CVS commit: pkgsrc/www/firefox

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Wed Apr 30 03:17:59 UTC 2025

Modified Files:
        pkgsrc/www/firefox: Makefile PLIST distinfo
        pkgsrc/www/firefox/files: node-wrapper.sh

Log Message:
www/firefox: Update to 137.0.2

Changelog:
137.0.2:
Fixed

  * Fixed file picker not being displayed when exporting passwords on macOS in
    about:logins for some users. (Bug 1956266)

  * Fixed accessibility issues with the new PDF signature feature. (Bug 1956110
    and Bug 1952571)

  * Fixed an issue where using the context menu to paste in the Style Editor
    would insert the code twice. (Bug 1955854)

  * Fixed functional regressions in our XSLT support introduced in 137. (Bug
    1954841)

  * Fixed a tooltip flickering issue on Windows that affected some users when
    hovering. (Bug 1958631)

  * Fixed an issue where Firefox would not respond to clicks in some HTML5
    video players. (Bug 1959251)

  * Fixed an issue where radio inputs behaved incorrectly when preventDefault()
    was called on the click event. (Bug 1957956)

  * Fixed an issue that caused some Firefox users to restart their browser
    multiple times to complete an update. (Bug 1959492)

  * Security fix.

Changed

  * Fixed an issue with DRM video playback on some sites caused by the general
    availability rollout of Microsoft's PlayReady hardware decryption DRM
    support in Firefox 137. PlayReady support is now limited to specific sites
    while broader compatibility continues to be tested. (Bug 1959827)

Security fixes:
Mozilla Foundation Security Advisory 2025-25
#CVE-2025-3608: Race condition in nsHttpTransaction could lead to memory
 corruption

137.0.1:
Fixed

  * Fixed an issue where folder shortcuts on Windows were incorrectly treated
    as files during file uploads, preventing selecting files within the target
    folder. (Bug 1958222)

  * Fixed a crash experienced by Windows users when downloading files with
    Qihoo 360 Total Security Antivirus software installed. (Bug 1958112)

  * Fixed an occasional startup crash. (Bug 1958293)

137.0:
New

  * Tab groups begin rolling out today! Stay productive and organized with less
    effort by grouping related tabs together. One simple way to create a group
    is to drag a tab onto another, pause until you see a highlight, then drop
    to create the group. Groups can be named, color-coded, and are always
    saved. You can close a group and reopen it later.

  * Firefox Address Bar Refresh 2025 - new ways to search for things new,
    previously viewed, and more - all from the address bar:

    Features

    Unified Search Button: A new, easy-to-access button in the address bar
    helps you switch between search engines and search modes with ease. This
    feature brings the simplicity of mobile Firefox to your desktop experience.

    Search Term Persistence: Now when you refine a search in the address bar,
    the original term sticks around, making it easier to adjust your queries
    and find exactly what you're looking for.

    Secondary Action Buttons: Suggestions for common Firefox features.

    Contextual Search Mode: Firefox detects if you are on a page that has
    search capability and offers that option for you to directly search with
    the page engine from the address bar. Use this option at least 2 times and
    Firefox will suggest adding the search engine to your Firefox.

    Contextual Search Engine Options: Use a Contextual Search mode option at
    least 2 times and Firefox will suggest adding the search engine to your
    Firefox so that it??s always available to you.

    Intuitive Search Keywords: You can access various address bar search modes
    with convenient and descriptive keywords (e.g. @bookmarks,@tabs,@history,
    @actions).

  * Firefox now identifies all links in PDFs and turns them into hyperlinks.

  * Support HEVC playback on Linux.

  * Now you can sign PDFs without leaving Firefox. Save your signatures to
    re-use later.

  * You can now use the Firefox address bar as a calculator. Simply type an
    arithmetic expression and view the result in the address bar drop-down.
    Clicking on this result will copy it to your clipboard.

Fixed

  * Various security fixes.

Security fixes:
Mozilla Foundation Security Advisory 2025-20
#CVE-2025-3028: Use-after-free triggered by XSLTProcessor
#CVE-2025-3031: JIT optimization bug with different stack slot sizes
#CVE-2025-3032: Leaking file descriptors from the fork server
#CVE-2025-3029: URL bar spoofing via non-BMP Unicode characters
#CVE-2025-3035: Tab title disclosure across pages when using AI chatbot
#CVE-2025-3033: Opening local .url files could lead to another file being
 opened
#CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137,
 Firefox ESR 128.9, and Thunderbird 128.9
#CVE-2025-3034: Memory safety bugs fixed in Firefox 137 and Thunderbird 137


To generate a diff of this commit:
cvs rdiff -u -r1.631 -r1.632 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.188 -r1.189 pkgsrc/www/firefox/PLIST
cvs rdiff -u -r1.554 -r1.555 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.27 -r1.28 pkgsrc/www/firefox/files/node-wrapper.sh

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.631 pkgsrc/www/firefox/Makefile:1.632
--- pkgsrc/www/firefox/Makefile:1.631   Wed Apr 30 03:10:40 2025
+++ pkgsrc/www/firefox/Makefile Wed Apr 30 03:17:59 2025
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.631 2025/04/30 03:10:40 ryoon Exp $
+# $NetBSD: Makefile,v 1.632 2025/04/30 03:17:59 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            136.0
-MOZ_BRANCH_MINOR=      .4
+MOZ_BRANCH=            137.0
+MOZ_BRANCH_MINOR=      .2
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
@@ -11,7 +11,7 @@ MASTER_SITES+=        ${MASTER_SITE_MOZILLA:=fi
 MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/}
 EXTRACT_SUFX=  .tar.xz
 
