    Tarball

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-101-linux-x86_64-package.tar.xz.sig ./konform-browser-140.12.0-101-linux-x86_64-package.tar.xz
    tar -xvf ./konform-browser-140.12.0-101-linux-x86_64-package.tar.xz
    
    Downloads
  • 140.12.0-100 Stable

    kinbot released this 2026年06月11日 03:44:43 +02:00 | 124 commits to main since this release

    Summary

    • Latest security- and bug fixes have been pulled in from upstream Firefox 140.12.0 ESR release.
    • ui: Extend WebGL configuration with a couple of toggles
    • fix: Replace leftover legacy vendor strings in UI and localisations
    • fix: add missing document.ico, document_pdf.svg resources
    • further disable inert Glean telemetry subsystem
      • remove unnecessary filesystem activity for persisting and reading hardcoded identifiers
    • fix: graceful remoteless initialization of QuickSuggest feature

    Build changes

    • Root directory path inside release source-tarball is now of format: konform-browser-140.12.0-100/.
      • Developers and users building from source may need to update their tooling.
    • Remove unused inherited legacy tooling integration files like .github/, .mcp.json, etc.
    • make: Support beta upstream builds.
    • make: Support running on mounted directories and reusing source state.
    • build: Allow empty and # commented lines in assets/patches.txt
    • security: Check in Mozilla Releases PGP pubkey.

    Uplifted changes from Firefox Rapid Release:

    • security: Backport "framebusting protection" fixes
      • Bug 1419501: Require user interaction for cross-origin iframe window.top.location navigation (FF144,BB15)
      • Bug 2006600: Keep track of dismissed popup-blocker notifications (FF148)
      • Bug 1873716: Handle about:blank iframes that do fingerprinting (FF148)
      • Bug 2001668: Make framebusting pref independent of pop-up blocking (FF150)
      • Bug 2025170: Pass correct report index for blocked popups (FF151)
    • Bug 1980594: Use CanvasUtils::ImageExtraction instead of bool usePlaceholder. (FF143)
    • Bug 1917607: Introduce random noises to WebGLRendering when ResistFingerprinting enabled (FF145)
    • Bug 2005273: Add additional known canvas fingerprinting text and aliases (FF148)
    • Bug 2004797: Only call UpdateContext when creating a new context in OffscreenCanvas (FF148)
    • Bug 1976287: Sanitize WebGL Vendor to an allowlisted set of names (FF148)
    • Bug 2001160: Null check aOffscreenCanvas's owner global in ImageExtractionResult (FF148)
    • Bug 2003504: Bug 1880429, clear source browsing context early, if possible (FF150,BB15)
    • Bug 1992585: Set AppLinks intent selector to null. (FF150,BB15)
    • Bug 2022746: Convert pointer to boolean instead of comparing with 0 (FF150,BB15)
    • Bug 2024238: GMP i420 validation fix (FF150,BB15)
    • Bug 2024760: Handle WebSocketChannel::IsPersistentFramePtr correctly (FF150,BB15)
    • Bug 2025281: Cleanup MediaIPCUtils. (FF150,BB15)
    • Bug 2026297: gfx/2d/FilterNodeSoftware bounds check fix (FF150,BB15)
    • Bug 2026601: Taint reset streams (FF150,BB15)
    • Bug 2027287: gfx/ycbcr/scale_yuv_argb bounds check fix (FF150,BB15)
    • Bug 2029446: Don't create frames for elements that are not allowed in an svg-glyphs document (FF150,BB15)
    • Bug 2029699: Simplify InlineBackgroundData handling. (FF150,BB15)
    • Bug 2030385: Fix non-contiguous nsIContentAnalysisResponse::Action serializer (FF151)
    • Bug 2029281: Update libcubeb to 626d7d9f906e9f3cfb70be9e58af0f5a5f399a74 (FF151)
    • Bug 2027276: Use size_t when inflating UTF8 (FF151)
    • Bug 2025947: Check data corruption in script decompression (FF151)
    • Bug 2025942: Fix off-by-one in a LogModuleManager::PrintFmt check (FF151)
    • Bug 2025888: Make IncrementalTokenizer read entire buffer (FF151)
    • Bug 2025877: OffScreenCanvas validation (FF151)
    • Bug 2025434: Return early in ClearKey (FF151)
    • Bug 2025346: Create RemoteObjectProxy properly (FF151)
    • Bug 1940116: Ignore clicks shortly after extension popup closes (FF151)
    • Bug 2024665: Make nsIReplacedHttpResponse non-scriptable (FF151)
    • Bug 2027308: Fix handling of empty text leaves (FF151)
    • Bug 2027310: improve thread coordination in ShowProtectedAuthPrompt (FF151)
    • Bug 2025968: Don't allow fragmenting a MiddleCroppingBlockFrame (FF151)
    • Bug 2024443: Make CryptoKey::GetAlgorithm more idiomatic (FF151)
    • Bug 2024260: nsRequestObserverProxy cleanup (FF151)
    • Bug 2024244: Make socket transport hold a reference to TLSServerConnectionInfo (FF151)
    • Bug 2023943: Make CookieNotification::GetOperation ID clone the ID (FF151)
    • Bug 2021222: Cancel SpeechSynthesis when the page navigates away (FF151)

