phoenix (2025.01.14.1-1) UNRELEASED; urgency=low

 * Disabled the use of system accent colors due to fingerprinting concerns - widget.non-native-theme.use-theme-accent -> false
 * Fixed the URL for BeaconDB - geo.provider.network.url -> https://api.beacondb.net/v1/geolocate (Thanks to @lucasmz #45 💜)
 * Desktop: Explicitly opted out of the origin trial for Privacy-Preserving Attribution in policies.json for defense in depth - dom.origin-trials.private-attribution.state -> 2
 * Android: Fully enabled Bounce Tracking Protection (part of ETP Strict) - privacy.bounceTrackingProtection.mode -> 1

 -- Seyed Mohamad Amin Modaresi <modaresisofthard@proton.me>  Tue, 14 Jan 2025 18:24:00 +0330

phoenix (2025.01.13.1-1) UNRELEASED; urgency=medium

 * Set additional preferences to ensure DNS Prefetching is fully disabled for defense in depth - dom.prefetch_dns_for_anchor_http_document & dom.prefetch_dns_for_anchor_https_document -> false
 * Similarly, set the maximum amount of connections for Preconnect to 0... - network.early-hints.preconnect.max_connections -> 0
 * Disabled saving clipboard history locally and/or to the cloud... - clipboard.copyPrivateDataToClipboardCloudOrHistory -> false
 * Set file:// URLs to open in a separate content process - browser.tabs.remote.separateFileUriProcess -> true
 * Enabled Opaque Response Blocking - browser.opaqueResponseBlocking & browser.opaqueResponseBlocking.javascriptValidator -> true
 * Enabled SHIP (Session History In Parent), as it's required for Per-site process isolation (Fission) - fission.disableSessionHistoryInParent -> false
 * Explicitly opted out of the origin trial for Privacy-Preserving Attribution for defense in depth - dom.origin-trials.private-attribution.state -> 2
 * Enforced blocking access to the AddonManager over insecure protocols - extensions.webapi.testing.http -> false
 * Additionally, blocked certain Mozilla developer websites from accessing the AddonManager... - extensions.webapi.testing -> false
 * Enforced always running web extensions out of process - extensions.webextensions.remote -> true
 * Enabled COEP: credentialless - browser.tabs.remote.coep.credentialless -> true, dom.origin-trials.coep-credentialless.state -> 1
 * Prevented remoteTypes from triggering process switches they shouldn't be able to... - browser.tabs.remote.enforceRemoteTypeRestrictions -> true
 * Switched setting Quad9 as the default DoH provider by now using network.trr.default_provider_uri instead of network.trr.custom_uri & network.trr.uri - network.trr.default_provider_uri -> https://dns.quad9.net/dns-query, network.trr.custom_uri & network.trr.uri ->  
 * Minor tweaks & re-organization

 -- Seyed Mohamad Amin Modaresi <modaresisofthard@proton.me>  Mon, 13 Jan 2025 18:24:00 +0330

phoenix (2025.01.12.2-1) UNRELEASED; urgency=medium

 * Minor, Android-specific update: to officially begin locking & enforcing important prefs, just like we do on desktop... - See 756643bedf for details.

 -- Seyed Mohamad Amin Modaresi <modaresisofthard@proton.me>  Sun, 12 Jan 2025 18:24:00 +0330

phoenix (2025.01.12.1-1) UNRELEASED; urgency=medium

 * Disabled JIT within Firefox's main process - javascript.options.main_process_disable_jit -> true
 * Disabled the JIT Baseline Interpreter - javascript.options.blinterp -> false
 * Disabled marking JIT code pages as both writable and exeuctable - javascript.options.content_process_write_protect_code -> true
 * Enabled fdlibm for Math.sin, Math.cos, and Math.tan, as it is less fingerprintable - javascript.options.use_fdlibm_for_sin_cos_tan -> true
 * Disabled Preconnect - network.preconnect -> false
 * Disabled Early Hints - network.early-hints.enabled & network.early-hints.preconnect.enabled -> false
 * Explicitly disabled AI/"ML Autofill" by default - extensions.formautofill.ml.experiment.enabled -> false
 * Fully disabled the use of SharedArrayBuffer using window.postMessage, regardless of context - dom.postMessage.sharedArrayBuffer.bypassCOOP_COEP.insecure.enabled & dom.postMessage.sharedArrayBuffer.withCOOP_COEP -> false
 * Enforced various important security preferences - See df260a8161 & 24c193f0d0 for details...
 * Desktop: Enforced applying Content Security Policy (CSP) to the internal browser.xhtml - security.browser_xhtml_csp.enabled -> true
 * Desktop: Locked general.config.obscure_value to prevent severe breakage... - general.config.obscure_value -> 0
 * Minor tweaks/fixes & re-organization

