)]}' { "log": [ { "commit": "dc7873b18ab6f3003e0bed1dd856bf215fd6bbae", "tree": "af2ba948fea13cc91e928426e85e506b5d01f342", "parents": [ "7bde9c9a922b34b789b776c24c571bf85e03a8f4" ], "author": { "name": "Michael Achenbach", "email": "machenbach@chromium.org", "time": "Fri Nov 13 20:02:17 2026" }, "committer": { "name": "Michael Achenbach", "email": "machenbach@chromium.org", "time": "Fri Nov 13 20:04:05 2026" }, "message": "Revert \"[api] Rename callback DataV2() accessors to Data()\"\n\nThis reverts commit 7bde9c9a922b34b789b776c24c571bf85e03a8f4.\n\nReason for revert:\nhttps://ci.chromium.org/ui/p/v8/builders/ci/V8%20Win64%20-%20builder/31329/overview\n\nOriginal change\u0027s description:\n\u003e [api] Rename callback DataV2() accessors to Data()\n\u003e\n\u003e Start the deprecation of V2 accessors.\n\u003e\n\u003e TAG\u003dagy\n\u003e\n\u003e Bug: 559925519\n\u003e Change-Id: I1db8209bb3491f40004fba24bb88068d50dc77b3\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8794288\n\u003e Reviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\n\u003e Reviewed-by: Andreas Haas \u003cahaas@chromium.org\u003e\n\u003e Commit-Queue: Deepak Mohan (Robo) \u003chop2deep@gmail.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#112102}\n\nBug: 559925519\nChange-Id: I9f863920048cdff3777e8dd565640d1c3e0f044f\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8816081\nCommit-Queue: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nOwners-Override: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nAuto-Submit: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112103}\n" }, { "commit": "7bde9c9a922b34b789b776c24c571bf85e03a8f4", "tree": "d5e304c624ee751e5a4d54075af770691dbc6b9a", "parents": [ "3326253f14038ac43694628448eb3e83d5b7329e" ], "author": { "name": "deepak1556", "email": "hop2deep@gmail.com", "time": "Thu Nov 12 12:05:08 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 19:48:53 2026" }, "message": "[api] Rename callback DataV2() accessors to Data()\n\nStart the deprecation of V2 accessors.\n\nTAG\u003dagy\n\nBug: 559925519\nChange-Id: I1db8209bb3491f40004fba24bb88068d50dc77b3\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8794288\nReviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Andreas Haas \u003cahaas@chromium.org\u003e\nCommit-Queue: Deepak Mohan (Robo) \u003chop2deep@gmail.com\u003e\nCr-Commit-Position: refs/heads/main@{#112102}\n" }, { "commit": "3326253f14038ac43694628448eb3e83d5b7329e", "tree": "af2ba948fea13cc91e928426e85e506b5d01f342", "parents": [ "37455befd58007f7c5cf35ee47254d15296299cd" ], "author": { "name": "Rezvan Mahdavi Hezaveh", "email": "rezvan@chromium.org", "time": "Fri Nov 13 17:22:28 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 18:18:23 2026" }, "message": "Revert \"[test] Remove %ClearFunctionFeedback\"\n\nThis reverts commit 80bfddd5c39bf38755f6ba01ad8cd72e714d1f5f.\n\nReason for revert: Failed V8 Linux64 - official\n\nFailure Link: https://ci.chromium.org/ui/p/v8/builders/ci/V8%20Linux64%20-%20official/16052/overview\n\nOriginal change\u0027s description:\n\u003e [test] Remove %ClearFunctionFeedback\n\u003e\n\u003e Remove %ClearFunctionFeedback and its underlying feedback-vector\n\u003e clearing helpers, and update existing tests to either drop redundant\n\u003e calls or use `copyFunctionWithFreshFeedback` when distinct feedback is\n\u003e needed. Clearing feedback in-place on an existing function does not\n\u003e reset everything (such as queued concurrent Sparkplug compilations) and\n\u003e is only used by tests.\n\u003e\n\u003e Back `copyFunctionWithFreshFeedback` with a new\n\u003e %CopyFunctionWithFreshFeedback runtime helper that compiles a fresh\n\u003e uncached copy in the native context after checking that the function\n\u003e and its nested closures have no outer context accesses.\n\u003e\n\u003e Drive-by, rename FeedbackVector::ClearSlots to ClearICAndLiteralSlots,\n\u003e make it and FeedbackNexus::Clear return void, and remove\n\u003e FeedbackNexus::IsCleared.\n\u003e\n\u003e TAG\u003dagy\n\u003e CONV\u003df1772bc6-c5b2-4988-bdaf-6c494425f40b\n\u003e\n\u003e Bug: 552776871\n\u003e Change-Id: Ie55a6965a8f0603f591533ba64df77b7556c2e02\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8631313\n\u003e Reviewed-by: Igor Sheludko \u003cishell@chromium.org\u003e\n\u003e Commit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#112081}\n\nBug: 552776871\nChange-Id: If8e4072555e484b4225d082e69e73c2610993cb4\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8817352\nAuto-Submit: Rezvan Mahdavi Hezaveh \u003crezvan@chromium.org\u003e\nOwners-Override: Rezvan Mahdavi Hezaveh \u003crezvan@chromium.org\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCommit-Queue: Rezvan Mahdavi Hezaveh \u003crezvan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112101}\n" }, { "commit": "37455befd58007f7c5cf35ee47254d15296299cd", "tree": "1e4593d2020e39ae0962cbfdb3a68f88178379f7", "parents": [ "64dc58df6aae3365ae7cf5b370f7cdbfb97788d5" ], "author": { "name": "Igor Sheludko", "email": "ishell@chromium.org", "time": "Fri Nov 13 13:57:26 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 17:33:12 2026" }, "message": "[runtime] Limit recursion depth in HeapObject::HeapObjectShortPrint\n\nShortPrint of various object types (e.g. JSPrimitiveWrapper, Tuple2,\nCell, PropertyCell, ContextCell, etc.) recursively calls ShortPrint on\nnested tagged fields. With in-sandbox memory corruption, an attacker can\nconstruct arbitrarily deep chains or cycles of such objects to exhaust\nthe native stack during diagnostic printing.\n\nTAG\u003dagy\nCONV\u003d37a8265c-0a70-4696-9bbb-07d79e940987\n\nBug: 582140839\nChange-Id: I79e8d73ab5a775fd54e49394d3939b65e272c46e\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8817010\nReviewed-by: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCommit-Queue: Igor Sheludko \u003cishell@chromium.org\u003e\nAuto-Submit: Igor Sheludko \u003cishell@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112100}\n" }, { "commit": "64dc58df6aae3365ae7cf5b370f7cdbfb97788d5", "tree": "3c3303c9c6f282d14419c8d70e5c25051083cb9c", "parents": [ "9a46257e37ba5242ce7651edadda66a99a4350ae" ], "author": { "name": "Milad Fa", "email": "mfarazma@ibm.com", "time": "Fri Nov 13 13:13:23 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 17:27:34 2026" }, "message": "PPC/s390: [cleanup] Enable readability-static-accessed-through-instance\n\nPort commit 1c39fa862bff72f9837870c74dd9445244256750\n\nOriginal Commit Message:\n\n Enable `readability-static-accessed-through-instance` in `.clang-tidy`,\n update existing call sites to qualify static members by class name, and\n remove instance variables left unused.\n\n For read-only flags, `FLAG_READONLY` previously used\n `static constexpr FlagValue`, causing `v8_flags.\u003cflag\u003e` reads to trip\n this check even for flags that are mutable in other build configs.\n Declare each read-only flag as an empty non-static struct with\n `V8_NO_UNIQUE_ADDRESS` instead, to avoid storage overhead while keeping\n uniform `v8_flags.\u003cflag\u003e` accesses.\n\nChange-Id: I2094209b71031b1fdc51662f0180e703af81b235\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8811384\nReviewed-by: John \u003cjunyan1@ibm.com\u003e\nCommit-Queue: Milad Farazmand \u003cmfarazma@ibm.com\u003e\nCr-Commit-Position: refs/heads/main@{#112099}\n" }, { "commit": "9a46257e37ba5242ce7651edadda66a99a4350ae", "tree": "4cdb52959cda2dc4fd0222d5af17d2a24a4d6e82", "parents": [ "1fe9f0664e43781e474c50df3639eef00d6441c0" ], "author": { "name": "v8-ci-autoroll-builder", "email": "v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 16:07:21 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 17:26:30 2026" }, "message": "Update V8 DEPS (trusted)\n\nRolling agents/internal: https://chrome-internal.googlesource.com/chrome/agents-internal/+log/4fd2920..3573934\n\nRolling build: https://chromium.googlesource.com/chromium/src/build/+log/7f08fef..0abf0cb\n\nRolling buildtools: https://chromium.googlesource.com/chromium/src/buildtools/+log/80d023d..a0ce846\n\nRolling buildtools/linux64: git_revision:24d41137fac7ea2828590181ebd8284fe7437253..git_revision:311003f8ea3500f8ce87c43ff61aec6f4066dac2\n\nRolling buildtools/mac: git_revision:24d41137fac7ea2828590181ebd8284fe7437253..git_revision:311003f8ea3500f8ce87c43ff61aec6f4066dac2\n\nRolling buildtools/win: git_revision:24d41137fac7ea2828590181ebd8284fe7437253..git_revision:311003f8ea3500f8ce87c43ff61aec6f4066dac2\n\nRolling third_party/abseil-cpp: https://chromium.googlesource.com/chromium/src/third_party/abseil-cpp/+log/cc7c444..ecb00cc\n\nRolling third_party/boringssl/src: https://boringssl.googlesource.com/boringssl/+log/583980e..148a7b1\n\nRolling third_party/catapult: https://chromium.googlesource.com/catapult/+log/8480c1b..5b55574\n\nRolling third_party/depot_tools: https://chromium.googlesource.com/chromium/tools/depot_tools/+log/1afcf07..97da848\n\nRolling third_party/googletest/src: https://chromium.googlesource.com/external/github.com/google/googletest/+log/2499058..1aa39fe\n\nRolling third_party/libc++/src: https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libcxx/+log/d816ed0..64f64c1\n\nRolling third_party/libc++abi/src: https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libcxxabi/+log/de3f732..a1e7b02\n\nRolling gcs:chromium-browser-clang/Linux_x64/clang-android-runtime-library: Linux_x64/clang-android-runtime-library-llvmorg-24-init-17044-gc3223914-1.tar.xz,32ee6479e6758449e8f333067f7835f2245d5ee01da2aa4374a1997e9dfc1467,6184780,1793384407072490..Linux_x64/clang-android-runtime-library-llvmorg-24-init-17044-gc3223914-12.tar.xz,f9862e1a53722c2e4df2c454e3d019aba0e3e210557d194cf2b727be6c719d31,6179536,1794496976211434\n\nRolling gcs:chromium-browser-clang/Linux_x64/clang: Linux_x64/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,4312432fd57f94766b62264161ec4afabeaca066fc812cf038efa88c154ef4da,58862184,1793384402930380..Linux_x64/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,68b281e8f8bc8ee597d947de336287cacde692aac010e811bd00a8eeee68db5e,58871192,1794496973381336\n\nRolling gcs:chromium-browser-clang/Linux_x64/clang-tidy: Linux_x64/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,6d4e813a19448c111c955316a2572c179a15f2f3062762a14064c782f90a01d2,15217164,1793384403254249..Linux_x64/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,2523229775f676872f15415ad170a60eb875fe5667309c41abb3a08492dcaa3a,15221252,1794496973533642\n\nRolling gcs:chromium-browser-clang/Linux_x64/clangd: Linux_x64/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,2d1d3d1212be660a26d0d554f449756be0ea5e03bab0df0598bf23cb140956f7,15589656,1793384403591262..Linux_x64/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,863ec435f085b494722d578c337bc18afdba43231a0292682d0cf0f04793abbd,15586032,1794496973611667\n\nRolling gcs:chromium-browser-clang/Linux_x64/llvm-code-coverage: Linux_x64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,a11f7b0a33accd98f3555e0591226745cc10e341141ed99eca0928accf0621a3,2436360,1793384403738488..Linux_x64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,df9b73d6c5cb5ad29789b33bf510b358ead82867709fbc221e6a986745599ff4,2435848,1794496973837505\n\nRolling gcs:chromium-browser-clang/Linux_x64/llvmobjdump: Linux_x64/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,0060c82105b8062ea0f405a087d035248748b75bf46ea3dc1050b8b5a479dbd6,6027024,1793384403555966..Linux_x64/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,d70cd6c27c4e6aae13ef1eec9472b7cd0554251b8589c0e1e28678f804e74744,6020100,1794496973671184\n\nRolling gcs:chromium-browser-clang/Mac/clang: Mac/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,595970106910ebbfa2d1051661a79c7fa728ee6ec211283b0e01909f009b4d1e,55194960,1793384415945083..Mac/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,66a03cb30beb90745ed85b2f7135d23164a53d8b229f8ae7ff51c4f1d8973e72,55484312,1794496983203107\n\nRolling gcs:chromium-browser-clang/Mac/clang-mac-runtime-library: Mac/clang-mac-runtime-library-llvmorg-24-init-17044-gc3223914-1.tar.xz,48f1a4d40fc7463441f9e8a9ddf54b45a3cafdac6cf3ab6075758ed23ded797a,998172,1793384425501560..Mac/clang-mac-runtime-library-llvmorg-24-init-17044-gc3223914-12.tar.xz,cc610d5a1c46f9b3489e25c784c35c176ddc367e9e016e5b0a4a80224cb252c2,1286220,1794496991189878\n\nRolling gcs:chromium-browser-clang/Mac/clang-tidy: Mac/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,cfa97d32b7f7b343c74dc55161cf014fce4c1eebb8a27df95ed584ddc2a6e76c,14480288,1793384416238915..Mac/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,ca158f5311a9bb876afd587e203b91e713269075f709cbab14dfbeada272bbd2,14475076,1794496983331074\n\nRolling gcs:chromium-browser-clang/Mac/clangd: Mac/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,3b68fc2802e86cc6d5b9f38f10467009b20dd9945322c9388da97da17291cb2e,15585584,1793384415828461..Mac/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,8aebe567b3f58aa0102d21c8d8c9c9d0527257d883d7f4ff384f31a0632e1e60,15579396,1794496983499748\n\nRolling gcs:chromium-browser-clang/Mac/llvm-code-coverage: Mac/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,3c8eea01decf23c09930c5c90d8ce71c0c4e6c16c55745c3690c36d844b3acd5,2315240,1793384416331029..Mac/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,cccc011d04b45d8f9461e2218b0cbafb9b400e32fb44e4a7ba7bdd8de9534c21,2315676,1794496983624423\n\nRolling gcs:chromium-browser-clang/Mac/llvmobjdump: Mac/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,fec5be8f8004d80edd6e296f53cf4778c242bfac5b1ac6c0e9ea4b78dd1eb0c8,5594628,1793384416226284..Mac/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,3c314cbc96f6b5bea8c193e952e3a219ed779af3129ae2378d9ef15a31bd2c41,5599080,1794496983506009\n\nRolling gcs:chromium-browser-clang/Mac_arm64/clang: Mac_arm64/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,f9294be515a0096120c497bdb70374e3846baa244f039a68444ff44899510c74,45274068,1793384427206205..Mac_arm64/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,cdb4b1ef5dfcca7cf14a0ce2e93e3fcd0bb3f0cfcf3b812c982cb9aa79ac46d5,45561808,1794496992604087\n\nRolling gcs:chromium-browser-clang/Mac_arm64/clang-tidy: Mac_arm64/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,b795d7826fb1fc3bef96a1713e8044b4913de7c92236d34c033e6a8f32777203,12358856,1793384427590392..Mac_arm64/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,6bd2c8fee8a1af026117ab89d3afd28b4354f6266d529b0e9fff773396b5000c,12340744,1794496992722678\n\nRolling gcs:chromium-browser-clang/Mac_arm64/clangd: Mac_arm64/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,9f3f32d406487c6b0f92bb24b1860ceb711b3e37a784625f75a75a548a34ec17,12333736,1793384427386293..Mac_arm64/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,336c619186bfcbce3979a14556cc0459905b4ed899ffdfd998c272a954b83106,12336400,1794496992833917\n\nRolling gcs:chromium-browser-clang/Mac_arm64/llvm-code-coverage: Mac_arm64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,c0fa17ce0edaa3986bd5d44e0f40a133fbef4824f75497464f9744a9e4675c61,1903036,1793384427772052..Mac_arm64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,57026d5f54a7698589838082fd831dd4d676a852c1782c9a8866a47e35d30b58,1902844,1794496993051288\n\nRolling gcs:chromium-browser-clang/Mac_arm64/llvmobjdump: Mac_arm64/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,208ced05108b28a843fd0c9835d8995ce78a8f32e1e809115e39909c43afb64d,5283112,1793384427695807..Mac_arm64/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,01fda54469f3c444afd3aa79ae28ea59b45c72a99dd1d3cb564aff2f80d314ef,5283824,1794496992910479\n\nRolling gcs:chromium-browser-clang/Win/clang: Win/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,357f648893f20ac66fac54d8d6b993c7077cffb06146083c646913d89e53636d,53275320,1793384439281141..Win/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,13fe3aef441c275bfae76a282f36743b4b91f7b430fabe3e7442a47952ed5098,53270236,1794497002392763\n\nRolling gcs:chromium-browser-clang/Win/clang-tidy: Win/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,06d6b936e51347b63a363da75e1ba14045d060f2b2ec47944761b5ebe7a3b96c,15525416,1793384439306896..Win/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,4033ab43377a304248a15d3456eb93c4f197aecd635a7a88d398539e31f815b3,15514624,1794497002450054\n\nRolling gcs:chromium-browser-clang/Win/clang-win-runtime-library: Win/clang-win-runtime-library-llvmorg-24-init-17044-gc3223914-1.tar.xz,164186406bb6e504d5fb63be872e311a67a70c5d07fbc6bac6ec927d2c7c5f01,2713256,1793384448865528..Win/clang-win-runtime-library-llvmorg-24-init-17044-gc3223914-12.tar.xz,65e6c303bae4700cd7f94558c9f9a4c240ba52aebbc42ea48269bbf3b569f858,2713480,1794497010862081\n\nRolling gcs:chromium-browser-clang/Win/clangd: Win/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,74c47234002a5a918b91108c8587fdf97177e7f498ac5c38e00ee223c3a456ff,15977568,1793384439340015..Win/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,9cbfbe91f22f807c11fd2b11af99a387a3e1564f4110dc0d15f0bdf80796b10a,15962412,1794497002501378\n\nRolling gcs:chromium-browser-clang/Win/llvm-code-coverage: Win/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,072fd0708bd28d18ad713495b1489d41d77b092242330125c6995347ef866d03,2617424,1793384439683656..Win/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,7082829cd007c6b761ca378d7d44176e9d4e7cfbdf5a16b9ec1b0542717f0077,2618392,1794497002683440\n\nRolling gcs:chromium-browser-clang/Win/llvmobjdump: Win/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,55a6c6c8c141a1726ee4cabf6340fbb983d838cd860b82adf571977594e99e4a,6129952,1793384439573178..Win/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,4204e2a26cd87cd26393562b606f2207d3bf4be82f6d1e92dacd78e4d53a88be,6127592,1794497002570442\n\nRolling third_party/llvm-libc/src: https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libc/+log/8002d03..47668e3\n\nRolling third_party/partition_alloc: https://chromium.googlesource.com/chromium/src/base/allocator/partition_allocator/+log/2d63c19..961b259\n\nRolling third_party/perfetto: https://chromium.googlesource.com/external/github.com/google/perfetto/+log/e078cba..1103173\n\nRolling third_party/rust: https://chromium.googlesource.com/chromium/src/third_party/rust/+log/ad98107..eae40af\n\nRolling tools/clang: https://chromium.googlesource.com/chromium/src/tools/clang/+log/b8732dc..5509e65\n\nRoll created at https://cr-buildbucket.appspot.com/build/8665234311574759617\n\nChange-Id: Ib048d7132a290a865807265cb4cd33c94ec37bf8\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8813361\nCommit-Queue: v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com \u003cv8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com\u003e\nBot-Commit: v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com \u003cv8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#112098}\n" }, { "commit": "1fe9f0664e43781e474c50df3639eef00d6441c0", "tree": "86fe37f04c619dc51a02befea43b9085f30a1359", "parents": [ "6eb2f43d0b3937c10fe6cbba2e667853bc7f5699" ], "author": { "name": "Michael Lippautz", "email": "mlippautz@chromium.org", "time": "Tue Nov 10 15:50:28 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 17:25:25 2026" }, "message": "[heap] Use SafeHeapObjectSize in large spaces\n\nRely on SafeHeapObjectSize when querying heap object sizes in large\nspaces and during mark-compact page shrinking and sweeping.\n\nTAG\u003dagy\nCONV\u003da65348d7-d933-4a98-903d-825694e4cc9c\n\nFixed: 582864257\nChange-Id: I9b84a8714c24e5dc808c585580c1f10c08bbb9e8\nNo-Regression-Test: Merely hardening\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8781204\nReviewed-by: Dominik Inführ \u003cdinfuehr@chromium.org\u003e\nCommit-Queue: Dominik Inführ \u003cdinfuehr@chromium.org\u003e\nAuto-Submit: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112097}\n" }, { "commit": "6eb2f43d0b3937c10fe6cbba2e667853bc7f5699", "tree": "5ca0d7b141682aee12dae4e45df57ce351342b9b", "parents": [ "767dd2459c8b7e2ef0c4c3f21426261a9f528f9f" ], "author": { "name": "Olivier Flückiger", "email": "olivf@chromium.org", "time": "Fri Nov 13 15:24:16 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 17:24:19 2026" }, "message": "[maglev] Relax kConst literal store DCHECK for __proto__ transitions\n\nIn TryBuildStoreField, the DEBUG check for kStoreInLiteral to a\nkConst field on an InlinedAllocation assumed the VirtualObject slot\nmatched field_representation on access_info. When an object literal\nchanges its map after CreateObjectLiteral (e.g. via __proto__ and\nRuntime::kInternalSetPrototype) or is generalized in-place\nconcurrently, the boilerplate VirtualObject still reflects the\ninitial boilerplate representation. Check that the slot holds any\nvalid uninitialized boilerplate value.