-NODEJSKIT=             nodejs-output-136.0.2.tgz
+NODEJSKIT=             nodejs-output-137.0.tgz
 DISTFILES=             ${DEFAULT_DISTFILES} ${NODEJSKIT}
 SITES.${NODEJSKIT}=    ${MASTER_SITE_LOCAL}
 

Index: pkgsrc/www/firefox/PLIST
diff -u pkgsrc/www/firefox/PLIST:1.188 pkgsrc/www/firefox/PLIST:1.189
--- pkgsrc/www/firefox/PLIST:1.188      Thu Nov  9 00:04:43 2023
+++ pkgsrc/www/firefox/PLIST    Wed Apr 30 03:17:59 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.188 2023/11/09 00:04:43 wiz Exp $
+@comment $NetBSD: PLIST,v 1.189 2025/04/30 03:17:59 ryoon Exp $
 bin/firefox
 lib/firefox/application.ini
 lib/firefox/browser/chrome/icons/default/default128.png
@@ -21,7 +21,6 @@ lib/firefox/glxtest
 lib/firefox/gmp-clearkey/0.1/libclearkey.so
 lib/firefox/gmp-clearkey/0.1/manifest.json
 lib/firefox/libgkcodecs.so
-lib/firefox/libipcclientcerts.so
 lib/firefox/liblgpllibs.so
 ${PLIST.ffvpx}lib/firefox/libmozavcodec.so
 ${PLIST.ffvpx}lib/firefox/libmozavutil.so

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.554 pkgsrc/www/firefox/distinfo:1.555
--- pkgsrc/www/firefox/distinfo:1.554   Wed Apr 30 03:10:40 2025
+++ pkgsrc/www/firefox/distinfo Wed Apr 30 03:17:59 2025
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.554 2025/04/30 03:10:40 ryoon Exp $
+$NetBSD: distinfo,v 1.555 2025/04/30 03:17:59 ryoon Exp $
 
-BLAKE2s (firefox-136.0.4.source.tar.xz) = 74d0b7a6bed0022ae03b32b71371d7ddfcab4544fb8247803f5e8e1932869d69
-SHA512 (firefox-136.0.4.source.tar.xz) = c2252aa62d015ced6534cb2ac071f68089997b46690083cc1eff4bad306ae6c86543719ed2d35f6f973bf74467d6a04aba460d309c06dea425e76c720e344e28
-Size (firefox-136.0.4.source.tar.xz) = 605975980 bytes
-BLAKE2s (nodejs-output-136.0.2.tgz) = c549d59e4ed7b5f6d7e404468e3dc553641dcb20c5e3df97366fd4f22fcf719d
-SHA512 (nodejs-output-136.0.2.tgz) = b0e5678a9daa867fb99aad64c0242f087486a69f095080c33364df5a090c9ca250f1a3db70659d59f7e936c40f02583b658239eb955f72a322f78134bc22c11d
-Size (nodejs-output-136.0.2.tgz) = 252142 bytes
+BLAKE2s (firefox-137.0.2.source.tar.xz) = c7d6f34a783453383d45c0afca52ec41e87d4d24504bc3e33c8f1c44358e6b3b
+SHA512 (firefox-137.0.2.source.tar.xz) = 82140c4325233ea2e2f579088cebb98c0e8db8848b4018cff95d4ed42bf847049ed6520fc051d930ee267a5acb008908170825d381589da0d109ca04a61e1c24
+Size (firefox-137.0.2.source.tar.xz) = 599825260 bytes
+BLAKE2s (nodejs-output-137.0.tgz) = 75c811b9883a91702477ca4e339c7f8af6419390d48d683dbd460a8033390987
+SHA512 (nodejs-output-137.0.tgz) = 2014cc019fcd60f6898ab0db9a43142285f494c4f763c82cb53bcd62dd4a72dfe970cb1df03c3bbd6a4a2f0228e7fbb323483b50b6598a2dec7a1e6899b3a7dd
+Size (nodejs-output-137.0.tgz) = 254823 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = bc719edef37d18655ba79b030270438ee166fdaf
 SHA1 (patch-build_moz.configure_init.configure) = 65deb3c233df0aab81eb1fca05d708e5a4ed169a
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678

Index: pkgsrc/www/firefox/files/node-wrapper.sh
diff -u pkgsrc/www/firefox/files/node-wrapper.sh:1.27 pkgsrc/www/firefox/files/node-wrapper.sh:1.28
--- pkgsrc/www/firefox/files/node-wrapper.sh:1.27       Wed Apr 30 03:10:40 2025
+++ pkgsrc/www/firefox/files/node-wrapper.sh    Wed Apr 30 03:17:59 2025
@@ -1,6 +1,6 @@
 #! /bin/sh
 
-VERS=v23.9.0
+VERS=v23.10.0
 
 if [ "$1" = "-v" ] || [ "$1" = "--version" ]; then
        printf "${VERS}\n"