please consider a short note about where patches are found and process to apply

[kencu]

I have not really understood exactly where the new changes come from upstream, and how to screen them to apply them to this codebase.

Perhaps you might have a moment to add a note about how you do that to the readme?

For building, I have had a working MacPorts portfile for some time. I will try to get that up into the MP repo so it can be built there.

Thanks for everything!

[classilla]

Sure, though any patches I land will still go to this tree.

They come from the current ESR, whatever that is. You can peruse committed diffs, even if you can't see the underlying issue reports until they are "declassified," from https://hg.mozilla.org/releases/mozilla-esr78 (adjust for version).

The scripts ./104fx_upcerts.sh and ./104fx_uptzdata.sh automate the processes of updating certificates, eTLDs, roots, HSTS lists, cryptominer blocks and internationalization timezone data.