\n\nFixed: 583727151\nTAG\u003dagy\nCONV\u003d8807d82c-6b68-4932-9f6f-1349428cf2ad\n\nChange-Id: I0a591f00a53ac429045cdce7b936c7d181d608c5\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8816951\nReviewed-by: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCommit-Queue: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nAuto-Submit: Olivier Flückiger \u003colivf@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112096}\n" }, { "commit": "767dd2459c8b7e2ef0c4c3f21426261a9f528f9f", "tree": "87de417212d67d3eb29f5f06256cae3288fa5bb1", "parents": [ "b8456807b5ee7860c856461165a475697903ef33" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Fri Nov 13 15:27:09 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 17:23:14 2026" }, "message": "[maglev] Inline Number.isInteger\n\nAdd MaglevReducer::TryReduceNumberIsInteger to inline Number.isInteger\ncalls both during graph building and post-inlining in the optimizer:\n- Return true directly for Int32, Uint32, IntPtr, and Smi inputs,\n constant-fold known numeric/undefined constants, and return false when\n the input type cannot be a Number.\n- For Float64, HoleyFloat64, and known-Number inputs (via\n GetFloat64ForToNumber), check\n Float64Subtract(val, Float64Round(val, kTrunc)) \u003d\u003d 0.0 (which\n evaluates to false for NaN, +/-Infinity, and HoleyFloat64 holes).\n- For generic Tagged inputs, emit a Smi/HeapNumber Select diamond.\n\nTAG\u003dagy\nCONV\u003d106a3301-83e9-4c2a-9183-c4817e65e4ed\n\nBug: 42204525, 402464049\nChange-Id: I1ca33d5739ca46114334df136d5c111b58922f48\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815155\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCommit-Queue: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nReviewed-by: Marja Hölttä \u003cmarja@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112095}\n" }, { "commit": "b8456807b5ee7860c856461165a475697903ef33", "tree": "a423276f561ef23f67baab57ac7406a1042da702", "parents": [ "483d2fd45b88fada2a4c208a45e46e3e420edb2e" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Fri Nov 13 14:49:18 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 15:18:28 2026" }, "message": "[maglev] Unwrap CallArguments inputs in kNodeView mode\n\nDuring graph building (Storage::kOwned), CallArguments exposes raw\nuntagged nodes directly from the interpreter frame, whereas Call and\nCallKnownBuiltin nodes wrap untagged arguments in lossless tagging\nconversions and non-eagerly inlined returns in Identity/ReturnedValue.\n\nCall Unwrap() in CallArguments::receiver() and CallArguments::operator[]\nin Storage::kNodeView mode so MaglevReducer builtin reductions invoked\nfrom MaglevGraphOptimizer::VisitCall (such as Math.trunc, Math.abs,\nMath.imul, Math.fround, and Object.is) see the underlying untagged or\nunwrapped nodes instead of bailing out on !CanSpeculateCall() \u0026\u0026\nargs[0]-\u003eis_tagged().\n\nTAG\u003dagy\nCONV\u003d106a3301-83e9-4c2a-9183-c4817e65e4ed\n\nBug: 42204525\nChange-Id: I187c993ac6b193ba0c60ea218f4b2f6c8352ec63\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8814997\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nReviewed-by: Marja Hölttä \u003cmarja@chromium.org\u003e\nCommit-Queue: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112094}\n" }, { "commit": "483d2fd45b88fada2a4c208a45e46e3e420edb2e", "tree": "0140c3748c753091f8a49672a8b6160837cd5cfc", "parents": [ "aa01e143a2b0b529a2a329a3346561638d01a487" ], "author": { "name": "Jakob Kummerow", "email": "jkummerow@chromium.org", "time": "Fri Nov 13 14:30:54 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 15:14:49 2026" }, "message": "[turboshaft] Emit identity for call-free tagged bitcasts\n\nUnconditionally emitting kArchNop with DefineSameAsFirst in\nVisitBitcastTaggedToWord and VisitBitcastSmiToWord allocates a new\nvirtual register whose live range overlaps with its input whenever the\ninput remains live after the bitcast (e.g. across TaggedIsSmi checks in\nbuiltins), preventing coalescing and bloating builtins by ~175 KB.\n\nUse EmitIdentity for kHeapObject bitcasts and whenever all (direct or\ntransitive renamed/covered) uses of the bitcast are in the same block at\nthe same effect level, guaranteeing no call or allocation can intervene.\n\nTAG\u003dagy\nCONV\u003d7e3958ca-2898-4418-b1c5-33a8a72dab96\n\nBug: 581130652\nChange-Id: Ie24793550b4f4f45e9e2944958aa65155422bb8a\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8782833\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCommit-Queue: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112093}\n" }, { "commit": "aa01e143a2b0b529a2a329a3346561638d01a487", "tree": "d5430cb0d2c7a4350a4470d4014bf37ae48388a5", "parents": [ "b1da3a1de19c59dc572653c80abdc1e41f44c79e" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Fri Nov 13 14:05:40 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 14:54:41 2026" }, "message": "[maglev] Emit plain Jump on peeled loop backedge in MaglevLoopPeeler\n\nMaglevLoopPeeler::CloneLoopBodyControl previously replaced every peeled\nloop\u0027s backedge JumpLoop with a CheckpointedJump and cloned the\nJumpLoop\u0027s eager DeoptFrame onto it.\n\nHowever, CheckpointedJump on a loop\u0027s forward edge is only used by\n--maglev-speculative-hoist-phi-untagging (disabled by default). Emitting\na CheckpointedJump on the peeled backedge unnecessarily keeps cloned\nloop-body values alive in an eager DeoptFrame, preventing\nTruncationPhase and RecomputePhiUseHintsProcessor from truncating\noperations in the peeled iteration.\n\nChange-Id: I5c5d88cbc7b78e0b74043b5efd0bcbd5b1259a9a\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815414\nCommit-Queue: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112092}\n" }, { "commit": "b1da3a1de19c59dc572653c80abdc1e41f44c79e", "tree": "11afd4d0aa9fa1ba7a0eaf5c174ee511209a8394", "parents": [ "ad403516c8fc5df730ae693a2747c63a63604e12" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Fri Nov 13 14:13:18 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 14:53:36 2026" }, "message": "[turbolev][maglev] Skip optimized_out registers in GeneratorStore\n\nThis matches Turbofan behaviour.\n\nDrive-by: narrow the generator context store representation to TaggedPointer.\nBug: 42204525\nChange-Id: I9625e1032841841987b556053d55942796956b33\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8814756\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCommit-Queue: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112091}\n" }, { "commit": "ad403516c8fc5df730ae693a2747c63a63604e12", "tree": "d53cf8ccebaf7b8d1d2ab928922a3e5344c4afc0", "parents": [ "5f1ae3538930e2cb68c278ed4b2c36ff90cc1df1" ], "author": { "name": "Michael Lippautz", "email": "mlippautz@chromium.org", "time": "Fri Nov 13 13:14:00 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 14:42:03 2026" }, "message": "[heap] Avoid untrusted page marking flag in range write barriers\n\nSwitch range write barriers and range moves/copies to check marking\nstate via IsolateData and TrustedHeapLayout::InWritableSharedSpace\ninstead of reading the untrusted MemoryChunk marking flag.\n\nTAG\u003dagy\nCONV\u003dadc272cb-4d6b-47de-8e45-c9badb10b9a5\n\nBug: 429538831\nChange-Id: I2da890cf5998b75266b1d778c306c32b84e6fc7b\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8816537\nReviewed-by: Dominik Inführ \u003cdinfuehr@chromium.org\u003e\nCommit-Queue: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112090}\n" }, { "commit": "5f1ae3538930e2cb68c278ed4b2c36ff90cc1df1", "tree": "1a3934f019815355b391378ea8ba579577d1e7fe", "parents": [ "a27b2be6b49ba1ec4a1670e71f821f18562e9f35" ], "author": { "name": "Olivier Flückiger", "email": "olivf@chromium.org", "time": "Wed Nov 11 15:26:14 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 14:40:44 2026" }, "message": "[debug] Deopt topmost frame in Debug::ProcessCompileEvent\n\nHoist the topmost-frame deoptimization from Debug::HandleDebugBreak into\nDeoptimizer::DeoptimizeTopmostFrame and also call it before opening\nAllowJavascriptExecution in Debug::ProcessCompileEvent when JS execution\nis disallowed or an API interrupt is executing. Also exclude JSObjects\nwith interceptors from the EnterV8NoScriptScope fast-path in\nv8::Object::DefineOwnProperty, and add DCHECKs that JS execution is\nallowed at side-effecting API entry points.\n\nTAG\u003dagy\nCONV\u003df36194df-85fb-4436-a5dd-252cfa445949\n\nBug: 576333024\nChange-Id: I518877c364c3515b464fd107552a2dd03e223262\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8670428\nAuto-Submit: Olivier Flückiger \u003colivf@chromium.org\u003e\nCommit-Queue: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nReviewed-by: Simon Zünd \u003cszuend@chromium.org\u003e\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112089}\n" }, { "commit": "a27b2be6b49ba1ec4a1670e71f821f18562e9f35", "tree": "8f91480ef523b4be413a96386b7a30fe6bb45da8", "parents": [ "9eab1a7e27e6ad4ba3d2795a5a5d997fbbb1592e" ], "author": { "name": "Leszek Swirski", "email": "leszeks@chromium.org", "time": "Fri Nov 13 11:50:36 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 14:10:44 2026" }, "message": "[gcmole] Track SlotBase wrappers and proxy references\n\nPropagate raw member address provenance through SlotBase subclasses\n(such as ObjectSlot, FullObjectSlot, OffHeapObjectSlot, and\nUnalignedSlot) when constructed from or returned by an on-heap object\nor member (`ObjectSlot(\u0026obj-\u003efield_)`, `obj-\u003eRawField(offset)`), while\nleaving stack-backed slots (`FullObjectSlot(\u0026local_tagged)`) untracked.\nUnconditionally track EmbedderDataSlot alongside ExternalPointerSlot,\nCppHeapPointerSlot, and TrustedPointerSlot (which never wrap stack\nhandles), and prevent one-sided branch rescue from resurrecting\nunconditionally type-tracked variables across control-flow joins. Also\ntreat nested `SlotBase::Reference` proxy classes as non-rebindable\nreferences whose `operator\u003d` writes through the underlying slot address.\n\nTAG\u003dagy\nCONV\u003db28ddaf1-e172-44f5-8ec2-f06f4134b6e9\n\nBug: 571823300\nChange-Id: I04dd4621b147f5800cc93e2c565827cd6f0f6c37\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8714403\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nAuto-Submit: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Maksim Ivanov \u003cemaxx@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#112088}\n" }, { "commit": "9eab1a7e27e6ad4ba3d2795a5a5d997fbbb1592e", "tree": "bbfa99eb78eb74124e657abaaa6e9b23e91c27ea", "parents": [ "f988d20832020b9174133ec9e1634dd35a8fa35c" ], "author": { "name": "Leszek Swirski", "email": "leszeks@chromium.org", "time": "Fri Nov 13 11:31:04 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 14:09:40 2026" }, "message": "[gcmole] Pass BindingDecl* directly to Environment::MDefine\n\nhttps://crrev.com/c/8597446 changed Environment::MDefine to take a\nconst clang::ValueDecl* instead of a variable name string, while\nhttps://crrev.com/c/8776108 had just landed a call passing\n`binding-\u003egetNameAsString()` for structured bindings. Pass `binding`\ndirectly to fix the libgcmole.so build.\n\nTAG\u003dagy\nCONV\u003db28ddaf1-e172-44f5-8ec2-f06f4134b6e9\n\nBug: 571823300\nChange-Id: Icc5d1246368e42dc4d304b617ea2614da0feb3af\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8813155\nAuto-Submit: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Maksim Ivanov \u003cemaxx@google.com\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112087}\n" }, { "commit": "f988d20832020b9174133ec9e1634dd35a8fa35c", "tree": "2c521120279f813c9fc578058ce37e891e7f90e3", "parents": [ "9bb4d39695acb6e9237f4f00c6cf2fb920881ced" ], "author": { "name": "Darius Mercadier", "email": "dmercadier@chromium.org", "time": "Fri Nov 13 13:28:46 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 14:07:45 2026" }, "message": "[turbolizer] Explicitly list ts/tsx patterns in rollup.config.js\n\nrollup-plugin-typescript2@0.32.1 defaults to `include: [\"*.ts+(|x)\",\n\"**/*.ts+(|x)\"]`. picomatch 2.3.2+ treats repeated extglobs with an\nempty branch (`+(|x)`) as a ReDoS risk and escapes them literally,\ncausing the TypeScript plugin to skip `.ts` files when dependencies are\ninstalled without package-lock.json (as in the v8/tools deploy\nworkflow).\n\nPass explicit `*.ts`, `**/*.ts`, `*.tsx`, and `**/*.tsx` patterns so\nRollup always compiles TypeScript files regardless of picomatch version.\n\nTAG\u003dagy\nCONV\u003d78db7016-94d6-4ac2-b694-debea8853e02\n\nChange-Id: Ibff9938e92cf8beb2dfe4f95ac7f57839b2bca37\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8816871\nReviewed-by: Camillo Bruni \u003ccbruni@chromium.org\u003e\nCommit-Queue: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCommit-Queue: Camillo Bruni \u003ccbruni@chromium.org\u003e\nAuto-Submit: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112086}\n" }, { "commit": "9bb4d39695acb6e9237f4f00c6cf2fb920881ced", "tree": "043b78bdd720e91aaacef9fcf179e0603b59a7c1", "parents": [ "74785bd4daaae8225c58d86504dae720806d9751" ], "author": { "name": "Jakob Kummerow", "email": "jkummerow@chromium.org", "time": "Fri Nov 13 12:49:21 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 13:40:46 2026" }, "message": "[build] Temporarily ignore std::allocator in tools/cfi/ignores.txt\n\nPort the temporary libc++ std::allocator CFI cast suppression from\nhttps://crrev.com/c/8796912 to V8\u0027s CFI ignorelist to unblock rolling\nlibc++.\n\nTAG\u003dagy\nCONV\u003d16a3df44-cbf5-4546-a0ff-9134a8842e82\n\nBug: 584386513\nChange-Id: Ic1923ec25aa0982ced67462e65f276d90d7491a0\nFixed: 585369358\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815137\nCommit-Queue: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nReviewed-by: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nAuto-Submit: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nCommit-Queue: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112085}\n" }, { "commit": "74785bd4daaae8225c58d86504dae720806d9751", "tree": "3e456b36f1a033eb7ddd7877c54bcef277a99030", "parents": [ "687bac3f380c3a2776066b58c4afe3b163956084" ], "author": { "name": "Junliang Yan", "email": "junyan1@ibm.com", "time": "Thu Nov 12 22:14:23 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 13:36:53 2026" }, "message": "ppc64: use temps under AdvanceCurrentPosition\n\nReplace the hard-coded r0 used to materialize a large constant advance\nwith a scratch register from UseScratchRegisterScope\n\nIT: 8\nChange-Id: Ifbe703de140d0a5a85d0872384017858bc5b1eae\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8785786\nAuto-Submit: John \u003cjunyan1@ibm.com\u003e\nCommit-Queue: Milad Farazmand \u003cmfarazma@ibm.com\u003e\nReviewed-by: Milad Farazmand \u003cmfarazma@ibm.com\u003e\nCr-Commit-Position: refs/heads/main@{#112084}\n" }, { "commit": "687bac3f380c3a2776066b58c4afe3b163956084", "tree": "0daa4376f826d9480b7793c003143e7b950ba96d", "parents": [ "3918bddfa4a97bf0379f1bbbe74418e460f35af7" ], "author": { "name": "Leszek Swirski", "email": "leszeks@chromium.org", "time": "Fri Nov 06 12:21:40 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 13:08:52 2026" }, "message": "[execution] DCHECK frame-type marker invariants on JS frames\n\nAssert in StackFrameIterator::ComputeStackFrameType that Baseline and\nTurboFan JS frames never carry a StackFrame::Type marker in their\ncontext slot, and that interpreter/baseline entry trampoline frames only\ncarry an INTERNAL marker (analogous to Maglev frames calling into the\nruntime for tiering or stack checks). This makes frame-marker\ncorruptions fail immediately in debug builds instead of misclassifying\nJS frames during stack iteration.\n\nTAG\u003dagy\nCONV\u003dafba8481-2953-43f8-96ea-f77f55676397\n\nBug: 581085117\nChange-Id: Ib9438fd57bb888711236f2a0df9f301230c796b6\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8754047\nAuto-Submit: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Patrick Thier \u003cpthier@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112083}\n" }, { "commit": "3918bddfa4a97bf0379f1bbbe74418e460f35af7", "tree": "004fa090f0423657f181e87fe3fcd42b04407011", "parents": [ "80bfddd5c39bf38755f6ba01ad8cd72e714d1f5f" ], "author": { "name": "Zhao Jiazhong", "email": "zhaojiazhong-hf@loongson.cn", "time": "Fri Nov 13 02:25:22 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 12:22:02 2026" }, "message": "[intl][sandbox] Avoid random mmap hint for ICU data file\n\nInitializeICU() maps icudtl.dat on POSIX with a randomized mmap hint. On\n39-bit VA targets such as LoongArch64 2K3000, the ~10MB mapping can land\nin the only hole large enough for the fully reserved V8 sandbox, forcing\nthe partial fallback and a secure-mode startup failure in d8.\n\nMake MemoryMappedFile::open() hint-aware on POSIX and map ICU data with\na nullptr hint so the kernel places it in the regular high mmap region.\n\nChange-Id: I42a667c86d560c7c7befecab43912eaf34fab520\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8788428\nReviewed-by: Igor Sheludko \u003cishell@chromium.org\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\nAuto-Submit: Zhao Jiazhong \u003czhaojiazhong-hf@loongson.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112082}\n" }, { "commit": "80bfddd5c39bf38755f6ba01ad8cd72e714d1f5f", "tree": "f951f163cc4120ab5330d840071328e21e993feb", "parents": [ "5da0571b408319bcb87a685c7e7a3bccd08aac0e" ], "author": { "name": "Leszek Swirski", "email": "leszeks@chromium.org", "time": "Fri Nov 13 11:27:40 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 12:07:55 2026" }, "message": "[test] Remove %ClearFunctionFeedback\n\nRemove %ClearFunctionFeedback and its underlying feedback-vector\nclearing helpers, and update existing tests to either drop redundant\ncalls or use `copyFunctionWithFreshFeedback` when distinct feedback is\nneeded. Clearing feedback in-place on an existing function does not\nreset everything (such as queued concurrent Sparkplug compilations) and\nis only used by tests.\n\nBack `copyFunctionWithFreshFeedback` with a new\n%CopyFunctionWithFreshFeedback runtime helper that compiles a fresh\nuncached copy in the native context after checking that the function\nand its nested closures have no outer context accesses.\n\nDrive-by, rename FeedbackVector::ClearSlots to ClearICAndLiteralSlots,\nmake it and FeedbackNexus::Clear return void, and remove\nFeedbackNexus::IsCleared.\n\nTAG\u003dagy\nCONV\u003df1772bc6-c5b2-4988-bdaf-6c494425f40b\n\nBug: 552776871\nChange-Id: Ie55a6965a8f0603f591533ba64df77b7556c2e02\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8631313\nReviewed-by: Igor Sheludko \u003cishell@chromium.org\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112081}\n" }, { "commit": "5da0571b408319bcb87a685c7e7a3bccd08aac0e", "tree": "d9f1366f7f886aa3b87f7de994e3e5aec8217f61", "parents": [ "888c01c1417992f16b05f50b1c3f3e2cf11ae7dc" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Thu Nov 12 16:53:25 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 11:48:25 2026" }, "message": "[turboshaft] Fix nested allocation removal in LateEscapeAnalysis\n\nWhen an outer allocation is removed, `MarkToRemove` kills its stores\n(replacing them in-place with `DeadOp`) and re-queues any inner\nallocation that was stored into it.\n\nWhen revisiting that inner allocation:\n- `EscapesThroughUse` checked `ShouldSkipOperation` on `alloc` instead\n of `using_op_idx`, so the killed store (`DeadOp`) failed\n `TryCast\u003cStoreOp\u003e()` and was treated as an escaping use.\n- `MarkToRemove` must also skip uses in `alloc_uses_` that were already\n replaced with `DeadOp` before calling `Cast\u003cStoreOp\u003e()`.\n\nBug: 42204525\nChange-Id: I47ab849c018b13234e2ceae98f96822ea0548846\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8775031\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCommit-Queue: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112080}\n" }, { "commit": "888c01c1417992f16b05f50b1c3f3e2cf11ae7dc", "tree": "0187cd17f274c7f34d124cceb740090e2435da90", "parents": [ "ccdfdabfa6e3d021037d311551d8b6f2a3414850" ], "author": { "name": "Andreas Haas", "email": "ahaas@google.com", "time": "Tue Nov 10 10:03:36 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 11:40:27 2026" }, "message": "[api] Deprecate PropertyAttribute in Template::SetPrivate\n\nTemplate::SetPrivate defines a private property on a template for\ninstances created from it, whereas Object::SetPrivate sets a private\nproperty directly on an existing object instance.\n\nUnlike Object::SetPrivate, Template::SetPrivate currently accepts a\nPropertyAttribute. However, setting attributes such as DontDelete or\nReadOnly on private properties can cause problems when invalidating\ncached accessor properties on global objects. Moreover, the\nPropertyAttribute parameter on Template::SetPrivate is not used in\nChromium or V8.\n\nTherefore, deprecate the 3-parameter Template::SetPrivate overload\ntaking PropertyAttribute and introduce a 2-parameter\nTemplate::SetPrivate(name, value) overload matching\nObject::SetPrivate.\n\nTAG\u003dagy\nCONV\u003ddd4a4430-0bb1-41d9-9207-435adab8b592\n\nBug: 581337255\nChange-Id: I905c71247f8e450405c675d60dab22175268a3a9\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8774814\nCommit-Queue: Andreas Haas \u003cahaas@chromium.org\u003e\nReviewed-by: Igor Sheludko \u003cishell@chromium.org\u003e\nReviewed-by: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112079}\n" }, { "commit": "ccdfdabfa6e3d021037d311551d8b6f2a3414850", "tree": "2667644378cf65c0d383a6f61a7c6b2cef2d3819", "parents": [ "77122408a32bea7ff62180b2e52594da534fdbf7" ], "author": { "name": "Leszek Swirski", "email": "leszeks@chromium.org", "time": "Thu Nov 12 18:16:23 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 11:31:48 2026" }, "message": "[turboshaft] Replace LoadOp::Kind::is_atomic with Atomicity enum\n\nEncode atomic memory ordering directly in LoadOp::Kind::Atomicity\n(kNonAtomic, kSeqCst, kAcqRel), replacing the boolean is_atomic\nbitfield and folding StoreOp::memory_order_ into Kind.