Commit Graph
637 Commits
Author SHA1 Message Date
Alex fc934d942f [VPN 2.0] Add WinTun 3p dependency (#35828)
* [VPN 2.0] Add WinTun 3p dependency

Add WinTun dependency to the brave-core, to be used later in the
VPN 2.0 architecture by a privileged helper on desktop OSes, on
Windows only.
Since it's a prebuilt binary dependency, we don't add it as an
existing build dependency, as we don't have to build it.

* [VPN 2.0] WinTun vendoring - review fixes.
2026-04-27 18:04:19 -04:00
Kyle Den Hartog 1a0a912d22 bump security alerts (#35822)
address security alerts

https://github.com/advisories/GHSA-w5hq-g745-h8pq
https://github.com/advisories/GHSA-2v35-w6hq-6mfw
https://github.com/advisories/GHSA-f6ww-3ggp-fr8h
https://github.com/advisories/GHSA-x6wf-f3px-wcqx
https://github.com/advisories/GHSA-j759-j44w-7fr8
2026-04-23 07:59:06 -07:00
github-actions[bot] a1a515a90a Update dependency vendor/web-discovery-project@0b060c7e6a (#35487)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-14 17:42:48 +01:00
github-actions[bot] 1c3fc3f5d6 Update dependency vendor/web-discovery-project@4b6840fbcf (#35357)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-08 12:50:52 +01:00
github-actions[bot] 9d3f3a3da1 Update dependency vendor/web-discovery-project@e6dc7e5ae5 (#35201)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-02 14:46:37 +01:00
github-actions[bot] 6bd154a4ec Update dependency vendor/web-discovery-project@702c7ee4a6 (#35146)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-01 13:03:45 +01:00
Pete Miller c5d27921bf Update Web Discovery Project dependency (#35094)
Fix dependency audit issues
2026-03-31 10:01:13 +01:00
Kyle Den Hartogandgithub-actions[bot] 089136ec9a Override flatted to 3.4.2 to fix GHSA-rf6f-7fwh-wjgh (#34854)
* Override flatted to 3.4.2 to fix GHSA-rf6f-7fwh-wjgh

Prototype pollution via parse() in flatted <=3.4.1.
Tracking: https://github.com/brave/brave-browser/issues/53816

* Update dependency vendor/web-discovery-project@965f7955d8

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-03-23 16:28:48 +00:00
yan 86bb6a03ef update wdp (#34736)
fix https://github.com/brave/brave-browser/issues/53647
fix https://github.com/brave/brave-browser/issues/53648
fix https://github.com/brave/brave-browser/issues/53649
fix https://github.com/brave/brave-browser/issues/53650
fix https://github.com/brave/brave-browser/issues/53651
fix https://github.com/brave/brave-browser/issues/53652
2026-03-15 02:27:55 +09:00
yan fb22490342 update serialize-javascript (#34349)
fix https://github.com/brave/brave-browser/issues/53268
2026-03-03 14:24:22 +00:00
Anton Paymyshev caf2899109 Update bip39wally-core-native dep (#34079) 2026-02-24 19:21:05 +07:00
dependabot[bot] 04fb225da4 Bump webpack from 5.97.1 to 5.105.0 (#33728)
Bumps [webpack](https://github.com/webpack/webpack) from 5.97.1 to 5.105.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack/compare/v5.97.1...v5.105.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.105.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

Update WDP to latest

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-06 17:54:04 +00:00
Mikhail a55108eb30 Revert "update eslint to latest" (#33520)
Revert "update eslint to latest (#33502)"

This reverts commit e95a3c900f.
2026-01-30 10:08:19 +00:00
yan e95a3c900f update eslint to latest (#33502)
fix https://github.com/brave/brave-browser/issues/52398
2026-01-29 23:16:35 +01:00
a5dec89286 Bump lodash from 4.17.21 to 4.17.23 (#33359)
* Bump lodash from 4.17.21 to 4.17.23

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* update WDP for lodash update

