)]}' { "log": [ { "commit": "57a86975cdfe6d8bd486511c71a0f5cbc2ea6e28", "tree": "1a313a4f0bb8790ba4b303e00e9d913e9716c9e1", "parents": [ "7f047a9e149fdbb1ef144410b6cb64b32814ba75" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Tue Sep 22 20:52:21 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 20:58:43 2026" }, "message": "Migrate SignatureVerifier call sites to crypto::sign\n\nMigrate the remaining standalone call sites of the deprecated\n`crypto::SignatureVerifier` across `//net`, `//components`, `//content`,\n`//extensions`, `//chrome`, `//chromeos`, and `//remoting` to\n`crypto::sign::Verify` (one-shot) and `crypto::sign::Verifier`\n(streaming) paired with\n`crypto::keypair::PublicKey::FromSubjectPublicKeyInfo`.\n\nAll call sites that parse external or untrusted SubjectPublicKeyInfo\nbytes explicitly validate key-type compatibility (`IsRsa()`, `IsEc()`,\netc.) before invoking `crypto::sign` primitives to preserve graceful\nerror handling on key-algorithm mismatches.\n\nBug: 406190025\nChange-Id: I9029973f77126b700acd6dd4b372febb6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8425702\nCommit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nOwners-Override: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1702940}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0a84eeb1fb3e1b39a110fdc466b2a5b74e0e897e\n" }, { "commit": "7f047a9e149fdbb1ef144410b6cb64b32814ba75", "tree": "8607626ce0a51af4fe8b6aec898b94873f74904d", "parents": [ "556770f00d295d2a03abd0261609fefd533f4788" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Tue Sep 22 20:51:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 20:58:08 2026" }, "message": "[dbsc] Plumb request priority into DBSC URLFetcher\n\nPreviously, URLFetcher unconditionally configured net::IDLE priority on\nits underlying URLRequest. When a device-bound session refresh was\ninitiated to unblock deferred user requests, RegistrationFetcherImpl\nraised its watchdog timeout and unexportable key priority to\nkUserBlocking, but outbound network requests remained at net::IDLE.\n\nPlumb net::RequestPriority into URLFetcher so callers can specify the\nnetwork priority. Update RegistrationFetcherImpl to send requests with\nnet::HIGHEST priority when running in the kUserBlocking state, falling\nback to net::IDLE for background requests.\n\nBug: 562888709\nChange-Id: I43b7f3d246ded31fbf012c690879e0ff6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8422786\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCommit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1702938}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a4e2630cfec6538480c8892a94a1cc3fbba8c1c0\n" }, { "commit": "556770f00d295d2a03abd0261609fefd533f4788", "tree": "d699bac98da08faabcfe1c65dbb8db5253cafa3a", "parents": [ "d34d69679f4caeaffb52b9456a577e8e5afeefac" ], "author": { "name": "Viktoriya Bryhider", "email": "vbryhider@microsoft.com", "time": "Tue Sep 22 18:46:10 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 18:52:28 2026" }, "message": "WebTransport: network part of GetStats for SendStream\n\nTrack application bytes sent and acknowledged for active WebTransport\nsend streams in the network service. Exclude stream preambles and\ndeduplicate retransmitted or overlapping QUIC ranges.\n\nExpose the statistics over Mojo and discard them when a stream closes or\nis aborted so unavailable streams return null.\n\nBug: 487117768\nChange-Id: Ic1f8101a8d0131f54ce684c2c60ab23006ae105d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8384896\nReviewed-by: Hidehiko Abe \u003chidehiko@chromium.org\u003e\nCommit-Queue: Viktoriya Bryhider \u003cvbryhider@microsoft.com\u003e\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1702827}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ea9e93c35108d2c2bc98d320be28cf25421271b8\n" }, { "commit": "d34d69679f4caeaffb52b9456a577e8e5afeefac", "tree": "0bd2352628696ca362a3f8f673ff966853edf73f", "parents": [ "c35a87c7b54cc4f193b6bc26ff5a1b59ae03befe" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Tue Sep 22 18:23:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 18:31:53 2026" }, "message": "Remove unused MtcAnchor fields in root_store.proto\n\nBug: 520071497\nChange-Id: I156d87d62968482d40972cc35172c270fb0b0b07\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8433446\nAuto-Submit: Matt Mueller \u003cmattm@chromium.org\u003e\nReviewed-by: Mustafa Emre Acer \u003cmeacer@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1702802}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 13f1a2bd596a7f69308a72474d1eba8b7ad22a2a\n" }, { "commit": "c35a87c7b54cc4f193b6bc26ff5a1b59ae03befe", "tree": "860161d6fba35393f8654ce0774ab9395ac47df8", "parents": [ "fbab937db0c3e0e9b9eb1f0bdce97ad3a6d1b59c" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Tue Sep 22 16:49:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 16:57:52 2026" }, "message": "Make key pinning lookup methods const.\n\nThe methods were non-const so that they could opportunistically remove\nentries that have expired. Since header-based PKP is dead, the only\nplace that uses the dynamic PKP implementation which does this cleanup\nis cronet. Cronet apps would generally be expected to have only a small\nnumber of pins, so this is no longer important.\n\nMaking the methods const will make the PKP refactor easier, as PKP will\nbe checked during certificate verification which happens on a background\nthread, which would require locking if the cleanup code was kept.\n\nBug: 497882860\nChange-Id: Ie4a71e47c5e2363d840de49852fff5a7e850f7b6\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8433719\nReviewed-by: Carlos IL \u003ccarlosil@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1702729}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 322badabf636d9c9d3abbfb7f8d07e046dad3073\n" }, { "commit": "fbab937db0c3e0e9b9eb1f0bdce97ad3a6d1b59c", "tree": "5cbc2b746bffa4fe3404260f9be2be17431140ff", "parents": [ "dd53bf46b21664e482da00fdde34977785fc92e9" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Tue Sep 22 15:34:35 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 15:39:34 2026" }, "message": "Fix stale checks for RedundantOutcome\n\nRedundantOutcome was renamed to SpuriousOutcome but apparently we forgot\nto update a few tests (which kept passing because we\u0027re checking for\nsomething not being logged).\n\nBug: 557126867\nChange-Id: I73a542da832c2c2a1ffcdc60c80e4ab3c4513cbe\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8442496\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1702650}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3a2c8254f04629a3092fa35781b2d92f828e1fa8\n" }, { "commit": "dd53bf46b21664e482da00fdde34977785fc92e9", "tree": "dac2676c7d52846cbbdd46d2b9cab842d05f4541", "parents": [ "1ecaf5a3ff79f8982efabcb62227d5f776f0851a" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Tue Sep 22 15:33:11 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 15:38:38 2026" }, "message": "Return string_view instead of string from QuicMigrationAttemptCauseToString\n\nThis saves us unnecessary string allocations.\n\nBug: 557126867\nChange-Id: Id5be5cb20e84890fb5964fd5c9cf3dbe3410fe19\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8410447\nAuto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1702648}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4d6c216f847c3b0a7efd6b21a0f293d3b14c7af2\n" }, { "commit": "1ecaf5a3ff79f8982efabcb62227d5f776f0851a", "tree": "548bbbea419f7f32ae84ebbe6970ebd51768782a", "parents": [ "8b292214c76f70d7cc9e2ce5f38da8b42c1c9f0d" ], "author": { "name": "Jeffrey Yu", "email": "yuje@chromium.org", "time": "Tue Sep 22 15:03:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 15:14:29 2026" }, "message": "Use try_emplace() for setting default actions in DnsConfigServiceLinux.\n\nReplaces map count() checks and subscript assignments with try_emplace()\ncalls to avoid redundant lookups and simplify the code. try_emplace()\nattempts to lookup the key and only sets the value if the key doesn\u0027t\nexist, so it does the same thing as the replaced code without a second\nmap lookup.\n\nAlso made expected_actions in AreActionsCompatible pass-by-reference to\navoid making a map copy every time the function is called.\n\nBug: 452950815\nChange-Id: I5b3d6ee79ad54fcd2712c7d3a9b4b9eaa52e72c5\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8427771\nReviewed-by: Eric Orth \u003cericorth@chromium.org\u003e\nAuto-Submit: Jeffrey Yu \u003cyuje@chromium.org\u003e\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCommit-Queue: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1702626}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 254eaa897f6faeab73d50ba69776018ae026dac5\n" }, { "commit": "8b292214c76f70d7cc9e2ce5f38da8b42c1c9f0d", "tree": "d0edd5d56105c43e679b31f4c839c5defbffed22", "parents": [ "295fba8a456fe035c4152e77d2411cf8cc3f0cee" ], "author": { "name": "PKI Metadata Updates Bot", "email": "mdb.chrome-pki-metadata-release-jobs@google.com", "time": "Tue Sep 22 14:51:43 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 14:57:57 2026" }, "message": "[CRS] Automatic update from google3\n\nAutomatic update for 2026-09-22 UTC\n\nMerge-Approval-Bypass: pki-metadata-updater\nChange-Id: I56082f41098bb32d39afafdfde6a2eff11fc9f69\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8442577\nBot-Commit: PKI Metadata Updates Bot \u003cmdb.chrome-pki-metadata-release-jobs@google.com\u003e\nCommit-Queue: PKI Metadata Updates Bot \u003cmdb.chrome-pki-metadata-release-jobs@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1702613}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ce4e4404ab674f326c285355b31781c0e8274943\n" }, { "commit": "295fba8a456fe035c4152e77d2411cf8cc3f0cee", "tree": "ba8a6f15ae917c47bf2b47cc5259ade9a8902a49", "parents": [ "b7ed4306300eb90e4bc551c9a0bfe5a981fd7ea4" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Tue Sep 22 14:44:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 14:49:44 2026" }, "message": "Deprecate MigrationCause in favor of enum class\n\nThis is one step towards fewer enums.\n\nBug: 557126867\nChange-Id: Ic846034c86455590bd1f9003b8792da1ada3c845\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8377453\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nAuto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1702608}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bcd6c52e65f09d418557b216bdc4b4b92a733833\n" }, { "commit": "b7ed4306300eb90e4bc551c9a0bfe5a981fd7ea4", "tree": "88c80a803f8d78a7d45dd10749447f20b39e6b27", "parents": [ "6e6ef376ab602253986dca25c3483accb6b056e5" ], "author": { "name": "Jeffrey Yu", "email": "yuje@chromium.org", "time": "Tue Sep 22 12:17:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 12:33:31 2026" }, "message": "Reuse DnsHostsKey and use contains() in DnsConfigServiceWin\n\nAvoid re-constructing DnsHostsKey instances for IPv4 and IPv6 across\nchecks and insertions, and replace count() \u003e 0 with contains() for\nreadability.\n\nBug: 501076278\nChange-Id: Iee5f6fe7090482c586f7736051af729166457623\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8419957\nCommit-Queue: Adam Rice \u003cricea@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nReviewed-by: Eric Orth \u003cericorth@chromium.org\u003e\nAuto-Submit: Jeffrey Yu \u003cyuje@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1702509}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bf3c393fffeb41638aa6c7617033c40801fae1dd\n" }, { "commit": "6e6ef376ab602253986dca25c3483accb6b056e5", "tree": "55a611d08ffb73398cb0de319f00a350486dff7a", "parents": [ "4e5bc1b7f91d7ecfeafac663f68270c813862a62" ], "author": { "name": "James Hawkins", "email": "jhawkins@google.com", "time": "Tue Sep 22 02:52:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 22 02:59:33 2026" }, "message": "presubmit: Fast-path nested PRESUBMITs in subsystems (part 8 of 8)\n\nUse InputApi.HasAffectedFiles() to early-return from test and linter\nrunners when no relevant files are affected across subsystems:\n- android_webview/tools/\n- base/tracing/\n- buildtools/checkdeps/\n- ios/ (build/bots/scripts, build/bots/scripts/plugin, chrome/browser/flags)\n- media/\n- mojo/\n- net/tools/dafsa/\n- sandbox/win/tests/basic_process/\n- services/network/build/scripts/\n- ui/ (chromeos/styles, file_manager, webui/resources/tools)\n\nBenchmark (mojo/public/cpp/bindings/BUILD.gn, mojo/ PRESUBMIT):\n- Baseline (origin/main): 4.31s ± 0.03s\n- Optimized (CL branch): 225ms ± 7ms\n- Savings: -4.08s (-94.8%, 19.13x speedup)\n\nOverall series benchmark (all 8 CLs combined):\n- Multi-subsystem change (touching files across all 8 subsystems):\n Baseline (origin/main): 60.44s ± 0.74s\n Optimized (series): 14.17s ± 0.20s\n Savings: -46.26s (-76.5%, 4.26x speedup)\n- Standard root build edit (build/config/compiler/BUILD.gn):\n Baseline (origin/main): 569ms ± 8ms\n Optimized (series): 470ms ± 6ms\n Savings: -100ms (-17.5%, 1.21x speedup)\n\nBug: 534712288\nTest: python3 -m py_compile **/PRESUBMIT.py\nChange-Id: I7be6cd134f5297c15c13b55b87fed7faf8d488e2\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8414903\nReviewed-by: Rohit Rao \u003crohitrao@chromium.org\u003e\nReviewed-by: Nico Weber \u003cthakis@chromium.org\u003e\nReviewed-by: David Benjamin \u003cdavidben@chromium.org\u003e\nReviewed-by: Eric Orth \u003cericorth@chromium.org\u003e\nReviewed-by: Colin Blundell \u003cblundell@chromium.org\u003e\nReviewed-by: Richard Coles \u003ctorne@chromium.org\u003e\nReviewed-by: Rasika Navarange \u003crasikan@google.com\u003e\nReviewed-by: Tom Sepez \u003ctsepez@chromium.org\u003e\nCommit-Queue: James Hawkins \u003cjhawkins@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1702336}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 26d5aedc087f792c74713eaa536a310d247b90e2\n" }, { "commit": "4e5bc1b7f91d7ecfeafac663f68270c813862a62", "tree": "66f5cfee6ef1773bc76a089f9fad2a66abb063a1", "parents": [ "cefc1a04784ac121cf1bc13655a640862966314f" ], "author": { "name": "Hubert Chao", "email": "hchao@chromium.org", "time": "Mon Sep 21 21:45:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 21 21:55:19 2026" }, "message": "[LNA] add additional netlogging for IP address space override info\n\nBug: 540020538\nChange-Id: Ibdbe7825c9e316ebdba5fbdb2eab5603e7f2babd\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8407793\nReviewed-by: Matt Mueller \u003cmattm@chromium.org\u003e\nCommit-Queue: Hubert Chao \u003chchao@chromium.org\u003e\nReviewed-by: Eric Orth \u003cericorth@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1702067}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4e18d3107258cf34b967b72bb52cc8592f03ad75\n" }, { "commit": "cefc1a04784ac121cf1bc13655a640862966314f", "tree": "cf9a0f20523191f0d0dea9e99b544531cdd459f5", "parents": [ "bac4eb4a73f2f130dbcfa1288486aae8f04bb525" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Mon Sep 21 19:54:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 21 19:59:16 2026" }, "message": "Remove unused last_observed field from PKPState\n\nBug: 497882860\nChange-Id: Ie0f4f5433015bac2b559f64e66f5f8c2ca226caf\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8431790\nReviewed-by: Carlos IL \u003ccarlosil@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1701981}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6d0bb4fff1cd6ace77df2e25f02e9ce7c756e12d\n" }, { "commit": "bac4eb4a73f2f130dbcfa1288486aae8f04bb525", "tree": "bbeacbe14b25d8bbe01a53f78180e1f5c74743b3", "parents": [ "8fd81e1713c41d87ff8f11c37beb2080a117a945" ], "author": { "name": "Seonggon Cho", "email": "jmsmg1@me.com", "time": "Mon Sep 21 17:33:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 21 17:38:57 2026" }, "message": "[net] Migrate the reporting/NEL store to sql::Statement time accessors\n\nsql::Statement has ColumnTime() and BindTime() for base::Time columns\nand asks callers to use them instead of converting through int64\nmicroseconds by hand. SQLitePersistentReportingAndNelStore still did\nthat conversion in both directions: the pending-operation structs kept\nexpiry and last-access times as int64 microseconds since the Windows\nepoch, and the load path rebuilt base::Time from ColumnInt64().\n\nKeep base::Time in the structs and use BindTime() and ColumnTime(). The\non-disk format is unchanged: BindTime() stores\nToDeltaSinceWindowsEpoch().InMicroseconds() and ColumnTime() reads it\nback, which is exactly what the hand-written conversion did.\n\nR\u003dnidhijaju@chromium.org, ricea@chromium.org\n\nBug: 40176243\nChange-Id: Iaf3f43933358ca15be75159d71f5422417a9a6d3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8410045\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCommit-Queue: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1701856}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 59647e287088beef47a6a0760681b7b4b4c388b7\n" }, { "commit": "8fd81e1713c41d87ff8f11c37beb2080a117a945", "tree": "0143bad9800609e54aa61645219e3c7541440ef3", "parents": [ "060e14a3985ba8a2231cf31772b167a6eead1c03" ], "author": { "name": "Andrew Paseltiner", "email": "apaseltiner@chromium.org", "time": "Mon Sep 21 15:30:10 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 21 15:37:25 2026" }, "message": "Clean up structured-headers usage in device bound sessions\n\n1. Simplify token-item construction.\n2. Remove misleading std::move with SerializeList, which takes a const\n reference.