    Uplifted changes from Tor BaseBrowser

    • BB 30541: Disable WebGL readPixel() for web content when ResistFingerprinting enabled
    • BB 43323: Expose a stable asset from chrome://
      • Best we can do of current situation is spoofing plausible existing fingerprint..

    Installing

    Source release

    The provided source release is a ready-to-build browser with prepatched Firefox sources.

    Use Konform Browser git sources directly to make custom builds.
    See BUILD.md for details.

    Arch Linux AUR: https://aur.archlinux.org/packages/konform-browser

    Binary packages

    Prebuilt packages produced by Codeberg CI are (soon) available at Codeberg Packages for your convenience.

    v140.12.0-100

    Instructions

    🌐 HTML version

    If you are on arm64, replace x86_64 as appropriate in downloads and filenames.

    Release PGP key

    konform-cb-ci.pgp

    -----BEGIN PGP PUBLIC KEY BLOCK-----
    mDMEaXIKBhYJKwYBBAHaRw8BAQdAzN92p4yHsUx2pjqudvUDFBQd/dwDrsPy0lwf
    wDiPpGyI0QQfFgoAgwWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A
    IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ7KCtG86t6GXU2apW5cqfM6G
    94NVwoc0/X/wFhWvkuDRAxUKCAKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtBoOJi
    AACFNgEAmcgMNhYGBmHrMqAZIN/ahHjyR/oszi8lXu6Jknc+h+ABAObBZLrv4SdI
    zEm5rBwGEmAKKNDokDoPOTCxM/87TRYGtBtrb25mb3JtLWJyb3dzZXIgQ29kZWJl
    cmcgQ0mI1AQTFgoAhgWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A
    IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ4OULsvKqiWCKJQa001Pnaqh
    v9EiJQ8lrOd8z64JPSKkAxUKCAKZAQKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtB
    oOJiAACamAD/YkftgU34HhA2Rg5hKeZiHKaPM+zUSt4jlaTnORmH4d8A/jASwSgw
    VGB6XILqX0RAVPPLx5zXGZ/WskTY1onHuCsHuDMEaXIKBhYJKwYBBAHaRw8BAQdA
    ECfy7Io7p8rRCQ+w+oPmpYK9nIK9ul9rghOCqerU2i6JAYUEGBYKATcFgmlyCgYF
    iRLPNHYJECtv1YtBoOJiRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEt
    cGdwLm9yZ4M13ftkODzpCQGsB+421T3OonXNlfjPGB6t7zaTdxrYApsgvqAEGRYK
    AG8FgmlyCgYJEELMHs4swHDgRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVv
    aWEtcGdwLm9yZzRwT8U9tcWMp/0ddAbK9Pj7MMPvksAF/gouiXwon0ANFiEEKEHG
    VnaYVVNDLh5+QswezizAcOAAAJkWAP9oaT/HUxHNRtKHceGJ8R3Tg8ZoKwzFTkKW
    I8OvUK5dmQEA8am8MZBkCMJhk9pQL4/s3zocj02XZQBAdA0zFGHlmwEWIQSVEf2b
    1kzPFx8LKKcrb9WLQaDiYgAA4HoBALs4Xw6pDTirdrxbBObN+TjOAiQ7ea0eY4wM
