chromium-browser ver. bump

2026-06-02 21:55:52 +03:00
parent a5965732ae
commit baeabec72f
48 changed files with 562 additions and 2440 deletions
@@ -0,0 +1,49 @@
+https://issues.chromium.org/issues/418397211
+From: Matt Jolly <kangie@gentoo.org>
+Date: Tue, 25 Mar 2025 13:33:48 +1000
+Subject: [PATCH] Remove nodejs version check
+
+Added in https://github.com/chromium/chromium/commit/0ff8528999941d7182be6fc77aeb12a110a3cd86,
+this change is only really useful for gclient checkouts and breaks the
+ability for downstreams to provide their own, compatible, nodejs
+version via the system package manager (or for use on arches other than
+those that Google provides binaries for):
+
+[ERR_ASSERTION]: Failed NodeJS version check: Expected version 'v22.11.0', but found 'v22.13.1'. Did you run 'gclient sync'
+
+This is google development footgun protection, working around
+poor development practices and gclient's inability to ensure
+that the source tree is in a consistent state. We don't need it
+here.
+
+Signed-off-by: Matt Jolly <kangie@gentoo.org>
+--- a/third_party/node/node.gni
+++ b/third_party/node/node.gni
+@@ -36,15 +36,5 @@ template("node") {
+       }
+     }
+ 
+-    # Automatically add a dependency to ":check_version" to ensure NodeJS is
+-    # always running the expected version, except when the ':check_version'
+-    # target itself is running in which case it shouldn't depend on itself.
+-    if (get_label_info(":" + target_name, "label_no_toolchain") !=
+-        "//third_party/node:check_version") {
+-      if (!defined(deps)) {
+-        deps = []
+-      }
+-      deps += [ "//third_party/node:check_version" ]
+-    }
+   }
+ }
+--- a/third_party/protobuf/proto_library.gni
+++ b/third_party/protobuf/proto_library.gni
+@@ -562,7 +562,6 @@ template("proto_library") {
+                   _protoc_gen_ts_path,
+                   "//tools/protoc_wrapper/protoc-gen-ts_proto.py",
+                 ] + _protoc_gen_ts_runtime_deps
+-      deps += [ "//third_party/node:check_version" ]
+     }
+ 
+     if (_generate_with_plugin) {
+-- 
+2.49.0
@@ -0,0 +1,11 @@
+https://bugs.gentoo.org/969846
+https://bugs.gentoo.org/969495
+https://crbug.com/456218403
+--- a/sandbox/linux/system_headers/linux_seccomp.h
+++ b/sandbox/linux/system_headers/linux_seccomp.h
+@@ -7,4 +7,5 @@
+ 
+ #include <stdint.h>
+#include <signal.h>
+ #include <sys/ioctl.h>
+ 
@@ -0,0 +1,117 @@
+--- a/third_party/devtools-frontend/src/front_end/Images/BUILD.gn
+++ b/third_party/devtools-frontend/src/front_end/Images/BUILD.gn
+@@ -28,7 +28,7 @@ node_action("generate_css_vars") {
+ }
+ 
+ node_action("optimize_images") {
+-  script = "node_modules/rollup/dist/bin/rollup"
+  script = "../../node/node_modules/@rollup/wasm-node/dist/bin/rollup"
+ 
+   _bundled_entrypoint = target_gen_dir + "/Images.prebundle.js"
+   _output_file_location = target_gen_dir + "/Images.js"
+--- a/third_party/devtools-frontend/src/front_end/models/live-metrics/web-vitals-injected/BUILD.gn
+++ b/third_party/devtools-frontend/src/front_end/models/live-metrics/web-vitals-injected/BUILD.gn
+@@ -26,7 +26,7 @@ devtools_module("web-vitals-injected") {
+ }
+ 
+ node_action("bundled_library") {
+-  script = "node_modules/rollup/dist/bin/rollup"
+  script = "../../node/node_modules/@rollup/wasm-node/dist/bin/rollup"
+ 
+   _bundled_entrypoint = target_gen_dir + "/web-vitals-injected.js"
+   _output_file_location = target_gen_dir + "/web-vitals-injected.generated.js"
+--- a/third_party/devtools-frontend/src/front_end/panels/recorder/injected/BUILD.gn
+++ b/third_party/devtools-frontend/src/front_end/panels/recorder/injected/BUILD.gn
+@@ -55,7 +55,7 @@ devtools_entrypoint("bundle") {
+ }
+ 
+ node_action("bundled_library") {
+-  script = "node_modules/rollup/dist/bin/rollup"
+  script = "../../node/node_modules/@rollup/wasm-node/dist/bin/rollup"
+ 
+   _bundled_entrypoint = target_gen_dir + "/injected.js"
+   _output_file_location = target_gen_dir + "/injected.generated.js"
+--- a/third_party/devtools-frontend/src/inspector_overlay/BUILD.gn
+++ b/third_party/devtools-frontend/src/inspector_overlay/BUILD.gn
