[qt/qt/qtbase]: Summary of bulk changes made

Git repository change summary for qt/qt/qtbase
Pushed by mirror-service into branch '6.12'.
Changed from 43581f7bda34d24a8a8b4c1eb1a94cdc5db79af9 to 8aaefa7c181586b41a22604954c754186a27adca
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit ff848953e0034a51ba36ec6a4a91ec2d49233936 by Qt Cherry-pick Bot (on behalf of Julian Greilich) on 28/07/2026 at 10:19..
a11y iOS: Implement accessibilityExpandedStatus

This leads to the current expanded/collapsed state being announced.

Task-number: QTBUG-146552
Change-Id: I10f19491498e1d5469b235ad1e2233967fffea5f
Reviewed-by: Lars Schmertmann <[email protected]>
Reviewed-by: Michael Weghorn <[email protected]>
Reviewed-by: Volker Hilsheimer <[email protected]>
(cherry picked from commit c925b3b047c0c8195ed985eb2d7191ec86b915a7)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/ff848953e0034a51ba36ec6a4a91ec2d49233936

Git commit 93faf82cf79e72bb60dfc935719b2aed160f9fbf by Qt Cherry-pick Bot (on behalf of Julian Greilich) on 28/07/2026 at 10:19..
a11y macOS: Respect state.expandable and state.expanded

We cannot implement the accessiblityExpanded property getter since that
would lead to every component being announced as collapsed, even when
expandable is false.

Task-number: QTBUG-146552
Change-Id: I81d5c35ea4f7eba61e63a4447d21bc743e01c140
Reviewed-by: Volker Hilsheimer <[email protected]>
Reviewed-by: Lars Schmertmann <[email protected]>
(cherry picked from commit c4d9f02a0fc2b4493ea8cca4703353c2f03fcaa8)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/93faf82cf79e72bb60dfc935719b2aed160f9fbf

Git commit 05529a5fa69667c3e38665bf1896c54a9b9a7410 by Qt Cherry-pick Bot (on behalf of Julian Greilich) on 28/07/2026 at 10:19..
a11y Windows: Implement expandable/expanded state

* Enable ExpandCollapsePattern for all expandable elements.
  All elements that are expandable should be announced as that.
* Expanding/Collapsing an expandable control now leads to the correct
  announcement of the current expanded state.

Task-number: QTBUG-146552
Task-number: QTBUG-148361
Change-Id: Ia658cd3b19a0655ee2b2deb18dca3abc1a1f5b82
Reviewed-by: Volker Hilsheimer <[email protected]>
Reviewed-by: Michael Weghorn <[email protected]>
Reviewed-by: Lars Schmertmann <[email protected]>
(cherry picked from commit 6f82ae2a4bd19641afd2edaec2c1a9ae57ef9086)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/05529a5fa69667c3e38665bf1896c54a9b9a7410

Git commit 1089891df21d6b611480d1a2160321403cb71db9 by Qt Cherry-pick Bot (on behalf of Tor Arne Vestbø) on 28/07/2026 at 10:47..
cmake: Add support for associating a Swift overlay with a module

A Swift overlay lets a module layer idiomatic Swift API on top of
its imported C++ — protocol conformances, computed properties,
String-returning wrappers — without modifying any Qt headers.

A module opts in by setting the _qt_swift_overlay target property
to a .swift file. At finalization we run it through swiftc to emit
a textual .swiftinterface into a ModuleName.swiftmodule directory,
which Swift resolves by target module triple. As swiftc has no
notion of -arch, a universal build emits one interface per
architecture slice, each with its own -target.

swiftc reaches the underlying module the same way a consumer does:
through the framework for a framework build (-F), or the top-level
include directory otherwise (-I). We place the overlay so that same
search path finds it: in the framework's Modules directory, or the
top-level include directory. The latter, rather than next to the
module map, because Swift — unlike Clang — only looks for
ModuleName.swiftmodule directly in a search directory, not in a
subdirectory named after the module.

We generate into an intermediate directory and copy only the public
interface into place, so the .private.swiftinterface that swiftc
always emits alongside it, and which we can't suppress, is not
shipped.

As a minimal example we ship a QtCore overlay exposing qtVersion()
as a Swift String, wrapping the raw qVersion() that the QtCore API
notes now hide as __qVersion().

