catch up changelog

Merge 'chromium-beta/main' up to 28ba4454d7

.gitattributes

@@ -21,3 +21,5 @@
 *.xz filter=lfs diff=lfs merge=lfs -text
 *.zip filter=lfs diff=lfs merge=lfs -text
 *.zst filter=lfs diff=lfs merge=lfs -text
+## Specific LFS patterns
+chromium-symbolic.svg filter=lfs diff=lfs merge=lfs -text

INSTALL.sh

@@ -120,6 +120,13 @@ if [ -f "${OUTPUTDIR}/libqt6_shim.so" ]; then
   install -m ${SHLIB_PERMS} "${buildfile}" "${STAGEDIR}/${INSTALLDIR}/${file}"
 fi
 
+# FFMPEG (if using the bundled one)
+if [ -f "${OUTPUTDIR}/libffmpeg.so" ]; then
+    file="libffmpeg.so"
+    buildfile="${OUTPUTDIR}/${file}"
+    install -m ${SHLIB_PERMS} "${buildfile}" "${STAGEDIR}/${INSTALLDIR}/${file}"
+fi
+
 # default apps
 if [ -d "${OUTPUTDIR}/default_apps" ]; then
     cp -a "${OUTPUTDIR}/default_apps" "${STAGEDIR}/${INSTALLDIR}/"

chromium-102-regex_pattern-array.patch

@@ -1,8 +1,6 @@
-Index: chromium-123.0.6312.46/components/autofill/core/browser/BUILD.gn
-===================================================================
---- chromium-123.0.6312.46.orig/components/autofill/core/browser/BUILD.gn
-+++ chromium-123.0.6312.46/components/autofill/core/browser/BUILD.gn
-@@ -64,6 +64,11 @@
+--- chromium-140.0.7327.6/components/autofill/core/browser/BUILD.gn	2025/08/01 09:33:04	1.1
++++ chromium-140.0.7327.6/components/autofill/core/browser/BUILD.gn	2025/08/01 09:34:47
+@@ -75,6 +75,11 @@
  }
  
  static_library("browser") {
@@ -12,5 +10,5 @@ Index: chromium-123.0.6312.46/components/autofill/core/browser/BUILD.gn
 +    ]
 +  }
    sources = [
-     "autofill_browser_util.cc",
-     "autofill_browser_util.h",
+     "autofill_ai_form_rationalization.cc",
+     "autofill_ai_form_rationalization.h",

chromium-125-compiler.patch

@@ -1,6 +1,6 @@
---- chromium-138.0.7191.0/build/config/compiler/BUILD.gn	2025/05/26 08:54:48	1.1
-+++ chromium-138.0.7191.0/build/config/compiler/BUILD.gn	2025/05/26 08:56:08
-@@ -310,9 +310,7 @@
+--- chromium-140.0.7259.2/build/config/compiler/BUILD.gn	2025/06/27 14:34:16	1.1
++++ chromium-140.0.7259.2/build/config/compiler/BUILD.gn	2025/06/27 14:36:19
+@@ -312,9 +312,7 @@
  
    configs += [
      # See the definitions below.
@@ -10,11 +10,11 @@
      ":compiler_codegen",
      ":compiler_deterministic",
      ":clang_warning_suppression",
-@@ -581,63 +579,6 @@
+@@ -603,66 +603,6 @@
      ldflags += [ "-Wl,-z,keep-text-section-prefix" ]
    }
  
--  if (is_clang && !is_nacl) {
+-  if (is_clang) {
 -    cflags += [ "-fcrash-diagnostics-dir=" + clang_diagnostic_dir ]
 -    if (save_reproducers_on_lld_crash && use_lld) {
 -      ldflags += [
@@ -65,7 +65,10 @@
 -    # Enable ELF CREL (see crbug.com/357878242) for all platforms that use ELF
 -    # (excluding toolchains that use an older version of LLVM).
 -    # TODO(crbug.com/376278218): This causes segfault on Linux ARM builds.
+-    # It also causes segfault on Linux s390x:
+-    # https://github.com/llvm/llvm-project/issues/149511
 -    if (is_linux && use_lld && !llvm_android_mainline && current_cpu != "arm" &&
+-        current_cpu != "s390x" &&
 -        default_toolchain != "//build/toolchain/cros:target") {
 -      cflags += [ "-Wa,--crel,--allow-experimental-crel" ]
 -    }
@@ -73,8 +76,8 @@
 -
    # C11/C++11 compiler flags setup.
    # ---------------------------
-   if (is_linux || is_chromeos || is_android || (is_nacl && is_clang) ||
-@@ -1596,52 +1537,6 @@
+   if (is_linux || is_chromeos || is_android || current_os == "aix") {
+@@ -1598,43 +1539,6 @@
      }
    }
  
