[qt/qt/qtwebengine]: Summary of bulk changes made

Git repository change summary for qt/qt/qtwebengine
Pushed by mirror-service into branch '6.12'.
Changed from 4086e3338036f2163053d1d1dda7432700c4e859 to 02de5ad62555da1edc6b7efe7dd75bb7f3162a7d
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 391c92741d11f36edeb129cf77eb84d9547e6b62 by Qt Cherry-pick Bot (on behalf of Dennis Kim) on 06/08/2026 at 23:39..
[ohos][qtpdf] Add QtPdf build support for OHOS

Wire OpenHarmony (OHOS) into the QtPdf CMake build: mark it a supported
QtPdf platform, pass the OHOS gn toolchain args, and route it through
the Linux link-options path.

QtToolchainHelpers.cmake maps the gn target_os to ohos, passes the OHOS
target_cpu, SDK sysroot and musl_sysroot, and keeps the Rust build off
for OHOS (Chromium's rust.gni has no rust_abi_target for it).
src/pdf/CMakeLists.txt sets use_blink=false and enable_pdf=false for
OHOS, since QtPdf uses pdfium directly and needs neither blink nor
Chromium's in-tree PDF viewer.

configure.cmake accepts OHOS as a supported QtPdf platform with Clang,
and Functions.cmake routes OHOS through the same gn link options as
Linux and Android.

Task-number: QTBUG-148157
Change-Id: I48d13bcc5ee68a834617d8c07520d0a4ca744237
Reviewed-by: Michal Klocek <[email protected]>
Reviewed-by: Liang Qi <[email protected]>
(cherry picked from commit 6cb939e859446e3054c31774a97b0538ad9c434e)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtwebengine/-/commit/391c92741d11f36edeb129cf77eb84d9547e6b62

Git commit 02de5ad62555da1edc6b7efe7dd75bb7f3162a7d by Qt Cherry-pick Bot (on behalf of Michal Klocek) on 06/08/2026 at 23:39..
Update Chromium

Submodule src/3rdparty cbf4306f..a0e9609f:
* Revert "[fixup] Fix QtWebEngine build on all platforms"
* [fixup][Backport] Dependency for CVE-2026-14407 (1/3)
* [Backport][parts] CVE-2026-13909: Insufficient policy enforcement in DevTools
* CVE-2026-14414: Insufficient validation of untrusted input in Skia
* [fixup][Backport] Dependency for CVE-2026-14407 (1/3)
* [Backport] CVE-2026-13875: Insufficient validation of untrusted input in GPU
* [fixup] Fix QtWebEngine build on all platforms
* [Backport] CVE-2026-14407: Inappropriate implementation in V8
* [Backport] Dependency for CVE-2026-14407 (3/3)
* [Backport] Dependency for CVE-2026-14407 (2/3)
* [Backport] Dependency for CVE-2026-14407 (1/3)
* [backport] CVE-2026-14016: Insufficient policy enforcement in SVG (2/2)
* [backport] CVE-2026-14016: Insufficient policy enforcement in SVG (1/2)
* [backport] CVE-2026-14004: Inappropriate implementation in CSS
* [backport] Dependency for CVE-2026-14004
* [backport] CVE-2026-14002: Inappropriate implementation in Geolocation
* [backport] Dependency for CVE-2026-14002
* [backport] CVE-2026-13976: Heap buffer overflow in Storage

Fixes: QTBUG-147760
Fixes: QTBUG-147859
Fixes: QTBUG-147892
Fixes: QTBUG-147901
Fixes: QTBUG-147902
Fixes: QTBUG-147903
Fixes: QTBUG-147928
Fixes: QTBUG-147929
Fixes: QTBUG-147930
Fixes: QTBUG-148187
Fixes: QTBUG-148189
Fixes: QTBUG-148190
Fixes: QTBUG-148314
Fixes: QTBUG-148315
Fixes: QTBUG-148316
Fixes: QTBUG-148515
Fixes: QTBUG-148516
Fixes: QTBUG-148581
Pick-to: 6.11
Change-Id: I609d349be6608784b94860887f96b3d729e6ea8e
Reviewed-by: Michael Brüning <[email protected]>
(cherry picked from commit a9a9091ef003d4e3c70559978f5d69668367bc4c)
Reviewed-by: Qt Cherry-pick Bot <[email protected]>
https://invent.kde.org/qt/qt/qtwebengine/-/commit/02de5ad62555da1edc6b7efe7dd75bb7f3162a7d