diff --git a/dist/chromium/publish-stable.js b/dist/chromium/publish-stable.js
new file mode 100644
index 000000000..74c000b77
--- /dev/null
+++ b/dist/chromium/publish-stable.js
@@ -0,0 +1,160 @@
+/*******************************************************************************
+
+    uBlock Origin - a comprehensive, efficient content blocker
+    Copyright (C) 2025-present Raymond Hill
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see {http://www.gnu.org/licenses/}.
+
+    Home: https://github.com/gorhill/uBlock
+*/
+
+import * as fs from 'node:fs/promises';
+import * as ghapi from '../github-api.js';
+import path from 'node:path';
+import process from 'node:process';
+
+/******************************************************************************/
+
+const secrets = await ghapi.getSecrets();
+const githubAuth = `Bearer ${secrets.github_token}`;
+const commandLineArgs = ghapi.commandLineArgs;
+const githubOwner = commandLineArgs.ghowner;
+const githubRepo = commandLineArgs.ghrepo;
+const githubTag = commandLineArgs.ghtag;
+const cwsId = commandLineArgs.cwsid;
+
+/******************************************************************************/
+
+async function publishToCWS(filePath) {
+    // Prepare access token
+    console.log('Generating access token...');
+    const authURL = 'https://accounts.google.com/o/oauth2/token';
+    const authRequest = new Request(authURL, {
+        body: JSON.stringify({
+            client_id: secrets.cs_id,
+            client_secret: secrets.cs_secret,
+            grant_type: 'refresh_token',
+            refresh_token: secrets.cs_refresh,
+        }),
+        method: 'POST',
+    });
+    const authResponse = await fetch(authRequest);
+    if ( authResponse.ok === false ) {
+        console.error(`Error: Auth failed -- server error ${authResponse.statusText}`);
+        process.exit(1);
+    }
+    const responseDict = await authResponse.json()
+    if ( responseDict.access_token === undefined ) {
+        console.error('Error: Auth failed -- no access token');
+        console.error('Error: Auth failed --', JSON.stringify(responseDict, null, 2));
+        process.exit(1);
+    }
+    const cwsAuth = `Bearer ${responseDict.access_token}`;
+    if ( responseDict.refresh_token ) {
+        secrets.cs_refresh = responseDict.refresh_token
+    }
+
+    // Read package
+    const data = await fs.readFile(filePath);
+
+    // Upload
+    console.log('Uploading package...')
+    const uploadURL = `https://www.googleapis.com/upload/chromewebstore/v1.1/items/${cwsId}`;
+    const uploadRequest = new Request(uploadURL, {
+        body: data,
+        headers: {
+            'Authorization': cwsAuth,
+            'x-goog-api-version': '2',
+        },
+        method: 'PUT',
+    });
+    const uploadResponse = await fetch(uploadRequest);
+    if ( uploadResponse.ok === false ) {
+        console.error(`Upload failed -- server error ${uploadResponse.statusText}`);
+        process.exit(1)
+    }
+    const uploadDict = await uploadResponse.json();
+    if ( uploadDict.uploadState !== 'SUCCESS' ) {
+        console.error(`Upload failed -- server error ${uploadDict['uploadState']}`);
+        process.exit(1);
+    }
+    console.log('Upload succeeded.')
+
+    // Publish
+    console.log('Publishing package...')
+    const publishURL = `https://www.googleapis.com/chromewebstore/v1.1/items/${cwsId}/publish`;
+    const publishRequest = new Request(publishURL, {
+        headers: {
+            'Authorization': cwsAuth,
+            'x-goog-api-version': '2',
+            'Content-Length': '0',
+        },
+        method: 'POST',
+    });
+    const publishResponse = await fetch(publishRequest);
+    if ( publishResponse.ok === false ) {
+        console.error(`Error: Chrome store publishing failed -- server error ${publishResponse.statusText}`);
+        process.exit(1);
+    }
+    const publishDict = await publishResponse.json();
+    if (
+        Array.isArray(publishDict.status) === false ||
+        publishDict.status.includes('OK') === false
+    ) {
+        console.error(`Publishing failed -- server error ${publishDict.status}`);
+        process.exit(1);
+    }
+    console.log('Publishing succeeded.')