\n\nChange-Id: I81c41ff568be3a8e409cfb63e15adc6f88955ae0\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8427568\nCommit-Queue: thefrog \u003cthefrog@chromium.org\u003e\nAuto-Submit: Andrew Paseltiner \u003capaseltiner@chromium.org\u003e\nReviewed-by: thefrog \u003cthefrog@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1701780}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 904ef47c70dd2bb1359232310f65521baae2d8ea\n" }, { "commit": "060e14a3985ba8a2231cf31772b167a6eead1c03", "tree": "d298fc7836bb8930528f75491d948dc5da49a058", "parents": [ "69abf3fde62b077e071ae38b26dd758c35ed3bcb" ], "author": { "name": "Chris Fredrickson", "email": "cfredric@chromium.org", "time": "Mon Sep 21 14:27:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 21 14:35:37 2026" }, "message": "[RWS] Remove unused RWS cookie exclusion reason\n\nNote that ExcludeThirdPartyCookieBlockedInFirstPartySet is dead/unused\nin devtools_frontend (see https://crrev.com/c/8420927); and so are both\nThirdPartyBlockedInFirstPartySet enums (they only appear in generated\ncode). Additionally, RWS is deprecated and being removed, so we can\nremove the CookieInclusionStatus that\u0027s used to populate those enums on\nthe browser-side.\n\nFollowup CLs will remove the now-unnecessary RWS plumbing from the\nnetwork service as a whole.\n\nBug: 561405994\nChange-Id: I11c1975ffa63758ee9433317c7d09e9b40f72992\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8421383\nCommit-Queue: Chris Fredrickson \u003ccfredric@chromium.org\u003e\nReviewed-by: Alex Rudenko \u003calexrudenko@chromium.org\u003e\nAuto-Submit: Chris Fredrickson \u003ccfredric@chromium.org\u003e\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1701742}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f66f650a752751c159a1fa17a14b61209fc21483\n" }, { "commit": "69abf3fde62b077e071ae38b26dd758c35ed3bcb", "tree": "f989c8625669ec3422edb35b30a303ffdbc3aa10", "parents": [ "ae8f3ec227bff836d1bae8a36e8a39a681a3abbe" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Mon Sep 21 08:48:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 21 08:59:01 2026" }, "message": "Reland \"Enable kQuicIgnoreRedundantOnNetworkMadeDefault by default\"\n\nThis reverts commit ed9661c0877bab43bc83e4dba68d0eda35c837c5.\n\nReason for revert: Reland now that we followed WebView\u0027s best practices.\n\nOriginal change\u0027s description:\n\u003e Revert \"Enable kQuicIgnoreRedundantOnNetworkMadeDefault by default\"\n\u003e\n\u003e This reverts commit 2242b1441b7f6154f59cadf6dc69f2995c119bb9.\n\u003e\n\u003e Reason for revert: Reverting to follow WebView\u0027s best practices.\n\u003e\n\u003e Original change\u0027s description:\n\u003e \u003e Enable kQuicIgnoreRedundantOnNetworkMadeDefault by default\n\u003e \u003e\n\u003e \u003e The experiment results confirmed our assumption of this being the right\n\u003e \u003e behavior. We\u0027re now seeing less \"Already migrated on the new network\"\n\u003e \u003e due to the race condition explained in https://crrev.com/c/7885277.\n\u003e \u003e\n\u003e \u003e Bug: 517895903\n\u003e \u003e Change-Id: I21880a4f884032d1ca2f6f94f0208455149f838e\n\u003e \u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8187035\n\u003e \u003e Reviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\n\u003e \u003e Commit-Queue: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\n\u003e \u003e Auto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e \u003e Cr-Commit-Position: refs/heads/main@{#1673892}\n\u003e\n\u003e Bug: 517895903\n\u003e Change-Id: Ic8969b9867325f518ec6e664cf0eaaa0ff21d152\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8231899\n\u003e Commit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e Reviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\n\u003e Auto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e Commit-Queue: Mohannad Farrag \u003caymanm@google.com\u003e\n\u003e Bot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1676546}\n\nBug: 517895903\nChange-Id: I88e22a48db54ba9cc4bfa044f3b981ff38669c8f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8412528\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1701595}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 558c4472c562cbbd99203e348fae2c7ff1154abc\n" }, { "commit": "ae8f3ec227bff836d1bae8a36e8a39a681a3abbe", "tree": "53f5cafa8edfe3b069fb13b12f1c513ffde3883c", "parents": [ "9d41efa22793691d30c6d011974e5dfa7f233d8d" ], "author": { "name": "Chris Fredrickson", "email": "cfredric@chromium.org", "time": "Fri Sep 18 21:48:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 18 21:58:31 2026" }, "message": "Refresh Public Suffix List to latest version\n\nThis refreshes the list to revision\n329834e40a8543f3ef6265db543b7af6c4185571.\n\nChange-Id: I6858a51e0f9e88293145a953af79fe4d4c3a7541\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8431187\nAuto-Submit: Chris Fredrickson \u003ccfredric@chromium.org\u003e\nReviewed-by: Erica Kovac \u003cekovac@google.com\u003e\nCommit-Queue: Chris Fredrickson \u003ccfredric@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1701103}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 02dd287a08a19fff50fe6045061f7b64fbb88098\n" }, { "commit": "9d41efa22793691d30c6d011974e5dfa7f233d8d", "tree": "5590c29d91730c7a20a1a2582bee8d0e48b0edb6", "parents": [ "ebece4d220f9ebda05a8bb98dcf818d347460422" ], "author": { "name": "Gary Klassen", "email": "gklassen@chromium.org", "time": "Fri Sep 18 19:47:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 18 19:53:10 2026" }, "message": "[net/websockets] Continue without client certificate on CertificateRequest\n\nIn net/websockets/websocket_stream.cc, Delegate::OnCertificateRequested\npreviously called request-\u003eCancel() whenever the server requested a\nclient certificate during TLS negotiation.\n\nWhile WebSockets are subresources and should not display a UI prompt\nto select a client certificate, canceling the request immediately\nprevents connections to servers where client certificate\nauthentication is optional (e.g., test environments, corporate\nproxies, and staging GFEs).\n\nPer RFC 8446 (TLS 1.3) section 4.4.2 and RFC 5246 (TLS 1.2)\nsection 7.4.6, if a client does not provide a certificate, it should\nsend an empty Certificate message. If client authentication is\noptional, the server can proceed with the handshake; if required,\nthe server terminates it.\n\nThis change replaces request-\u003eCancel() with\nrequest-\u003eContinueWithCertificate(nullptr, nullptr), matching the\nbehavior of URLLoader and allowing optional mTLS handshakes to\nsucceed.\n\nBug: 562633284\nChange-Id: I5e0e9ca9311e50327b8cd8c14d72f921b19e0909\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8415333\nCommit-Queue: Gary Klassen \u003cgklassen@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1701027}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f167c8b90fb7d1078ca5cdf754a52743c1fb051e\n" }, { "commit": "ebece4d220f9ebda05a8bb98dcf818d347460422", "tree": "6146681880db39be1e48fad4cf647ea05da26f15", "parents": [ "93ef668b448d832c4c79b19fb635ae7a00c3e30f" ], "author": { "name": "Yoichi Osato", "email": "yoichio@chromium.org", "time": "Fri Sep 18 04:44:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 18 04:48:49 2026" }, "message": "ENABLED_BY_DEFAULT kDrainSpdySessionSynchronouslyOnRemoteEndpointDisconnect\n\nThe flag fixes the SPDY bug and we confirmed that in Stable1%.\n\nBug: 482074640\nChange-Id: I72f5c309cfcbadffea4da7e5008362f042b26174\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8425360\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nAuto-Submit: Yoichi Osato \u003cyoichio@chromium.org\u003e\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1700472}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a91e722da21890c35f51a70005d7f7c70854d461\n" }, { "commit": "93ef668b448d832c4c79b19fb635ae7a00c3e30f", "tree": "e7a37b64a4b286e5dbb12cbbade396d1bb8e164d", "parents": [ "6df5d9cce66cd37f296ec254d3ad0287aef984e6" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Fri Sep 18 03:10:38 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 18 03:23:20 2026" }, "message": "HEv3: Randomize global socket limit in HttpStreamPool\n\nPort SocketPoolAdditionalCapacity and randomized expandability\n(kUncapped vs kCapped) into HttpStreamPool to mitigate cross-origin\ntiming side-channels caused by deterministic socket limit saturation\nwhen HappyEyeballsV3 is enabled.\n\nBug: 513692667\nChange-Id: Ie0607fe73ec0949723b25d2f1500a29b8861dee7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8365045\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nReviewed-by: Ari Chivukula \u003carichiv@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1700396}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 34f6bb989a9cbf8f7aa7aa5e6d5107b95813229b\n" }, { "commit": "6df5d9cce66cd37f296ec254d3ad0287aef984e6", "tree": "f62d899b750d1468ce2c04f089280f65b76c270d", "parents": [ "a1b378e009dd7d53072814d24d7a2c7a3e85b211" ], "author": { "name": "Vincent Scheib", "email": "scheib@chromium.org", "time": "Thu Sep 17 21:21:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 17 21:34:21 2026" }, "message": "[webapps] Multi-layered validation filtering x-scheme-handler from file handlers\n\nFreeDesktop desktop entry specifications define URL scheme associations\nusing pseudo-MIME types prefixed with \"x-scheme-handler/\". Manifest\nfile_handlers should only associate file media types and must not register\narbitrary protocol schemes.\n\nThis CL establishes defense-in-depth across multiple architectural layers:\n1. //net/base: Excludes \"x-scheme-handler\" from net::IsValidTopLevelMimeType().\n2. Blink parser: Drops \"x-scheme-handler/*\" and bare \".\" file extensions in\n manifest parsing.\n3. Content IPC: Validates manifest file handlers in ManifestManagerHost,\n reporting bad messages for invalid MIME types or extensions.\n4. WebAppInstallUtils: Validates MIME types and extension syntax when\n populating WebAppInstallInfo in the browser process.\n5. Linux OS Integration: Filters \"x-scheme-handler\" pseudo-types when\n generating .desktop files and shared MIME-info registration XML files.\n\nTAG\u003dagy\nCONV\u003d66f7f990-d070-4f96-9606-d4f93349ae09\n\nBug: 515440087\nChange-Id: I366d33277f8c97387624cfb70ec792d0cc531686\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8393906\nReviewed-by: Daniel Murphy \u003cdmurph@chromium.org\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCommit-Queue: Vincent Scheib \u003cscheib@chromium.org\u003e\nReviewed-by: Thomas Anderson \u003cthomasanderson@chromium.org\u003e\nReviewed-by: Elly \u003cellyjones@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1700130}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 64bbb4794b224f6e1bf86b69c9982b62f2e1d151\n" }, { "commit": "a1b378e009dd7d53072814d24d7a2c7a3e85b211", "tree": "51b44913cc91e9e4e58bdf20e671c03a964f7840", "parents": [ "ea9295c9b7a2fa51abeaaf6ece9a33a7946c48a5" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Thu Sep 17 19:15:07 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 17 19:25:18 2026" }, "message": "Remove superfluous flat_hash_{map,set}.h includes from headers\n\nRemove absl container headers if they are not referenced. Then do IWYU\nto fix the build.\n\nBug: 40318405\nChange-Id: Ic7eb944251de97904dc108fae2008d68ee78488c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8342708\nReviewed-by: Nico Weber \u003cthakis@chromium.org\u003e\nCommit-Queue: Nico Weber \u003cthakis@chromium.org\u003e\nAuto-Submit: Lei Zhang \u003cthestig@chromium.org\u003e\nOwners-Override: Nico Weber \u003cthakis@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1700031}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 187b77fa0445e696d145103749558409735c4c6a\n" }, { "commit": "ea9295c9b7a2fa51abeaaf6ece9a33a7946c48a5", "tree": "b0a299338dd5e13bcb40397eeb1d0e3cd4830bff", "parents": [ "5295114625f785e5ae4b1862c782de72f95d0c72" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Thu Sep 17 18:34:36 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 17 18:42:48 2026" }, "message": "[dbsc] Refactor RegistrationFetcher error handling and origin label check\n\nConsolidate GetOriginLabel and WithinOriginLabelLimit into a single\nCheckRelyingOrigin helper that returns SessionErrorOr\u003cvoid\u003e, using\nbase::SplitStringOnce and absl::flat_hash_set.\n\nReplace SessionError::ErrorType return types (which previously misused\nSessionError::kSuccess for control flow) with SessionErrorOr\u003cvoid\u003e in\nOnProviderWellKnownRequestCompleteInternal and\nOnRelyingPartyWellKnownRequestCompleteInternal.\n\nAdopt RETURN_IF_ERROR and ASSIGN_OR_RETURN across registration and\nwell-known request completion handlers to simplify error propagation.\n\nBug: 518806368\nChange-Id: Ic7af16d3f88420e9aa349462c598f5b06a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8418205\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCommit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1699995}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 46c24e59900d99d61db7595106ba2c62c446f03b\n" }, { "commit": "5295114625f785e5ae4b1862c782de72f95d0c72", "tree": "764f1ae57a08d8524004c14a64e2da9a6098059e", "parents": [ "2e6169b7998a2ecad7ecb94751d09e3f82e65a94" ], "author": { "name": "Anton Bershanskyi", "email": "bershanskyi@gmail.com", "time": "Thu Sep 17 16:20:11 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 17 16:26:56 2026" }, "message": "[RWS] Remove Related Website Sets from Device Bound Sessions\n\nRemove Related Website Sets plumbing from Device Bound Sessions\nimplementation. DBSC never depended on or used the RWS metadata (since\nDBSC cookie cravings are same-site and the boolean check from\nNetworkDelegate doesn\u0027t depend on FirstPartySetMetadata), so passing a\ndefault-constructed empty metadata in cookie_craving.cc is safe and\ndecouples DBSC from RWS. After this commit, Session::CanSetBoundCookie()\ndefault-constructs an empty FPS metadata for a call to\nNetworkDelegate::CanSetCookie() instead of passing a reference to\nFirstPartySetMetadata around DBSC.\n\nBug: 551998367\nChange-Id: I2ad1d10c78480d743c0f299f9b37df53ce2ce7cc\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8399135\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nReviewed-by: Chris Fredrickson \u003ccfredric@chromium.org\u003e\nCommit-Queue: Anton Bershanskyi \u003cbershanskyi@gmail.com\u003e\nCr-Commit-Position: refs/heads/main@{#1699878}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f341b2cb570c18c6b586cc556979fa18f3c3a830\n" }, { "commit": "2e6169b7998a2ecad7ecb94751d09e3f82e65a94", "tree": "265ab8ef68538343cbda1c7bb28042d66205e7be", "parents": [ "5cca617eefff9e7130312bb15c11c88395e707e1" ], "author": { "name": "PKI Metadata Updates Bot", "email": "mdb.chrome-pki-metadata-release-jobs@google.com", "time": "Thu Sep 17 14:47:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 17 14:53:58 2026" }, "message": "[KP] Automatic update from google3\n\nAutomatic update for 2026-09-17 UTC\n\nMerge-Approval-Bypass: pki-metadata-updater\nChange-Id: I15df9062a6462b31204bb43f41cbeca5c7482557\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8421562\nBot-Commit: PKI Metadata Updates Bot \u003cmdb.chrome-pki-metadata-release-jobs@google.com\u003e\nCommit-Queue: PKI Metadata Updates Bot \u003cmdb.chrome-pki-metadata-release-jobs@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1699799}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6d49720a72030d662bcf3510de94d7a22715c038\n" }, { "commit": "5cca617eefff9e7130312bb15c11c88395e707e1", "tree": "d21c78b5732e75e53cb51a1e46800bc40c22611c", "parents": [ "fd2d1223d6fd130ca1f56db8ff7955d79f15acc8" ], "author": { "name": "Andrew Paseltiner", "email": "apaseltiner@chromium.org", "time": "Thu Sep 17 13:09:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 17 13:15:39 2026" }, "message": "Avoid reinterpret_cast in structured headers Rust bridge\n\nPreviously, sfv::Parameters was declared as an opaque tag class in\nfunctions.h because quiche::structured_headers::Parameters is a type\nalias (to std::vector) and could not be forward-declared. This\nnecessitated reinterpret_cast between sfv::Parameters and\nquiche::structured_headers::Parameters in\nnet/http/structured_headers.cc.\n\nThis change avoids reinterpret_cast by eliminating the Parameters type\nfrom the FFI boundary entirely. Instead, parameter insertion is exposed\ndirectly on Item (ParameterizedItem) and InnerList, both of which are\nconcrete structs that are already forward-declared in functions.h. In\nlib.rs, sfv::visitor::ParameterVisitor is implemented directly on\nPin\u003c\u0026mut Item\u003e and Pin\u003c\u0026mut InnerList\u003e.\n\nThis also reduces the number of FFI calls, as Rust no longer needs to\ncall C++ (get_item_params or get_inner_list_params) to retrieve the\nparameters reference before visiting parameters.\n\nAdditionally, decode_item is simplified to take Pin\u003c\u0026mut Item\u003e directly,\nallowing TopLevelItemVisitor in lib.rs to be removed.\n\nThis contains no intentional observable behavioral changes.\n\nTAG\u003dagy\nCONV\u003d97924856-eb73-467f-82c8-8a77c1ed97e1\n\nChange-Id: Iac9920a835e73281cebae4a5af8bcbc5173b88f3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8415330\nAuto-Submit: Andrew Paseltiner \u003capaseltiner@chromium.org\u003e\nReviewed-by: Zgroza (Luke) Klimek \u003czgroza@chromium.org\u003e\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCommit-Queue: Zgroza (Luke) Klimek \u003czgroza@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1699725}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3e2bfe4fd1595a043b50858d30ca85c5085c5426\n" }, { "commit": "fd2d1223d6fd130ca1f56db8ff7955d79f15acc8", "tree": "2f02ddf9ae8fb6a648d4b203b4e7f63297d438cb", "parents": [ "44229b0eaf9e3a9dbf265e2f1fff4caf6f49ed55" ], "author": { "name": "Nidhi Jaju", "email": "nidhijaju@chromium.org", "time": "Thu Sep 17 10:14:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 17 10:18:47 2026" }, "message": "[net] Add HttpServerProperties::SetTryQuicByDefault fallback\n\nAdds `HttpServerProperties::SetTryQuicByDefault(bool)` which allows\ncallers to configure HttpServerProperties to attempt QUIC by default\nfor HTTPS origins when no specific alternative service or known QUIC\nhint is found, unless the candidate service has been marked broken.