[qt/qt/qtbase]: Summary of bulk changes made

Git repository change summary for qt/qt/qtbase
Pushed by mirror-service into branch '6.11'.
Changed from 6890a7e23a66c9f2012ee6462573f55c3ae483d8 to d86ae6acb990b1c3497ac439d47d029aa82e6e68
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 1d6fc0101d580cbd50b35cab1ed75b181e10211e by Qt Cherry-pick Bot (on behalf of Mate Barany) on 29/07/2026 at 07:36..
QNetworkDiskCache: document security considerations for cached data

Add a Security Considerations section to the class documentation
that explains the confidentiality and integrity properties of the
disk cache, and provides guidance on preventing sensitive responses
from being persisted to disk.

Fixes: QTBUG-147871
Change-Id: If33e6fe0b00175900baaf19e371d9842c9c9ef3b
Reviewed-by: Thiago Macieira <[email protected]>
(cherry picked from commit 11dd547c2986dd85a614618338549ec1fa9f40d9)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit 8aaefa7c181586b41a22604954c754186a27adca)
https://invent.kde.org/qt/qt/qtbase/-/commit/1d6fc0101d580cbd50b35cab1ed75b181e10211e

Git commit 08ef92d3f547eaa27bac35c38ab4ca4a66dfec03 by Qt Cherry-pick Bot (on behalf of Mate Barany) on 29/07/2026 at 07:36..
QAuthenticator: change method selection to prefer strongest method

The method selection loop in parseHttpResponse() uses raw enum
comparisons (method < X) to decide whether to upgrade to a stronger
method. The enum is ordered, which gives DigestMd5 the highest numeric
value. As a result, Digest-MD5 is preferred over both NTLM and
Negotiate (Kerberos) when a server offers multiple methods.

Change the ordering to prefer the strongest available method.

Task-number: QTBUG-147622
Change-Id: I3cd98e350e2363a59247fff7a0958e1250be1313
Reviewed-by: Mårten Nordheim <[email protected]>
(cherry picked from commit 6f2dc4dde69f83bca4227b55bd1072cb5c70b275)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit 8431cdcfe00aba399951b80ad245b521d3a82017)
https://invent.kde.org/qt/qt/qtbase/-/commit/08ef92d3f547eaa27bac35c38ab4ca4a66dfec03

Git commit 469f0ca0235390f0ffcd81dba23f847dc5402b2c by Qt Cherry-pick Bot (on behalf of Marc Mutz) on 29/07/2026 at 09:19..
QByteArray: fix UB (nullptr passed to memcpy()) in assign()

Found by ubsan running tst_qstringbuilder:

  qbytearray.cpp:2234:20: runtime error: null pointer passed as argument 2, which is declared to never be null
    #0 0x7f109c3a5eea in QByteArray::assign(QByteArrayView) qbytearray.cpp:2234
    #1 0x55b99f25ff37 in QByteArray operator+<void>(QByteArray const&, QByteArrayView) qbytearray.h:737
    #2 0x55b99f1b9459 in checkAutoImpl3<QByteArray, QByteArrayView, QByteArray> stringbuilder.cpp:202
    #3 0x55b99f1c47a8 in checkAutoImpl2<QByteArray, QByteArrayView, QByteArray> stringbuilder.cpp:216
    #4 0x55b99f1c47a8 in checkAutoImpl<QByteArray, QByteArrayView, QByteArray> stringbuilder.cpp:225
    #5 0x55b99f1c47a8 in checkAuto stringbuilder.cpp:240
    #6 0x55b99f1eac01 in runScenario stringbuilder.cpp:622
    #7 0x55b99f1f14de in tst_QStringBuilder5::scenario() tst_qstringbuilder5.cpp:29

Fix, as usual, by length-guarding the call.

Amends 18a2c62c073371ab24685d0f98b4b0cc04d11a7e (6.6).

Pick-to: 6.8
Change-Id: I08e0073d52b9159463ce25e76054b47d505de868
Reviewed-by: Dennis Oberst <[email protected]>
(cherry picked from commit bf9aea18c36a5dc30631347acf3d8fbc73bddaf4)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit c30dc10efaf5aad70542b47e56214480aeb093ee)
https://invent.kde.org/qt/qt/qtbase/-/commit/469f0ca0235390f0ffcd81dba23f847dc5402b2c

Git commit d86ae6acb990b1c3497ac439d47d029aa82e6e68 by Qt Cherry-pick Bot (on behalf of Marc Mutz) on 29/07/2026 at 09:20..
QSmallByteArray: fix incorrect precondition check

Of course, we can assign up to N octets into a QSmallByteArray<N>, so
the assert shouldn't trigger for size() == N.

Found by Ahmad Samir in independent review.

Added a test that runs into the assertion in debug mode.

Amends 1fb0dca140c1dbf3e66b322af837b7bf650f2e77 (picked to 6.5).

[ChangeLog][QtCore][QMessageAuthenticationCode] Fixed an incorrect
assertion triggering on correct input: setKey() with an algorithm with
144 byte block size (QCryptographicHash::RealSha3_224/Keccak_224) and
a key that's exactly 144 octets long.

Pick-to: 6.8 6.5
Change-Id: I7b42cd247ec6f08fc881b61b31ac44c0a3fa990a
Reviewed-by: Ivan Solovev <[email protected]>
(cherry picked from commit 74ee5786015c13d80a288a88c9d8d79d23b9e02c)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
(cherry picked from commit dc5cb67e6bef5f9eefa9e9f0179119d16356be06)
https://invent.kde.org/qt/qt/qtbase/-/commit/d86ae6acb990b1c3497ac439d47d029aa82e6e68