+@@ -36,7 +36,7 @@ action("build_inspector_overlay") {
+     "$target_gen_dir/tool_window_controls.css",
+     "$target_gen_dir/main.js",
+     devtools_location_prepend + "inspector_overlay/loadCSS.rollup.js",
+-    devtools_location_prepend + "node_modules/rollup/dist/bin/rollup",
+    devtools_location_prepend + "../../node/node_modules/@rollup/wasm-node/dist/bin/rollup",
+   ]
+ 
+   outputs = [ "$resources_out_dir/main.js" ]
+--- a/third_party/devtools-frontend/src/scripts/build/build_inspector_overlay.py
+++ b/third_party/devtools-frontend/src/scripts/build/build_inspector_overlay.py
+@@ -56,7 +56,7 @@ def rollup(input_path, output_path, file
+         [devtools_paths.node_path(),
+          devtools_paths.rollup_path()] +
+         ['--format', 'iife', '-n', 'InspectorOverlay'] + ['--input', target] +
+-        ['--plugin', rollup_plugin, '--plugin', 'terser'],
+        ['--plugin', rollup_plugin, '--plugin', path.join(devtools_paths.node_modules_path(), '@rollup', 'plugin-terser', 'dist', 'cjs', 'index.js')],
+         stdout=subprocess.PIPE,
+         stderr=subprocess.PIPE,
+         universal_newlines=True,
+--- a/third_party/devtools-frontend/src/scripts/build/ninja/bundle.gni
+++ b/third_party/devtools-frontend/src/scripts/build/ninja/bundle.gni
+@@ -11,7 +11,7 @@ template("bundle") {
+          "You must define the 'entrypoint' for a bundle target")
+ 
+   node_action(target_name) {
+-    script = "scripts/build/esbuild.js"
+    script = "../../node/node_modules/@rollup/wasm-node/dist/bin/rollup"
+     forward_variables_from(invoker,
+                            [
+                              "visibility",
+@@ -21,27 +21,23 @@ template("bundle") {
+ 
+     inputs = [
+       invoker.entrypoint,
+      devtools_location_prepend + "scripts/build/rollup.config.mjs",
+       devtools_location_prepend + "scripts/build/devtools_plugin.js",
+       devtools_location_prepend + "scripts/devtools_paths.js",
+     ]
+ 
+-    _esbuild = devtools_location_prepend + "third_party/esbuild/esbuild"
+-    if (host_os == "win") {
+-      inputs += [ _esbuild + ".exe" ]
+-    } else {
+-      inputs += [ _esbuild ]
+-    }
+-
+     args = [
+      "--config",
+      rebase_path(
+          devtools_location_prepend + "scripts/build/rollup.config.mjs",
+          root_build_dir),
+      "--input",
+       rebase_path(invoker.entrypoint, root_build_dir),
+      "--file",
+       rebase_path(invoker.output_file_location, root_build_dir),
+       "--configSourcemaps",
+     ]
+ 
+-    if (!is_debug) {
+-      args += [ "--minify" ]
+-    }
+-
+     outputs = [ invoker.output_file_location ]
+   }
+ }
+--- a/third_party/devtools-frontend/src/scripts/devtools_paths.py
+++ b/third_party/devtools-frontend/src/scripts/devtools_paths.py
+@@ -64,8 +64,11 @@ def license_checker_path():
+ 
+ def rollup_path():
+     return path.join(
+-        node_modules_path(),
+-        'rollup',
+        third_party_path(),
+        'node',
+        'node_modules',
+        '@rollup',
+        'wasm-node',
+         'dist',
+         'bin',
+         'rollup',
@@ -0,0 +1,23 @@
+--- a/build/config/compiler/BUILD.gn
+++ b/build/config/compiler/BUILD.gn
+@@ -1903,20 +1903,4 @@ config("sanitize_c_array_bounds") {
+ config("sanitize_c_array_bounds") {
+   if (!is_ubsan && is_clang && !(is_asan && target_cpu == "x86")) {
+-    cflags = [
+-      "-fsanitize=array-bounds",
+-      "-fsanitize-trap=array-bounds",
+-
+-      # Some code users feature detection to determine if UBSAN (or any
+-      # sanitizer) is enabled, they then do expensive debug like operations. We
+-      # want to suppress this behaviour since we want to keep performance costs
+-      # as low as possible while having these checks.
+-      "-fsanitize-ignore-for-ubsan-feature=array-bounds",
+-
+-      # Because we've enabled array-bounds sanitizing we also want to suppress
+-      # the related warning about "unsafe-buffer-usage-in-static-sized-array",
+-      # since we know that the array bounds sanitizing will catch any out-of-
+-      # bounds accesses.
