zerotracepen (4.20)

  • Upgrade Thunderbird to 78.11.0-1~deb10u1

    • Upgrade KeePassXC to 2.6.2+dfsg.1-1~bpo10+1

    • 20-time.sh: actually abort if Tor has failed to bootstrap (zerotracepen/zerotracepen!514)

      Commits:

      • 20-time.sh: temporarily workaround buggy check
      • 20-time.sh: fix success and error handling
      • 20-time.sh: simplify control flow
      • Lint.
      • 20-time.sh: actually abort if Tor has failed to bootstrap
    • Resolve "TCA sometimes fails to start: "bwrap: Can't find source path
      /tmp/netns-specific/torlaunch: No such file or directory"" (zerotracepen/zerotracepen!489)

      Commits:

      • zerotracepen-ibus-proxy-netns@.service: remove now unneeded NotifyAccess=all
      • a11y: systemd-notify -> import systemd.daemon
      • silence useless information to syslog
      • avoid errors when started directly
      • clean systemd unit
      • more timeout on a11y-proxy-netns
      • FIX gnome.sh search for exact name gnome-shell
      • drop tca watchdog
      • safer watchdog
      • wait for user systemd session to be ready
      • FIX systemctl path
      • remove testing leftover
      • a11y/ibus proxy wait socket to signal readiness
      • tca-related proxies only active when unneeded
      • zerotracepen-tor-launcher not needed anymore
      • a11y/ibus proxies for TCA only started with TCA
      • FIX: call systemctl --user
      • tentatively setting TCA as a systemd service
    • Resolve "TCA asks consent question when changing network" (zerotracepen/zerotracepen!460)

      Commits:

      • FIX: switching to progress, not success, on connection
      • small code cleaning
      • FIX #18336 again
      • tca: FIX success-error-retry
      • tca reacts to DisableNetwork changes
      • reduce stem logging noise
      • tca application monitors DisableNetwork
    • tca-portal service (zerotracepen/zerotracepen!422)

      Commits:

      • start tca-portal at boot
      • restrict access to tca-portal.socket!
      • tca-portal: add open-documentation + refactoring
      • FIX FTBFS on tca-portal.service
      • gnome-system-monitor opens at network tab
      • ooops: enable tca-portal unit
      • tca-portal opens onioncircuits
      • tca-portal (sic!) has systemd socket-activation
      • tca can talk to its portal
      • tca-connection-helper based on tinyrpc
      • draft of a tor-connection-helper service
    • Resolve "TCA: buggy window detection logic on app startup" (zerotracepen/zerotracepen!457)

      Commits:

      • TCA sends startup notification to DE
    • Resolve "The amnesia user might have too much power over TCA's configuration
      directory" (zerotracepen/zerotracepen!442)

      Commits:

      • change documentation wrt to tca.conf
      • tca.conf path changed to /var/lib/tca/
    • Install Linux 5.10.46 and upgrade shim (zerotracepen/zerotracepen!521)

      Commits:

      • Update shim* to the version from sid
      • Update Linux to 5.10.46
    • Don't run a useless IBus proxy for OnionCircuits (zerotracepen/zerotracepen!510)

      Commits:

      • Don't run a useless IBus proxy for OnionCircuits
    • Rakefile: actually build with the base branch merged (zerotracepen/zerotracepen!504)

      Closes issues:

      • Merging the base branch is not effective ⇒ different Git state between
        isobuilders and isotesters (zerotracepen/zerotracepen#18441)

      Commits:

      • Rakefile: actually build with the base branch merged
    • Rewrite notification when closing TCA on progress bar (zerotracepen/zerotracepen!496)

      Commits:

      • Rewrite notification when closing TCA on progress bar (#18362)
    • Implement "Connect to Tor" button in error screen (zerotracepen/zerotracepen!494)

      Commits:

      • Revert "avoid errors when started directly"
      • step error correctly indicates that bridges are on
      • better textarea alignment
      • put the current bridges in the textarea
      • keeps more state about bridge configuration
      • avoid errors when started directly
      • error: step proxy now goes back to error screen
      • connect to tor actually does something
      • bridges + "connect to tor" on error
      • DRAFT of better error screen
    • Tor Connection Assistant (zerotracepen/zerotracepen!375)

      Commits:

