)]}' { "log": [ { "commit": "5d693be0288d50069509f5e1cc5571f715fb25b7", "tree": "84fe6ee526a12da762da0138c984d7932f755961", "parents": [ "6413fa06e38dadc1002fe2f86720bb28ce6bf538" ], "author": { "name": "Etienne Bergeron", "email": "etienneb@google.com", "time": "Fri Jul 17 14:38:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 17 14:43:28 2026" }, "message": "[net/base] Block .scf and .url files in IsShellIntegratedExtension\n\nA divergence between net::IsShellIntegratedExtension() and\nFileSystemChooser::IsShellIntegratedExtension() allowed .url and .scf\nfiles to bypass extension sanitization during standard downloads.\n\nWindows Explorer automatically parses .url and .scf files upon folder\nview (without the user double-clicking them) to retrieve metadata\nor render icons. If a downloaded .url contains an IconFile pointing\nto a remote UNC path, simply viewing the Downloads directory triggers\nan automatic outbound SMB connection, leading to a disclosure of the\nvictim\u0027s NetNTLMv2 credential hash.\n\nThis CL adds \"scf\" and \"url\" to net::IsShellIntegratedExtension(),\nensuring they are correctly renamed to \".download\" on Windows during\nstandard downloads.\n\nBug: 533511921\nTest: net_unittests --gtest_filter\u003dFilenameUtilTest.*\nChange-Id: Iff138ff80003999fd3f447dffec1647d45ab2b1d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8086934\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCommit-Queue: Etienne Bergeron \u003cetienneb@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1663888}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a94fdc22a1e11467b08cbc4bc5b8e062ae8bc358\n" }, { "commit": "6413fa06e38dadc1002fe2f86720bb28ce6bf538", "tree": "726fd88d7e3d776299c80a29cbe0738b096b44c6", "parents": [ "57d39ffe92b5afae122c44152446235f01170e5f" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Fri Jul 17 14:28:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 17 14:32:05 2026" }, "message": "Fix A and HTTPS queries timing out for DnsPlatformAndroidAttempt\n\nThe queries were not actually timing out. Instead,\nDnsPlatformAndroidAttempt mistakenly swapped the ns_class and ns_class\nparameters when calling android_res_nquery. Surprisingly,\nandroid_res_nquery does not reject the query, but instead sends it out\nand eventually fails with ERRNO \u003d\u003d ETIMEDOUT (possibly due to the\nrecursive resolver rejecting the query).\n\nBug: 448975408\nChange-Id: Ib22d23faa3bdbb730fac025795f1c01edc3fc8d3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8118047\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nReviewed-by: Mohannad Farrag \u003caymanm@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1663885}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3bb9a604d43f7c3ea08dd6250bb094271ced4c8e\n" }, { "commit": "57d39ffe92b5afae122c44152446235f01170e5f", "tree": "dd3a7adaeb77edfb2972a7de5580586e9ad2be1a", "parents": [ "d7cc7c2100905dab336f3f29875f7ca7fd1cb1aa" ], "author": { "name": "amraboelkher", "email": "amraboelkher@chromium.org", "time": "Fri Jul 17 07:44:07 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 17 07:47:19 2026" }, "message": "[dbsc] Cleanup test mock delegations in registration_fetcher_unittest*\n\nThis is a follow up from crrev.com/c/8064705.\n\nBug: 530193577\nChange-Id: Ida41da57adc25b4cd710e2b51fdc87d36a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8107859\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCommit-Queue: Amr Aboelkher \u003camraboelkher@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1663716}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7d226999413c7ba0fcf5f6cefa24ac9dfbdbc551\n" }, { "commit": "d7cc7c2100905dab336f3f29875f7ca7fd1cb1aa", "tree": "5629251289f32b9eefe4fdec4198b9bbdd94f07d", "parents": [ "21c244ae485d0a56c678db157b4e13a62ed71490" ], "author": { "name": "Jiamei Liu", "email": "jiameil@google.com", "time": "Fri Jul 17 00:15:19 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 17 00:19:27 2026" }, "message": "[spanify] net/socket: Spanify buffer usage and remove UNSAFE_TODO (v3)\n\nThis CL performs spanification on files under net/socket/ to clean up\nunsafe buffers and remove UNSAFE_TODO / UNSAFE_BUFFERS annotations.\n\nKey changes:\n- socket_bio_adapter.cc: Replaced UNSAFE_TODO with UNSAFE_BUFFERS and\n safety comments in BIOWriteWrapper and BIOReadWrapper. Marked wrappers\n as UNSAFE_BUFFER_USAGE.\n- ssl_client_socket_impl.cc: Spanified NetLog parameters,\n MessageCallback, and additional unsafe buffer usage in GetECHRetryConfigs,\n GetServerTrustAnchorIDs, and GetSSLCertRequestInfo. Fixed NetLog\n compilation error.\n- socket_bio_adapter_unittest.cc: Replaced memcmp with std::string_view.\n- ssl_client_socket_unittest.cc: Fixed span constructor.\n\nChange-Id: I9b0820d1a1a98f3a682543d1aeda21471fefb3db\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8088860\nReviewed-by: Jonathan Lee \u003cjonathanjlee@google.com\u003e\nCommit-Queue: Jiamei Liu \u003cjiameil@google.com\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1663589}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 99e485acd20846a5b8a561b69e5ab7d0e9994ce3\n" }, { "commit": "21c244ae485d0a56c678db157b4e13a62ed71490", "tree": "e83558c64e8ca199bbbbf2d02f2752b8be4274d8", "parents": [ "48a3d04e3f6ddb1a904fab7866b8148176c99bee" ], "author": { "name": "Noah Rose Ledesma", "email": "noahrose@google.com", "time": "Thu Jul 16 23:02:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 16 23:06:30 2026" }, "message": "Move IsReservedNameOnWindows to //base\n\nThis function is used in a few places in the codebase. Base seems like a\nmore appropriate home than net. A few mechanical changes were made for\ncoding style.\n\nChange-Id: Ic38e34aa9f8510537e57472c41266f7d6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8103482\nReviewed-by: Reilly Grant \u003creillyg@chromium.org\u003e\nReviewed-by: Kunjan Patel \u003cksukh@chromium.org\u003e\nCommit-Queue: Noah Rose Ledesma \u003cnoahrose@google.com\u003e\nReviewed-by: Daniel Murphy \u003cdmurph@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nReviewed-by: Rahul Singh \u003crahsin@microsoft.com\u003e\nCr-Commit-Position: refs/heads/main@{#1663558}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: eb32448eead012c52e47563163e30ac699b02bdd\n" }, { "commit": "48a3d04e3f6ddb1a904fab7866b8148176c99bee", "tree": "263f3a9e7a3c1df316ee472780b1b0baa8be212b", "parents": [ "37aa13758cdb5ddae5bbb0129d569d08a8306422" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Thu Jul 16 19:03:14 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 16 19:07:34 2026" }, "message": "net/disk_cache/sql: Pass BackendCleanupTracker to SqlSharedCache\n\nThis CL updates SqlSharedCache to accept a BackendCleanupTracker in its\nconstructor. Upon destruction, SqlSharedCache posts a task to release\nthe BackendCleanupTracker after background database tasks finish.\n\nThis ensures that caller or cleanup waiters (e.g. via\nBackendCleanupTracker::AddPostCleanupCallback) are notified only after\nall background database resources of SqlSharedCache are fully closed,\npreventing file lock conflicts and race conditions on database reuse.\n\nBug: 473666511\nChange-Id: Ifaee361cf8b89fc2a2e6096c584b98b7ff338c77\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8105516\nReviewed-by: Shunya Shishido \u003csisidovski@chromium.org\u003e\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1663372}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 102b362844205e838a10e57351b3e21e353cd9d0\n" }, { "commit": "37aa13758cdb5ddae5bbb0129d569d08a8306422", "tree": "413d340d7ed0a99077c5877bf9d439de00d2ec47", "parents": [ "69bfe38d7f3d84e3d3539977e2123dce5c9220e1" ], "author": { "name": "Alex Ilin", "email": "alexilin@chromium.org", "time": "Thu Jul 16 19:00:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 16 19:04:17 2026" }, "message": "[DBSC] Add retry mechanism for transient refresh errors\n\nThis change adds a retry mechanism for transient refresh errors (network\nerrors and HTTP 407 proxy errors), allowing maximum one retry per\nrefresh request.\n\nThis feature is controlled by a new\nkDeviceBoundSessionsRetryTransientRefreshErrors feature flag.\n\nAdditionally, new histograms are recorded per attempt to track the\nefficiency of the retry mechanism.\n\nThis change is based on https://crrev.com/c/7822460.\n\nBug: 509396850\nChange-Id: Ia65b269c5a4095391bbf698d823ee091ab707007\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8070440\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCommit-Queue: Alex Ilin \u003calexilin@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1663368}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4848df7c8f96086cde35f4abfe9f501177e2d95e\n" }, { "commit": "69bfe38d7f3d84e3d3539977e2123dce5c9220e1", "tree": "5afef06cd2509fe14379618d6be640a6cf1f1c1d", "parents": [ "e5283ce42b60fb1a73f19e1515068222db82a432" ], "author": { "name": "Etienne Bergeron", "email": "etienneb@google.com", "time": "Thu Jul 16 18:01:33 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 16 18:05:25 2026" }, "message": "[net] Defer NetworkChangeNotifier registration in ProxyConfigServiceWin\n\nProxyConfigServiceWin was registering itself as a NetworkChangeObserver\nduring construction. In some Windows environments (e.g., Chrome Remote\nDesktop host binaries), the service is constructed on the UI/controller\nthread but is subsequently used and destroyed on the Network thread.\nBecause the observer was registered during construction on the UI\nthread, NetworkChangeNotifier dispatched OnNetworkChanged callbacks back\nto the UI thread. On the first network change, OnNetworkChanged called\nCheckForChangesNow(), which lazily bound PollingProxyConfigService\u0027s\nCore origin task runner to the UI thread instead of the Network thread.\n\nSubsequent operations (such as AddObserver) called on the Network thread\nwould then fail sequence checks or cause concurrent thread access\n(races) on the non-thread-safe observer list, leading to memory\ncorruption or Use-After-Free crashes during shutdown.\n\nThis CL resolves the issue by:\n\n1. Deferring NetworkChangeNotifier registration until the first call to\n AddObserver(), which runs on the correct Network thread.\n2. Adding a SEQUENCE_CHECKER and detaching it on construction to enforce\n proper sequence affinity on first use.\n3. Adding a new unit test ThreadMismatchRegistration to verify\n lazy thread binding.\n\nBug: 533418127\nTest: net_unittests --gtest_filter\u003dProxyConfigServiceWinTest.ThreadMismatchRegistration\nChange-Id: Iddd14cdc6e4a007838e99cef80de4e2a8a1a4859\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8083986\nCommit-Queue: Etienne Bergeron \u003cetienneb@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1663303}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e015f284b9aebc418adcc3d5695efd5fc3ab722a\n" }, { "commit": "e5283ce42b60fb1a73f19e1515068222db82a432", "tree": "241ca2158ba0258c4053f5c543a01c4c43bb189a", "parents": [ "d619e037c77a52000cd1444fc44037e73b8b4458" ], "author": { "name": "Adam Rice", "email": "ricea@chromium.org", "time": "Thu Jul 16 16:43:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 16 16:46:55 2026" }, "message": "Partition WebSocketEndpointLockManager locks by NetworkAnonymizationKey.\n\nTo prevent cross-site timing attacks (timing oracle), partition the\nWebSocketEndpointLockManager\u0027s locks by NetworkAnonymizationKey.\nPreviously, the lock was keyed only by IPEndPoint, allowing an attacker\nto detect when a victim origin initiates a WebSocket handshake to a\nshared IP address.\n\nBy using std::pair\u003cIPEndPoint, NetworkAnonymizationKey\u003e as the lock key,\nwe ensure that connections from different network isolation contexts do\nnot block each other, mitigating the timing leak.\n\nAuthored by Gemini with minor manual fixes.\n\nTAG\u003dagy\nCONV\u003dffe53c1f-1f96-4d57-92f4-48ad0df6c4b2\n\nBug: 533028862\nChange-Id: I835ab5012f3c4c79975d271758b2d04940df0cff\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8074618\nReviewed-by: Yoichi Osato \u003cyoichio@chromium.org\u003e\nCommit-Queue: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1663202}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a626a37a10f3b69ba9e5a89ecedf51061f15fe20\n" }, { "commit": "d619e037c77a52000cd1444fc44037e73b8b4458", "tree": "ed1226f126d3d5a82fa4bd3dfa1b7f13f0e8af2a", "parents": [ "6127f2b8c98c973ecc6b2b1a17c375caad58a3fa" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Thu Jul 16 01:16:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 16 01:18:45 2026" }, "message": "Promote horo@ to primary OWNER in net/ and services/network/\n\nIn February 2025, while on the Storage team, horo@ was added as a\nsecondary OWNER for net/ and services/network/ (crrev.com/c/6261866) in\nconsultation with the Loading team manager (visiedo@) to help distribute\ncode review load as a former Loading team member.