What's Changed chore(deps): bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2 by @dependabot[bot] in #910 Upstream Changes https://chromereleases.googleblog.com/2026/10/stable-channel-...

What's Changed feat(selinux): allow bubblewrap_exec for script domain by @HastD in #884 chore(deps): bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1 by @dependabot[bot] in #906 feat: ...

What's Changed feat: improve CFI coverage on arm64 by @RKNF404 in #897 chore: port to 154 by @RKNF404 in #896 feat(154): port additional patches by @RoyalOughtness in #898 Upstream Changes https:...

What's Changed chore(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 by @dependabot[bot] in #893 chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 by @dependabot[b...

What's Changed fix(aarch64): crubit build failure by @RoyalOughtness in #885 chore: use system typescript binary by @RKNF404 in #886 fix: syntax error by @RKNF404 in #887 feat: crossbuilds for aa...

What's Changed chore(deps): bump step-security/harden-runner from 2.21.0 to 2.21.1 by @dependabot[bot] in #879 chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 by @dependabot[bot] in...

What's Changed chore: set XDG_CACHE_HOME instead of bind mounting to isolate cache by @RKNF404 in #874 Upstream Changes https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-des...

What's Changed fix: trivalent patch license file link by @RoyalOughtness in #869 chore(deps): bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8 by @dependabot[bot] in #871 chore: fix br...

What's Changed chore(deps): bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 by @dependabot[bot] in #855 chore(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 by @dependa...

What's Changed chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 by @dependabot[bot] in #848 chore(deps): bump github/codeql-action/upload-sarif from 4.37.5 to 4.37.6 by @dependa...

What's Changed chore(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.5 by @dependabot[bot] in #846 chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 by @dependabot[b...

What's Changed chore(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4 by @dependabot[bot] in #842 Upstream Changes https://chromereleases.googleblog.com/2026/08/stable-channel...

What's Changed fix: webrtc pref not applying by @RKNF404 in #838 chore(deps): bump github/codeql-action/upload-sarif from 4.37.2 to 4.37.3 by @dependabot[bot] in #826 chore(deps): bump ossf/scorec...

What's Changed chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #820 fix: move middleclickpaste feature handling to cc file instead of header by @RKNF404 in #822 chore...

What's Changed chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 by @dependabot[bot] in #818 chore(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1 by @dependabot[b...

What's Changed feat: replace codacy with super linter by @RoyalOughtness in #814 chore(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 by @dependabot[bot] in #813 feat(cicd): d...

What's Changed chore(cicd): bump workflows to ubuntu 26.04 by @RoyalOughtness in #806 feat: skip dark mode for images by default by @RKNF404 in #808 chore(deps): bump step-security/harden-runner f...

Upstream Changes https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop.html Full Changelog: 150.0.7871.46-445734...150.0.7871.100-445863

What's Changed fix(temp): disable audio service sandbox due to pulseaudio and alsa issues by @RKNF404 in #791 chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in ...

What's Changed fix: make BWRAP_ARGS into an array by @HastD in #780 fix: Reduce caps in faq links by @kralupus in #782 chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2 by @dependabot[b...

What's Changed fix: make BWRAP_ARGS into an array by @HastD in #780 Upstream Changes https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html Full Changelo...

What's Changed chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #773 chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1 by @dependabot[bot] in #774 chore(ui)...

What's Changed chore: replace JIT site setting text to be more accurate by @RKNF404 in #769 feat: configure GPU features to enable accelerated raster and disable GPU disk cache by @RKNF404 in #770...

What's Changed chore(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4 by @dependabot[bot] in #763 fix: respect XDG_CACHE_HOME instead of hardcoding $HOME/.cache by @ymcx in #762 chore...

What's Changed chore(deps): bump zizmorcore/zizmor-action from 0.5.5 to 0.5.6 by @dependabot[bot] in #758 Upstream Changes https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-...

v4.9.1 - Secureblue goes SUID-less! Reminder: releases are symbolic. Builds are created and published immediately after new commits are merged. SUID-less All secureblue main images (non-nvidia imag...

What's Changed fix(build): webgpu gn name by @RoyalOughtness in #748 Full Changelog: 148.0.7778.178-444892...148.0.7778.178-444896

What's Changed chore(ui): change Disable to Block by @RKNF404 in #731 chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 by @dependabot[bot] in #733 chore: reorganize directories by @RKN...

What's Changed chore(deps): bump step-security/harden-runner from 2.19.0 to 2.19.1 by @dependabot[bot] in #725 chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in #...

What's Changed chore: add new Control D IPs by @RKNF404 in #709 chore: disable swiftshader usage in graphics renderers by @RKNF404 in #711 feat: expose vertical tabs preferences by @RKNF404 in #71...

Steps to install secureblue

What's Changed chore: use v8 icon not generic code icon for disabled optimizers by @RKNF404 in #701 chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 by @dependabot[bot] in #705 ...

What's Changed chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #700 chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @dependabot[bot] in #699 ...

What's Changed fix: report browser properly from commandline by @RKNF404 in #689 fix: proper toggle control for NSS by @RKNF404 in #688 fix: JIT UX controls by @RKNF404 in #686 chore(deps): bump s...

What's Changed feat(selinux): Get rid of all file WX of Trivalent's Selinux trivalent_domain by @PhysicsIsAwesome in #666 chore(deps): bump github/codeql-action from 4.34.0 to 4.35.1 by @dependabo...

The Stable channel has been updated to 146.0.7680.177/178 for Windows/Mac  and  146.0.7680.177 for Linux, which will roll out over the comin...

What's Changed chore(singleton): add singleton hostname fix by @RKNF404 in #674 Full Changelog: 146.0.7680.164-443579...146.0.7680.177-443748

Donation options for secureblue

What's Changed chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @dependabot[bot] in #663 chore(deps): bump github/codeql-action from 4.32.6 to 4.34.0 by @dependabot[bot] in #664 ...

What's Changed chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by @dependabot[bot] in #661 Upstream Changes https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-...

What's Changed chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by @dependabot[bot] in #654 chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by @dependabot[bot] in #...

What's Changed chore(deps): bump step-security/harden-runner from 2.14.2 to 2.15.0 by @dependabot[bot] in #636 chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in ...

What's Changed chore(deps): bump step-security/harden-runner from 2.14.2 to 2.15.0 by @dependabot[bot] in #636 chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in ...

v4.8.2 - Mitigate rpm-ostree regression Reminder: releases are symbolic. Builds are created and published immediately after new commits are merged. There is a critical rpm-ostree regression in vers...

What's Changed chore(deps): bump github/codeql-action from 4.31.10 to 4.32.4 by @dependabot[bot] in #632 chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in #635...

Upstream Changes https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_23.html Full Changelog: 145.0.7632.75-442755...145.0.7632.116-442971

Build architecture for secureblue

What's Changed chore(deps): bump step-security/harden-runner from 2.14.1 to 2.14.2 by @dependabot[bot] in #626 chore: add debug conditions by @RKNF404 in #628 fix: right click crash due to SideByS...

What's Changed feat: use source cache versioning by @RKNF404 in #624 Full Changelog: 145.0.7632.67-442735...145.0.7632.75-442755