nongnu: firefox: Update to 153.0.4 [security fixes].

Fixes CVE-2026-16349, CVE-2026-16350, CVE-2026-16351, CVE-2026-16352,
CVE-2026-16353, CVE-2026-16354, CVE-2026-16355, CVE-2026-16356,
CVE-2026-16357, CVE-2026-16358, CVE-2026-16359, CVE-2026-16360,
CVE-2026-16362, CVE-2026-16363, CVE-2026-16364, CVE-2026-16365,
CVE-2026-16366, CVE-2026-16367, CVE-2026-16368, CVE-2026-16369,
CVE-2026-16370, CVE-2026-16371, CVE-2026-16372, CVE-2026-16373,
CVE-2026-16374, CVE-2026-16375, CVE-2026-16376, CVE-2026-16377,
CVE-2026-16378, CVE-2026-16379, CVE-2026-16380, CVE-2026-16381,
CVE-2026-16382, CVE-2026-16383, CVE-2026-16384, CVE-2026-16385,
CVE-2026-16386, CVE-2026-16387, CVE-2026-16388, CVE-2026-16389,
CVE-2026-16390, CVE-2026-16391, CVE-2026-16392, CVE-2026-16393,
CVE-2026-16394, CVE-2026-16395, CVE-2026-16396, CVE-2026-16397,
CVE-2026-16398, CVE-2026-16399, CVE-2026-16400, CVE-2026-16401,
CVE-2026-16402, CVE-2026-16403, CVE-2026-16404, CVE-2026-16405,
CVE-2026-16406, CVE-2026-16407, CVE-2026-16408, CVE-2026-16409,
CVE-2026-16410, CVE-2026-16411, CVE-2026-16412, CVE-2026-18809.

* nongnu/packages/mozilla.scm (firefox): Update to 153.0.4.
[source]<patches>: Sort.
[native-inputs]: Do not replace rust-cbindgen.

Signed-off-by: Jonathan Brielmaier <jonathan.brielmaier@web.de>

1 files changed, 7 insertions, 8 deletions

diff --git a/nongnu/packages/mozilla.scm b/nongnu/packages/mozilla.scm
index 4f97cec..e359d53 100644
--- a/nongnu/packages/mozilla.scm
+++ b/nongnu/packages/mozilla.scm
@@ -526,26 +526,26 @@ Release (ESR) version.")
 
 ;; Update this id with every firefox update to its release date.
 ;; It's used for cache validation and therefore can lead to strange bugs.
-(define %firefox-build-id "20260714035250")
+(define %firefox-build-id "20260720102324")
 
 (define-public firefox
   (package
     (inherit firefox-esr)
     (name "firefox")
-    (version "152.0.6")
+    (version "153.0.4")
     (source
      (origin
        (method url-fetch)
        (uri (string-append "https://archive.mozilla.org/pub/firefox/releases/"
                            version "/source/firefox-" version ".source.tar.xz"))
        (sha256
-        (base32 "03hgcrhdc56qiy1f5b8ps2z7vc5fqk9xznp642mfvm0rim7hq8pa"))
+        (base32 "0j4a0ak5658n6iwgx4jc0agqlf1dc403p6qkrw23pfv69j987app"))
        (patches
         (nongnu-patches
-         "firefox-restore-desktop-files.patch"
+         "firefox-add-store-to-rdd-allowlist.patch"
          "firefox-compare-paths.patch"
-         "firefox-use-system-wide-dir.patch"
-         "firefox-add-store-to-rdd-allowlist.patch"))
+         "firefox-restore-desktop-files.patch"
+         "firefox-use-system-wide-dir.patch"))
        ;; XXX: 75 Mo (800+ Mo uncompressed) of unused tests.
        ;; Removing it makes it possible to compile on some systems.
        (modules '((guix build utils)))
@@ -560,8 +560,7 @@ Release (ESR) version.")
     (native-inputs
      (modify-inputs native-inputs
        (replace "rust" rust-firefox)
-       (replace "rust:cargo" `(,rust-firefox "cargo"))
-       (replace "rust-cbindgen" rust-cbindgen-0.29)))
+       (replace "rust:cargo" `(,rust-firefox "cargo"))))
     (description
      "Full-featured browser client built from Firefox source tree, without
 the official icon and the name \"firefox\".")))