\n\nThis lets both LoadOp and StoreOp carry their AtomicMemoryOrder in\nKind without growing LoadOp::Kind beyond 1 byte or needing a separate\nmemory_order field and Store overloads on StoreOp.\n\nTAG\u003dagy\nCONV\u003d5f4a2a82-774b-41b5-81a3-15467ddd583f\n\nChange-Id: I50ee3368e304f37ef07e0affb180103ab0ddd9fd\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8598814\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nAuto-Submit: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112078}\n" }, { "commit": "77122408a32bea7ff62180b2e52594da534fdbf7", "tree": "160ef9ed5706fbf096d8aa75678525df6a8f90e6", "parents": [ "06cfdf0fdd8e89c374bdc6839260d76925bf08ad" ], "author": { "name": "Andrew Gaul", "email": "andrew@gaul.org", "time": "Sat Nov 07 22:30:40 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 11:27:52 2026" }, "message": "[riscv] Skip the simulator\u0027s debugging checks unless one is enabled\n\nFor every instruction it simulates, the simulator checked stop_sim_at,\ncheck_icache, debug_sim, tracing, the watch address and the\nbreakpoints, and reserved a trace buffer. Cache whether any of these\nis enabled, recompute it when Execute starts, when the debugger\nreturns and when tracing changes, and otherwise go straight to the\ndecoder.\n\nOn an Apple M4 Max, the riscv64 simulator runs JetStream\u0027s richards\n(40 iterations) in 12.4 s instead of 17.0 s, and ML (6 iterations) in\n17.9 s instead of 24.9 s.\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\nChange-Id: I8995a456d0a1abd1b2898a25ab2537500c6cd5cb\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8765048\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nReviewed-by: Yahan Lu (LuYahan) \u003cyahan@iscas.ac.cn\u003e\nReviewed-by: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112077}\n" }, { "commit": "06cfdf0fdd8e89c374bdc6839260d76925bf08ad", "tree": "e6d408c0d671e463eaa64bcd3cbade9759d474cc", "parents": [ "dab25410f450f3d2b7ee72d110b19bcc7b5add82" ], "author": { "name": "Darius Mercadier", "email": "dmercadier@chromium.org", "time": "Fri Nov 13 10:28:59 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 11:14:07 2026" }, "message": "[turboshaft] Add some missing \"transitioning\" annotations on Stores\n\nMake sure that transitioning stores are marked as transitioning\nso that they aren\u0027t dropped by StoreStoreElimination across GCs.\n\nTAG\u003dagy\nCONV\u003dffecbf64-0c16-4444-b46d-3d6b995bf64b\n\nBug: 577474130\nChange-Id: Ie3c5516fd414164352006f28a414703ff2bce100\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8794472\nAuto-Submit: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCommit-Queue: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112076}\n" }, { "commit": "dab25410f450f3d2b7ee72d110b19bcc7b5add82", "tree": "bb3afa78ecb259ca62136d94425f791874400a20", "parents": [ "c0ae668b6d2da758497ae4d77ea7ce045eb310c7" ], "author": { "name": "Rong Bao", "email": "rong.bao@csmantle.top", "time": "Fri Nov 13 01:20:45 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 11:07:52 2026" }, "message": "[utils][loong64] Gate away BoringSSL SHA-256 support on Loong64\n\nCurrently, building V8 on Loong64 fails with the following error:\n\n In file included from [...]/v8/third_party/boringssl/src/crypto/asn1/tasn_enc.cc:15:\n In file included from [...]/v8/third_party/boringssl/src/include/openssl/asn1.h:18:\n In file included from [...]/v8/third_party/boringssl/src/include/openssl/base.h:42:\n [...]/v8/third_party/boringssl/src/include/openssl/target.h:76:2: error: \"Unknown target CPU\"\n 76 | #error \"Unknown target CPU\"\n | ^\n\nIn commit 16b1ab066ca5e9bec4885f8b77c829d64ae444a3 ([utils] Reland \"Use\nBoringSSL for SHA-256\"), PPC64 and S390X platforms are already gated\naway. BoringSSL doesn\u0027t contain Loong64 support as well, thus gating it\nsimilarly to prevent compilation failure.\n\nNO_IFTTT\u003dCommit 16b1ab066ca5 also doesn\u0027t contain gating in BUILD.bazel.\n\nChange-Id: I64f3d713cc5fd4b79424451ce232ebe4eddde6d6\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8802813\nReviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112075}\n" }, { "commit": "c0ae668b6d2da758497ae4d77ea7ce045eb310c7", "tree": "708a085b70fad8d24c5bbdbf4d98164834489a8b", "parents": [ "23afd0e9720e964940f9c025ab840a30b43fa5e9" ], "author": { "name": "Darius Mercadier", "email": "dmercadier@chromium.org", "time": "Wed Nov 11 13:43:11 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 11:03:32 2026" }, "message": "[compiler] Fix BeginRegion placement for PropertyArray stores\n\nIn Turbofan, SimplifiedOperatorBuilder::StoreField has a\nmaybe_initializing_or_transitioning argument that defaults to true,\nand is very rarely passed explicitly. As a result, pretty much all\nStoreFields in Turbofan are marked as initializing_or_transitioning,\nwhich severely hinders StoreStoreElimination.\nThe Turboshaft graph builder thus ignores this annotation for any\nStoreField that isn\u0027t inside a region (ie, in between a\nBeginRegion and FinishRegion).\n\nIn BuildPropertyStore, when extending a PropertyArray, storing\nthe new property is done via a StoreField outside of a region,\nwhich means that as far as Turboshaft is concerned, this isn\u0027t\nan initializing/transitioning store.\nThis in turn allows StoreStoreElimination to elide the store if\nit\u0027s not observed, and GC doesn\u0027t count as observing it. So for\ninstance if we have\n\n p \u003d ExtendPropertiesBackingStore(o)\n p.x \u003d 42\n gc()\n p.x \u003d 25\n\nThen the first `p.x \u003d 42` will be elided by StoreStoreElimination,\nleading the subsequent `gc()` call to observe the `.x` property as\nholding `undefined` instead of `42`, and if the field is marked\nas Smi representation, this will lead to a CHECK failure during\nfield representation verification.\n\nNote that this bug is harmless: if we skip the failing CHECK,\nnothing wrong happens. In particular, ExtendPropertiesBackingStore\ninitializes the whole backing store, which means that the GC will\nnot see uninitialized memory but instead it will see `undefined`.\n\nThe fix is simply to make sure that storing the property after\nExtendPropertiesBackingStore is done inside of a region.\n\nTAG\u003dagy\nCONV\u003dffecbf64-0c16-4444-b46d-3d6b995bf64b\n\nFixed: 577474130\nChange-Id: I967b85e1b15f4256e65eee8399332df1b645709b\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8780961\nAuto-Submit: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nReviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112074}\n" }, { "commit": "23afd0e9720e964940f9c025ab840a30b43fa5e9", "tree": "7ad1cab212a4635e5d6bf1e88dee58ab457bb9ec", "parents": [ "ef41f678985d1557bedcc84010ebac3604820435" ], "author": { "name": "LuYahan", "email": "yahan@iscas.ac.cn", "time": "Fri Nov 13 03:22:17 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 10:56:14 2026" }, "message": "[riscv] Fix Mulh32 missing sign extension\n\nMacroAssembler::Mulh32 multiplied the raw 64-bit registers, which is\nonly correct if both operands are sign-extended. The backend however\nallows 32-bit producers to leave dirty upper bits in their result\nregisters (e.g. a zero-extending lwu followed by a 64-bit xori), so\nTurboFan\u0027s strength reduction of constant signed division and modulo\ninto Int32MulHigh could produce values outside the range proven by the\ntyper.\n\nSign-extend both operands before the multiplication.\n\nFixed: 581332475\nChange-Id: Ic5864ada282ee88651af135354d37dacc81c7d17\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8813054\nAuto-Submit: Yahan Lu (LuYahan) \u003cyahan@iscas.ac.cn\u003e\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nReviewed-by: Andreas Haas \u003cahaas@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112073}\n" }, { "commit": "ef41f678985d1557bedcc84010ebac3604820435", "tree": "4debf7fc03ff9c39bdafca67fbfe63dbae986c64", "parents": [ "892f0336a48029ff9c52b515e87d770790e89c30" ], "author": { "name": "Andrew Gaul", "email": "andrew@gaul.org", "time": "Tue Nov 10 07:39:00 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 10:54:09 2026" }, "message": "[riscv] Skip the shift by zero in a Latin-1 regexp\u0027s prologue\n\nThe regexp prologue finds the address of the character before the start\nindex by subtracting the index, scaled to bytes, from the start of the\ninput: it shifts the index left by one for a two-byte string and by\nzero for a Latin-1 one. A shift by zero is a move, slli t1, a1, 0, made\nonly so that the subtraction can read t1. Subtract a1 itself instead.\n\nSpelled as a shift, the move is not even one a core can eliminate: the\nSpacemiT K3\u0027s X100 renames away mv but runs slli rd, rs, 0 as a\none-cycle operation.\n\nIn a JetStream 3 run on riscv64 hardware there are 2,704 of these, one\nper Latin-1 regexp, and they are 2,704 of the 2,732 moves and zeroings\nin V8\u0027s generated code that are spelled other than mv or li.\n\nFound with riscvlint.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\nChange-Id: I6c96cb42f8f63cc32284cb78a9e67410d2c7ef04\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8780855\nAuto-Submit: Andrew Gaul \u003candrew@gaul.org\u003e\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nReviewed-by: Yahan Lu (LuYahan) \u003cyahan@iscas.ac.cn\u003e\nReviewed-by: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112072}\n" }, { "commit": "892f0336a48029ff9c52b515e87d770790e89c30", "tree": "e15812bb7174c90af59f96a13d2e7a8d41949c7f", "parents": [ "672c3579e88c149c6c4e10c4c734f859913ff171" ], "author": { "name": "Zhijin Zeng", "email": "zhijin.zeng@spacemit.com", "time": "Wed Nov 04 10:14:27 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 10:51:17 2026" }, "message": "[riscv] Hoist atomic exchange address calculation\n\nChange-Id: Id6785acd70e2aa7aeef13ef98f38d8a7e2783089\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8724475\nReviewed-by: Yahan Lu (LuYahan) \u003cyahan@iscas.ac.cn\u003e\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nReviewed-by: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112071}\n" }, { "commit": "672c3579e88c149c6c4e10c4c734f859913ff171", "tree": "2f979f111635e0d6f9075c18dde07fb2f6b2d61a", "parents": [ "d1cb93bc884d701e70fba5e4e96c38583e68dd45" ], "author": { "name": "Benedikt Meurer", "email": "bmeurer@google.com", "time": "Fri Nov 13 09:15:29 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 10:36:58 2026" }, "message": "[inspector] Remove obsolete service worker shadow page TODO\n\nService worker shadow pages were removed from Chromium in\nhttps://crrev.com/c/1748972 (crbug.com/40438548). Meanwhile,\nV8InspectorClient::canExecuteScripts remains intentionally used by\nBlink\u0027s MainThreadDebugger::canExecuteScripts to guard frames where\nscript execution is disabled, so the TODO to stop connecting no longer\napplies.\n\nBug: 40438548, 40479868\nChange-Id: Ib651ca99f4540839866d12ac8ec5ca7a292b04e6\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815694\nAuto-Submit: Benedikt Meurer \u003cbmeurer@chromium.org\u003e\nReviewed-by: Yang Guo \u003cyangguo@chromium.org\u003e\nCommit-Queue: Yang Guo \u003cyangguo@chromium.org\u003e\nCommit-Queue: Benedikt Meurer \u003cbmeurer@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112070}\n" }, { "commit": "d1cb93bc884d701e70fba5e4e96c38583e68dd45", "tree": "221fd7d272ea453884ea2ed827ce6f2a9ea3def5", "parents": [ "7d9823ad5ce8c89bf9efe6859c1c337f2109a4d8" ], "author": { "name": "Benedikt Meurer", "email": "bmeurer@google.com", "time": "Fri Nov 13 09:19:18 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 10:35:52 2026" }, "message": "[inspector] Remove obsolete TODO in runIfWaitingForDebugger\n\nClient-side worker session changes landed in\nhttps://crrev.com/c/3977348 and crbug.com/40234763 was closed as\ninfeasible. Frame sessions in Blink intentionally connect with\nkNotWaitingForDebugger (leaving m_debuggerBarrier null) and rely\npermanently on forwarding runIfWaitingForDebugger to V8InspectorClient.\n\nBug: 40234763\nChange-Id: I1afc88e84b56a96db41f7ccba1f85517c98dab31\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815715\nReviewed-by: Yang Guo \u003cyangguo@chromium.org\u003e\nAuto-Submit: Benedikt Meurer \u003cbmeurer@chromium.org\u003e\nCommit-Queue: Yang Guo \u003cyangguo@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112069}\n" }, { "commit": "7d9823ad5ce8c89bf9efe6859c1c337f2109a4d8", "tree": "2237927fb051687d13b9831eac2101759e99c267", "parents": [ "4badc653d7e3ded1cf5dda6f179502c94578ae94" ], "author": { "name": "Benedikt Meurer", "email": "bmeurer@google.com", "time": "Fri Nov 13 09:16:51 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 10:34:46 2026" }, "message": "[inspector] Remove obsolete TODO on deprecated V8Inspector::connect\n\nDownstream Chromium migrated in https://crrev.com/c/3977348 and now\nuses connectShared, which requires an explicit SessionPauseState.\nV8Inspector::connect is already deprecated in favor of connectShared\nwhile retaining its default argument for embedder compatibility, and\ncrbug.com/40234763 was closed as infeasible.\n\nBug: 40234763\nChange-Id: Ic9c2e7531018b378e09e9dd4a867050e5899c7f0\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815714\nAuto-Submit: Benedikt Meurer \u003cbmeurer@chromium.org\u003e\nCommit-Queue: Yang Guo \u003cyangguo@chromium.org\u003e\nReviewed-by: Yang Guo \u003cyangguo@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112068}\n" }, { "commit": "4badc653d7e3ded1cf5dda6f179502c94578ae94", "tree": "0089e3d4240f38418791e055d225820e8bbd5f4e", "parents": [ "d8356aacc223cc23c688a9e5ec0375f8421040e9" ], "author": { "name": "Benedikt Meurer", "email": "bmeurer@google.com", "time": "Fri Nov 13 09:20:06 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 10:29:05 2026" }, "message": "[libsampler] Remove obsolete Fuchsia SDK transition shim\n\nhttps://crrev.com/c/914695 added temporary ZX_THREAD_STATE_REGSET0\ncompatibility guards in February 2018 while transitioning to\nZX_THREAD_STATE_GENERAL_REGS (crbug.com/40513404). The Fuchsia SDK\nrolled in 2018 and ZX_THREAD_STATE_REGSET0 no longer exists, making\nboth preprocessor blocks dead code.\n\nBug: 40513404\nChange-Id: I0fe3aa4ca72918c48006505d550c4c6f353f87b6\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815716\nAuto-Submit: Benedikt Meurer \u003cbmeurer@chromium.org\u003e\nReviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112067}\n" }, { "commit": "d8356aacc223cc23c688a9e5ec0375f8421040e9", "tree": "32c0fa75fc633d80ca197e87d5284b513b668d1d", "parents": [ "620309e4dcf24d44b2e7fb2d8178d67679914780" ], "author": { "name": "Michael Lippautz", "email": "mlippautz@chromium.org", "time": "Fri Nov 13 08:05:51 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 10:15:22 2026" }, "message": "[heap] Handle Smi values in WriteBarrier::MarkingSlowFromCode\n\nMarkingFromCode and SharedMarkingFromCode reload *slot from memory,\nwhich may have been concurrently overwritten with a Smi on shared\nobjects after the generated code Smi check.\n\nTAG\u003dagy\n\nCONV\u003d47dd0565-cb7a-4539-8d39-5dc5a1148015\n\nFixed: 585215388\nChange-Id: Ib30534f339354a63234e79d0c25e72bfff724bb2\nNo-Regression-Test: Test excercises a race condition with multi workers and shared heap\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8814755\nCommit-Queue: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nReviewed-by: Dominik Inführ \u003cdinfuehr@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112066}\n" }, { "commit": "620309e4dcf24d44b2e7fb2d8178d67679914780", "tree": "9a3b0e0953bd8093a6bd44e1ddf1517590d8d844", "parents": [ "30df12e1fae9c55bdd05179a84fb675b013d513f" ], "author": { "name": "Michael Achenbach", "email": "machenbach@chromium.org", "time": "Fri Nov 13 09:08:09 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 10:03:56 2026" }, "message": "[infra] Move experimental builders to a ci.experimental bucket\n\nAll builders on the experiments console move from the ci bucket to a\nnew ci.experimental bucket. This makes them distinguishable from the\nmain CI builders in alerts and monitoring queries, e.g. to treat the\nlower-priority experimental builders differently.\n\nThe builders keep sharing the bots of the main CI pool: the new bucket\nreuses the ci bucket defaults (pool luci.v8.ci, service account,\nrecipe), ACLs and led setup, and is added to the pool\u0027s realm\nbindings. Builder names and the builder_group property are unchanged,\nso mb_config.pyl, infra/testing/builders.pyl and the recipes don\u0027t\nneed any changes.\n\nFour experimental testers are triggered by multibranch builders that\nremain in the ci bucket. To support this cross-bucket relationship, a\nparent_bucket argument is added to v8_builder, and the generator that\nderives the triggers property of parent builders is keyed by bucket\nand builder name instead of grouping per bucket. lucicfg automatically\ngrants the ci builder account the scheduler.triggerer role on the new\njobs. The builder-tester and wip console generators are extended to\nalso consider the new bucket.\n\nApart from the bucket rename of the 36 experimental builders, the\ngenerated builder configurations are unchanged.\n\nNote that build history for the moved builders starts fresh under\nthe new bucket; previous builds remain under ci/.\n\nBug: 582589507\nChange-Id: Ia7f29a74fef71f39b0242433e100796328f1b56a\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815574\nCommit-Queue: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nReviewed-by: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112065}\n" }, { "commit": "30df12e1fae9c55bdd05179a84fb675b013d513f", "tree": "26b596ed92e0753abe06a4ae101d1af90dd51978", "parents": [ "465865e222285bb453893423f21c04904ca0d6cc" ], "author": { "name": "Benedikt Meurer", "email": "bmeurer@google.com", "time": "Fri Nov 13 09:18:06 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 10:02:51 2026" }, "message": "[inspector] Remove obsolete TODO in getPossibleBreakpoints\n\ncrbug.com/40706237 was closed as obsolete because capping the returned\nlocations to kMaxNumBreakpoints is sufficient and intended behavior,\nespecially since getPossibleBreakpoints is no longer used this way for\nWebAssembly.\n\nBug: 40706237\nChange-Id: Ieed77084af763424eb79c7fb343a7f735aa9ebea\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815695\nAuto-Submit: Benedikt Meurer \u003cbmeurer@chromium.org\u003e\nReviewed-by: Simon Zünd \u003cszuend@chromium.org\u003e\nCommit-Queue: Benedikt Meurer \u003cbmeurer@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112064}\n" }, { "commit": "465865e222285bb453893423f21c04904ca0d6cc", "tree": "94bd178dee828d538018f70caacca7a7cbfe5713", "parents": [ "cd5440417ebc15558b3fc626fb7c0cf1b6f97c66" ], "author": { "name": "Benedikt Meurer", "email": "bmeurer@google.com", "time": "Fri Nov 13 09:21:12 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 10:01:46 2026" }, "message": "[profiler] Remove obsolete TODO in FastApiReceiver::FastCallback\n\nhttps://crrev.com/c/6964617 (crbug.com/433909571) already replaced the\nunused fallback branch with CHECK(IsValidUnwrapObject(*receiver_obj))\non the immediately following line, leaving only the stale TODO comment\nbehind.\n\nBug: 40118996, 433909571\nChange-Id: I44714299953d7f5094186a26100fedb792e3279f\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815754\nReviewed-by: Simon Zünd \u003cszuend@chromium.org\u003e\nAuto-Submit: Benedikt Meurer \u003cbmeurer@chromium.org\u003e\nCommit-Queue: Benedikt Meurer \u003cbmeurer@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112063}\n" }, { "commit": "cd5440417ebc15558b3fc626fb7c0cf1b6f97c66", "tree": "7b14efb76034f655290156ccd2bbb0110de21d43", "parents": [ "ebb0ab703a0dd53fe6d27bca2663063b1a865522" ], "author": { "name": "Maksim Ivanov", "email": "emaxx@google.com", "time": "Fri Nov 13 07:29:30 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 09:39:22 2026" }, "message": "[d8][fuzzilli] Flush concurrent Sparkplug compilation across REPRL\n\nCancel and wait for termination of background Sparkplug jobs before\nstarting the next REPRL iteration.\n\nThis should prevent some nondeterminism between REPRL iterations\n(concurrent jobs from the previous iterations) as well as state\ndependency (batch budget). Also this will be useful for the potential\nfollow-up work on resetting protectors. Right now the metric\n\"iterations-till-not-reproing-anymore\" for a sample dataset doesn\u0027t\nimprove by this CL alone though.\n\nPerformance-wise, the CL causes a slowdown of ~1% on a sample Fuzzilli\ncorpus; this is presumably the effect of not batching Sparkplug function\ncompilations across REPRL iterations.