@@ -85,26 +88,17 @@
 -    # different build directory like "out/feature_a" and "out/feature_b" if
 -    # we build same files with same compile flag.
 -    # Other paths are already given in relative, no need to normalize them.
--    if (is_nacl) {
--      # TODO(https://crbug.com/1231236): Use -ffile-compilation-dir= here.
--      cflags += [
--        "-Xclang",
--        "-fdebug-compilation-dir",
--        "-Xclang",
--        ".",
--      ]
--    } else {
--      # -ffile-compilation-dir is an alias for both -fdebug-compilation-dir=
--      # and -fcoverage-compilation-dir=.
--      cflags += [ "-ffile-compilation-dir=." ]
 -
--      # Convert absolute paths to relative paths. Expands to, for example:
--      #   -file-prefix-map /path/to/chromium/src=../..
--      swiftflags += [
--        "-file-prefix-map",
--        rebase_path("//.", "") + "=" + rebase_path("//.", root_build_dir),
--      ]
--    }
+-    # -ffile-compilation-dir is an alias for both -fdebug-compilation-dir=
+-    # and -fcoverage-compilation-dir=.
+-    cflags += [ "-ffile-compilation-dir=." ]
+-
+-    # Convert absolute paths to relative paths. Expands to, for example:
+-    #   -file-prefix-map /path/to/chromium/src=../..
+-    swiftflags += [
+-      "-file-prefix-map",
+-      rebase_path("//.", "") + "=" + rebase_path("//.", root_build_dir),
+-    ]
 -    if (!is_win) {
 -      # We don't use clang -cc1as on Windows (yet? https://crbug.com/762167)
 -      asmflags = [ "-Wa,-fdebug-compilation-dir,." ]
@@ -127,7 +121,7 @@
    # Tells the compiler not to use absolute paths when passing the default
    # paths to the tools it invokes. We don't want this because we don't
    # really need it and it can mess up the RBE cache entries.
-@@ -1660,87 +1555,6 @@
+@@ -1661,87 +1565,6 @@
    }
  }
  
@@ -215,7 +209,7 @@
  # Controls the usage of a warning suppression mapping (WSM) file to suppress
  # warnings based on the path of the file they come from. It's controlled by the
  # `clang_warning_suppression_file` gn argument , which points to a text file
-@@ -2231,10 +2045,6 @@
+@@ -2229,10 +2052,6 @@
      }
    } else {
      cflags = [ "-Wall" ]
@@ -226,7 +220,7 @@
  
      # In Chromium code, we define __STDC_foo_MACROS in order to get the
      # C99 macros on Mac and Linux.
-@@ -2243,24 +2053,6 @@
+@@ -2241,24 +2060,6 @@
        "__STDC_FORMAT_MACROS",
      ]
  
@@ -251,7 +245,7 @@
      if (is_apple) {
        cflags_objc = [ "-Wimplicit-retain-self" ]
        cflags_objcc = [ "-Wimplicit-retain-self" ]
-@@ -2676,7 +2468,8 @@
+@@ -2673,7 +2474,8 @@
  # [0]: https://pinpoint-dot-chromeperf.appspot.com/job/147634a8be0000
  # [1]: https://pinpoint-dot-chromeperf.appspot.com/job/132bc772be0000
  # [2]: https://crrev.com/c/5447532
@@ -261,7 +255,7 @@
    if (is_win) {
      # clang-cl's /O2 corresponds to clang's -O3, and really want -O2 for
      # consistency with the other platforms.
-@@ -2725,7 +2518,8 @@
+@@ -2722,7 +2524,8 @@
  }
  
  # Turn off optimizations.
@@ -271,28 +265,28 @@
    if (is_win) {
      cflags = [
        "/Od",  # Disable optimization.
-@@ -2760,7 +2554,8 @@
+@@ -2757,7 +2560,8 @@
  # Turns up the optimization level. Used to explicitly enable -O2 instead of
  # -Os for select targets on platforms that use optimize_for_size. No-op
  # elsewhere.
 -config("optimize_max") {
 +config("optimize_max") { }
 +config("xoptimize_max") {
-   if (is_nacl && is_nacl_irt) {
-     # The NaCl IRT is a special case and always wants its own config.
-     # Various components do:
-@@ -2793,7 +2588,8 @@
+   ldflags = common_optimize_on_ldflags
+   if (is_win) {
+     # Favor speed over size, /O2 must be before the common flags.
+@@ -2778,7 +2582,8 @@
  #
  # TODO(crbug.com/41259697) - rework how all of these configs are related
  # so that we don't need this disclaimer.
 -config("optimize_speed") {
 +config("optimize_speed") { }
 +config("xoptimize_speed") {
-   if (is_nacl && is_nacl_irt) {
-     # The NaCl IRT is a special case and always wants its own config.
-     # Various components do:
-@@ -2822,7 +2618,8 @@
-   }
+   ldflags = common_optimize_on_ldflags
+   if (is_win) {
+     # Favor speed over size, /O2 must be before the common flags.
+@@ -2795,7 +2600,8 @@
+   rustflags = [ "-Copt-level=3" ]
  }
  
 -config("optimize_fuzzing") {
@@ -301,7 +295,7 @@
    cflags = [ "-O1" ] + common_optimize_on_cflags
    rustflags = [ "-Copt-level=1" ]
    ldflags = common_optimize_on_ldflags
-@@ -2953,7 +2750,8 @@
+@@ -2922,7 +2728,8 @@
  }
  