+-      "-Wno-unsafe-buffer-usage-in-static-sized-array",
+-    ]
+   }
+ }
@@ -0,0 +1,16 @@
+--- a/build/config/compiler/BUILD.gn.orig 2026-04-08 10:52:06.044206796 +0000
+++ b/build/config/compiler/BUILD.gn      2026-04-08 10:54:23.302307784 +0000
+@@ -613,13 +613,6 @@ config("compiler") {
+       ]
+     }
+
+-    # The performance improvement does not seem worth the risk. See
+-    # https://crbug.com/484082200 for background and https://crrev.com/c/7593035
+-    # for discussion.
+-    if (!is_wasm) {
+-      cflags += [ "-fno-lifetime-dse" ]
+-    }
+-
+     # TODO(hans): Remove this once Clang generates better optimized debug info
+     # by default. https://crbug.com/765793
+     cflags += [
@@ -0,0 +1,21 @@
+The original patch got reverted upstream, but LaneCount and SupportedLaneCount no longer work in Rust 1.95.0
+--- a/third_party/rust/chromium_crates_io/vendor/bytemuck-v1/src/pod.rs
+++ b/third_party/rust/chromium_crates_io/vendor/bytemuck-v1/src/pod.rs
+@@ -152,7 +152,6 @@ impl_unsafe_marker_for_simd!(
+ unsafe impl<T, const N: usize> Pod for core::simd::Simd<T, N>
+ where
+   T: core::simd::SimdElement + Pod,
+-  core::simd::LaneCount<N>: core::simd::SupportedLaneCount,
+ {
+ }
+ 
+--- a/third_party/rust/chromium_crates_io/vendor/bytemuck-v1/src/zeroable.rs
+++ b/third_party/rust/chromium_crates_io/vendor/bytemuck-v1/src/zeroable.rs
+@@ -231,7 +231,6 @@ impl_unsafe_marker_for_simd!(
+ unsafe impl<T, const N: usize> Zeroable for core::simd::Simd<T, N>
+ where
+   T: core::simd::SimdElement + Zeroable,
+-  core::simd::LaneCount<N>: core::simd::SupportedLaneCount,
+ {
+ }
+ 
@@ -0,0 +1,10 @@
+--- b/build/config/BUILDCONFIG.gn
+++ a/build/config/BUILDCONFIG.gn
+@@ -362,7 +362,6 @@
+   "//build/config/compiler:no_unresolved_symbols",
+   "//build/config/compiler:runtime_library",
+   "//build/config/compiler:sanitize_c_array_bounds",
+-  "//build/config/compiler:sanitize_return",
+   "//build/config/compiler:thin_archive",
+   "//build/config/compiler:thinlto_optimize_default",
+   "//build/config/compiler:tot_warnings",
@@ -0,0 +1,27 @@
+--- b/build/config/compiler/BUILD.gn
+++ a/build/config/compiler/BUILD.gn
+@@ -1920,24 +1920,6 @@
+   }
+ }
+ 
+-# Enable UBSan subset to ensure we always hit `return` statement in non-void
+-# functions (https://crbug.com/489565636). This is equivalent to inserting
+-# `NOTREACHED()` at the end of such functions.
+-config("sanitize_return") {
+-  if (!is_ubsan && is_clang) {
+-    cflags = [
+-      "-fsanitize=return",
+-      "-fsanitize-trap=return",
+-
+-      # Some code users feature detection to determine if UBSAN (or any
+-      # sanitizer) is enabled, they then do expensive debug like operations. We
+-      # want to suppress this behaviour since we want to keep performance costs
+-      # as low as possible while having these checks.