\n\nHaving rejoined the Loading team in July 2026, this CL promotes horo@\nfrom a secondary to a primary OWNER in these OWNERS files.\n\nAdditionally, this CL removes the stale `per-file BUILD.gn` entry for\n`services/network/scheduler/OWNERS` in `services/network/OWNERS`, as\nthat OWNERS file was removed in crrev.com/c/7843744.\n\nChange-Id: Iaf036895b92f9f5666edebf3f3a3b872d6aab23c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8105015\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1662984}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 127cece6e1e57c45951af51ca3c7f20f0b09a702\n" }, { "commit": "6127f2b8c98c973ecc6b2b1a17c375caad58a3fa", "tree": "e358ef5f331b8875363753b83e70192ccce3236a", "parents": [ "95e5618ea356a55f99bbfb2234cdb3b483623a61" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Thu Jul 16 00:36:18 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 16 00:38:34 2026" }, "message": "net/disk_cache/sql: Make SqlPersistentStore own SqlSharedCacheManager\n\nSqlPersistentStore now owns and manages the lifecycle of\nSqlSharedCacheManager when net::features::kRendererAccessibleHttpCache\nis enabled.\n\nSqlPersistentStore::Initialize() asynchronously initializes\nSqlSharedCacheManager alongside backend shards. SqlSharedCacheManager\ntakes scoped_refptr\u003cBackendCleanupTracker\u003e in its constructor to ensure\nbackground index database cleanup tasks complete properly on\ndestruction.\n\nSqlSharedCacheManagerTest has been updated to access\nSqlSharedCacheManager via SqlPersistentStore.\n\nBug: 473666511\nChange-Id: I5ba1c265630e01374f61443d9609b4a70c6fd99a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8096942\nReviewed-by: Shunya Shishido \u003csisidovski@chromium.org\u003e\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1662969}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 73f48ed787833770259f14de9e093336ca71b9cd\n" }, { "commit": "95e5618ea356a55f99bbfb2234cdb3b483623a61", "tree": "b82b69175b61cb16cf823fe610da351fb883d8f9", "parents": [ "bc4e4d6454daeafd397b9fb2b94583e82090e917" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Thu Jul 16 00:35:18 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 16 00:36:50 2026" }, "message": "net/disk_cache/sql: Add kSqlDiskCacheReduceUma feature parameter\n\nThe SQL disk cache experiment showed an apparent startup performance\ndegradation (e.g., in Startup.FirstWebContents.NonEmptyPaint3).\n\nWe hypothesize that this regression is caused by survival bias due\nto UMA log discarding:\n1. The experimental SQL disk cache backend logs a high volume of\n detailed UMA metrics during startup, significantly inflating the\n initial UMA log size.\n2. Faster machines/runs execute more work within the initial log\n window, producing larger log payloads.\n3. When a transient log upload failure occurs, initial logs\n exceeding the 100 KiB retransmit threshold are permanently\n discarded.\n4. Consequently, fast startup runs are disproportionately discarded,\n causing the recorded latency distribution to appear degraded.\n\nTo test and verify this hypothesis, this CL introduces the\nkSqlDiskCacheReduceUma feature parameter for\nkDiskCacheBackendExperiment. When enabled (true), detailed UMA\nmetrics recorded in SqlPersistentStore::Backend, SqlBackendImpl,\nand ExclusiveOperationCoordinator are suppressed.\n\nThe parameter value is cached in a const bool reduce_uma_ member\nvariable in each class to avoid repeated lookup overhead in hot\npaths.\n\nHistogram documentation and unit tests are updated accordingly.\n\nBug: 534633674\nChange-Id: I798662942c7ac863a4ebd48b2a429088e81f7bcc\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8090909\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nReviewed-by: Shunya Shishido \u003csisidovski@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1662968}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0c736ae35ee0c50b87d222f7dea09322fdee21c9\n" }, { "commit": "bc4e4d6454daeafd397b9fb2b94583e82090e917", "tree": "8d735fbe8d5ef096190591af917d94d4fedd00e0", "parents": [ "5fa6a3616a70b71a8482f968c44cc30896f1b726" ], "author": { "name": "yijunyi", "email": "yijunyi@google.com", "time": "Wed Jul 15 17:03:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 15 17:05:36 2026" }, "message": "net: [Socket] Respect EchMode in TcpConnectJob::UpdateSvcbOptional\n\nThis CL updates net::TcpConnectJob::UpdateSvcbOptional to consider\nGetEchMode when determining whether SVCB resolution is optional.\n\nPreviously, TcpConnectJob only checked the global ech_enabled flag when\ncomputing is_svcb_optional_. When ECH was disabled per-host via\nEchMode::kDisabled, fallback endpoints were wrongly filtered out,\ncausing a crash during connection dispatch.\n\nThis CL introduces an IsEchEnabled helper function to check both\nech_enabled and GetEchMode, fixing the crash.\n\nChange-Id: Idad0e96e2213b20f33651db90d8952f76a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8088378\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nCommit-Queue: Junyi Yi \u003cyijunyi@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1662695}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 05d2de756bfac54a509fd1e3ca29f6af277cdea9\n" }, { "commit": "5fa6a3616a70b71a8482f968c44cc30896f1b726", "tree": "178f40417a20b2e553532948c67eb8806ffa3baf", "parents": [ "9925185f3f9d63adc41cb3e4ce45e8ee02883434" ], "author": { "name": "Patrick Meenan", "email": "pmeenan@chromium.org", "time": "Wed Jul 15 14:47:33 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 15 14:49:08 2026" }, "message": "Reject H2/QUIC responses with multiple Content-Disposition headers\n\nHTTP 1.1 correctly rejected responses that had multiple\n`Content-Disposition` response headers with different values. This\nfixes HTTP/2 and QUIC to do the same. Multiples with the same value\nare still allowed (as they are in HTTP/1.1).\n\nBug: 533489171\nChange-Id: I2b41190ba21d5e9862954368c33c870ae3cf07a1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8093859\nReviewed-by: David Schinazi \u003cdschinazi@chromium.org\u003e\nCommit-Queue: Patrick Meenan \u003cpmeenan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1662586}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a4ba7e8a658e72edb47691586e434d7d5df09968\n" }, { "commit": "9925185f3f9d63adc41cb3e4ce45e8ee02883434", "tree": "a0e8d163f12caf154e6a1827f07066d51d899614", "parents": [ "952f92f5cb7642fe58324790ff8a475c3224cbf4" ], "author": { "name": "Patrick Meenan", "email": "pmeenan@chromium.org", "time": "Wed Jul 15 14:42:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 15 14:44:41 2026" }, "message": "Preserve IPv6 link-local scope IDs in AddressList and HostCache\n\nWhen connecting to link-local IPv6 endpoints, TCPSocketPosix requires a\nvalid scope ID to route packets out of the correct interface.\nAddressList and HostCache helpers previously dropped scope IDs when\ncopying endpoints or converting to ServiceEndpoints with default ports.\n\nThis change carries the scope ID through the copies and dns cache.\n\nBug: 534081801\nChange-Id: I469e49e11a17c237a83b9400c68e23e6be80a2dc\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8092987\nCommit-Queue: Patrick Meenan \u003cpmeenan@chromium.org\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1662584}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9f3926f2891377299e37f9882f4ffed0183168b9\n" }, { "commit": "952f92f5cb7642fe58324790ff8a475c3224cbf4", "tree": "0cdb24277e090176e132c2a4ce8efd1484e684e5", "parents": [ "91682048eb43bf401219b9ba6f7936860d6159df" ], "author": { "name": "Victor Hugo Vianna Silva", "email": "victorvianna@google.com", "time": "Wed Jul 15 14:08:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 15 14:10:10 2026" }, "message": "Fix error-prone warnings from upcoming roll\n\nBug: 534779546\nChange-Id: I233d0f22c034036ad04b56f1caceabbdae8edc47\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8091413\nAuto-Submit: Victor Vianna \u003cvictorvianna@google.com\u003e\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCommit-Queue: Andrew Grieve \u003cagrieve@chromium.org\u003e\nOwners-Override: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1662573}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 195962358a83d3d08c30236b80bf413002344868\n" }, { "commit": "91682048eb43bf401219b9ba6f7936860d6159df", "tree": "1b45d0fd4fa9f217f923ee55d7f33d4622a551e0", "parents": [ "328ea9d40d7e6b4dd226c9db0d304bb968cbce88" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Wed Jul 15 13:51:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 15 13:53:26 2026" }, "message": "Enable BackupRefPtr feature flag on CastOS.\n\nThis change removes the explicit exclusion of CastOS from the\n`enable_backup_ref_ptr_feature_flag` condition, allowing BackupRefPtr to\nbe enabled on CastOS.\n\nSee internal email thread:\nhttps://groups.google.com/a/google.com/g/chrome-memory-safety/c/hd-IhSKGEQM\n\nAlso see public bug: crbug.com/41489655\n\nis_castos is mostly now deprecated and as such we can move the last\nunsupported platform for BRP to enabled.\n\nBug: 41489655\nDanglingUntriaged-notes: Enabling BRP on CastOS, pre-existing.\nChange-Id: I949cec6fee20d2270a1fc751fbca00ba6d1b8f0b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8014988\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Jordan Bayles \u003cjophba@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Shawn Quereshi \u003cshawnq@google.com\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1662548}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 11311b11f5d060e6cc5aca142d0a990a771140e3\n" }, { "commit": "328ea9d40d7e6b4dd226c9db0d304bb968cbce88", "tree": "40f81f2e4a01757f67cbc2a46d6ac98d98c35e92", "parents": [ "5145cbb973fb998526ea5cd7bead62398c61c6cb" ], "author": { "name": "amraboelkher", "email": "amraboelkher@chromium.org", "time": "Wed Jul 15 09:48:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 15 09:49:47 2026" }, "message": "[dbsc] Refactor RegistrationTest with DelegateToService\n\nRefactor RegistrationTest to use\nMockUnexportableKeyService::DelegateToService(). This forwards standard\nmock behavior to a real implementation, eliminating boilerplate ON_CALL\nand EXPECT_CALL setups.\n\nBug: 529693533\nChange-Id: Ibdf74973ad50566965071200340b55686a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8064705\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCommit-Queue: Amr Aboelkher \u003camraboelkher@chromium.org\u003e\nReviewed-by: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1662465}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9b41f8cb92f120d04b1395413a32a11e556e29dc\n" }, { "commit": "5145cbb973fb998526ea5cd7bead62398c61c6cb", "tree": "7b042f3a4e8e09a7bdf53ca0c07a76582f431842", "parents": [ "41ed2ccb009df149e079c30c9c303c9e0d08a3cf" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Wed Jul 15 09:01:54 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 15 09:03:33 2026" }, "message": "net/disk_cache/sql: Update README.md for SQL disk cache backend\n\nUpdate net/disk_cache/sql/README.md to reflect recent architecture\nchanges and newly added components in net/disk_cache/sql/.\n\nSpecifically:\n- Mention the four disk cache implementations (blockfile, simple,\n memory, sql) implementing disk_cache::Backend and disk_cache::Entry.\n- Add reference link to the SQL disk cache design doc.\n- Add documentation for newly added components: EntryDbHandle,\n IndexedPairSet, EntryWriteBuffer, memory monitors, task tracking, and\n shared cache / renderer-accessible cache classes.\n- Update database schema section to include hints column and schemas for\n SqlSharedCacheIndexDatabase and SqlSharedCacheIsolatedDatabase.