\n\nAlso adds tests verifying `SetTryQuicByDefault` and dynamic wildcard\nsuffix hints in `HttpServerPropertiesTest`.\n\nBug: 445339041, 442161273\nChange-Id: Ifc3c9f279647cbfdd312d025502a01ea60458d08\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8366008\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCommit-Queue: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1699660}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a6f19a98706de0af51ddda1760f2c726c3b9a059\n" }, { "commit": "44229b0eaf9e3a9dbf265e2f1fff4caf6f49ed55", "tree": "072cf29992152ec2ff83ca02e3ecb7dce1462410", "parents": [ "17b26ac8306519956ed3fce8a72f4304bde2262e" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Thu Sep 17 08:41:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 17 08:49:14 2026" }, "message": "Remove redundant UNSAFE_TODO wrappers\n\nRemoves UNSAFE_TODO() macro invocations that are no longer needed\nbecause the underlying code is now safe under -Wunsafe-buffer-usage.\n\nThis change was automatically generated by\ntools/clang/unsafe_todo_remover/unsafe_todo_remover.py.\n\nDoc: https://docs.google.com/document/d/1h8HYBuIef3AHwXiDLAQphE74clvVmVG2hj1Ty7BvNzs/edit?tab\u003dt.lv3b7nxb2fz4\nFixed: 475236716\nChange-Id: I7c91139db5e172f8d3ee522a26143e2b70a659b6\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8397612\nCommit-Queue: Colin Blundell \u003cblundell@chromium.org\u003e\nOwners-Override: Colin Blundell \u003cblundell@chromium.org\u003e\nReviewed-by: Colin Blundell \u003cblundell@chromium.org\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1699613}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9b88afcb8d50beebc9dbffc9d16aac054eaf759d\n" }, { "commit": "17b26ac8306519956ed3fce8a72f4304bde2262e", "tree": "87f334f2e4f3435b2ed57f81f375038dbba7d3a0", "parents": [ "1b4644ea0780a61d3afa13079a592d2a585dca55" ], "author": { "name": "Adam Rice", "email": "ricea@chromium.org", "time": "Thu Sep 17 07:42:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 17 07:54:56 2026" }, "message": "Call URLRequestHttpJob::NotifyConnectedCallback via WeakPtr\n\nnet::URLRequestHttpJob::NotifyConnectedCallback was called via an\nunretained `this` pointer. However, in some cases it could be called\nafter the job had been destroyed. Call it via a WeakPtr instead.\n\nBUG\u003d560939312\n\nChange-Id: I1c289ec5797d97892ff51bde4866755a709cb458\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8412191\nCommit-Queue: Adam Rice \u003cricea@chromium.org\u003e\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1699580}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 1985cb7b30ce45730451a3f23fb23cb5e4b6ceb1\n" }, { "commit": "1b4644ea0780a61d3afa13079a592d2a585dca55", "tree": "bfdc66daf1a0e9e5ecd5189dd7c255b68f41bd10", "parents": [ "1f8e6373bd4a902dcd95e794c0896876d6083636" ], "author": { "name": "Dylan Cutler", "email": "dylancutler@google.com", "time": "Thu Sep 17 00:22:51 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 17 00:33:30 2026" }, "message": "Add new use counter for partial-x-site redirects with no initiator\n\nBug: 415848455\nChange-Id: I860a0278e005f06acbcffd4534999086ae911ee0\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8416206\nReviewed-by: Lily Chen \u003cchlily@chromium.org\u003e\nCommit-Queue: Dylan Cutler \u003cdylancutler@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1699365}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4692287af7960255f980eec3389ff57fc7c11711\n" }, { "commit": "1f8e6373bd4a902dcd95e794c0896876d6083636", "tree": "6fe71567d1afbefb000f5d804abb4a2e7bc121cb", "parents": [ "68804bb7a95d555ac5190549941cd454aa4ee686" ], "author": { "name": "Andrew Paseltiner", "email": "apaseltiner@chromium.org", "time": "Wed Sep 16 15:05:29 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 16 15:20:23 2026" }, "message": "Migrate net::structured_headers::Item users to tag constructors\n\nThe tag-based constructors (Item::string, Item::token,\nItem::byte_sequence) are less error-prone and slightly more efficient\nthan the deprecated constructors accepting a `const char*` or\nstd::string and a defaulted Item::Type.\n\nThis contains no intentional observable behavioral changes.\n\nTAG\u003dagy\nCONV\u003da8bbcb2f-f59f-4586-8443-8aa7c898a272\n\nBug: 559141816\nChange-Id: I824ad4ba01bfa05ddebbb5d46104ed73a37ae9f9\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8415008\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Andrew Paseltiner \u003capaseltiner@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1698941}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 1817168aea09a93123bbeae373654468b6dcbad8\n" }, { "commit": "68804bb7a95d555ac5190549941cd454aa4ee686", "tree": "65910dcdb06593dbd25c8a7dca4434984253583f", "parents": [ "efa4f3170b68a79caaf753ed7099d580a3423996" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Wed Sep 16 11:45:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 16 11:59:26 2026" }, "message": "Refactor the handling of probing cancellations\n\nCurrently, OnProbeFailed takes care of both logging and possibly\ncanceling an in-flight path validation. This made it hard to reason\nabout the sequence of actions after a probe failure. For example, this\ncomplexity was already making us log twice:\n1) QUICHE reports a probe failure (NotifySessionProbeFailed)\n2) OnProbeFailed logs (LogProbeResultToHistogram)\n3) OnProbeFailed cancels path validation (CancelPathValidation)\n4) QUICHE reports path validation failure (OnPathValidationFailure)\n5) LogPathValidationFailure calls OnProbeFailed again, logging twice\n\nWe resolve this by:\n- Decoupling logging from canceling path validation\n (MaybeCancelProbing vs LogProbeFailure)\n- Logging only within LogPathValidationFailure\n\nAlongside this, for superseded migration attempts, we now correctly log\nthe new attempt type (the cause for the original migration attempt being\nsuperseded).\n\nBug: 557126867\nChange-Id: I88345eb45eb1be0b7dc021bb087d4802fae7f4ad\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8385821\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1698838}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9eb04c911c947d503617e408d6b6921433fdf20d\n" }, { "commit": "efa4f3170b68a79caaf753ed7099d580a3423996", "tree": "015b92c109fd891a45b0898d0d5d9b6c821ffb5e", "parents": [ "7ec7371960fe658bf66eb72fca77abbfc50f7fa1" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Wed Sep 16 07:11:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 16 07:15:16 2026" }, "message": "network: Add RegisterHttpCacheClient to NetworkContext\n\nTo allow renderer processes (and tests) to read cached subresources\ndirectly from the Renderer-Accessible HTTP Cache (SharedHttpCache), the\nnetwork service needs a mechanism to register a\n`SharedHttpCacheClientFactory` remote with the underlying disk cache\nbackend for a given `NetworkIsolationKey`.\n\nThis CL implements `NetworkContext::RegisterHttpCacheClient` and its\nsupporting Mojo adapter:\n- Adds `RegisterHttpCacheClient` to the `network::mojom::NetworkContext`\n interface.\n- Introduces `MojoSharedHttpCacheClientRemote`, an implementation of\n `disk_cache::Backend::SharedHttpCacheClientRemote` that wraps a\n `mojo::Remote\u003cmojom::SharedHttpCacheClientFactory\u003e` to forward\n `CreateClient` (providing read-only `PendingBackend` handles) and\n `AppendResourceKeys` calls across Mojo.\n- Implements `NetworkContext::RegisterHttpCacheClient` to pass\n `MojoSharedHttpCacheClientRemote` to\n `disk_cache::Backend::RegisterSharedCacheClient`.\n- Updates `RendererAccessibleHttpCacheBrowserTest` to initialize a\n `SharedHttpCacheClient` via `RegisterHttpCacheClient` and directly\n verify which responses are stored or excluded in the SharedHttpCache,\n resolving `TODO(crbug.com/473666511)` items across test cases.\n\nBug: 473666511\nChange-Id: I998ebeb7fe846c5b27c587ba68ce03f720e9e697\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8409585\nReviewed-by: Takashi Toyoshima \u003ctoyoshim@chromium.org\u003e\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1698695}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3c5ebbd478b84ddac0428c4cab74b85ff87f4eef\n" }, { "commit": "7ec7371960fe658bf66eb72fca77abbfc50f7fa1", "tree": "a53ce15ba5454a377fd844ac1a9af90f2f2fe3a6", "parents": [ "2d74e332fff809c488442b6a28ed9fad605117dd" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Wed Sep 16 05:23:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 16 05:34:19 2026" }, "message": "Remove superfluous include from net/url_request/url_request.h\n\nRemove unused session_service.h and do IWYU to fix the build.\n\nBug: 40318405\nChange-Id: I2f7843d12addb68ce09a10ae26a7ac3f96c844f3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8400959\nCommit-Queue: Adam Rice \u003cricea@chromium.org\u003e\nReviewed-by: Rakina Zata Amni \u003crakina@chromium.org\u003e\nAuto-Submit: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1698645}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3c02ae64a5eea6fa9867a98a615d2cf444cb7a09\n" }, { "commit": "2d74e332fff809c488442b6a28ed9fad605117dd", "tree": "4ee0963b0b13c26f2f3f270ec279349b5cf89b17", "parents": [ "bc651af11cbf4e36ca3013d0e02848e2e351cd92" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Tue Sep 15 23:14:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 23:21:43 2026" }, "message": "Split static pin data into separate class/global\n\nSplits the pinning data out of TransportSecurityStateSource into a new\nTransportSecurityStatePinsSource.\n\nBug: 497882860\nChange-Id: I63beb4ff4d5c85372e76dc661134b48ba324199b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8415092\nReviewed-by: Carlos IL \u003ccarlosil@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1698486}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 98c94f7896663b9165e0d46f4853f63ff150c550\n" }, { "commit": "bc651af11cbf4e36ca3013d0e02848e2e351cd92", "tree": "80b73cb7c85f0a261e9dc31ad86f9e25ce04ed9c", "parents": [ "a6c40a6220ca86b6ddc1e99df2119c5609b5c94b" ], "author": { "name": "Andrew Paseltiner", "email": "apaseltiner@chromium.org", "time": "Tue Sep 15 16:30:36 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 16:44:42 2026" }, "message": "Replace uses of deprecated GetWithParamsIf* accessors with GetIf*\n\nGetWithParamsIfItem and GetWithParamsIfInnerList returned an optional\npair of the item/inner list and its parameters. Now that the internal\nrepresentation has been changed to std::variant, the simpler GetIfItem\nand GetIfInnerList APIs are used instead, returning a possibly null\npointer to the ParameterizedItem or InnerList.\n\nThis contains no intentional observable behavioral differences.\n\nTAG\u003dagy\nCONV\u003d5ace3885-9dc3-42fe-9ad1-981c41c88e8a\n\nBug: 517204961\nChange-Id: Ie2b9482c8c4c640cd3a48a91083eb96935d3e4b8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8395612\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCommit-Queue: Andrew Paseltiner \u003capaseltiner@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1698164}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f1f0601b8bb57aa2ebf3cf5e69a81498852c7719\n" }, { "commit": "a6c40a6220ca86b6ddc1e99df2119c5609b5c94b", "tree": "dff2f45a5a7fa01cbb19da401f7d205e1f1a9eaf", "parents": [ "2146d9e18b0ffbb56d604e5fff38da3f4aeac0b9" ], "author": { "name": "Andrew Paseltiner", "email": "apaseltiner@chromium.org", "time": "Tue Sep 15 16:30:10 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 16:43:23 2026" }, "message": "Replace deprecated structured headers APIs in Rust bridge\n\nThis is a followup to crrev.com/c/8354405 (taking advantage of\nhttps://quiche.googlesource.com/quiche.git/+/470da96b01bd69a175feb3f786c3b34bb7eaa7ad)\nbut contains no intentional observable behavioral changes.\n\nThe Rust-C++ FFI is changed so that inserting into a list or dictionary\nreturns a reference to the item or inner list back to Rust, rather than\nrequiring repeated checks on the C++ side, which also allows Rust to\navoid runtime tracking of whether a ParameterizedMember is an item or\ninner list: This is handled naturally at the type level.\n\nAs a minor optimization, top-level items are now parsed directly without\nhaving to be wrapped in a list and then extracted.\n\nTAG\u003dagy\nCONV\u003d223dd629-a0af-41a4-ba8e-f19f8a374d50\n\nBug: 517204961\nChange-Id: I07a11ba722a23dda0ab48173ecca2ac37ff06501\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8403709\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCommit-Queue: Andrew Paseltiner \u003capaseltiner@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1698163}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: cb9343b4b8af6202bb3b37d7c5cb981e3a1b47f7\n" }, { "commit": "2146d9e18b0ffbb56d604e5fff38da3f4aeac0b9", "tree": "f37fc87548247f0f4cee14365bc6b432dac50a54", "parents": [ "591625d562129ab1e7c4d8af56cec569ff8c6784" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Tue Sep 15 15:02:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 15:10:39 2026" }, "message": "Add the new QUIC connection migration metrics\n\nDifferently from the pre-existing metrics, the new ones partition\nmigration attempts into three main buckets:\n* Ineligible - Any attempt that did not start/got canceled due to\n a client-side policy\n* Superseded - Any attempt that got canceled due to a new attempt\n being started.\n* Eligible - Any attempt that is not considered ineligible or\n superseded. These should only include attempts that attempted\n reaching out to the server and failed due to actual protocol/routing\n problems\n\nCorrect reporting for probing attempts that are superseded by another\nprobing attempt still requires a few changes. These will be tackled in a\nseparate CL since this one is already big. Similarly, MigrationCause\nwill be removed in a follow-up CL to reduce the size of this one.\n\nThe old metrics will be kept around for a couple of major releases to\ncapture the increased fidelity of the new ones. To properly A/B the new\nvs old metrics, current_migration_cause_ is not being updated with the\ncorrect value.\n\nBug: 557126867\nChange-Id: I07128e14a0eb376add9d13a23d2dd95285423c65\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8352325\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nAuto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1698082}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3c577ff583f56b0286674db6b7babdd43825f0f1\n" }, { "commit": "591625d562129ab1e7c4d8af56cec569ff8c6784", "tree": "cf897e372ef6d5a713dfd0cad5770af15ca6914a", "parents": [ "2d1299599b99cadfcb5396990c507546834b3bbc" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Tue Sep 15 13:12:30 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 13:19:29 2026" }, "message": "Fix handling of pending migrations waiting for an alternative network\n\nCurrently, when connection()-\u003eIsPathDegrading() \u003d\u003d true,\nOnNetworkConnectedalways overrides current_migration_cause_ with\nNEW_NETWORK_CONNECTED_POST_PATH_DEGRADING.\n\nThis feels wrong, because a migration on path degrading is only\ntriggered when !wait_for_new_network_cause_.has_value(). Whenever\nwait_for_new_network_cause_ is not empty, we should instead rely on the\nmigration cause saved there to make a decision.\n\nThe override of current_migration_cause_ was dropped altogether because\nthe first thing that MaybeMigrateToAlternateNetworkOnPathDegrading does\nis override current_migration_cause_ again. Additionally, we don\u0027t\nupdate current_migration_cause_ with the value of migration_cause to\navoid modifying the old metrics, which we want to keep as they were to\nmeasure the increased fidelity of the new metrics.\n\nBug: 557126867\nChange-Id: Id73a1f65e29acc5c7f33875db201dfe0882431bb\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8369722\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1698017}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c196c8c717899645a4a1399383546b4920796e1d\n" }, { "commit": "2d1299599b99cadfcb5396990c507546834b3bbc", "tree": "43c403b5bd3741b4d678465937ba9c0fd8d22d34", "parents": [ "3a0388346c158b0751e9da6cf6dba6a18c2bb504" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Tue Sep 15 12:45:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 12:58:10 2026" }, "message": "Support target_network in net::BidirectionalStream\n\nAdd a new target_network parameter to BidirectionalStreamRequestInfo.\nThis is simply passed down to HttpRequestInfo::target_network when a\nBidirectionalStream is started. From here, the pre-existing work done to\nsupport target_network for UrlRequest takes over and no further changes\nare necessary. This is confirmed via a new multi-network test suite\nspecific to BidirectionalStream.\n\nBug: 549645425\nChange-Id: I3f8fd29fe1ecaaf9d5ddef7f09a15f802a741ead\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8259898\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1698010}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ac803d73afbab57114eead37705724fec805de24\n" }, { "commit": "3a0388346c158b0751e9da6cf6dba6a18c2bb504", "tree": "9cf3067444a6cd03caf621fd128bbffdaeca3ede", "parents": [ "909fda2ac88eb69f42ec58766e2d44723ffaaf5d" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Tue Sep 15 09:32:56 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 09:38:05 2026" }, "message": "network: Do not store redirected responses in SharedHttpCache\n\nRedirected responses must not be cached in the Renderer-Accessible HTTP\nCache (SharedHttpCache). Redirects involve multi-hop CORS checks,\nTiming-Allow-Origin propagation across hops, tainted origin flags, and\nURL changes (where request.url becomes the redirect target URL rather\nthan the initial requested URL). Serving a redirected response directly\nfrom the shared cache would lose this redirect chain context.