\n\nBug: 581109797\nChange-Id: I2cd575151762c23f5dff85b947938e03c35948dd\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8806514\nReviewed-by: Raphael Herouart \u003crherouart@chromium.org\u003e\nReviewed-by: Marja Hölttä \u003cmarja@chromium.org\u003e\nCommit-Queue: Maksim Ivanov \u003cemaxx@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#112062}\n" }, { "commit": "ebb0ab703a0dd53fe6d27bca2663063b1a865522", "tree": "991b7cf15eb0f0ac0a6d011dde727903d1518de3", "parents": [ "54cd00b96febe278ab2fdf1a185da6aabff916ab" ], "author": { "name": "Raphael Herouart", "email": "rherouart@chromium.org", "time": "Fri Nov 13 07:17:17 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 09:33:00 2026" }, "message": "[redline] Start crash minimizer time limits after the start check\n\nThe selftest \"amplified crashes: an amplified crash gets NAME.repro.js\nwith --stress-runs\" failed on loaded machines. The production fleet runs\nthe selftest while its fuzzing workers use all CPUs. A failed run had\n`min_stop: budget` and `min_script_nodes: 82 -\u003e 82`, and Redline wrote\nno NAME.repro.js. The check has a time limit of 2 s, and two causes made\nthe minimizer accept no test in this time.\n\n1. The clock of crash_amplified_budget_sec started before the start\n check. The start check did not stop at the time limit, but its time\n counted. On a loaded machine, the start check can use all 2 s.\n2. The first test of the minimizer failed. The dataflow reducer tests\n the later statements first, and its first test removed the class and\n the if statement of the test program. Only its second test removed\n the unused declaration. On a loaded machine, the first test can use\n all 2 s.\n\nChanges:\n- The time limits of the crash minimizers start after the start check.\n These are crash_amplified_budget_sec for an amplified crash, and\n crash_bundle_min_budget_sec for the steps of a bundle minimization. A\n slow start check does not use up the time of the minimizer. The worst\n case of one minimization grows by the time of the start check, which\n runs at most verify_attempts times k processes. DESIGN.md gives the\n new worst cases.\n- The unused declaration of the test program is now its last statement.\n Thus the first test of the minimizer removes it, and the test passes.\n\nThe check keeps `min_stop: budget`, so it still covers the last check\nafter the time limit.\n\nTested:\n- d8: out/fuzzbuild/d8, built at 76cc64fa0c2. Base: e9c4ce143a4.\n- Load: batches of 10 runs of selftest --d8 at the same time. taskset\n pins each run to its own CPU, together with K busy loops on that CPU.\n The batches of the base and of this change alternated. The\n table counts the results of this check. \"budget\" is the failure\n above. \"imports\" is a different failure: the crash of the imported\n program timed out, so the session saved no crash. This change does not\n touch it, and the production fleet did not show it.\n\n | K | Build | Runs | Pass | budget | imports |\n |---|-------------|------|------|--------|---------|\n | 1 | base | 40 | 33 | 4 | 3 |\n | 1 | this change | 20 | 19 | 0 | 1 |\n | 2 | base | 30 | 20 | 0 | 10 |\n | 2 | this change | 20 | 15 | 0 | 5 |\n | 3 | base | 30 | 1 | 12 | 17 |\n | 3 | this change | 20 | 9 | 0 | 11 |\n\n With the clock change alone, 1 of 30 runs still had the budget\n failure. This made the change of the test program necessary.\n- Without load: selftest --offline: 165 passed. selftest --d8: 199\n passed.\n- The bundle check of selftest --d8 does not run with this d8: its probe\n takes the exit code 1 of `d8 --bundle-reprl /dev/null` for a missing\n flag. With a local fix of the probe, the check passed with this\n change: 5 -\u003e 1 parts in 26 tests.\n- check.sh at this commit: all PASS.\n\nBug: 568284141\nTest: experimental/redline/skills/redline-presubmit/scripts/check.sh\nChange-Id: I437283ef4609be52f11edc4f39c37e5a9940e3b1\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8814874\nAuto-Submit: Raphael Herouart \u003crherouart@chromium.org\u003e\nReviewed-by: Marja Hölttä \u003cmarja@chromium.org\u003e\nCommit-Queue: Marja Hölttä \u003cmarja@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112061}\n" }, { "commit": "54cd00b96febe278ab2fdf1a185da6aabff916ab", "tree": "b7e27e57541bb4d3e15562d140d35a65108387c2", "parents": [ "79d4a49e92f32d2d05577cf3de644f659ff507be" ], "author": { "name": "Zhijin Zeng", "email": "zhijin.zeng@spacemit.com", "time": "Wed Nov 04 10:01:25 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 08:39:09 2026" }, "message": "[riscv] Remove redundant SIMD shift masking\n\nRVV spec v1.0 chapter 11.6 says, only the low lg2(SEW) bits of the\nshift-amount value are used to control the shift amount.\n\nChange-Id: I872a0a0077b1903bdb7a27654e0772ebb11fa6dc\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8721932\nReviewed-by: Yahan Lu (LuYahan) \u003cyahan@iscas.ac.cn\u003e\nReviewed-by: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112060}\n" }, { "commit": "79d4a49e92f32d2d05577cf3de644f659ff507be", "tree": "89742bc30d65185906f716c22241302a886ef2cb", "parents": [ "057570b0eb8e50f89f0cfef7d9b736d1ec677763" ], "author": { "name": "Michael Achenbach", "email": "machenbach@chromium.org", "time": "Fri Nov 13 08:02:25 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 08:37:55 2026" }, "message": "Revert \"[fuzztest] Define _Unwind_GetIPInfo on ARM Linux\"\n\nThis reverts commit 5df5966ff56b01761919ca5fdc0bac17c4acda6e.\n\nReason for revert: The problematic bots were removed.\n\nOriginal change\u0027s description:\n\u003e [fuzztest] Define _Unwind_GetIPInfo on ARM Linux\n\u003e\n\u003e On 32-bit ARM Linux (ARM EHABI), Clang\u0027s builtin \u003cunwind.h\u003e declares\n\u003e _Unwind_GetIPInfo as an external function, whereas the sysroot\u0027s\n\u003e libgcc_s.so.1 only exports _Unwind_VRS_Get and defines _Unwind_GetIPInfo\n\u003e as a macro in unwind-arm-common.h. Provide a weak definition matching\n\u003e GCC\u0027s macro so FuzzTest\u0027s sanitizer_interface.cc links cleanly when\n\u003e rolling FuzzTest.\n\u003e\n\u003e TAG\u003dagy\n\u003e CONV\u003d2ef00d06-bb68-4a39-badc-578544dc40b4\n\u003e\n\u003e Bug: 584092453\n\u003e Change-Id: I556fe65e434a907404fe465b598a20d8e285234e\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8780964\n\u003e Commit-Queue: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\n\u003e Auto-Submit: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\n\u003e Reviewed-by: Clemens Backes \u003cclemensb@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#111909}\n\nBug: 584092453\nChange-Id: I5120e31e57b6869730c5620c838ccd1d24a41c75\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815154\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCommit-Queue: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nAuto-Submit: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nCommit-Queue: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112059}\n" }, { "commit": "057570b0eb8e50f89f0cfef7d9b736d1ec677763", "tree": "5e27b14507e424a49f39a0da8460fd63bb8618b5", "parents": [ "b3ea9977c246f502a6b4c2789deb7e87dbfdf56a" ], "author": { "name": "Andrew Gaul", "email": "andrew@gaul.org", "time": "Sat Nov 07 22:29:11 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 08:30:06 2026" }, "message": "[riscv] Report unsupported instructions out of line in the simulator\n\nUNSUPPORTED() expands to a 256-byte buffer and a disassembler in the\ndefault case of every decoder. Under -fstack-protector, that makes each\nof them, DecodeRVIType and DecodeRVBType included, store a stack canary\non entry and check it on exit for every instruction it simulates,\nalthough the report runs at most once, just before the simulator\naborts.\n\nMove the report into a function that the macro calls. Its output is\nunchanged.\n\nOn an Apple M4 Max, with InstructionBase::IsShortInstruction inlined\n(a separate change), the riscv64 simulator runs JetStream\u0027s richards\n(40 iterations) in 18.0 s instead of 18.6 s, and ML (6 iterations) in\n26.3 s instead of 27.1 s.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\nChange-Id: Iaaa29e9bd33d2e1812ce702e2466cc6d79cb8bb0\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8707133\nAuto-Submit: Andrew Gaul \u003candrew@gaul.org\u003e\nReviewed-by: Yahan Lu (LuYahan) \u003cyahan@iscas.ac.cn\u003e\nReviewed-by: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112058}\n" }, { "commit": "b3ea9977c246f502a6b4c2789deb7e87dbfdf56a", "tree": "b65315e0eecf5c0786542bacec0ef030b584711e", "parents": [ "6004279e766689251f4e4dc2795f2bd2e0a4001b" ], "author": { "name": "Andrew Gaul", "email": "andrew@gaul.org", "time": "Mon Nov 02 01:31:16 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 08:22:14 2026" }, "message": "[riscv] Keep forward jumps short after the trampoline pool\n\nOnce a code object has emitted its trampoline pool,\nMacroAssembler::Branch spells every branch to a label not yet bound with\nBranchLong: auipc+jr, behind an inverted branch if it is conditional,\nbecause a jal emitted after the pool has no trampoline to fall back on\nshould its label end up more than 1 MiB away. The pool comes out within\n4 KiB of the first pending short branch, so in most code objects every\nlater forward branch, to Maglev\u0027s deferred code and deopt exits or\nTurboFan\u0027s out-of-line code, takes 8 or 12 bytes where 4 or 8 would do.\n\nEmit a jal instead and have the assembler keep it in reach. It counts\nthe jumps emitted after the trampoline pool whose labels are still\nunbound, and before the first of them could go out of range it emits a\nfar-jump pool, one auipc+jr slot per pending jump, which bind_to routes\na jump through when its label is further away. Code smaller than a jal\u0027s\nreach never emits one. The jal also holds the link to the label\u0027s\nprevious use, so BranchFar keeps BranchLong where that use is beyond a\njal\u0027s reach. BranchLong itself is unchanged, since switch tables rely on\nits fixed size.\n\nOn the JetStream 3 JavaScript tests in the riscv64 simulator (two\niterations, --single-threaded), 433,917 of the 539,812 auipc+jr jumps\nbecome a jal and generated code shrinks by 1,725,188 bytes (-2.2%):\n-2.7% in Maglev, -3.8% in TurboFan and regexp code, and -0.8% in\nbaseline code. The jumps that remain are switch table entries and\ntrampoline pool slots.\n\nOn a SpacemiT K3 (X100 cores at 2.15 GHz), the full default JetStream 3\nsuite run natively in four alternating pairs scores 3.5% higher: 35.31,\n35.27, 35.20 and 35.12 against 33.90, 34.10, 34.14 and 34.04 before.\n46 of the 75 tests improve beyond run-to-run noise, most of all\ngaussian-blur (+27%), dotnet-interp-wasm (+22%), sqlite3-wasm (+21%),\n8bitbench-wasm (+17%) and ML (+16%). Only json-parse-inspector slows\ndown (-2.3%), about what chance gives across 75 comparisons.\n\nFound with riscvlint.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\nChange-Id: Id80488055c5cf733899fcfffdb4b181bdc16bab3\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8698757\nAuto-Submit: Andrew Gaul \u003candrew@gaul.org\u003e\nReviewed-by: Yahan Lu (LuYahan) \u003cyahan@iscas.ac.cn\u003e\nReviewed-by: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112057}\n" }, { "commit": "6004279e766689251f4e4dc2795f2bd2e0a4001b", "tree": "86b9863fd3a194ad518f3db7043d6cfe9129c41d", "parents": [ "fb28f9b169b9d33d88b747ca296a254a04d29824" ], "author": { "name": "Leszek Swirski", "email": "leszeks@chromium.org", "time": "Thu Nov 12 15:59:51 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 08:17:12 2026" }, "message": "[turboshaft] Bound merge cloning in BranchElimination\n\nUnbounded merge cloning in BranchEliminationReducer::ReduceGoto can\nclone or fold high-fan-in merge blocks (such as in Wasm switch\ndispatchers). Cloning an M-predecessor merge block duplicates its body M\ntimes, performs O(M^2) steps in GetPredecessorIndex, and (when\nredirecting incoming edges into a downstream merge with K Phis) turns\nM + K edges into M * K Phi inputs, blowing up peak compile memory and\nslowing down downstream passes (register allocation, instruction\nselection, and DCE) as seen on qt-TurboFan after\nhttps://crrev.com/c/8676009:\n\n Before folding inner merges M_1..M_3:\n\n B_top\n / | \\\n v v v\n S_1 S_2 S_3\n / | \\ / | \\ / | \\\n v v v v v v v v v\n E1 E2 E3 E4 E5 E6 E7 E8 E9\n \\ | / \\ | / \\ | /\n v v v v v v v v v\n M_1 M_2 M_3\n \\ | /\n \\ | /\n v v v\n B_outer\n [ p_1 \u003d Phi(v1, v2, v3) ]\n [ ... ]\n [ p_K \u003d Phi(u1, u2, u3) ]\n\n After folding M_1..M_3 into split-edge blocks E1..E9:\n\n B_top\n / | \\\n v v v\n S_1 S_2 S_3\n / | \\ / | \\ / | \\\n v v v v v v v v v\n E1 E2 E3 E4 E5 E6 E7 E8 E9\n \\ \\ \\ \\ | / / / /\n \\ \\ \\_______\\ | /_______/ / /\n \\ \\___________\\ | /___________/ /\n \\_______________\\|/_______________/\n v v v\n B_outer\n [ p_1 \u003d Phi(v1,v1,v1, v2,v2,v2, v3,v3,v3) ]\n [ ... \\___M__/ \\___M__/ \\___M__/ ]\n [ p_K \u003d Phi(u1,u1,u1, u2,u2,u2, u3,u3,u3) ]\n\nBound all merge cloning in BranchEliminationReducer::ReduceGoto\n(BranchOp, ReturnOp, and Phi+Goto/0-Phi GotoOp merges) to merge blocks\nwith at most 8 predecessors, and bound the fan-in of each downstream\ntarget to at most 32 predecessors in both the input and output graphs.\nAlso check output_graph()\u0027s max_merge_pred_count() in\nVariableReducer::CanCreateNVariables.\n\nDrive-by, move Block::CheckPredecessorCount() from PredecessorCount() to\nGraphVisitor::Finalize() so PredecessorCount() is O(1) in DEBUG builds.\n\nTAG\u003dagy\nCONV\u003d71b7b059-e44e-41d1-a019-68fffeb4e090\n\nFixed: 584116010\nChange-Id: I2d76e56a3ad5fb0820cd5ec402e4bc734142489d\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8775157\nCommit-Queue: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nAuto-Submit: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112056}\n" }, { "commit": "fb28f9b169b9d33d88b747ca296a254a04d29824", "tree": "02052bb3c2c1f6ab49a86f4ba9c0d5a24eabe6bd", "parents": [ "f88307c0c248c5f6e0a2408f3a83da73b1f443b0" ], "author": { "name": "Andrew Gaul", "email": "andrew@gaul.org", "time": "Mon Nov 02 06:26:04 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 08:12:18 2026" }, "message": "[riscv] Order the overflow checks\u0027 xors so the and can fuse\n\nAddOverflowWord, SubOverflowWord, AddOverflow32 and SubOverflow32\ncompute the overflow bit with two xors and an and, emitting the xor\ninto the overflow register first, then the xor into the scratch\nregister, then the and of the two. Emit the xor into scratch first, so\nthat the xor into overflow is directly followed by the and that\nconsumes it. That pair, xor rd, rs1, rs2 then and rd, rd, rs3, is one\nthe SpacemiT X100 fuses (LLVM\u0027s spacemit-x100 model in\nRISCVMacroFusion.td). On a SpacemiT K3, an adjacent pair like it in a\ndependent chain takes one cycle where a split one takes two. The\ninstructions and their count are otherwise unchanged.\n\nScratch is now written before left is read, which needs left to be a\ndifferent register. It always is: left comes from the register\nallocator, and the scratch registers, t3 and t5, are not allocatable.\nDCHECK it.\n\nMaglev\u0027s CheckedSmiIncrement and CheckedSmiDecrement reach these\nthrough SmiAddConstant and SmiSubConstant when Smis are 32 bits, which\nis riscv64\u0027s default, and TurboFan uses them for its overflow-checked\nadditions and subtractions. In the code V8 generates for JetStream 3 on\nriscv64 the split shape occurs 4,557 times. Not benchmarked; that is\n0.01% of the instructions.\n\nAdd tests for an immediate right operand, which is Maglev\u0027s path and\nthe one where right_reg is the scratch register, and for AddOverflow32\nand SubOverflow32, which had none.\n\nFound with riscvlint.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\nChange-Id: I9c119b7b1a56123b2abfa71bdb85c105fcfecc3d\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8701856\nReviewed-by: Yahan Lu (LuYahan) \u003cyahan@iscas.ac.cn\u003e\nAuto-Submit: Andrew Gaul \u003candrew@gaul.org\u003e\nReviewed-by: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112055}\n" }, { "commit": "f88307c0c248c5f6e0a2408f3a83da73b1f443b0", "tree": "9511d27f1fe7fa6ee87d33a1693986d50fb70729", "parents": [ "24b431df2ea0c339b1820f47352352b85989feac" ], "author": { "name": "Zhiling Zou", "email": "zhilinz@nebusec.ai", "time": "Wed Oct 28 16:13:45 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 08:01:01 2026" }, "message": "[riscv] Link near long calls through ra\n\nBranchAndLinkLong uses a direct JAL for bound labels when the offset\nfits. At exactly 1 MiB behind the current PC, BranchAndLink\u0027s near check\nsees +1 MiB and selects the long path, while BranchAndLinkLong sees\n-1 MiB and selects the direct-JAL path. That path used jal(t6, imm),\nplacing the return address in t6 instead of ra. The callee\u0027s ret then\nreturns to the caller\u0027s caller, skipping the call continuation.\n\nUse jal(imm) so the direct call writes its return address to ra. Add a\nregression test that makes a public Call(Label*) at this boundary and\nverifies that execution resumes after the call.\n\nCo-Authored-By: Yuan Tan \u003cyuant@nebusec.ai\u003e\nChange-Id: Ib6ae11be09de44f24af3cec7195007c573ebc0e3\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8680346\nReviewed-by: Yahan Lu (LuYahan) \u003cyahan@iscas.ac.cn\u003e\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nReviewed-by: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112054}\n" }, { "commit": "24b431df2ea0c339b1820f47352352b85989feac", "tree": "e6745fa35897d855d8470b09baeddf20da8752fe", "parents": [ "cb35269b52b5eb63e902b7dd951f4d1c7167bdcc" ], "author": { "name": "v8-ci-autoroll-builder", "email": "v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 05:06:31 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 07:59:57 2026" }, "message": "Update fuzztest (trusted)\n\nRolling third_party/fuzztest: https://chromium.googlesource.com/chromium/src/third_party/fuzztest/+log/0e960ad..a465cd9\n\nRoll FuzzTest from 18e19cb9da02 to 1b1a78362341 (2 revisions) (chromium-autoroll@skia-public.iam.gserviceaccount.com)\nhttps://chromium.googlesource.com/chromium/src/third_party/fuzztest/+/a465cd9\n\nRoll FuzzTest from 0cc187c1c6e9 to 18e19cb9da02 (2 revisions) (chromium-autoroll@skia-public.iam.gserviceaccount.com)\nhttps://chromium.googlesource.com/chromium/src/third_party/fuzztest/+/7f1f0d1\n\nPreload DbgHelp in fuzztest_gtest_main on Windows (Jessica Huang)\nhttps://chromium.googlesource.com/chromium/src/third_party/fuzztest/+/c6daf77\n\nRolling third_party/fuzztest/src: https://chromium.googlesource.com/external/github.com/google/fuzztest/+log/0cc187c..1b1a783\n\nWindows support 1/x: centipede:util (Xinhao Yuan)\nhttps://chromium.googlesource.com/external/github.com/google/fuzztest/+/1b1a783\n\nRemove unused `factory` field and `FUZZ_TEST_NAME_TO_FACTORY` from `FuzzTestRegistration`. (Yamil Morales)\nhttps://chromium.googlesource.com/external/github.com/google/fuzztest/+/484ed35\n\nMove the global `FuzzTestOptions` store into `fuzztest_options` (`get_fuzztest_options`, `set_fuzztest_options`, and `FuzzTestOptions::from_env`). (Yamil Morales)\nhttps://chromium.googlesource.com/external/github.com/google/fuzztest/+/18e19cb\n\nDecouple seed input limit from batch size. (Xinhao Yuan)\nhttps://chromium.googlesource.com/external/github.com/google/fuzztest/+/1f0df17\n\nRoll created at https://cr-buildbucket.appspot.com/build/8665275844734678625\n\nCq-Include-Trybots: luci.v8.try:v8_linux64_asan_centipede_compile_dbg\nChange-Id: I3d42593138cde489e0a17d02c673cfe613d5c96d\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8812197\nCommit-Queue: v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com \u003cv8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com\u003e\nBot-Commit: v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com \u003cv8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#112053}\n" }, { "commit": "cb35269b52b5eb63e902b7dd951f4d1c7167bdcc", "tree": "e87af27d4e85f3d31ba74b77cf0e5e6c5cbd0322", "parents": [ "6cf94cec2e8dc679b10efc8c0dc4261dcf5e71d2" ], "author": { "name": "Andreas Haas", "email": "ahaas@google.com", "time": "Thu Nov 12 12:06:40 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 07:58:52 2026" }, "message": "[api] Remove deprecated EmbedderDataArray APIs\n\nRemove the dynamically-sized EmbedderDataArray setter APIs that were\ndeprecated in https://crrev.com/c/8660938:\n- v8::Context::SetEmbedderData\n- v8::Context::SetEmbedderDataV2\n- v8::Context::SetAlignedPointerInEmbedderData\n\nMigrate the remaining internal usages and tests to SetEmbedderDataV3\nand SetAlignedPointerInEmbedderDataV2, and remove the now-redundant\ntests for the deleted APIs.