\n\nBug: 473666511\nChange-Id: I5693ce3cd279ecfce5c3a95b0ef5038585396ecd\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8097382\nReviewed-by: Shunya Shishido \u003csisidovski@chromium.org\u003e\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1662449}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4108a57e2b4f89d9835e57cee029900cf87fa0c9\n" }, { "commit": "41ed2ccb009df149e079c30c9c303c9e0d08a3cf", "tree": "f0bea1b15e8a055cf91b6de9433e93c5511776e1", "parents": [ "d6b89a4ef86900f09be0dce4c6c75b6e0b62d1c7" ], "author": { "name": "Zeyu Fu", "email": "zeyufu@microsoft.com", "time": "Wed Jul 15 05:52:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 15 05:54:15 2026" }, "message": "Reland \"Android: Detect VPN-over-cellular connection type from capabilities\"\n\nThis is a reland of crrev.com/c/7924419\n\nThe original CL was reverted because NetworkChangeNotifierTest failed:\nhttps://ci.chromium.org/ui/p/chromium/builders/ci/android-16-x64-rel/5887/test-results\n\nWhy it failed: onAvailable() now derives the cellular subtype from\nNetworkCapabilities#getLinkDownstreamBandwidthKbps(). In the test, the\nnetwork\u0027s capabilities come from Helper.getCapabilities(), which on S+\nbuilds an int[]-backed NetworkCapabilitiesWrapper. That representation\ncarries no bandwidth, so getLinkDownstreamBandwidthKbps() throws\nUnsupportedOperationException by design, crashing the callback.\n\nReland fix (test-only): Helper.getCapabilities() now wraps the\nint[]-backed wrapper in a Mockito spy that reports an unknown (0 Kbps)\nbandwidth, which cellularSubtypeFromKbps() maps to the LTE fallback.\nProduction code is unchanged, so the wrapper still throws when misused\noutside tests.\n\nBug: 40834899\nChange-Id: I5925f2358544bc862e66af3dae8afc7b7a69286a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8073641\nReviewed-by: Yoichi Osato \u003cyoichio@chromium.org\u003e\nCommit-Queue: Zeyu Fu \u003czeyufu@microsoft.com\u003e\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1662378}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 58e561a2646d0e4de1c0c5d90e3f17baaa202d3f\n" }, { "commit": "d6b89a4ef86900f09be0dce4c6c75b6e0b62d1c7", "tree": "e436b338cdbb82eae28b86d3cc9c12bd41009fde", "parents": [ "a23f011664abc186665d747e47819de0670a0370" ], "author": { "name": "Matt Mueller", "email": "mattm@chromium.org", "time": "Tue Jul 14 23:45:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 14 23:47:43 2026" }, "message": "TrustStoreNSS: CERT_FindCertByDERCert may return a different cert\n\nFixed: 533515002\nChange-Id: I5d98e2b778ea7fc0f325f7e0fd8a41cb84f06a31\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8087128\nAuto-Submit: Matt Mueller \u003cmattm@chromium.org\u003e\nCommit-Queue: Hubert Chao \u003chchao@chromium.org\u003e\nReviewed-by: Hubert Chao \u003chchao@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1662261}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bf0ffaeaa783ce553cf22df931fa1cb44631c25f\n" }, { "commit": "a23f011664abc186665d747e47819de0670a0370", "tree": "2734c7a587e9f648bce623c3927cc8f3eee668f0", "parents": [ "92353888ea173173e49e467b7bf9cf4ccad70388" ], "author": { "name": "yijunyi", "email": "yijunyi@google.com", "time": "Tue Jul 14 20:07:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 14 20:09:45 2026" }, "message": "net: [DNS] Wait for HTTPS records under EchMode::kStrict\n\nThis CL ensures net::HostResolverDnsTask waits for HTTPS/SVCB DNS\nrecords when a host requires EchMode::kStrict.\n\nUnder EchMode::kStrict, the HTTPS record is mandatory for\nestablishing a connection. Therefore, the HostResolver must not time\nout the HTTPS query early, but rather wait for the transaction to\nnaturally complete.\n\nChange-Id: I75fd4f86a0ea7190a491ae9e3d4ec3fe6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7983184\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCommit-Queue: Junyi Yi \u003cyijunyi@google.com\u003e\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1662111}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b4e1e4cb218270dcba48df200cf027f652609238\n" }, { "commit": "92353888ea173173e49e467b7bf9cf4ccad70388", "tree": "97866e6e59a7ecbf8956ada12995ef081c913b19", "parents": [ "b8d3c5e77d95a86ebf83921e623d3b7a226263fd" ], "author": { "name": "David Benjamin", "email": "davidben@chromium.org", "time": "Tue Jul 14 15:03:06 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 14 15:04:36 2026" }, "message": "Remove stale TODO in CertVerifyProcIOS\n\nThe CRLSet component isn\u0027t even shipped on iOS (no call to\nRegisterCRLSetComponent in ios/chrome/app/main_controller.mm).\nCertVerifyProcIOS is trying to integrate with the OS verifier, while\nCRLSet contains revocations gathered from Chrome Root Program roots.\n\nWhile root programs do have significant overlap, it does matter whether\nthe CRLSet is scoped to monitor revocations across every certificate in\nsome other root store. Since this is just calling out to the OS,\nCertVerifyProcIOS\u0027s story right now is that it\u0027s on the OS to sort out\nrevocation.\n\nChange-Id: I4f7ae7f3ab8ff2d0ce58a8d27822d7b593c56a25\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8085911\nReviewed-by: Matt Mueller \u003cmattm@chromium.org\u003e\nAuto-Submit: David Benjamin \u003cdavidben@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1661865}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 232e139453d79f6958e53586db5ce87075b1e4d3\n" }, { "commit": "b8d3c5e77d95a86ebf83921e623d3b7a226263fd", "tree": "ad3f6c5b7638399dd2977a49e6d4d590c393f113", "parents": [ "d955f3b7d59164f22f31bde0417b963bb08cdf71" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Tue Jul 14 14:10:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 14 14:12:30 2026" }, "message": "[cronet] Disable kEnableBackendCleanupTrackerOnHttpCache for Cronet\n\nhttps://crrev.com/c/8063410 (\"net/disk_cache: Support\nBackendCleanupTracker for HTTP cache\") enabled\nkEnableBackendCleanupTrackerOnHttpCache by default.\n\nThis introduced test flakiness and hangs on Cronet bots for tests\nsuch as:\n- org.chromium.net.DiskStorageTest#testCacheVersionCurrent\n- org.chromium.net.CronetUrlRequestContextTest\n #testEnableHttpCacheDiskNewEngine\n\nRoot cause:\nWhen a CronetContext is shut down (cronetEngine.shutdown()), deleting\nCronetContext destroys its dedicated network thread (network_thread_).\nDuring CronetEngine shutdown, SimpleBackendImpl::~SimpleBackendImpl()\ninvokes SimpleIndex::WriteToDisk(INDEX_WRITE_REASON_SHUTDOWN), which\nbinds a scoped_refptr\u003cBackendCleanupTracker\u003e to the after_write\nclosure and posts the disk write via SimpleIndexFile::WriteToDisk()\nusing PostTaskAndReply.\n\nWhen the file operation completes on the ThreadPool worker thread,\nPostTaskAndReplyRelay attempts to post the reply closure back to the\nnetwork thread. However, since network_thread_ is destroyed and no\nlonger accepting tasks, posting the reply fails. To prevent\nthread-unsafe destruction of reply closures off the origin thread,\nPostTaskAndReplyRelay intentionally leaks the relay object on shutdown\n(via ANNOTATE_LEAKING_OBJECT_PTR).\n\nAs a result, the bound BackendCleanupTracker is leaked, preventing its\ndestructor from removing the cache path from\nAllBackendCleanupTrackers::map. When a subsequent CronetEngine is\ncreated on the same cache directory path in the same process,\nBackendCleanupTracker::TryCreate fails, queuing a retry callback that\nis never invoked because the tracker was leaked, causing the new engine\nto hang indefinitely.\n\nThis CL disables kEnableBackendCleanupTrackerOnHttpCache by default\nfor CRONET_BUILD to prevent these memory leaks and test hangs.\n\nFixed: 534571671\nChange-Id: I5f3257667d2c4d517ce3b604cf77d264b1c67670\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8084445\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1661829}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 544d3cf2b1f8195b3133e90511d95e8c0325569b\n" }, { "commit": "d955f3b7d59164f22f31bde0417b963bb08cdf71", "tree": "a40ec8f12d44347fd8697f4ac8a30efbde7644be", "parents": [ "4c3c4a9740edbfa25bb559b05a794a93e0db951b" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Tue Jul 14 11:25:25 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 14 11:27:30 2026" }, "message": "[DNS] Implement CreateServiceEndpointRequest in HangingHostResolver\n\nImplement CreateServiceEndpointRequest() in HangingHostResolver to\nsupport testing of service endpoint resolution in scenarios where DNS\nresolution hangs.\n\nThis implementation allows tests (such as QUIC Async DNS tests) to\ncorrectly simulate hanging DNS queries when using the new\nServiceEndpointRequest API.\n\nBug: 531975349\nChange-Id: I8c9f9f4199c1b3f354865c5889b668b7a661316c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8085440\nReviewed-by: Hayato Ito \u003chayato@chromium.org\u003e\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1661748}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ed43938a0cc1b3bd02eb8e0e19fa295022ed2ab1\n" }, { "commit": "4c3c4a9740edbfa25bb559b05a794a93e0db951b", "tree": "689d0db07d40e9c734b7bc6ed5177217926c649d", "parents": [ "c10c0e71bec55d12fde8fa4fc94ee093c6fb8ae8" ], "author": { "name": "Nidhi Jaju", "email": "nidhijaju@chromium.org", "time": "Tue Jul 14 11:15:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 14 11:17:26 2026" }, "message": "Make HTTP auth scheme preferences case-insensitive\n\nAccording to RFC 9110 (Section 11.1), HTTP authentication scheme names\nare inherently case-insensitive. Previously, if an enterprise admin\nconfigured AuthSchemes using mixed-case values like \"Negotiate\" or\n\"NTLM\", the authentication would fail. The network stack extracted the\nserver-provided scheme in lowercase, but matched it against the exact\ncase-sensitive string specified in the policy.\n\nThis CL fixes this mismatch by updating HttpAuthPreferences to\nnormalize the allowed schemes to lowercase when they are initially\nconfigured. This ensures HttpAuthHandlerRegistryFactory can reliably\ncheck if the scheme is allowed.\n\nAs part of this change, set_allowed_schemes is renamed to\nSetAllowedSchemes across the codebase to conform to the style guide.\n\nBug: 531448872\nChange-Id: I0f0acc681f76cc9f292bcf6ff64ef8115a409e1d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8066957\nReviewed-by: Sylvain Defresne \u003csdefresne@chromium.org\u003e\nReviewed-by: Rushan Suleymanov \u003crushans@google.com\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1661744}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 478121030eb2e39b81d6223f51461f6e3b290351\n" }, { "commit": "c10c0e71bec55d12fde8fa4fc94ee093c6fb8ae8", "tree": "219829cb913bb8f2449533e3454a1f4e82159e9f", "parents": [ "3cde77c00c40da3aad394f7f3c359ec5dcb87a6a" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Tue Jul 14 03:02:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 14 03:04:21 2026" }, "message": "[net/disk_cache]: Support BackendCleanupTracker for HTTP cache\n\nAdd a feature flag kEnableBackendCleanupTrackerOnHttpCache to enable\nBackendCleanupTracker for HTTP cache (net::DISK_CACHE) backends. This\nhelps prevent conflicts when multiple backends are created concurrently\nfor the same cache path.\n\nTo support this, update SqlBackendImpl, SqlPersistentStore, and related\nclasses to accept and propagate the cleanup_tracker.\n\nIn implementing this, ensure that SqlPersistentStore::Backend explicitly\ncloses the database (db_.Close()) before releasing the cleanup_tracker.\nOtherwise, the tracker could be released and a new backend\ninitialization could start on the IO thread before the database file\nlock is fully released during Backend destruction on the background\nsequence.\n\nBug: 532709163\nChange-Id: I3a992ee17d9028106bde5e037dd78bdf7ff75fe4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8063410\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1661581}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 34f59ee4af4119bfd1bc75ceabb7149599cf876f\n" }, { "commit": "3cde77c00c40da3aad394f7f3c359ec5dcb87a6a", "tree": "a304cbbdc6d635e95333c285ada1e2b8e16120c3", "parents": [ "1b84ffc6ca52a266fa52d5df8ef66a2682ae3436" ], "author": { "name": "Ari Chivukula", "email": "arichiv@chromium.org", "time": "Tue Jul 14 01:07:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 14 01:09:05 2026" }, "message": "[TCP] Cleanup Additional Capacity Initialization\n\nInstead of initializing this at the top of the stack we should push it\nas low as possible. There\u0027s no reason to thread the data down the stack\nexcept for a few tests which can use a replacement test specific method.