The overlay uses @_alwaysEmitIntoClient, which means its built
into the consuming Swift app, so the license is BSD-3.

Task-number: QTBUG-141360
Change-Id: I48c8b649da78745cbc51209b6d93845883d39d6e
Reviewed-by: Alexandru Croitor <[email protected]>
(cherry picked from commit ab517fd9211d9e9e67e97283db22e4078a199f8e)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/1089891df21d6b611480d1a2160321403cb71db9

Git commit 3dde3a43ba4e5e7c085597a727aecd3eb2ce19fb by Qt Cherry-pick Bot (on behalf of Tor Arne Vestbø) on 28/07/2026 at 10:47..
moc: Resolve the include before skipping to end of line

Diagnostics report the position of the last consumed symbol, and the
newline symbol carries the line number of the line following the
directive. Since we consumed everything up to and including the newline
before resolving the include, any diagnostic emitted during resolution,
such as the warning about #include_next in the primary source file, was
attributed to the wrong line.

Resolve the include first, and only then skip to the end of the line.

Amends cd1ea2e4e82e890aa0127d36341dd64b96e02b9b

Task-number: QTBUG-141360
Change-Id: I3061be9050ee524b70f323db98eaa810a2cf035d
Reviewed-by: Alexandru Croitor <[email protected]>
Reviewed-by: Fabian Kosmale <[email protected]>
(cherry picked from commit cb99367cba02a668ea3ff5dcdc6a5c42ba9901a3)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/3dde3a43ba4e5e7c085597a727aecd3eb2ce19fb

Git commit c90f39b056a40acb1a662bdc46ce3fea8f3875f6 by Qt Cherry-pick Bot (on behalf of Tor Arne Vestbø) on 28/07/2026 at 10:47..
moc: Turn the #include_next warning into a --debug-includes log

An #include_next in a file that was not found via the include path
resumes the search from the start of the path. We warned about this,
modeled after GCC and Clang, but there is nothing the user can act on:
every file moc processes is also seen by the compiler, either as its
primary source file or, for a moc'ed header, through the relative
#include in the generated moc_*.cpp, and it resolves the #include_next
the same way. Clang even warns about the latter, with a diagnostic that
can be turned off on its own, which ours could not.

The warning also claimed more than it knew. The condition is true both
for the primary source file and for a file included relative to it, so
we would name a header and then assert it was the primary source file.
Clang keeps those apart as two separate diagnostics, and GCC stays
quiet about the second one, as it does for __has_include_next in any
position.

Keep the information for whoever is debugging why moc resolved an
include differently than their compiler did, as part of
--debug-includes, and say what actually happened.

Amends cd1ea2e4e82e890aa0127d36341dd64b96e02b9b.

Task-number: QTBUG-141360
Change-Id: I0bad71d51efb3771291ac616733675d83e12fe3c
Reviewed-by: Fabian Kosmale <[email protected]>
(cherry picked from commit b081d1421390ed86431f339a4c520a43cc73d923)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/c90f39b056a40acb1a662bdc46ce3fea8f3875f6

Git commit 8ae6a631f5c1f2e84d235dc350b8437f7ff34de8 by Qt Cherry-pick Bot (on behalf of Assam Boudjelthia) on 28/07/2026 at 10:53..
Android: harden nine-patch style parsing against malformed data

The nine-patch drawable reader trusts the division and colour
arrays that ExtractStyle produces from the device theme. On
malformed or empty chunk data it read past the arrays and could
divide by zero:

- draw() read xDivs[0]/yDivs[0] with no empty check
- the stretchy-pixel pair loops read xDivs[i+1] with odd count
- the draw loop indexed colors[] with no bound
- calculateStretch() divided by the remaining stretchy pixels

Guard each by bailing to a plain stretched draw on empty
divisions, stop the pair loops one short, bound the colour
index, and guard the zero denominator.

