640 Commits
Author SHA1 Message Date
cdesouza-chromium 68c23eab13 Revert "[toolchain] Disabling unused Mac toolchain downloads (#36760)" (#36958)
This reverts commit 31ac5c1ba8.

This change had been introduced under the impression we did not make use
of the hermetic toolchain to build the iOS code, but that's not
accurate. This is a partial revert of the change disabling the hermetic
SDK during the iOS checkout.

Bug: https://github.com/brave/brave-browser/issues/55812
2026-06-04 18:57:36 +01:00
cdesouza-chromium 31ac5c1ba8 [toolchain] Disabling unused Mac toolchain downloads (#36760)
This PR disables the hook for downloading the Mac toolchain, that can be
only used by Google employees, as that hook own output was quit
confusing, as it preceeded our own hook being run.

We are also disabling downloading the hermetic toolchain for ios
checkouts. IOS builds do not use the hermetic tooolchain, and recently
we've run into significant issues in CI relating to that.

https://github.com/brave/brave-browser/issues/55812
2026-05-28 13:57:34 +01:00
yan cacb85b1f0 update WDP (#36355)
fix https://github.com/brave/brave-browser/issues/55446
2026-05-12 10:11:08 -07:00
Alex fc934d942f [VPN 2.0] Add WinTun 3p dependency (#35828)
* [VPN 2.0] Add WinTun 3p dependency

Add WinTun dependency to the brave-core, to be used later in the
VPN 2.0 architecture by a privileged helper on desktop OSes, on
Windows only.
Since it's a prebuilt binary dependency, we don't add it as an
existing build dependency, as we don't have to build it.

* [VPN 2.0] WinTun vendoring - review fixes.
2026-04-27 18:04:19 -04:00
Kyle Den Hartog 1a0a912d22 bump security alerts (#35822)
address security alerts

https://github.com/advisories/GHSA-w5hq-g745-h8pq
https://github.com/advisories/GHSA-2v35-w6hq-6mfw
https://github.com/advisories/GHSA-f6ww-3ggp-fr8h
https://github.com/advisories/GHSA-x6wf-f3px-wcqx
https://github.com/advisories/GHSA-j759-j44w-7fr8
2026-04-23 07:59:06 -07:00
github-actions[bot] a1a515a90a Update dependency vendor/web-discovery-project@0b060c7e6a (#35487)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-14 17:42:48 +01:00
github-actions[bot] 1c3fc3f5d6 Update dependency vendor/web-discovery-project@4b6840fbcf (#35357)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-08 12:50:52 +01:00
github-actions[bot] 9d3f3a3da1 Update dependency vendor/web-discovery-project@e6dc7e5ae5 (#35201)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-02 14:46:37 +01:00
github-actions[bot] 6bd154a4ec Update dependency vendor/web-discovery-project@702c7ee4a6 (#35146)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-01 13:03:45 +01:00
Pete Miller c5d27921bf Update Web Discovery Project dependency (#35094)
Fix dependency audit issues
2026-03-31 10:01:13 +01:00
Kyle Den Hartogandgithub-actions[bot] 089136ec9a Override flatted to 3.4.2 to fix GHSA-rf6f-7fwh-wjgh (#34854)
* Override flatted to 3.4.2 to fix GHSA-rf6f-7fwh-wjgh

Prototype pollution via parse() in flatted <=3.4.1.
Tracking: https://github.com/brave/brave-browser/issues/53816

* Update dependency vendor/web-discovery-project@965f7955d8

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-03-23 16:28:48 +00:00
yan 86bb6a03ef update wdp (#34736)
fix https://github.com/brave/brave-browser/issues/53647
fix https://github.com/brave/brave-browser/issues/53648
fix https://github.com/brave/brave-browser/issues/53649
fix https://github.com/brave/brave-browser/issues/53650
fix https://github.com/brave/brave-browser/issues/53651
fix https://github.com/brave/brave-browser/issues/53652
2026-03-15 02:27:55 +09:00
yan fb22490342 update serialize-javascript (#34349)
fix https://github.com/brave/brave-browser/issues/53268
2026-03-03 14:24:22 +00:00
Anton Paymyshev caf2899109 Update bip39wally-core-native dep (#34079) 2026-02-24 19:21:05 +07:00
dependabot[bot] 04fb225da4 Bump webpack from 5.97.1 to 5.105.0 (#33728)
Bumps [webpack](https://github.com/webpack/webpack) from 5.97.1 to 5.105.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack/compare/v5.97.1...v5.105.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.105.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