\n\nFixed: 512509719\nChange-Id: Iebf1ab1a4723dba0a5586c17d031ea0b2f4ef267\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8082780\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nAuto-Submit: Ari Chivukula \u003carichiv@chromium.org\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1661538}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: feaba6d9348f0041c43823c350fa6cf12c810052\n" }, { "commit": "1b84ffc6ca52a266fa52d5df8ef66a2682ae3436", "tree": "0c74ff5f6f929a7812caa9971a996cf371594dd9", "parents": [ "6cba8aefa246040f6ddccbec13cab08a165b4d4c" ], "author": { "name": "Yoav Weiss", "email": "yoavweiss@chromium.org", "time": "Mon Jul 13 18:08:25 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 13 18:10:09 2026" }, "message": "DelayedStreamSocket: TCP socket wrapper with simulated network delay\n\nAdds DelayedStreamSocket, a StreamSocket wrapper that injects realistic\nsocket-level network delay using an intermediate bottleneck-buffer\nmodel:\n\nFor READS:\n OS Socket -read-\u003e [Download BottleneckBuffer] -pull-\u003e Consumer\nFor WRITES:\n Producer -push-\u003e [Upload BottleneckBuffer] -write-\u003e OS Socket\n\nEach BottleneckBuffer applies half-RTT propagation delay per chunk; a\nshared BandwidthThrottle (passed in by the owning factory) gates\ndraining at the configured throughput. A full buffer creates natural\nbackpressure that propagates to the TCP receive window for reads or\nblocks application writes for uploads. Connect() completion is delayed\nby one full RTT (SYN + SYN-ACK).\n\nAlso adds DelayedSocketConfig (net/socket/delayed_socket_config.h),\nthe small {latency, download_throughput, upload_throughput} struct\nthat this wrapper and the follow-on datagram wrapper both consume.\n0 is the \"unconstrained\" sentinel for the throughput fields so a\ndefault-constructed config naturally means no delay.\n\nBug: 496616821\n\nCo-Authored-By: AI (Claude Opus 4.7 via Pi) \u003cnoreply@pi.dev\u003e\nChange-Id: I0aae2cd88060cf83c2c724873a1d8631d101f44a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8020646\nReviewed-by: Patrick Meenan \u003cpmeenan@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Yoav Weiss (@Shopify) \u003cyoavweiss@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1661242}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0b16b00a1c20a1aa3aef99e936e0e0506e2768e3\n" }, { "commit": "6cba8aefa246040f6ddccbec13cab08a165b4d4c", "tree": "9c4ab4808015c27559ddae0ec892467355bcf6e8", "parents": [ "11f4c24668dd544a1961e73a80abc00463c958d7" ], "author": { "name": "Alex Ilin", "email": "alexilin@chromium.org", "time": "Mon Jul 13 15:58:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 13 16:00:07 2026" }, "message": "[DBSC] Clean up proactive refreshes feature flag\n\nThe kDeviceBoundSessionProactiveRefresh feature flag has been enabled by\ndefault for a long time. This CL cleans up the flag and inlines its\nenabled-by-default behavior.\n\nBug: 489734665\nChange-Id: Ib31d8b1063974a9fba1692f1b819e633d8be82ff\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8065239\nCommit-Queue: Alex Ilin \u003calexilin@chromium.org\u003e\nAuto-Submit: Alex Ilin \u003calexilin@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1661153}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: aa4c950f52e67f6875cd655c4518b55f06cc2ce6\n" }, { "commit": "11f4c24668dd544a1961e73a80abc00463c958d7", "tree": "92f053ff977bdec26a3cf75a8785f69a6c6efd33", "parents": [ "b210e710b51162818e92af65742b3bec1712a1cf" ], "author": { "name": "Maks Orlovich", "email": "morlovich@chromium.org", "time": "Mon Jul 13 14:45:31 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 13 14:48:17 2026" }, "message": "SimpleCache: fix problems with self-deletion in post-doom callbacks\n\nFixed: 533446300\nChange-Id: I130245edb091f1d48437d74a59aa012667a6227b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8074044\nReviewed-by: Josh Karlin \u003cjkarlin@chromium.org\u003e\nCommit-Queue: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1661113}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7b15c3bbc9632e9868e4c10a32133cd82a024f12\n" }, { "commit": "b210e710b51162818e92af65742b3bec1712a1cf", "tree": "2164779bc391046dcacd56c0aa53b775e9deff54", "parents": [ "e92c67fb88ef593bc50bcc0327201cfa58950992" ], "author": { "name": "Ari Chivukula", "email": "arichiv@chromium.org", "time": "Mon Jul 13 12:33:11 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 13 12:35:24 2026" }, "message": "[TCP] SocketPoolState -\u003e SocketPoolExpandability\n\n\u0027State\u0027 is too generic a concept for socket pools, as they have a lot of\nconceptual state (and other methods referencing it). \u0027Expandability\u0027 is\na more clear concept related to size.\n\nThis is a pure rename CL, no functionality changes at all.\n\nBug: 512509719\nChange-Id: I688adbd58545cfac348e7e4bc6e9e4a12f4cbe2c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8082800\nCommit-Queue: Ari Chivukula \u003carichiv@chromium.org\u003e\nAuto-Submit: Ari Chivukula \u003carichiv@chromium.org\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1661076}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8d1bbce6a991ec93ee358889e7a04af0f563fced\n" }, { "commit": "e92c67fb88ef593bc50bcc0327201cfa58950992", "tree": "9e1f05aee3abe7509ea37a6bf27d806651901f08", "parents": [ "cb6af162c26d4753afb22e6332de6cc8616f8c73" ], "author": { "name": "Mohannad Farrag", "email": "aymanm@google.com", "time": "Mon Jul 13 11:13:54 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 13 11:15:51 2026" }, "message": "Return an error instead of crashing on an invalidSocket\n\nPreviously, recvmsg / read() codepath would run a DCHECK on the socket\nto ensure that it is not invalid. However, there exist cases where the\nsocket can be invalid. This happens when the socket is closed while\nthe quic reader is in the yielding window. The reason why this never\ncrashed for recvmsg is because the DCHECK is omitted in production and\nthe recvmsg returns EBADF which gets mapped to ERR_INVALID_HANDLE.\n\nOn the recvmmsg path, this DCHECK becomes a CHECK which starts crashing\nand I\u0027ve changed the code to protect against that by returning a clean\nerror saying that the socket is not connected.\n\nBug: 533224376, 515333601\nChange-Id: I3a215b9d3255ee2a96de3dde7156427ef341387b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8074341\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Mohannad Farrag \u003caymanm@google.com\u003e\nAuto-Submit: Mohannad Farrag \u003caymanm@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1661045}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d2f56c451fcca771fa64187115300584ab0de9f5\n" }, { "commit": "cb6af162c26d4753afb22e6332de6cc8616f8c73", "tree": "2a0934fa325cac32489f06726578cbb4a03538cf", "parents": [ "40d5138e2f148890a937d6653284074cd3c3676d" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Mon Jul 13 10:14:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 13 10:16:35 2026" }, "message": "[direct sockets] Gate UDP multicast send/connect on permission policy\n\nRestrictedUDPSocket gated JoinGroup() and LeaveGroup() on the per-socket\nallow_multicast_ flag, but SendTo() and Connect() allowed multicast\ndestination addresses even if the \u0027direct-sockets-multicast\u0027 Permissions\nPolicy was absent.\n\nThis CL introduces the following changes:\n- Adds feature flag\n kDirectSocketsUdpSendRequireMulticastPermissionPolicy (enabled by\n default) and registers a chrome://flags entry to allow bypassing the\n restriction.\n- Defines a new net error code net::ERR_MULTICAST_NOT_ALLOWED (-190).\n- Checks multicast permission policy in DirectSocketsServiceImpl when\n resolving hostnames for connected UDP sockets, returning\n net::ERR_MULTICAST_NOT_ALLOWED if missing.\n- Checks multicast permission policy in RestrictedUDPSocket::SendTo and\n OnResolveCompleteForSendTo for bound UDP sockets.\n- Emits informative console error messages in renderer UDPSocket and\n UDPWritableStreamWrapper when ERR_MULTICAST_NOT_ALLOWED occurs.\n- Updates unit tests and browser tests to run parameterized test suites\n covering enabled and disabled feature states, IP literals, and\n hostname resolution.\n\nBug: 517608454\nChange-Id: Id9fc8d4f421424beb77826bb79750462fbe4b3f1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8037701\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nReviewed-by: Vlad Krot \u003cvkrot@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1661023}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 405665065117459f6a72161b865c8244742b21c7\n" }, { "commit": "40d5138e2f148890a937d6653284074cd3c3676d", "tree": "5a63bd9b48b4c6253cf925d9935b2504e781cf93", "parents": [ "ddefc0baff325bb9f5f34cf079bbd4416ac5ced5" ], "author": { "name": "yijunyi", "email": "yijunyi@google.com", "time": "Sat Jul 11 00:13:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Sat Jul 11 00:15:27 2026" }, "message": "net: Enforce ECHMode for TLS and QUIC\n\nThis CL implements ECHMode enforcement in SSLClientSocketImpl and\nQuicChromiumClientSession.\n\nIn TLS, SSLClientSocketImpl::Init provides enforcement for both\nSSLConnectJob and TlsStreamAttempt, as both call\nSSLClientSocketImpl::Connect, which invokes Init. If ECHMode is\nkStrict and configurations are missing, Init returns\nERR_STRICT_ECH_REQUIRED to avoid initiating a connection without ECH.\n\nIn QUIC, QuicChromiumClientSession::GetSSLConfig populates\nquic::QuicSSLConfig, which quic::TlsClientHandshaker uses to call\nBoringSSL ECH APIs. If ECHMode is kStrict and configurations are\nmissing, QuicChromiumClientSession::CryptoConnect returns\nERR_STRICT_ECH_REQUIRED to avoid initiating a connection without ECH.\n\nBug: 514414607, 514415082, 514415271\nTest: net_unittests\nChange-Id: I678c18ee57038b6d93594a01123879cf6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7905115\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCommit-Queue: Junyi Yi \u003cyijunyi@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1660610}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b3d083a367cba8cc55e43dc24f04a7b011827da1\n" }, { "commit": "ddefc0baff325bb9f5f34cf079bbd4416ac5ced5", "tree": "bb52b2f5b9af6fb7234f51e5734af962f4835af8", "parents": [ "a3d7048d575e328011bf82212540cf3ad5bf0eb9" ], "author": { "name": "Stefano Duo", "email": "stefanoduo@google.com", "time": "Fri Jul 10 19:43:01 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 10 19:45:11 2026" }, "message": "Support per-UrlRequest network binding\n\nThis makes it possible for a UrlRequest use a specific target network.\nThis also introduces a new set of tests to confirm correct partitioning,\nw.r.t. target_network, for high-level //net APIs: MultiNetworkTest.\n\nThis leaves the following sub-components target_network unaware:\ncertificate fetching (this can be triggered by AIA, OCSP, CRL), web\nsockets, domain reliability, reporting APIs. These will be fixed in\nfollow-ups.\n\nThis also fixes MockUDPClientSocket to correctly handle Connect*Async\nwhen a mock read for connect returns ERR_IO_PENDING. Previously the\ncallback supplied to Connect*Async would get called with ERR_IO_PENDING.\nThis is against //net\u0027s API contract: the callback should only be called\nonce the operation has actually completed and ERR_IO_PENDING is an\nillegal value to pass to the callback.\n\nBug: 495684670, 527780908, 527777927, 527774896, 527798032\nChange-Id: I8e2f5eba26b50ba7291e5e597e056fb94dbda42f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7904346\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nOwners-Override: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1660466}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2dd8656533b19eb33a04663b0090a92e70e4ce0e\n" }, { "commit": "a3d7048d575e328011bf82212540cf3ad5bf0eb9", "tree": "1dacb590004e90f0dc8a2292832833aa63d6e8cc", "parents": [ "875ceb973e871d2283be8e3360dda292cc3a187e" ], "author": { "name": "Zonghan Xu", "email": "xzonghan@google.com", "time": "Fri Jul 10 17:57:44 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 10 18:00:52 2026" }, "message": "[SG Android] Add ProvisioningDomainRoutingConfig to net::ProxyConfig and mojom\n\nThis change introduces ProvisioningDomainRoutingRule and\nProvisioningDomainRoutingConfig as nested types within\nnet::ProxyConfig to support dynamic Provisioning Domain (PvD)\nproxy configurations.\n\nIt also adds the corresponding Mojo struct definitions and StructTraits.\n\nBug: 507060663\nChange-Id: If2f51d1d11849e1fbbc32a472f64828661f78cc4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8052967\nReviewed-by: Ken Buchanan \u003ckenrb@chromium.org\u003e\nReviewed-by: Sebastien Lalancette \u003cseblalancette@chromium.org\u003e\nCommit-Queue: Zonghan Xu \u003cxzonghan@chromium.org\u003e\nReviewed-by: Ari Chivukula \u003carichiv@chromium.org\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1660388}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c3ba2deb34a84cdd4324dd22cd505b481e4e9e8b\n" }, { "commit": "875ceb973e871d2283be8e3360dda292cc3a187e", "tree": "e1023419d15a037ad2b6999bba0afe2c2c38bbec", "parents": [ "8fb5e29c301f4574f794e9ca118e32fdd24995fc" ], "author": { "name": "Joe Mason", "email": "joenotcharles@google.com", "time": "Fri Jul 10 14:42:25 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 10 14:44:43 2026" }, "message": "Return ByteSize from HttpResponseHeaders:::GetContentLength()\n\nByteCount is deprecated.