* Add wdp modules dependency.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: yan <yan@brave.com>
Co-authored-by: Aleksei Khoroshilov <akhoroshilov@brave.com>
2026-01-22 12:23:59 +00:00
Michael Herrmann a2754cdf44 Bump browser updater to 143.1.87.74 (#32799)
This in particular fixes an issue where the browser and the updater
created / expected a folder with 2x Software in the name, namely:
~/Library/BraveSoftware/BraveSoftwareSoftwareUpdate.
2025-12-12 01:35:03 +09:00
Serg a7554c1c74 [Android] Enable in-app updates for Android 14+ devices (#32648)
- Migrate in-app reviews to `com.google.android.play:review:2.0.1`
- Migrate in-app updates to `com.google.android.play:app-update:2.1.0`
- Turn on in-app updates for all supported devices
- Remove `com.google.android.play:core` dependency

Resolves https://github.com/brave/brave-browser/issues/51187
2025-12-05 14:01:39 -05:00
github-actions[bot] 6eeaa8908a Update dependency vendor/web-discovery-project@17d6581e06 (#32695)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-05 13:11:23 +00:00
Andrea bd50c6e884 [opengrep] install in the third_party directory (#32195)
Resolves brave/brave-browser#51249
2025-12-05 00:18:48 +01:00
github-actions[bot] 538f2cbab7 Update dependency vendor/web-discovery-project@71d1117aac (#32642)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-12-03 12:52:54 +00:00
github-actions[bot] ab9c92e8e7 Update dependency vendor/web-discovery-project@a3885d0faa (#32578) 2025-11-27 13:12:46 +01:00
Aleksei Khoroshilov d579143499 Prepare for native Siso build. (#32307) 2025-11-18 18:01:58 +07:00
yan 03ce7add55 update js-yaml to 4.1.1 (#32328)
* update js-yaml to 4.1.1

fix https://github.com/brave/brave-browser/issues/50844

* exclude tools/crates in npm audit
2025-11-15 18:35:32 +01:00
Michael Herrmann 0da38fb145 Fix Omaha 4 update URL (#32272) 2025-11-12 13:54:19 +01:00
Michael Herrmann 93059f6d18 Brand Omaha 4 for production (#31849) 2025-10-17 08:25:51 +01:00
Michael Herrmann c9f6debc71 Improve update request privacy (#31127)
* Don't send any contents of the hw object
 * Never send app/lang
 * Don't send download_time_ms

The motivation is that these could otherwise potentially be used to
fingerprint users.
2025-09-29 16:54:35 +02:00
github-actions[bot] bedb6bb31b Update dependency vendor/web-discovery-project@da75bdbae0 (#31087)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-09-08 15:25:23 -07:00
Brian Johnson 2b7a2186f5 Fix ModuleNotFoundError: No module named 'distutils' in ios_boostrap.py (#30803)
Use vpython3 which still has distutils available
2025-08-25 17:16:52 -07:00
github-actions[bot] e2d36a45c2 Update dependency vendor/web-discovery-project@6bf2f8988c (#30764)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-08-22 12:56:13 +01:00
github-actions[bot] 44ac7f5ffa Update dependency vendor/web-discovery-project@6fecf9a861 (#30522)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-08-07 15:12:50 +01:00
Aleksei Khoroshilov e4cdfbe9a7 Enable SISO on Linux host with Brave-specific configuration (#30312)
Enable SISO by default for linux, mac, win targets built on host_os == "linux".
2025-08-01 18:28:16 +07:00
Aleksei Khoroshilov a41bf5350b Replace "src/" includes with <> in chromium_src. (#30096)
This change updates how brave/chromium_src overrides can reference original files: it adds ability to use #include <...> along with #include "src/...". This is enabled by replacing -I../../brave/chromium_src with -iquote../../brave_chromium_src, which adds an include search path only for #include "..." directives.