\n\nThis CL updates MaybeCreateHttpResponseInfoForRendererAccessibleCache in\nCorsURLLoader to return nullptr if redirect_count \u003e 0.\n\nUnit and browser tests are added to verify that redirected responses are\nnot stored in the SharedHttpCache.\n\nTAG\u003dagy\nCONV\u003d22faddad-0f57-4460-bf57-0588ff8a6eb3\n\nBug: 473666511\nChange-Id: I146cc4004c7165af9c46ba97abcdb2beb3a347f2\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8398153\nReviewed-by: Shunya Shishido \u003csisidovski@chromium.org\u003e\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697943}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d204c47400abffe94f1b17ef94a09dcbc8530a16\n" }, { "commit": "909fda2ac88eb69f42ec58766e2d44723ffaaf5d", "tree": "67f3cc8f07c8ee2836532af6a39a0c6203b0f9ca", "parents": [ "55eacb33393feea3dd3766a8bf28ab4b77e5169a" ], "author": { "name": "Chris Fredrickson", "email": "cfredric@chromium.org", "time": "Tue Sep 15 07:11:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 07:15:38 2026" }, "message": "[SAA] Remove unused histogram\n\nOBSOLETE_HISTOGRAM[API.StorageAccess.AllowedRequests4.Subsampled]\u003dNo longer used.\n\nFixed: 561577186\nChange-Id: If34878f2783360b173b28b66b1428ccca47ff21d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8406766\nReviewed-by: Mingyu Lei \u003cleimy@chromium.org\u003e\nReviewed-by: Dylan Cutler \u003cdylancutler@google.com\u003e\nAuto-Submit: Chris Fredrickson \u003ccfredric@chromium.org\u003e\nCommit-Queue: Mingyu Lei \u003cleimy@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697863}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bc94f9356fa2e127a9517bd85934d5fdd770113b\n" }, { "commit": "55eacb33393feea3dd3766a8bf28ab4b77e5169a", "tree": "3ba15351387aa4e0177ec978cb21eac6f21af085", "parents": [ "7ea50b1d62e72369c348b92262f53648c4277cae" ], "author": { "name": "Benoît Lizé", "email": "lizeb@google.com", "time": "Tue Sep 15 06:50:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 06:59:46 2026" }, "message": "net: Add GUARDED_BY annotations to NetworkChangeNotifierPassive and NetLog\n\nAdd GUARDED_BY(lock_) to connection_type_ and max_bandwidth_mbps_\nin NetworkChangeNotifierPassive.\n\nAdd GUARDED_BY(lock_) to observers_ and capture_mode_observers_ in\nNetLog, and annotate observer lookup helper methods with\nEXCLUSIVE_LOCKS_REQUIRED(lock_).\n\nTAG\u003dagy\nCONV\u003d0f79d58f-a4bb-4d31-b2a0-5432cf151a7f\n\nBug: 561352941\nChange-Id: Ic5c4912be67e86294c1050d257df9d619a883ac1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8394022\nCommit-Queue: Benoit Lize \u003clizeb@chromium.org\u003e\nReviewed-by: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697858}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 27f03d2f87cbe1d50718677d2dd699baadff91e9\n" }, { "commit": "7ea50b1d62e72369c348b92262f53648c4277cae", "tree": "828ab7ea30b810efcf687b53f947fa168b7e8dc3", "parents": [ "f7227a644f42150c9ab58f0c673e6a999bc6d169" ], "author": { "name": "Yoichi Osato", "email": "yoichio@chromium.org", "time": "Tue Sep 15 05:52:57 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 06:02:05 2026" }, "message": "Roll src/net/third_party/quiche/src/ 0b2bc13f4..5116219b0 (4 commits)\n\nhttps://quiche.googlesource.com/quiche.git/+log/0b2bc13f4fda..5116219b0c54\n\n$ git log 0b2bc13f4..5116219b0 --date\u003dshort --no-merges --format\u003d\u0027%ad %ae %s\u0027\n2026-09-14 jprat No public description\n2026-09-14 birenroy Enabling rolled out flags.\n2026-09-14 wub In QuicConnection, replace all read access to `QuicConnection.direct_peer_address_` by `QuicConnection.peer_address()`. This is a preparation to remove `QuicConnection.direct_peer_address_` following the deprecation of UDP proxy.\n2026-09-11 ianswett Add GetInitialCongestionWindowInPackets to SendAlgorithmInterface and its implementations.\n\nCreated with:\n roll-dep src/net/third_party/quiche/src\n\nChange-Id: Iac6f9ee581a89fab7ca8ea41fdcc5239eb88cb47\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8395989\nCommit-Queue: Yoichi Osato \u003cyoichio@chromium.org\u003e\nAuto-Submit: Yoichi Osato \u003cyoichio@chromium.org\u003e\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697827}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 1af73be4167204ceaa38ec27be9b2db57f34316e\n" }, { "commit": "f7227a644f42150c9ab58f0c673e6a999bc6d169", "tree": "4da4d17c5bbc603993fa7fb123ff9d290a960d76", "parents": [ "c67effc530457f517392bed0bdd3435c58652062" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Tue Sep 15 03:10:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 03:18:03 2026" }, "message": "[dns] Add UMA and NetLog for address hints\n\nUMA:\n- Net.DNS.HttpsRecordAddressHints.Presence: presence of address hints\n (ipv4hint, ipv6hint) in HTTPS DNS records.\n- Net.DNS.HttpsRecordAddressHints.AddressQueryOutstanding: whether an\n A/AAAA query was still outstanding when hints arrived.\n\nNetLog updates:\n- HOST_RESOLVER_SERVICE_ENDPOINTS_UPDATED events now tag endpoints\n whose per-family addresses originated from hints.\n- Emits an empty endpoint list event when published hint endpoints are\n flushed by a NODATA response of the same address family.\n\nNo change to endpoint publication behavior.\n\nBug: 535290301\nChange-Id: Ice13b8a455467f99b8bc052ce483236d8a4e0efd\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8267201\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCommit-Queue: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697769}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 19d3ec184d14638f1bc24ca2aca3a23a6ddd9fba\n" }, { "commit": "c67effc530457f517392bed0bdd3435c58652062", "tree": "cb1d33facc3c94c87679125db720b2a240dc8d2b", "parents": [ "509a7476e0e3390189e5fea00801a477984a8806" ], "author": { "name": "Andrew Paseltiner", "email": "apaseltiner@chromium.org", "time": "Mon Sep 14 21:20:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 14 21:26:16 2026" }, "message": "Replace deprecated structured headers APIs in Mojo bindings\n\nThis is a followup to crrev.com/c/8354065 that removes the copies\nintroduced in that change (taking advantage of\nhttps://quiche.googlesource.com/quiche.git/+/470da96b01bd69a175feb3f786c3b34bb7eaa7ad)\nbut contains no intentional observable behavioral changes.\n\nBug: 517204961\nChange-Id: If378f465ca8c1f2b27169f5c4a9e7f82cd4b280d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8398187\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCommit-Queue: Andrew Paseltiner \u003capaseltiner@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697559}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 991f2d3365afcdf2cb2b753c08dec66093dfadb1\n" }, { "commit": "509a7476e0e3390189e5fea00801a477984a8806", "tree": "9ff3c86694226e75aef4fb59f69ee75c7b205666", "parents": [ "ac0439eefb7d58da62ddded74252fb3760d08335" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Mon Sep 14 20:00:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 14 20:05:29 2026" }, "message": "Reland \"[dbsc] Implement watchdog timer for DBSC fetches\"\n\nThis is a reland of commit a9f4607a52f96b1b4b842920153f70cadf95de29\n\nThe original change made the shared `URLFetcherTest` fixture use\n`TaskEnvironment::TimeSource::MOCK_TIME`, but several tests in that\nfixture fetch from a real `EmbeddedTestServer` over localhost sockets.\nUnder mock time the virtual clock is advanced as soon as the main thread\nand the thread pool run out of ready tasks, which is exactly what\nhappens while the main thread waits for socket I/O served by the test\nserver\u0027s background thread. Time then jumped ahead to net\u0027s next pending\ntimeout, so those requests completed with ERR_TIMED_OUT (-7) instead of\nOK, flakily and most often on loaded bots.\n\nThis reland keeps `URLFetcherTest` on the default `SYSTEM_TIME` and\nmoves the watchdog tests into a new `URLFetcherWatchdogTest` fixture\nthat combines mock time with in-memory `URLRequestJob`s only:\n`URLRequestFailedJob` with `ERR_IO_PENDING` for stalled headers and\nbodies, `URLRequestMockDataJob` for successful fetches, and a small\n`URLRequestRedirectJob` based interceptor for the redirect cases. No\nfixture combines mock time with real socket I/O anymore, and both\nfixtures carry a comment explaining why.\n\nOriginal change\u0027s description:\n\u003e [dbsc] Implement watchdog timer for DBSC fetches\n\u003e\n\u003e Previously, DBSC network fetches (registration, refresh, and .well-known\n\u003e endpoints) in URLFetcher lacked a timeout mechanism. If a server\n\u003e accepted a connection but hung without returning a response, the fetcher\n\u003e and any deferred network requests waiting on the session refresh would\n\u003e block indefinitely.\n\u003e\n\u003e This change introduces a watchdog timer in URLFetcher to cancel stalled\n\u003e requests with net::ERR_TIMED_OUT. RegistrationFetcherImpl is updated to\n\u003e configure this timer with a 20-second timeout for interactive\n\u003e (user-blocking) fetches and a 30-second timeout for background fetches,\n\u003e depending on the task priority.\n\u003e\n\u003e Bug: 547587776\n\u003e Change-Id: I43bb9a5ff282dcfdd835ae90b0f4a0fc6a6a6964\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8257241\n\u003e Reviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\n\u003e Commit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1694646}\n\nBug: 547587776, 559234533\nChange-Id: I3febee435fff7cfdcae2ced1dadac6d10356e251\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8405705\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCommit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697459}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0683cb89f2d378c4343ddf3358ce663a2453e0f7\n" }, { "commit": "ac0439eefb7d58da62ddded74252fb3760d08335", "tree": "a07ec829e9c7beb8e19f026e43e1d74427b8403c", "parents": [ "1eb708126ad4547040542988fa1bdd01f615b7f6" ], "author": { "name": "Alexei Svitkine", "email": "asvitkine@chromium.org", "time": "Mon Sep 14 18:58:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 14 19:09:24 2026" }, "message": "Roll src/net/third_party/quiche/src/ efdf29da0..0b2bc13f4 (13 commits)\n\nhttps://quiche.googlesource.com/quiche.git/+log/efdf29da0168..0b2bc13f4fda\n\n$ git log efdf29da0..0b2bc13f4 --date\u003dshort --no-merges --format\u003d\u0027%ad %ae %s\u0027\n2026-09-11 quiche-dev Add 8AFF QUIC connection option to support 8 anti-amplification factor.\n2026-09-11 apaseltiner Use token for Proxy-Status error parameter in ConnectUdpTunnel.\n2026-09-10 apaseltiner Migrate uses of ParameterizedMember::GetWithParamsIf* to GetIfItem and GetIfInnerList\n2026-09-10 apaseltiner Migrate users to tag-based structured_headers::Item constructors\n2026-09-09 haoyuewang Use QuicClientSocketManager to pick source port for Hyperloop client.\n2026-09-09 apaseltiner Add tag-based Item constructors in Structured Headers for string-like values\n2026-09-09 quiche-dev quic: Rename kMaxValue histogram sentinels in QUIC enums\n2026-09-09 apaseltiner Replace ParameterizedMember implementation with std::variant\n2026-09-08 wub Remove `QuicConnection::GetEffectivePeerAddressFromCurrentPacket`, it was only used by the deprecated UDP proxy.\n2026-09-04 danzh Unhide oghttp2 RFC 9113 Section 8.1 trailer validation logic from open source.\n2026-09-04 wub Add metrics to debug b/537474108.\n2026-09-04 rch Switch the hard-coded limit on number of connections in the QuicBufferedPacketStore to a protocol flag.\n2026-09-03 vasilvv Remove MAX_REQUEST_ID and REQUESTS_BLOCKED.\n\nCreated with:\n roll-dep src/net/third_party/quiche/src src/third_party/quic_trace/src\n\nR\u003d\u003dapaseltiner@chromium.org\n\nChange-Id: I6f8747821fd575c8014c2fe1a5be63c61541d4d4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8394987\nReviewed-by: Ryan Hamilton \u003crch@chromium.org\u003e\nAuto-Submit: Alexei Svitkine \u003casvitkine@chromium.org\u003e\nCommit-Queue: Alexei Svitkine \u003casvitkine@chromium.org\u003e\nReviewed-by: Andrew Paseltiner \u003capaseltiner@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697398}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e64346179f9d61ec43a1a740f58f88cfa9f34be2\n" }, { "commit": "1eb708126ad4547040542988fa1bdd01f615b7f6", "tree": "15db0c2f04936bbfbc4fe4dcdb41ed9304736e69", "parents": [ "79bc26a869ecbf1d13eca9593fc279434b178027" ], "author": { "name": "Zonghan Xu", "email": "xzonghan@google.com", "time": "Mon Sep 14 18:57:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 14 19:08:36 2026" }, "message": "[SG Android] Add NetLog instrumentation for Enterprise Proxy and PvD\n\nAdd NetLog source types and event types to instrument the Enterprise\nProxy, Network Authentication, and Provisioning Domain (PvD) core\nservices:\n\n- Provisioning domain discovery, fetch lifecycle, and state changes.\n- Proxy authentication challenge interception and resolution.\n- Enterprise network OAuth token acquisition flows.\n- Disguised error page parameter tracking for interstitials.\n- Plumbing of NetLog through browser keyed service factories.\n\nIncludes unit test coverage verifying NetLog event emission.\n\nBug: 558663301\nChange-Id: I65466ad7c56ae2ec03a6f88f7df0ef365dd91a15\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8373181\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCommit-Queue: Zonghan Xu \u003cxzonghan@chromium.org\u003e\nReviewed-by: Sebastien Lalancette \u003cseblalancette@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697397}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0f9e6307310cb7d08495e88e6024f101bba61c37\n" }, { "commit": "79bc26a869ecbf1d13eca9593fc279434b178027", "tree": "1b2ee5e9ce3d3b8bff544fefa32fc8cc47befef5", "parents": [ "c5ebe270f6746aa00b1c3df4a286af1f0b28b10a" ], "author": { "name": "Alvin Ji", "email": "alvinji@chromium.org", "time": "Mon Sep 14 17:42:01 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 14 17:51:34 2026" }, "message": "Clean up stale feature flag kAvoidH2Reprioritization\n\nBug: 356624134\nChange-Id: Ic1f7f9df484689b1ffc91020adfc232be3cb9402\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8359169\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCommit-Queue: Alvin Ji \u003calvinji@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697336}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9c598f635ce43646d7f3c2eb4e9d39d71badbe5e\n" }, { "commit": "c5ebe270f6746aa00b1c3df4a286af1f0b28b10a", "tree": "d851d7ca8134117bb4db074bc250f4fcaf9ab5eb", "parents": [ "ec9d96da63e33eb8a3cf0d60bb7e52c7699cd5a8" ], "author": { "name": "Alex Ilin", "email": "alexilin@chromium.org", "time": "Mon Sep 14 14:04:25 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 14 14:15:22 2026" }, "message": "[DBSC] Add Net.DeviceBoundSessions.InScope{Type}RequestWasDeferred\n\nThis CL mirrors the prototype deferral metrics\n(Signin.BoundSessionCredentials.Covered{Type}RequestWasDeferred) by\nadding:\n- Net.DeviceBoundSessions.InScopeRequestWasDeferred\n- Net.DeviceBoundSessions.InScopeNavigationRequestWasDeferred\n\nThese boolean histograms are logged alongside RequestDeferralDecision3\nin URLRequestHttpJob for requests in scope of an active DBSC session.\nBecause the denominator is strictly in-scope requests, the mean in UMA\ndirectly represents the deferral rate.\n\nAlso cleans up obsolete notes in the summaries for\nNet.DeviceBoundSessions.RequestDeferralCount and\nNet.DeviceBoundSessions.RequestDeferralDecision3, and clarifies the\nexact point during request processing when they are recorded.\n\nBug: 559872990\nTAG\u003dagy\nCONV\u003df778f3bf-08b7-45a2-ba5e-b5d53ae46406\n\nChange-Id: I24f15dd93a20d5272e68c7f6e8d2c9116a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8397787\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCommit-Queue: Alex Ilin \u003calexilin@chromium.org\u003e\nAuto-Submit: Alex Ilin \u003calexilin@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697234}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 555c8fbb241c278a7599a6571060b1cff589e98e\n" }, { "commit": "ec9d96da63e33eb8a3cf0d60bb7e52c7699cd5a8", "tree": "fd7536763c8769e209fc4b8699e88d2ac1c36933", "parents": [ "793128113717047acd4784b4f5023ef5af6f77a0" ], "author": { "name": "Chris Fredrickson", "email": "cfredric@chromium.org", "time": "Mon Sep 14 13:43:57 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 14 13:48:48 2026" }, "message": "Remove AllowSameSiteNoneCookiesInSandbox feature\n\nThis feature was enabled by default in M135.\n\nFixed: 372894175\nChange-Id: I8b69e5523ba6a06538181568b07ad8a98c87d87f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8400327\nCommit-Queue: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nReviewed-by: Alex Moshchuk \u003calexmos@chromium.org\u003e\nAuto-Submit: Chris Fredrickson \u003ccfredric@chromium.org\u003e\nReviewed-by: Jeremy Roman \u003cjbroman@chromium.org\u003e\nCommit-Queue: Chris Fredrickson \u003ccfredric@chromium.org\u003e\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697227}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: eef66095c4866c0e5e927f6e22453bc5a1531772\n" }, { "commit": "793128113717047acd4784b4f5023ef5af6f77a0", "tree": "fd146f324e85ea46beaae34176f07de1ded49f41", "parents": [ "425422e27fd6b15a345d16d7416bb20ebd2a0a1a" ], "author": { "name": "Takashi Toyoshima", "email": "toyoshim@chromium.org", "time": "Mon Sep 14 07:55:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 14 07:59:34 2026" }, "message": "net: End HTTP_CACHE_ADD_TO_ENTRY NetLog event in DoDoneHeadersAddToEntryComplete\n\nIn HttpCache::Transaction::DoAddToEntry(), the NetLog event\nNetLogEventType::HTTP_CACHE_ADD_TO_ENTRY is opened with BeginEvent().\nIn standard request flows, the event is closed in\nDoAddToEntryComplete() via net_log_.EndEventWithNetErrorCode().