    e4uq6X1rAQD55zXMiIHBK3K43fkvzkFDHBw7HBayP9g2cnDS4bPiDrgzBGlyCgYW
    CSsGAQQB2kcPAQEHQHqz1r4tn17FIFnJ+2EB67d2j/EaQ45uRvMjTlFekvrZiQGF
    BBgWCgE3BYJpcgoGBYkSzzR2CRArb9WLQaDiYkcUAAAAAAAeACBzYWx0QG5vdGF0
    aW9ucy5zZXF1b2lhLXBncC5vcmee9nn/HfCZmKx0gEwuP/UeqIsMYHQs8s+hJCnk
    LGPkFQKbAr6gBBkWCgBvBYJpcgoGCRBQnCndtw+Y+0cUAAAAAAAeACBzYWx0QG5v
    dGF0aW9ucy5zZXF1b2lhLXBncC5vcmdgywCWJ2SMNlv/Q11fnKYDqpjkj/pdCISe
    QrdhjoHnpRYhBBEDzJQhL4Xk9OoPrVCcKd23D5j7AABMqgEAuvN/zU4Dp6Gxz+oi
    aLjhJ1g/OUKeiXY1yl7CcinPk8YBALjglJ5R57foLUjQfu+NWZCsn48kWFdBqNzn
    Il8ZYXkLFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIAAMbmAP0bzf8Yfsf4Z/33GEvI
    yhMRKo93duvHEBM2B0N+Lzjx/wEAjwOglA8MtSclVfIB3VlKAjNlVEnXxxTVKQkp
    A7LpLwy4OARpcgoGEgorBgEEAZdVAQUBAQdAXznR4LrhCln5N6oXS3NzLT80kKMI
    H5hfej3E/nZF4XsDAQgHiMYEGBYKAHgFgmlyCgYFiRLPNHYJECtv1YtBoOJiRxQA
    AAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ+4V5CTBmCn92ITd
    jROoWd8gG6l0GZ3iv468SLcqyYt3ApsMFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIA
    AIx6AQC0u+JwAIqNhAhP1hO4eHVY5jrem4wXr/4DRJ1oXOIe+AD8D9shkbiuUq3N
    IT0rng2rbFCjhZrNmcBV6URfD3Pf/go=
    =7IDH
    -----END PGP PUBLIC KEY BLOCK-----
    

    Debian/apt-based

    To receive future updates and install, run:

    sudo apt -U install extrepo && \
    sudo extrepo enable konform-browser && \
    sudo apt -U install konform-browser
    

    This will enable Konform apt repository.

    For a one-off manual installation:

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-100-linux-x86_64-deb.deb ./konform-browser-140.12.0-100-linux-x86_64-deb.deb
    sudo apt-get install ./konform-browser-140.12.0-100-linux-x86_64-deb.deb
    

    Fedora/rpm-based

    To receive future updates, configure Konform rpm repository and then run
    sudo dnf install konform-browser.

    ⚠️ There is a known issue with the instructions for Codeberg RPM repository resulting in Signature verification failed error due to mismatching PGP key. See #20 for status and fix.

    For a one-off manual installation:

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-100-linux-x86_64-rpm.rpm.sig ./konform-browser-140.12.0-100-linux-x86_64-rpm.rpm
    sudo dnf install ./konform-browser-140.12.0-100-linux-x86_64-rpm.rpm
    

    Arch Linux

    See konform-browser/Arch.

    Alpine Linux

    See the Alpine Linux package registry.