+}
+
+/******************************************************************************/
+
+async function main() {
+    if ( secrets === undefined ) { return 'Need secrets'; }
+    if ( githubOwner === '' ) { return 'Need GitHub owner'; }
+    if ( githubRepo === '' ) { return 'Need GitHub repo'; }
+
+    ghapi.setGithubContext(githubOwner, githubRepo, githubTag, githubAuth);
+
+    const assetInfo = await ghapi.getAssetInfo('chromium');
+
+    console.log(`GitHub owner: "${githubOwner}"`);
+    console.log(`GitHub repo: "${githubRepo}"`);
+    console.log(`Release tag: "${githubTag}"`);
+    console.log(`Release asset: "${assetInfo.name}"`);
+
+    // Fetch asset from GitHub repo
+    const filePath = await ghapi.downloadAssetFromRelease(assetInfo);
+    console.log('Asset saved at', filePath);
+
+    // Upload to Chrome Web Store
+    await publishToCWS(filePath);
+
+    // Clean up
+    if ( commandLineArgs.keep !== true ) {
+        const tmpdir = path.dirname(filePath);
+        console.log(`Removing ${tmpdir}`);
+        ghapi.shellExec(`rm -rf "${tmpdir}"`);
+    }
+
+    console.log('Done');
+}
+
+main().then(result => {
+    if ( result !== undefined ) {
+        console.log(result);
+        process.exit(1);
+    }
+    process.exit(0);
+});
diff --git a/dist/firefox/upload-signed-beta.py b/dist/firefox/upload-signed-beta.py
new file mode 100755
index 000000000..5c9588376
--- /dev/null
+++ b/dist/firefox/upload-signed-beta.py
@@ -0,0 +1,257 @@
+#!/usr/bin/env python3
+
+import datetime
+import json
+import jwt
+import os
+import re
+import requests
+import subprocess
+import sys
+import tempfile
+
+from string import Template
+
+# - Download target (raw) uBlock0.firefox.xpi from GitHub
+#   - This is referred to as "raw" package
+#   - This will fail if not a dev build
+# - Modify raw package to make it self-hosted
+#   - This is referred to as "unsigned" package
+# - Ask AMO to sign uBlock0.firefox.xpi
+#   - Generate JWT to be used for communication with server
+#   - Upload unsigned package to AMO
+#   - Wait for a valid download URL for signed package
+#   - Download signed package as uBlock0.firefox.signed.xpi
+#     - This is referred to as "signed" package
+# - Upload uBlock0.firefox.signed.xpi to GitHub
+# - Remove uBlock0.firefox.xpi from GitHub
+# - Modify updates.json to point to new version
+#   - Commit changes to repo
+
+# Find path to project root
+projdir = os.path.split(os.path.abspath(__file__))[0]
+while not os.path.isdir(os.path.join(projdir, '.git')):
+    projdir = os.path.normpath(os.path.join(projdir, '..'))
+# Check that found project root is valid
+version_filepath = os.path.join(projdir, 'dist', 'version')
+if not os.path.isfile(version_filepath):
+    print('Version file not found.')
+    exit(1)
+
+# We need a version string to work with
+if len(sys.argv) >= 2 and sys.argv[1]:
+    tag_version = sys.argv[1]
+else:
+    tag_version = input('Github release version: ')
+tag_version.strip()
+match = re.search('^(\d+\.\d+\.\d+)(?:(b|rc)(\d+))?$', tag_version)
+if not match:
+    print('Error: Invalid version string.')