\n\nHowever, when a transaction revalidates an existing cache entry and\nreceives a response mismatch (done_headers_create_new_entry_ \u003d\u003d true),\nit transitions to STATE_DONE_HEADERS_ADD_TO_ENTRY_COMPLETE and invokes\nDoDoneHeadersAddToEntryComplete(). In DoDoneHeadersAddToEntryComplete(),\nnet_log_.EndEventWithNetErrorCode() was never called, leaving the\nHTTP_CACHE_ADD_TO_ENTRY NetLog phase event unended.\n\nThis CL adds net_log_.EndEventWithNetErrorCode() to\nDoDoneHeadersAddToEntryComplete() to ensure the NetLog phase event is\nproperly closed, and adds a unit test verifying event Begin/End symmetry.\n\nTAG\u003dagy\nCONV\u003dc4d4b22f-af39-4826-908a-dce42deb8198\n\nBug: None\nChange-Id: Ie768e3c4d7b89bbf2f88508c815e11b44300f741\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8395340\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCommit-Queue: Takashi Toyoshima \u003ctoyoshim@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697085}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d9fa5a15858b7189aa1a70cebe811169154ebcf0\n" }, { "commit": "425422e27fd6b15a345d16d7416bb20ebd2a0a1a", "tree": "62950c562ea4a921785923a4ad878895c2370420", "parents": [ "c84389684115e66e28a27422ee46d6f073f4d432" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Mon Sep 14 05:55:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 14 06:05:04 2026" }, "message": "net/disk_cache/sql: Notify initial hashes on empty cache and failure\n\nWhen an isolated database for SqlSharedCache is initialized,\nSqlSharedCache::OnHashesLoaded receives the loaded URL persistent hashes\nfrom SqlSharedCacheIsolatedDatabase::GetAllUrlHashes.\n\nPreviously, OnHashesLoaded guarded calling OnResourcesAdded with `if\n(!hashes-\u003eempty())`. On an empty cache (such as on a new profile),\nOnResourcesAdded was never called for registered SharedHttpCacheClient\nremotes. Consequently, the client-side in-memory hash set remained\nstd::nullopt, causing ShouldEarlyReturn to return false for every\nsubresource request and falling back to querying SQLite on each request.\n\nThis CL updates SqlSharedCache::OnHashesLoaded to unconditionally notify\nall registered clients when initial hashes are loaded:\n- If loading hashes succeeds, clients are notified with the loaded\n hashes (passing an empty vector if the cache is empty).\n- If loading hashes fails with an error, clients are also notified with\n an empty vector. This ensures the client-side in-memory set is\n initialized, allowing ShouldEarlyReturn to return true so that\n requests gracefully fall back to the network service without issuing\n redundant SQLite queries on every request when the database is in an\n error state.\n\nThis CL also adds unit tests in SqlSharedCacheTest covering both empty\ncache and hash-load error scenarios, and updates existing tests in\nSqlSharedCacheManagerTest and SqlBackendImplSharedCacheTest.\n\nBug: 473666511\nChange-Id: I1cc3d27877e35bf46888dd10789837df7b6b4b31\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8382859\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nReviewed-by: Shunya Shishido \u003csisidovski@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697055}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 35cfd73d4f3df7a9d779a5291318b00c2d9fc7cf\n" }, { "commit": "c84389684115e66e28a27422ee46d6f073f4d432", "tree": "e996ba4425ddc7ac107c91210e2bbbba333fe4ea", "parents": [ "9b494fe42ceb904f15b0cec7590050cf993cacb7" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Sat Sep 12 17:56:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Sat Sep 12 18:06:24 2026" }, "message": "Manually roll boringssl and map new error codes to existing errors\n\nThe boringssl change breaks some chromium unittests due to the\nchanges in error codes, so this CL just maps those errors to the same\nCERT_AUTHORITY_INVALID they were previously mapped to.\n\nRoll src/third_party/boringssl/src/ 902518a78..ebd832c39 (2 commits)\n\nhttps://boringssl.googlesource.com/boringssl.git/+log/902518a78763..ebd832c39240\n\n$ git log 902518a78..ebd832c39 --date\u003dshort --no-merges --format\u003d\u0027%ad %ae %s\u0027\n2026-09-11 xfding rust: bssl-tls: Retract accidental datagram trait implementation\n2026-09-10 mattm VerifyMTC: set more specific errors in two cases\n\nCreated with:\n roll-dep src/third_party/boringssl/src\n\nBug: 452986180\nChange-Id: Ia97c6266d16b27292d94e4bc147249b1cd9e644e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8391960\nAuto-Submit: Matt Mueller \u003cmattm@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nReviewed-by: David Benjamin \u003cdavidben@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1696873}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5fdb7e00ecc5c92b02a6b6d4524ad763b007bd2c\n" }, { "commit": "9b494fe42ceb904f15b0cec7590050cf993cacb7", "tree": "db08f5ab66f1cde71b2c8a40e17ca5e9ca1a0bdb", "parents": [ "311a872daac50d741a56674540ea6a9050bc6017" ], "author": { "name": "Deepak Ravichandran", "email": "deepakr@google.com", "time": "Sat Sep 12 13:14:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Sat Sep 12 13:22:05 2026" }, "message": "Avoid restarting cache transaction after headers received\n\nIn HttpCache::Transaction, when attempting to create a replacement cache\nentry after receiving response headers from the network\n(done_headers_create_new_entry_ \u003d\u003d true), failing to allocate the entry\nrouted to DoHeadersPhaseCannotProceed(), which wiped network_trans_ and\nrestarted the transaction from scratch (STATE_GET_BACKEND).\n\nThis caused unnecessary duplicate network requests, wasted user\nbandwidth, increased tail latency, and historically triggered a CHECK\nfailure in DoGetBackendComplete() when restarted with stale state\n(crbug.com/537817232).\n\nThis CL updates DoHeadersPhaseCannotProceed() so that when response\nheaders have already been received, the transaction degrades to\nun-cached pass-through (mode_ \u003d NONE) and cleanly completes headers,\ndelivering the received response to the caller without re-fetching over\nthe network.\n\nAlso adds a unit test in HttpCacheTest verifying that when the\nreplacement cache entry encounters ERR_CACHE_RACE after network headers\nhave been received, the transaction cleanly degrades to pass-through\nwithout issuing a duplicate network request or restarting.\n\nSupersedes: https://crrev.com/c/6817840\nBug: 428819090, 433619513, 537817232\nChange-Id: Icc08c4e6f862841c9349a5dc92747f7b0966ccef\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8266086\nReviewed-by: Takashi Toyoshima \u003ctoyoshim@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Deepak Ravichandran \u003cdeepakr@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1696831}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e45d6f9e5f7ffef15f5a4316913fc2af82dedfcb\n" }, { "commit": "311a872daac50d741a56674540ea6a9050bc6017", "tree": "34e95a78985f38b17701f63e923a072bb4382199", "parents": [ "eb5611ddabbfb3d62a0f3d6a264d05d9bf18e60a" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Fri Sep 11 23:07:33 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 23:17:39 2026" }, "message": "Clean up dead code related to dynamic PKP persistence\n\nDynamic PKP is only used by cronet at this point, and is not persisted\nin TransportSecurityPersister.\n\nCleanups:\n* Do not notify TransportSecurityPersister when dynamic PKP data is\n added or removed. This is pointless since dynamic PKP data is not\n persisted.\n* Do not clear dynamic PKP data in ClearDynamicData. This method is\n only called as part of TransportSecurityPersister, since dynamic PKP\n is not persisted, clearing it in this method is wrong/pointless.\n* Do not clear dynamic PKP data in DeleteDynamicDataForHost or\n DeleteAllDynamicDataBetween: There is no existing path for cronet to\n call these methods (the only existing callers are either in the\n network service or the browser layer, neither of which cronet uses).\n And it\u0027s unlikely a cronet app would even want its configured PKP\n settings to be cleared.\n\nBug: 497882860\nChange-Id: Ifb33406566c21219ac65c9dd9cffb53210de04e6\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8401187\nReviewed-by: Carlos IL \u003ccarlosil@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1696697}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 48faf37705b51ea7b7808576578b31ee6d1da661\n" }, { "commit": "eb5611ddabbfb3d62a0f3d6a264d05d9bf18e60a", "tree": "753178e68ab93690c286ce5955510257801e3b6f", "parents": [ "94847c8f5eef8429c1ad1b2b2c54decb24714567" ], "author": { "name": "Joe DeBlasio", "email": "jdeblasio@chromium.org", "time": "Fri Sep 11 21:03:02 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 21:07:49 2026" }, "message": "[HSTS] Update bulk entries\n\nSee https://github.com/chromium/hstspreload.org/wiki/Preload-List-Processes#updating-bulk-hsts-entries\n\nChange-Id: I5f7b025ddea80357a2f2cc8506ae6930dcdbbb97\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8393342\nReviewed-by: Mustafa Emre Acer \u003cmeacer@chromium.org\u003e\nAuto-Submit: Joe DeBlasio \u003cjdeblasio@chromium.org\u003e\nCommit-Queue: Joe DeBlasio \u003cjdeblasio@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1696584}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d5e6fd51b430fec89732a3976e666011ecffa0a2\n" }, { "commit": "94847c8f5eef8429c1ad1b2b2c54decb24714567", "tree": "7eff8204d304a77075e066feb8908a6c4ef361ed", "parents": [ "4a7f074e29c711d00628d8ac0b51d62ae01e8098" ], "author": { "name": "Martin Pan-Verde", "email": "thesalsa@google.com", "time": "Fri Sep 11 17:46:27 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 17:52:08 2026" }, "message": "Revert \"Enable NetworkQualityEstimatorAsyncNotifyHeadersReceived by default\"\n\nThis reverts commit 8f6bb7b64b561bb4c0b88ee377ba74d26dbcda86.\n\nReason for revert: Double-checked Finch best practices, and they recommend restarting the experiment from pre-stable (though we can ramp up faster than usual) since the experiment would not be running strictly on already-analyzed milestones. It was disabled in 154 Canary and now we are on 155.\n\nOriginal change\u0027s description:\n\u003e Enable NetworkQualityEstimatorAsyncNotifyHeadersReceived by default\n\u003e\n\u003e This effectively reverts\n\u003e https://chromium-review.git.corp.google.com/c/chromium/src/+/8254758,\n\u003e but this time we will launch with defer_notify_headers_until_next_step\n\u003e set to false.\n\u003e\n\u003e Further analysis showed that deferring NotifyHeadersReceived could delay\n\u003e network quality measurements that were intended to be updated right\n\u003e after reading headers, particularly for single-read network responses\n\u003e where the next step after NotifyHeadersReceived may not be called until\n\u003e NotifyRequestCompleted.\n\u003e\n\u003e Bug: 481197117\n\u003e Change-Id: I435ec63b48dea8e61481f85dd0cc1f4f1bdccabc\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8369339\n\u003e Reviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\n\u003e Commit-Queue: Martin Pan-Verde \u003cthesalsa@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1693578}\n\nBug: 481197117\nChange-Id: Ic86bf2d003bd1e6439d802474bff1ebf9eb78543\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8380739\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCommit-Queue: Martin Pan-Verde \u003cthesalsa@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1696418}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6886cf170c29086b4f910b4341845f9cab5b10a6\n" }, { "commit": "4a7f074e29c711d00628d8ac0b51d62ae01e8098", "tree": "55e4712357bdd6f31470a3e9226f61d9ba77d3eb", "parents": [ "6085e04e68b4cd822610cfb2f27ad39e7743319f" ], "author": { "name": "Mohannad Farrag", "email": "aymanm@google.com", "time": "Fri Sep 11 16:31:01 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 16:39:42 2026" }, "message": "Add feature to configure QUIC socket send buffer size.\n\nThis introduces the QuicSocketSendBufferSize feature and an associated parameter to control the send buffer size of QUIC client sockets.\n\nIf the feature is enabled:\n- A parameter value of -1 leaves the send buffer size at the OS default (SetSendBufferSize is not called).\n- A positive parameter value sets the send buffer to that specific size.\n\nIf the feature is disabled, the default behavior of setting the buffer size to 20 packets is used. A field trial configuration is added to test a 1MB buffer size across all platforms.\n\nBug: 540461959\nChange-Id: I838e8f5d8b094a68acded167830b9a6cb8178f15\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8395729\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nCommit-Queue: Mohannad Farrag \u003caymanm@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1696337}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 63d928c9be9002ffef3905dfb54e14186403d155\n" }, { "commit": "6085e04e68b4cd822610cfb2f27ad39e7743319f", "tree": "2dfdb25f3e50820444505da391f241a8c9858901", "parents": [ "8f995e6938d3890d58fe1b7001a58a0eeb1dcc4a" ], "author": { "name": "PKI Metadata Updates Bot", "email": "mdb.chrome-pki-metadata-release-jobs@google.com", "time": "Fri Sep 11 15:29:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 15:43:03 2026" }, "message": "[SignerSet] Automatic update from google3\n\nAutomatic update for 2026-09-11 UTC\n\nMerge-Approval-Bypass: pki-metadata-updater\nChange-Id: I7ea0335c11249db2b02e7da86a8287770bb5fd60\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8392161\nBot-Commit: PKI Metadata Updates Bot \u003cmdb.chrome-pki-metadata-release-jobs@google.com\u003e\nCommit-Queue: PKI Metadata Updates Bot \u003cmdb.chrome-pki-metadata-release-jobs@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1696276}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 17c94478dc399513829a5543a40353c25593c185\n" }, { "commit": "8f995e6938d3890d58fe1b7001a58a0eeb1dcc4a", "tree": "71ddc647afb475581b72e95ab9fb405f12f9006d", "parents": [ "6ca82c91a5ef7672e6f42913e862a0f7f922fdd3" ], "author": { "name": "PKI Metadata Updates Bot", "email": "mdb.chrome-pki-metadata-release-jobs@google.com", "time": "Fri Sep 11 15:01:19 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 15:08:20 2026" }, "message": "[KP] Automatic update from google3\n\nAutomatic update for 2026-09-11 UTC\n\nMerge-Approval-Bypass: pki-metadata-updater\nChange-Id: I573f918ee7ab644de1b1604c088b5ade1548c8ee\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8391602\nCommit-Queue: PKI Metadata Updates Bot \u003cmdb.chrome-pki-metadata-release-jobs@google.com\u003e\nBot-Commit: PKI Metadata Updates Bot \u003cmdb.chrome-pki-metadata-release-jobs@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1696247}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 472ae1b6d5025595f378e54c103b95b5f662fccf\n" }, { "commit": "6ca82c91a5ef7672e6f42913e862a0f7f922fdd3", "tree": "2f17677f88e65644cff0cfb7ec8731ea8f24be07", "parents": [ "70a49d7f87e000faec815758cdcc7b402950e8af" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Fri Sep 11 14:13:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 14:23:41 2026" }, "message": "Propagate the migration cause for OnNoNewNetwork\n\nOnNoNewNetwork is (possibly) handled by OnNetworkConnected, which is\nposted from a different chain. This makes it not possible to inject the\nmigration cause in the chain of callbacks like we did for other\nscenarios. So, use the pre-existing wait_for_new_network_ signal to also\nstore the cause, rather than a simple boolean.\n\ncurrent_migration_cause_, and the old metrics, are not being updated\nwith the correct values to show the increased fidelity of the new\nmetrics.\n\nBug: 557126867\nChange-Id: If061fa7e5b627dbebdf89ed917f54866749b4e0e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8351100\nAuto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1696189}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f804dbd9f44b7ad1a8c0d16e3d53c3d31ec7baec\n" }, { "commit": "70a49d7f87e000faec815758cdcc7b402950e8af", "tree": "bacb14e2740ed12271e40e593ad01dabbac9ceaf", "parents": [ "7808db9bc440b1828f8b0dc5cbacfd6fabb97ce5" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Fri Sep 11 12:59:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 13:04:54 2026" }, "message": "[net] Add sub_key to DBSC binding statement\n\nThe DBSC-SSO session initialization specification defines the binding\nstatement payload in the outer registration JWT to include the certified\nsubject key (`sub_key`) alongside the format (`fmt`), statement\n(`stmt`), and signature (`sig`).\n\nThis CL updates the binding statement generation in\n`net/device_bound_sessions`:\n\n* Renames `CreateAttestationValue()` to `CreateBindingStatement()`.\n* Populates the `\"sub_key\"` property in the dictionary.\n* Adds a `base::span\u003cconst uint8_t\u003e` overload of `Base64UrlEncode()` to\n avoid unnecessary string conversions.\n* Updates unit tests in `session_binding_utils_unittest.cc` and\n `registration_fetcher_unittest.cc` to verify the new field.\n\nBug: 481630807\nChange-Id: I43804fd7f555240bf34e7a608cf9983a6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8379986\nCommit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1696150}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 1acddfe19b60fd67511310c64c98155861c9bc68\n" }, { "commit": "7808db9bc440b1828f8b0dc5cbacfd6fabb97ce5", "tree": "eced5c1a26daa912a36eade02a36d22da3d65084", "parents": [ "50370ac81c336c874882b4ac9cb25ff8376fb3df" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Fri Sep 11 09:52:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 10:20:25 2026" }, "message": "net: Replace C-style arrays with std::array to remove UNSAFE_TODO\n\nConvert fixed-size C-style nameserver test arrays and config buffers to\nstd::array across net/. This enables bounds-safe indexing and eliminates\nredundant UNSAFE_TODO wrappers.