Fixes: QTBUG-148431
Pick-to: 6.11 6.8
Change-Id: I52125b94196180b3695801ac9334a51e9e57cfb7
Reviewed-by: Soheil Armin <[email protected]>
(cherry picked from commit 24f8e51238720d4211bc739829dc63bc453d921c)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/8ae6a631f5c1f2e84d235dc350b8437f7ff34de8

Git commit bc23016f0a4da1d6d977cf73d00da56a2ac57f63 by Qt Cherry-pick Bot (on behalf of Assam Boudjelthia) on 28/07/2026 at 10:53..
Android: bound array reads in ExtractStyle nine-patch export

getJsonChunkInfo() read the div and colour counts from the native
chunk header and copied that many ints without checking the array
length, so a short or malformed chunk threw
ArrayIndexOutOfBounds. Clamp getJsonArray() to the array length
and require a header of at least three ints.

Fixes: QTBUG-148432
Pick-to: 6.11 6.8
Change-Id: Ic9d172ccb875d3ab8a944c5d4f7af623a83ca511
Reviewed-by: Soheil Armin <[email protected]>
(cherry picked from commit d9994441dd6d2bb8d8adf1ff2be47910370fb30f)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/bc23016f0a4da1d6d977cf73d00da56a2ac57f63

Git commit e5032c202d7b546d13787f1ddaafbe7396655c48 by Qt Cherry-pick Bot (on behalf of Assam Boudjelthia) on 28/07/2026 at 10:53..
Android: fix off-by-one in content file engine iterator

AndroidContentFileEngineIterator::currentFileName() and
AndroidContentFileEngineIterator::currentFilePath() guarded
with m_index > m_files.size(), so at m_index == size() they
called QList::at(size()), one past the end. Use >= instead.

Fixes: QTBUG-148430
Pick-to: 6.11 6.8
Change-Id: I392a8508dd2b51cd9a6b1ea226ac20d4bf0475c3
Reviewed-by: Soheil Armin <[email protected]>
(cherry picked from commit b19b57339bd20a79ca96459cd9cbd42617f771e6)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/e5032c202d7b546d13787f1ddaafbe7396655c48

Git commit 744624ad419331e4174d7486581636b87823853d by Qt Cherry-pick Bot (on behalf of Assam Boudjelthia) on 28/07/2026 at 10:53..
Android: read content cursor BLOB via QJniArray

The BLOB column reader used raw GetArrayLength and
GetByteArrayElements with no null check on the array and no
exception-safe release, so a null or oversized blob from a
content provider could crash or leak the pinned array.

Read it with callMethod<QByteArray>, which bounds-checks and
manages the reference.

Fixes: QTBUG-148429
Pick-to: 6.11
Change-Id: I542657c82c81427198142ada1e9cd7ebe08f02c1
Reviewed-by: Soheil Armin <[email protected]>
(cherry picked from commit 90449da456026abc9d6392470e732fc03696bac3)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/744624ad419331e4174d7486581636b87823853d

Git commit df6b010d3f3d2f8328bd179e32a5e27e6dc79428 by Qt Cherry-pick Bot (on behalf of Assam Boudjelthia) on 28/07/2026 at 10:53..
Android: don't log IME text content

The input-method debug category logged various forms
of plain text, which includes password-field content when
the category is enabled. Log only the lengths and positions,
never the text.

Fixes: QTBUG-148433
Pick-to: 6.11 6.8
Change-Id: I326872faf256889211c2eda16316c25b1bda33ce
Reviewed-by: Soheil Armin <[email protected]>
(cherry picked from commit b11af1ce32e3d55b49c4106d2722f4f3b04bd5b3)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/df6b010d3f3d2f8328bd179e32a5e27e6dc79428

Git commit d25cd530faee01e927e86ce58ec2cde823d45c0c by Qt Cherry-pick Bot (on behalf of Assam Boudjelthia) on 28/07/2026 at 10:53..
Android: gate applicationArguments extra behind debuggable

The base QtLoader appended the applicationArguments intent
extra to the app argv unconditionally. QtActivity is exported,
so another app could launch it with that extra and inject Qt
command-line arguments in a release build. Honour it only when
the app is debuggable, matching the extraappparams handling,
and check the key is present.

Fixes: QTBUG-148439
Pick-to: 6.11 6.8
Change-Id: I20cf24f332dd9933490a842c572f77edc03c8dea
Reviewed-by: Soheil Armin <[email protected]>
(cherry picked from commit 6eb0fa5735ca192986007f19d8eddf7e0e4fc012)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/d25cd530faee01e927e86ce58ec2cde823d45c0c

Git commit 14aa81594a1b6a63e6b3e91f5f6c9de60ebd7dd6 by Qt Cherry-pick Bot (on behalf of Assam Boudjelthia) on 28/07/2026 at 10:53..
JNI: return empty QString for a null jstring

toQString() only asserted the string was non-null, then called
GetStringLength on it, so a null jstring crashed in release
builds.