+    exit(1)
+ext_version = match.group(1);
+if match.group(2):
+    revision = int(match.group(3))
+    if match.group(2) == 'rc':
+        revision += 100;
+    ext_version += '.' + str(revision)
+
+extension_id = 'uBlock0@raymondhill.net'
+tmpdir = tempfile.TemporaryDirectory()
+raw_xpi_filename = 'uBlock0_' + tag_version + '.firefox.xpi'
+raw_xpi_filepath = os.path.join(tmpdir.name, raw_xpi_filename)
+unsigned_xpi_filepath = os.path.join(tmpdir.name, 'uBlock0.firefox.unsigned.xpi')
+signed_xpi_filename = 'uBlock0_' + tag_version + '.firefox.signed.xpi'
+signed_xpi_filepath = os.path.join(tmpdir.name, signed_xpi_filename)
+github_owner = 'gorhill'
+github_repo = 'uBlock'
+
+# Load/save auth secrets
+# The tmp directory is excluded from git
+ubo_secrets = dict()
+ubo_secrets_filename = os.path.join(projdir, 'tmp', 'ubo_secrets')
+if os.path.isfile(ubo_secrets_filename):
+    with open(ubo_secrets_filename) as f:
+        ubo_secrets = json.load(f)
+
+def input_secret(prompt, token):
+    if token in ubo_secrets:
+        prompt += ' ✔'
+    prompt += ': '
+    value = input(prompt).strip()
+    if len(value) == 0:
+        if token not in ubo_secrets:
+            print('Token error:', token)
+            exit(1)
+        value = ubo_secrets[token]
+    elif token not in ubo_secrets or value != ubo_secrets[token]:
+        ubo_secrets[token] = value
+        exists = os.path.isfile(ubo_secrets_filename)
+        with open(ubo_secrets_filename, 'w') as f:
+            json.dump(ubo_secrets, f, indent=2)
+        if not exists:
+            os.chmod(ubo_secrets_filename, 0o600)
+    return value
+
+# GitHub API token
+github_token = input_secret('Github token', 'github_token')
+github_auth = 'token ' + github_token
+
+#
+# Get metadata from GitHub about the release
+#
+
+# https://developer.github.com/v3/repos/releases/#get-a-single-release
+print('Downloading release info from GitHub...')
+release_info_url = 'https://api.github.com/repos/{0}/{1}/releases/tags/{2}'.format(github_owner, github_repo, tag_version)
+headers = { 'Authorization': github_auth, }
+response = requests.get(release_info_url, headers=headers)
+if response.status_code != 200:
+    print('Error: Release not found: {0}'.format(response.status_code))
+    exit(1)
+release_info = response.json()
+
+#
+# Extract URL to raw package from metadata
+#
+
+# Find url for uBlock0.firefox.xpi
+raw_xpi_url = ''
+for asset in release_info['assets']:
+    if asset['name'] == signed_xpi_filename:
+        print('Error: Found existing signed self-hosted package.')
+        exit(1)
+    if asset['name'] == raw_xpi_filename:
+        raw_xpi_url = asset['url']
+if len(raw_xpi_url) == 0:
+    print('Error: Release asset URL not found')
+    exit(1)
+
+#
+# Ask AMO to sign the self-hosted package
+# - https://developer.mozilla.org/en-US/Add-ons/Distribution#Distributing_your_add-on
+# - https://pyjwt.readthedocs.io/en/latest/usage.html
+# - https://addons-server.readthedocs.io/en/latest/topics/api/auth.html
+# - https://addons-server.readthedocs.io/en/latest/topics/api/signing.html
+#
+
+amo_api_key = ''
+amo_secret = ''
+
+def get_jwt_auth():
+    global amo_api_key
+    if amo_api_key == '':
+        amo_api_key = input_secret('AMO API key', 'amo_api_key')
+    global amo_secret
+    if amo_secret == '':
+        amo_secret = input_secret('AMO API secret', 'amo_secret')
+    amo_nonce = os.urandom(8).hex()
+    jwt_payload = {
+        'iss': amo_api_key,
+        'jti': amo_nonce,
+        'iat': datetime.datetime.utcnow(),
+        'exp': datetime.datetime.utcnow() + datetime.timedelta(seconds=15),
+    }
+    return 'JWT ' + jwt.encode(jwt_payload, amo_secret)
+
+# https://blog.mozilla.org/addons/2019/11/11/security-improvements-in-amo-upload-tools/
+#   "We recommend allowing up to 15 minutes."
