8 files changed, 65 insertions, 15 deletions
diff --git a/newmoon/debian/_service b/newmoon/debian/_service
index d1ee13f..f6b9f70 100644
--- a/newmoon/debian/_service
+++ b/newmoon/debian/_service
@@ -1,7 +1,7 @@
 <services>
    <service name="tar_scm">
       <param name="scm">git</param>
-      <param name="url">https://gitlab.com/bgstack15/stackrpms.git</param>
+      <param name="url">https://bgstack15.ddns.net/cgit/stackrpms</param>
       <param name="subdir">newmoon/debian</param>
       <param name="filename">debian</param>
       <param name="revision">newmoon-bump</param>
@@ -14,7 +14,7 @@
    <service name="tar_scm">
       <param name="scm">git</param>
       <param name="url">https://repo.palemoon.org/MoonchildProductions/Pale-Moon.git</param>
-      <param name="revision">32.1.0_Release</param>
+      <param name="revision">32.5.2_Release</param>
       <param name="version">_none_</param>
       <param name="submodules">enable</param>
    </service>
diff --git a/newmoon/debian/changelog b/newmoon/debian/changelog
index 0be2e43..7918cc9 100644
--- a/newmoon/debian/changelog
+++ b/newmoon/debian/changelog
@@ -1,3 +1,26 @@
+newmoon (32.5.2-1+stackrpms) obs; urgency=medium
+
+  * Bugfix and security update:
+    - Removed the standard Twitter/X user-agent override because they decided
+      to block us on it.
+    - Added preferences for the user to control whether or not the tab page
+      title should be included in the window title or not. In Private Browsing
+      mode, the default is now to not show the title in the window. This was
+      done to avoid potential leakage to system logs (e.g. GNOME shell logs or
+      Windows event logs) of websites visited through the recorded window
+      title. The new preferences are privacy.exposeContentTitleInWindow and
+      privacy.exposeContentTitleInWindow.pbm for normal mode and Private
+      Browsing mode, respectively.
+    - Fixed several crashes in DOM and relating to dynamic JavaScript
+      module imports.
+    - Removed a restriction on Fetch preflight redirects, following a spec
+      update.
+    - Improved the handling of web workers if they get aborted mid-action.
+    - Security issues addressed: CVE-2023-6863, CVE-2023-6858 and several
+      others that do not have a CVE number.
+
+ -- B. Stack <bgstack15@gmail.com>  Fri, 26 Jan 2024 19:50:47 -0500
+
 newmoon (32.1.0-1+stackrpms) obs; urgency=low
 
     * Shadow DOM and CustomElements, collectively making up WebComponents,
diff --git a/newmoon/debian/control b/newmoon/debian/control
index d2604b5..647a0fc 100644
--- a/newmoon/debian/control
+++ b/newmoon/debian/control
@@ -1,15 +1,17 @@
 Source: newmoon
 Section: web
 Priority: optional
-Maintainer: B Stack <bgstack15@gmail.com>
+Maintainer: B. Stack <bgstack15@gmail.com>
 Bugs: mailto: <bgstack15@gmail.com>
 Build-Depends: debhelper (>= 12),
    autoconf2.13,
    g++ (>= 7),
    libasound2-dev,
    libdbus-glib-1-dev (>= 0.60),
+   libfontconfig1-dev,
    libgconf2-dev (>= 1.2.1),
-   libgtk2.0-dev (>= 2.14),
+   libgtk2.0-dev (>= 2.18),
+   libpulse-dev,
    libx11-xcb-dev,
    libxt-dev,
    mesa-common-dev,
diff --git a/newmoon/debian/mozconfig b/newmoon/debian/mozconfig
index aa24383..e131daa 100644
--- a/newmoon/debian/mozconfig
+++ b/newmoon/debian/mozconfig
@@ -8,15 +8,16 @@ export MOZ_NOSPAM=1
 # If you want to control where the built objects go
 #mk_add_options MOZ_OBJDIR=@TOPSRCDIR@/pmbuild
 
+# Official Pale Moon branding. Please see https://www.palemoon.org/redist.shtml
+# for restrictions when using the official branding.
 ac_add_options --enable-application=palemoon
 ac_add_options --disable-official-branding
 ac_add_options --enable-official-vendor
 
-# Standard
-# Enables
+# Standard, approved Pale Moon build options.
+# Enable stuff
 ac_add_options --enable-av1
 ac_add_options --enable-optimize="-O2 -w"
-# accepts either gtk2 or gtk3 here, but gtk2 is only officially supported option
 ac_add_options --enable-default-toolkit=cairo-gtk2
 ac_add_options --enable-devtools
 ac_add_options --enable-jemalloc
@@ -24,11 +25,10 @@ ac_add_options --enable-jxl
 ac_add_options --with-pthreads
 ac_add_options --enable-strip
 