Return an empty QString instead.

Fixes: QTBUG-148445
Pick-to: 6.11 6.8
Change-Id: Ib876e06734029f24f8ce9582c41d7ab7d594aff6
Reviewed-by: Soheil Armin <[email protected]>
(cherry picked from commit a0e9c43ae87d41ee8425e810fca6a1f126806e79)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/14aa81594a1b6a63e6b3e91f5f6c9de60ebd7dd6

Git commit 6f9ab990d49757cd2e8c4200e9ada43431ac5692 by Qt Cherry-pick Bot (on behalf of Assam Boudjelthia) on 28/07/2026 at 10:53..
JNI: clear pending exceptions in QJniArray element access

QJniArray::at() and setValue() called the array element get/set
JNI functions without checking for a pending exception, so an
out-of-range index left an exception set that would corrupt the
next JNI call.

Check and clear after the get and set paths.

Fixes: QTBUG-148446
Pick-to: 6.11 6.8
Change-Id: Ib982dda48d353e6037cfa2ddc504a053711c8c26
Reviewed-by: Soheil Armin <[email protected]>
(cherry picked from commit 7f6daac1ebc1a837e19adf799a4b367ec0166de7)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/6f9ab990d49757cd2e8c4200e9ada43431ac5692

Git commit f9642e86c966f2188a98a5932c1243d7b2095178 by Qt Cherry-pick Bot (on behalf of Antti Määttä) on 28/07/2026 at 18:32..
Allow uavs in fragment stage for buffers

Similarly to images, allow uavs for the buffers as well.
Also remove exclusivity from the stage check.

Change-Id: I21783f85d50b99ebd96142c1215d663470ebb1c5
Reviewed-by: Laszlo Agocs <[email protected]>
(cherry picked from commit 6f024856f6769a2b44d1806975f4ab2df477abb0)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/f9642e86c966f2188a98a5932c1243d7b2095178

Git commit 236c48ef0ce29ad6a772a77e8f7342a3656883ca by Qt Cherry-pick Bot (on behalf of Zbigniew Chyla) on 28/07/2026 at 18:32..
ohos: printsupport: drop unused NodeAddonApi dependency

The OHOS printsupport plugin links NodeAddonApi, the C++ wrapper
around Node-API, and defines the two node-addon-api macros, but no
source in the plugin includes napi.h or uses any Napi:: symbol. Its
only native dependencies are ohprint and, via QtCore's private
qohoslogger_p.h, hilog; both are C APIs that cannot throw.

NAPI_CPP_EXCEPTIONS and NODE_ADDON_API_ENABLE_TYPE_CHECK_ON_AS are
consumed by napi.h alone, so both are no-ops here. The EXCEPTIONS
keyword is only there because NodeAddonApi uses exceptions; the
plugin itself has no try, catch or throw.

Remove the NodeAddonApi dependency and all three of the above. The
plugin now builds with the default exceptions setting, like the cups
printsupport plugin and QtPrintSupport itself.

Task-number: QTBUG-147394
Change-Id: I590a7bbf2d335fe23301b59cc86812143341bfe5
Reviewed-by: Marc Mutz <[email protected]>
Reviewed-by: Aleksander Wawrzyniak <[email protected]>
(cherry picked from commit 9e0524838ab7aac694fd6acb437a86a6baaa8106)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/236c48ef0ce29ad6a772a77e8f7342a3656883ca

Git commit e3c9f3f2ea74857cca17d14862d2891776d707ab by Qt Cherry-pick Bot (on behalf of Kai Koehne) on 28/07/2026 at 18:32..
Doc: Prevent linkification of 'WebEngine', 'StyleKit'

In most contexts, the text is not about the QML item of the same name.

