From bd4f3f55879cf6d36d59ef9a024787aaaeadafaf Mon Sep 17 00:00:00 2001 From: Brian Smith Date: Fri, 9 Oct 2026 14:06:58 +0200 Subject: [PATCH 1/2] relnote(158): Add 158 release notes --- release-notes/firefox.md | 45 +++++++++++++++++++ .../reference/policies/ExtensionSettings.mdx | 7 ++- .../docs/reference/policies/SitePolicies.mdx | 2 +- 3 files changed, 51 insertions(+), 3 deletions(-) diff --git a/release-notes/firefox.md b/release-notes/firefox.md index db156c8..820e8d4 100644 --- a/release-notes/firefox.md +++ b/release-notes/firefox.md @@ -3,6 +3,51 @@ # Firefox release notes for enterprise admins +## 158 - 2026-10-13 + +_Upcoming, not yet released._ + +These changes apply to Firefox 158 and Firefox ESR 153.5.0 unless explicitly stated. +Firefox ESR 153 is the current ESR. + +### New in Firefox 158 + +- [`ClearOnShutdown`](/reference/policies/clearonshutdown/): Clear browsing data when the browser closes. + Supersedes `SanitizeOnShutdown`, which is ignored when both are set. ([bug 2040977](https://bugzil.la/2040977)) + +### New in Firefox ESR 153.5.0 + +- [`ClearOnShutdown`](/reference/policies/clearonshutdown/): Clear browsing data when the browser closes. + Supersedes `SanitizeOnShutdown`, which is ignored when both are set. ([bug 2040977](https://bugzil.la/2040977)) + +### Changes + +- [`SitePolicies`](/reference/policies/sitepolicies/): Added a `Container` option to load matching sites in a dedicated container, with `ephemeral` to clear its data after the last tab closes and at shutdown. + Firefox 158 only. ([bug 2045801](https://bugzil.la/2045801), [bug 2045798](https://bugzil.la/2045798)) +- [`ContentAnalysis`](/reference/policies/contentanalysis/): Added `InterceptionPoints.ClipboardCopy` to send data copied from web content to the DLP agent. Off by default, so existing deployments are unaffected. + Firefox 158 only. ([bug 2067877](https://bugzil.la/2067877)) +- [`ExtensionSettings`](/reference/policies/extensionsettings/): An entry with `update_url` but no `install_url` now installs the add-on from the update manifest, so self-hosted add-ons no longer need an `install_url`. + Firefox 158 only. ([bug 2061439](https://bugzil.la/2061439)) +- [`DisableDeveloperTools`](/reference/policies/disabledevelopertools/): Now also disables Marionette and the Remote Agent, so browser automation tools that rely on them no longer work while the policy is set. +- [`Extensions`](/reference/policies/extensions/): Add-ons listed in `Uninstall` are now removed at every startup, not only when the policy changes. +- The illustration on network error pages can be hidden by setting `browser.netError.illustration.enabled` to `false`. + Administrators may want to set this using the [`Preferences`](/reference/policies/preferences/) policy. + Firefox 158 only. ([bug 2061552](https://bugzil.la/2061552)) + +### Fixes + +- Policy URL fields rejected some valid URLs, such as internationalized domain names, non-ASCII paths and URLs containing spaces. ([bug 2067819](https://bugzil.la/2067819)) +- [`SanitizeOnShutdown`](/reference/policies/sanitizeonshutdown/): When the policy turned clearing on, Manage Exceptions and the category settings in Firefox Settings were disabled too, even for categories the policy left unset. + Firefox 158 only. ([bug 2065295](https://bugzil.la/2065295)) +- [`DisableFirefoxAccounts`](/reference/policies/disablefirefoxaccounts/): The toolbar could report a signed-in account when accounts were disabled. + Firefox 158 only. ([bug 2066062](https://bugzil.la/2066062)) +- The Labs quick action in the address bar was still shown when Firefox Labs was turned off with [`UserMessaging`](/reference/policies/usermessaging/), and Manage AI was still shown when `browser.preferences.aiControls` was `false`. + Firefox 158 only. ([bug 2070378](https://bugzil.la/2070378)) +- [`WebsiteFilter`](/reference/policies/websitefilter/): Blocking is now applied more consistently to redirected and embedded content. +- Site lists in policies such as [`Permissions`](/reference/policies/permissions/) and [`PopupBlocking`](/reference/policies/popupblocking/) now also apply when a host is written with a trailing dot, such as `example.com.`. +- A policy set to `null` could stop other policies from applying. +- The `toolkit.policies.perUserDir` preference is now only adhered to in automated testing. + ## 157 - 2026-09-29 These changes apply to Firefox 157 and Firefox ESR 153.4.0 unless explicitly stated. diff --git a/src/content/docs/reference/policies/ExtensionSettings.mdx b/src/content/docs/reference/policies/ExtensionSettings.mdx index 2dd9e03..8162762 100644 --- a/src/content/docs/reference/policies/ExtensionSettings.mdx +++ b/src/content/docs/reference/policies/ExtensionSettings.mdx @@ -41,15 +41,17 @@ For each extension, you can provide the following fields: This is the default behavior. - `blocked`: Blocks installation of the extension and removes it from the device if already installed. - `force_installed`: Automatically installs the extension and prevents it from being removed by the user. - Requires an `install_url` unless the extension is hosted on