      • open unsafe-browser (if configured)
      • Test suite: properly tear down after cloding TCA.
      • Test suite: add some extra error handling.
      • Test suite: pass showingOnly even though it should not be needed.
      • Test suite: add error message.
      • Test suite: fix bad syntax.
      • Test suite: add delay between tries in override_child().
      • Test suite: add optional delay between retry_action() tries.
      • Make is_tor_working() more accurate.
      • Test suite: only set default bridges when relevant.
      • design change: Tor Launcher is just removed.
      • document tca behaviour
      • bootstrap/phase may include WARN, too
      • Test suite: work around closing TCA too fast.
      • more logging to debug test suite
      • remove leftover commit
      • proper place for hacking tips
      • Add icon for the Tor Connection assistant
      • Generate the list of default bridges at build time.
      • Test suite: drop workaround.
      • success indication and fallback to default bridges
      • more hacking tips to test tca
      • cover corner cases better
      • NetworkManager state: signal instead of polling
      • tca calls NM immediately
      • tca reacts to nm state changes
      • Test suite: save Tor journal if TCA fails to start.
      • Test suite: bump image.
      • Test suite: TCA has a new internal name.
      • Test suite: attempt to make try_for() more robust.
      • Test suite: adapt to TCA UI change.
      • Test suite: fix retring for child() with regexp matching.
      • TCA: move to Gtk.Application style
      • progress bar get data from bootstrap-phase
      • TCA: drop debugging.
      • Test suite: convert potentially endless loop to try_for() with timeout.
      • Persistent Welcome Screen settings: migrate obsolete network setting to new
        offline mode setting.
      • Test suite: optimize upgrade check.
      • smoother progress bar
      • connect-drop: clean unnecessary hacks
      • s/amnesia/LIVE_USERNAME/
      • drop tor-sandbox-helper: not used right now
      • FIX proxy not working
      • document tca wrappers
      • some css rule to style TCA a bit
      • refactoring: utils -> torutils
      • more user freedom: consent question can be changed
      • current Tor state is observed when filling bridges
      • SAVECONF
      • resize window on every change_box
      • FIX GAsyncSpawn 100% CPU
      • no internet probe anymore: also fix 100% CPU bug
      • Welcome Screen: use "airplane mode" icon for Offline mode.
      • Test suite: add scenario testing that TCA can connect after an initial
        connection failure.
      • Test suite: make function usable in more contexts.
      • Test suite: also make it possible to block default bridges.
      • Test suite: detect TCA errors and fail early.
      • Test suite: add scenario testing that TCA falls back to default bridges if Tor
        is blocked.
      • Test suite: run a dedicated default bridge.
      • Test suite: refactor.
      • Test suite: adapt to another changed label.
      • FIX doc about how to check for non-working Tor
      • improve display size detection
      • FIX layout
      • Test suite: refer to the correct variable.
      • Test suite: adapt to changed label.
      • Test suite: fix syntax error.
      • Rephrase warning
      • Improve user-visible strings
      • Test suite: improve names.
      • Test suite: use TCA's "hide Tor usage" path when testing PTs.
      • Disable launcher buttons: broken because of netns
      • use the 3 images + better layout
      • normal bridges are not accepted in Hide Mode
      • Bridge validation + better handle IPv6
      • Always obfs4 + bridge documentation link
      • GitLab CI: zerotracepen-documentation
      • zerotracepen-documentation gains --force-local
      • document tips&tricks for tca
      • don't kill TCA on network reconnection
      • syslog logging really has identity set
      • lots of logging to understand bridge bug
      • put doctests in gitlab in shape again
      • FIX IBus connection for onion-circuits
      • more debug about bridge-connection part
      • Port TCA to onion-grater-over-netns magic
      • TCA will honor debug flag
      • more logging
      • a bit less noise for translatable mixin
      • TCA logs to syslog/stderr automagically
      • gitlab-ci: TCA doctest dependency
      • FIX .gitlab-ci.yml (syntax error)
      • normal bridges were to be stripped, not expanded
      • default bridges imported
      • FIX: bridges have ip-port, not only IP!
      • put TCA testing in gitlab-ci
      • bridges doctests
      • reformatting
      • Revert "Test suite: add workaround for TCA not sanitizing bridge input