Change-Id: I70a19e87345ad1c8e16b35ffab634b921adddf59
Reviewed-by: Alexei Cazacov <[email protected]>
(cherry picked from commit b412b580a6089e0e99581027f8b3e3374af40046)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/e3c9f3f2ea74857cca17d14862d2891776d707ab

Git commit dc5cb67e6bef5f9eefa9e9f0179119d16356be06 by Qt Cherry-pick Bot (on behalf of Marc Mutz) on 28/07/2026 at 18:32..
QSmallByteArray: fix incorrect precondition check

Of course, we can assign up to N octets into a QSmallByteArray<N>, so
the assert shouldn't trigger for size() == N.

Found by Ahmad Samir in independent review.

Added a test that runs into the assertion in debug mode.

Amends 1fb0dca140c1dbf3e66b322af837b7bf650f2e77 (picked to 6.5).

[ChangeLog][QtCore][QMessageAuthenticationCode] Fixed an incorrect
assertion triggering on correct input: setKey() with an algorithm with
144 byte block size (QCryptographicHash::RealSha3_224/Keccak_224) and
a key that's exactly 144 octets long.

Pick-to: 6.11 6.8 6.5
Change-Id: I7b42cd247ec6f08fc881b61b31ac44c0a3fa990a
Reviewed-by: Ivan Solovev <[email protected]>
(cherry picked from commit 74ee5786015c13d80a288a88c9d8d79d23b9e02c)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/dc5cb67e6bef5f9eefa9e9f0179119d16356be06

Git commit 48655957f27d1849d6709d226293227bcd77dff3 by Qt Cherry-pick Bot (on behalf of Edward Welbourne) on 28/07/2026 at 18:32..
Remove a duplicate `using` declaration

The lambda it appeared in was within a function that does the same.

Task-number: QTBUG-77948
Change-Id: I170f1065d8f3ed5d30389e3f4f5ca8861e645464
Reviewed-by: Thiago Macieira <[email protected]>
(cherry picked from commit 47e6ccc478314689431c0bfae7a2696bf9520191)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/48655957f27d1849d6709d226293227bcd77dff3

Git commit 10cde946ed277541753aef3fd1936c604f2cfe37 by Qt Cherry-pick Bot (on behalf of Edward Welbourne) on 28/07/2026 at 18:32..
Convert some matchIanaId() locals from int to qsizetype

They're about indexes into, and differences of position within, our
containers.

Task-number: QTBUG-77948
Change-Id: I20a8f0e79fbcd9ea713a13f57fdd21f37f5fd808
Reviewed-by: Thiago Macieira <[email protected]>
(cherry picked from commit 2d6e5da5baeadbc8f032a7bf1570aa4fb97e3311)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/10cde946ed277541753aef3fd1936c604f2cfe37

Git commit 64eb514a4ab6acce7dca0e59e0a4107a1ebbefa3 by Qt Cherry-pick Bot (on behalf of Edward Welbourne) on 28/07/2026 at 18:32..
Simplify an unnecessarily convoluted comment's phrasing

Double negatives are bad for human cognition.

Task-number: QTBUG-77948
Change-Id: I9a0dc31986e709c4b4700511ff067a6d89c64ce7
Reviewed-by: Thiago Macieira <[email protected]>
(cherry picked from commit dcdd5659770fd9bae6bede18dceffe080951597a)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/64eb514a4ab6acce7dca0e59e0a4107a1ebbefa3

Git commit fafd73f0c7f4f07476bad584b81d8e551a2635b1 by Qt Cherry-pick Bot (on behalf of Edward Welbourne) on 28/07/2026 at 18:32..
Map pre-zone abbreviation LMT to LocalTime if used as zone indicator

Everywhere's time gets described as Local Mean (Solar) Time prior to
the date at which each region that did so became a zone. This is thus
an entirely unhelpful abbreviation, other than telling us it's not a
UTC±HH[:mm] zone. So map it to LocalTime as a best guess and live with
the inevitability that it'll not infrequently be wrong. Formats
involving a zone really aren't appropriate for representing timestamps
before the 20th century in any case.

Change-Id: I693c8bed870a176202fb9d19213f2f8903fc6306
Reviewed-by: Thiago Macieira <[email protected]>
(cherry picked from commit f48dca7a75c54e55d679200ec15fe8d4512c2626)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/fafd73f0c7f4f07476bad584b81d8e551a2635b1

Git commit 26ef8580cedb736d92ee9545ed1a3b4f6c541254 by Qt Cherry-pick Bot (on behalf of Mate Barany) on 28/07/2026 at 18:32..
QNetworkDiskCache: use QtMiscUtils::toHexLower for subdirectory names

Replace QString::number(i, 16) with QtMiscUtils::toHexLower(i) for
constructing the hex subdirectory names.