  # Full symbols.
@@ -311,7 +305,7 @@
    rustflags = []
    configs = []
    if (is_win) {
-@@ -3124,7 +2922,8 @@
+@@ -3089,7 +2896,8 @@
  # Minimal symbols.
  # This config guarantees to hold symbol for stack trace which are shown to user
  # when crash happens in unittests running on buildbot.
@@ -321,7 +315,7 @@
    rustflags = []
    if (is_win) {
      # Functions, files, and line tables only.
-@@ -3209,7 +3008,8 @@
+@@ -3165,7 +2973,8 @@
  # This configuration contains function names only. That is, the compiler is
  # told to not generate debug information and the linker then just puts function
  # names in the final debug information.

chromium-139-deterministic.patch

@@ -0,0 +1,11 @@
+--- chromium-139.0.7258.5/build/config/compiler/BUILD.gn	2025/07/29 08:34:15	1.1
++++ chromium-139.0.7258.5/build/config/compiler/BUILD.gn	2025/07/29 08:35:44
+@@ -1613,7 +1613,7 @@
+ 
+   # Eliminate build metadata (__DATE__, __TIME__ and __TIMESTAMP__) for
+   # deterministic build.  See https://crbug.com/314403
+-  if (!is_official_build) {
++  if (true) {
+     if (is_win && !is_clang) {
+       cflags += [
+         "/wd4117",  # Trying to define or undefine a predefined macro.

chromium-139-pdfium-openjpeg-CVE-2025-54874.patch

@@ -0,0 +1,11 @@
+--- chromium-139.0.7258.66/third_party/pdfium/third_party/libopenjpeg/jp2.c	2025/08/06 10:46:12	1.1
++++ chromium-139.0.7258.66/third_party/pdfium/third_party/libopenjpeg/jp2.c	2025/08/06 10:46:36
+@@ -2899,7 +2899,7 @@
+                               p_image,
+                               p_manager);
+ 
+-    if (p_image && *p_image) {
++    if (ret && p_image && *p_image) {
+         /* Set Image Color Space */
+         if (jp2->enumcs == 16) {
+             (*p_image)->color_space = OPJ_CLRSPC_SRGB;

chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch

@@ -0,0 +1,15 @@
+--- chromium-140.0.7339.5/build/rust/allocator/lib.rs	2025/08/12 12:48:58	1.1
++++ chromium-140.0.7339.5/build/rust/allocator/lib.rs	2025/08/12 12:49:30
+@@ -90,6 +90,12 @@
+     #[linkage = "weak"]
+     fn __rust_no_alloc_shim_is_unstable_v2() {}
+ 
++    // TODO(crbug.com/422538133) Remove after rolling past
++    // https://github.com/rust-lang/rust/pull/141061
++    #[no_mangle]
++    #[linkage = "weak"]
++    static __rust_no_alloc_shim_is_unstable: u8 = 0;
++
+     // Mangle the symbol name as rustc expects.
+     #[rustc_std_internal_symbol]
+     #[allow(non_upper_case_globals)]

chromium-140-old-flac.patch

@@ -0,0 +1,11 @@
+--- chromium-140.0.7339.5/media/audio/flac_audio_handler.cc	2025/08/13 10:29:53	1.1
++++ chromium-140.0.7339.5/media/audio/flac_audio_handler.cc	2025/08/13 10:30:09
+@@ -166,7 +166,7 @@
+   // `FLAC__STREAM_DECODER_ERROR_STATUS_BAD_METADATA` is the last enumeration
+   // value of `FLAC__StreamDecoderErrorStatus`. The legal status value should be
+   // less than or equal to it.
+-  CHECK_LE(status, FLAC__STREAM_DECODER_ERROR_STATUS_BAD_METADATA);
++  // CHECK_LE(status, FLAC__STREAM_DECODER_ERROR_STATUS_BAD_METADATA);
+   LOG(ERROR) << "Got an error callback: "
+              // SAFETY: The above CHECK ensures that `status` does not exceed
+              // the length of `FLAC__StreamDecoderErrorStatusString`

chromium-91-java-only-allowed-in-android-builds.patch

@@ -1,16 +0,0 @@
-References: https://bugs.chromium.org/p/chromium/issues/detail?id=1192875
-
-Index: chromium-91.0.4472.57/third_party/closure_compiler/compiler.py
-===================================================================
---- chromium-91.0.4472.57.orig/third_party/closure_compiler/compiler.py
-+++ chromium-91.0.4472.57/third_party/closure_compiler/compiler.py
-@@ -13,8 +13,7 @@ import subprocess
- 
- 
- _CURRENT_DIR = os.path.join(os.path.dirname(__file__))
--_JAVA_PATH = os.path.join(_CURRENT_DIR, "..", "jdk", "current", "bin", "java")
--assert os.path.isfile(_JAVA_PATH), "java only allowed in android builds"
-+_JAVA_PATH = "java"
- 
- class Compiler(object):
-   """Runs the Closure compiler on given source files to typecheck them