        properly."
      • Decent validation for bridge lines
      • rewrite tca wrapper in python
      • Test suite: reorder steps to avoid TCA blocking the desktop.
      • Revert "Test suite: wait for TCA's GUI to be available before using it."
      • Test suite: work around lost click around TCA start.
      • Test suite: refactor.
      • Test suite: add workaround for TCA not sanitizing bridge input properly.
      • Test suite: wait for TCA's GUI to be available before using it.
      • Test suite: add timeout.
      • Test suite: work around Ruby <2.7 args vs keywords handling.
      • Test suite: fix exception message.
      • Test suite: adapt scenario for new "Offline Mode" Greeter setting.
      • Welcome Screen: obsolete "Network Connection" and add new "Offline Mode"
        setting.
      • Test suite: rewrite Tor Launcher tests for Tor Connection Assistant.
      • Test suite: allow regexp matching in Dogtail's child() method.
      • Test suite: drop unnecessary methods from subclass.
      • ignore main.ui
      • tca: state saved, still to little use
      • tca: don't run two times
      • minor UI changes
      • tca: side icon will be added from Python
      • Temporarily add pluggable transport config to torrc.
      • Convert Tor Launcher .desktop file to one for TCA.
      • Remove Tor Launcher, for real!
      • tca: small text improvement
      • connect-drop works fine without environment
      • Revert "Remove Tor Launcher"
      • zerotracepen-tor-launcher actually runs tca
      • Remove Tor Launcher
      • another workaround for #18123
      • onion-grater: quoting matters
      • Move very context-specific script out of root's PATH.
      • onion-grater: options are case insensitive
      • adapt profile to onion-grater's case-sensitiveness
      • Temporarily workaround tor bug by always disabling the seccomp sandbox.
      • FIX onion-grater tca profile
      • run tca and it will auto-sudo
      • tca can connect to onion-grater
      • translations refreshed for TCA
      • FIX connect-drop
      • add tca .ui file to POTFILES.in for l10n
      • Test suite: delete obsolete scenario.
      • Improve comment.
      • Test suite: use correct bridge/PT terminology.
      • Test suite: fix tor seccomp check in the normal bridge case.
      • Improve comment.
      • Fix assertion failure message.
      • Let's settle for 'normal' bridge when no PT is used.
      • Add Tor Launcher to GNOME favorite applications.
      • Tor Launcher: allow amnesia to start and add suitable .desktop file.
      • Tor Launcher: kill old instances when starting.
      • Remove the "Tor is ready" notification.
      • side image
      • small TorConnectionProxy fixes
      • step proxy
      • tca: --debug-statefile for better simulation
      • error page + early proxy config
      • back button
      • main workflows work!
      • Step forwards for bridge configuration
      • bridge selection: beginning
      • easy Tor configuration works!
      • sudo tca will do; start Tor integration
      • more steps in Tor launcher UI
      • GUI: first step implemented (more or less)
      • a first attempt at a GUI
      • Test suite: always verify that Tor's Sandbox setting.
      • Handle multiline GETCONF responses.
      • Welcome Screen: add note about the missing bridge mode option.
      • Test suite: fix tor Seccomp verification.
      • Tor Launcher: enable tor's Seccomp sandbox when not using pluggable transports.
      • tor-launcher: repair the --force-net-config feature.
      • Drop now unused restart-tor script.
      • Unsafe Browser: don't restart tor with restart-tor.
      • Drop ugly hook killing Tor Launcher.
      • onion-grater: transparently recover lost tor controller connections.
      • Work around event handling bug in stem?
      • Make dynamic configuration we always do static.
      • Test suite: another attempt to deal with lost key press.
      • Test suite: deal with lost key press.
      • Test suite: adapt to Tor Launcher always starting (refs: #17330)
      • small refactoring
      • tor launcher: set every option
      • tor-launcher supports proxy authentication
      • detect Tor bootstrapping status
      • Tor Launcher some more implementation
      • WIP: a first attempt at rewriting Tor Launcher
      • onion-grater: fix error handling.
      • onion-grater: workaround tor bug by switch from control socket to control port.
      • Always start Tor Launcher (refs: #17330).
      • onion-grater: connect to control socket without control port fallback.
      • Improve check by verifying at least one "nameserver" line.
      • Drop unused imports.
    • Upgrade Tor Browser to 10.5.2 (zerotracepen/zerotracepen!524)