\n\nTAG\u003dagy\nCONV\u003d3b414a4b-1130-4b8a-a560-ad5b5a499e45\n\nBug: 570436596\nChange-Id: Ie03f9c22348730175f6a5fca7f72b1b2e633bad5\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8687878\nCommit-Queue: Andreas Haas \u003cahaas@chromium.org\u003e\nReviewed-by: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112052}\n" }, { "commit": "6cf94cec2e8dc679b10efc8c0dc4261dcf5e71d2", "tree": "de0b4674d7a46729e9cf461ad653213e1a03058a", "parents": [ "9481ea5ce850634ac6ff4f56cb0e8b87edfaaac3" ], "author": { "name": "Rong Bao", "email": "rong.bao@csmantle.top", "time": "Fri Nov 13 03:57:53 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 07:57:47 2026" }, "message": "[loong64] Ensure scratch reg lifetime safety in AdjustBaseAndOffset\n\nThe existing version of Assembler::AdjustBaseAndOffset contains a\nsoundness loophole in scratch register lifetime. As described in [0]:\n\n Since UseScratchRegisterScope is supposed to be a RAII guard and\n reclaim the scratch register when it goes out of scope, any\n \"leaked\" register usage from the scope to the outside is,\n loosely speaking, a lifetime violation. The only guaranteed safe\n way is to allocate the RAII object in the outer scope, then pass\n it in and acquire scratches on demand.\n\nThis is currently dormant since the allocation is manual, and no\nallocations happen between each AdjustBaseAndOffset caller and the\nconsumption of the adjusted MemOperand. However, it remains a potential\npitfall.\n\nRefactor this method into MacroAssembler to allow using\nUseScratchRegisterScope, then refactor all callers to pass in such\nscopes with long-enough lifetime. Scratches are still allocated\non-demand in the helper. This should constitute no runtime behavior\nchange.\n\n[0]: https://chromium-review.googlesource.com/c/v8/v8/+/8723310/comment/a72eca8b_4dd87f34/\n\nChange-Id: I2d8c997f7e0e3fefdd88fdae5fd03dc883afeb7f\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8810494\nReviewed-by: Zhao Jiazhong \u003czhaojiazhong-hf@loongson.cn\u003e\nReviewed-by: Liu Yu \u003cliuyu@loongson.cn\u003e\nCommit-Queue: Liu Yu \u003cliuyu@loongson.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112051}\n" }, { "commit": "9481ea5ce850634ac6ff4f56cb0e8b87edfaaac3", "tree": "cff571c90ccb1da56f41de6383e59c5cd4c1c97f", "parents": [ "5289ab5faf7069e5308d5afe11291b390190793d" ], "author": { "name": "Dominik Inführ", "email": "dinfuehr@chromium.org", "time": "Thu Nov 12 15:12:22 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 07:56:42 2026" }, "message": "[heap] Add ActiveSystemPages::Remove\n\nAdd() marks every system page that a range touches as active. Remove()\nis its counterpart for releasing memory: it only clears the pages that\nare fully contained in the range, since partially covered pages are\nstill in use, and returns the number of pages that were active before.\n\nThis will be used by cppgc to track discarded and decommitted system\npages on normal pages.\n\nBug: 584806761\nChange-Id: I22c7ce4aca70140d42d823e8b46134364e7f3c00\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8801784\nReviewed-by: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCommit-Queue: Dominik Inführ \u003cdinfuehr@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112050}\n" }, { "commit": "5289ab5faf7069e5308d5afe11291b390190793d", "tree": "f84255813f7351be0bf0dab5dc29dba8f3d0fb6a", "parents": [ "8f584f3639b600d34985d51aa276af7efac29bde" ], "author": { "name": "Liu Yu", "email": "liuyu@loongson.cn", "time": "Fri Nov 13 06:57:45 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 07:55:36 2026" }, "message": "[loong64][maglev] Remove distance arguments from MacroAssembler::Branch\n\nMacroAssembler::Branch on loong64 takes `bool need_link` as its 5th\nparameter, not `Label::Distance`. Since Label::Distance is an enum\nwith kNear \u003d 0, these arguments were silently converted to\n`bool need_link \u003d false`, which is the default value anyway, so they\nwere always no-ops.\n\nChange-Id: I2ca82f779f53db57398f2cd735863bef89394a87\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8811458\nAuto-Submit: Liu Yu \u003cliuyu@loongson.cn\u003e\nReviewed-by: Zhao Jiazhong \u003czhaojiazhong-hf@loongson.cn\u003e\nCommit-Queue: Zhao Jiazhong \u003czhaojiazhong-hf@loongson.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112049}\n" }, { "commit": "8f584f3639b600d34985d51aa276af7efac29bde", "tree": "5b3f619b967ad273b47493b53043b421eb3cf109", "parents": [ "f3f817e4c27032032a4a45ed4c553fef9ad1cf20" ], "author": { "name": "Toon Verwaest", "email": "verwaest@chromium.org", "time": "Fri Nov 06 10:10:31 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 07:54:30 2026" }, "message": "[compiler] Kill inlined call nodes in JSInliner and Finalize\n\nJSInliner::InlineCall replaces all uses of the call node via\nReplaceWithValue, relying on the caller to kill the unreferenced call\nnode. However, two paths failed to kill the inlined call node:\n1. JSInliningHeuristic::Finalize called InlineCandidate directly\n outside GraphReducer::ReduceTop without killing candidate.node.\n2. When inlining a non-returning callee (values.empty()), InlineCall\n returned Changed(call) (treated as an in-place update) instead of\n Replace(Dead()).\n\nThis left dead JSCall/JSConstruct nodes in the use_edges() of their\ninputs (such as JSCreateArguments), causing HasOnlySafeArgumentsUses\nto bail out on subsequent spread/apply calls on the waitlist.\n\nBug: 577323082\nTAG\u003dagy\nCONV\u003dfe7078e3-fe0c-4a71-8915-5a7241e23851\n\nChange-Id: I27263d259e38dd625685fd2cd8928c7c084122cb\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8726929\nCommit-Queue: Toon Verwaest \u003cverwaest@chromium.org\u003e\nAuto-Submit: Toon Verwaest \u003cverwaest@chromium.org\u003e\nReviewed-by: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112048}\n" }, { "commit": "f3f817e4c27032032a4a45ed4c553fef9ad1cf20", "tree": "1daf92be86adad7fab0628732e4736126ba78814", "parents": [ "4af304604fe4ff83a0e3f31f54fecf64eac2dbe3" ], "author": { "name": "Michael Achenbach", "email": "machenbach@chromium.org", "time": "Fri Nov 13 07:34:38 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 07:35:16 2026" }, "message": "Revert \"Update V8 DEPS (trusted)\"\n\nThis reverts commit 4af304604fe4ff83a0e3f31f54fecf64eac2dbe3.\n\nReason for revert: \nhttps://ci.chromium.org/ui/p/v8/builders/ci/V8%20Linux64%20-%20cfi%20-%20builder/26673/overview\n\nOriginal change\u0027s description:\n\u003e Update V8 DEPS (trusted)\n\u003e\n\u003e Rolling agents/internal: https://chrome-internal.googlesource.com/chrome/agents-internal/+log/4fd2920..3573934\n\u003e\n\u003e Rolling build: https://chromium.googlesource.com/chromium/src/build/+log/7f08fef..618bebb\n\u003e\n\u003e Rolling buildtools: https://chromium.googlesource.com/chromium/src/buildtools/+log/80d023d..a0ce846\n\u003e\n\u003e Rolling buildtools/linux64: git_revision:24d41137fac7ea2828590181ebd8284fe7437253..git_revision:2f5f34aced5f9721cda3eef963f4f7d231a0ae99\n\u003e\n\u003e Rolling buildtools/mac: git_revision:24d41137fac7ea2828590181ebd8284fe7437253..git_revision:2f5f34aced5f9721cda3eef963f4f7d231a0ae99\n\u003e\n\u003e Rolling buildtools/win: git_revision:24d41137fac7ea2828590181ebd8284fe7437253..git_revision:2f5f34aced5f9721cda3eef963f4f7d231a0ae99\n\u003e\n\u003e Rolling third_party/abseil-cpp: https://chromium.googlesource.com/chromium/src/third_party/abseil-cpp/+log/cc7c444..ecb00cc\n\u003e\n\u003e Rolling third_party/boringssl/src: https://boringssl.googlesource.com/boringssl/+log/583980e..10c780b\n\u003e\n\u003e Rolling third_party/catapult: https://chromium.googlesource.com/catapult/+log/8480c1b..5b55574\n\u003e\n\u003e Rolling third_party/depot_tools: https://chromium.googlesource.com/chromium/tools/depot_tools/+log/1afcf07..dbd771c\n\u003e\n\u003e Rolling third_party/googletest/src: https://chromium.googlesource.com/external/github.com/google/googletest/+log/2499058..1aa39fe\n\u003e\n\u003e Rolling third_party/libc++/src: https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libcxx/+log/d816ed0..64f64c1\n\u003e\n\u003e Rolling third_party/libc++abi/src: https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libcxxabi/+log/de3f732..a1e7b02\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Linux_x64/clang-android-runtime-library: Linux_x64/clang-android-runtime-library-llvmorg-24-init-17044-gc3223914-1.tar.xz,32ee6479e6758449e8f333067f7835f2245d5ee01da2aa4374a1997e9dfc1467,6184780,1793384407072490..Linux_x64/clang-android-runtime-library-llvmorg-24-init-17044-gc3223914-12.tar.xz,f9862e1a53722c2e4df2c454e3d019aba0e3e210557d194cf2b727be6c719d31,6179536,1794496976211434\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Linux_x64/clang: Linux_x64/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,4312432fd57f94766b62264161ec4afabeaca066fc812cf038efa88c154ef4da,58862184,1793384402930380..Linux_x64/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,68b281e8f8bc8ee597d947de336287cacde692aac010e811bd00a8eeee68db5e,58871192,1794496973381336\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Linux_x64/clang-tidy: Linux_x64/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,6d4e813a19448c111c955316a2572c179a15f2f3062762a14064c782f90a01d2,15217164,1793384403254249..Linux_x64/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,2523229775f676872f15415ad170a60eb875fe5667309c41abb3a08492dcaa3a,15221252,1794496973533642\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Linux_x64/clangd: Linux_x64/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,2d1d3d1212be660a26d0d554f449756be0ea5e03bab0df0598bf23cb140956f7,15589656,1793384403591262..Linux_x64/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,863ec435f085b494722d578c337bc18afdba43231a0292682d0cf0f04793abbd,15586032,1794496973611667\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Linux_x64/llvm-code-coverage: Linux_x64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,a11f7b0a33accd98f3555e0591226745cc10e341141ed99eca0928accf0621a3,2436360,1793384403738488..Linux_x64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,df9b73d6c5cb5ad29789b33bf510b358ead82867709fbc221e6a986745599ff4,2435848,1794496973837505\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Linux_x64/llvmobjdump: Linux_x64/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,0060c82105b8062ea0f405a087d035248748b75bf46ea3dc1050b8b5a479dbd6,6027024,1793384403555966..Linux_x64/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,d70cd6c27c4e6aae13ef1eec9472b7cd0554251b8589c0e1e28678f804e74744,6020100,1794496973671184\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Mac/clang: Mac/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,595970106910ebbfa2d1051661a79c7fa728ee6ec211283b0e01909f009b4d1e,55194960,1793384415945083..Mac/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,66a03cb30beb90745ed85b2f7135d23164a53d8b229f8ae7ff51c4f1d8973e72,55484312,1794496983203107\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Mac/clang-mac-runtime-library: Mac/clang-mac-runtime-library-llvmorg-24-init-17044-gc3223914-1.tar.xz,48f1a4d40fc7463441f9e8a9ddf54b45a3cafdac6cf3ab6075758ed23ded797a,998172,1793384425501560..Mac/clang-mac-runtime-library-llvmorg-24-init-17044-gc3223914-12.tar.xz,cc610d5a1c46f9b3489e25c784c35c176ddc367e9e016e5b0a4a80224cb252c2,1286220,1794496991189878\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Mac/clang-tidy: Mac/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,cfa97d32b7f7b343c74dc55161cf014fce4c1eebb8a27df95ed584ddc2a6e76c,14480288,1793384416238915..Mac/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,ca158f5311a9bb876afd587e203b91e713269075f709cbab14dfbeada272bbd2,14475076,1794496983331074\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Mac/clangd: Mac/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,3b68fc2802e86cc6d5b9f38f10467009b20dd9945322c9388da97da17291cb2e,15585584,1793384415828461..Mac/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,8aebe567b3f58aa0102d21c8d8c9c9d0527257d883d7f4ff384f31a0632e1e60,15579396,1794496983499748\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Mac/llvm-code-coverage: Mac/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,3c8eea01decf23c09930c5c90d8ce71c0c4e6c16c55745c3690c36d844b3acd5,2315240,1793384416331029..Mac/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,cccc011d04b45d8f9461e2218b0cbafb9b400e32fb44e4a7ba7bdd8de9534c21,2315676,1794496983624423\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Mac/llvmobjdump: Mac/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,fec5be8f8004d80edd6e296f53cf4778c242bfac5b1ac6c0e9ea4b78dd1eb0c8,5594628,1793384416226284..Mac/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,3c314cbc96f6b5bea8c193e952e3a219ed779af3129ae2378d9ef15a31bd2c41,5599080,1794496983506009\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Mac_arm64/clang: Mac_arm64/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,f9294be515a0096120c497bdb70374e3846baa244f039a68444ff44899510c74,45274068,1793384427206205..Mac_arm64/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,cdb4b1ef5dfcca7cf14a0ce2e93e3fcd0bb3f0cfcf3b812c982cb9aa79ac46d5,45561808,1794496992604087\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Mac_arm64/clang-tidy: Mac_arm64/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,b795d7826fb1fc3bef96a1713e8044b4913de7c92236d34c033e6a8f32777203,12358856,1793384427590392..Mac_arm64/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,6bd2c8fee8a1af026117ab89d3afd28b4354f6266d529b0e9fff773396b5000c,12340744,1794496992722678\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Mac_arm64/clangd: Mac_arm64/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,9f3f32d406487c6b0f92bb24b1860ceb711b3e37a784625f75a75a548a34ec17,12333736,1793384427386293..Mac_arm64/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,336c619186bfcbce3979a14556cc0459905b4ed899ffdfd998c272a954b83106,12336400,1794496992833917\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Mac_arm64/llvm-code-coverage: Mac_arm64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,c0fa17ce0edaa3986bd5d44e0f40a133fbef4824f75497464f9744a9e4675c61,1903036,1793384427772052..Mac_arm64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,57026d5f54a7698589838082fd831dd4d676a852c1782c9a8866a47e35d30b58,1902844,1794496993051288\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Mac_arm64/llvmobjdump: Mac_arm64/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,208ced05108b28a843fd0c9835d8995ce78a8f32e1e809115e39909c43afb64d,5283112,1793384427695807..Mac_arm64/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,01fda54469f3c444afd3aa79ae28ea59b45c72a99dd1d3cb564aff2f80d314ef,5283824,1794496992910479\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Win/clang: Win/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,357f648893f20ac66fac54d8d6b993c7077cffb06146083c646913d89e53636d,53275320,1793384439281141..Win/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,13fe3aef441c275bfae76a282f36743b4b91f7b430fabe3e7442a47952ed5098,53270236,1794497002392763\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Win/clang-tidy: Win/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,06d6b936e51347b63a363da75e1ba14045d060f2b2ec47944761b5ebe7a3b96c,15525416,1793384439306896..Win/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,4033ab43377a304248a15d3456eb93c4f197aecd635a7a88d398539e31f815b3,15514624,1794497002450054\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Win/clang-win-runtime-library: Win/clang-win-runtime-library-llvmorg-24-init-17044-gc3223914-1.tar.xz,164186406bb6e504d5fb63be872e311a67a70c5d07fbc6bac6ec927d2c7c5f01,2713256,1793384448865528..Win/clang-win-runtime-library-llvmorg-24-init-17044-gc3223914-12.tar.xz,65e6c303bae4700cd7f94558c9f9a4c240ba52aebbc42ea48269bbf3b569f858,2713480,1794497010862081\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Win/clangd: Win/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,74c47234002a5a918b91108c8587fdf97177e7f498ac5c38e00ee223c3a456ff,15977568,1793384439340015..Win/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,9cbfbe91f22f807c11fd2b11af99a387a3e1564f4110dc0d15f0bdf80796b10a,15962412,1794497002501378\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Win/llvm-code-coverage: Win/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,072fd0708bd28d18ad713495b1489d41d77b092242330125c6995347ef866d03,2617424,1793384439683656..Win/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,7082829cd007c6b761ca378d7d44176e9d4e7cfbdf5a16b9ec1b0542717f0077,2618392,1794497002683440\n\u003e\n\u003e Rolling gcs:chromium-browser-clang/Win/llvmobjdump: Win/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,55a6c6c8c141a1726ee4cabf6340fbb983d838cd860b82adf571977594e99e4a,6129952,1793384439573178..Win/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,4204e2a26cd87cd26393562b606f2207d3bf4be82f6d1e92dacd78e4d53a88be,6127592,1794497002570442\n\u003e\n\u003e Rolling third_party/llvm-libc/src: https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libc/+log/8002d03..47668e3\n\u003e\n\u003e Rolling third_party/partition_alloc: https://chromium.googlesource.com/chromium/src/base/allocator/partition_allocator/+log/2d63c19..961b259\n\u003e\n\u003e Rolling third_party/perfetto: https://chromium.googlesource.com/external/github.com/google/perfetto/+log/e078cba..71eb777\n\u003e\n\u003e Rolling third_party/rust: https://chromium.googlesource.com/chromium/src/third_party/rust/+log/ad98107..eae40af\n\u003e\n\u003e Rolling tools/clang: https://chromium.googlesource.com/chromium/src/tools/clang/+log/b8732dc..5509e65\n\u003e\n\u003e Roll created at https://cr-buildbucket.appspot.com/build/8665279614255381681\n\u003e\n\u003e Change-Id: I77f9d2d82d654ffee0c461534962b2a8003c40ee\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8812076\n\u003e Commit-Queue: v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com \u003cv8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com\u003e\n\u003e Bot-Commit: v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com \u003cv8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#112046}\n\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: I4d091439865f0f11a7c0725cc96ec892323beba7\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8815034\nAuto-Submit: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCommit-Queue: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#112047}\n" }, { "commit": "4af304604fe4ff83a0e3f31f54fecf64eac2dbe3", "tree": "57eb5979137fe0a4caca3f48e11ea58e17e5003e", "parents": [ "79d416c2900a0fc00e3868db480b0736be388370" ], "author": { "name": "v8-ci-autoroll-builder", "email": "v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 04:07:33 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 04:43:04 2026" }, "message": "Update V8 DEPS (trusted)\n\nRolling agents/internal: https://chrome-internal.googlesource.com/chrome/agents-internal/+log/4fd2920..3573934\n\nRolling build: https://chromium.googlesource.com/chromium/src/build/+log/7f08fef..618bebb\n\nRolling buildtools: https://chromium.googlesource.com/chromium/src/buildtools/+log/80d023d..a0ce846\n\nRolling buildtools/linux64: git_revision:24d41137fac7ea2828590181ebd8284fe7437253..git_revision:2f5f34aced5f9721cda3eef963f4f7d231a0ae99\n\nRolling buildtools/mac: git_revision:24d41137fac7ea2828590181ebd8284fe7437253..git_revision:2f5f34aced5f9721cda3eef963f4f7d231a0ae99\n\nRolling buildtools/win: git_revision:24d41137fac7ea2828590181ebd8284fe7437253..git_revision:2f5f34aced5f9721cda3eef963f4f7d231a0ae99\n\nRolling third_party/abseil-cpp: https://chromium.googlesource.com/chromium/src/third_party/abseil-cpp/+log/cc7c444..ecb00cc\n\nRolling third_party/boringssl/src: https://boringssl.googlesource.com/boringssl/+log/583980e..10c780b\n\nRolling third_party/catapult: https://chromium.googlesource.com/catapult/+log/8480c1b..5b55574\n\nRolling third_party/depot_tools: https://chromium.googlesource.com/chromium/tools/depot_tools/+log/1afcf07..dbd771c\n\nRolling third_party/googletest/src: https://chromium.googlesource.com/external/github.com/google/googletest/+log/2499058..1aa39fe\n\nRolling third_party/libc++/src: https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libcxx/+log/d816ed0..64f64c1\n\nRolling third_party/libc++abi/src: https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libcxxabi/+log/de3f732..a1e7b02\n\nRolling gcs:chromium-browser-clang/Linux_x64/clang-android-runtime-library: Linux_x64/clang-android-runtime-library-llvmorg-24-init-17044-gc3223914-1.tar.xz,32ee6479e6758449e8f333067f7835f2245d5ee01da2aa4374a1997e9dfc1467,6184780,1793384407072490..Linux_x64/clang-android-runtime-library-llvmorg-24-init-17044-gc3223914-12.tar.xz,f9862e1a53722c2e4df2c454e3d019aba0e3e210557d194cf2b727be6c719d31,6179536,1794496976211434\n\nRolling gcs:chromium-browser-clang/Linux_x64/clang: Linux_x64/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,4312432fd57f94766b62264161ec4afabeaca066fc812cf038efa88c154ef4da,58862184,1793384402930380..Linux_x64/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,68b281e8f8bc8ee597d947de336287cacde692aac010e811bd00a8eeee68db5e,58871192,1794496973381336\n\nRolling gcs:chromium-browser-clang/Linux_x64/clang-tidy: Linux_x64/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,6d4e813a19448c111c955316a2572c179a15f2f3062762a14064c782f90a01d2,15217164,1793384403254249..Linux_x64/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,2523229775f676872f15415ad170a60eb875fe5667309c41abb3a08492dcaa3a,15221252,1794496973533642\n\nRolling gcs:chromium-browser-clang/Linux_x64/clangd: Linux_x64/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,2d1d3d1212be660a26d0d554f449756be0ea5e03bab0df0598bf23cb140956f7,15589656,1793384403591262..Linux_x64/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,863ec435f085b494722d578c337bc18afdba43231a0292682d0cf0f04793abbd,15586032,1794496973611667\n\nRolling gcs:chromium-browser-clang/Linux_x64/llvm-code-coverage: Linux_x64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,a11f7b0a33accd98f3555e0591226745cc10e341141ed99eca0928accf0621a3,2436360,1793384403738488..Linux_x64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,df9b73d6c5cb5ad29789b33bf510b358ead82867709fbc221e6a986745599ff4,2435848,1794496973837505\n\nRolling gcs:chromium-browser-clang/Linux_x64/llvmobjdump: Linux_x64/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,0060c82105b8062ea0f405a087d035248748b75bf46ea3dc1050b8b5a479dbd6,6027024,1793384403555966..Linux_x64/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,d70cd6c27c4e6aae13ef1eec9472b7cd0554251b8589c0e1e28678f804e74744,6020100,1794496973671184\n\nRolling gcs:chromium-browser-clang/Mac/clang: Mac/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,595970106910ebbfa2d1051661a79c7fa728ee6ec211283b0e01909f009b4d1e,55194960,1793384415945083..Mac/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,66a03cb30beb90745ed85b2f7135d23164a53d8b229f8ae7ff51c4f1d8973e72,55484312,1794496983203107\n\nRolling gcs:chromium-browser-clang/Mac/clang-mac-runtime-library: Mac/clang-mac-runtime-library-llvmorg-24-init-17044-gc3223914-1.tar.xz,48f1a4d40fc7463441f9e8a9ddf54b45a3cafdac6cf3ab6075758ed23ded797a,998172,1793384425501560..Mac/clang-mac-runtime-library-llvmorg-24-init-17044-gc3223914-12.tar.xz,cc610d5a1c46f9b3489e25c784c35c176ddc367e9e016e5b0a4a80224cb252c2,1286220,1794496991189878\n\nRolling gcs:chromium-browser-clang/Mac/clang-tidy: Mac/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,cfa97d32b7f7b343c74dc55161cf014fce4c1eebb8a27df95ed584ddc2a6e76c,14480288,1793384416238915..Mac/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,ca158f5311a9bb876afd587e203b91e713269075f709cbab14dfbeada272bbd2,14475076,1794496983331074\n\nRolling gcs:chromium-browser-clang/Mac/clangd: Mac/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,3b68fc2802e86cc6d5b9f38f10467009b20dd9945322c9388da97da17291cb2e,15585584,1793384415828461..Mac/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,8aebe567b3f58aa0102d21c8d8c9c9d0527257d883d7f4ff384f31a0632e1e60,15579396,1794496983499748\n\nRolling gcs:chromium-browser-clang/Mac/llvm-code-coverage: Mac/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,3c8eea01decf23c09930c5c90d8ce71c0c4e6c16c55745c3690c36d844b3acd5,2315240,1793384416331029..Mac/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,cccc011d04b45d8f9461e2218b0cbafb9b400e32fb44e4a7ba7bdd8de9534c21,2315676,1794496983624423\n\nRolling gcs:chromium-browser-clang/Mac/llvmobjdump: Mac/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,fec5be8f8004d80edd6e296f53cf4778c242bfac5b1ac6c0e9ea4b78dd1eb0c8,5594628,1793384416226284..Mac/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,3c314cbc96f6b5bea8c193e952e3a219ed779af3129ae2378d9ef15a31bd2c41,5599080,1794496983506009\n\nRolling gcs:chromium-browser-clang/Mac_arm64/clang: Mac_arm64/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,f9294be515a0096120c497bdb70374e3846baa244f039a68444ff44899510c74,45274068,1793384427206205..Mac_arm64/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,cdb4b1ef5dfcca7cf14a0ce2e93e3fcd0bb3f0cfcf3b812c982cb9aa79ac46d5,45561808,1794496992604087\n\nRolling gcs:chromium-browser-clang/Mac_arm64/clang-tidy: Mac_arm64/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,b795d7826fb1fc3bef96a1713e8044b4913de7c92236d34c033e6a8f32777203,12358856,1793384427590392..Mac_arm64/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,6bd2c8fee8a1af026117ab89d3afd28b4354f6266d529b0e9fff773396b5000c,12340744,1794496992722678\n\nRolling gcs:chromium-browser-clang/Mac_arm64/clangd: Mac_arm64/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,9f3f32d406487c6b0f92bb24b1860ceb711b3e37a784625f75a75a548a34ec17,12333736,1793384427386293..Mac_arm64/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,336c619186bfcbce3979a14556cc0459905b4ed899ffdfd998c272a954b83106,12336400,1794496992833917\n\nRolling gcs:chromium-browser-clang/Mac_arm64/llvm-code-coverage: Mac_arm64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,c0fa17ce0edaa3986bd5d44e0f40a133fbef4824f75497464f9744a9e4675c61,1903036,1793384427772052..Mac_arm64/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,57026d5f54a7698589838082fd831dd4d676a852c1782c9a8866a47e35d30b58,1902844,1794496993051288\n\nRolling gcs:chromium-browser-clang/Mac_arm64/llvmobjdump: Mac_arm64/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,208ced05108b28a843fd0c9835d8995ce78a8f32e1e809115e39909c43afb64d,5283112,1793384427695807..Mac_arm64/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,01fda54469f3c444afd3aa79ae28ea59b45c72a99dd1d3cb564aff2f80d314ef,5283824,1794496992910479\n\nRolling gcs:chromium-browser-clang/Win/clang: Win/clang-llvmorg-24-init-17044-gc3223914-1.tar.xz,357f648893f20ac66fac54d8d6b993c7077cffb06146083c646913d89e53636d,53275320,1793384439281141..Win/clang-llvmorg-24-init-17044-gc3223914-12.tar.xz,13fe3aef441c275bfae76a282f36743b4b91f7b430fabe3e7442a47952ed5098,53270236,1794497002392763\n\nRolling gcs:chromium-browser-clang/Win/clang-tidy: Win/clang-tidy-llvmorg-24-init-17044-gc3223914-1.tar.xz,06d6b936e51347b63a363da75e1ba14045d060f2b2ec47944761b5ebe7a3b96c,15525416,1793384439306896..Win/clang-tidy-llvmorg-24-init-17044-gc3223914-12.tar.xz,4033ab43377a304248a15d3456eb93c4f197aecd635a7a88d398539e31f815b3,15514624,1794497002450054\n\nRolling gcs:chromium-browser-clang/Win/clang-win-runtime-library: Win/clang-win-runtime-library-llvmorg-24-init-17044-gc3223914-1.tar.xz,164186406bb6e504d5fb63be872e311a67a70c5d07fbc6bac6ec927d2c7c5f01,2713256,1793384448865528..Win/clang-win-runtime-library-llvmorg-24-init-17044-gc3223914-12.tar.xz,65e6c303bae4700cd7f94558c9f9a4c240ba52aebbc42ea48269bbf3b569f858,2713480,1794497010862081\n\nRolling gcs:chromium-browser-clang/Win/clangd: Win/clangd-llvmorg-24-init-17044-gc3223914-1.tar.xz,74c47234002a5a918b91108c8587fdf97177e7f498ac5c38e00ee223c3a456ff,15977568,1793384439340015..Win/clangd-llvmorg-24-init-17044-gc3223914-12.tar.xz,9cbfbe91f22f807c11fd2b11af99a387a3e1564f4110dc0d15f0bdf80796b10a,15962412,1794497002501378\n\nRolling gcs:chromium-browser-clang/Win/llvm-code-coverage: Win/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-1.tar.xz,072fd0708bd28d18ad713495b1489d41d77b092242330125c6995347ef866d03,2617424,1793384439683656..Win/llvm-code-coverage-llvmorg-24-init-17044-gc3223914-12.tar.xz,7082829cd007c6b761ca378d7d44176e9d4e7cfbdf5a16b9ec1b0542717f0077,2618392,1794497002683440\n\nRolling gcs:chromium-browser-clang/Win/llvmobjdump: Win/llvmobjdump-llvmorg-24-init-17044-gc3223914-1.tar.xz,55a6c6c8c141a1726ee4cabf6340fbb983d838cd860b82adf571977594e99e4a,6129952,1793384439573178..Win/llvmobjdump-llvmorg-24-init-17044-gc3223914-12.tar.xz,4204e2a26cd87cd26393562b606f2207d3bf4be82f6d1e92dacd78e4d53a88be,6127592,1794497002570442\n\nRolling third_party/llvm-libc/src: https://chromium.googlesource.com/external/github.com/llvm/llvm-project/libc/+log/8002d03..47668e3\n\nRolling third_party/partition_alloc: https://chromium.googlesource.com/chromium/src/base/allocator/partition_allocator/+log/2d63c19..961b259\n\nRolling third_party/perfetto: https://chromium.googlesource.com/external/github.com/google/perfetto/+log/e078cba..71eb777\n\nRolling third_party/rust: https://chromium.googlesource.com/chromium/src/third_party/rust/+log/ad98107..eae40af\n\nRolling tools/clang: https://chromium.googlesource.com/chromium/src/tools/clang/+log/b8732dc..5509e65\n\nRoll created at https://cr-buildbucket.appspot.com/build/8665279614255381681\n\nChange-Id: I77f9d2d82d654ffee0c461534962b2a8003c40ee\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8812076\nCommit-Queue: v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com \u003cv8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com\u003e\nBot-Commit: v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com \u003cv8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#112046}\n" }, { "commit": "79d416c2900a0fc00e3868db480b0736be388370", "tree": "1daf92be86adad7fab0628732e4736126ba78814", "parents": [ "46482fbbee9980f9c54db615f35ec20209186ef5" ], "author": { "name": "Liu Yu", "email": "liuyu@loongson.cn", "time": "Fri Nov 13 03:10:32 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 04:08:50 2026" }, "message": "[loong64][maglev] Fix StringCodePointAt at the end of a SlicedString\n\nPort commit 1be7c6714b564f543d03f8ac739e05b859642124\n\nChange-Id: I6cfa58c9c73931b9a54b2eeae9080a121a20437d\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8803734\nAuto-Submit: Liu Yu \u003cliuyu@loongson.cn\u003e\nReviewed-by: Zhao Jiazhong \u003czhaojiazhong-hf@loongson.cn\u003e\nCommit-Queue: Zhao Jiazhong \u003czhaojiazhong-hf@loongson.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112045}\n" }, { "commit": "46482fbbee9980f9c54db615f35ec20209186ef5", "tree": "998414b3bd968d6b6a01c4f936506e349b194f87", "parents": [ "e9c4ce143a463fcade2d596937253a9108c45def" ], "author": { "name": "LuYahan", "email": "yahan@iscas.ac.cn", "time": "Thu Nov 12 03:16:04 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 04:02:52 2026" }, "message": "[riscv][compiler] Sign-extend switch input in AssembleArchTableSwitch\n\nThe switch input is a 32-bit value whose upper 32 bits are not\nguaranteed to be sign-extended on riscv64: 32-bit ALU results may carry\ndirty upper bits (e.g. ~u32[0] for a Uint32Array element lowers to lwu\nfollowed by a full-width xori, which yields 0xffffffff_00000000 for a\nlogical 0). Both the range check and the jump table index below,\nhowever, operate on full 64-bit registers, so an in-range selector with\ndirty upper bits compares as greater than or equal to case_count and is\ndispatched to the default block instead of its case.\n\nAssembleArchBinarySearchSwitch already sign-extends the same SwitchOp\ninput for this reason. Do the same here before the Ugreater_equal\nbranch and GenerateSwitchTable, using the dedicated kScratchReg because\nGenerateSwitchTable acquires from the scratch register pool itself.\n\nreproduced on any other architecture.\n\nNo-Regression-Test: riscv64-specific codegen bug; it cannot be\nFixed: 579589272\nChange-Id: I8e6ab78f4ce51d5777617f68cfc8f1caa1c6edb0\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8793344\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nReviewed-by: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nAuto-Submit: Yahan Lu (LuYahan) \u003cyahan@iscas.ac.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112044}\n" }, { "commit": "e9c4ce143a463fcade2d596937253a9108c45def", "tree": "f0c088001a673847f4814759c02845cbcb6df1bc", "parents": [ "87cd56a2813901fb501d65f06ebcd086fd3da113" ], "author": { "name": "chromium-autoroll@skia-public.iam.gserviceaccount.com", "email": "chromium-autoroll@skia-public.iam.gserviceaccount.com", "time": "Fri Nov 13 02:51:16 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 03:18:00 2026" }, "message": "Roll agents from cb9a67747790 to 915560017c2c (1 revision)\n\nhttps://chromium.googlesource.com/chromium/agents.git/+log/cb9a67747790..915560017c2c\n\nIf this roll has caused a breakage, revert this CL and set the roller\nto dry run mode using the controls here:\nhttps://autoroll.skia.org/r/agents-v8\nPlease CC browser-perf-engprod@google.com,ggj@google.com,gmarcoesau@google.com on the revert to ensure that a human\nis aware of the problem.\n\nTo file a bug in agents: https://b.corp.google.com/issues/new?component\u003d1923111\u0026template\u003d2204026\nTo file a bug in V8: https://b.corp.google.com/issues/new?component\u003d1923111\u0026template\u003d2204026\n\nTo report a problem with the AutoRoller itself, please file a bug:\nhttps://issues.skia.org/issues/new?component\u003d1389291\u0026template\u003d1850622\n\nDocumentation for the AutoRoller is here:\nhttps://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md\n\nBug: None\nChange-Id: Ic86cf4c276eee3dfa3d4f70519088817731fb594\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8811998\nCommit-Queue: chromium-autoroll@skia-public.iam.gserviceaccount.com \u003cchromium-autoroll@skia-public.iam.gserviceaccount.com\u003e\nBot-Commit: chromium-autoroll@skia-public.iam.gserviceaccount.com \u003cchromium-autoroll@skia-public.iam.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#112043}\n" }, { "commit": "87cd56a2813901fb501d65f06ebcd086fd3da113", "tree": "93c073fd0969e0145b1c42db25099ac47bd10dc4", "parents": [ "f3bb03f6069753635e41f07e9430a27033984f12" ], "author": { "name": "Andrew Gaul", "email": "andrew@gaul.org", "time": "Sun Nov 01 20:33:37 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 02:51:41 2026" }, "message": "[riscv] Skip the stack adjustment for empty register lists\n\nPushAll and PopAll for double registers adjust sp by the size of the\nlist even when it is empty, emitting addi sp, sp, 0. Maglev\u0027s\nSaveRegisterStateForCall saves and restores the live double registers\nthis way around calls, and there usually are none. MultiPush, MultiPop\nand their FPU forms adjust sp the same way. Return early on an empty\nlist, as PushAll and PopAll for general registers already do.\n\nOn the JetStream 3 JavaScript tests in the riscv64 simulator (two\niterations, --single-threaded), this removes 90,324 of the 90,341 such\ninstructions from Maglev code, 361,296 bytes or about 1% of it.\n\nFound with riscvlint.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\nChange-Id: I9263fcf2be9313766150a8f3f1324287791c8dbc\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8697059\nReviewed-by: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nAuto-Submit: Andrew Gaul \u003candrew@gaul.org\u003e\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nReviewed-by: Yahan Lu (LuYahan) \u003cyahan@iscas.ac.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112042}\n" }, { "commit": "f3bb03f6069753635e41f07e9430a27033984f12", "tree": "e014c3abb9bc5db0d9ea930caeb2ccbdb9f0c846", "parents": [ "fa6639a21e0b2620fdc59ae4e2e45843e906aafc" ], "author": { "name": "LuYahan", "email": "yahan@iscas.ac.cn", "time": "Thu Nov 12 02:46:23 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 13 01:17:07 2026" }, "message": "[riscv][maglev] Fix StringCodePointAt at the end of a SlicedString\n\nPort commit 1be7c6714b564f543d03f8ac739e05b859642124\nBug: 576392871\n\nChange-Id: Iefb6da2fd21b51e2c9f24a5587494958bb09f510\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8800253\nReviewed-by: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCommit-Queue: Ji Qiu \u003cqiuji@iscas.ac.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112041}\n" }, { "commit": "fa6639a21e0b2620fdc59ae4e2e45843e906aafc", "tree": "78b36b199754d6772ba64630b95d467e24ff1de1", "parents": [ "2bdfe1c37492ac031a3eaf14cc2133ec8b8b99e8" ], "author": { "name": "issack john", "email": "issackjohn@microsoft.com", "time": "Wed Nov 11 18:00:04 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 20:23:37 2026" }, "message": "[api] Pass cross-origin status to stack trace filters.\n\nThe stack trace filter for Message::PrintCurrentStackTrace gets only a\nscript name. That is not enough for an embedder to decide which frame\ndetails may be shown to a web page. A cross-origin script loaded\nwithout CORS must stay hidden, and its URL does not reliably say so,\nbecause a same-origin URL can redirect to a cross-origin response.\n\nBlink uses this API to collect the JavaScript stack of a hung page and\nsends it to that page in a crash report. Without this information, the\nreport can include function names and source positions from\ncross-origin scripts the page is not allowed to read.\n\nAdd a Message::PrintCurrentStackTrace overload whose callback gets the\nscript name and ScriptOriginOptions::IsSharedCrossOrigin() for the\nframe\u0027s script, which the embedder sets when it compiles the script. A\nframe without its own script, such as a built-in like\nArray.prototype.forEach, is checked using the nearest caller that has a\nscript. Built-ins called from a hidden script stay hidden, and built-ins\ncalled from a visible script stay visible.\n\nRejected frames still print as \"\u003credacted\u003e\", as with the existing\nfilter. The old callback overload stays available, marked\nV8_DEPRECATE_SOON, so embedders can migrate. Calls with no filter, or\nwith an explicit nullptr, keep compiling without warnings or overload\nambiguity.\n\nStackFrame::IsScriptOpaque() is not used because it only works with\nCurrentStackTrace, which captures frames differently (for example, async\nframes) and has no matching printer. Using it would change the crash\nreport format.\n\nChromium CL: https://crrev.com/c/8616810\n\nBug: 563337460\nChange-Id: I93f28f0281d00d8c3d1d0577630f4e738b391277\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8616102\nReviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Igor Sheludko \u003cishell@chromium.org\u003e\nReviewed-by: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nCommit-Queue: Issack John \u003cissackjohn@microsoft.com\u003e\nCr-Commit-Position: refs/heads/main@{#112040}\n" }, { "commit": "2bdfe1c37492ac031a3eaf14cc2133ec8b8b99e8", "tree": "f22bd04318162977b1f0e7c47ee389d27151a53e", "parents": [ "31b02a32db73bf42f013d9a8f6048de51ba4f45e" ], "author": { "name": "Omer Katz", "email": "omerkatz@chromium.org", "time": "Wed Nov 11 13:34:30 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 19:47:10 2026" }, "message": "[handles] Fix TOCTOU and data race in HandleHelper::EqualHandles\n\nDuring parallel minor-GC weak root clearing\n(ClearWeaknessProcessor::ProcessBlock), multiple worker threads can\nconcurrently invoke EmbedderRootsHandler::TryResetRoot() for wrappers\nassociated with the same embedder object across different worlds (e.g.,\nmain world and isolated worlds in Blink).\n\nWhen checking handle equality against the shared main-world wrapper\nwhile another worker thread is concurrently resetting it:\n1. HandleHelper::EqualHandles previously checked IsEmpty() (reading\n location_) and then called ptr() (re-reading and dereferencing\n *location_). If another thread concurrently called Reset()\n (setting location_ to nullptr via SetSlotThreadSafe) between the two\n loads, ptr() dereferenced nullptr and crashed with SIGSEGV.\n2. Reading *location_ non-atomically in EqualHandles raced with\n TracedNode zapping in ClearWeaknessProcessor::ProcessBlock and\n TracedNode::Release.\n\nFix this by:\n- Adding ptr_relaxed() to IndirectHandleBase and DirectHandleBase that\n loads the handle slot and object address using relaxed atomics (and\n returns ValueHelper::kTaggedNullAddress when empty, avoiding a second\n load of location_).\n- Updating HandleHelper::EqualHandles to compare lhs.ptr_relaxed() and\n rhs.ptr_relaxed().\n- Using set_raw_object\u003cAccessMode::ATOMIC\u003e when clearing/zapping nodes\n in ClearWeaknessProcessor::ProcessBlock and TracedNode::Release.\n\nTAG\u003dAGY\n\nBug: 582204275\nChange-Id: I76ebb8ae3d56ca76b0102c6b54b83c72055d50a7\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8795456\nReviewed-by: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCommit-Queue: Omer Katz \u003comerkatz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112039}\n" }, { "commit": "31b02a32db73bf42f013d9a8f6048de51ba4f45e", "tree": "ecaa670353dcc3fc881544f356c801008fbb22db", "parents": [ "133ba8e4a90f104adfec217e4e87729bf1637b75" ], "author": { "name": "Anton Kirilov", "email": "anton.kirilov@arm.com", "time": "Mon Nov 09 14:25:57 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 19:03:44 2026" }, "message": "Reland \"Reland \"[arm64] Add a SME implementation of Uint8Array.toHex()\"\"\n\nThis is a reland of commit 7f50a50f6699e08c2bbc0d0cf33fe9e4644971db.\n\nAdd a missing conditional compilation check.\n\nOriginal change\u0027s description:\n\u003e Reland \"[arm64] Add a SME implementation of Uint8Array.toHex()\"\n\u003e\n\u003e This is a reland of commit fa605f53412e95a0aae5bd2966dbdf2c46659ebc.\n\u003e\n\u003e Make sure that the HWCAP2_* definitions are equivalent to the original\n\u003e ones in the Linux kernel source tree.\n\u003e\n\u003e Original change\u0027s description:\n\u003e \u003e [arm64] Add a SME implementation of Uint8Array.toHex()\n\u003e \u003e\n\u003e \u003e Add an implementation of the Uint8Array.toHex() method that uses the\n\u003e \u003e Scalable Matrix Extension (SME) to the Arm architecture.\n\u003e \u003e\n\u003e \u003e Also, unify the scalable vector register length detection logic with\n\u003e \u003e its RISC-V backend equivalent.