merge 138.0.7204.183 changes

chromium-91-java-only-allowed-in-android-builds.patch

@@ -1,16 +0,0 @@
-References: https://bugs.chromium.org/p/chromium/issues/detail?id=1192875
-
-Index: chromium-91.0.4472.57/third_party/closure_compiler/compiler.py
-===================================================================
---- chromium-91.0.4472.57.orig/third_party/closure_compiler/compiler.py
-+++ chromium-91.0.4472.57/third_party/closure_compiler/compiler.py
-@@ -13,8 +13,7 @@ import subprocess
- 
- 
- _CURRENT_DIR = os.path.join(os.path.dirname(__file__))
--_JAVA_PATH = os.path.join(_CURRENT_DIR, "..", "jdk", "current", "bin", "java")
--assert os.path.isfile(_JAVA_PATH), "java only allowed in android builds"
-+_JAVA_PATH = "java"
- 
- class Compiler(object):
-   """Runs the Closure compiler on given source files to typecheck them

chromium.changes

@@ -1,8 +1,22 @@
+-------------------------------------------------------------------
+Wed Jul 30 10:26:40 CEST 2025 - ro@suse.de
+
+- Chromium 138.0.7204.183 (boo#1247365):
+  * CVE-2025-8292: Use after free in Media Stream
+- try to switch to smaller linux tarball from
+   https://github.com/chromium-linux-tarballs)
+- disable chromium-91-java-only-allowed-in-android-builds.patch
+  (not part of reduced tarball)
+
 -------------------------------------------------------------------
 Tue Jul 29 10:44:14 CEST 2025 - ro@suse.de
 
 - set official_build to true (like other distributions)
   "official builds have less debugging and go faster..." 
+- added patches:
+  chromium-139-deterministic.patch
+  (undefine __DATE__,__TIME__ like without official-build set
+   to keep the build reproducible)
 
 -------------------------------------------------------------------
 Thu Jul 24 18:23:20 CEST 2025 - ro@suse.de

chromium.spec

@@ -116,7 +116,8 @@ Release:        0
 Summary:        Google's open source browser project
 License:        BSD-3-Clause AND LGPL-2.1-or-later
 URL:            https://www.chromium.org/
-Source0:        https://commondatastorage.googleapis.com/chromium-browser-official/%{rname}-%{version}.tar.xz
+#Source0:        https://commondatastorage.googleapis.com/chromium-browser-official/%{rname}-%{version}.tar.xz
+Source0:        https://github.com/chromium-linux-tarballs/chromium-tarballs/releases/download/%{version}/chromium-%{version}-linux.tar.xz
 # https://github.com/evanw/esbuild/archive/refs/tags/v%%{esbuild_version}.tar.gz
 Source1:        esbuild-%{esbuild_version}.tar.gz
 Source2:        esbuild-%{esbuild_version}-vendor.tar.gz
@@ -142,7 +143,6 @@ Patch7:         chromium-norar.patch
 Patch9:         system-libdrm.patch
 # gentoo/fedora/arch patchset
 Patch15:        chromium-125-compiler.patch
-Patch40:        chromium-91-java-only-allowed-in-android-builds.patch
 Patch98:        chromium-102-regex_pattern-array.patch
 # PATCH-FIX-SUSE: allow prop codecs to be set with chromium branding
 Patch202:       chromium-prop-codecs.patch