Update WDP to latest

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-06 17:54:04 +00:00
Mikhail a55108eb30 Revert "update eslint to latest" (#33520)
Revert "update eslint to latest (#33502)"

This reverts commit e95a3c900f.
2026-01-30 10:08:19 +00:00
yan e95a3c900f update eslint to latest (#33502)
fix https://github.com/brave/brave-browser/issues/52398
2026-01-29 23:16:35 +01:00
a5dec89286 Bump lodash from 4.17.21 to 4.17.23 (#33359)
* Bump lodash from 4.17.21 to 4.17.23

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* update WDP for lodash update

* Add wdp modules dependency.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: yan <yan@brave.com>
Co-authored-by: Aleksei Khoroshilov <akhoroshilov@brave.com>
2026-01-22 12:23:59 +00:00
Michael Herrmann a2754cdf44 Bump browser updater to 143.1.87.74 (#32799)
This in particular fixes an issue where the browser and the updater
created / expected a folder with 2x Software in the name, namely:
~/Library/BraveSoftware/BraveSoftwareSoftwareUpdate.
2025-12-12 01:35:03 +09:00
Serg a7554c1c74 [Android] Enable in-app updates for Android 14+ devices (#32648)
- Migrate in-app reviews to `com.google.android.play:review:2.0.1`
- Migrate in-app updates to `com.google.android.play:app-update:2.1.0`
- Turn on in-app updates for all supported devices
- Remove `com.google.android.play:core` dependency

Resolves https://github.com/brave/brave-browser/issues/51187
2025-12-05 14:01:39 -05:00
github-actions[bot] 6eeaa8908a Update dependency vendor/web-discovery-project@17d6581e06 (#32695)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-05 13:11:23 +00:00
Andrea bd50c6e884 [opengrep] install in the third_party directory (#32195)
Resolves brave/brave-browser#51249
2025-12-05 00:18:48 +01:00
github-actions[bot] 538f2cbab7 Update dependency vendor/web-discovery-project@71d1117aac (#32642)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-03 12:52:54 +00:00
github-actions[bot] ab9c92e8e7 Update dependency vendor/web-discovery-project@a3885d0faa (#32578) 2025-11-27 13:12:46 +01:00
Aleksei Khoroshilov d579143499 Prepare for native Siso build. (#32307) 2025-11-18 18:01:58 +07:00
yan 03ce7add55 update js-yaml to 4.1.1 (#32328)
* update js-yaml to 4.1.1

fix https://github.com/brave/brave-browser/issues/50844

* exclude tools/crates in npm audit
2025-11-15 18:35:32 +01:00
Michael Herrmann 0da38fb145 Fix Omaha 4 update URL (#32272) 2025-11-12 13:54:19 +01:00
Michael Herrmann 93059f6d18 Brand Omaha 4 for production (#31849) 2025-10-17 08:25:51 +01:00
Michael Herrmann c9f6debc71 Improve update request privacy (#31127)
* Don't send any contents of the hw object
 * Never send app/lang
 * Don't send download_time_ms

The motivation is that these could otherwise potentially be used to
fingerprint users.
2025-09-29 16:54:35 +02:00
github-actions[bot] bedb6bb31b Update dependency vendor/web-discovery-project@da75bdbae0 (#31087)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-09-08 15:25:23 -07:00
Brian Johnson 2b7a2186f5 Fix ModuleNotFoundError: No module named 'distutils' in ios_boostrap.py (#30803)
Use vpython3 which still has distutils available
2025-08-25 17:16:52 -07:00
github-actions[bot] e2d36a45c2 Update dependency vendor/web-discovery-project@6bf2f8988c (#30764)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-08-22 12:56:13 +01:00
github-actions[bot] 44ac7f5ffa Update dependency vendor/web-discovery-project@6fecf9a861 (#30522)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-08-07 15:12:50 +01:00
Aleksei Khoroshilov e4cdfbe9a7 Enable SISO on Linux host with Brave-specific configuration (#30312)
Enable SISO by default for linux, mac, win targets built on host_os == "linux".
2025-08-01 18:28:16 +07:00
Aleksei Khoroshilov a41bf5350b Replace "src/" includes with <> in chromium_src. (#30096)
This change updates how brave/chromium_src overrides can reference original files: it adds ability to use #include <...> along with #include "src/...". This is enabled by replacing -I../../brave/chromium_src with -iquote../../brave_chromium_src, which adds an include search path only for #include "..." directives.