    Tarball

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.12.0-100-linux-x86_64-package.tar.xz.sig ./konform-browser-140.12.0-100-linux-x86_64-package.tar.xz
    tar -xvf ./konform-browser-140.12.0-100-linux-x86_64-package.tar.xz
    
    Downloads
  • 140.12.0-100rc3 Pre-release

    kinbot released this 2026年06月10日 14:29:54 +02:00 | 129 commits to main since this release

    security staging release

    Summary

    • The latest security- and bug fixes have been pulled in from staged Firefox 140.12.0 ESR BUILD1
    • fix: Replace leftover legacy vendor strings in UI and localisations
    • ui: Extend WebGL configuration with a couple of toggles

    Build changes

    • Root directory path inside release source-tarball is now of format: konform-browser-140.12.0-100/.
      • Developers and users building from source may need to update their tooling.
    • Remove unused inherited legacy tooling integration files like .github/ etc.
    • make: Support beta upstream builds.
    • make: Support running on mounted directories and reusing source state.
    • build: Allow empty and # commented lines in assets/patches.txt
    • security: Check in Mozilla Releases PGP pubkey.

    Uplifted changes from Firefox Rapid Release:

    • security: Backport "framebusting protection" fixes
      • Bug 1419501: Require user interaction for cross-origin iframe window.top.location navigation (FF144,BB15)
      • Bug 2006600: Keep track of dismissed popup-blocker notifications (FF148)
      • Bug 1873716: Handle about:blank iframes that do fingerprinting (FF148)
      • Bug 2001668: Make framebusting pref independent of pop-up blocking (FF150)
      • Bug 2025170: Pass correct report index for blocked popups (FF151)
    • Bug 1980594: Use CanvasUtils::ImageExtraction instead of bool usePlaceholder. (FF143)
    • Bug 1917607: Introduce random noises to WebGLRendering when ResistFingerprinting enabled (FF145)
    • Bug 2005273: Add additional known canvas fingerprinting text and aliases (FF148)
    • Bug 2004797: Only call UpdateContext when creating a new context in OffscreenCanvas (FF148)
    • Bug 1976287: Sanitize WebGL Vendor to an allowlisted set of names (FF148)
    • Bug 2001160: Null check aOffscreenCanvas's owner global in ImageExtractionResult (FF148)
    • Bug 2003504: Bug 1880429, clear source browsing context early, if possible (FF150,BB15)
    • Bug 1992585: Set AppLinks intent selector to null. (FF150,BB15)
    • Bug 2022746: Convert pointer to boolean instead of comparing with 0 (FF150,BB15)
    • Bug 2024238: GMP i420 validation fix (FF150,BB15)
    • Bug 2024760: Handle WebSocketChannel::IsPersistentFramePtr correctly (FF150,BB15)
    • Bug 2025281: Cleanup MediaIPCUtils. (FF150,BB15)
    • Bug 2026297: gfx/2d/FilterNodeSoftware bounds check fix (FF150,BB15)
    • Bug 2026601: Taint reset streams (FF150,BB15)
    • Bug 2027287: gfx/ycbcr/scale_yuv_argb bounds check fix (FF150,BB15)
    • Bug 2029446: Don't create frames for elements that are not allowed in an svg-glyphs document (FF150,BB15)
    • Bug 2029699: Simplify InlineBackgroundData handling. (FF150,BB15)
    • Bug 2030385: Fix non-contiguous nsIContentAnalysisResponse::Action serializer (FF151)
    • Bug 2029281: Update libcubeb to 626d7d9f906e9f3cfb70be9e58af0f5a5f399a74 (FF151)
    • Bug 2027276: Use size_t when inflating UTF8 (FF151)
    • Bug 2025947: Check data corruption in script decompression (FF151)
    • Bug 2025942: Fix off-by-one in a LogModuleManager::PrintFmt check (FF151)
    • Bug 2025888: Make IncrementalTokenizer read entire buffer (FF151)
    • Bug 2025877: OffScreenCanvas validation (FF151)
    • Bug 2025434: Return early in ClearKey (FF151)
    • Bug 2025346: Create RemoteObjectProxy properly (FF151)
    • Bug 1940116: Ignore clicks shortly after extension popup closes (FF151)
    • Bug 2024665: Make nsIReplacedHttpResponse non-scriptable (FF151)
    • Bug 2027308: Fix handling of empty text leaves (FF151)
    • Bug 2027310: improve thread coordination in ShowProtectedAuthPrompt (FF151)
    • Bug 2025968: Don't allow fragmenting a MiddleCroppingBlockFrame (FF151)
    • Bug 2024443: Make CryptoKey::GetAlgorithm more idiomatic (FF151)
    • Bug 2024260: nsRequestObserverProxy cleanup (FF151)
    • Bug 2024244: Make socket transport hold a reference to TLSServerConnectionInfo (FF151)
    • Bug 2023943: Make CookieNotification::GetOperation ID clone the ID (FF151)
    • Bug 2021222: Cancel SpeechSynthesis when the page navigates away (FF151)