-# Disables
+# Disable stuff
 # disable-debug-symbols removes the ability to do a stack trace. I do not do any stack traces anyways. ?f=5&t=28254
 ac_add_options --disable-debug-symbols
 ac_add_options --disable-debug
-ac_add_options --disable-debug
 ac_add_options --disable-eme
 ac_add_options --disable-gamepad
 ac_add_options --disable-necko-wifi
@@ -48,7 +48,7 @@ ac_add_options --x-libraries=/usr/lib
 ac_add_options --prefix=/usr
 # Devuan style
 ac_add_options --disable-dbus
-ac_add_options --disable-pulseaudio
+#ac_add_options --disable-pulseaudio
 # even though this is redundant
 ac_add_options --enable-alsa
 
@@ -71,4 +71,4 @@ ac_add_options --disable-personas
 # Debian Sid/Devuan Ceres; 2020-07 only -j1 works due to a bug.
 #mk_add_options MOZ_MAKE_FLAGS="-j1"
 
-export MOZ_PKG_SPECIAL=gtk2
+#export MOZ_PKG_SPECIAL=gtk2
diff --git a/newmoon/debian/newmoon+stackrpms.dsc b/newmoon/debian/newmoon+stackrpms.dsc
index d06db01..c3d1101 100644
--- a/newmoon/debian/newmoon+stackrpms.dsc
+++ b/newmoon/debian/newmoon+stackrpms.dsc
@@ -2,7 +2,7 @@ Format: 3.0 (quilt)
 Source: newmoon
 Binary: newmoon
 Architecture: any
-Version: 32.1.0-1+stackrpms
+Version: 32.5.2-1+stackrpms
 Maintainer: B. Stack <bgstack15@gmail.com>
 Homepage: http://www.palemoon.org/
 Standards-Version: 4.1.4
diff --git a/newmoon/debian/patches/fix-armhf-FTBFS.patch b/newmoon/debian/patches/fix-armhf-FTBFS.patch
new file mode 100644
index 0000000..e15be32
--- /dev/null
+++ b/newmoon/debian/patches/fix-armhf-FTBFS.patch
@@ -0,0 +1,20 @@
+--- palemoon-32.4.1.orig/platform/js/src/jit/arm/MacroAssembler-arm.cpp
++++ palemoon-32.4.1/platform/js/src/jit/arm/MacroAssembler-arm.cpp
+@@ -3013,7 +3013,7 @@ MacroAssemblerARMCompat::testInt32(Condi
+     return cond;
+ }
+ 
+-+Assembler::Condition
++Assembler::Condition
+ MacroAssemblerARMCompat::testBigInt(Condition cond,const BaseIndex& src)
+ {
+     MOZ_ASSERT(cond == Equal || cond == NotEqual);
+@@ -3766,7 +3766,7 @@ MacroAssemblerARMCompat::testStringTruth
+     return truthy ? Assembler::NotEqual : Assembler::Equal;
+ }
+ 
+-+Assembler::Condition
++Assembler::Condition
+ MacroAssemblerARMCompat::testBigIntTruthy(bool truthy, const ValueOperand& value)
+ {
+     Register bi = value.payloadReg();
diff --git a/newmoon/debian/patches/series b/newmoon/debian/patches/series
index 85f30b8..e6eb56e 100644
--- a/newmoon/debian/patches/series
+++ b/newmoon/debian/patches/series
@@ -1,5 +1,4 @@
-# from stevepusser for 29.4.3:
-#revert-mach-file.patch
+fix-armhf-FTBFS.patch
 # stackrpms
 small-icons.patch
 pm-devuan.patch
diff --git a/newmoon/debian/rules b/newmoon/debian/rules
index 3d4ed6f..6f11f13 100755
--- a/newmoon/debian/rules
+++ b/newmoon/debian/rules
@@ -3,6 +3,8 @@
 # Some Debian build tools clear out some variables
 export SHELL=/bin/bash
 
+MOZCONFIGFILE = debian/mozconfig
+
 # stackrpms,2 just do not need lsb_release
 #distrel := $(shell lsb_release --codename --short)
 
@@ -12,6 +14,7 @@ export SHELL=/bin/bash
 LDFLAGS += -Wl,--reduce-memory-overheads
 LDFLAGS += -Wl,--no-keep-memory
 
+# stackrpms,3 must be legacy and sounds interesting
 # Add execution time and memory usage stats in the logs
 LDFLAGS += -Wl,--stats
 
@@ -20,6 +23,8 @@ ifneq (,$(filter $(DEB_HOST_ARCH), armhf))
 	export DEB_CXXFLAGS_MAINT_APPEND = -mfpu=neon -funsafe-math-optimizations
 endif
 
+#stackrpms,7-->1 I do not need this distrel logic
+
 %:
 	dh $@
 
@@ -33,10 +38,11 @@ override_dh_auto_clean:
 		mv palemoon/branding/unofficial.unbuilt palemoon/branding/unofficial ; \
 	} || :
 
+# Don't run the "autoreconfigure by default" added to debhelper >= 10.
 override_dh_autoreconf:
 
 override_dh_auto_configure:
-	cp debian/mozconfig mozconfig
+	cp $(MOZCONFIGFILE) .
 	#stackrpms,4
 	! test -d palemoon/branding/unofficial.unbuilt && { \
 		cp -pr palemoon/branding/unofficial palemoon/branding/unofficial.unbuilt && \