chromium-libusb_interrupt_event_handler.patch

@@ -1,10 +1,10 @@
 diff -up chromium-48.0.2564.116/services/device/usb/usb_context.cc.modern-libusbx chromium-48.0.2564.116/device/usb/usb_context.cc
 --- chromium-48.0.2564.116/services/device/usb/usb_context.cc.modern-libusbx	2016-02-24 10:21:10.534996028 -0500
 +++ chromium-48.0.2564.116/services/device/usb/usb_context.cc	2016-02-24 10:22:28.270499864 -0500
-@@ -57,7 +57,11 @@ void UsbContext::UsbEventHandler::Run()
+@@ -63,7 +63,11 @@
  
  void UsbContext::UsbEventHandler::Stop() {
-   base::subtle::Release_Store(&running_, 0);
+   running_.store(false, std::memory_order_release);
 +#ifdef LIBUSB_API_VERSION >= 0x01000105
 +  libusb_interrupt_event_handler(context_);
 +#else

chromium.changes

@@ -1,8 +1,106 @@
 -------------------------------------------------------------------
-Wed Jul  9 20:06:13 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+Tue Sep  2 22:29:06 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 
-- Chromium 139.0.7258.31
-   (beta released 2025-07-09) 
+- Chromium 140.0.7339.80 (boo#1249093):
+  * new permission prompt for local network access
+  * CVE-2025-9864: Use after free in V8
+  * CVE-2025-9865: Inappropriate implementation in Toolbar
+  * CVE-2025-9866: Inappropriate implementation in Extensions
+  * CVE-2025-9867: Inappropriate implementation in Downloads
+  * Various fixes from internal audits, fuzzing and other initiatives
+
+-------------------------------------------------------------------
+Tue Sep  2 23:02:23 CEST 2025 - ro@suse.de
+
+- modified patches:
+  ppc-fedora-0002-regenerate-xnn-buildgn.patch
+  (updated from debian) 
+
+-------------------------------------------------------------------
+Thu Aug 28 18:06:15 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Chromium 140.0.7339.41
+  (early stable released 2025-08-27)
+- modified patches:
+  chromium-125-compiler.patch
+  chromium-libusb_interrupt_event_handler.patch
+  gcc-enable-lto.patch
+  ppc-fedora-fix-unknown-warning-option-messages.diff
+  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch 
+  ppc-fedora-add-ppc64-architecture-to-extensions.diff
+  chromium-102-regex_pattern-array.patch
+  gtk-414.patch
+  ppc-fedora-fix-study-crash.patch
+  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
+  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
+- added patches:
+  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
+  (revert of upstream patch
+   8393b61ba876c8e1614275c97767f9b06b889f48)
+  chromium-140-old-flac.patch (applied for flac < 1.5.0)
+- change rust_version to 1.86
+- keeplibs:
+  removed buildtools/third_party/eu-strip (gone upstream)
+  removed wasm_tts_engine (gone upstream)
+- bump gn BuildReq to 0.20250619
+- do not use system_harfbuzz for 16+ for now, unbundle is broken
+
+-------------------------------------------------------------------
+Wed Aug 27 12:12:26 CEST 2025 - ro@suse.de
+
+- Chromium 139.0.7258.154 (boo#1248769)
+  * CVE-2025-9478: Use after free in ANGLE
+
+-------------------------------------------------------------------
+Tue Aug 19 21:07:41 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Chromium 139.0.7258.138 (boo#1248315):
+  * CVE-2025-9132: Out of bounds write in V8
+
+-------------------------------------------------------------------
+Wed Aug 13 04:21:07 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Chromium 139.0.7258.127 (boo#1247981):
+  * CVE-2025-8879: Heap buffer overflow in libaom
+  * CVE-2025-8880: Race in V8
+  * CVE-2025-8901: Out of bounds write in ANGLE
+  * CVE-2025-8881: Inappropriate implementation in File Picker
+  * CVE-2025-8882: Use after free in Aura
+  * Various fixes from internal audits, fuzzing and other initiatives
+
+-------------------------------------------------------------------
+Thu Aug  7 15:48:37 CEST 2025 - ro@suse.de
+
+- really install libffmpeg.so if using the bundled one 
+  and block the extra dependency
+
+-------------------------------------------------------------------
+Wed Aug  6 12:47:40 CEST 2025 - ro@suse.de
+
+- add patch:
+  chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
+  (CVE-2025-54874 bsc#1247661) fix missing error check in openjpeg 
+
+-------------------------------------------------------------------
+Wed Aug  6 12:28:51 CEST 2025 - ro@suse.de
+
+- re-add updated patch:
+  ppc-fedora-0002-regenerate-xnn-buildgn.patch
+  from https://src.fedoraproject.org/rpms/chromium/blob/
+               rawhide/f/0002-regenerate-xnn-buildgn.patch 
+
+-------------------------------------------------------------------
+Tue Aug  5 19:55:25 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Chromium 139.0.7258.66 (boo#1247664):
+  * CVE-2025-8576: Use after free in Extensions
+  * CVE-2025-8577: Inappropriate implementation in Picture In Picture
+  * CVE-2025-8578: Use after free in Cast
+  * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
+  * CVE-2025-8580: Inappropriate implementation in Filesystems
+  * CVE-2025-8581: Inappropriate implementation in Extensions
+  * CVE-2025-8582: Insufficient validation of untrusted input in DOM
+  * CVE-2025-8583: Inappropriate implementation in Permissions
  - modified patches:
    gcc-enable-lto.patch
    ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
@@ -28,6 +126,53 @@ Wed Jul  9 20:06:13 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
    added third_party/readability (needed in tools/grit/grit)
    added third_party/ffmpeg (gave up on reverting all recent
      commits in the code using ffmpeg, need at least ffmpeg-7)
+- remove disabled ppc-fedora-0002-regenerate-xnn-buildgn.patch
+  to please factory-auto
+
+-------------------------------------------------------------------
+Wed Jul 30 10:26:40 CEST 2025 - ro@suse.de
+
+- Chromium 138.0.7204.183 (boo#1247365):
+  * CVE-2025-8292: Use after free in Media Stream
+- try to switch to smaller linux tarball from
+   https://github.com/chromium-linux-tarballs)
+- disable chromium-91-java-only-allowed-in-android-builds.patch
+  (not part of reduced tarball)
+
+-------------------------------------------------------------------
+Tue Jul 29 10:44:14 CEST 2025 - ro@suse.de
+
+- set official_build to true (like other distributions)
+  "official builds have less debugging and go faster..." 
+- added patches:
+  chromium-139-deterministic.patch
+  (undefine __DATE__,__TIME__ like without official-build set
+   to keep the build reproducible)
+
+-------------------------------------------------------------------
+Thu Jul 24 18:23:20 CEST 2025 - ro@suse.de
+
+- modified patches:
+  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
+  (update context to apply) 
+
+-------------------------------------------------------------------
+Tue Jul 22 21:31:06 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Chromium 138.0.7204.168 (boo#1246902):
+  * CVE-2025-8010: Type Confusion in V8
+  * CVE-2025-8011: Type Confusion in V8
+  * Various fixes from internal audits, fuzzing and other
+    initiatives
+
+-------------------------------------------------------------------
+Tue Jul 15 19:46:14 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Chromium 138.0.7204.157 (boo#1246558):
+  * CVE-2025-7656: Integer overflow in V8
+  * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE
+    and GPU
+  * CVE-2025-7657: Use after free in WebRTC
 