+headers = { 'Authorization': get_jwt_auth(), }
+version_details_url = 'https://addons.mozilla.org/api/v5/addons/addon/{0}/versions/{1}/'.format(extension_id, ext_version)
+print('Fetching package details...')
+version_details_response = requests.get(version_details_url, headers=headers)
+if version_details_response.status_code > 400:
+    print('Error: Fetching derails failed -- server error {0}'.format(version_details_response.status_code))
+    print(version_details_response.text)
+    exit(1)
+print('Fetching version details succeeded.')
+version_details = version_details_response.json();
+if version_details['file']['status'] != 'public':
+    print('Error: Version is not approved -- server error {0}'.format(version_details_response.status_code))
+    print(version_details_response.text)
+    exit(1)
+if not version_details['file']['url']:
+    print('Error: No file URL')
+    print(version_details_response.text)
+    exit(1)
+download_url = version_details['file']['url']
+print('Downloading signed self-hosted xpi package from {0}...'.format(download_url))
+response = requests.get(download_url, headers=headers)
+if response.status_code != 200:
+    print('Error: Download signed package failed -- server error {0}'.format(response.status_code))
+    print(response.text)
+    exit(1)
+with open(signed_xpi_filepath, 'wb') as f:
+    f.write(response.content)
+    f.close()
+print('Signed self-hosted xpi package downloaded.')
+
+#
+# Upload signed package to GitHub
+#
+
+# https://developer.github.com/v3/repos/releases/#upload-a-release-asset
+print('Uploading signed self-hosted xpi package to GitHub...')
+with open(signed_xpi_filepath, 'rb') as f:
+    url = release_info['upload_url'].replace('{?name,label}', '?name=' + signed_xpi_filename)
+    headers = {
+        'Authorization': github_auth,
+        'Content-Type': 'application/zip',
+    }
+    response = requests.post(url, headers=headers, data=f.read())
+    if response.status_code != 201:
+        print('Error: Upload signed package failed -- server error: {0}'.format(response.status_code))
+        exit(1)
+
+#
+# Remove raw package from GitHub
+#
+
+# https://developer.github.com/v3/repos/releases/#delete-a-release-asset
+print('Remove raw xpi package from GitHub...')
+headers = { 'Authorization': github_auth, }
+response = requests.delete(raw_xpi_url, headers=headers)
+if response.status_code != 204:
+    print('Error: Deletion of raw package failed -- server error: {0}'.format(response.status_code))
+
+#
+# Update updates.json to point to new package -- but only if just-signed
+# package is higher version than current one.
+#
+
+# Be sure we are in sync with potentially modified files on remote
+r = subprocess.run(['git', 'pull', 'origin', 'master'], stdout=subprocess.PIPE)
+rout = bytes.decode(r.stdout).strip()
+
+def int_from_version(version):
+    parts = version.split('.')
+    if len(parts) == 3:
+        parts.append('0')
+    return int(parts[0])*10e9 + int(parts[1])*10e6 + int(parts[2])*10e3 + int(parts[3])
+
+print('Update GitHub to point to newly signed self-hosted xpi package...')
+updates_json_filepath = os.path.join(projdir, 'dist', 'firefox', 'updates.json')
+with open(updates_json_filepath) as f:
+    updates_json = json.load(f)
+    f.close()
+    previous_version = updates_json['addons'][extension_id]['updates'][0]['version']
+    if int_from_version(ext_version) > int_from_version(previous_version):
+        with open(os.path.join(projdir, 'dist', 'firefox', 'updates.template.json')) as f:
+            template_json = Template(f.read())
+            f.close()
+            updates_json = template_json.substitute(ext_version=ext_version, tag_version=tag_version, min_browser_version=version_details['compatibility']['firefox']['min'])
+            with open(updates_json_filepath, 'w') as f:
+                f.write(updates_json)
+                f.close()
+        # - Stage the changed file
+        r = subprocess.run(['git', 'status', '-s', updates_json_filepath], stdout=subprocess.PIPE)
+        rout = bytes.decode(r.stdout).strip()
+        if len(rout) >= 2 and rout[1] == 'M':
+            subprocess.run(['git', 'add', updates_json_filepath])
+        # - Commit the staged file
+        r = subprocess.run(['git', 'status', '-s', updates_json_filepath], stdout=subprocess.PIPE)
+        rout = bytes.decode(r.stdout).strip()
+        if len(rout) >= 2 and rout[0] == 'M':
+            subprocess.run(['git', 'commit', '-m', 'Make Firefox dev build auto-update', updates_json_filepath])
+            subprocess.run(['git', 'push', 'origin', 'HEAD'])
+
+print('All done.')
