[qt/qt/qtwebengine]: Summary of bulk changes made

Git repository change summary for qt/qt/qtwebengine
Pushed by mirror-service into branch 'dev'.
Changed from 17d6beca1b8d2f69678ae7df3ee2cdf88ef99b03 to a9a9091ef003d4e3c70559978f5d69668367bc4c
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 6cb939e859446e3054c31774a97b0538ad9c434e by Dennis Kim on 06/08/2026 at 14:01..
[ohos][qtpdf] Add QtPdf build support for OHOS

Wire OpenHarmony (OHOS) into the QtPdf CMake build: mark it a supported
QtPdf platform, pass the OHOS gn toolchain args, and route it through
the Linux link-options path.

QtToolchainHelpers.cmake maps the gn target_os to ohos, passes the OHOS
target_cpu, SDK sysroot and musl_sysroot, and keeps the Rust build off
for OHOS (Chromium's rust.gni has no rust_abi_target for it).
src/pdf/CMakeLists.txt sets use_blink=false and enable_pdf=false for
OHOS, since QtPdf uses pdfium directly and needs neither blink nor
Chromium's in-tree PDF viewer.

configure.cmake accepts OHOS as a supported QtPdf platform with Clang,
and Functions.cmake routes OHOS through the same gn link options as
Linux and Android.

Task-number: QTBUG-148157
Pick-to: 6.12
Change-Id: I48d13bcc5ee68a834617d8c07520d0a4ca744237
Reviewed-by: Michal Klocek <[email protected]>
Reviewed-by: Liang Qi <[email protected]>
https://invent.kde.org/qt/qt/qtwebengine/-/commit/6cb939e859446e3054c31774a97b0538ad9c434e

Git commit a9a9091ef003d4e3c70559978f5d69668367bc4c by Michal Klocek on 06/08/2026 at 15:32..
Update Chromium

Submodule src/3rdparty cbf4306f..a0e9609f:
* Revert "[fixup] Fix QtWebEngine build on all platforms"
* [fixup][Backport] Dependency for CVE-2026-14407 (1/3)
* [Backport][parts] CVE-2026-13909: Insufficient policy enforcement in DevTools
* CVE-2026-14414: Insufficient validation of untrusted input in Skia
* [fixup][Backport] Dependency for CVE-2026-14407 (1/3)
* [Backport] CVE-2026-13875: Insufficient validation of untrusted input in GPU
* [fixup] Fix QtWebEngine build on all platforms
* [Backport] CVE-2026-14407: Inappropriate implementation in V8
* [Backport] Dependency for CVE-2026-14407 (3/3)
* [Backport] Dependency for CVE-2026-14407 (2/3)
* [Backport] Dependency for CVE-2026-14407 (1/3)
* [backport] CVE-2026-14016: Insufficient policy enforcement in SVG (2/2)
* [backport] CVE-2026-14016: Insufficient policy enforcement in SVG (1/2)
* [backport] CVE-2026-14004: Inappropriate implementation in CSS
* [backport] Dependency for CVE-2026-14004
* [backport] CVE-2026-14002: Inappropriate implementation in Geolocation
* [backport] Dependency for CVE-2026-14002
* [backport] CVE-2026-13976: Heap buffer overflow in Storage

Fixes: QTBUG-147760
Fixes: QTBUG-147859
Fixes: QTBUG-147892
Fixes: QTBUG-147901
Fixes: QTBUG-147902
Fixes: QTBUG-147903
Fixes: QTBUG-147928
Fixes: QTBUG-147929
Fixes: QTBUG-147930
Fixes: QTBUG-148187
Fixes: QTBUG-148189
Fixes: QTBUG-148190
Fixes: QTBUG-148314
Fixes: QTBUG-148315
Fixes: QTBUG-148316
Fixes: QTBUG-148515
Fixes: QTBUG-148516
Fixes: QTBUG-148581
Pick-to: 6.12 6.11
Change-Id: I609d349be6608784b94860887f96b3d729e6ea8e
Reviewed-by: Michael Brüning <[email protected]>
https://invent.kde.org/qt/qt/qtwebengine/-/commit/a9a9091ef003d4e3c70559978f5d69668367bc4c