 -------------------------------------------------------------------
 Wed Jul  9 16:52:34 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>

chromium.spec

@@ -22,6 +22,7 @@
 %define outputdir out
 # bsc#1108175
 %define __provides_exclude ^lib.*\\.so.*$
+%define __requires_exclude ^libffmpeg\\.so.*$
 # suse_version 1500 all of sle code 15, all of leap15
 # suse_version 1600 all of alp, slfo
 # suse_version 1699 tw
@@ -41,7 +42,7 @@
 %bcond_without swiftshader
 %endif
 %if 0%{?suse_version} >= 1600
-%bcond_without system_harfbuzz
+%bcond_with system_harfbuzz
 %bcond_without system_freetype
 %bcond_without arm_bti
 # ERROR Unresolved dependencies.
@@ -66,7 +67,7 @@
 # LLVM version
 %define llvm_version 19
 # RUST version
-%define rust_version 1.85
+%define rust_version 1.86
 # GCC version
 %define gcc_version 14
 # esbuild version
@@ -99,6 +100,11 @@
 %else
 %bcond_with gtk4_4_19
 %endif
+%if %{pkg_vcmp flac-devel >= 1.5.0}
+%bcond_without flac_1_5
+%else
+%bcond_with flac_1_5
+%endif
 # Package names
 %if %{with is_beta}
 %define chromedriver_name %{name}-chromedriver
@@ -107,13 +113,16 @@
 %define chromedriver_name chromedriver
 %define n_suffix %{nil}
 %endif
+# official builds have less debugging and go faster... but we have to shut some things off.
+%global official_build 1
+
 Name:           chromium%{n_suffix}
-Version:        139.0.7258.31
+Version:        140.0.7339.80
 Release:        0
 Summary:        Google's open source browser project
 License:        BSD-3-Clause AND LGPL-2.1-or-later
 URL:            https://www.chromium.org/
-Source0:        https://commondatastorage.googleapis.com/chromium-browser-official/%{rname}-%{version}.tar.xz
+Source0:        https://github.com/chromium-linux-tarballs/chromium-tarballs/releases/download/%{version}/chromium-%{version}-linux.tar.xz
 # https://github.com/evanw/esbuild/archive/refs/tags/v%%{esbuild_version}.tar.gz
 Source1:        esbuild-%{esbuild_version}.tar.gz
 Source2:        esbuild-%{esbuild_version}-vendor.tar.gz
@@ -139,7 +148,6 @@ Patch7:         chromium-norar.patch
 Patch9:         system-libdrm.patch
 # gentoo/fedora/arch patchset
 Patch15:        chromium-125-compiler.patch
-Patch40:        chromium-91-java-only-allowed-in-android-builds.patch
 Patch98:        chromium-102-regex_pattern-array.patch
 # PATCH-FIX-SUSE: allow prop codecs to be set with chromium branding
 Patch202:       chromium-prop-codecs.patch
@@ -157,6 +165,9 @@ Patch371:       chromium-133-bring_back_and_disable_allowlist.patch
 Patch373:       chromium-134-type-mismatch-error.patch
 Patch375:       chromium-131-fix-qt-ui.pach
 Patch376:       chromium-135-add_map_droppable.patch
+Patch377:       chromium-139-deterministic.patch
+Patch378:       chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
+Patch379:       chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
 # conditionally applied patches ppc64le only
 Patch401:       ppc-fedora-add-ppc64-architecture-string.patch
 Patch402:       ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
@@ -216,7 +227,8 @@ Patch455:       ppc-fedora-add-ppc64-pthread-stack-size.patch
 Patch456:       ppc-fedora-fix-ppc64-rust_png-build-error.patch