diff --git a/dist/github-api.js b/dist/github-api.js
new file mode 100644
index 000000000..0ba1e1671
--- /dev/null
+++ b/dist/github-api.js
@@ -0,0 +1,223 @@
+/*******************************************************************************
+
+    uBlock Origin - a comprehensive, efficient content blocker
+    Copyright (C) 2025-present Raymond Hill
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see {http://www.gnu.org/licenses/}.
+
+    Home: https://github.com/gorhill/uBlock
+*/
+
+import * as fs from 'node:fs/promises';
+import { execSync } from 'node:child_process';
+import os from 'node:os';
+import path from 'node:path';
+import process from 'node:process';
+
+/******************************************************************************/
+
+function voidFunc() {
+}
+
+/******************************************************************************/
+
+let githubOwner = '';
+let githubRepo = '';
+let githubTag = '';
+let githubAuth = '';
+
+export function setGithubContext(owner, repo, tag, auth) {
+    githubOwner = owner;
+    githubRepo = repo;
+    githubTag = tag;
+    githubAuth = auth;
+}
+
+/******************************************************************************/
+
+let pathToSecrets = '';
+
+export async function getSecrets() {
+    const homeDir = os.homedir();
+    let currentDir = process.cwd();
+    let fileName = '';
+    for (;;) {
+        fileName = `${currentDir}/ubo_secrets`;
+        const stat = await fs.stat(fileName).catch(voidFunc);
+        if ( stat !== undefined ) { break; }
+        currentDir = path.resolve(currentDir, '..');
+        if ( currentDir.startsWith(homeDir) === false ) {
+            pathToSecrets = homeDir;
+            return;
+        }
+    }
+    console.log(`Found secrets in ${fileName}`);
+    const text = await fs.readFile(fileName, { encoding: 'utf8' }).catch(voidFunc);
+    if ( text === undefined ) { return {}; }
+    const secrets = JSON.parse(text);
+    pathToSecrets = fileName;
+    return secrets;
+}
+
+export async function saveSecrets(secrets) {
+    if ( pathToSecrets === '' ) { return; }
+    return fs.writeFile(pathToSecrets, JSON.stringify(secrets, null, 2));
+}
+
+/******************************************************************************/
+
+export async function getRepoRoot() {
+    const homeDir = os.homedir();
+    let currentDir = process.cwd();
+    for (;;) {
+        const fileName = `${currentDir}/.git`;
+        const stat = await fs.stat(fileName).catch(voidFunc);
+        if ( stat !== undefined ) { return currentDir; }
+        currentDir = path.resolve(currentDir, '..');
+        if ( currentDir.startsWith(homeDir) === false ) { return; }
+    }
+}
+
+/******************************************************************************/
+
+export async function getReleaseInfo() {
+    console.log(`Fetching release info for ${githubOwner}/${githubRepo}/${githubTag} from GitHub`);
+    const releaseInfoUrl =  `https://api.github.com/repos/${githubOwner}/${githubRepo}/releases/tags/${githubTag}`;
+    const request = new Request(releaseInfoUrl, {
+        headers: {
+            Authorization: githubAuth,
+        },
+    });
+    const response = await fetch(request).catch(voidFunc);
+    if ( response === undefined ) { return; }
+    if ( response.ok !== true ) { return; }
+    const releaseInfo = await response.json().catch(voidFunc);
+    if ( releaseInfo === undefined ) { return; }
+    return releaseInfo;
+}
+
+/******************************************************************************/
+
+export async function getAssetInfo(assetName) {
+    const releaseInfo = await getReleaseInfo();
+    if ( releaseInfo === undefined ) { return; }
+    if ( releaseInfo.assets === undefined ) { return; }
+    for ( const asset of releaseInfo.assets ) {