    Uplifted changes from Tor BaseBrowser

    • BB 30541: Disable WebGL readPixel() for web content when ResistFingerprinting enabled
    • BB 43323: Expose a stable asset from chrome://
      • Best we can do of current situation is spoofing plausible existing fingerprint..
    Downloads
  • 140.12.0-100rc2 Pre-release

    kinbot released this 2026年06月10日 05:20:26 +02:00 | 140 commits to main since this release

    security staging release

    Summary

    • The latest security- and bug fixes have been pulled in from staged Firefox 140.12.0 ESR BUILD1
    • fix: Replace leftover legacy vendor strings in UI and source
    • ui: Extend WebGL configuration with a couple of toggles

    Build changes

    • Root directory path inside release source-tarball is now of format: konform-browser-140.12.0-100/.
      • Developers and users building from source may need to update their tooling.
    • Remove unused inherited legacy tooling integration files like .github/ etc.
    • make: Support beta upstream builds.
    • make: Support running on mounted directories and reusing source state.
    • build: Allow empty and # commented lines in assets/patches.txt
    • security: Check in Mozilla Releases PGP pubkey.

    Uplifted changes from Firefox Rapid Release:

    • Backport framebusting protection
      • Bug 2006600: Keep track of dismissed popup-blocker notifications (FF148)
      • Bug 1873716: Handle about:blank iframes that do fingerprinting (FF148)
      • Bug 2001668: Make framebusting pref independent of pop-up blocking (FF150)
      • Bug 2025170: Pass correct report index for blocked popups (FF151)
      • Bug 1419501: require user interaction for cross-origin iframe window.top.location navigation (FF144,BB15)
    • Bug 2030385: Fix non-contiguous nsIContentAnalysisResponse::Action serializer (FF151)
    • Bug 2029281: Update libcubeb to 626d7d9f906e9f3cfb70be9e58af0f5a5f399a74 (FF151)
    • Bug 2027276: Use size_t when inflating UTF8 (FF151)
    • Bug 2025947: Check data corruption in script decompression (FF151)
    • Bug 2025942: Fix off-by-one in a LogModuleManager::PrintFmt check (FF151)
    • Bug 2025888: Make IncrementalTokenizer read entire buffer (FF151)
    • Bug 2025877: OffScreenCanvas validation (FF151)
    • Bug 2025434: Return early in ClearKey (FF151)
    • Bug 2025346: Create RemoteObjectProxy properly (FF151)
    • Bug 1940116: Ignore clicks shortly after extension popup closes (FF151)
    • Bug 2024665: Make nsIReplacedHttpResponse non-scriptable (FF151)
    • Bug 2027308: Fix handling of empty text leaves (FF151)
    • Bug 2027310: improve thread coordination in ShowProtectedAuthPrompt (FF151)
    • Bug 2025968: Don't allow fragmenting a MiddleCroppingBlockFrame (FF151)
    • Bug 2024443: Make CryptoKey::GetAlgorithm more idiomatic (FF151)
    • Bug 2024260: nsRequestObserverProxy cleanup (FF151)
    • Bug 2024244: Make socket transport hold a reference to TLSServerConnectionInfo (FF151)
    • Bug 2023943: Make CookieNotification::GetOperation ID clone the ID (FF151)
    • Bug 2021222: Cancel SpeechSynthesis when the page navigates away (FF151)
    • Bug 2005273: Add additional known canvas fingerprinting text and aliases (FF148)
    • Bug 2004797: Only call UpdateContext when creating a new context in OffscreenCanvas (FF148)
    • Bug 1980594: Use CanvasUtils::ImageExtraction instead of bool usePlaceholder. (FF143)
    • Bug 1976287: Sanitize WebGL Vendor to an allowlisted set of names (FF148)
    • Bug 2001160: Null check aOffscreenCanvas's owner global in ImageExtractionResult (FF148)
    • Bug 1917607: Introduce random noises to WebGLRendering when ResistFingerprinting enabled (FF145)