 Patch457:       ppc-chromium-136-clang-config.patch
 Patch458:       ppc-fedora-0001-add-xnn-ppc64el-support.patch
-#Patch459:       ppc-fedora-0002-regenerate-xnn-buildgn.patch
+# https://src.fedoraproject.org/rpms/chromium/blob/rawhide/f/0002-regenerate-xnn-buildgn.patch
+Patch459:       ppc-fedora-0002-regenerate-xnn-buildgn.patch
 Patch460:       ppc-debian-0003-third_party-ffmpeg-Add-ppc64-generated-config.patch
 # conditionally applied patches
 # patch where libxml < 2.12
@@ -225,6 +237,8 @@ Patch1010:      chromium-124-system-libxml.patch
 Patch1030:      chromium-134-revert-rust-adler2.patch
 # gtk4 is too old
 Patch1040:      gtk-414.patch
+# flac is too old
+Patch1050:      chromium-140-old-flac.patch
 # end conditionally applied patches
 BuildRequires:  SDL-devel
 BuildRequires:  bison
@@ -234,7 +248,7 @@ BuildRequires:  elfutils
 BuildRequires:  fdupes
 BuildRequires:  flex
 BuildRequires:  git
-BuildRequires:  gn >= 0.20250520
+BuildRequires:  gn >= 0.20250619
 BuildRequires:  gperf
 BuildRequires:  hicolor-icon-theme
 BuildRequires:  golang(API)
@@ -499,6 +513,10 @@ WebDriver is an open source tool for automated testing of webapps across many br
 %patch -p1 -R -P 1040
 %endif
 
+%if %{without flac_1_5}
+%patch -p1 -P 1050
+%endif
+
 %build
 # esbuild
 rm third_party/devtools-frontend/src/third_party/esbuild/esbuild
@@ -520,9 +538,6 @@ rm -f third_party/node/linux/node-linux-x64/bin/node
 ln -s %{_bindir}/node third_party/node/linux/node-linux-x64/bin/node
 sed -i -e "s@^NODE_VERSION=.*@NODE_VERSION=\"v%{node_version}\"@" third_party/node/update_node_binaries
 
-rm buildtools/third_party/eu-strip/bin/eu-strip
-ln -s %{_bindir}/eu-strip buildtools/third_party/eu-strip/bin/eu-strip
-
 # python3
 mkdir -p $HOME/bin
 %if 0%{?suse_version} >= 1600
@@ -556,7 +571,6 @@ keeplibs=(
     base/third_party/superfasthash
     base/third_party/symbolize
     base/third_party/xdg_user_dirs
-    buildtools/third_party/eu-strip
     buildtools/third_party/libc++
     buildtools/third_party/libc++abi
     buildtools/third_party/libunwind
@@ -763,7 +777,6 @@ keeplibs=(
     third_party/utf
     third_party/vulkan
     third_party/wayland
-    third_party/wasm_tts_engine
     third_party/webdriver
     third_party/webgpu-cts
     third_party/webrtc
@@ -1006,6 +1019,10 @@ myconf_gn+=" arm_control_flow_integrity=\"none\""
 myconf_gn+=" host_cpu=\"ppc64\""
 %endif
 myconf_gn+=" host_os=\"linux\""
+%if %{official_build}
+myconf_gn+=" is_official_build=true"
+sed -i 's|OFFICIAL_BUILD|GOOGLE_CHROME_BUILD|g' tools/generate_shim_headers/generate_shim_headers.py
+%endif
 myconf_gn+=" is_debug=false"
 myconf_gn+=" dcheck_always_on=false"
 myconf_gn+=" enable_nacl=false"

gcc-enable-lto.patch

@@ -11,8 +11,8 @@ Index: chromium-120.0.6099.18/build/config/BUILDCONFIG.gn
    # Set to true when compiling with the Clang compiler.
    is_clang = current_os != "linux" ||
               (current_cpu != "s390x" && current_cpu != "s390" &&
-@@ -354,6 +356,12 @@ default_compiler_configs = [
-   "//build/config/sanitizers:default_sanitizer_flags",
+@@ -389,6 +389,12 @@
+   "//build/config:feature_flags",
  ]
  