+        if ( asset.name.includes(assetName) ) { return asset; }
+    }
+}
+
+/******************************************************************************/
+
+export async function downloadAssetFromRelease(assetInfo) {
+    const assetURL = assetInfo.url;
+    console.log(`Fetching ${assetURL}`);
+    const request = new Request(assetURL, {
+        headers: {
+            Authorization: githubAuth,
+            Accept: 'application/octet-stream',
+        },
+    });
+    const response = await fetch(request).catch(voidFunc);
+    if ( response.ok !== true ) { return; }
+    const data = await response.bytes().catch(voidFunc);
+    if ( data === undefined ) { return; }
+    const tempDir = await fs.mkdtemp('/tmp/github-asset-');
+    const fileName = `${tempDir}/${assetInfo.name}`;
+    await fs.writeFile(fileName, data);
+    return fileName;
+}
+
+/******************************************************************************/
+
+export async function uploadAssetToRelease(assetPath, mimeType) {
+    console.log(`Uploading "${assetPath}" to GitHub...`);
+    const data = await fs.readFile(assetPath).catch(( ) => { });
+    if ( data === undefined ) { return; }
+    const releaseInfo = await getReleaseInfo();
+    if ( releaseInfo.upload_url === undefined ) { return; }
+    const assetName = path.basename(assetPath);
+    const uploadURL = releaseInfo.upload_url.replace('{?name,label}', `?name=${assetName}`);
+    console.log('Upload URL:', uploadURL);
+    const request = new Request(uploadURL, {
+        body: new Int8Array(data.buffer, data.byteOffset, data.length),
+        headers: {
+            Authorization: githubAuth,
+            'Content-Type': mimeType,
+        },
+        method: 'POST',
+    });
+    const response = await fetch(request).catch(( ) => { });
+    if ( response === undefined ) { return; }
+    const json = await response.json();
+    console.log(json);
+    return json;
+}
+
+/******************************************************************************/
+
+export async function deleteAssetFromRelease(assetURL) {
+    print(`Remove ${assetURL} from GitHub release ${githubTag}...`);
+    const request = new Request(assetURL, {
+        headers: {
+            Authorization: githubAuth,
+        },
+        method: 'DELETE',
+    });
+    const response = await fetch(request);
+    return response.ok;
+}
+
+/******************************************************************************/
+
+export async function getManifest(path) {
+    const text = await fs.readFile(path, { encoding: 'utf8' });
+    return JSON.parse(text);
+}
+
+/******************************************************************************/
+
+export async function shellExec(text) {
+    let command = '';
+    for ( const line of text.split(/[\n\r]+/) ) {
+        command += line.trimEnd();
+        if ( command.endsWith('\\') ) {
+            command = command.slice(0, -1);
+            continue;
+        }
+        command = command.trim();
+        if ( command === '' ) { continue; }
+        execSync(command);
+        command = '';
+    }
+}
+
+/******************************************************************************/
+
+export const commandLineArgs = (( ) => {
+    const args = Object.create(null);
+    let name, value;
+    for ( const arg of process.argv.slice(2) ) {
+        const pos = arg.indexOf('=');
+        if ( pos === -1 ) {
+            name = arg;
+            value = true;
+        } else {
+            name = arg.slice(0, pos);
+            value = arg.slice(pos+1);
+        }
+        args[name] = value;
+    }
+    return args;
+})();
diff --git a/dist/version b/dist/version
index 9ee507926..fdffdb7dd 100644
--- a/dist/version
+++ b/dist/version
@@ -1 +1 @@
-1.64.1.4
\ No newline at end of file
+1.64.1.5
\ No newline at end of file