\n\nBug: 559576258\nChange-Id: I5f3e4aa941770316b21023285dd2cd0d50e22e7d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8379666\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1696069}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 54cc4420f40f1e13effa4672ed6cec0bc12e54a4\n" }, { "commit": "50370ac81c336c874882b4ac9cb25ff8376fb3df", "tree": "b9a9f9f69a6874924e00de59a6b036a148c65736", "parents": [ "dfee435ea174ff7f35eea908fabb2096322a7039" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Fri Sep 11 01:57:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 02:10:56 2026" }, "message": "[dns] Publish provisional service endpoints from HTTPS address hints\n\nWhen an HTTPS record arrives before A/AAAA responses,\nDnsTaskResultsManager now extracts ipv4hint/ipv6hint from\nHostResolverInternalMetadataResult to publish provisional service\nendpoints. This allows ServiceEndpointRequest consumers to start\nconnection attempts earlier. Per RFC 9460 Section 7.3, hints are\nsuperseded per address family once that family\u0027s DNS transaction\ncompletes (including NODATA), and are flushed if the completed family\nproduces no addresses.\n\nOnce the final DNS transaction completes, the job switches over to\nfinalized results (derived from HostCache::Entry, which never includes\nhints), so DnsTaskResultsManager only handles provisional hints while\nintermediate transactions remain pending.\n\nResolution delay interaction:\n- Updates containing IPv6 hint endpoints publish immediately (as the delay\n timer only guards against IPv4-first publication).\n- Updates containing only IPv4 hints trigger the existing delay timer.\n\nHint extraction is gated behind the kUseDnsHttpsSvcbAddressHints feature\nflag.\n\nBug: 535290301\nChange-Id: I8fa749edb4ed96d99c31b8273f194413c25a7fdb\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8256001\nReviewed-by: Eric Orth \u003cericorth@chromium.org\u003e\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1695894}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: eed7225aefcc76e31855d9c1cc8c5c05b3fc193e\n" }, { "commit": "dfee435ea174ff7f35eea908fabb2096322a7039", "tree": "52c3416df8e5f420bce6ad5f78a3e0eff85c08e3", "parents": [ "4c9e1b9b9a4a027885232ce861782caa0a091a37" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Fri Sep 11 01:55:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 01:59:56 2026" }, "message": "[net] Pass HttpRequestHeaders to HttpVaryData\n\nCurrently, HttpVaryData::Init and HttpVaryData::MatchesRequest accept a\nconst HttpRequestInfo\u0026. However, HttpVaryData only ever inspects\nrequest_info.extra_headers (an HttpRequestHeaders instance) to hash and\nmatch nominated Vary request headers. None of the other fields of\nHttpRequestInfo (such as URL, method, upload stream, load flags,\nNetworkAnonymizationKey, socket tags, etc.) are accessed.\n\nAccepting const HttpRequestHeaders\u0026 directly decouples HttpVaryData from\nHttpRequestInfo, removing an unnecessary header dependency and forward\ndeclaration. This also simplifies callers that only operate on\nHttpRequestHeaders, such as client-side HTTP cache validation in\nSharedHttpCacheClient for the Renderer-Accessible HTTP Cache project.\n\nBug: 473666511\nChange-Id: I601edaa1c04027c9c996ab40c4105930f329299b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8376848\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1695892}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7b54f3e46437b33a27605ab90a5bef0260f44023\n" }, { "commit": "4c9e1b9b9a4a027885232ce861782caa0a091a37", "tree": "2f3e3ff58dda629fc408d58746a7108f1b265687", "parents": [ "9fbf2e7f28603c7cc3df908e496a49da4a331ac5" ], "author": { "name": "Andrew Williams", "email": "awillia@chromium.org", "time": "Thu Sep 10 23:22:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 23:27:58 2026" }, "message": "Revert \"[dbsc] Implement watchdog timer for DBSC fetches\"\n\nThis reverts commit a9f4607a52f96b1b4b842920153f70cadf95de29.\n\nReason for revert: Suspected cause of several flaky tests: crbug.com/559234533\n\nFailure Link: https://ci.chromium.org/ui/p/chromium/builders/ci/mac13-arm64-rel-tests/78632/test-results?q\u003dExactID%3A%3A%2F%2Fnet%5C%3Anet_unittests%21gtest%3A%3AURLFetcherTest%23RedirectInsecureProtocolDowngradeBlocked+VHash%3A5a609b042ccd6e71\n\nOriginal change\u0027s description:\n\u003e [dbsc] Implement watchdog timer for DBSC fetches\n\u003e\n\u003e Previously, DBSC network fetches (registration, refresh, and .well-known\n\u003e endpoints) in URLFetcher lacked a timeout mechanism. If a server\n\u003e accepted a connection but hung without returning a response, the fetcher\n\u003e and any deferred network requests waiting on the session refresh would\n\u003e block indefinitely.\n\u003e\n\u003e This change introduces a watchdog timer in URLFetcher to cancel stalled\n\u003e requests with net::ERR_TIMED_OUT. RegistrationFetcherImpl is updated to\n\u003e configure this timer with a 20-second timeout for interactive\n\u003e (user-blocking) fetches and a 30-second timeout for background fetches,\n\u003e depending on the task priority.\n\u003e\n\u003e Bug: 547587776\n\u003e Change-Id: I43bb9a5ff282dcfdd835ae90b0f4a0fc6a6a6964\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8257241\n\u003e Reviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\n\u003e Commit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1694646}\n\nBug: 547587776, 559234533\nBug: 547587776\nChange-Id: I32ff0468be211e16acc7d942fed7dcf7401002cd\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8390939\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCommit-Queue: Andrew Williams \u003cawillia@chromium.org\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#1695765}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d528ed2608b82f4e8850f8a44224254ec6e0c31b\n" }, { "commit": "9fbf2e7f28603c7cc3df908e496a49da4a331ac5", "tree": "7b984b6d4af7b3245dd1e01c3543f219001976a8", "parents": [ "add5396099415290bd0ffcdee4d1615c83c62747" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Thu Sep 10 08:16:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 08:26:07 2026" }, "message": "Prevent migration cause clobbering in QuicMigrationAttemptContext\n\nNot all migration attempts call StartProbing synchronously. Whenever it\nis called asynchronously, current_migration_cause_ might not reflect\nthat attempt\u0027s cause. To prevent cause clobbering, inject the migration\ncause into the callback sequence, decoupling QuicMigrationAttemptContext\nentirely from current_migration_cause_.\n\ncurrent_migration_cause_ will be kept around until we deprecate the old\nconnection migration metrics.\n\nNote: this moves ProbingCallback to be the last parameter of\nStartProbing to follow //net\u0027s callback convention.\n\nBug: 557126867, 558250723\nChange-Id: I43a5c0c0c6f4d98e0ccf6d890fb7ea13899527ff\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8351062\nAuto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1695252}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: da0d77733a0c04cea27335068f214f90b4e67ad6\n" }, { "commit": "add5396099415290bd0ffcdee4d1615c83c62747", "tree": "9afe61deff07fecba328919d93e1e2981c2778bf", "parents": [ "0d43d097b903dbf2009837d7174d34afd937e5f6" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Thu Sep 10 07:58:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 08:07:13 2026" }, "message": "Reland \"Require a QuicMigrationAttemptContext to complete a migration\"\n\nThis reverts commit 87eaeeb868e6e48431cc33c3e92dac618104e791.\n\nReason for revert: Fixed by passing a non-infinite time for yielding\nwhen constructing a QuicChromiumPacketReader in\nhttps://crrev.com/c/8370023.\n\nOriginal change\u0027s description:\n\u003e Revert \"Require a QuicMigrationAttemptContext to complete a migration\"\n\u003e\n\u003e This reverts commit 510b3d586999e90cd4ee59191ca417af4eff09e1.\n\u003e\n\u003e Reason for revert: Reverting to allow clean revert in https://chromium-review.googlesource.com/c/chromium/src/+/8368899\n\u003e\n\u003e I have checked in a local client that this allows a clean revert of that CL.\n\u003e\n\u003e Failure Link: https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20UBSan%20Tests/17829/blamelist\n\u003e\n\u003e Original change\u0027s description:\n\u003e \u003e Require a QuicMigrationAttemptContext to complete a migration\n\u003e \u003e\n\u003e \u003e MigrateToSocket represents the finish line for a migration attempt.\n\u003e \u003e Change it to accept, and consume, a QuicMigrationAttemptContext to make\n\u003e \u003e sure all migration paths are, and will, instantiate a\n\u003e \u003e QuicMigrationAttemptContext. This makes it extremely hard for migration\n\u003e \u003e attempts not to log their outcome.\n\u003e \u003e\n\u003e \u003e While doing this, since MigrateToSocket no longer accept directly a\n\u003e \u003e socket, rename it to CommitMigration.\n\u003e \u003e\n\u003e \u003e Note: this requires changing\n\u003e \u003e TestCloseSessionOnErrorLaterThenConnectionMigrationMigrateToSocket\n\u003e \u003e because QuicMigrationAttemptContext does not allow a nullptr\n\u003e \u003e QuicChromiumPacket{Reader, Writer}. So, now that CommitMigration\n\u003e \u003e requires a QuicMigrationAttemptContext, tests expectations have to be\n\u003e \u003e updated accordingly.\n\u003e \u003e\n\u003e \u003e Bug: 557126867, b:450253948\n\u003e \u003e Change-Id: I98fa3b3e43b88bdbce5b9b76f4ea9d84fe48dbe5\n\u003e \u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8354363\n\u003e \u003e Commit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e \u003e Reviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\n\u003e \u003e Cr-Commit-Position: refs/heads/main@{#1693342}\n\u003e\n\u003e Bug: 557126867, b:450253948\n\u003e Change-Id: Ib16e1190836ab342c384203951dd5f39465b1017\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8367065\n\u003e Commit-Queue: Fergal Daly \u003cfergal@chromium.org\u003e\n\u003e Auto-Submit: Fergal Daly \u003cfergal@chromium.org\u003e\n\u003e Owners-Override: Fergal Daly \u003cfergal@google.com\u003e\n\u003e Bot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1693521}\n\nBug: 558456601, 557126867, b:450253948\nChange-Id: I289c5d31fca9da3e52465ca784211f70c782f95b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8365908\nAuto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1695241}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4497477046ca7740c94a4dd76989ae7d3aeccf66\n" }, { "commit": "0d43d097b903dbf2009837d7174d34afd937e5f6", "tree": "45cc680f57c8306efd30e06d8858ebeba9ac514b", "parents": [ "168de95bc332b8cff229308d34dfe11327de32a1" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Thu Sep 10 07:54:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 08:02:40 2026" }, "message": "Reland \"Handle direct/non-probing migrations via QuicMigrationAttemptContext\"\n\nThis reverts commit 20e208d58293a5c4a970994a9e57c6d584960b2a.\n\nReason for revert: Fixed by passing a non-infinite time for yielding\nwhen constructing a QuicChromiumPacketReader in\nhttps://crrev.com/c/8370023.\n\nOriginal change\u0027s description:\n\u003e Revert \"Handle direct/non-probing migrations via QuicMigrationAttemptContext\"\n\u003e\n\u003e This reverts commit 2ca779ced22035f62830e45559baf737971dd599.\n\u003e\n\u003e Reason for revert: Linux UBSan is failing.\n\u003e\n\u003e This CL touched quic_chromium_client_session.cc:4155 which is in the 2nd frame of the stack trace.\n\u003e \u003e\n\u003e Failure Link: https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20UBSan%20Tests/17829/blamelist\n\u003e\n\u003e Original change\u0027s description:\n\u003e \u003e Handle direct/non-probing migrations via QuicMigrationAttemptContext\n\u003e \u003e\n\u003e \u003e The goal is to handle telemetry for every kind of migration attempt via\n\u003e \u003e QuicMigrationAttemptContext, but currently QuicMigrationAttemptContext\n\u003e \u003e is only used by probing migrations. This requires instantiating a\n\u003e \u003e QuicChromiumPacketReader and QuicChromiumPacketWriter before\n\u003e \u003e ConnectAndConfigureSocket succeeds, but that has no consequences (and\n\u003e \u003e actually brings the direct/non-probing migration path closer to the\n\u003e \u003e probing one).\n\u003e \u003e\n\u003e \u003e While doing this, this also updates Migrate and FinishMigrate to\n\u003e \u003e MigrateWithoutProbing and FinishMigrateWithoutProbing. The current names\n\u003e \u003e are ambiguous: without peeking at the implementation it\u0027s not clear\n\u003e \u003e whether the code will trigger a probe or not.\n\u003e \u003e\n\u003e \u003e Bug: 557126867, b:450253948\n\u003e \u003e Change-Id: Ib7ada4910289a9210bcb7b08677475d6684d32cb\n\u003e \u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8351785\n\u003e \u003e Commit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e \u003e Reviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\n\u003e \u003e Cr-Commit-Position: refs/heads/main@{#1693332}\n\u003e\n\u003e Bug: 557126867, b:450253948\n\u003e Change-Id: Ic92f9e1a96f63c0aaa92cdb2b13f6ca529310326\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8368899\n\u003e Bot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\n\u003e Commit-Queue: Fergal Daly \u003cfergal@chromium.org\u003e\n\u003e Owners-Override: Fergal Daly \u003cfergal@google.com\u003e\n\u003e Auto-Submit: Fergal Daly \u003cfergal@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1693523}\n\nBug: 558456601, 557126867, b:450253948\nChange-Id: I74c059cd7eb901bf37fc7fa32e566868944e9e04\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8370023\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nAuto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1695240}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8df146f71ebae41d64246d1256b1070692e17e8b\n" }, { "commit": "168de95bc332b8cff229308d34dfe11327de32a1", "tree": "94a391b8e421ef1fdf31c75c5c36908593313c95", "parents": [ "1376c7aed2bdf478544736ec8175f4772d4b7f7e" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Thu Sep 10 00:07:30 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 00:44:50 2026" }, "message": "Remove ChromeOS-specific code from TrustStoreNSS\n\nThis class is no longer used on ChromeOS, so the optimizations that\nwere only relevant to ChromeOS can be removed now.\n\nBug: 390333881\nChange-Id: I4d8d67540989953d5162b88ce66e9fb56e2be4dd\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8312474\nReviewed-by: Hubert Chao \u003chchao@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1695026}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 20906230dc5fae75de7b7cb6300ae464be936c42\n" }, { "commit": "1376c7aed2bdf478544736ec8175f4772d4b7f7e", "tree": "f360b079cd5c5acf710878f774879388ebf16ef3", "parents": [ "f81a4804ac2b01cb95e6d2e89b8bc67732724194" ], "author": { "name": "Chris Fredrickson", "email": "cfredric@chromium.org", "time": "Wed Sep 09 23:52:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 00:44:08 2026" }, "message": "Remove test-only LocalSetDeclaration class\n\nThis class was only used in tests (following\nhttps://crrev.com/c/8364925), so we should remove it.\n\nBug: 558650914\nChange-Id: I040804a643099e71c2edf1ecbf02edd5a45d9cc9\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8374104\nReviewed-by: Johann Hofmann \u003cjohannhof@chromium.org\u003e\nAuto-Submit: Chris Fredrickson \u003ccfredric@chromium.org\u003e\nReviewed-by: Ari Chivukula \u003carichiv@chromium.org\u003e\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCommit-Queue: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1695019}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2846027c66050828dfbda15a6e87947bb5bfd50b\n" }, { "commit": "f81a4804ac2b01cb95e6d2e89b8bc67732724194", "tree": "c407b94afba2a32e67786d9f7296f240b97c4bf4", "parents": [ "f79acf6b7379f9bfd5916ad91194ce35d64ce0b9" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Wed Sep 09 21:39:57 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 21:44:15 2026" }, "message": "Don\u0027t build TrustStoreNSS on ChromeOS\n\nChromeOS doesn\u0027t use NSS for storing server certificate settings and the\nmigration code has been removed, so there is no need to build this on\nChromeOS anymore.\n\nBug: 390333881\nChange-Id: I56143b4f71c74f6827a73e131f66f62b61cbbc4b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8308823\nReviewed-by: Hubert Chao \u003chchao@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1694889}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dcba1b2b79ba7230ad5fc3b7aa78a1775904db53\n" }, { "commit": "f79acf6b7379f9bfd5916ad91194ce35d64ce0b9", "tree": "aa53590c654d146dbf254811c8b46df17feaec92", "parents": [ "471f6db14253da99a8db8b1c88e54f0d0ff3ca96" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Wed Sep 09 19:03:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 19:11:18 2026" }, "message": "Split transport security state HSTS and PKP data into separate outputs\n\nThe pinning data is still included in the TransportSecurityStateSource\nstruct to avoid needing to change the consumers in this CL. That will be\ndone in followups.\n\nBug: 497882860\nChange-Id: I6e8ac5c14b3db4f887ff10fce4423984a91a483c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8364173\nReviewed-by: Carlos IL \u003ccarlosil@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1694790}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bb52b670c05e2a35318cd68c9e6d8d96a43b46a9\n" }, { "commit": "471f6db14253da99a8db8b1c88e54f0d0ff3ca96", "tree": "ac235a8eaa579e6d81beb231cab51b30484c5a21", "parents": [ "aaf91b4bb756ab53f50ca14bcfd423f5d0e79bfb" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Wed Sep 09 17:59:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 18:10:04 2026" }, "message": "Split use_nss_certs build flag by client/server auth uses\n\nThere should be no behavior changes in this CL, this is in preparation\nfor turning off NSS server cert use on ChromeOS in a followup CL.