 +if (gcc_lto) {
@@ -28,8 +28,8 @@ Index: chromium-120.0.6099.18/build/config/compiler/BUILD.gn
 ===================================================================
 --- chromium-120.0.6099.18.orig/build/config/compiler/BUILD.gn
 +++ chromium-120.0.6099.18/build/config/compiler/BUILD.gn
-@@ -2342,6 +2342,10 @@ if (is_win) {
-   common_optimize_on_cflags += [ "-fno-math-errno" ]
+@@ -2672,6 +2672,10 @@
+   }
  }
  
 +config("gcc_lto") {

gtk-414.patch

@@ -110,7 +110,7 @@ index efe6321149679..239fbf4ca69a1 100644
 -    GdkTexture* texture = GetTextureFromRenderNode(node);
      size_t nbytes = width * height * sizeof(SkColor);
      SkColor* pixels = reinterpret_cast<SkColor*>(g_malloc(nbytes));
-+    memset(pixels, 0, nbytes);
++    UNSAFE_TODO(memset(pixels, 0, nbytes));
      size_t stride = sizeof(SkColor) * width;
 -    gdk_texture_download(texture, reinterpret_cast<guchar*>(pixels), stride);
 +    if (GdkTexture* texture = GetTextureFromRenderNode(node)) {
@@ -118,7 +118,7 @@ index efe6321149679..239fbf4ca69a1 100644
 +    }
      SkColor fg = GtkStyleContextGetColor(button_context);
      for (int i = 0; i < width * height; ++i) {
-       pixels[i] = SkColorSetA(fg, SkColorGetA(pixels[i]));
+       UNSAFE_TODO(pixels[i]) =
 @@ -199,7 +201,7 @@ void CalculateUnscaledButtonSize(
      gfx::Size* button_size,
      gfx::Insets* button_margin) {

ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch

@@ -2052,7 +2052,7 @@ Index: chromium-134.0.6998.35/third_party/libaom/source/config/linux/ppc64/confi
 +void av1_fwht4x4_c(const int16_t *input, tran_low_t *output, int stride);
 +#define av1_fwht4x4 av1_fwht4x4_c
 +
-+uint32_t av1_get_crc32c_value_c(void *crc_calculator, uint8_t *p, size_t length);
++uint32_t av1_get_crc32c_value_c(void *crc_calculator, const uint8_t *p, size_t length);
 +#define av1_get_crc32c_value av1_get_crc32c_value_c
 +
 +void av1_get_horver_correlation_full_c(const int16_t *diff, int stride, int w, int h, float *hcorr, float *vcorr);

ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch

@@ -367,7 +367,7 @@ Index: chromium-136.0.7103.48/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
      case __NR__llseek:
  #endif
  #if !defined(__aarch64__)
-@@ -604,26 +619,28 @@ bool SyscallSets::IsAllowedGeneralIo(int
+@@ -619,18 +619,19 @@
      case __NR_readv:
      case __NR_pread64:
  #if defined(__arm__) || \
@@ -390,15 +390,19 @@ Index: chromium-136.0.7103.48/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
 +#if defined(__i386__) || defined(__arm__) || defined(__mips__) || defined(__powerpc64__)
      case __NR__newselect:
  #endif
+     case __NR_write:
+@@ -650,11 +651,12 @@
+ #endif
+ // send* syscalls need their flags filtered.
  #if defined(__arm__) || \
 -    (defined(ARCH_CPU_MIPS_FAMILY) && defined(ARCH_CPU_32_BITS))
 +    (defined(ARCH_CPU_MIPS_FAMILY) && defined(ARCH_CPU_32_BITS)) || \
 +    defined(__powerpc64__)
      case __NR_send:
  #endif
- #if defined(__x86_64__) || defined(__arm__) || defined(__mips__) || \
--    defined(__aarch64__)
-+    defined(__aarch64__) || defined(__powerpc64__)
+ #if defined(__i386__) || defined(__x86_64__) || defined(__arm__) || \
+-    defined(__mips__) || defined(__aarch64__)
++    defined(__mips__) || defined(__aarch64__) || defined(__powerpc64__)
      case __NR_sendmsg:  // Could specify destination.
      case __NR_sendto:   // Could specify destination.
  #endif