\n\u003e \u003e\n\u003e \u003e Change-Id: I4233711f1122b7d736bf9cecb3ab2b44fa0f2cc2\n\u003e \u003e Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8494472\n\u003e \u003e Reviewed-by: Rezvan Mahdavi Hezaveh \u003crezvan@chromium.org\u003e\n\u003e \u003e Commit-Queue: Sam Parker-Haynes \u003csam.parker@arm.com\u003e\n\u003e \u003e Auto-Submit: Anton Kirilov \u003canton.kirilov@arm.com\u003e\n\u003e \u003e Reviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\n\u003e \u003e Cr-Commit-Position: refs/heads/main@{#111675}\n\u003e\n\u003e Change-Id: I60ddb1206d79f42b5484d0cf7bf0c820ce2f0e2e\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8747641\n\u003e Auto-Submit: Anton Kirilov \u003canton.kirilov@arm.com\u003e\n\u003e Reviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\n\u003e Reviewed-by: Rezvan Mahdavi Hezaveh \u003crezvan@chromium.org\u003e\n\u003e Commit-Queue: Rezvan Mahdavi Hezaveh \u003crezvan@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#111776}\n\nChange-Id: I2b502959f7f0814935d3b8dacbf31a87aaf019c5\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8776212\nReviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\nAuto-Submit: Anton Kirilov \u003canton.kirilov@arm.com\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Rezvan Mahdavi Hezaveh \u003crezvan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112038}\n" }, { "commit": "133ba8e4a90f104adfec217e4e87729bf1637b75", "tree": "9faf9fcfe831d6b7704a03c8871f1b802f408af0", "parents": [ "d4f0bef5aa05b6d388037b5c7ccf4ccb6e7ead0b" ], "author": { "name": "Manish Goregaokar", "email": "manishearth@google.com", "time": "Tue Nov 03 18:29:19 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 18:53:00 2026" }, "message": "[sandbox] Bound length in String::ToStdString and ToCString\n\nAn in-sandbox corrupted String (such as a ConsString DAG of 3-byte UTF-8\ncode units with length 0x55555555) can cause String::ToStdString() and\nString::ToCString() to compute utf8_bytes \u003d\u003d 0xFFFFFFFF via\nStringCharacterStream::CountUtf8Bytes(). When passed to APIs that cast\nbyte lengths to signed 32-bit integers (such as icu::StringPiece in\nicu::Locale::forLanguageTag), 0xFFFFFFFF truncates to -1 and triggers an\nout-of-bounds write in ICU\u0027s ultag_parse under ASan sandbox testing.\n\nAdd SBXCHECK_LE checks bounding length against String::kMaxLength. Since\nString::kMaxLength is at most (1 \u003c\u003c 29) - 24 and each UTF-16 code unit\nencodes to at most 3 UTF-8 bytes, utf8_bytes is bounded to\n\u003c\u003d 1,610,612,664 (\u003c INT32_MAX).\n\nLoad this-\u003elength() into a local variable before SBXCHECK_LE in\nToStdString() to satisfy DisallowSandboxAccess and avoid a double-fetch,\nand check ToCString\u0027s length parameter against String::kMaxLength rather\nthan re-reading this-\u003elength() so concurrent length mutations do not trip\nan extra check before WriteUtf8Bytes\u0027s capacity SBXCHECK_LE.\n\nBug: 579314138\nChange-Id: Ib47852897719a9635f8c0cc1d99d4cc0e4853cf0\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8716831\nAuto-Submit: Manish Goregaokar \u003cmanishearth@google.com\u003e\nReviewed-by: Igor Sheludko \u003cishell@chromium.org\u003e\nCommit-Queue: Manish Goregaokar \u003cmanishearth@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#112037}\n" }, { "commit": "d4f0bef5aa05b6d388037b5c7ccf4ccb6e7ead0b", "tree": "976acce5ab32d2af055c6d0989d4da6a19bdaadd", "parents": [ "ccd7b3143f0448644e0ad246d9c98723406da8ec" ], "author": { "name": "Toon Verwaest", "email": "verwaest@chromium.org", "time": "Thu Nov 12 17:50:59 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 18:46:57 2026" }, "message": "[compiler] Revisit in-place updates in JSCallReducer::Finalize\n\nJSCallReducer::Finalize previously invoked Reduce(node) directly and\nonly called Replace when replacement !\u003d node, doing nothing for\nin-place reductions (replacement \u003d\u003d node). This left newly added inputs\nunvisited and skipped running other reducers in GraphReducer (such as\nDeadCodeElimination and JSInliningHeuristic) on the updated node.\n\nCall Revisit(node) when replacement \u003d\u003d node in JSCallReducer::Finalize\nso GraphReducer visits new inputs and runs all reducers on the node.\n\nFixed: 577323082\nTAG\u003dagy\nCONV\u003dfe7078e3-fe0c-4a71-8915-5a7241e23851\n\nChange-Id: I3f24525d8d801a21976b69cd51225fa85aeaa069\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8727409\nCommit-Queue: Toon Verwaest \u003cverwaest@chromium.org\u003e\nReviewed-by: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112036}\n" }, { "commit": "ccd7b3143f0448644e0ad246d9c98723406da8ec", "tree": "576c46ab10c2d301f13da74c4879d7fdd2be6c6c", "parents": [ "6e80c0bb1176f4f1463bee9e90c0dd6d4b1c7008" ], "author": { "name": "Junji Watanabe", "email": "jwata@google.com", "time": "Thu Nov 12 04:59:17 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 18:08:00 2026" }, "message": "[deps] Fix invalid escape sequences in third_party/boringssl/DEPS\n\nFollow-up to https://crrev.com/c/8765620, which missed this file. The\nspecific_include_rules keys are regexes written as non-raw strings, so\n\"\\.\" is an invalid escape sequence that Chromium\u0027s checkdeps is about\nto treat as an error (https://crrev.com/c/8780756). Escape the\nbackslashes; the regexes are unchanged.\n\nBug: 584046308\nChange-Id: I3ac4fcdc19aceb6dc80143f0d1c1cc6c3d2222d7\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8794916\nReviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nAuto-Submit: Junji Watanabe \u003cjwata@google.com\u003e\nCommit-Queue: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112035}\n" }, { "commit": "6e80c0bb1176f4f1463bee9e90c0dd6d4b1c7008", "tree": "eb4f7d647ef41909cef0e13740f736801704392c", "parents": [ "dcb06451aa14eaf3845db3f0f2553c76d33da3e2" ], "author": { "name": "Joyee Cheung", "email": "joyee@igalia.com", "time": "Thu Nov 12 04:36:27 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 18:02:27 2026" }, "message": "[ast] fix AstFunctionLiteralIdReindexer::VisitClassLiteral\n\nPreviously AstFunctionLiteralIdReindexer::VisitClassLiteral was not\nfully in sync with AstTraversalVisitor::VisitClassLiteral and would\nkeep visiting class members after a nested visit hit the stack limit.\nKeep it in sync with AstTraversalVisitor::VisitClassLiteral and bail\nout when a nested visit hits the stack limit.\n\nBug: 577245956\nChange-Id: Ic77ac3e01bec1038f58f946999990b93d72b5a9a\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8793750\nCommit-Queue: Joyee Cheung \u003cjoyee@igalia.com\u003e\nReviewed-by: Toon Verwaest \u003cverwaest@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112034}\n" }, { "commit": "dcb06451aa14eaf3845db3f0f2553c76d33da3e2", "tree": "679b8e931342d51643294d5f7c11d93ae6351d41", "parents": [ "1c39fa862bff72f9837870c74dd9445244256750" ], "author": { "name": "Nikolaos Papaspyrou", "email": "nikolaos@chromium.org", "time": "Thu Nov 12 16:20:49 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 17:52:58 2026" }, "message": "[test] Enforce loop stack checks in regress-571944332\n\nThe test spawns a worker running an infinite loop and relies on\n`worker.terminate()` to interrupt it, which requires loop backedge stack\nchecks.\n\nTAG\u003dagy\nCONV\u003dd9b4c8af-1af4-4e52-87dc-c82c653ee8cf\n\nFixed: 585052735\nChange-Id: I8345bf5335377d6a49f7362d8c23dbd3c2decfed\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8804936\nReviewed-by: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nCommit-Queue: Nikolaos Papaspyrou \u003cnikolaos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112033}\n" }, { "commit": "1c39fa862bff72f9837870c74dd9445244256750", "tree": "08b3b4adf73ba501949e4c591955226fb014c4e4", "parents": [ "1d31b91bea37877a18627c227e5d8d12ace13af5" ], "author": { "name": "Leszek Swirski", "email": "leszeks@chromium.org", "time": "Thu Nov 12 16:35:38 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 17:36:17 2026" }, "message": "[cleanup] Enable readability-static-accessed-through-instance\n\nEnable `readability-static-accessed-through-instance` in `.clang-tidy`,\nupdate existing call sites to qualify static members by class name, and\nremove instance variables left unused.\n\nFor read-only flags, `FLAG_READONLY` previously used\n`static constexpr FlagValue`, causing `v8_flags.\u003cflag\u003e` reads to trip\nthis check even for flags that are mutable in other build configs.\nDeclare each read-only flag as an empty non-static struct with\n`V8_NO_UNIQUE_ADDRESS` instead, to avoid storage overhead while keeping\nuniform `v8_flags.\u003cflag\u003e` accesses.\n\nTAG\u003dagy\nCONV\u003d5f4a2a82-774b-41b5-81a3-15467ddd583f\n\nChange-Id: Iccaa5b4bfa4bca2fa122ecf568786edf2d0618b5\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8802756\nReviewed-by: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nAuto-Submit: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112032}\n" }, { "commit": "1d31b91bea37877a18627c227e5d8d12ace13af5", "tree": "a2c31bf1a53a96f3a9fd83ca5016204ff72db547", "parents": [ "63b4ffe7123489a88ec2e78039a4506ebcfab7ea" ], "author": { "name": "Igor Sheludko", "email": "ishell@chromium.org", "time": "Wed Nov 11 13:04:01 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 17:07:37 2026" }, "message": "[api] Rename *CallbackV2 to *Callback for named accessors/interceptors\n\nDefine AccessorNameSetterCallback, NamedPropertySetterCallback, and\nNamedPropertyDefinerCallback with the v8::Boolean-returning signatures\nand keep the *V2 names as V8_DEPRECATE_SOON aliases.\n\nAlso clean up leftovers from the callback signature migration:\n- Restrict PropertyCallbackInfo::HasShouldThrowOnError to v8::Boolean.\n- Replace Accessors::AccessorNameBooleanSetterCallback with\n v8::AccessorNameSetterCallback.\n- Untemplate MakeAccessorInfo, TemplateSetAccessor, and\n ObjectSetAccessor.\n- Remove obsolete UBSan and CFI icall suppressions for accessor and\n interceptor callbacks.\n\nTAG\u003dagy\nCONV\u003d75ed48e0-4532-4f28-83e5-2aafa75c2e8c\n\nBug: 348660658\nChange-Id: I53ea219f15f0e1baf25b147e3e8e4e47a5452f5f\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8676005\nCommit-Queue: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nAuto-Submit: Igor Sheludko \u003cishell@chromium.org\u003e\nReviewed-by: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112031}\n" }, { "commit": "63b4ffe7123489a88ec2e78039a4506ebcfab7ea", "tree": "93934fd251daf7c38bb2177e4b02331e0c8f76ce", "parents": [ "cf2794d692c910d72df904e6190084849dcfab84" ], "author": { "name": "Nikolaos Papaspyrou", "email": "nikolaos@chromium.org", "time": "Thu Nov 12 16:06:14 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 16:54:48 2026" }, "message": "[iterator-helpers] Implement iterator chunking\n\nThis CL implements the \"Iterator Chunking\" ECMAScript proposal\n(Iterator.prototype.chunks and Iterator.prototype.windows),\nwhich is at stage 3: https://tc39.es/proposal-iterator-chunking/\n\nIt is staged behind --js-iterator-chunking.\n\nTAG\u003dagy\nCONV\u003d2444018e-c500-450f-9e3f-8353ca33d3af\n\nBug: 504663595\nChange-Id: I75788b9a9d8ec82847fc98f31b4462d25717391b\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7944424\nReviewed-by: Olivier Flückiger \u003colivf@chromium.org\u003e\nReviewed-by: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCommit-Queue: Nikolaos Papaspyrou \u003cnikolaos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112030}\n" }, { "commit": "cf2794d692c910d72df904e6190084849dcfab84", "tree": "beccbd6000438309bb52fb591501f4a9ef549198", "parents": [ "0979de61281bc43ff2a1a557c6f5bff6c6b0e11d" ], "author": { "name": "v8-ci-autoroll-builder", "email": "v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 16:07:13 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 16:48:36 2026" }, "message": "Update V8 DEPS (trusted)\n\nRolling build: https://chromium.googlesource.com/chromium/src/build/+log/43aef65..7f08fef\n\nRolling buildtools: https://chromium.googlesource.com/chromium/src/buildtools/+log/d665f41..80d023d\n\nRolling buildtools/linux64: git_revision:74c32399b100531b22184bd6ac38c4b26bc86ca5..git_revision:24d41137fac7ea2828590181ebd8284fe7437253\n\nRolling buildtools/mac: git_revision:74c32399b100531b22184bd6ac38c4b26bc86ca5..git_revision:24d41137fac7ea2828590181ebd8284fe7437253\n\nRolling buildtools/win: git_revision:74c32399b100531b22184bd6ac38c4b26bc86ca5..git_revision:24d41137fac7ea2828590181ebd8284fe7437253\n\nRolling third_party/partition_alloc: https://chromium.googlesource.com/chromium/src/base/allocator/partition_allocator/+log/178ddb4..2d63c19\n\nRolling third_party/perfetto: https://chromium.googlesource.com/external/github.com/google/perfetto/+log/3c53ccd..e078cba\n\nRolling third_party/rust: https://chromium.googlesource.com/chromium/src/third_party/rust/+log/5228c65..ad98107\n\nRoll created at https://cr-buildbucket.appspot.com/build/8665324911866300049\n\nChange-Id: I0d31d4e617533fa9bcec4e41edc0bb0472778e0e\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8793180\nBot-Commit: v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com \u003cv8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com\u003e\nCommit-Queue: v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com \u003cv8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#112029}\n" }, { "commit": "0979de61281bc43ff2a1a557c6f5bff6c6b0e11d", "tree": "2cd1d34465e161862f068389ad115f08415a3893", "parents": [ "00c1b99ee913af06c5aa3bf764a832ba9061e54e" ], "author": { "name": "Ryan Diaz", "email": "ryandiaz@chromium.org", "time": "Wed Nov 11 23:18:37 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 16:18:50 2026" }, "message": "[x64-stack-align] Align Ignition normal call and construct flows\n\nUnder V8_X64_16BYTE_STACK_ALIGNMENT_BOOL:\n- Pad outgoing stack arguments in Interpreter stack construction calls\n- Pad the 3-slot FAST_CONSTRUCT frame header to 4 slots and pad the 3\n saved registers in NewImplicitReceiver and CallFunction\u0027s ToObject\n slow path.\n- Use PushArgument for 1-arg runtime calls in\n InterpreterEntryTrampoline, GenerateCall, ConstructedNonConstructable,\n and MacroAssembler::GenerateTailCallToReturnedCode, and keep\n saved-register areas even in GenerateTailCallToReturnedCode and\n CallDebugOnFunctionCall.\n\nBug: 42212385\nChange-Id: I07aab34861b6e29bfecd4713ed950041925dcabf\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8797988\nReviewed-by: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nCommit-Queue: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nAuto-Submit: Ryan Diaz \u003cryandiaz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112028}\n" }, { "commit": "00c1b99ee913af06c5aa3bf764a832ba9061e54e", "tree": "0308bc9529b5f42f69de5c1c07e4a42a40069185", "parents": [ "ec65c60809a94d58ecde81f0f45a86a5288d2789" ], "author": { "name": "Michael Achenbach", "email": "machenbach@chromium.org", "time": "Thu Nov 12 15:10:53 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 16:14:29 2026" }, "message": "[infra] Lower priority of experimental builders to 35\n\nBuilders on the experiments console previously used the default\npriority 30, same as the main CI builders. Lower them to 35 so that\nbuilders on the main consoles take precedence when bots are scarce.\n\nSet the default in experiment_builder, which covers all builders on\nthe console, and drop the now redundant explicit priority on the\nDrumbrake builder. As a side effect, the Drumbrake tester, which\ndidn\u0027t inherit the priority through the pair factory before, now\nalso runs at 35.\n\nBug: 582589507\nChange-Id: I5727d0dc1064d6ca61b95fa705c39604c91e484f\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8804616\nAuto-Submit: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nCommit-Queue: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nReviewed-by: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112027}\n" }, { "commit": "ec65c60809a94d58ecde81f0f45a86a5288d2789", "tree": "aecedbc621065b84221f633eecbb00bfdb9a4719", "parents": [ "da16d1e1b6139af999a81e1e9ff8866154ddb767" ], "author": { "name": "Marja Hölttä", "email": "marja@chromium.org", "time": "Thu Nov 12 14:58:47 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 15:45:10 2026" }, "message": "[turbolev] Record tagged alternatives in MaglevGraphOptimizer\n\nThis enables MaglevGraphOptimizer operate on unwrapped values better,\nsince it can find the tagged alternative whenever it needs it again.\n\nTAG\u003dagy\nCONV\u003d6cc5f997-005c-42fd-85be-dd3dc1d9ec90.\n\nBug: 583705778\nChange-Id: Ifa7c8c6dc4f180b0e8fd2189b3cd84cb098665df\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8801781\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCommit-Queue: Marja Hölttä \u003cmarja@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112026}\n" }, { "commit": "da16d1e1b6139af999a81e1e9ff8866154ddb767", "tree": "b3fd09a4de6e8c5aa91421b70a7045e692274cc0", "parents": [ "c5b8b1f6af61e109b145a1938f3c66794652e774" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Thu Nov 12 14:08:18 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 15:23:52 2026" }, "message": "[maglev] Fix left_map/right_map swap in BuildNewConsStringMap\n\nBuildNewConsStringMap swapped the unused `left` and `right` pointers\ninstead of `left_map` and `right_map` when canonicalizing ConsStringMap\ninputs.\n\nTAG\u003dagy\nCONV\u003dd6058296-91f3-4f77-8ac0-e4e51546074e\n\nChange-Id: I62aa6b8bd57500cf8bd594424ca6e6b403a63bc7\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8801579\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCommit-Queue: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nReviewed-by: Olivier Flückiger \u003colivf@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112025}\n" }, { "commit": "c5b8b1f6af61e109b145a1938f3c66794652e774", "tree": "d9f2c5b7e75f09484fc7e8d839a65b6badfa3bd9", "parents": [ "496facea719729d1a73a39c6d552e8214eefd30f" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Thu Nov 12 14:54:44 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 15:04:08 2026" }, "message": "[turboshaft] Preserve non-string maps across allocations in LLE\n\nTrack whether `MapMaskAndOr` may include String maps (reading cached\n`MapData::instance_type` via `BIMODAL_ACCESSOR_C` so parked background\nthreads do not dereference `Map` handles) so `can_allocate` only\ninvalidates String map assumptions, and skip `WipeAllMaps` when\ninitializing the map of a non-aliasing object.\n\nBug: 42204525, 505648716\nChange-Id: Id16d0ab694306b1f196112720f482ebae76879da\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8776351\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCommit-Queue: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112024}\n" }, { "commit": "496facea719729d1a73a39c6d552e8214eefd30f", "tree": "de934d42e850900e3d2bc2ea3e7a09b2e8832b51", "parents": [ "f376bd8406f42992fafe4129cb4fdb6a11433b10" ], "author": { "name": "Maksim Ivanov", "email": "emaxx@google.com", "time": "Tue Nov 10 10:16:31 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 14:56:36 2026" }, "message": "[d8][fuzzilli] Reset --stress-compaction state across REPRL\n\nFix the alternating GC state for --stress-compaction not being reset\nacross REPRL iterations, potentially resulting in nondeterminism.\n\nE.g. for the repro of crbug.com/575823799 which relied on\n--stress-compaction it improves the average REPRL\niterations-till-not-reproing-anymore metric by 5% on a sample dataset.\n\nBug: 581109797\nChange-Id: I272025fcce1e8151a4ac9148aed434de5e846f85\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8775849\nReviewed-by: Dominik Inführ \u003cdinfuehr@chromium.org\u003e\nCommit-Queue: Maksim Ivanov \u003cemaxx@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#112023}\n" }, { "commit": "f376bd8406f42992fafe4129cb4fdb6a11433b10", "tree": "5c285135d0c8550f9262b17d0535a3927f8efa20", "parents": [ "5b95745fd3a6f53c7ebaa1d54f0a6512d9f0312d" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Thu Nov 12 13:40:46 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 14:51:32 2026" }, "message": "[turboshaft] Explicitly wipe maps on CatchBlockBegin in LLE\n\n`CatchBlockBeginOp` currently wipes all maps only indirectly via\n`CanCallAnything()` setting `can_allocate`. Call `WipeAllMaps()`\nexplicitly in `kCatchBlockBegin` ahead of preserving non-string maps\nacross allocations.\n\nChange-Id: If2c82c01af3790c11fe18640c8fb64e262defe1f\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8802241\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCommit-Queue: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112022}\n" }, { "commit": "5b95745fd3a6f53c7ebaa1d54f0a6512d9f0312d", "tree": "e058e19832850dd5b8f872f2f05b5d5653e26b5a", "parents": [ "4a8c16b6fb60617e84d0ae4d51bd995ed81b7316" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Thu Nov 12 13:38:57 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 14:48:45 2026" }, "message": "[turboshaft] Fix infinite revisit in StoreStoreElimination loop seal\n\nWhen revisiting a loop header in `MaybeRedundantStoresTable::Seal`,\nkeep the new snapshot rather than `std::max(old, new)` so narrowing\nobservability (e.g. `kObservable` -\u003e `kGCObservable` from an outer loop\nrevisit) updates the stored snapshot instead of looping forever. This\nwas overlooked in https://crrev.com/c/7829783 and\nhttps://crrev.com/c/7859812.