    Uplifted changes from Tor BaseBrowser

    • BB 30541: Disable WebGL readPixel() for web content when ResistFingerprinting enabled
    • BB 43323: Expose a stable asset from chrome://
      • Best we can do of current situation is spoofing plausible existing fingerprint..
    Downloads
  • 140.12.0-100rc1 Pre-release

    kinbot released this 2026年06月10日 01:11:56 +02:00 | 141 commits to main since this release

    staging release for testers

    Downloads
  • 140.11.0-102 Stable

    kinbot released this 2026年05月30日 07:20:38 +02:00 | 192 commits to main since this release

    Summary

    • feat(ui): Add configuration toggles for WakeLocks. This controls whether scripts on web pages can keep device awake and prevent screenblanking without playing media.
    • ui: Add javascript.options.main_process_disable_jit under JIT toggle
    • ui: Add webgl.enable-webgl under WebGL toggle
    • fix: Remove unused probing of power states originally used for telemetry
    • fix: Preserve changes to settings for Tracking Protection and History between browser restarts.
    • feat: Allow disabling and uninstalling Multi-Account Containers like normal addons by moving it from system to distribution.
      • Container Tabs functionality can now be fully disabled from Tabs section under about:preferences#general.
      • Disabling the addon is sufficient for fully disabling it and the feature. If you uninstall it and later want it back, clear preference extensions.installedDistroAddon.@testpilot-containers under about:config and restart browser.
    • ui: Fix inconsistencies around addon installation and upgrades
      • about:addons: Do not display warning about already installed addon being unsigned if it's installed via system, distribution or enterprise-policy.
      • about:addons: Hide controls for remotely updating unsigned addons lacking remote updates.
      • Revoke special privileges for "recommended" addons from Mozilla to bypass third-party installation prompt.
    • about:welcome: Extend presets to better account for imported profiles

    Fasttrack changes from Firefox ESR140

    • Bug 1983032: Don't revert PDF handler at every startup.
    • Bug 2041887: Fix compatibility with fontconfig 2.18.
    • Bug 2031577: Skip active entries when evicting cache.
    • Bug 2041408: Make sure URL is valid after deserialization
    • Sync preloaded HSTS HPKP remote-settings tld-suffixes ct-logs.

    Presets preference changes

    • Purely Private 🔒
      • Disable DOM Push (dom.push.enabled=false)
      • Disable DOM battery API (dom.battery.enabled=false)
      • Set Cookie Banner handling to try rejecting cookies but never accept (cookiebanners.service.mode=1)
      • Block webapps from preventing screen blanking (dom.screenwakelock.enabled=false)
      • Prevent prefetching over HTTPS for TRR/DoT/DoH (network.dns.disablePrefetchFromHTTPS=true)
      • Enable First-Party Isolation to prevent leaking of third-party cookies (privacy.firstparty.isolate=true).
      • Enable ResistFingerprinting (privacy.resistFingerprinting=true)
      • Enable Enhanced Tracking Protection (privacy.trackingprotection.enabled=true)
      • Set Tracking Protection Mode to strict
      • Disable WebGL2 (webgl.enable-webgl2=false)
    • Core Security 🛡️
      • Set Cookie Banner handling to try rejecting cookies but never accept (cookiebanners.service.mode=1)
      • Enable Enhanced Tracking Protection (privacy.trackingprotection.enabled=true)
      • Set Tracking Protection Mode to strict
      • Enable ResistFingerprinting (privacy.resistFingerprinting=true)
    • Just Make It Work 🦊
      • Disable Cookie Banner handling (cookiebanners.bannerClicking.enabled=false, cookiebanners.cookieInjector.enabled=false)
      • Enable (but still don't expose) DOM Battery module (dom.battery.enabled=true)
      • Allow webapps to prevent screen blanking (dom.screenwakelock.enabled=true)
      • Enable prefetching over HTTPS for TRR/DoT/DoH (network.dns.disablePrefetchFromHTTPS=false)
      • Disable First-Party Isolation (privacy.firstparty.isolate=false).
      • Disable ResistFingerprinting (privacy.resistFingerprinting=false)
      • Enable WebGL2 (webgl.enable-webgl2=true)