 -- Seyed Mohamad Amin Modaresi <modaresisofthard@proton.me>  Sun, 12 Jan 2025 12:24:00 +0330

phoenix (2025.01.06.1-1) UNRELEASED; urgency=low

 * Enabled support for Trusted Types (Like Chromium). - dom.security.trusted_types.enabled -> true
 * CSP assertions for about: pages are no longer skipped. (This was already the default behavior for standard Firefox releases, but now we enforce it - which is particularly useful for ex. Thunderbird, where it actually isn't enabled by default...) - dom.security.skip_about_page_has_csp_assert -> false
 * Explicitly disabled the Network Information API. Firefox already disables it by default, but now we directly enforce it. - dom.netinfo.enabled -> false
 * Disabled Event Telemetry on Desktop (Already disabled on Android) - this is likely covered by our other telemetry prefs, but useful for defense in depth. - privacy.imageInputTelemetry.enableTestMode -> false
 * Blocked insecure object subrequests in mixed content. - security.mixed_content.block_object_subrequest -> true
 * Minor tweaks/fixes

 -- Seyed Mohamad Amin Modaresi <modaresisofthard@proton.me>  Wed, 8 Jan 2025 18:24:00 +0330

phoenix (2025.01.05.1-1) UNRELEASED; urgency=low

 * Phoenix on desktop no longer clears cookies & site data on exit by default (Except for our specialized YouTube config). Not an easy choice to make - but it's best we leave this to users to decide. Firefox's current approach to site exceptions also has its own drawbacks, and Mozilla needs to make it more user-friendly to set. We still clear cache, history, & sessions on exit by default.
 * Set extensions.update.autoUpdateDefault to true to ensure users are always notified of extension updates.
 * We now disable unsafe negotiations (via setting security.ssl.require_safe_negotiation to true) for all configs. This was previously only set on Extended Hardening & the specialized configs, though appears to cause little to 0 breakage, so now it's set everywhere :).
 * New browser.phoenix.version pref to allow easily checking & confirming your version of Phoenix from within the browser...
 * Added more preferences from Firefox's ETP Strict tracking protection to Phoenix's Android configs, to ensure that they are always enabled.
 * Other minor tweaks & fixes.

 -- Seyed Mohamad Amin Modaresi <modaresisofthard@proton.me>  Sun, 5 Jan 2025 17:24:00 +0330

phoenix (20250103.2-1) UNRELEASED; urgency=medium

 * Ensured that we're properly always enabling Fission (Per-site process isolation) by default on Android (& elsewhere) by setting fission.autostart.session to true. (We currently already set fission.autostart to true...)
 * We now always enforce Spectre mitigations, even for isolated content - by setting javascript.options.spectre.disable_for_isolated_content to false.
 * Firefox on desktop will no longer automatically guess which container to open external links in, as this can cause unintended leaks & cross-contamination. You can restore Firefox's default behavior by setting browser.link.force_default_user_context_id_for_external_opens in your about:config to false.
 * Websites are no longer able to automatically download as many files as they want to a user's device without prompting. You can still set exemptions for specific downloads. (browser.download.enable_spam_prevention).
 * Improved organization & fix numbering of categories. We've also now added various phoenix preferences that allow for easy debugging & testing, so that you can easily see if Phoenix is properly applied to Firefox - and if not, where it went wrong.

 -- Seyed Mohamad Amin Modaresi <modaresisofthard@proton.me>  Fri, 3 Jan 2025 10:05:25 -0500

phoenix (20250103.1-1) UNRELEASED; urgency=high

  * First official release for Debian :D
  * Update to Phoenix 20250103.1
  * See https://codeberg.org/celenity/Phoenix/releases/tag/20250103.1 for more details.

 -- celenity <celenity@celenity.dev>  Fri, 3 Jan 2025 02:05:25 -0500

phoenix (20241229-1-2) UNRELEASED; urgency=medium

  * Add phoenix-esr as a Breaks
  * Happy Cristmas

 -- Seyed Mohamad Amin Modaresi <modaresisofthard@proton.me>  Thu, 1 Jan 2025 07:24:00 +0330

phoenix (20241229-1-1) UNRELEASED; urgency=low

  * Initial release.

 -- Seyed Mohamad Amin Modaresi <modaresisofthard@proton.me>  Sun, 29 Dec 2024 17:25:12 +0330