\n\nByteCount::InBytes() returns int64_t, and ByteSize::InBytes() returns\nvalues in the range 0...max(int64_t), so call sites will not overflow\nunless the ByteCount usage was already unsafe.\n\nAlso fixes a variable name in HttpResponseHeaders::GetInt64HeaderValue().\n\nBug: 448661443\nChange-Id: If5bfabb7b7268849cf6d41b2d847b8d95b49e221\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8065298\nReviewed-by: Avi Drissman \u003cavi@chromium.org\u003e\nCommit-Queue: Avi Drissman \u003cavi@chromium.org\u003e\nAuto-Submit: Joe Mason \u003cjoenotcharles@google.com\u003e\nOwners-Override: Avi Drissman \u003cavi@chromium.org\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1660257}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6bbd1f84392555826a7ef2ed96929c72895b688c\n" }, { "commit": "8fb5e29c301f4574f794e9ca118e32fdd24995fc", "tree": "9854a4d9f9db6b37cb5f56ab70106c0fe35314a1", "parents": [ "e50062a1dc7b076982bbfc537b8709ea2dcca8ca" ], "author": { "name": "Alex Ilin", "email": "alexilin@chromium.org", "time": "Fri Jul 10 12:56:30 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 10 12:58:20 2026" }, "message": "[DBSC] Clean up signing quota feature flag\n\nThe kDeviceBoundSessionSigningQuotaAndCaching feature flag has been\nenabled by default for a long time. This CL cleans up the flag and\ninlines its enabled-by-default behavior.\n\nBug: 489734665\nChange-Id: I60dc46dff57e09c5503afd6ff42d812d69c39fd0\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8061096\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nReviewed-by: Alex Rudenko \u003calexrudenko@chromium.org\u003e\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCommit-Queue: Alex Ilin \u003calexilin@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1660201}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9df7a279540542186234af633cdeb8e960936753\n" }, { "commit": "e50062a1dc7b076982bbfc537b8709ea2dcca8ca", "tree": "1bbf504354b617501176e090f6f00f748f2998cf", "parents": [ "b525ab2956f41797ebe3ea124ac84193db035e5e" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Fri Jul 10 06:23:04 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 10 06:25:01 2026" }, "message": "net: Avoid returning stale reference in FakeServiceEndpointRequest\n\nChange the return type of CallOnServiceEndpointRequestFinished() from\nFakeServiceEndpointRequest\u0026 to void.\n\nThis method invokes delegate_-\u003eOnServiceEndpointRequestFinished(), which\nmay result in the destruction of the FakeServiceEndpointRequest instance\nitself. Returning *this in this scenario is unsafe.\n\nBug: 531975349\n\nTAG\u003dagy\nCONV\u003db765bf2e-ae0c-40ba-8ea7-3c302152e63a\n\nChange-Id: I094d9a694f62f38c3ff82137293c7d168c3266dd\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8073399\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1660076}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6982e32be8d95c526a2eb1b5b2ff2adb2170950d\n" }, { "commit": "b525ab2956f41797ebe3ea124ac84193db035e5e", "tree": "d705aa00f21cb5f9ed66135cc5cd3314717090d9", "parents": [ "1d5e33c911d4222419c8d04624296be9a5c66442" ], "author": { "name": "Kent Tamura", "email": "tkent@chromium.org", "time": "Fri Jul 10 00:51:43 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 10 00:53:57 2026" }, "message": "Add -Wshorten-64-to-32 and -Wtautological-unsigned-zero-compare to `inside_blink` config\n\nBug: 514751964\nChange-Id: I4bf0cd742df4b4ef833dee0402a08b9efa7e83d1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8062845\nReviewed-by: Ryan Hamilton \u003crch@chromium.org\u003e\nCommit-Queue: Kent Tamura \u003ctkent@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659987}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d8058598c0efdede729abbab5fde213ec7b06bc7\n" }, { "commit": "1d5e33c911d4222419c8d04624296be9a5c66442", "tree": "48b1b399e0737eaf490e4509689d60a1ef715340", "parents": [ "c03efc9c38bbccfbe5d88462801a73cb9b60a0cd" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Fri Jul 10 00:37:54 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 10 00:40:00 2026" }, "message": "Squash synchronous completion errors of ServiceEndpointRequest::Start()\n\nServiceEndpointRequestImpl notified asynchronous completions with\nHostResolver::SquashErrorCode() applied, but synchronous completions\nreturned raw error codes from Start() (e.g. ERR_DNS_CACHE_MISS for a\nLOCAL_ONLY cache miss, or ERR_CONTEXT_SHUT_DOWN). Callers feed both\ninto the same handling code, so the same logical failure produced\ndifferent error codes depending on completion timing. The legacy\nresolve API squashes error codes in both cases.\n\nSquash the error code Start() returns on synchronous completion.\nDetailed errors are still available via GetResolveErrorInfo(), which\nnow also gets a previously missing sequence checker.\n\nBug: 41493696\nChange-Id: Ie5fdc96008065b67b8e6eea227537f1d034db205\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8068097\nReviewed-by: Eric Orth \u003cericorth@chromium.org\u003e\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659983}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0ee1cef2810d774f6eca7570a58dda153b1eb807\n" }, { "commit": "c03efc9c38bbccfbe5d88462801a73cb9b60a0cd", "tree": "35cf13fcfca733d31422fc2efabc6924d0ee0313", "parents": [ "e6a34d4e3dee3c6cf9efa3252f965ba60c2b289f" ], "author": { "name": "Carlos IL", "email": "carlosil@chromium.org", "time": "Thu Jul 09 22:01:04 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 22:03:22 2026" }, "message": "Enable kTLSTrustAnchorIDs by default\n\nBug: 508686193\nChange-Id: I433813b185d44e674ca255ab9bf5330eca607d50\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8066840\nCommit-Queue: Carlos IL \u003ccarlosil@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nAuto-Submit: Carlos IL \u003ccarlosil@chromium.org\u003e\nReviewed-by: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659865}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3e0abd3ff2e8f5205b2859e0dd9a3afc50a68fdd\n" }, { "commit": "e6a34d4e3dee3c6cf9efa3252f965ba60c2b289f", "tree": "4eda14680fe21a122421eab50698b01735082014", "parents": [ "8acef7ef0cb4cb4127e6ae9bbab77997570c270c" ], "author": { "name": "Joe Mason", "email": "joenotcharles@google.com", "time": "Thu Jul 09 21:40:44 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 21:42:50 2026" }, "message": "Use ByteSize in //net\n\nByteCount is deprecated.\n\nAlso adds a missing test case for GetDirectoryListingEntry without a\nsize.\n\nBug: 448661443\nChange-Id: Ic04aec0f94725392d14a4f7440f40883faddddfe\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8071078\nCommit-Queue: Joe Mason \u003cjoenotcharles@google.com\u003e\nReviewed-by: David Schinazi \u003cdschinazi@chromium.org\u003e\nReviewed-by: Dave Tapuska \u003cdtapuska@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659849}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 64084acde0b421c197fea2fc8933f77b614d6be7\n" }, { "commit": "8acef7ef0cb4cb4127e6ae9bbab77997570c270c", "tree": "02eef809bd227edcfee26d99c3cd273a627ce8c6", "parents": [ "98a9a1161cad4b00b10bcdcc8d9e3ff1bdf56fd8" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Thu Jul 09 16:56:14 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 16:58:07 2026" }, "message": "[base] Make EnumSet template parameters default to kMinValue/kMaxValue\n\nThis change updates the base::EnumSet template to use E::kMinValue and\nE::kMaxValue as default values for the MinEnumValue and MaxEnumValue\ntemplate parameters, respectively. This simplifies the common usage of\nEnumSet where the enum type provides these standard range markers. All\ncall sites are updated to remove the now-redundant explicit template\narguments.\n\nChange-Id: Iab300a843d3092657ece2396f513cfe7ee199bf1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8063934\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nOwners-Override: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659649}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4b1ee518f983915edab48f87a21b2a201fb730cd\n" }, { "commit": "98a9a1161cad4b00b10bcdcc8d9e3ff1bdf56fd8", "tree": "676cd5112267821c66d9d4e2ab7ecc60bc9c23ec", "parents": [ "f0d7505cdb33a0ad7546ec09fb04e7a2af9bc5a9" ], "author": { "name": "Ashley Newson", "email": "ashleynewson@chromium.org", "time": "Thu Jul 09 11:28:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 11:31:01 2026" }, "message": "Modify SimpleCachePrefetchExperiment2 feature checking and parameters\n\nThis CL prepares SimpleCachePrefetchExperiment2 for new experimentation.\n\n- A feature check is performed before parameters are accessed. This\n allows non-zero parameter defaults and allows for better metrics\n filtering.\n- Adds a parameter to limit the feature to DISK_CACHE / HTTP Cache.\n- Sets default FullPrefetchBytes to 64KiB.\n- Sets default TrailerPrefetchSpeculativeBytes to 10KiB.\n- Adds the flag to WebView\u0027s DevTools UI (ProductionSupportedFlagsList).\n- Renew and update ownership of SimpleCache.*.SyncOpenPrefetchMode\n histograms.\n- Remove declaration for undefined GetSimpleCachePrefetchSize function.\n\nDefault behavior (stable and fieldtrial testing config) remains\nunchanged in this CL. The fieldtrial testing config will be updated in\na separate CL.\n\nBug: 529360300\nChange-Id: Ifd937fdaf67311c1722ed491ed70b1906e1e8d61\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8046500\nCommit-Queue: Ashley Newson \u003cashleynewson@chromium.org\u003e\nReviewed-by: David Schinazi \u003cdschinazi@chromium.org\u003e\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659467}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9aaf9ffe7f405eb189bd39dabff74dc94ee21c75\n" }, { "commit": "f0d7505cdb33a0ad7546ec09fb04e7a2af9bc5a9", "tree": "625def0803e9fc8cb10639d0fa6a88be258b4f9e", "parents": [ "97d68289048c1e20f531214644b7799ee23b5c45" ], "author": { "name": "luci-bisection@appspot.gserviceaccount.com", "email": "luci-bisection@appspot.gserviceaccount.com", "time": "Thu Jul 09 10:56:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 10:58:32 2026" }, "message": "Revert \"Android: Detect VPN-over-cellular connection type from capabilities\"\n\nThis reverts commit f7799e857d8ddfaf07e59586314e7d4a42b24d5b.\n\nReason for revert:\nLUCI Bisection has identified this change as the cause of a test failure. See the analysis: https://ci.chromium.org/ui/p/chromium/bisection/test-analysis/b/4563375804645376\n\nSample build with failed test: https://ci.chromium.org/b/8676770354385411681\nAffected test(s):\n[://content/shell/android\\:content_shell_test_apk!junit:org.chromium.net:NetworkChangeNotifierTest#testNetworkCallbacks](https://ci.chromium.org/ui/test/chromium/:%2F%2Fcontent%2Fshell%2Fandroid%5C:content_shell_test_apk%21junit:org.chromium.net:NetworkChangeNotifierTest%23testNetworkCallbacks?q\u003dVHash%3A6c325016a9806f09)\n\nIf this is a false positive, please report it at http://b.corp.google.com/createIssue?component\u003d1199205\u0026description\u003dAnalysis%3A+https%3A%2F%2Fci.chromium.org%2Fui%2Fp%2Fchromium%2Fbisection%2Ftest-analysis%2Fb%2F4563375804645376\u0026format\u003dPLAIN\u0026priority\u003dP3\u0026title\u003dWrongly+blamed+https%3A%2F%2Fchromium-review.googlesource.com%2Fc%2Fchromium%2Fsrc%2F%2B%2F7924419\u0026type\u003dBUG\n\nOriginal change\u0027s description:\n\u003e Android: Detect VPN-over-cellular connection type from capabilities\n\u003e\n\u003e NetworkChangeNotifierAutoDetect reported VPN-over-cellular as\n\u003e CONNECTION_UNKNOWN. It also derived the connection type two different\n\u003e ways (NetworkCapabilities vs the synchronous NetworkInfo IPC), which\n\u003e could disagree and flap the type, cancelling requests with\n\u003e ERR_NETWORK_CHANGED.\n\u003e\n\u003e Derive type/subtype from NetworkCapabilities (transport plus\n\u003e bandwidth-approximated cellular subtype), gated on\n\u003e kDeriveConnectionTypeFromCapabilities. When enabled, getNetworkState()\n\u003e skips the getNetworkInfo() IPC and falls back to it only when\n\u003e capabilities are unavailable. The transport-\u003etype mapping is shared via\n\u003e connectivityTypeFromCapabilities().