    Default preference changes

    • privacy: network.dns.disablePrefetchFromHTTPS=true
    • privacy: security.csp.reporting.enabled=false
    • security: dom.battery.enabled=false
    • security: dom.screenwakelock.enabled=false (screen still kept awake when playing media)
    • fix: Update privacy.query_stripping.strip_list with changes from Brave Browser.
    • security: webgl.enable-webgl2=false
    • security: privacy.fingerprintingProtection.remoteOverrides.enabled=false
    • security: Revoke special privileges for Mozilla domains
    • telemetry: telemetry.fog.init_on_shutdown=false
    • privacy: webgl.enable-debug-renderer-info=false

    Installing

    Source release

    The provided source release is a ready-to-build browser with prepatched Firefox sources.

    Use Konform Browser git sources directly to make custom builds.
    See BUILD.md for details.

    Arch Linux AUR: https://aur.archlinux.org/packages/konform-browser

    Binary packages

    Prebuilt packages produced by Codeberg CI are available at Codeberg Packages for your convenience.

    v140.11.0-102

    Instructions

    🌐 HTML version

    If you are on arm64, replace x86_64 as appropriate in downloads and filenames.

    Release PGP key

    konform-cb-ci.pgp

    -----BEGIN PGP PUBLIC KEY BLOCK-----
    mDMEaXIKBhYJKwYBBAHaRw8BAQdAzN92p4yHsUx2pjqudvUDFBQd/dwDrsPy0lwf
    wDiPpGyI0QQfFgoAgwWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A
    IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ7KCtG86t6GXU2apW5cqfM6G
    94NVwoc0/X/wFhWvkuDRAxUKCAKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtBoOJi
    AACFNgEAmcgMNhYGBmHrMqAZIN/ahHjyR/oszi8lXu6Jknc+h+ABAObBZLrv4SdI
    zEm5rBwGEmAKKNDokDoPOTCxM/87TRYGtBtrb25mb3JtLWJyb3dzZXIgQ29kZWJl
    cmcgQ0mI1AQTFgoAhgWCaXIKBgWJEs80dgMLCQcJECtv1YtBoOJiRxQAAAAAAB4A
    IHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ4OULsvKqiWCKJQa001Pnaqh
    v9EiJQ8lrOd8z64JPSKkAxUKCAKZAQKbAQIeCRYhBJUR/ZvWTM8XHwsopytv1YtB
    oOJiAACamAD/YkftgU34HhA2Rg5hKeZiHKaPM+zUSt4jlaTnORmH4d8A/jASwSgw
    VGB6XILqX0RAVPPLx5zXGZ/WskTY1onHuCsHuDMEaXIKBhYJKwYBBAHaRw8BAQdA
    ECfy7Io7p8rRCQ+w+oPmpYK9nIK9ul9rghOCqerU2i6JAYUEGBYKATcFgmlyCgYF
    iRLPNHYJECtv1YtBoOJiRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEt
    cGdwLm9yZ4M13ftkODzpCQGsB+421T3OonXNlfjPGB6t7zaTdxrYApsgvqAEGRYK
    AG8FgmlyCgYJEELMHs4swHDgRxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVv
    aWEtcGdwLm9yZzRwT8U9tcWMp/0ddAbK9Pj7MMPvksAF/gouiXwon0ANFiEEKEHG
    VnaYVVNDLh5+QswezizAcOAAAJkWAP9oaT/HUxHNRtKHceGJ8R3Tg8ZoKwzFTkKW
    I8OvUK5dmQEA8am8MZBkCMJhk9pQL4/s3zocj02XZQBAdA0zFGHlmwEWIQSVEf2b
