Subject: CVS commit: pkgsrc/www/palemoon
From: Nia Alarie
Date: 2025-02-07 17:18:26
Message id: 20250207161827.0C0DBFBE0@cvs.NetBSD.org

Log Message:
palemoon: Update to 33.6.0

     v33.6.0 (2025-02-07)

   This is a development, bugfix and security release.
   Due to the fact that CloudFlare has been causing application crashes that
   impacts many users, this release has been pulled forward a few days to
   address these crashes with priority (should be fixed in this release).
   Please note that at the time of publication of this browser version and
   release notes, even though crashes have been fixed, CloudFlare is denying
   UXP-based browsers as well as several other independent/smaller browsers
   access to many websites by way of their malfunctioning "security \ 
check" or
   captcha, with no priority given to actually fix it despite it being denial
   of service for users of affected browsers. Please consider reporting any
   and all occurrences of a failing or looping CloudFlare checks on websites
   to CloudFlare as well as the owners of affected websites (you may have to
   temporarily use a Chromium-based browser to do this).

   Changes/fixes:
     * Implemented a content sniffer for ADTS and raw AAC audio.
     * Implemented AbortSignal.abort() and stub AbortSignal.timeout().
     * Unprefixed the :modal CSS pseudo-class and exposed it to content.
     * Improved efficiency and performance of the Cycle Collector.
     * Added a check for explicit expectance of a percentage value in CSS HSL
       for the S and L components.
     * Updated the cookie storage database to no longer use BaseDomain. See
       implementation notes.
     * Updated CSS grid handling to no longer apply auto min-sizing when flex
       max-sizing (browser parity).
     * Updated the root certificates in the internal trust store.
     * Updated the Public Suffix List (eTLD) in the browser.
     * Removed no longer specced URL Constructor(DOMString url, URL base).
     * Restored unofficial branding to what it was before ("New Moon" \ 
instead
       of "Browser").
     * Changed the default Firefox Compatibility user-agent version to 115.0.
     * Fixed an issue where cloned <audio> or <video> elements would not
       respect the original element's muted state.
     * Fixed a number of bugs and spec compliance issues in WebCrypto.
     * Fixed installer application naming issue causing failure to detect
       running application.
     * Fixed a crash when Interval handlers are present in scripts that are
       automatically terminated due to excessive runtime.
     * Fixed a crash in JS Structured Cloning when the input would be bogus
       (CloudFlare-triggered crash).
     * Fixed a crash in the XSLT stylesheet importing code.
     * Updated NSS to 3.90.6 (custom) to pick up several security fixes.
     * Security issues addressed: CVE-2025-1009.
   Implementation notes:
     * When updating the browser to this version, a one-way upgrade of the
       cookie database in your browser profile is performed on first start.
       The new cookie database is not backwards compatible, meaning you
       cannot use the browser profiles that have been upgraded by this
       version or later with any prior versions of the browser without data
       loss.
       This is generally the case as most upgrades of user data storage are
       one-way, but having all your cookies cleared unintentionally is
       something most people prefer to avoid, hence this warning and a
       general reminder of profile migrations to newer versions that may
       happen with any (non-minor) browser upgrade.

Files:
RevisionActionfile
1.23modifypkgsrc/www/palemoon/Makefile
1.19modifypkgsrc/www/palemoon/distinfo