\n\nBug: 390333881\nCq-Include-Trybots: luci.chromium.try:linux-cast-x64-rel\nChange-Id: Ife604e2172bc49a21d2b5e6c8846f2ac812077b9\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8348877\nReviewed-by: David Benjamin \u003cdavidben@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nReviewed-by: Joe Downing \u003cjoedow@chromium.org\u003e\nReviewed-by: Carlos IL \u003ccarlosil@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1694729}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3809ff56a2fde3375a3f1eae7764cef60e102286\n" }, { "commit": "aaf91b4bb756ab53f50ca14bcfd423f5d0e79bfb", "tree": "cee5c711e06bb8fb2e20970ab9c003a0f42a275c", "parents": [ "d0a811a19eac3165ae6b431cd367bab987063f95" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Wed Sep 09 16:25:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 17:01:21 2026" }, "message": "[dbsc] Implement watchdog timer for DBSC fetches\n\nPreviously, DBSC network fetches (registration, refresh, and .well-known\nendpoints) in URLFetcher lacked a timeout mechanism. If a server\naccepted a connection but hung without returning a response, the fetcher\nand any deferred network requests waiting on the session refresh would\nblock indefinitely.\n\nThis change introduces a watchdog timer in URLFetcher to cancel stalled\nrequests with net::ERR_TIMED_OUT. RegistrationFetcherImpl is updated to\nconfigure this timer with a 20-second timeout for interactive\n(user-blocking) fetches and a 30-second timeout for background fetches,\ndepending on the task priority.\n\nBug: 547587776\nChange-Id: I43bb9a5ff282dcfdd835ae90b0f4a0fc6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8257241\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCommit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1694646}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a9f4607a52f96b1b4b842920153f70cadf95de29\n" }, { "commit": "d0a811a19eac3165ae6b431cd367bab987063f95", "tree": "9a4efbe15bbfb3624ee7383d417a0aa4589c907b", "parents": [ "48875381f4e6b88c832c87ae9637f2b52198a36b" ], "author": { "name": "Ali Hijazi", "email": "ahijazi@chromium.org", "time": "Wed Sep 09 13:25:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 13:32:06 2026" }, "message": "[DBSC] Terminate existing session and record telemetry when replaced\n\nPreviously, when SessionServiceImpl::AddSession() was called for a newly\nregistered session whose SessionKey already existed in\nunpartitioned_sessions_, the map assignment silently destroyed the\nprevious Session object without invoking\nDeleteSessionAndNotifyInternal().\n\nConsequently, no Net.DeviceBoundSessions.DeletionReason histogram was\nemitted, and observers (including DevTools) were not notified of the\ntermination.\n\nThis CL:\n\n1. Adds DeletionReason::kReplaced to DeletionReason, mojom, DevTools\n protocol, and enums.xml.\n2. Implements SessionServiceImpl::AddSessionAndNotify(), which cleanly\n terminates any existing session with DeletionReason::kReplaced, saves\n and inserts the new session, and notifies creation observers.\n3. Unifies and deduplicates session addition and notification across\n registration and key restoration flows.\n4. Adds unit tests covering session replacement, histogram logging,\n and session store synchronization.\n\nIn-flight refresh cancellation and handling of deferred requests upon\nreplacement will be addressed in a follow-up CL.\n\nTAG\u003dagy\n\nBug: 532577547\nChange-Id: I030ca1d7651944f8c2723058efacc1920ca9b3aa\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8298338\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Alex Rudenko \u003calexrudenko@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1694540}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: acd5a28c24f9aa274265b48778344e1c9ff4dc6d\n" }, { "commit": "48875381f4e6b88c832c87ae9637f2b52198a36b", "tree": "efd86c3ae3e54f26793c54c79b4d15324944d6a8", "parents": [ "8c2ec4ee0951a1cdecb4faa7aacfda60ea6fc6df" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Wed Sep 09 13:05:35 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 13:18:25 2026" }, "message": "Handle IllegalArgumentException in AndroidNetworkLibrary.getEchMode\n\nCatch IllegalArgumentException in AndroidNetworkLibrary.getEchMode when\nquerying the domain encryption mode for invalid hostnames, such as those\nwith a leading dot.\n\nBug: 558378904, b:559067068\nChange-Id: I5cb901ce908b6b78bfa120c92620ff2230a3cf44\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8378162\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nAuto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1694526}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 98cc697e68112ebd2244161d1a048a1b52fde529\n" }, { "commit": "8c2ec4ee0951a1cdecb4faa7aacfda60ea6fc6df", "tree": "c9fee670873945e27313a2d9019fff6014a9f316", "parents": [ "e8120bb6b934bfda3adfe017bfa491fc3ce06386" ], "author": { "name": "Ali Hijazi", "email": "ahijazi@chromium.org", "time": "Wed Sep 09 08:38:01 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 08:44:33 2026" }, "message": "[DBSC] Add \u0027aud\u0027 claim to registration and refresh JWT payloads\n\nIn federated DBSC sessions, multiple relying parties (RPs) can share the\nsame unexportable signing key issued by the Identity Provider.\nPreviously, registration and refresh JWT payloads only contained the\n\u0027jti\u0027 challenge and optional authorization, omitting the \u0027aud\u0027\n(audience) claim. This allowed signed refresh assertions to potentially\nbe transplanted across different RPs sharing the same key.\n\nThis CL adds the destination endpoint URL as the \u0027aud\u0027 claim to both\nregistration and refresh JWT payloads, cryptographically binding signed\nassertions to their intended target endpoint.\n\nTo prevent regressions with Relying Party backends that enforce strict\nJWT schema validation, this behavior is guarded by the\n\u0027kDeviceBoundSessionsIncludeAudienceClaim\u0027 feature flag.\n\nTAG\u003dagy\n\nBug: 520539299\nChange-Id: Ieb5d5ac12ac7086669262dbf2bd3f995bc8cca2b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8274684\nCommit-Queue: Ali Hijazi \u003cahijazi@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1694417}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bfb0a8531c22b26e63010b5fbe0c8d5595f0c56f\n" }, { "commit": "e8120bb6b934bfda3adfe017bfa491fc3ce06386", "tree": "1d0a699c9ab9d0012b4716649bf94e27275318aa", "parents": [ "723131e2de2fd3b345fddffa9190f4bad16675ca" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Wed Sep 09 00:33:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 00:42:16 2026" }, "message": "transport_security_state_generator: split ParseJSON function\n\nSplits the ParseJSON function into ParseHstsJson and ParsePkpJson.\n\nBug: 497882860\nChange-Id: I17d35966841f36a084065adfc0aafc6352749f14\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8359465\nReviewed-by: Carlos IL \u003ccarlosil@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1694227}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c3ab8746f8aab0cfe5ac156f630e8e5a7c8b9f39\n" }, { "commit": "723131e2de2fd3b345fddffa9190f4bad16675ca", "tree": "4549c65a15d95fa2a105cc9b06d9e66dcaaedf68", "parents": [ "09c9c3166b5c5e1e33c9dedc340ee82d46770950" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Tue Sep 08 20:08:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 20:20:01 2026" }, "message": "Clarify CertVerifyProcBuiltinTest.ShouldBypassHSTS test\n\nChange-Id: I927e7c54f34d74e03bd5fda77275f038a79ef373\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8363766\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nReviewed-by: Hubert Chao \u003chchao@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693991}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0638c44b04a9ffc2f22dfd82e59498ae73c8a631\n" }, { "commit": "09c9c3166b5c5e1e33c9dedc340ee82d46770950", "tree": "39f143c7bf646edec3dfdf7b825af51e4e33bb5c", "parents": [ "7c9291ac36ce962f23505c6b50c41fd0f5a147ba" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Tue Sep 08 18:42:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 18:50:19 2026" }, "message": "[crypto] Remove SignatureAlgorithm alias from SignatureVerifier\n\nRemove the deprecated SignatureAlgorithm type alias and using enum\nsign::SignatureKind from SignatureVerifier.\n\nAll remaining call sites referencing the alias or its imported enum\nconstants now use crypto::sign::SignatureKind directly, preventing\nbacksliding.\n\nBug: 406190025\nChange-Id: I1d93fb47df7e052c3f6241938e5ba3ba6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8366129\nAuto-Submit: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Daniel Cheng \u003cdcheng@chromium.org\u003e\nOwners-Override: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693956}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7de03ddbb644dcb57506fb218b5be07b5612e425\n" }, { "commit": "7c9291ac36ce962f23505c6b50c41fd0f5a147ba", "tree": "6ad2773f05b1adc1b8fbc0a21c13568891a6991c", "parents": [ "343d1ba63a6f07300d12f613d1ec215f8cc032b4" ], "author": { "name": "Ahmed Raslan", "email": "rslan@google.com", "time": "Tue Sep 08 17:11:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 17:18:34 2026" }, "message": "[Net] Add test coverage for parsing multiple invalid CookieSameSite attributes\n\nBug: 557174653\nChange-Id: I918c0c18b18b6a6193d423b97b4dde0db49a8db4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8352645\nCommit-Queue: Ahmed Raslan \u003crslan@google.com\u003e\nReviewed-by: Chris Fredrickson \u003ccfredric@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693878}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b32f07f281e974f83a2c4ca179b90152b79a2ad0\n" }, { "commit": "343d1ba63a6f07300d12f613d1ec215f8cc032b4", "tree": "eddeb4cdf484c5403e9420835b281fe025a55ab9", "parents": [ "8727c335c5da5c6b7b415ccf1a6f309e88ccff7f" ], "author": { "name": "Alexei Svitkine", "email": "asvitkine@chromium.org", "time": "Tue Sep 08 16:16:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 16:22:35 2026" }, "message": "Fix enum histogram call sites with boundary and typing issues\n\nIn preparation for disallowing 3-argument enum histogram macros and\nfunctions when the enum defines kMaxValue (https://crrev.com/c/8329130),\nfix call sites that had semantic boundary or typing issues:\n- Call sites that erroneously passed kMaxValue directly to 3-argument\n macros (treating it as an exclusive boundary instead of inclusive),\n resulting in values equal to kMaxValue being dropped into the overflow\n bucket. These are switched to 2-argument calls.\n- Call sites passing hardcoded values or enums missing kMaxValue.\n\nTAG\u003dagy\nCONV\u003d72bbc372-edca-45d3-9d0b-e25b79a10306\n\nBug: 545187388\nChange-Id: I112456db2cb3e4b109be8f390e5393e6cdc5423a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8352509\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Alexei Svitkine \u003casvitkine@chromium.org\u003e\nAuto-Submit: Alexei Svitkine \u003casvitkine@chromium.org\u003e\nOwners-Override: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693841}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c19136c8095bf8e466ea5061d8309b801f9c5607\n" }, { "commit": "8727c335c5da5c6b7b415ccf1a6f309e88ccff7f", "tree": "b4c541f570ce9b4b666f7f048b6dce1cfbc1da49", "parents": [ "b5568f93d079e8740441411c227e78eec165c4db" ], "author": { "name": "Andrew Paseltiner", "email": "apaseltiner@chromium.org", "time": "Tue Sep 08 15:51:19 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 15:58:39 2026" }, "message": "Remove uses of deprecated ParameterizedMember fields in Rust bridge\n\nThe public member, member_is_inner_list, and params fields are difficult\nto use correctly and are deprecated in favor of accessor methods that do\nthe right thing based on the internal representation, which is being\nchanged to std::variant. This CL contains the last code to be migrated\nbefore that change can happen.\n\nThis contains no intentional observable behavioral differences.\n\nBug: 517204961\nChange-Id: I7b36517636c44d8452c99d99ca2b3da1fe66f96f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8354405\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCommit-Queue: Andrew Paseltiner \u003capaseltiner@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693822}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 314a3dba96c97e3cc4b023124e2cd8dc9d08ae4a\n" }, { "commit": "b5568f93d079e8740441411c227e78eec165c4db", "tree": "3e6b4565ed9669185b282d955ed6f057f5a892ca", "parents": [ "43c579d95d28316a6971abb1d52349a44888fb6f" ], "author": { "name": "Sebastien Lalancette", "email": "seblalancette@chromium.org", "time": "Tue Sep 08 15:47:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 15:52:39 2026" }, "message": "net: Rebuild proxy HttpAuthController when the proxy changes\n\nHttpNetworkTransaction::DoGenerateProxyAuthToken() lazily creates an\nHttpAuthController bound to the current proxy and previously only\ncreated it when the pointer was null. When a transaction repeats stream\ncreation (such as after a keep-alive I/O error or an auth restart) and\nresolves to a different proxy via fallback, the stale controller was\nreused, applying the previous proxy\u0027s credentials to the new proxy.\n\nAdd HttpAuthController::MatchesSchemeHostPort() and recreate the proxy\nHttpAuthController in DoGenerateProxyAuthToken() when it no longer\nmatches the current proxy\u0027s SchemeHostPort. Also add and update unit\ntests to verify that credentials are not leaked across proxies and that\nfallback proxies use their own cached credentials when available.\n\nFixed: 533426590\nChange-Id: I8a433f4f200c8f6d954a5f081c03da60d207fa35\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8358595\nReviewed-by: mmenke \u003cmmenke@chromium.org\u003e\nCommit-Queue: Sebastien Lalancette \u003cseblalancette@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693821}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bf2b378deb9032d52a6be2c17d7e9b2a7fb76458\n" }, { "commit": "43c579d95d28316a6971abb1d52349a44888fb6f", "tree": "0b8d261ea16906817f4fae417db6df2315b56e98", "parents": [ "ca9bbc5786f640cde2e1c0ba6fa4ac19c6c1ddb7" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Tue Sep 08 13:15:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 13:20:40 2026" }, "message": "Reland \"Introduce QuicMigrationAttemptContext\"\n\nThis reverts commit f5d390d2d0af94562d034bdcfe6aa533e52dd57b.\n\nReason for revert: Fixed by passing a non-infinite time for yielding\nwhen constructing a QuicChromiumPacketReader in\nhttps://crrev.com/c/8370023.\n\nOriginal change\u0027s description:\n\u003e Revert \"Introduce QuicMigrationAttemptContext\"\n\u003e\n\u003e This reverts commit 55696d0a887ce57e79e23c549da9367baa7aed54.\n\u003e\n\u003e Reason for revert: VersionIncludeStreamDependencySequence/QuicSessionPoolTest.TestCloseSessionOnErrorLaterThenConnectionMigrationMigrate/*\n\u003e\n\u003e Failure Link: https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20UBSan%20Tests/17829/blamelist\n\u003e\n\u003e Original change\u0027s description:\n\u003e \u003e Introduce QuicMigrationAttemptContext\n\u003e \u003e\n\u003e \u003e This new class encapsulates all context necessary to perform a migration\n\u003e \u003e attempt. This is going to be used both for probing and non-probing\n\u003e \u003e migration. For the time being, probing migration will continue having an\n\u003e \u003e additional QuicChromiumPathValidationContext.\n\u003e \u003e\n\u003e \u003e This is the basis for the new QUIC connection migration UMAs. We attempt\n\u003e \u003e to make it harder to wrongly log migration attempts. This will be\n\u003e \u003e achieved by keeping QuicMigrationAttemptContext a const-like object and\n\u003e \u003e logging in its destructor. Follow-up changes will make it impossible to\n\u003e \u003e perform a connection migration without consuming a\n\u003e \u003e QuicMigrationAttemptContext.\n\u003e \u003e\n\u003e \u003e Bug: 557126867, b:450253948\n\u003e \u003e Change-Id: Ibbbb3ea143ab3f38a150c7a9ba3399497c335362\n\u003e \u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8346229\n\u003e \u003e Reviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\n\u003e \u003e Auto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e \u003e Commit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e \u003e Cr-Commit-Position: refs/heads/main@{#1693328}\n\u003e\n\u003e Bug: 557126867, b:450253948\n\u003e Change-Id: Ifd2868a74883ca1dc67d6880b214e758b485a811\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8366247\n\u003e Owners-Override: Fergal Daly \u003cfergal@google.com\u003e\n\u003e Commit-Queue: Fergal Daly \u003cfergal@chromium.org\u003e\n\u003e Bot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1693611}\n\nBug: 558456601, 557126867, b:450253948\nChange-Id: Iae1fe74bb2ecf88550ecf379db81fff18635307f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8366566\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCommit-Queue: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#1693733}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 45cc880f47484128bbc3b46fd2ab385efa225d90\n" }, { "commit": "ca9bbc5786f640cde2e1c0ba6fa4ac19c6c1ddb7", "tree": "2512e4bc9054d282ecc1638abaeab1aa4c869da0", "parents": [ "70891f2e628e631e49868072da6ab5e020c982b2" ], "author": { "name": "Motomu Utsumi", "email": "motomuman@google.com", "time": "Tue Sep 08 12:12:35 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 12:17:26 2026" }, "message": "Clean up kQuicRegisterConnectionClosePayload feature flag\n\nThe feature has reached 100% rollout in production.