v0.38.0

Updates OpenWPM to Firefox 157.

See the CHANGELOG for details.

Highlights

• Firefox 155.0.1 → 157, with the Extension manifest's strict_min_version pinned to match.
• Fixes lost records after an unpaired UTF-16 surrogate. A page-chosen string such as "\ud800" made the SQLite provider raise UnicodeEncodeError, which ended the extension's connection and dropped every later record of the session. Lone surrogates are now stored as U+FFFD.
• Firefox prefs cleanup. Normandy, browser updates and Safe Browsing list updates are now disabled through the prefs Firefox actually reads, including the new google5 Safe Browsing provider, which previously kept updating.

Data changes

• http_requests.post_body now includes form fields named __proto__, which Firefox before 157 dropped from requestBody.formData (bug 2061470).
• Phishing Safe Browsing is now actually disabled: the previous pref name was misspelled.

What's Changed

• ci: cancel superseded runs on the same pull request by @vringar in #1233
• docs: let the page use the full viewport width by @vringar in #1231
• chore(extension): ignore the bundled stealth.js build output by @vringar in #1232
• docs(readme): point the CI badge at the workflow file by @vringar in #1228
• ci: bound the demo and pre-commit jobs by @vringar in #1234
• ci: extend the concurrency guard to CodeQL by @vringar in #1235
• build(mypy): type-check against the real environment by @vringar in #1236
• chore: bias toward terse comments and descriptions by @vringar in #1237
• fix(storage): store lone surrogates instead of dropping the connection by @vringar in #1242
• fix(prefs): remove obsolete Firefox preferences by @vringar in #1140
• release: v0.38.0 (Firefox 157) by @vringar in #1239

Full Changelog: v0.37.0...v0.38.0