      Commits:

      • Fetch Tor Browser from our own archive
      • Tor Browser upgrade process: adjust branch name
      • Upgrade Tor Browser to 10.5.2-build1
      • Tor Browser upgrade process: adjust instructions to new file names
      • Factorize export of TOR_USE_LEGACY_LAUNCHER (fixes: #18459)
    • Fix feature branch commit encoded into the artifacts' names (fixes: #18468)
      (zerotracepen/zerotracepen!522)

      Closes issues:

      • Built images encode incorrect topic branch commit (zerotracepen/zerotracepen#18468)

      Commits:

      • Fix feature branch commit encoded into the artifacts' names (fixes: #18468)
    • Update the jenkins-tools submodule, to fix po.feature (zerotracepen/zerotracepen!520)

      Commits:

      • Update the jenkins-tools submodule, to fix po.feature
    • Upgrader: more robust upgrade download and verification failure detection
      (zerotracepen/zerotracepen!519)

      Closes issues:

      • Upgrader: confusing download failure but upgrade still applied
        (zerotracepen/zerotracepen#18162)

      Commits:

      • zerotracepen-iuk-cancel-download: return exit code as-is if it's neither 0 nor 1
      • zerotracepen-iuk-cancel-download: fix shell syntax errors
      • Avoid that the Upgrader breaks if pgrep won't match any process
      • Upgrader: cancell the IUK download if an error appears
      • Upgrader: more defensive programming
      • Upgrader: ensure we fail closed on download and verification errors
    • Test suite: consistently save artifacts for various Tor connection failures
      (zerotracepen/zerotracepen!517)

      Commits:

      • Test suite: handle case where the htpdate logs do not exist.
      • Test suite: add headings to output in Tor failure artifacts.
      • Test suite: make save_tor_journal() possible to run without Tor logs.
      • Revert "Revert "Test suite: consistently save artifacts for various Tor
        connection failures.""
    • Upgrade to OnionShare 2.2 (zerotracepen/zerotracepen!515)

      Commits:

      • OnionShare: use ~/Downloads/ as the upload directory in "Receive Files" mode
      • AppArmor: allow a few more things that OnionShare v2 needs
      • OnionShare config: use the same indentation as what the app saves
      • OnionShare config: import new settings
      • onion-grater: update rules for OnionShare v2
      • OnionShare: hide Tor settings
      • Install OnionShare from Bullseye
    • Upgrade Tor Browser to 10.5a17 (zerotracepen/zerotracepen!513)

      Commits:

      • Test suite: update expected image
      • Unsafe Browser: Disable Tor Browser's tor bootstrapping mechanism
      • Test suite: add support for testing Tor Browser alpha versions
      • Fetch Tor Browser from our own archive.
      • Disable Tor Browser's tor bootstrapping UI
      • Upgrade Tor Browser to 10.5a17.
    • WhisperBack: set lower expectations for handling of error reports
      (zerotracepen/zerotracepen!511)

      Closes issues:

      • Temporarily set low expectations for handling of error reports, via our website
        and/or in WhisperBack (zerotracepen/zerotracepen#18427)

      Commits:

      • WhisperBack: set lower expectations
    • Fix issues in testing's test suite (zerotracepen/zerotracepen!509)

      Commits:

      • Revert "Test suite: consistently save artifacts for various Tor connection
        failures."
      • Test suite: consistently save artifacts for various Tor connection failures.
      • Test suite: work around the desktop icons being obscured by TCA.
      • Nitpick.
      • Test suite: correctly identify supported Tor Browser locales (fixes #18319)
      • Test suite: drop unknown keyword parameters from translate().
      • Test suite: rework translate() to not always use the zerotracepen domain (fixes:

        18447).