\nThis CL removes the kQuicRegisterConnectionClosePayload feature flag and\nenables the registration and unregistration of QUIC connection close\npayloads unconditionally.\n\nBug: 550199861\nChange-Id: I77c26ab54c561f8dc1b4e46c17da21eabc394f52\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8365850\nCommit-Queue: Mohannad Farrag \u003caymanm@google.com\u003e\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1693708}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8e438913de1bf46203d4cf076529b1e133ab9819\n" }, { "commit": "70891f2e628e631e49868072da6ab5e020c982b2", "tree": "9a4155522de7e9a418599fdcec8ff41d48226f71", "parents": [ "ef46abe62ce6e869335109b5b2f695fda89f6e9c" ], "author": { "name": "Chris Staite", "email": "christopher.staite@menlosecurity.com", "time": "Tue Sep 08 11:00:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 11:36:27 2026" }, "message": "[websockets] Pass FIN flag with Write on close frames\n\nWhen sending a WebSocket Close frame, no further frames may be sent by\nthe endpoint (RFC 6455 Section 5.5.1). On HTTP/2 (RFC 8441) and HTTP/3\n(RFC 9220), this frame also marks the end of the outgoing stream\n(END_STREAM / FIN).\n\nPreviously, WebSocketSpdyStreamAdapter managed outgoing stream closure\nseparately via MaybeSendEndStream(), which queued zero-length DATA\nframes and required complex deferred execution paths when writes were in\nflight.\n\nThis change updates the Adapter such that writes must be completed or\nerrored before it returns such that a fin flag can be sent with the\nbuffer containing the close frame. This allows the implementations to\nsend the correct flags with the final data frames rather than having to\nsend empty data frames later. This necessarily moves the partial write\nhandling from WebSocketBasicStream into\nWebSocketClientSocketHandleAdapter.\n\nUnit tests are updated to verify that fin is asserted appropriately for\nClose frames and that stream adapters handle post-FIN reads and writes\nwithout error and add tests for client side close.\n\nFixed: 556160934\nChange-Id: Id461b2b2f57cbeb2c3a54cdaf68670d1cbb7dd73\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8343571\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Christopher Staite \u003cchristopher.staite@menlosecurity.com\u003e\nCr-Commit-Position: refs/heads/main@{#1693691}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6f0b004b43ef40920bb0e56ce1527c0c8309e219\n" }, { "commit": "ef46abe62ce6e869335109b5b2f695fda89f6e9c", "tree": "0362b899a5fa0d649f54826259526d7eacf0cc7a", "parents": [ "42f2a09d1f076c6b902b99e1961c43b92506d38f" ], "author": { "name": "Fergal Daly", "email": "fergal@chromium.org", "time": "Tue Sep 08 08:06:18 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 08:12:35 2026" }, "message": "Revert \"Introduce QuicMigrationAttemptContext\"\n\nThis reverts commit 55696d0a887ce57e79e23c549da9367baa7aed54.\n\nReason for revert: VersionIncludeStreamDependencySequence/QuicSessionPoolTest.TestCloseSessionOnErrorLaterThenConnectionMigrationMigrate/*\n\nFailure Link: https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20UBSan%20Tests/17829/blamelist\n\nOriginal change\u0027s description:\n\u003e Introduce QuicMigrationAttemptContext\n\u003e\n\u003e This new class encapsulates all context necessary to perform a migration\n\u003e attempt. This is going to be used both for probing and non-probing\n\u003e migration. For the time being, probing migration will continue having an\n\u003e additional QuicChromiumPathValidationContext.\n\u003e\n\u003e This is the basis for the new QUIC connection migration UMAs. We attempt\n\u003e to make it harder to wrongly log migration attempts. This will be\n\u003e achieved by keeping QuicMigrationAttemptContext a const-like object and\n\u003e logging in its destructor. Follow-up changes will make it impossible to\n\u003e perform a connection migration without consuming a\n\u003e QuicMigrationAttemptContext.\n\u003e\n\u003e Bug: 557126867, b:450253948\n\u003e Change-Id: Ibbbb3ea143ab3f38a150c7a9ba3399497c335362\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8346229\n\u003e Reviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\n\u003e Auto-Submit: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e Commit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1693328}\n\nBug: 557126867, b:450253948\nChange-Id: Ifd2868a74883ca1dc67d6880b214e758b485a811\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8366247\nOwners-Override: Fergal Daly \u003cfergal@google.com\u003e\nCommit-Queue: Fergal Daly \u003cfergal@chromium.org\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#1693611}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f5d390d2d0af94562d034bdcfe6aa533e52dd57b\n" }, { "commit": "42f2a09d1f076c6b902b99e1961c43b92506d38f", "tree": "8563fdca09308d1b4f8f7b4cf6d0d7af65e85744", "parents": [ "0f52ee09f8a817491496fd54e847cb96bdffb038" ], "author": { "name": "Martin Verde", "email": "thesalsa@google.com", "time": "Tue Sep 08 06:58:06 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 07:33:01 2026" }, "message": "Enable NetworkQualityEstimatorAsyncNotifyHeadersReceived by default\n\nThis effectively reverts\nhttps://chromium-review.git.corp.google.com/c/chromium/src/+/8254758,\nbut this time we will launch with defer_notify_headers_until_next_step\nset to false.\n\nFurther analysis showed that deferring NotifyHeadersReceived could delay\nnetwork quality measurements that were intended to be updated right\nafter reading headers, particularly for single-read network responses\nwhere the next step after NotifyHeadersReceived may not be called until\nNotifyRequestCompleted.\n\nBug: 481197117\nChange-Id: I435ec63b48dea8e61481f85dd0cc1f4f1bdccabc\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8369339\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCommit-Queue: Martin Pan-Verde \u003cthesalsa@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1693578}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8f6bb7b64b561bb4c0b88ee377ba74d26dbcda86\n" }, { "commit": "0f52ee09f8a817491496fd54e847cb96bdffb038", "tree": "5c8686865b5c5b0c23160232b0ce47ab48c6a528", "parents": [ "59f1792f2b393ee99baf9bf993dc462886f2beb0" ], "author": { "name": "Adam Rice", "email": "ricea@chromium.org", "time": "Tue Sep 08 06:18:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 06:23:07 2026" }, "message": "Post WebSocketSpdyStreamAdapter write completion callback asynchronously\n\nWhen WebSocketSpdyStreamAdapter::MaybeSendEndStream deferral executes\nfollowing an in-flight write completion, running the write completion\ncallback synchronously inside OnDataSent() can cause stream teardown or\nreentrant write error handling while SpdyStream::OnFrameWriteComplete()\nis still on the call stack with write_handler_guard_ set to true.\n\nPosting execution of the completion callback asynchronously allows\nSpdyStream::OnFrameWriteComplete() to finish and clear\nwrite_handler_guard_ before any stream closure or error handling can\noccur.\n\nThis fix was generated by the Crash Autofix pipeline for the crash\nhttp://crash/ed77829c70400000. Please see go/crash-autofix for more\ndetails.\n\nBug: 555161436\nChange-Id: Ie9524667495eaf516f5d4c7008dc255cf459ddea\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8322827\nReviewed-by: Yoichi Osato \u003cyoichio@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693567}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 75634069df2130fdbb04465acc3f6be7be02c6fb\n" }, { "commit": "59f1792f2b393ee99baf9bf993dc462886f2beb0", "tree": "35601a002f1323375ebaa94d9f55d3b74e211008", "parents": [ "2d54162e94576ae5fe1782f0fa947fad91bc48a6" ], "author": { "name": "Matt Stark", "email": "msta@google.com", "time": "Tue Sep 08 05:49:31 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 06:12:35 2026" }, "message": "Run `gn format` on all build files\n\nThe main purpose of this is to ensure that the recent change to the\nformatter which requires blank lines between targets is applied to the code.\n\nChange-Id: I3b39867342b312935165233e6a6668876a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8350948\nAuto-Submit: Matt Stark \u003cmsta@google.com\u003e\nCommit-Queue: Matt Stark \u003cmsta@google.com\u003e\nReviewed-by: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nOwners-Override: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693558}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 51d2448c9b469ac9a7e5fd349a624c71291a7510\n" }, { "commit": "2d54162e94576ae5fe1782f0fa947fad91bc48a6", "tree": "ed92c9162a8e357eab49a15d636420e87f215cef", "parents": [ "06c1f7e7feb4f8e0add012b1967ee85f687831de" ], "author": { "name": "Shunya Shishido", "email": "sisidovski@chromium.org", "time": "Tue Sep 08 04:23:29 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 04:58:24 2026" }, "message": "[Reporting API] Address review comments for SendReportsForSource\n\nAddresses reviewer feedback from https://crrev.com/c/8264231:\n- Fix mojom comment backticks for reporting_source.\n- Make storage_partition_for_testing_ std::optional in\n DeclarativePerformanceObserver to allow explicit null injection\n for testing.\n- Add unit test for DeclarativePerformanceObserver OnEnterBFCache\n with null StoragePartition.\n- Explicitly enable BackForwardCache feature and use IWYU lock\n header in DeclarativePerformanceObserverBrowserTest.\n- Fix member variable declaration order in\n DeclarativePerformanceObserverBrowserTest fixture to prevent\n teardown race conditions.\n- Extend SendsReportImmediatelyOnBFCacheEntry browsertest to verify\n BackForwardCache residency and subsequent restore/queueing.\n- Add tests in ReportingServiceTest for subsequent report queueing\n on non-expired sources and backlog processing during persistent\n store initialization.\n- Add unit test in NetworkContextTest for SendReportsForSource Mojo\n IPC dispatch.\n\nTAG\u003dagy\nCONV\u003d8b89db06-79f8-4b7c-9c4e-93c368a578cb\n\nBug: 540538591, 546285538\nChange-Id: I7581d716044b234526473fffba23e3bbc520775b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8293704\nReviewed-by: Hidehiko Abe \u003chidehiko@chromium.org\u003e\nCommit-Queue: Shunya Shishido \u003csisidovski@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693532}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: fe594426d7fd8fdc5a9cb9a4ea22cc5d87623b22\n" }, { "commit": "06c1f7e7feb4f8e0add012b1967ee85f687831de", "tree": "17490732b0acb7c0a861b777af5e2b2904721e0a", "parents": [ "ca0321e1896c2e89d3e915b96bd0c8a256a71719" ], "author": { "name": "Fergal Daly", "email": "fergal@chromium.org", "time": "Tue Sep 08 03:51:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 04:40:22 2026" }, "message": "Revert \"Handle direct/non-probing migrations via QuicMigrationAttemptContext\"\n\nThis reverts commit 2ca779ced22035f62830e45559baf737971dd599.\n\nReason for revert: Linux UBSan is failing.\n\nThis CL touched quic_chromium_client_session.cc:4155 which is in the 2nd frame of the stack trace.\n\nFailure Link: https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20UBSan%20Tests/17829/blamelist\n\nOriginal change\u0027s description:\n\u003e Handle direct/non-probing migrations via QuicMigrationAttemptContext\n\u003e\n\u003e The goal is to handle telemetry for every kind of migration attempt via\n\u003e QuicMigrationAttemptContext, but currently QuicMigrationAttemptContext\n\u003e is only used by probing migrations. This requires instantiating a\n\u003e QuicChromiumPacketReader and QuicChromiumPacketWriter before\n\u003e ConnectAndConfigureSocket succeeds, but that has no consequences (and\n\u003e actually brings the direct/non-probing migration path closer to the\n\u003e probing one).\n\u003e\n\u003e While doing this, this also updates Migrate and FinishMigrate to\n\u003e MigrateWithoutProbing and FinishMigrateWithoutProbing. The current names\n\u003e are ambiguous: without peeking at the implementation it\u0027s not clear\n\u003e whether the code will trigger a probe or not.\n\u003e\n\u003e Bug: 557126867, b:450253948\n\u003e Change-Id: Ib7ada4910289a9210bcb7b08677475d6684d32cb\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8351785\n\u003e Commit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e Reviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1693332}\n\nBug: 557126867, b:450253948\nChange-Id: Ic92f9e1a96f63c0aaa92cdb2b13f6ca529310326\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8368899\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCommit-Queue: Fergal Daly \u003cfergal@chromium.org\u003e\nOwners-Override: Fergal Daly \u003cfergal@google.com\u003e\nAuto-Submit: Fergal Daly \u003cfergal@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693523}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 20e208d58293a5c4a970994a9e57c6d584960b2a\n" }, { "commit": "ca0321e1896c2e89d3e915b96bd0c8a256a71719", "tree": "2b93eb4f51c2a517202951bbcb7c2707e09a9d9f", "parents": [ "7abadbed5ee059ae3802bd21d8999cd8c7bec749" ], "author": { "name": "Fergal Daly", "email": "fergal@chromium.org", "time": "Tue Sep 08 03:49:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 04:16:53 2026" }, "message": "Revert \"Require a QuicMigrationAttemptContext to complete a migration\"\n\nThis reverts commit 510b3d586999e90cd4ee59191ca417af4eff09e1.\n\nReason for revert: Reverting to allow clean revert in https://chromium-review.googlesource.com/c/chromium/src/+/8368899\n\nI have checked in a local client that this allows a clean revert of that CL.\n\nFailure Link: https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20UBSan%20Tests/17829/blamelist\n\nOriginal change\u0027s description:\n\u003e Require a QuicMigrationAttemptContext to complete a migration\n\u003e\n\u003e MigrateToSocket represents the finish line for a migration attempt.\n\u003e Change it to accept, and consume, a QuicMigrationAttemptContext to make\n\u003e sure all migration paths are, and will, instantiate a\n\u003e QuicMigrationAttemptContext. This makes it extremely hard for migration\n\u003e attempts not to log their outcome.\n\u003e\n\u003e While doing this, since MigrateToSocket no longer accept directly a\n\u003e socket, rename it to CommitMigration.\n\u003e\n\u003e Note: this requires changing\n\u003e TestCloseSessionOnErrorLaterThenConnectionMigrationMigrateToSocket\n\u003e because QuicMigrationAttemptContext does not allow a nullptr\n\u003e QuicChromiumPacket{Reader, Writer}. So, now that CommitMigration\n\u003e requires a QuicMigrationAttemptContext, tests expectations have to be\n\u003e updated accordingly.\n\u003e\n\u003e Bug: 557126867, b:450253948\n\u003e Change-Id: I98fa3b3e43b88bdbce5b9b76f4ea9d84fe48dbe5\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8354363\n\u003e Commit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e Reviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1693342}\n\nBug: 557126867, b:450253948\nChange-Id: Ib16e1190836ab342c384203951dd5f39465b1017\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8367065\nCommit-Queue: Fergal Daly \u003cfergal@chromium.org\u003e\nAuto-Submit: Fergal Daly \u003cfergal@chromium.org\u003e\nOwners-Override: Fergal Daly \u003cfergal@google.com\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#1693521}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 87eaeeb868e6e48431cc33c3e92dac618104e791\n" }, { "commit": "7abadbed5ee059ae3802bd21d8999cd8c7bec749", "tree": "93409edfb3309d4f2ff053c9bb90316e20349842", "parents": [ "e2dd7a0c2ac9849e4c309b1ebb0b71ea4130f801" ], "author": { "name": "Ali Hijazi", "email": "ahijazi@chromium.org", "time": "Mon Sep 07 19:09:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 07 19:15:09 2026" }, "message": "[DBSC] Derive .well-known URLs strictly from canonical origins\n\nPreviously, RegistrationFetcherImpl constructed .well-known discovery\nURLs using GURL::ReplaceComponents on endpoint URLs. This introduced two\nsecurity issues:\n\n1. In the subdomain registration flow, replacing only the host and path\n on the subdomain fetcher endpoint preserved the subdomain\u0027s port,\n query parameters, and fragments. If an attacker or untrusted tenant\n controlled a service on a custom port on a subdomain (e.g. :9443),\n it could force Chrome to query the apex domain on that same custom\n port (:9443) rather than the apex origin\u0027s port. If the apex had an\n attacker-controllable service on that port, it could authorize the\n subdomain to register sessions for the entire site.\n\n2. In federated flows, query parameters and fragments from provider or\n relying party endpoints were unintentionally forwarded to the\n .well-known endpoints.\n\nThis change introduces CreateWellKnownUrl(const url::Origin\u0026) in\nsession_binding_utils to deterministically resolve\n\"/.well-known/device-bound-sessions\" from an authoritative url::Origin.\nBecause url::Origin only consists of (scheme, host, port), all query\nparameters, fragments, userinfo, and extraneous path components are\nguaranteed to be stripped, and the apex check strictly queries\nsession-\u003eorigin() rather than inheriting port/query state from the\nsubdomain. All three .well-known URL construction sites in\nRegistrationFetcher are updated to use this helper. Test fixtures in\nregistration_fetcher_unittest are parameterized to supply dynamic server\nports in scope origins, and regression tests are added to verify\nquery/fragment stripping.\n\nTAG\u003dagy\n\nFixed: 500532594\nChange-Id: I43aa32c99fa2a1fe63afc45a379c41970b0dbee1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8344409\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCommit-Queue: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693428}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c3341a0216ecfb6af25cdd85ff7d3e0a56578c12\n" } ], "next": "e2dd7a0c2ac9849e4c309b1ebb0b71ea4130f801" }