\n\u003e\n\u003e Bug: 40834899\n\u003e Change-Id: I3e5e8cf9b45dd5da9b21f2ae1862846b318a8162\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7924419\n\u003e Reviewed-by: Yoichi Osato \u003cyoichio@chromium.org\u003e\n\u003e Commit-Queue: Zeyu Fu \u003czeyufu@microsoft.com\u003e\n\u003e Reviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1659367}\n\u003e\n\nBug: 40834899\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: Iff2973ab329a41b6e2d5599a7238e33db4247e31\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8069922\nReviewed-by: Peter Pakkenberg \u003cpbirk@chromium.org\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCommit-Queue: Andrei Nedoluzhko \u003cnedol@google.com\u003e\nOwners-Override: Peter Pakkenberg \u003cpbirk@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659449}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bea731be6dd45f9d5729586a8aaac56ece09e31c\n" }, { "commit": "97d68289048c1e20f531214644b7799ee23b5c45", "tree": "ba01b1202ac74e8a5450d9f16e710b80eb7a162b", "parents": [ "dcff4025d5d984dafe3021bc7757c81d3edc98f9" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Thu Jul 09 09:40:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 09:42:09 2026" }, "message": "net/disk_cache/sql: Default SqlSharedCache destructor\n\nBecause CL 8045120 updated SqlTrackedSequenceBound to track its own\nconstruction and destruction, we no longer need to manually call\nCleanup() in ~SqlSharedCache() to ensure that the isolated database is\nclosed before tests finish.\n\nWhen SqlSharedCache is destroyed, it destroys its member\nisolated_database_ (SqlTrackedSequenceBound), which posts a deletion\ntask to the DB thread. This deletion task is now tracked by\nSqlAsyncTaskManager automatically.\n\nThis CL defaults the SqlSharedCache destructor and updates related test\ncomments.\n\nBug: 473666511\nChange-Id: Ib490b103c219ea9574d986ef28d8ba3c0277ea84\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8051264\nReviewed-by: Mingyu Lei \u003cleimy@chromium.org\u003e\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659417}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b43c7fe86633d378ee64e1b5cdb518dbfb718e77\n" }, { "commit": "dcff4025d5d984dafe3021bc7757c81d3edc98f9", "tree": "70e0aebce2d4de36ebb5e6bc164fc7bf334f3733", "parents": [ "211d652f1b5e8d45963085d1cfa5efb30ce6c058" ], "author": { "name": "Zeyu Fu", "email": "zeyufu@microsoft.com", "time": "Thu Jul 09 07:42:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 07:44:50 2026" }, "message": "Android: Detect VPN-over-cellular connection type from capabilities\n\nNetworkChangeNotifierAutoDetect reported VPN-over-cellular as\nCONNECTION_UNKNOWN. It also derived the connection type two different\nways (NetworkCapabilities vs the synchronous NetworkInfo IPC), which\ncould disagree and flap the type, cancelling requests with\nERR_NETWORK_CHANGED.\n\nDerive type/subtype from NetworkCapabilities (transport plus\nbandwidth-approximated cellular subtype), gated on\nkDeriveConnectionTypeFromCapabilities. When enabled, getNetworkState()\nskips the getNetworkInfo() IPC and falls back to it only when\ncapabilities are unavailable. The transport-\u003etype mapping is shared via\nconnectivityTypeFromCapabilities().\n\nBug: 40834899\nChange-Id: I3e5e8cf9b45dd5da9b21f2ae1862846b318a8162\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7924419\nReviewed-by: Yoichi Osato \u003cyoichio@chromium.org\u003e\nCommit-Queue: Zeyu Fu \u003czeyufu@microsoft.com\u003e\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1659367}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f7799e857d8ddfaf07e59586314e7d4a42b24d5b\n" }, { "commit": "211d652f1b5e8d45963085d1cfa5efb30ce6c058", "tree": "d2da169e1bcab2e6b3612a7981deb9ffcb25d957", "parents": [ "cb71bf8b1793ca5ff96ab8dfae52a69124291cbf" ], "author": { "name": "Yoichi Osato", "email": "yoichio@chromium.org", "time": "Thu Jul 09 06:27:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 06:29:34 2026" }, "message": "Roll src/net/third_party/quiche/src/ f1420cae2..1ba0d99a5 (4 commits)\n\nhttps://quiche.googlesource.com/quiche.git/+log/f1420cae27a7..1ba0d99a5c2f\n\n$ git log f1420cae2..1ba0d99a5 --date\u003dshort --no-merges --format\u003d\u0027%ad %ae %s\u0027\n2026-07-08 dschinazi OHTTP: allow unsupported symmetric HPKE algorithms in key config\n2026-07-08 dschinazi Cleanup ObliviousHttpKeyConfigs\n2026-07-08 reubent No public description\n2026-07-08 martinduke Refactor callbacks and request lifetime.\n\nCreated with:\n roll-dep src/net/third_party/quiche/src\n\nChange-Id: If1cc4659cb12086862cccad825514418c211f04b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8068558\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nAuto-Submit: Yoichi Osato \u003cyoichio@chromium.org\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659343}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9265eef670f75736467b94697e62e5b50ba8ea69\n" }, { "commit": "cb71bf8b1793ca5ff96ab8dfae52a69124291cbf", "tree": "006fc25b44b5b91cc583c44c30f36d1920908b4c", "parents": [ "c4aff36aff28964c58f4c6a8ed89c974a6893d8c" ], "author": { "name": "Nidhi Jaju", "email": "nidhijaju@chromium.org", "time": "Thu Jul 09 05:50:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 05:53:17 2026" }, "message": "Add WebView flag and fieldtrial testing config for Optimistic DNS for TCP\n\nBug: 521439533\nChange-Id: I6ef0994a4d4957f3724b1c009f13a68f90b599f0\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8061548\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCommit-Queue: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659327}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3362475404b07db1c8f83a2cb6f9c74d413c622f\n" }, { "commit": "c4aff36aff28964c58f4c6a8ed89c974a6893d8c", "tree": "741f93f16efbfabe2015e3f1b090d8057a02b055", "parents": [ "97294cf33d1c8e9394065413a42d12eecf03adc1" ], "author": { "name": "Nidhi Jaju", "email": "nidhijaju@chromium.org", "time": "Thu Jul 09 04:48:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 04:50:36 2026" }, "message": "Base Happy Eyeballs IPv6 fallback time off of RTT\n\nCurrently, the IPv6 fallback time in TcpConnectJob and TransportConnectJob\nis hardcoded to 300ms. This CL introduces the `IPv6FallbackBasedOnRTT`\nfeature, which calculates the fallback time dynamically based on the\nSmoothed RTT (srtt) to the destination.\n\nThe srtt is retrieved from the `HttpServerProperties` for the given\ndestination, or from the `NetworkQualityEstimator` if the destination\nis unknown. The resulting RTT is multiplied by a feature parameter\n(default 1.5) and clamped between a minimum (default 50ms) and a\nmaximum (default 1500ms) to ensure bounds are respected. If RTT is\nunavailable, the fallback gracefully uses the traditional 300ms.\n\nThis change aims to optimize the Happy Eyeballs algorithm by kicking\noff the IPv4 connection sooner for fast networks and waiting longer for\nhigh-latency networks before falling back.\n\nBug: 521439533\nChange-Id: I9259f957515e65833e365cd41cbb3d506e539b4f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8051724\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCommit-Queue: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659301}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dd02eff1a717283724ccf11a64a560e8478b4fd4\n" }, { "commit": "97294cf33d1c8e9394065413a42d12eecf03adc1", "tree": "eb5b8937a3aba39b47f6df258f487faf9094a2dc", "parents": [ "a6ff072ef2d049c96042c4ce5ed694b8d27a1548" ], "author": { "name": "Vasili Svirski", "email": "vsvirski@google.com", "time": "Thu Jul 09 00:31:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 00:33:31 2026" }, "message": "Fix undefined shift in MTC landmark calculation\n\n\u00271 \u003c\u003c split\u0027 and \u00271 \u003c\u003c left_split\u0027 in SubtreesForLandmarkRange used\n\u0027int\u0027 shift arithmetic. Once \u0027split \u003e\u003d 32\u0027, reachable when a landmark\nrange spans more than 2^32 entries, this is undefined behavior. Fix this\nby shifting a \u0027uint64_t\u0027 literal instead.\n\nBug: none\nChange-Id: I9f0e36fd1240ca9abf37d45a0110abab35ec0898\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8015703\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCommit-Queue: Vasili Svirski \u003cvsvirski@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1659165}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9d911d6bacb6268771a6603aba93d99ef1c8feaf\n" }, { "commit": "a6ff072ef2d049c96042c4ce5ed694b8d27a1548", "tree": "4e57244818cafbbb8a8685d32911eadd1db6910f", "parents": [ "ac9bef27e22b2f55eccd711c13e1ce6145fbdf43" ], "author": { "name": "Ari Chivukula", "email": "arichiv@chromium.org", "time": "Thu Jul 09 00:12:12 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 00:14:11 2026" }, "message": "[TCP] Remove TcpSocketPoolLimitRandomizationForProxy feature\n\nThis is launched in M150 and default enabled in M151, so after the\nbranch cut we can remove this for M152.\n\nFixed: 497837927\nChange-Id: I6a453919aa51a331dbe090102de575a7e15113d8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7893516\nReviewed-by: mmenke \u003cmmenke@chromium.org\u003e\nCommit-Queue: Ari Chivukula \u003carichiv@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659155}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 233158fd95eb4b5d3317720135db279036adc2c8\n" }, { "commit": "ac9bef27e22b2f55eccd711c13e1ce6145fbdf43", "tree": "75e7767fa467d48bd3b571062d90cc907ca6e9d8", "parents": [ "21033f84b18c8bafd74d73e47acb4a413347dcbc" ], "author": { "name": "Ali Hijazi", "email": "ahijazi@chromium.org", "time": "Wed Jul 08 16:58:19 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 08 17:00:18 2026" }, "message": "[DBSC] Fix Windows test flake in URLFetcherTest\n\nURLFetcherTest.CertificateSelectionWithoutCert was flaky on Windows\ntrybots when run in sequence after CertificateSelectionWithCert.\n\nPreviously, individual client certificate tests created their own local\nURLRequestContext and EmbeddedTestServer, declaring the server after the\ncontext. When a test completed, ~EmbeddedTestServer ran before\n~URLRequestContext, actively terminating server sockets while keep-alive\nclient connections remained open in the URLRequestContext socket pool.\nOn Windows, unlike Linux, a TCP server socket can bind to an endpoint in\nthe TIME_WAIT state without SO_REUSEADDR. Consequently, when the next\ntest immediately started and bound to port 0, Windows could reassign the\nsame port in TIME_WAIT. Upon server certificate rejection, the client\nhit a connection closure race condition, failing with\nERR_CONNECTION_CLOSED or ERR_SSL_PROTOCOL_ERROR instead of\nERR_BAD_SSL_CLIENT_AUTH_CERT.\n\nTo prevent this socket reuse and TIME_WAIT collision, this change\nintroduces a dedicated URLFetcherClientCertTest fixture subclass. By\nunifying EmbeddedTestServer and URLRequestContext management as class\nmembers and ordering context_ after test_server_, C++ member destruction\norder enforces that ~URLRequestContext runs first. This guarantees that\nall client connections in the socket pool are cleanly terminated before\nthe server shuts down.\n\nBug: b:524165451\nChange-Id: I829dee70c40a718ad942c8de16a2493eb372c95a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8064709\nCommit-Queue: Ali Hijazi \u003cahijazi@chromium.org\u003e\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1658856}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 45f43c7a89e0a18e4a7559d711dc1838884f8cb2\n" }, { "commit": "21033f84b18c8bafd74d73e47acb4a413347dcbc", "tree": "44ad1cc1ad50cc04ae622c3433bc8c3dba070e20", "parents": [ "1d26fb5c97b37159502fbe927e5d6209185f6ed8" ], "author": { "name": "David Benjamin", "email": "davidben@chromium.org", "time": "Wed Jul 08 16:10:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 08 16:13:00 2026" }, "message": "Avoid a theoretical overflow in ParseTokenValuePairs\n\nIn principle, `cookie_line` might have more than `INT_MAX` characters\nand thus more than `INT_MAX` pairs.\n\nThis cannot actually happen because we don\u0027t allocate buffers that don\u0027t\nfit in `int` and presumably the net stack will hit some header block\nsize limit before we get this far. Still, this is easy to avoid.\n\nChange-Id: I9bf66cea16103ca39ec163c8a27a9a03c307f4e8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8045083\nAuto-Submit: David Benjamin \u003cdavidben@chromium.org\u003e\nCommit-Queue: Lily Chen \u003cchlily@chromium.org\u003e\nReviewed-by: Lily Chen \u003cchlily@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1658811}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8033dcebf5763d00117a600c4d2ddd6604fda8f5\n" }, { "commit": "1d26fb5c97b37159502fbe927e5d6209185f6ed8", "tree": "9c6147a3bae75c8fe9f5391c4538aa6f02eb244f", "parents": [ "477042c2a2a8670de7f6a2ae778114d3a43091f3" ], "author": { "name": "Adam Rice", "email": "ricea@chromium.org", "time": "Wed Jul 08 15:38:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 08 15:41:10 2026" }, "message": "Restrict abuse ports on 0.0.0.0 and :: as they are localhost aliases.