\n\nFixed: 556584687\n\nChange-Id: Idab813bd3efa285446b7aeee6d938a3127c3a292\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8802835\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCommit-Queue: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112021}\n" }, { "commit": "4a8c16b6fb60617e84d0ae4d51bd995ed81b7316", "tree": "1c09846c0171ffe3e06967495c1e7eaaadbe1a82", "parents": [ "5cd10f620a33b12f1e9a6115a293caf2d7b43914" ], "author": { "name": "Junliang Yan", "email": "junyan1@ibm.com", "time": "Wed Nov 11 02:27:14 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 14:42:23 2026" }, "message": "ppc64: use temps under JumpIfSmi\n\nThe Smi literal materialized for the comparison in\nBaselineAssembler::JumpIfSmi hard-coded r0 as a throwaway value\nregister. Acquire it from the baseline scratch scope instead\n\nIT: 8\nChange-Id: Ifd0431400c7932359c9921079255785eaa654e2e\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8789251\nAuto-Submit: John \u003cjunyan1@ibm.com\u003e\nCommit-Queue: Milad Farazmand \u003cmfarazma@ibm.com\u003e\nReviewed-by: Milad Farazmand \u003cmfarazma@ibm.com\u003e\nCr-Commit-Position: refs/heads/main@{#112020}\n" }, { "commit": "5cd10f620a33b12f1e9a6115a293caf2d7b43914", "tree": "30da831af000ab319b56db35afab5c6a52f7c382", "parents": [ "d9ebc0109b942968b7f918f4802fa04d083d2310" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Thu Nov 12 13:18:22 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 14:34:20 2026" }, "message": "[maglev] Elide safe-int check on truncatable Float64 inputs\n\nA Float64 operation that keeps can_truncate_to_int32 after partial\ntruncation already had a safe-int static range and was charged its full\nexact bound during truncation propagation. Emit TruncateFloat64ToInt32\ninstead of TruncateFloat64AsSafeIntToInt32 for such inputs so partial\ntruncation shifting the intermediate value outside [-2^50, 2^50 - 1]\ndoes not cause unnecessary eager deoptimizations.\n\nChange-Id: I0c339fc32b0c245f99ea7f8d41e8b64ec7d6f0e4\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8802838\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCommit-Queue: Toon Verwaest \u003cverwaest@chromium.org\u003e\nReviewed-by: Toon Verwaest \u003cverwaest@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112019}\n" }, { "commit": "d9ebc0109b942968b7f918f4802fa04d083d2310", "tree": "49d482a23229a07c06f0002502fcc119f3668546", "parents": [ "1e2ffe6872037e85ce390f830d673f199c7f1a96" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Thu Nov 12 13:13:34 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 14:33:15 2026" }, "message": "[maglev] Fix safe-add truncation bounds and inputs\n\nNon-speculating Float64SpeculateSafeAdd nodes do not range-check their\nFloat64 operands, so bound untruncated operands by their static range.\nAlso treat truncatable Float64 inputs as safe-int inputs during\nspeculative truncation and clear can_truncate_to_int32 when falling back\nto Float64Add.\n\nTAG\u003dagy\nCONV\u003d4939afa0-122a-438a-a68a-dc6e44d4d59d\n\nFixed: 572400989\nChange-Id: I18cf2e32f697b48b9de6664807372734a5fc89a6\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8777607\nCommit-Queue: Toon Verwaest \u003cverwaest@chromium.org\u003e\nReviewed-by: Toon Verwaest \u003cverwaest@chromium.org\u003e\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112018}\n" }, { "commit": "1e2ffe6872037e85ce390f830d673f199c7f1a96", "tree": "49f3a982d3c1b16906fee2157ca95d057d7c047f", "parents": [ "77156791aad62ee444bcc66f73efa9d42903c727" ], "author": { "name": "pthier", "email": "pthier@chromium.org", "time": "Thu Nov 12 10:43:31 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 14:31:30 2026" }, "message": "[objects] Stop using StringForwardingTable in String and StringTable\n\nRemove StringForwardingTable lookups and insertions from String,\nStringTable, Name, StubCache, and object verifiers, along with\nName::set_raw_hash_field_if_empty,\nString::MarkForExternalizationDuringGC, and\nString::MakeExternalDuringGC.\n\nTAG\u003dagy\nCONV\u003d107a1a47-e95e-44d3-a89a-09f506b18faa\n\nBug: 572988458\nChange-Id: I19d33af8b408ed26e2ff14aef86e16e79c1f0edf\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8780925\nReviewed-by: Olivier Flückiger \u003colivf@chromium.org\u003e\nCommit-Queue: Patrick Thier \u003cpthier@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112017}\n" }, { "commit": "77156791aad62ee444bcc66f73efa9d42903c727", "tree": "55094863e59575d40d907e1a74e60a1047f26a6c", "parents": [ "40b43c1dd4c14f3d3739333665868fb4abbe9bdb" ], "author": { "name": "Victor Gomes", "email": "victorgomes@chromium.org", "time": "Thu Nov 12 13:06:52 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 13:49:59 2026" }, "message": "[maglev] Remove redundant maglev_escape_analysis implication\n\n--maglev-escape-analysis is already enabled by default.\n\nBug: 326091155\nChange-Id: I2558d3f89f5428079c6d6338893b0e40866980d6\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8802240\nCommit-Queue: Marja Hölttä \u003cmarja@chromium.org\u003e\nCommit-Queue: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nAuto-Submit: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nReviewed-by: Marja Hölttä \u003cmarja@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112016}\n" }, { "commit": "40b43c1dd4c14f3d3739333665868fb4abbe9bdb", "tree": "840c96fe2224a445a58e2e567c223d0a87679e56", "parents": [ "4e1b084f68a50f95c154886b1e542a9b2feef66e" ], "author": { "name": "Clemens Backes", "email": "clemensb@chromium.org", "time": "Thu Nov 12 07:57:20 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 13:34:44 2026" }, "message": "[wasm] Remove unused WasmEnabledFeatures::ForAsmjs\n\nWasmEnabledFeatures::ForAsmjs has had no callers since\nhttps://crrev.com/c/8130739 removed asm.js support.\n\nTAG\u003dagy\nCONV\u003d576487cd-92ce-4585-93a0-c4e5a9ef4deb\n\nBug: 579412262\nChange-Id: If96fd6a9ae8828cdacfcdd6412242b8dcfc03bd6\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8801833\nAuto-Submit: Clemens Backes \u003cclemensb@chromium.org\u003e\nReviewed-by: Thibaud Michaud \u003cthibaudm@chromium.org\u003e\nCommit-Queue: Thibaud Michaud \u003cthibaudm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112015}\n" }, { "commit": "4e1b084f68a50f95c154886b1e542a9b2feef66e", "tree": "42fc3f196eb5b2222c9813c68a768a929eec7710", "parents": [ "8ee5051560e96ddeda19a25342911459d5adc3fa" ], "author": { "name": "Liu Yu", "email": "liuyu@loongson.cn", "time": "Thu Nov 12 12:15:38 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 13:13:09 2026" }, "message": "[loong64] Replace kScratchReg with UseScratchRegisterScope in builtins\n\nChange-Id: I1ec89dad5a251acff49821f3c114c6e84aa3ae71\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8801484\nReviewed-by: Zhao Jiazhong \u003czhaojiazhong-hf@loongson.cn\u003e\nAuto-Submit: Liu Yu \u003cliuyu@loongson.cn\u003e\nCommit-Queue: Zhao Jiazhong \u003czhaojiazhong-hf@loongson.cn\u003e\nCr-Commit-Position: refs/heads/main@{#112014}\n" }, { "commit": "8ee5051560e96ddeda19a25342911459d5adc3fa", "tree": "be85bf8eeb79d37ea81d5e6de3696326b8ef9db3", "parents": [ "919c764acee926b09cdec7f634d103557a48fecd" ], "author": { "name": "Igor Sheludko", "email": "ishell@chromium.org", "time": "Thu Nov 12 12:13:32 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 13:06:56 2026" }, "message": "[test] Speed up regress-584005343 under --gc-stress\n\nReduce recursion depth and step unwinding attempts in probe() so\ncompilation hits the inner-initializer stack overflow window in a few\nStackOverflow calls instead of triggering hundreds of full-heap GCs\nunder --gc-stress.\n\nTAG\u003dagy\nCONV\u003d31fcf4fa-8cc7-4056-9e94-0d833bac7012\n\nBug: 584005343\nChange-Id: Ibf6a77cae2202b6c779405a21f39db537b9f5242\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8802836\nReviewed-by: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nAuto-Submit: Igor Sheludko \u003cishell@chromium.org\u003e\nCommit-Queue: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112013}\n" }, { "commit": "919c764acee926b09cdec7f634d103557a48fecd", "tree": "9ba6e3b8fe73437de4474b636c6819e19907f5d3", "parents": [ "1647b6e2f1d4ad86e67682ad5c778c02567354be" ], "author": { "name": "Leszek Swirski", "email": "leszeks@chromium.org", "time": "Fri Nov 06 14:34:49 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 12:20:41 2026" }, "message": "[gcmole] Track raw member addresses and references across GCs\n\nTaking the address or a C++ reference of an on-heap object\u0027s member\n(such as `\u0026obj-\u003efield_`, `int\u0026 ref \u003d obj-\u003efield_`, or\n`obj-\u003einline_buffer_`) produces a raw interior pointer into the V8 heap\nthat becomes dangling if a GC relocates `obj`, even when the field type\nitself is a primitive or `*Member` wrapper.\n\nPropagate on-heap member lvalue and raw address provenance through\nexpressions and track local pointer, `Address`, and reference variables\nderived from on-heap members in Environment alongside raw pointers so\nusing them across a GC is flagged.\n\nDesign doc: https://docs.google.com/document/d/1IVAFwIgPIGspX77Xmqoe13C6dU5LEoT0_0O4PySLYsc/edit\n\nTAG\u003dagy\nCONV\u003db28ddaf1-e172-44f5-8ec2-f06f4134b6e9\n\nBug: 571823300\nChange-Id: Iaa144ff08504d0e1cceea2ad5fa4011ff0167eae\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8597446\nReviewed-by: Maksim Ivanov \u003cemaxx@google.com\u003e\nCommit-Queue: Leszek Swirski \u003cleszeks@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112012}\n" }, { "commit": "1647b6e2f1d4ad86e67682ad5c778c02567354be", "tree": "083f8ad131753969961d1c2dfc65eb411605fd24", "parents": [ "9e86f9a3efef16a531a0da900296f4c534960cab" ], "author": { "name": "Clemens Backes", "email": "clemensb@chromium.org", "time": "Wed Nov 11 15:12:59 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 12:12:17 2026" }, "message": "[wasm][streaming] Defer streaming completion to foreground task\n\n`AsyncCompileJob::StartForegroundTask` posts foreground compilation\ntasks as non-nestable so completion and instantiation callbacks never\nrun nested inside an API interrupt (https://crrev.com/c/8211879).\nHowever, `AsyncStreamingProcessor::OnFinishedStream` and\n`AsyncStreamingProcessor::Deserialize` still called `FinishCompile` and\n`Failed` synchronously on the embedder call stack.\n\nWe cannot unconditionally spawn a non-nestable foreground task on stream\ncompletion because Node.js (`DeserializeWasmModule`) relies on\n`WasmModuleCompilation::Finish` completing synchronously. Instead, add\n`AsyncCompileJob::DoImmediatelyOrDefer`, which finishes synchronously on\nthe foreground thread unless the isolate is executing an API interrupt\nor JavaScript execution is disallowed (e.g. Blink\u0027s\n`ScriptForbiddenScope` during BFCache freeze).\n\nTAG\u003dagy\nCONV\u003d30cd6141-813c-4b7e-806f-de8410ec6f7b\n\nBug: 580857997\nChange-Id: Icb7340a58c033f6cfea9fca1842708679ab0638b\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8726930\nCommit-Queue: Clemens Backes \u003cclemensb@chromium.org\u003e\nReviewed-by: Jakob Kummerow \u003cjkummerow@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112011}\n" }, { "commit": "9e86f9a3efef16a531a0da900296f4c534960cab", "tree": "7a0b0a5651bcf9cb17864db0902035f35d80018e", "parents": [ "c3fe1785f94e5727ffe7b841c78631926425abde" ], "author": { "name": "Fumitoshi Ukai", "email": "ukai@google.com", "time": "Thu Nov 12 03:16:37 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 11:51:29 2026" }, "message": "[tools] Remove obsolete buildtools/reclient from bigsleep _DENY_LIST\n\nbuildtools/reclient was removed from V8 DEPS in\nhttps://crrev.com/c/8675802.\n\nBug: 379584977\nChange-Id: I1f37bab354e0b485efa772d113fbb232c959d3d4\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8800293\nCommit-Queue: Samuel Groß \u003csaelo@chromium.org\u003e\nAuto-Submit: Fumitoshi Ukai \u003cukai@google.com\u003e\nReviewed-by: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nReviewed-by: Samuel Groß \u003csaelo@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112010}\n" }, { "commit": "c3fe1785f94e5727ffe7b841c78631926425abde", "tree": "664505ba57e1780f0685cad47fcc8735281f1558", "parents": [ "11ff42a765f7c855d0b5be7b390f7deceff47424" ], "author": { "name": "Andrew Gaul", "email": "andrew@gaul.org", "time": "Thu Nov 12 04:25:45 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 11:49:27 2026" }, "message": "[maglev] Skip the argc check in returns without parameters\n\nA Maglev return drops max(formal, actual) argument slots. Both counts\ninclude the receiver, so when the function has no formal parameters\nthe actual count is never smaller and the comparison is redundant.\nTurboFan\u0027s AssembleReturn already skips it in that case.\n\nDrop the actual count directly when there are no formal parameters.\nx64 is unchanged: it pops a constant count with ret when the caller\npassed no extra arguments. This removes 16,992 instructions (0.16%)\nfrom JetStream 3\u0027s Maglev code on arm64.\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\nChange-Id: I25cff550ae3ca39c3112bc41294f147cb7fb63aa\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8797559\nCommit-Queue: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nReviewed-by: Victor Gomes \u003cvictorgomes@chromium.org\u003e\nReviewed-by: Darius Mercadier \u003cdmercadier@chromium.org\u003e\nAuto-Submit: Andrew Gaul \u003candrew@gaul.org\u003e\nCr-Commit-Position: refs/heads/main@{#112009}\n" }, { "commit": "11ff42a765f7c855d0b5be7b390f7deceff47424", "tree": "8b507af25f1444b619d1cb704c18089dcc9abef7", "parents": [ "4fa369bdccb98b752122e8fe6fa8f0c484ce2313" ], "author": { "name": "Omer Katz", "email": "omerkatz@chromium.org", "time": "Wed Nov 11 13:52:19 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 11:30:01 2026" }, "message": "[heap] Fix shared marking handling in TrustedPointerSlot write barrier\n\nUpdate `WriteBarrier::Marking(Tagged\u003cHeapObject\u003e, TrustedPointerSlot)`\nand `MarkingBarrier::Write(Tagged\u003cHeapObject\u003e, TrustedPointerSlot)` to\naccount for shared heap marking on client isolates and avoid reading the\nin-sandbox `MemoryChunk` flags of `host`:\n- Add `MarkingBarrier::is_shared()` and check it alongside\n `is_not_major()` in `WriteBarrier::Marking` and\n `MarkingBarrier::Write`.\n- Replace `DCHECK(MemoryChunk::FromHeapObject(host)-\u003eIsMarking())` with\n `DCHECK_IMPLIES(is_not_major(), is_shared())`.\n- Add `TrustedHeapLayout::InWritableSharedSpace` and use it in\n `MarkingBarrier::Write(Tagged\u003cHeapObject\u003e, TrustedPointerSlot)`.\n\nBug: 582355452\nChange-Id: I7b6c69666abb03b5841b9a4c2de11b2221d7fc00\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8795830\nReviewed-by: Dominik Inführ \u003cdinfuehr@chromium.org\u003e\nCommit-Queue: Omer Katz \u003comerkatz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112008}\n" }, { "commit": "4fa369bdccb98b752122e8fe6fa8f0c484ce2313", "tree": "5489619bcd63f46a5c23142f70d20c58bff51929", "parents": [ "710514a4f93c4861663c117d6635e522c0ed0237" ], "author": { "name": "Igor Sheludko", "email": "ishell@chromium.org", "time": "Thu Nov 12 10:43:05 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 11:24:41 2026" }, "message": "[runtime] Fix prototype map abandonment and normalization\n\nDo not pre-normalize non-extensible targets in\nJSReceiver::SetOrCopyDataProperties, mark normalized fast prototype maps\nas abandoned in JSObject::MigrateToMap, and guard against cleared\nPrototypeInfo in AccessInfoFactory.\n\nTAG\u003dagy\nCONV\u003dc30977b0-cacd-426b-8bbb-be6f0b4b6e94\n\nFixed: 579023000\nChange-Id: Id81b929e1d8f93b939f3e7a161394d0eab2fbcc6\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8801776\nAuto-Submit: Igor Sheludko \u003cishell@chromium.org\u003e\nCommit-Queue: Igor Sheludko \u003cishell@chromium.org\u003e\nReviewed-by: Toon Verwaest \u003cverwaest@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112007}\n" }, { "commit": "710514a4f93c4861663c117d6635e522c0ed0237", "tree": "c684aeff3cdf78da8140c2e5663742f27c8ba92a", "parents": [ "cfb217dd5e01378016a15a32d93753be42181149" ], "author": { "name": "Simon Zünd", "email": "szuend@chromium.org", "time": "Thu Nov 12 09:38:15 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 10:53:20 2026" }, "message": "[inspector] Add Debugger.getScopeChain\n\nThe scope objects reported with Debugger.paused are snapshots that go\nstale once variables change while paused, e.g. via\nDebugger.evaluateOnCallFrame or Debugger.setVariableValue.\n\nThe new experimental command returns a freshly materialized scope chain\nfor a call frame, so clients can re-fetch the variables whenever\nsomething may have changed. The scope objects are bound to the same\nobject group as the ones of the paused event.\n\nTAG\u003dagy\nCONV\u003d1699b4bc-2478-43c6-a16a-d22caa48746b\n\nBug: 583942448\nChange-Id: I40ac6885336bcf483819bda40976926e34d7120b\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8802314\nCommit-Queue: Simon Zünd \u003cszuend@chromium.org\u003e\nReviewed-by: Philip Pfaffe \u003cpfaffe@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112006}\n" }, { "commit": "cfb217dd5e01378016a15a32d93753be42181149", "tree": "f42ad007fd7f8b628c9b6a4c54dd1d3aab4147c0", "parents": [ "169b9bce762ea407c8ed0dcd1247077a15ee4d42" ], "author": { "name": "Daniel Lehmann", "email": "dlehmann@chromium.org", "time": "Wed Nov 11 16:50:16 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 10:36:27 2026" }, "message": "[wasm] Specialize Wasm-to-JS wrappers on receiver\n\nhttps://crrev.com/c/8425969 fixed the receiver of cross-realm sloppy\nWasm-to-JS imports by loading the global proxy via the callee\u0027s context\n(callee_context -\u003e Map -\u003e native_context -\u003e global_proxy) on every\ncall. The two extra dependent loads regressed Calls-Microbench directJS\nand indirectJS by 11-16%.\n\nWhether a JSFunction is strict or native, and which realm it belongs\nto, never changes. Decide the receiver once in\nResolvedWasmImport::ComputeKind and split ImportCallKind::kJSFunction\n(part of the wrapper cache key) into three variants:\n- kJSFunctionUndefinedReceiver (strict or native): pass undefined,\n which also removes the SharedFunctionInfo::flags_ load and branch.\n- kJSFunctionSameRealmReceiver (sloppy, importer\u0027s realm): load the\n global proxy from WasmImportData::native_context (already loaded at\n wrapper entry).\n- kJSFunctionCrossRealmReceiver (sloppy, other realm): keep the load\n chain via callee_context so cross-realm imports still use the generic\n wrapper and lazy tier-up.\n\nRuntime_TierUpWasmToJSWrapper already enters\nWasmImportData::native_context before re-resolving the import, matching\ninstantiation so both compute the same cache key. The generic wrapper\nis unaffected because CallVarargs selects the receiver.\n\nTAG\u003dagy\nCONV\u003df140e69d-6c69-4be1-ab99-4b5541153c34\n\nFixed: 565957812\nChange-Id: I2cc1ac84c2448b12553fb3144e844b5c72b51df1\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8795459\nReviewed-by: Clemens Backes \u003cclemensb@chromium.org\u003e\nCommit-Queue: Daniel Lehmann \u003cdlehmann@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112005}\n" }, { "commit": "169b9bce762ea407c8ed0dcd1247077a15ee4d42", "tree": "5a7a63ad811250ac357091622d51cc10ac05e5d2", "parents": [ "0726e9dd9ee6708892756ce2b2b753fa201625ce" ], "author": { "name": "Omer Katz", "email": "omerkatz@chromium.org", "time": "Wed Nov 11 13:09:16 2026" }, "committer": { "name": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "v8-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 12 10:23:05 2026" }, "message": "Reland \"[heap] Sweep shared_trusted_lo_space in MarkCompactCollector::Sweep\"\n\nThis is a reland of commit 83578cd4434d8c02ac5cbc84b64f292377734b4e\n\nChanges since revert:\n- Add `ManualGCScope` to `SharedHeapTest.SweepSharedTrustedLargeObjectSpace`\n so `--stress-incremental-marking` does not mark dead test objects before\n their `HandleScope` closes.\n\nOriginal change\u0027s description:\n\u003e [heap] Sweep shared_trusted_lo_space in MarkCompactCollector::Sweep\n\u003e\n\u003e Sweep `shared_trusted_lo_space()` in `MarkCompactCollector::Sweep()` so\n\u003e dead large objects in `SHARED_TRUSTED_LO_SPACE` are reclaimed and\n\u003e surviving large objects have their markbits cleared and live bytes reset.\n\u003e\n\u003e Also include `SHARED_TRUSTED_LO_SPACE` in `IsAnyLargeSpace()` and add\n\u003e `shared_trusted_space()` and `shared_trusted_lo_space()` to\n\u003e `FullMarkingVerifier::Run()` and `MarkCompactCollector::VerifyMarking()`.\n\u003e\n\u003e Bug: 518132017, 579428646\n\u003e Change-Id: I9f7ac892088fd569a46b221df0d3c93e059e7998\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8780963\n\u003e Commit-Queue: Omer Katz \u003comerkatz@chromium.org\u003e\n\u003e Reviewed-by: Dominik Inführ \u003cdinfuehr@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#111979}\n\nBug: 518132017, 579428646\nChange-Id: I1547a659e4fb4c50f64117695345bae8399cf376\nReviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/8802233\nCommit-Queue: Dominik Inführ \u003cdinfuehr@chromium.org\u003e\nCommit-Queue: Omer Katz \u003comerkatz@chromium.org\u003e\nAuto-Submit: Omer Katz \u003comerkatz@chromium.org\u003e\nReviewed-by: Dominik Inführ \u003cdinfuehr@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#112004}\n" } ], "next": "0726e9dd9ee6708892756ce2b2b753fa201625ce" }