addons.mozilla.org (see `install_url`). + Requires an `install_url` unless the extension is hosted on addons.mozilla.org or has an `update_url` (see `install_url`). As of Firefox 152, force-installed extensions are updated automatically unless `updates_disabled` is explicitly set to `true`. See [Installing an extension by ID](#installing-an-extension-by-id). - `normal_installed`: Automatically installs the extension but allows it to be disabled by the user. - Requires an `install_url` unless the extension is hosted on addons.mozilla.org (see `install_url`). + Requires an `install_url` unless the extension is hosted on addons.mozilla.org or has an `update_url` (see `install_url`). - `install_url`: The URL from which Firefox can download a `force_installed` or `normal_installed` extension. Firefox automatically installs, updates, or re-installs the extension when the XPI file's internal [`version`](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/manifest.json/version) changes. - As of Firefox 153, `install_url` is optional. When it is omitted for a `force_installed` or `normal_installed` extension, Firefox installs the latest version from [addons.mozilla.org](https://addons.mozilla.org) using the extension's ID. + - As of Firefox 158, when `install_url` is omitted and `update_url` is set, Firefox installs the extension from the update manifest at `update_url` instead. + Use this for self-hosted extensions that already publish an update manifest. - If installing from `addons.mozilla.org`, use `https://addons.mozilla.org/firefox/downloads/latest/ADDON_ID/latest.xpi`, substituting `ADDON_ID` with the extension's ID (for example, `uBlock0@raymondhill.net` or `{446900e4-71c2-419f-a6a7-df9c091e268b}`). Using the AMO ID ensures Firefox always downloads the latest version that matches the user's platform. - If installing from the local file system, use a [`file:///` URL](https://en.wikipedia.org/wiki/File_URI_scheme). Firefox will update or re-install the extension whenever the XPI file at that path changes. You can also manually trigger an update by changing the file name or path. @@ -66,6 +68,7 @@ For each extension, you can provide the following fields: - `temporarily_allow_weak_signatures`: (Firefox 127) Boolean that indicates whether to allow installing extensions signed using deprecated signature algorithms. - `private_browsing`: (Firefox 136, Firefox ESR 128.8) Boolean that indicates whether this extension should be enabled in private browsing. - `update_url`: (Firefox 151) A string specifying the URL Firefox will use to check for extension updates. This overrides the `update_url` specified in the extension manifest or is used if no `update_url` is specified in the manifest. + As of Firefox 158, if `install_url` is omitted, Firefox also uses this URL to install the extension. - `blocked_permissions`: (Firefox 153) An array of [API permissions](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/manifest.json/permissions) that extensions cannot be granted. An extension that requires one of these permissions cannot be installed, and is disabled if it is already installed. Optional permissions matching the list that were previously granted are revoked, and calls to `permissions.request()` for a blocked permission are rejected. diff --git a/src/content/docs/reference/policies/SitePolicies.mdx b/src/content/docs/reference/policies/SitePolicies.mdx index ce75774..bb89e0e 100644 --- a/src/content/docs/reference/policies/SitePolicies.mdx +++ b/src/content/docs/reference/policies/SitePolicies.mdx @@ -48,7 +48,7 @@ Currently the supported site policies are: > [!NOTE] > `ephemeral` controls when a container's data is deleted, not whether it is written to disk. > If Firefox crashes instead of shutting down normally, data may be left behind. - > At the next startup, Firefox clears the data of ephemeral containers that are no longer named by a rule, but container that is still named by a rule keeps its data until its last tab closes again or Firefox next shuts down normally. + > At the next startup, Firefox clears the data of ephemeral containers that are no longer named by a rule, but a container that is still named by a rule keeps its data until its last tab closes again or Firefox next shuts down normally. ## Examples From 2b642abec47928ed0331dc3b48dbd8923b8babd4 Mon Sep 17 00:00:00 2001 From: Brian Smith Date: Mon, 12 Oct 2026 09:22:01 +0200 Subject: [PATCH 2/2] relnote(158): Add 158 release notes --- release-notes/firefox.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/release-notes/firefox.md b/release-notes/firefox.md index 820e8d4..322d332 100644 --- a/release-notes/firefox.md +++ b/release-notes/firefox.md @@ -48,6 +48,10 @@ Firefox ESR 153 is the current ESR. - A policy set to `null` could stop other policies from applying. - The `toolkit.policies.perUserDir` preference is now only adhered to in automated testing. +### Notes + +- Firefox ESR 140 is no longer supported. Firefox ESR 140.17.0, released with Firefox 157, was its final build. + ## 157 - 2026-09-29 These changes apply to Firefox 157 and Firefox ESR 153.4.0 unless explicitly stated.