With this approach, other files in the build tree can reference brave/chromium_src overrides using #include "...", while the overrides themselves can reference original Chromium files using #include <...>. Since Chromium uses #include "..." for all in-tree files, we can leverage this convention and configure our overrides so that we can drop support for #include "src/" later by removing -I../../.. and making rbe_exec_root modification obsolete (the main goal).
2025-07-24 17:37:44 +07:00
github-actions[bot] cfd8e0fd28 Update dependency vendor/web-discovery-project@782d0a041d (#30127)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2025-07-18 18:54:15 +01:00
Michael Herrmann a0183aad2a Change BraveUpdater.app path in local checkout (#29986) 2025-07-17 13:11:42 +02:00
Aleksei Khoroshilov 6dafba18f8 Update chromium_src include logic to allow <> includes (#29652)
[chromium_src] Allow overrides to reference original files with #include <...>

This change updates the include path handling for brave/chromium_src overrides:
- Adds support for referencing original Chromium files using #include <...> in
overrides.
- Enables this by replacing -I../../brave/chromium_src with 
-iquote../../brave/chromium_src, so the path is only used for #include "..."
directives.

With this, other files in the build tree can reference brave/chromium_src
overrides using #include "...", while the overrides themselves can reference
original Chromium files using #include <...>. Since Chromium uses #include "..."
for all in-tree files, we can leverage this convention and eventually drop
support for #include "src/" by removing -I../../.. and making rbe_exec_root
modification obsolete.
2025-06-27 14:10:21 +07:00
Michael Herrmann 57eaf4d149 Mirror upstream's codesign requirements in BraveUpdater (#28591) 2025-04-24 16:30:33 +02:00
Terry Mancey 7384296d4d [ads] Remove dependency on RapidJSON (#28607) 2025-04-12 02:18:30 +02:00
cdesouza-chromium b90e4d22ac [canary] Add a .vpython3 wheels file for B🚀 (#28480)
This PR reverts the use of `DEPS` to manage python dependencies, and
rather introduces a `.vpython3` file to deploy wheels to run `brockit`
with vpython in our CI.

This PR also has an extra fix for a rare, but possible checkout failure
with the issue https://github.com/brave/brave-browser/issues/44921. This
can happen because git requires this type of notation to retain the
reference locally.

Resolves https://github.com/brave/brave-browser/issues/45120

Resolves https://github.com/brave/brave-browser/issues/45201
2025-04-04 17:34:09 +02:00
cdesouza-chromium 56eb42b364 [canary] pip install B🚀 deps into vpython (#28434)
This PR adds a hook to install any of the required deps for Brockit into
vpython. This will allow us to avoid having to call `pip install` in the
CI, by always using `vpython`, which will be useful in sensitive
contexts.

Resolves https://github.com/brave/brave-browser/issues/45120
2025-04-02 11:27:09 +01:00
Michael Herrmann 6dfc7230c0 Rewrite macOS codesigning, DMG & PKG generation logic (#27610) 2025-03-05 20:14:20 +01:00
Szilard Szaloki a894785eb7 Downloads rust-toolchain-aux. 2025-03-03 11:04:16 -07:00
yan ebe40f13d7 Update WDP to fix serialize-javascript, fix esbuild (#27712)
Fix https://github.com/brave/brave-browser/issues/44044
Fix https://github.com/brave/brave-browser/issues/44045
2025-02-19 01:32:49 -03:00
Darnell Andries 1ca6bada7e Address hidden renderer feedback, update WDP extension 2025-01-24 13:02:42 -08:00
Aleksei Khoroshilov 7a9c2a01bf Bump WDP to support Node 22. (#27287) 2025-01-22 18:01:43 +07:00
Michael Herrmann 6e696fcf0e Bump Omaha 4 to 132.1.76.11 (#27226)
This in particular switches the update client to universal binaries.
2025-01-14 16:06:59 +01:00
Brian Johnson afd4e0239d fix overly permissive DEPS (#27193)
Fix overly permissive deps
2025-01-12 21:43:04 -07:00
cypt4 d6f3c15ee2 Add shardtree crate (#26966)
* Add shardtree crate
Resolves https://github.com/brave/brave-browser/issues/40408
2024-12-13 16:18:45 +04:00
Michael Herrmann 1b355b2011 Don't run Sparkle and Omaha 4 concurrently (#26797)
A drawback of this commit is that it also disables updates of Omaha
itself. This needs to be added back in a future commit.
2024-12-03 12:08:28 +01:00
Brian Johnson 3313ad628b remove include rules that no longer apply (#25911)
remove include rules that no longer apply and fix existing include rules
2024-10-10 16:19:48 -07:00
yan d6487b83fb bump WDP to fix audit issues 2024-10-07 12:07:40 -07:00