Change-Id: If5e3d6c16b7eba14d000fe72e52ad9133dbcdd9f
Reviewed-by: Thiago Macieira <[email protected]>
(cherry picked from commit 17be5001644138c41050b74b95b8191cc3cee389)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/26ef8580cedb736d92ee9545ed1a3b4f6c541254

Git commit a8b7a0357a62c62e482eb25e1516c4248dd8dc2f by Qt Cherry-pick Bot (on behalf of Zbigniew Chyla) on 28/07/2026 at 18:32..
ohos: rename QtOhosAppKit module to QtHarmonyExtras

The module's external identity had two problems. "Ohos" is the
toolchain name, but Qt's user-facing name for this OS is now Harmony
(Q_OS_HARMONY, QOperatingSystemVersion::HarmonyOS). And "AppKit" is
Apple's macOS framework, entirely unrelated to OpenHarmony - Qt
component names should not overlap with unrelated parts of Qt, let
alone with unrelated non-Qt components.

Name the module QtHarmonyExtras, following the QtXxxExtras convention
for platform-specific add-on APIs.

Rename the external identity:

 - module OhosAppKit => HarmonyExtras
 - namespace QtOhosAppKit => QtHarmonyExtras
 - Q_OHOSAPPKIT_EXPORT => Q_HARMONYEXTRAS_EXPORT
 - QT_BUILD_OHOSAPPKIT_LIB => QT_BUILD_HARMONYEXTRAS_LIB
 - include path QtOhosAppKit/ => QtHarmonyExtras/
 - qtohosappkitglobal_p.h => qtharmonyextrasglobal_p.h
 - directory ohos/ohosappkit/ => ohos/extras/

Internal names stay on the "Ohos" prefix (qohos* file names, QOhos*
implementation classes, QtOhos plugin namespace), matching the corelib
convention.

Task-number: QTBUG-147194
Task-number: QTBUG-148587
Change-Id: I511c1c58d1c7156c8ab6e70cd9191cc3229229c8
Reviewed-by: Tor Arne Vestbø <[email protected]>
Reviewed-by: SanthoshKumar Selvaraj <[email protected]>
(cherry picked from commit 9ffa885ca65783e1e4b6b34f39bcae45665d033c)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/a8b7a0357a62c62e482eb25e1516c4248dd8dc2f

Git commit 8431cdcfe00aba399951b80ad245b521d3a82017 by Qt Cherry-pick Bot (on behalf of Mate Barany) on 28/07/2026 at 18:32..
QAuthenticator: change method selection to prefer strongest method

The method selection loop in parseHttpResponse() uses raw enum
comparisons (method < X) to decide whether to upgrade to a stronger
method. The enum is ordered, which gives DigestMd5 the highest numeric
value. As a result, Digest-MD5 is preferred over both NTLM and
Negotiate (Kerberos) when a server offers multiple methods.

Change the ordering to prefer the strongest available method.

Task-number: QTBUG-147622
Pick-to: 6.11
Change-Id: I3cd98e350e2363a59247fff7a0958e1250be1313
Reviewed-by: Mårten Nordheim <[email protected]>
(cherry picked from commit 6f2dc4dde69f83bca4227b55bd1072cb5c70b275)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/8431cdcfe00aba399951b80ad245b521d3a82017

Git commit 8aaefa7c181586b41a22604954c754186a27adca by Qt Cherry-pick Bot (on behalf of Mate Barany) on 28/07/2026 at 18:32..
QNetworkDiskCache: document security considerations for cached data

Add a Security Considerations section to the class documentation
that explains the confidentiality and integrity properties of the
disk cache, and provides guidance on preventing sensitive responses
from being persisted to disk.

Fixes: QTBUG-147871
Pick-to: 6.11
Change-Id: If33e6fe0b00175900baaf19e371d9842c9c9ef3b
Reviewed-by: Thiago Macieira <[email protected]>
(cherry picked from commit 11dd547c2986dd85a614618338549ec1fa9f40d9)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtbase/-/commit/8aaefa7c181586b41a22604954c754186a27adca