From 0374b4e5acc7609fe2cd0a67e48826e709df64f6 Mon Sep 17 00:00:00 2001
From: Ryan Hendrickson <ryan.hendrickson@alum.mit.edu>
Date: Sat, 11 Jul 2026 19:20:50 -0400
Subject: [PATCH 1/2] buildMozillaMach: backport BZ 2047651 patch for 153

---
 .../build-mozilla-mach/default.nix             | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/pkgs/build-support/build-mozilla-mach/default.nix b/pkgs/build-support/build-mozilla-mach/default.nix
index 58f3f6000a56..f8298a4c6fe8 100644
--- a/pkgs/build-support/build-mozilla-mach/default.nix
+++ b/pkgs/build-support/build-mozilla-mach/default.nix
@@ -349,6 +349,24 @@ buildStdenv.mkDerivation {
       # https://bugzilla.mozilla.org/show_bug.cgi?id=2046162
       ./153-cbindgen-0.29.4-compat.patch
     ]
+    ++
+      # Fixes `ld.lld: error: undefined symbol: FREEBL_GetVector`
+      # https://bugzilla.mozilla.org/show_bug.cgi?id=2047651
+      lib.optionals
+        (
+          lib.versionAtLeast version "153"
+          && lib.versionOlder version "154"
+          # We don't set --with-system-nss on Darwin, so it should be
+          # unaffected.
+          && !stdenv.hostPlatform.isDarwin
+        )
+        [
+          (fetchpatch {
+            name = "link-freebl-explicitly-for-system-nss-builds.patch";
+            url = "https://hg-edge.mozilla.org/mozilla-central/raw-rev/1a56071ddc0fe97a55c3b825e1dd33c8422b9fc1";
+            hash = "sha256-+HiU7RMPmV7I7SIzjP0Q6iSDJL/vBjc3UcwUTg57lNQ=";
+          })
+        ]
     ++ extraPatches;
 
   postPatch = ''

From 37a224dda763d15bc86df354624ac3be835e3454 Mon Sep 17 00:00:00 2001
From: Ryan Hendrickson <ryan.hendrickson@alum.mit.edu>
Date: Sat, 11 Jul 2026 19:20:50 -0400
Subject: [PATCH 2/2] firefox-devedition-unwrapped: 152.0b3 -> 153.0b11

---
 .../browsers/firefox/packages/firefox-devedition.nix          | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix b/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix
index 8b7ee5d85834..c7133df13e16 100644
--- a/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix
+++ b/pkgs/applications/networking/browsers/firefox/packages/firefox-devedition.nix
@@ -10,13 +10,13 @@
 buildMozillaMach rec {
   pname = "firefox-devedition";
   binaryName = "firefox-devedition";
-  version = "152.0b8";
+  version = "153.0b11";
   applicationName = "Firefox Developer Edition";
   requireSigning = false;
   branding = "browser/branding/aurora";
   src = fetchurl {
     url = "mirror://mozilla/devedition/releases/${version}/source/firefox-${version}.source.tar.xz";
-    sha512 = "e76142f19c3eccfeedd069bb14a6732b73a848ecbd16e74b6902e73b560db023611fabfef238d2f92b522ad75bb24d9368e2a75dfac9a6ff6c665a542445f157";
+    sha512 = "b9cba9de51157db94ae421fcb82e2172e3a3b5026b01b1049c858e45302603dde9e8d859a163d1ec00e225788516fb769c1b7b1a4bd4f4ed3785c9552aab4e78";
   };
 
   # buildMozillaMach sets MOZ_APP_REMOTINGNAME during configuration, but