.github/workflows/ignore-some-audit-findings.yml

@@ -0,0 +1,33 @@
+name: Ignore some audit findings
+on:
+  issues:
+    types: [opened]
+
+jobs:
+  create-pr:
+    runs-on: ubuntu-latest
+    env:
+      GH_TOKEN: ${{ secrets.AUDIT_CONFIG_TOKEN }}
+      IGNORE_PAT: 'cwe-133|cwe-400|cwe-1050|cwe-1333|denial of service|dos|redos|resource exhaustion|regexp|rxdos'
+      ISSUE_TITLE: ${{ github.event.issue.title }}
+      ISSUE_URL: ${{ github.event.issue.html_url }}
+    steps:
+      - name: Trigger the creation of an audit-config PR to ignore an audit finding if it matches the specified criteria
+        if: startsWith(github.event.issue.title, 'Audit finding:') &&
+            contains(github.event.issue.labels.*.name, 'bot/type/audit') &&
+            github.event.issue.user.login == 'brave-builds'
+        run: |
+          set -eEo pipefail
+          shopt -s inherit_errexit
+
+          if advisory_id="$(cut -d' ' -f3 <<<"${ISSUE_TITLE:?}"|grep -oP 'GHSA-\w+-\w+-\w+')"; then
+              advisory_details="$(gh api -H "Accept: application/vnd.github+json" "/advisories/$advisory_id" \
+                  -q '.cwes[].cwe_id + "\n" + .summary + "\n" + .description')"
+
+              if grep -qwiE "${IGNORE_PAT:?}" <<<"${advisory_details:?}"; then
+                  gh -R "${GITHUB_REPOSITORY_OWNER:?}"/audit-config workflow run create_pull_request.yml \
+                      -f advisory="${advisory_id:?}" \
+                      -f issue="${ISSUE_URL:?}"
+                  echo "Opened a PR to ignore $advisory_id"|tee "${GITHUB_STEP_SUMMARY:?}"
+              fi
+          fi

.github/workflows/tweet-nightly.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Tweet
-        uses: nearform-actions/github-action-notify-twitter@5f60ea13517272e68eac76cd26f5a8f33bf3afaa # v1.2.1
+        uses: nearform-actions/github-action-notify-twitter@b3fa623c2f320117e8a08e20564c4ce0a5e67930 # v1.2.3
         with:
           message: "🎉 Issue resolved: ${{ github.event.issue.title }} by ${{ github.event.issue.user.login }}\n${{ github.event.issue.html_url }}"
           twitter-app-key: ${{ secrets.TWITTER_CONSUMER_API_KEY }}

README.md

@@ -31,7 +31,7 @@ Our [Wiki](https://github.com/brave/brave-browser/wiki) also has some useful tec
 
 Help us translate Brave to your language by submitting translations at https://explore.transifex.com/brave/brave_en/.
 
-Follow [@brave](https://twitter.com/brave) on Twitter for important news and announcements.
+Follow [@brave](https://x.com/brave) on X for important news and announcements.
 
 ## Install prerequisites
 
@@ -40,7 +40,8 @@ Follow the instructions for your platform:
 - [macOS](https://github.com/brave/brave-browser/wiki/macOS-Development-Environment)
 - [iOS](https://github.com/brave/brave-browser/wiki/iOS-Development-Environment)
 - [Windows](https://github.com/brave/brave-browser/wiki/Windows-Development-Environment)
-- [Linux/Android](https://github.com/brave/brave-browser/wiki/Linux-Development-Environment)
+- [Linux](https://github.com/brave/brave-browser/wiki/Linux-Development-Environment)
+- [Android](https://github.com/brave/brave-browser/wiki/Android-Development-Environment)
 
 ## Clone and initialize the repo
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "brave",
-  "version": "1.75.18",
+  "version": "1.79.3",
   "description": "Next generation Brave browser for macOS, Windows, Linux, and Android",
   "homepage": "https://github.com/brave/brave-browser#readme",
   "bugs": {
@@ -37,6 +37,10 @@
     "update_patches": "cd src/brave && npm run update_patches --",
     "versions": "cd src/brave && npm run versions --"
   },
+  "engines": {
+    "node": ">=20.0.0 <22.0.0",
+    "npm": ">=10.0.0"
+  },
   "config": {
     "projects": {
       "brave-core": {