ppc-fedora-add-ppc64-architecture-to-extensions.diff

@@ -2,45 +2,26 @@ Index: chromium-128.0.6613.113/chrome/browser/extensions/api/runtime/chrome_runt
 ===================================================================
 --- chromium-128.0.6613.113.orig/chrome/browser/extensions/api/runtime/chrome_runtime_api_delegate.cc
 +++ chromium-128.0.6613.113/chrome/browser/extensions/api/runtime/chrome_runtime_api_delegate.cc
-@@ -310,6 +310,8 @@
-     info->arch = extensions::api::runtime::PlatformArch::kMips;
-   } else if (strcmp(arch, "mips64el") == 0) {
+@@ -348,6 +348,8 @@
      info->arch = extensions::api::runtime::PlatformArch::kMips64;
+   } else if (strcmp(arch, "riscv64") == 0) {
+     info->arch = extensions::api::runtime::PlatformArch::kRiscv64;
 +  } else if (strcmp(arch, "ppc64") == 0) {
 +    info->arch = extensions::api::runtime::PlatformArch::kPpc64;
    } else {
      NOTREACHED();
    }
-@@ -325,6 +327,8 @@
-     info->nacl_arch = extensions::api::runtime::PlatformNaclArch::kMips;
-   } else if (strcmp(nacl_arch, "mips64") == 0) {
-     info->nacl_arch = extensions::api::runtime::PlatformNaclArch::kMips64;
-+  } else if (strcmp(nacl_arch, "ppc64") == 0) {
-+    info->nacl_arch = extensions::api::runtime::PlatformNaclArch::kPpc64;
-   } else {
-     NOTREACHED();
-   }
 Index: chromium-128.0.6613.113/extensions/common/api/runtime.json
 ===================================================================
 --- chromium-128.0.6613.113.orig/extensions/common/api/runtime.json
 +++ chromium-128.0.6613.113/extensions/common/api/runtime.json
-@@ -98,7 +98,8 @@
-             {"name": "x86-32", "description": "Specifies the processer architecture as x86-32."},
+@@ -99,7 +99,8 @@
              {"name": "x86-64", "description": "Specifies the processer architecture as x86-64."},
              {"name": "mips", "description": "Specifies the processer architecture as mips."},
--            {"name": "mips64", "description": "Specifies the processer architecture as mips64."}
-+            {"name": "mips64", "description": "Specifies the processer architecture as mips64."},
+             {"name": "mips64", "description": "Specifies the processer architecture as mips64."},
+-            {"name": "riscv64", "description": "Specifies the processer architecture as riscv64."}
++            {"name": "riscv64", "description": "Specifies the processer architecture as riscv64."},
 +            {"name": "ppc64", "description": "Specifies the processer architecture as ppc64."}
           ],
          "description": "The machine's processor architecture."
        },
-@@ -111,7 +112,8 @@
-           {"name": "x86-32", "description": "Specifies the native client architecture as x86-32."},
-           {"name": "x86-64", "description": "Specifies the native client architecture as x86-64."},
-           {"name": "mips", "description": "Specifies the native client architecture as mips."},
--          {"name": "mips64", "description": "Specifies the native client architecture as mips64."}
-+          {"name": "mips64", "description": "Specifies the native client architecture as mips64."},
-+          {"name": "ppc64", "description": "Specifies the native client architecture as ppc64."}
-         ]
-       },
-       {

ppc-fedora-fix-study-crash.patch

@@ -10,9 +10,9 @@
    }
  
    // Enum to pass as optional bool.
---- a/components/variations/service/variations_field_trial_creator_base.cc
-+++ b/components/variations/service/variations_field_trial_creator_base.cc
-@@ -109,6 +109,9 @@
+--- chromium-140.0.7339.5/components/variations/service/variations_field_trial_creator.cc	2025/08/12 14:50:52	1.1
++++ chromium-140.0.7339.5/components/variations/service/variations_field_trial_creator.cc	2025/08/12 14:51:32
+@@ -105,6 +105,9 @@
    if (process_arch == "x86") {
      return Study::X86_32;
    }

ppc-fedora-fix-unknown-warning-option-messages.diff

@@ -2,15 +2,27 @@ Index: chromium-128.0.6613.113/build/config/compiler/BUILD.gn
 ===================================================================
 --- chromium-128.0.6613.113.orig/build/config/compiler/BUILD.gn
 +++ chromium-128.0.6613.113/build/config/compiler/BUILD.gn
-@@ -1844,7 +1844,7 @@ config("default_warnings") {
- 
-       # -Wno-class-memaccess warns about hash table and vector in blink.
-       # But the violation is intentional.
--      if (!is_nacl) {
-+      if ((!is_nacl) && (current_cpu != "ppc64")) {
-         cflags_cc += [ "-Wno-class-memaccess" ]
-       }
+@@ -1835,12 +1835,16 @@
+       cflags_cc += [
+         # See comment for -Wno-c++11-narrowing.
+         "-Wno-narrowing",
+-
+-        # -Wno-class-memaccess warns about hash table and vector in blink.
+-        # But the violation is intentional.
+-        "-Wno-class-memaccess",
+       ]
  
++      if (current_cpu != "ppc64") {
++        cflags_cc += [
++          # -Wno-class-memaccess warns about hash table and vector in blink.
++          # But the violation is intentional.
++          "-Wno-class-memaccess",
++        ]
++      }
++
+       # -Wunused-local-typedefs is broken in gcc,
+       # https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63872
+       cflags += [ "-Wno-unused-local-typedefs" ]
 @@ -1854,7 +1854,9 @@ config("default_warnings") {
  
        # Don't warn about "maybe" uninitialized. Clang doesn't include this