    1kzPFx8LKKcrb9WLQaDiYgAA4HoBALs4Xw6pDTirdrxbBObN+TjOAiQ7ea0eY4wM
    e4uq6X1rAQD55zXMiIHBK3K43fkvzkFDHBw7HBayP9g2cnDS4bPiDrgzBGlyCgYW
    CSsGAQQB2kcPAQEHQHqz1r4tn17FIFnJ+2EB67d2j/EaQ45uRvMjTlFekvrZiQGF
    BBgWCgE3BYJpcgoGBYkSzzR2CRArb9WLQaDiYkcUAAAAAAAeACBzYWx0QG5vdGF0
    aW9ucy5zZXF1b2lhLXBncC5vcmee9nn/HfCZmKx0gEwuP/UeqIsMYHQs8s+hJCnk
    LGPkFQKbAr6gBBkWCgBvBYJpcgoGCRBQnCndtw+Y+0cUAAAAAAAeACBzYWx0QG5v
    dGF0aW9ucy5zZXF1b2lhLXBncC5vcmdgywCWJ2SMNlv/Q11fnKYDqpjkj/pdCISe
    QrdhjoHnpRYhBBEDzJQhL4Xk9OoPrVCcKd23D5j7AABMqgEAuvN/zU4Dp6Gxz+oi
    aLjhJ1g/OUKeiXY1yl7CcinPk8YBALjglJ5R57foLUjQfu+NWZCsn48kWFdBqNzn
    Il8ZYXkLFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIAAMbmAP0bzf8Yfsf4Z/33GEvI
    yhMRKo93duvHEBM2B0N+Lzjx/wEAjwOglA8MtSclVfIB3VlKAjNlVEnXxxTVKQkp
    A7LpLwy4OARpcgoGEgorBgEEAZdVAQUBAQdAXznR4LrhCln5N6oXS3NzLT80kKMI
    H5hfej3E/nZF4XsDAQgHiMYEGBYKAHgFgmlyCgYFiRLPNHYJECtv1YtBoOJiRxQA
    AAAAAB4AIHNhbHRAbm90YXRpb25zLnNlcXVvaWEtcGdwLm9yZ+4V5CTBmCn92ITd
    jROoWd8gG6l0GZ3iv468SLcqyYt3ApsMFiEElRH9m9ZMzxcfCyinK2/Vi0Gg4mIA
    AIx6AQC0u+JwAIqNhAhP1hO4eHVY5jrem4wXr/4DRJ1oXOIe+AD8D9shkbiuUq3N
    IT0rng2rbFCjhZrNmcBV6URfD3Pf/go=
    =7IDH
    -----END PGP PUBLIC KEY BLOCK-----
    

    Debian/apt-based

    To receive future updates and install, run:

    sudo apt -U install extrepo && \
    sudo extrepo enable konform-browser && \
    sudo apt -U install konform-browser
    

    This will enable Konform apt repository.

    For a one-off manual installation:

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.11.0-102-linux-x86_64-deb.deb ./konform-browser-140.11.0-102-linux-x86_64-deb.deb
    sudo apt-get install ./konform-browser-140.11.0-102-linux-x86_64-deb.deb
    

    Fedora/rpm-based

    To receive future updates, configure Konform rpm repository and then run
    sudo dnf install konform-browser.

    ⚠ï ̧ There is a known issue with the instructions for Codeberg RPM repository resulting in Signature verification failed error due to mismatching PGP key. See #20 for status and fix.

    For a one-off manual installation:

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.11.0-102-linux-x86_64-rpm.rpm.sig ./konform-browser-140.11.0-102-linux-x86_64-rpm.rpm
    sudo dnf install ./konform-browser-140.11.0-102-linux-x86_64-rpm.rpm
    

    Arch Linux

    See konform-browser/Arch.

    Alpine Linux

    See the Alpine Linux package registry.

    Tarball

    sqv --keyring konform-cb-ci.pgp --signature-file ./konform-browser-140.11.0-102-linux-x86_64-package.tar.xz.sig ./konform-browser-140.11.0-102-linux-x86_64-package.tar.xz
    tar -xvf ./konform-browser-140.11.0-102-linux-x86_64-package.tar.xz
    
    Downloads