+-      "-fsanitize-ignore-for-ubsan-feature=return",
+-    ]
+-  }
+-}
+-
+ config("rustc_revision") {
+   if (rustc_revision != "") {
+     # Similar to the `clang_revision` config, this is here so that all `.rs`
@@ -0,0 +1,34 @@
+diff --git a/build/config/clang/BUILD.gn b/build/config/clang/BUILD.gn
+index b171ee13ce7ed..d5b4e4fdcd0c8 100644
+--- a/build/config/clang/BUILD.gn
+++ b/build/config/clang/BUILD.gn
+@@ -171,16 +171,21 @@ template("clang_lib") {
+       } else if (is_linux || is_chromeos) {
+         if (current_cpu == "x64") {
+           _dir = "x86_64-unknown-linux-gnu"
+          _suffix = "-x86_64"
+         } else if (current_cpu == "x86") {
+           _dir = "i386-unknown-linux-gnu"
+          _suffix = "-i386"
+         } else if (current_cpu == "arm") {
+           _dir = "armv7-unknown-linux-gnueabihf"
+         } else if (current_cpu == "arm64") {
+           _dir = "aarch64-unknown-linux-gnu"
+          _suffix = "-aarch64"
+         } else if (current_cpu == "loong64") {
+           _dir = "loongarch64-unknown-linux-gnu"
+          _suffix = "-loongarch64"
+         } else if (current_cpu == "riscv64") {
+           _dir = "riscv64-unknown-linux-gnu"
+          _suffix = "-riscv64"
+         } else if (current_cpu == "ppc64") {
+           _dir = "ppc64le-unknown-linux-gnu"
+         } else if (current_cpu == "s390x") {
+@@ -188,6 +193,7 @@ template("clang_lib") {
+         } else {
+           assert(false)  # Unhandled cpu type
+         }
+        _dir = "linux"
+       } else if (is_fuchsia) {
+         if (current_cpu == "x64") {
+           _dir = "x86_64-unknown-fuchsia"
@@ -0,0 +1,11 @@
+--- a/third_party/widevine/cdm/widevine.gni	2026-02-15 16:29:15.620518832 +0800
+++ b/third_party/widevine/cdm/widevine.gni	2026-02-15 16:29:43.721371706 +0800
+@@ -27,7 +27,7 @@
+ library_widevine_cdm_available =
+     (is_chromeos &&
+      (target_cpu == "x64" || target_cpu == "arm" || target_cpu == "arm64")) ||
+-    (target_os == "linux" && target_cpu == "x64") ||
+    (target_os == "linux" && (target_cpu == "x64" || target_cpu == "arm" || target_cpu == "arm64")) ||
+     (target_os == "mac" && (target_cpu == "x64" || target_cpu == "arm64")) ||
+     (target_os == "win" &&
+      (target_cpu == "x86" || target_cpu == "x64" || target_cpu == "arm64"))
@@ -0,0 +1,11 @@
+--- a/services/device/serial/serial_io_handler_posix.cc	2025-11-09 13:57:16.132379788 +0100
+++ b/services/device/serial/serial_io_handler_posix.cc	2025-11-09 14:07:13.488376598 +0100
+@@ -51,7 +51,7 @@
+ bool BitrateToSpeedConstant(int bitrate, speed_t* speed) {
+ #define BITRATE_TO_SPEED_CASE(x) \
+   case x:                        \
+-    *speed = B##x;               \
+    *speed = __B##x;             \
+     return true;
+   switch (bitrate) {
+     BITRATE_TO_SPEED_CASE(0)
@@ -0,0 +1,13 @@
+diff --git a/build/config/compiler/BUILD.gn b/build/config/compiler/BUILD.gn
+index eb329bc88fec..7c98dfddcf8a 100644
+--- a/build/config/compiler/BUILD.gn
+++ b/build/config/compiler/BUILD.gn
+@@ -2054,7 +2054,7 @@ config("chromium_code") {
+       # Non-chromium code is not guaranteed to compile cleanly with
+       # _FORTIFY_SOURCE. Also, fortified build may fail when optimizations are
+       # disabled, so only do that for Release build.
+-      fortify_level = "2"
+      fortify_level = "3"
+ 
+       # ChromeOS's toolchain supports a high-quality _FORTIFY_SOURCE=3
+       # implementation with a few custom glibc patches. Use that if it's
@@ -0,0 +1,21 @@
+diff --git a/google_apis/api_key_cache.cc b/google_apis/api_key_cache.cc
+index bbb9420f40..690445534b 100644
+--- a/google_apis/api_key_cache.cc
+++ b/google_apis/api_key_cache.cc
+@@ -235,14 +235,14 @@ ApiKeyCache::ApiKeyCache(const DefaultApiKeys& default_api_keys) {
+ 
+   std::string default_client_id = CalculateKeyValue(
+       default_api_keys.google_default_client_id,
+-      STRINGIZE_NO_EXPANSION(GOOGLE_DEFAULT_CLIENT_ID), std::string(), nullptr,
+      STRINGIZE_NO_EXPANSION(GOOGLE_DEFAULT_CLIENT_ID), std::string(), ::switches::kOAuth2ClientID,
+       std::string(), environment.get(), command_line, gaia_config,
+       default_api_keys.allow_override_via_environment,
+       default_api_keys.allow_unset_values);
+   std::string default_client_secret = CalculateKeyValue(
+       default_api_keys.google_default_client_secret,
+       STRINGIZE_NO_EXPANSION(GOOGLE_DEFAULT_CLIENT_SECRET), std::string(),
+-      nullptr, std::string(), environment.get(), command_line, gaia_config,
+      ::switches::kOAuth2ClientSecret, std::string(), environment.get(), command_line, gaia_config,
+       default_api_keys.allow_override_via_environment,
+       default_api_keys.allow_unset_values);
+