16.0.5.3 of course. Why build 16.0.5.1, a later version if there is a newer version 16.0.5.3 with a corresponding stable release from yesterday? Did I somehow create confusion to imply that?
I don’t know if the tb-updater would still fail during the Qubes build process. For test builds could use --tb open to avoid a failing Tor Browser downloading breaking the build process but then Tor Browser might not be including Tor Browser. tb-updater however should work in the resulting image.
There are many improvements in the developers repository but also a very few remaining unstable things. So not yet in testers.
Building Qubes-Whonix from the testers repository would result in upgraded Debian and Qubes packages. None of the developers repository package upgrades are security critical. Only enhancements.
I planned to attempt a new Qubes-Whonix build once everything is stablized.
All build dependencies are now automatically installed. There are no more build dependencies the user must install before being able to run derivative-maker. (Except the tool to download the source code, most likely git.)
derivative-delete command no longer required, because:
VirtualBox VMs are now created under Linux user account dm-vbox-temp to avoid conflicts with already existing user VMs.
dm-prepare-release command no longer required because running it has been automated.
17.2.0.4-developers-only:
Downgraded stray loop devices sanity test from error to warning to avoid false-positive error complaining about /var/swapfile loop device.
Updated Tor Project repository signing key.
Automatically create local signing key if none exists yet, so dm-prepare-release can be run equally in all situations (official builds, CI builds, user custom builds), therefore:
Unified images VirtualBox ova are added to ~/derivative-binary folder for better usability as it was done in the previous stable release.