\n\nOn POSIX-like OSs, 0.0.0.0 and :: can be used as aliases for localhost,\nbut the implementation of the kRestrictAbusePortsOnLocalhost feature\ndidn\u0027t check for that. This CL modifies IsPortAllowedForIpEndpoint to\nalso restrict ports on zero addresses.\n\nIt also updates tests in net/socket/udp_socket_unittest.cc,\nnet/socket/tcp_client_socket_unittest.cc, and net/base/port_util_unittest.cc\nto verify that the ports are blocked for all of 127.0.0.0/8, ::1,\n0.0.0.0, and ::.\n\nImplemented by Gemini.\n\nBug: 517364411\nChange-Id: I1064c920a7cb98c262c77ae9b03febafa5193829\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7967099\nReviewed-by: Yoichi Osato \u003cyoichio@chromium.org\u003e\nCommit-Queue: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1658792}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 085f44318aea6217b5130ad12e8332e1be10599e\n" }, { "commit": "477042c2a2a8670de7f6a2ae778114d3a43091f3", "tree": "7556fd8dec58882384cfa544f0454c50ad40679b", "parents": [ "cdd5fabcc53af5997ffa5a1efedb41c51c690a3d" ], "author": { "name": "Ali Hijazi", "email": "ahijazi@chromium.org", "time": "Wed Jul 08 08:46:29 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 08 08:49:08 2026" }, "message": "[DBSC] Support client cert selection for registration and refresh\n\nThis CL adds support for client certificate selection during DBSC\nbackground requests (session registration and session token refreshes)\nexecuted via URLFetcher.\n\nWhen the server requests a client certificate, URLFetcher delegates\nselection to a new SelectClientCertificateHandler repeating callback on\nSessionService, avoiding direct Mojo dependencies inside net/.\n\nKey implementation details:\n\n- NetworkContext sets up a DeviceBoundSessionServiceDelegate to\n implement the callback, forwarding requests over Mojo via the\n partition-bound URLLoaderNetworkServiceObserver.\n\n- If the session service or callback is missing, or selection is\n cancelled, the request fails with ERR_SSL_CLIENT_AUTH_CERT_NEEDED to\n prevent poisoning the client certificate cache.\n\n- Adds unit tests in URLFetcherTest and\n DeviceBoundSessionServiceDelegateTest covering successes,\n cancellations, and missing handlers.\n\nBug: 438783633, 524165451\nChange-Id: I72faf4bf8023491e702f25f55ee9f12d355517dc\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7943043\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCommit-Queue: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1658580}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6246093e44c484a74a108bae84ded6b2eec44f2c\n" }, { "commit": "cdd5fabcc53af5997ffa5a1efedb41c51c690a3d", "tree": "34989497106039f4ef417d5658bf8d8bf48a80e3", "parents": [ "2e7eef8176a2b2c7e575ab85954a71efb27a1414" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Wed Jul 08 06:03:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 08 06:05:10 2026" }, "message": "Handle ResolveContext shutdown during ServiceEndpointRequest async checks\n\nServiceEndpointRequestImpl::Start() checks that the ResolveContext is\nstill alive, but the request did not re-check it when resuming from an\nasynchronous IPv6 reachability check. If the context was shut down in\nthat window, DoResolveLocally() passed a null ResolveContext* to\nJobKey\u0027s constructor, which dereferences it, crashing the process.\n\nFail the request with ERR_CONTEXT_SHUT_DOWN when the context is gone\nby the time an asynchronous check completes, mirroring the check in\nStart().\n\nBug: 41493696\nChange-Id: Ie496e9b13ed61547ffbeaf5ed3b13e6283550103\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8043549\nReviewed-by: Eric Orth \u003cericorth@chromium.org\u003e\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1658512}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: fd4007362ea57d993c3e4ff73c8f5e0063894f8a\n" }, { "commit": "2e7eef8176a2b2c7e575ab85954a71efb27a1414", "tree": "9bccbe421ab07b46aede81e1a7d8aba2f1fc99f8", "parents": [ "b01fa86349f8fe4d8a294457d1839f01a1b8d513" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Wed Jul 08 05:15:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 08 05:17:24 2026" }, "message": "Ignore HTTP/2 ALTSVC frames on sessions used as proxies\n\nSpdySession::OnAltSvc() derives the origin for a per-stream ALTSVC frame\nfrom SpdyStream::url(). On a session whose SessionUsage is kProxy, that\nstream is a CONNECT tunnel and url() is the tunneled destination, not an\norigin the session host is authoritative for per RFC 7838. Drop ALTSVC\nframes on such sessions instead of writing alternative service entries\nfor the tunneled origin into HttpServerProperties.\n\nTAG\u003dagy\nCONV\u003dea9db2ef-5f39-4244-8499-10bace633b74\n\nBug: 513287677\nChange-Id: I67e350c2868ba931958a6c8d2319b8c1585d0aa6\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8018122\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1658495}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9aca0bf1b0e711be9240cc79b5514dc7e2363a1e\n" }, { "commit": "b01fa86349f8fe4d8a294457d1839f01a1b8d513", "tree": "ecfa3525f712728c3d807917985e66e41f406b36", "parents": [ "ff4c24e584bb7037718a981b941d629e7f25a34c" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Wed Jul 08 02:33:10 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 08 02:35:18 2026" }, "message": "netlog: Add NDJSON output support to FileNetLogObserver\n\nAdd an opt-in NDJSON file format for FileNetLogObserver\nwhile keeping the existing JSON format as the default.\n\nNDJSON logs are written as one JSON object per line: constants,\nevent, optional final polledData, and an end marker.\nThe final polledData is still collected only through the\nexisting Stop path.\n\nBounded logging is supported by writing NDJSON-compatible\nevent files and stitching them in order. The crash recovery\nstitch script is updated to handle NDJSON in-progress logs.\n\nBug: 531138936\nChange-Id: Ie248d6dc507af1b5c3d5a8f44ba672d73991f02e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8042095\nReviewed-by: mmenke \u003cmmenke@chromium.org\u003e\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1658455}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 53cafe6591127c40c9e4e16ac1b66227925db00b\n" }, { "commit": "ff4c24e584bb7037718a981b941d629e7f25a34c", "tree": "b078f3dc3f03c046a4ed46b67bd05c91d42ec54b", "parents": [ "084b448c6267fa8d9b487837d101f5ef82428d4f" ], "author": { "name": "Martin Verde", "email": "thesalsa@google.com", "time": "Wed Jul 08 02:28:36 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 08 02:30:33 2026" }, "message": "QUIC: Update ResumeAttemptTicketAge histogram maximum to 14 days\n\nUpdates the maximum value for the ResumeAttemptTicketAge.All, .Accepted,\nand .Rejected histograms from 7 days to 14 days. This will help obtain\nmore accurate percentile metrics (95th/99th) and verify the true ticket\nage distribution, as currently a significant fraction of samples in\nCanary seem to be overflowing the 7-day limit.\n\nBug: 504735259\nChange-Id: Iad64126c3f1cbc7485b913edd2f70f54d51598bb\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8044527\nCommit-Queue: Martin Pan-Verde \u003cthesalsa@google.com\u003e\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1658452}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4ef3375e1e8c7726d917414142cf1efb0ec0043b\n" }, { "commit": "084b448c6267fa8d9b487837d101f5ef82428d4f", "tree": "830797218491f8ad30bfd2ca6df8a7bbc1b1d537", "parents": [ "a03628610eba59fa4d0365f68ea00ba35c42ae40" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Wed Jul 08 01:47:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 08 01:49:47 2026" }, "message": "Notify ServiceEndpointRequest delegate on completion after async IPv6 check\n\nServiceEndpointRequestImpl::OnIOComplete() discarded the result of\nDoLoop(). When the IPv6 reachability check completes asynchronously\nand the request then finishes synchronously in DoResolveLocally()\n(e.g. an IP literal or a host cache hit), the request was finalized\nwithout calling Delegate::OnServiceEndpointRequestFinished(), even\nthough Start() had already returned ERR_IO_PENDING. The caller would\nwait for the notification forever.\n\nNotify the delegate from OnIOComplete() when DoLoop() returns a final\nresult, matching what RequestImpl::OnIOComplete() does for the legacy\nresolve API.\n\nBug: 41493696\nChange-Id: I7a9d9695bb91ec515582139896c707d20d0458f3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8042309\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nReviewed-by: Eric Orth \u003cericorth@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1658443}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8407dca4c0752a72df7a98379966279a13293a9b\n" }, { "commit": "a03628610eba59fa4d0365f68ea00ba35c42ae40", "tree": "14bff04eb815af9ac1415184bb42638c22bf9b70", "parents": [ "a372022287ef697ca7fd168c63df2df21f2848b5" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Wed Jul 08 01:35:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 08 01:38:13 2026" }, "message": "net/disk_cache/sql: Introduce SqlSharedCacheManager\n\nThis CL introduces `SqlSharedCacheManager` as part of the SQL disk cache\nbackend infrastructure for the Renderer-Accessible HTTP Cache feature.\n\n`SqlSharedCacheManager` coordinates the creation, retrieval, and\nlifetime management of `SqlSharedCache` instances. It maps\n`NetworkIsolationKey`s and `SqlSharedCacheDbId`s to their corresponding\nshared cache instances and serializes database operations using an\ninternal operation queue.\n\nBug: 473666511\nChange-Id: I88f918204f40a70b7e42a5e0b484817a16c7302b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8030120\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nReviewed-by: Mingyu Lei \u003cleimy@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1658437}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f1bd0fb1bcde5d6fb66ed66c3aab2415f7eca501\n" }, { "commit": "a372022287ef697ca7fd168c63df2df21f2848b5", "tree": "2068026b35281fd1e9f215370b4fe58de6bbad64", "parents": [ "1fb1f816f7756c96d642e10ae2bd75b23e93e392" ], "author": { "name": "Carlos IL", "email": "carlosil@chromium.org", "time": "Tue Jul 07 17:42:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 17:44:19 2026" }, "message": "Add chrome-pki-metadata-release-jobs as an owner for signer set\n\nThis will allow the pipeline to make automated commits to keep this in\nsync\n\nBug: 515801837\nChange-Id: I75bfc2c95bb9a99708a12ee4507c89a215557967\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8052431\nAuto-Submit: Carlos IL \u003ccarlosil@chromium.org\u003e\nReviewed-by: Matt Mueller \u003cmattm@chromium.org\u003e\nCommit-Queue: Matt Mueller \u003cmattm@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1658077}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f6b02c99c56941213f23fb379e69964021173dbb\n" }, { "commit": "1fb1f816f7756c96d642e10ae2bd75b23e93e392", "tree": "4363a97a5d0c3aac22ccc87d40f3c5ab48aff5d3", "parents": [ "4997a2d28bc32a9b9cfe2b36d1dff4290e065bd0" ], "author": { "name": "Lucas Santos", "email": "santosls@google.com", "time": "Tue Jul 07 17:30:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 17:35:14 2026" }, "message": "Introduce DBSC-SSO Error Codes and metrics.\n\nThis change is part of the https://github.com/wicg/dbsc-sso\nimplementation and should have no immediate impact in production code.\n\nThe introduced enums will be used by upcoming pull requests.\n\nBug: 527761268\nChange-Id: I2be6aa53f23181eed185452ffb065bdde3021775\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8031424\nReviewed-by: Alex Rudenko \u003calexrudenko@chromium.org\u003e\nCommit-Queue: Lucas Santos \u003csantosls@google.com\u003e\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nReviewed-by: Mike West \u003cmkwst@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1658064}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f38ba53d431091da731691640fa6d3c03e493e99\n" }, { "commit": "4997a2d28bc32a9b9cfe2b36d1dff4290e065bd0", "tree": "621f2305b729aa2008f7dc96d4249ab4d820d9fc", "parents": [ "83421ada6a617627ba0fa1788c37b60f5ed8a2da" ], "author": { "name": "Mohannad Farrag", "email": "aymanm@google.com", "time": "Tue Jul 07 14:19:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 14:20:57 2026" }, "message": "QUIC: Duplicate yielding tests to explicitly test ReadMultiple.\n\nThis CL duplicates the YieldAfterPackets and YieldAfterDuration tests in\nQuicSessionPoolTest into feature-enabled and feature-disabled versions.