    • onion-grater: fix support for restrict-stream-events for namespace matched
      profiles (zerotracepen/zerotracepen!508)

      Commits:

      • Lint.
      • Move hard-coded network address to constant
      • onion-grater: fix remote connection check.
      • Untangle if-statements a bit.
      • onion-grater: fix support for restrict-stream-events for namespace matched
        profiles (closes: #18417).
    • Upgrade Linux to 5.10.40 (zerotracepen/zerotracepen!507)

      Commits:

      • Upgrade Linux to 5.10.40 (5.10.0-0.bpo.7)
    • Upgrade to Debian Buster 10.10 (zerotracepen/zerotracepen!506)

      Commits:

      • Upgrade to Debian Buster 10.10 by bumping APT snapshot of the Debian archive to
        2021062201
      • Test suite: don't break if there are multiple Firefox processes
      • lint_po: ignore torbrowser-launcher's PO files
      • generate-build-manifest: support builds that used no source package
      • Switch to a simpler way to maintain our Tor Browser AppArmor profile delta
      • Rebase AppArmor profile for Tor Browser on top of torbrowser-launcher 0.3.3-5
    • Upgrade Tor to 0.4.5.9 (zerotracepen/zerotracepen!505)

      Closes issues:

      • Upgrade tor to 0.4.5.9 (zerotracepen/zerotracepen#18309)

      Commits:

      • Upgrade Tor to 0.4.5.9
    • build-zerotracepen: fix bugs that prevent local submodules from being used
      (zerotracepen/zerotracepen!503)

      Commits:

      • build-zerotracepen: fix resetting the submodules' origin
      • build-zerotracepen: fix syntax error
    • Installer: Make "Reinstall" option not disappear when coming back from
      confirmation dialog (zerotracepen/zerotracepen!502)

      Closes issues:

      • "Reinstall" option disappears when coming back from Upgrade confirmation
        (zerotracepen/zerotracepen#18300)
      • Disable Zero Trace Pen Installer options when there is no target USB stick available
        (zerotracepen/zerotracepen#18346)

      Commits:

      • Installer: disable widgets when there is no target available
      • Make "Reinstall" option not disappear when coming back from confirmation dialog
    • always start tor (except offline mode) (zerotracepen/zerotracepen!497)

      Commits:

      • FIX comment explaining how we user tor@ units
      • always start tor (except offline mode)
    • Fix build vmdb2 without http proxy (zerotracepen/zerotracepen!490)

      Commits:

      • variables are better than hardcoded names!
      • logs are preserved in case of error
      • cleaner temporary files handling
      • FIX building without a http_proxy
    • Resolve "Run zerotracepen-*-proxy-netns@.service only for the amnesia user"
      (zerotracepen/zerotracepen!487)

      Commits:

      • a11y/ibus: description includes netns name
      • a11y/ibus proxy are only enabled for amnesia user
    • Jenkins lib: support extracting issue number at the beginning of the branch
      name (zerotracepen/zerotracepen!482)

      Commits:

      • adds doctests to ActiveBranches
      • Jenkins lib: support extracting issue number at the beginning of the branch
        name
    • Resolve "TCA: Implement screen when not connected to a local network"
      (zerotracepen/zerotracepen!481)

      Commits:

      • open the real wifi settings page
      • wording follows wireframe design
      • gnome env: add XDG_CURRENT_DESKTOP
      • tca can open wi-fi config window
    • Test suite: drop low-value tests, add Cucumber tags, improve wording a little
      (zerotracepen/zerotracepen!479)

      Commits:

      • Test suite: try harder not to click a button before it's active
      • Test suite: remove a few low-value USB installation, upgrade, and boot tests
      • Test suite: remove wget plaintext http:// test
      • fixup! Test suite: remove whois(1) tests
      • Test suite: give generic method a more generic name
      • Test suite: remove whois(1) tests
      • Test suite: merge closely related scenarios to improve performance
      • Test suite: use an existing snapshot instead of booting a fresh Zero Trace Pen
      • Test suite: improve wording of scenarios and steps
      • Test suite: remove Pidgin custom certificates tests
      • Test suite: remove basic AppArmor test
      • Test suite: remove GnuPG keyserver test
      • Test suite: remove browser plugins tests
      • Test suite: add @slow and @not_release_blockers Cucumber tags
      • Test suite: remove definition for unused step
      • Test suite: remove VirtualBox test
    • Generate the Vagrant base boxes using vmdb2 instead of vmdebootstrap
      (zerotracepen/zerotracepen!478)

      Commits:

      • Add shellcheck exception.
      • Drop insane backticks.
      • Re-introduce some comments that were lost when migrating to vmdb2.
      • Build doc: remove obsolete instructions
      • vmdb2: remove no-op duplicated mirror parameters
      • Fix copy-paste mistakes.
      • Use grub.d instead of fighting with sed/perl escaping.
      • vmdb2: disable caching
      • Drop duplicated work.
      • Update docs and instructions for migration from vmdebootstrap to vmdb2.
      • Let's stop claiming Zero Trace Pen can be built from Stretch.
      • Escape \ in here doc.
      • Vagrant: work around Debian#951257.
      • Vagrant: abort when the proxy is invalid.
      • Vagrant: use IP address for internal proxy.
      • Drop leftovers from when we used vmdeboostrap to generate Vagrant boxes.
      • Apply policy-rc.d trick to workaround Debian bug when installing udisks2 in a
        chroot.
      • zerotracepen-builder: install missing udisks2 deps.
      • Workaround the fact subshells don't inherit set -e
      • Drop debugging.
      • Include the .qcow2, not raw image, in the Vagrant box.
      • Bump zerotracepen-builder image back to 20G.
      • More clean up.
      • Switch to vmdb2-based Vagrant box creation (refs: #15349)
      • Split long command over multiple lines.
      • Generate .box file.
      • Add back --rootfs-tarball argument to vmdb2.
      • Use correct sed syntax in replacement to refer to matched groups.
      • Use variables in place of hard-coded strings.
      • Shell quoting++
      • Drop unnecessary touch.
      • Clean up before and after calling vmdb2.
      • Generate image name dynamically.
      • Set APT serials dynamically.
      • Use mktemp for temporary file.
      • Drop unused stuff for generating container images.
      • Do set -u in script.
      • vmdb2: append newline at the end of authorized_keys entry
      • vmdb2: add HTTP proxy support
      • WIP: Vagrant: script for generating zerotracepen-builder images using vmdb2 instead of
        vmdebootstrap (refs: #15349)
    • Drop obsolete workaround for Jenkins passing mergebasebranch (zerotracepen/zerotracepen!475)

      Commits:

      • Revert "Rakefile: handle jenkins passing the now obsolete mergebasebranch."
    • custom-apt-cruft-check: indentify used binary packages where we lack the source
      (zerotracepen/zerotracepen!473)

      Commits:

      • custom-apt-cruft-check: add support for the testing suite
      • custom-apt-cruft-check: indentify used binary packages where we lack the
        source.
    • GitLab CI (test-tca): add missing python3-dbus dependency (zerotracepen/zerotracepen!472)

      Commits:

      • GitLab CI (test-tca): add missing python3-dbus dependency
    • Disable shellcheck false positive (zerotracepen/zerotracepen!471)

      Commits:

      • Disable shellcheck false positive
    • Fix the dependencies of tca-portal.service and tca-portal.socket
      (zerotracepen/zerotracepen!461)

      Commits:

      • Fix tca-portl.{socket,service} dependencies
      • Let tca-portal.service be started via systemd socket activation
    • Resolve "No spinner when starting Tor Browser from TCA" (zerotracepen/zerotracepen!459)

      Commits:

      • offline step now follows wording from our design
      • FIX: going offline should not display error step
      • tca-portal open applications using gtk stuff
    • Drop monkeysphere configuration (zerotracepen/zerotracepen!454)

      Commits:

      • Drop monkeysphere configuration
    • Use v3 Onion Service for the deb.torproject.org APT repository
      (zerotracepen/zerotracepen!453)

      Commits:

      • Use v3 Onion Service for the deb.torproject.org APT repository
    • Test suite: drop Seahorse tests (zerotracepen/zerotracepen!451)

      Commits:

      • Test suite: drop now useless background
      • Test suite: update rationale for workaround
      • Test suite: drop support for running v2 Onion services in Chutney
      • Test suite: drop Seahorse tests
    • Maintain our Tor Browser AppArmor profile delta in a simpler way
      (zerotracepen/zerotracepen!449)

      Commits:

      • Test suite: don't break if there are multiple Firefox processes
      • lint_po: ignore torbrowser-launcher's PO files
      • generate-build-manifest: support builds that used no source package
      • Switch to a simpler way to maintain our Tor Browser AppArmor profile delta
      • Rebase AppArmor profile for Tor Browser on top of torbrowser-launcher 0.3.3-5
    • Recover TCA fix + test suite work from now defunct !431 (zerotracepen/zerotracepen!447)

      Commits:

      • Test suite: fix racy test.
      • Test suite: avoid using regex matching since we can.
      • Test suite: drop escaping we already deal with.
      • Test suite: implement proper dropping of markup.
      • Test suite: escape single-quotes in generated Python strings.
      • Test suite: drop markup from translated strings.
      • Test suite: make Dogtail automatically translate strings.
      • TCA: fix tor crashing when falling back to default bridges.
    • TCA asks for confirmation if you close it during progress (zerotracepen/zerotracepen!446)

      Commits:

      • Apply 1 suggestion(s) to 1 file(s)
      • asks confirmation on quit during progress
    • TCA: explain the autoconfig better and implement designed behavior for
      displaying help (zerotracepen/zerotracepen!445)

      Commits:

      • TCA: hide bridge help by default
      • TCA: use the designed toggle instead of a link near "Configure a Tor bridge" in
        consent question
      • TCA: Explain more about the implications of the autoconfig of Tor
    • Resolve "TCA connects with default bridges when it shouldn't" (zerotracepen/zerotracepen!444)

      Commits:

      • TCA always saves configuration
    • Resolve "TCA status does not reflect the current status of the connection to
      Tor" (zerotracepen/zerotracepen!443)

      Commits:

      • tca reacts to /run/tor-has-bootstrapped/done
      • tca monitors /run/tor-has-bootstrapped/done
    • Improve Tor Connection GUI (zerotracepen/zerotracepen!438)

      Commits:

      • Test suite: adapt to UI changes in TCA.
      • Fix shellcheck regressions
      • TCA: add title to proxy configuration window
      • TCA: add link to doc in consent question
      • TCA: make status messages consistently include "to Tor"
      • TCA: define margin in 1 single place
      • TCA: make the bridges config screen breathe
      • TCA: implement designed link to the bridges doc
      • TCA: remove icons on proxy port & pasword entries
      • TCA: make the "Connecting" progress screen breathe
      • TCA: make proxy configuration visual layout linear
      • TCA: basic visual layout for the "Error connecting to Tor" screen
      • TCA: reorganize container/child structure to fix vertical text alignment
      • TCA: Fix vertical text alignment
      • TCA: Fix vertical text alignment
      • TCA: make "Connected to Tor successfully" a progress-box-heading
      • TCA: add standard spacing between label and progress bar
      • TCA: make "Connecting to Tor…" a progress-box-heading
      • TCA: move progress-box-heading styling to CSS
      • TCA: make it breathe
      • TCA: drop duplicate margin
      • TCA: improve vertical alignment of success icon
      • TCA: hide percentage
      • fixup! TCA: use Unicode ellipsis char
      • TCA: use correct Unicode char
      • TCA: hide non-functional "Reset Tor Connection" button
      • TCA: explicitly declare translation domain in Glade UI file
      • TCA: style step titles via CSS, make them larger
      • TCA: make layout more GNOME HIG compliant
      • TCA: use non-deprecated margin properties, make them multiples of 6px
      • TCA: make the "Start Tor Browser button" fill the dialog width as designed
      • TCA: drop custom font size
      • TCA: use standard GNOME HIG spacing
      • TCA: improve visual layout
      • TCA: fix alignment
      • TCA: improve visual layout
      • TCA: simplify CSS
      • TCA: port CSS to pixels and start making it a bit more GNOME HIG compliant
      • TCA: give widget a name so it can be styled with CSS
      • WIP: save with glade/sid
      • Git, please ignore Glade backup files for TCA
      • TCA Glade UI: require the GTK version we're shipping in Zero Trace Pen 4.x
    • Resolve "Confusing behavior of Tor Connection in offline mode"
      (zerotracepen/zerotracepen!436)

      Commits:

      • better function naming
      • offline mode error strings changed
      • FIX ci dependencies for tca
      • update gettext strings
      • tca offline mode errors are translatable
      • TCA give clear error message in Offline Mode
      • zerotracepenlib has doctests
      • zerotracepenlib: can check greeter variables
    • Resolve "Ensure WhisperBack still tells us how successful connections to Tor
      were made" (zerotracepen/zerotracepen!434)

      Commits:

      • whisperback includes tca dezerotracepen
    • TCA UI improvements (zerotracepen/zerotracepen!428)

      Commits:

      • Test suite: don't throw TCAConnectionFailure on try_for() timeout.
      • Test suite: adapt for recent UI changes in TCA.
      • explain bridge requirements in hide mode
      • smaller image in TCA
      • Improvements to TCA GUI
      • doc: how to tweak tca GUI
      • corner case about bridge validation
      • FIX resize problems through GtkStack
      • tca UI improvements
      • changing to default bridges is honored
      • tca ui more consistent
    • TCA reports an error in case of slow connection (zerotracepen/zerotracepen!426)

      Commits:

      • progress bar was very slow; + more testing
      • tca timeout understands "sign-of-life" UX concept
      • quick & dirty: increase timeout
    • Display an error message when upgrader fails to check for available upgrades
      (zerotracepen/zerotracepen!412)

      Closes issues:

      • Display an error message when the Upgrader fails to check for available
        upgrades (zerotracepen/zerotracepen#18238)

      Commits:

      • Display a dialog if an error happens when getting the UDF
      • Make debugging_info parameter optional
      • Display an error dialog when the Upgrader fails to check for available upgrades
    • Rename "MAC address spoofing" as "MAC address anonymization" (zerotracepen/zerotracepen!411)

      Commits:

      • Be more helpful
      • Avoid in-page link
      • Rewrite
      • Rename "MAC address spoofing" as "MAC address anonymization" (#18286)
    • Upgrade Linux to 5.10.24 (zerotracepen/zerotracepen!409)

      Commits:

      • Upgrade Linux to 5.10.24
      • Revert "Install linux-compiler- linux-kbuild- from our custom APT repository"
    • Fix shellcheck error (zerotracepen/zerotracepen!394)

      Commits:

      • Fix shellcheck error
    • Establish a coding standards baseline on our shell code base (zerotracepen/zerotracepen!190)

      Commits:

      • GitLab CI: install "file" for the shellcheck test
      • Lint
      • Lint
      • GitLab CI: use Unit test reports for shellcheck
      • shellcheck-tree: drop unused import
      • shellcheck-tree: drop obsolete comment
      • GitLab CI: check shell scripts
      • ShellCheck: fix remaining offenses
      • ShellCheck: fix remaining SC2086 offenses
      • shellcheck-tree: skip built website
      • Drop unused variables
      • ShellCheck: make exceptions where warranted
      • Misc. linting suggested by ShellCheck
      • shellcheck-tree: new script, that runs shellcheck on all shell scripts
      • Misc. linting suggested by ShellCheck
      • ShellCheck: make exceptions where warranted
      • Drop $ in arithmetic variables
      • Drop useless calls to cat
      • ShellCheck: fix offenses
      • ShellCheck: fix SC2155 offenses
      • ShellCheck: backticks → $()
      • auto/config: fix stderr redirection
      • Factorize
      • ShellCheck: make exceptions where warranted
      • ShellCheck: add missing quoting
      • branch_name_to_suite: fix bug in tr call
      • ShellCheck: disable false positive
      • unsafe-browser: use $* when our intent is to concatenate
      • keepassxc wrapper: fix behavior in case 2+ arguments are passed
      • live-persist: fix usage message
      • ShellCheck: fix SC2162 offense
      • ShellCheck: make exceptions where warranted
      • ShellCheck: add missing quoting
      • ShellCheck: fix SC2006 offenses
      • ShellCheck: fix SC2155 offenses
      • Drop useless "echo"
      • ShellCheck: make exceptions where warranted
      • ShellCheck: fix SC2006 offenses
      • ShellCheck: replace deprecated tempfile with mktemp (SC2186)
      • ShellCheck: add missing quoting
      • Replace antiquated use of expr
      • Drop unused variables
      • ShellCheck: fix SC2155 offenses
      • ShellCheck: disable check that generates mostly false positives
      • Simplify
      • Drop unused variables
      • ShellCheck: add missing quoting
      • Drop unused variable
      • ShellCheck: fix SC2059 offense
      • Ensure here-doc text is not subject to parameter expansion, command
        substitution, and arithmetic expansion, unless we do need it
      • ShellCheck: fix SC2162 offenses
      • chroot_local-hooks: consistently set the executable bit
      • Simplify
      • Make for loop more robust
      • Ensure filenames that start with '-' are not interpreted as switches
      • Ensure glob is not expanded by the shell interpreter
      • 10-tbb: fix typo in variable name
      • ShellCheck: lint
      • ShellCheck: make exceptions where warranted
      • ShellCheck: disable false positive
      • ShellCheck: disable following included source files