With this approach, other files in the build tree can reference brave/chromium_src overrides using #include "...", while the overrides themselves can reference original Chromium files using #include <...>. Since Chromium uses #include "..." for all in-tree files, we can leverage this convention and configure our overrides so that we can drop support for #include "src/" later by removing -I../../.. and making rbe_exec_root modification obsolete (the main goal).
2025-07-24 17:37:44 +07:00
github-actions[bot] cfd8e0fd28 Update dependency vendor/web-discovery-project@782d0a041d (#30127)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-07-18 18:54:15 +01:00
Michael Herrmann a0183aad2a Change BraveUpdater.app path in local checkout (#29986) 2025-07-17 13:11:42 +02:00
Aleksei Khoroshilov 6dafba18f8 Update chromium_src include logic to allow <> includes (#29652)
[chromium_src] Allow overrides to reference original files with #include <...>

This change updates the include path handling for brave/chromium_src overrides:
- Adds support for referencing original Chromium files using #include <...> in
overrides.
- Enables this by replacing -I../../brave/chromium_src with 
-iquote../../brave/chromium_src, so the path is only used for #include "..."
directives.

With this, other files in the build tree can reference brave/chromium_src
overrides using #include "...", while the overrides themselves can reference
original Chromium files using #include <...>. Since Chromium uses #include "..."
for all in-tree files, we can leverage this convention and eventually drop
support for #include "src/" by removing -I../../.. and making rbe_exec_root
modification obsolete.
2025-06-27 14:10:21 +07:00
Michael Herrmann 57eaf4d149 Mirror upstream's codesign requirements in BraveUpdater (#28591) 2025-04-24 16:30:33 +02:00
Terry Mancey 7384296d4d [ads] Remove dependency on RapidJSON (#28607) 2025-04-12 02:18:30 +02:00
cdesouza-chromium b90e4d22ac [canary] Add a .vpython3 wheels file for B🚀 (#28480)
This PR reverts the use of `DEPS` to manage python dependencies, and
rather introduces a `.vpython3` file to deploy wheels to run `brockit`
with vpython in our CI.

This PR also has an extra fix for a rare, but possible checkout failure
with the issue https://github.com/brave/brave-browser/issues/44921. This
can happen because git requires this type of notation to retain the
reference locally.

Resolves https://github.com/brave/brave-browser/issues/45120

Resolves https://github.com/brave/brave-browser/issues/45201
2025-04-04 17:34:09 +02:00
cdesouza-chromium 56eb42b364 [canary] pip install B🚀 deps into vpython (#28434)
This PR adds a hook to install any of the required deps for Brockit into
vpython. This will allow us to avoid having to call `pip install` in the
CI, by always using `vpython`, which will be useful in sensitive
contexts.

Resolves https://github.com/brave/brave-browser/issues/45120
2025-04-02 11:27:09 +01:00
Michael Herrmann 6dfc7230c0 Rewrite macOS codesigning, DMG & PKG generation logic (#27610) 2025-03-05 20:14:20 +01:00
Szilard Szaloki a894785eb7 Downloads rust-toolchain-aux. 2025-03-03 11:04:16 -07:00
yan ebe40f13d7 Update WDP to fix serialize-javascript, fix esbuild (#27712)
Fix https://github.com/brave/brave-browser/issues/44044
Fix https://github.com/brave/brave-browser/issues/44045
2025-02-19 01:32:49 -03:00
Darnell Andries 1ca6bada7e Address hidden renderer feedback, update WDP extension 2025-01-24 13:02:42 -08:00
Aleksei Khoroshilov 7a9c2a01bf Bump WDP to support Node 22. (#27287) 2025-01-22 18:01:43 +07:00
Michael Herrmann 6e696fcf0e Bump Omaha 4 to 132.1.76.11 (#27226)
This in particular switches the update client to universal binaries.
2025-01-14 16:06:59 +01:00
Brian Johnson afd4e0239d fix overly permissive DEPS (#27193)
Fix overly permissive deps
2025-01-12 21:43:04 -07:00
cypt4 d6f3c15ee2 Add shardtree crate (#26966)
* Add shardtree crate
Resolves https://github.com/brave/brave-browser/issues/40408
2024-12-13 16:18:45 +04:00