\n\nEach test now explicitly controls the kQuicUseReadMultiple flag using\nScopedFeatureList, ensuring that both the single-read and batch-read\nyielding paths are independently and robustly tested regardless of the\nglobal flag state.\n\nBug: 515333601\nChange-Id: I8aa8ff1994a7130a9f8fcad648831fda26510da7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8010986\nAuto-Submit: Mohannad Farrag \u003caymanm@google.com\u003e\nCommit-Queue: Mohannad Farrag \u003caymanm@google.com\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1657927}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3f30c2ee668a7a0da42eeb1b395e36d58f8c4b9e\n" }, { "commit": "83421ada6a617627ba0fa1788c37b60f5ed8a2da", "tree": "35d14fe69f0ba8d2b599a81ec4274cc00bbc6fdd", "parents": [ "063ee704f82bcaba4061ca658815f02047b5bedb" ], "author": { "name": "Lucas Santos", "email": "santosls@google.com", "time": "Tue Jul 07 13:54:56 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 13:58:13 2026" }, "message": "Propagate Cookie Access API parameters to network layer for DBSC SSO.\n\nPlumbs the HasCookieAccessCallback from the service/network layer to the\nnet/device_bound_sessions layer. The callback will be used to check if\nthe identity provider has access to the relying party domain during\nDBSC-SSO session registration.\n\nThe check will happen before provisioning a cryptographic key to the RP\nand before sharing its digest with them.\n\nIt verifies DBSC-SSO permissions using `IsFullCookieAccessAllowed`\nrather than `IsAllowedByStorageAccessGrant` as\n`IsAllowedByStorageAccessGrant` strictly mandates the presence of an\nactive Storage Access grant, which incorrectly blocks DBSC-SSO for users\nwho have globally enabled third-party cookies.\n\n`IsFullCookieAccessAllowed` natively handles the Chromium cookie\nhierarchy (via `CookieSettingsBase::DecideAccess`), correctly allowing\nDBSC-SSO when third-party cookies are allowed globally or when Storage\nAccess is granted, while still properly blocking DBSC-SSO if the user\nexplicitly configures a site-level exception to block cookies for the\nprovider.\n\nBug: 527761268\nChange-Id: I6550bf89f7c172f5c3d21ccb9cb205bbf692ac39\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8006731\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCommit-Queue: Lucas Santos \u003csantosls@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1657915}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 99e6ede44960f86ff210f143805b62c618d2a3c6\n" }, { "commit": "063ee704f82bcaba4061ca658815f02047b5bedb", "tree": "826eabdcdf78af9293d7a3530bc2f6e66f528810", "parents": [ "2292b84c8af824ecd485d79d156513cb11a06198" ], "author": { "name": "Mohannad Farrag", "email": "aymanm@google.com", "time": "Tue Jul 07 13:53:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 13:56:33 2026" }, "message": "QUIC: Implement QuicChromiumPacketReader to use ReadMultiple (recvmmsg) API.\n\nThis change introduces a new feature, kQuicUseReadMultiple, which, when\nenabled, causes QuicChromiumPacketReader to use the socket\u0027s\nReadMultiple API instead of the standard Read API. ReadMultiple allows\nreading multiple UDP datagrams in a single syscall. The received\ndatagrams are buffered and processed sequentially, with yielding logic\napplied to avoid blocking the thread for too long.\n\nWhen using ReadMultiple, we fail immediately and stop reading if any\nerror is encountered, instead of ignoring the error and continuing to\nread. This is a behavioral departure from the single-read (recvmsg) path\nwhere certain errors (like ERR_MSG_TOO_BIG) are ignored. In\nReadMultiple, an error returned for a batch might apply to a packet that\nwas read after other packets were successfully read into the buffer\n(e.g. 3 packets read successfully, 4th is truncated, returning\nERR_MSG_TOO_BIG for the batch). If we were to ignore this error and\ncontinue reading, the successfully read packets in the same batch would\nbe silently dropped.\n\nAlso added tests in quic_chromium_client_session_test.cc to verify:\n- Reader yields correctly after processing a batch, resumes, reads more,\n and yields again if needed (In follow-up CL).\n- Reader stops immediately and closes the connection on read errors.\n- Histograms and packet stats are recorded correctly.\n\nBug: 515333601\nChange-Id: I835ced13aa08fc187f98d544d0978ef144f0c5f5\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7956877\nAuto-Submit: Mohannad Farrag \u003caymanm@google.com\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Mohannad Farrag \u003caymanm@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1657913}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2d4a330e001c571003b5284596869a896fda852e\n" }, { "commit": "2292b84c8af824ecd485d79d156513cb11a06198", "tree": "69ee04b2541cfc33d47ab8b875aa482d23082d62", "parents": [ "3ea49c9498eb1a4b712182b5c0b627c20c2ec34c" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Tue Jul 07 12:44:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 12:46:00 2026" }, "message": "[dbsc] Merge UnexportableKeyId into UnexportableSigningKeyId\n\nSimplify the unexportable key class hierarchy by removing the generic\nUnexportableKeyId base class and merging its functionality directly into\nUnexportableSigningKeyId.\n\nPreviously, UnexportableKeyId served as a role-agnostic base identifier.\nHowever, to prepare for hardware-backed attestation keys performing\nsigning operations, unifying these classes simplifies the interface and\nremoves redundant type conversions.\n\nSpecifically, this change:\n\n- Replaces UnexportableKeyId with UnexportableSigningKeyId as the\n primary key identifier.\n- Updates UnexportableAttestationKeyId to inherit directly from\n UnexportableSigningKeyId.\n- Migrates the UnexportableKeyService interface, Mojo interfaces, and\n custom serialization traits to use UnexportableSigningKeyId.\n- Updates all call sites across the signin, net, services, and\n unexportable_keys components.\n\nBug: 530828835\nChange-Id: I07a1a698678097649bd5627ea35ee72c6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8035004\nReviewed-by: Elly \u003cellyjones@chromium.org\u003e\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nCommit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1657885}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bbfc95c145c89e49d3753cb46d0bed1bbfb22381\n" }, { "commit": "3ea49c9498eb1a4b712182b5c0b627c20c2ec34c", "tree": "1d3bdbae1d69389f3f12876dbc1df2e5604a478e", "parents": [ "02e180fea6892c9f0b55926232bc3be53bfc7327" ], "author": { "name": "Mohannad Farrag", "email": "aymanm@google.com", "time": "Tue Jul 07 10:52:02 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 10:54:51 2026" }, "message": "net: Delegate ReadMultiple to Read in proxy and fuzzed sockets\n\nThis is required in order for the `fieldtrial_config` change that will\nbe added later to pass testing. There exists some integration tests in\nchromium that utilizes the quic_proxy and quic_fuzzer which would crash\nwithout this change. However, they\u0027re not really important to prove the\nperformance improvement as most of the traffic in production goes\nthrough QUIC itself which have been changed to use ReadMultiple here:\nhttps://crrev.com/c/7956877\n\nBug: 515333601\nChange-Id: I23e7ef5f66362836a41a635928eb6654b49b6904\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7992620\nAuto-Submit: Mohannad Farrag \u003caymanm@google.com\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Mohannad Farrag \u003caymanm@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1657846}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7dfe9ff92532d9d03b65a1bc76e6b9d51008d1e5\n" }, { "commit": "02e180fea6892c9f0b55926232bc3be53bfc7327", "tree": "3cceac5e33f9a15b1fca2c5d7de7a41b062f074b", "parents": [ "f77ea315456539960e7b56023839259732ab28cd" ], "author": { "name": "Hayato Ito", "email": "hayato@chromium.org", "time": "Tue Jul 07 08:14:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 08:16:17 2026" }, "message": "Launch NetworkQualityEstimatorIsPrivateHostCache\n\nLaunch NetworkQualityEstimatorIsPrivateHostCache. See\nhttp://go/hayato-doc/2026/net-is-private-host-cache.md (Google Internal)\nfor details.\n\n- Enable kNetworkQualityEstimatorIsPrivateHostCache by default\n- Remove the corresponding entry from fieldtrial_testing_config.json.\n\nBug: 502072770\nChange-Id: I95eb035d26efc59b657b2922527a6c1b657d354c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8050605\nCommit-Queue: Hayato Ito \u003chayato@chromium.org\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1657761}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7547ec38016403ae92a37efaebfe0857542667d8\n" }, { "commit": "f77ea315456539960e7b56023839259732ab28cd", "tree": "cd207931e36192d2ac7e60117917e65ffbbc1b1b", "parents": [ "31920133b20571f6d872230b913417cd77b98aa4" ], "author": { "name": "Yoichi Osato", "email": "yoichio@chromium.org", "time": "Tue Jul 07 07:29:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 07:32:27 2026" }, "message": "Roll src/net/third_party/quiche/src/ 4729ceb22..f1420cae2 (13 commits)\n\nhttps://quiche.googlesource.com/quiche.git/+log/4729ceb22172..f1420cae27a7\n\n$ git log 4729ceb22..f1420cae2 --date\u003dshort --no-merges --format\u003d\u0027%ad %ae %s\u0027\n2026-07-06 apaseltiner Import serialization-only structured headers tests\n2026-07-04 martinduke Deprecate gfe2_reloadable_flag_quic_one_dcid.\n2026-07-04 martinduke Add path validation failure reason codes to QUICHE.\n2026-07-02 reubent Add code counts for all defects\n2026-07-01 martinduke Increment Request ID on SubscribeNamespace.\n2026-07-01 quiche-dev [SM][iOS] CL 1/n: Refactor BlindSignAuth to accept generic attestation data (v2)\n2026-07-01 quiche-dev QBONE Bonnet: Ensure `eth_hdr_` is initialized when sending neighbor solicit responses.\n2026-06-30 quiche-dev QBONE Bonnet: use `writev` to eliminate copies when adding eth headers.\n2026-06-29 ianswett Simplify the QUIC code more now that there\u0027s a single IsIetfQuic() method.\n2026-06-29 quiche-dev Measure non-compliant base64 encoding in Structured Headers.\n2026-06-26 dschinazi Add ChunkedObliviousHttpGateway::CanEncrypt()\n2026-06-26 quiche-dev Remove unnecessary string allocations from structured headers\n2026-06-25 reubent No public description\n\nCreated with:\n roll-dep src/net/third_party/quiche/src\n\nChange-Id: Ie376ee854082b7ec4f1de2463d7a846177191825\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8050220\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nAuto-Submit: Yoichi Osato \u003cyoichio@chromium.org\u003e\nCommit-Queue: Yoichi Osato \u003cyoichio@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1657732}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 26fe2240afe697848ddede64da479ac63bc8534e\n" }, { "commit": "31920133b20571f6d872230b913417cd77b98aa4", "tree": "93d3e69aa1cae02430bda8c4620b16aed2669640", "parents": [ "b3939054f8ae82ea11031345635d7daaa3bfce7e" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Tue Jul 07 03:50:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 03:52:19 2026" }, "message": "net/disk_cache/sql: Introduce SqlSharedCache and SqlSharedCacheHandle\n\nThis CL introduces `SqlSharedCache` and `SqlSharedCacheHandle` as part\nof the SQL disk cache backend infrastructure for the Renderer-Accessible\nHTTP Cache feature.\n\n`SqlSharedCache` represents an isolated HTTP cache instance associated\nwith a specific NetworkIsolationKey. It manages the underlying\n`SqlSharedCacheIsolatedDatabase` lifecycle and references.\n`SqlSharedCacheHandle` provides a ref-counted handle to a\n`SqlSharedCache` instance to manage its lifetime.\n\nBug: 473666511\nChange-Id: I2d54d12ff6c4480ec3e8804e003274ec9ee3aed1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8034762\nReviewed-by: Mingyu Lei \u003cleimy@chromium.org\u003e\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1657682}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 1ba8375e813d8ada3aedc45643e2b6f619e24f0e\n" }, { "commit": "b3939054f8ae82ea11031345635d7daaa3bfce7e", "tree": "78932a140682619a0773e983a0834bcb2b9f0715", "parents": [ "2855bd7c224a9e08db774a4d2d5e84c3aed6cf34" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Tue Jul 07 03:49:29 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 03:50:59 2026" }, "message": "net: Track construction and destruction in SqlTrackedSequenceBound\n\nSqlTrackedSequenceBound wraps base::SequenceBound to track asynchronous\ntasks via SqlAsyncTaskManager. Previously, it only tracked explicit\nAsyncCall() invocations. However, base::SequenceBound also posts tasks\nto the background SequencedTaskRunner upon object construction (new\nT(...)) and destruction (delete impl_).\n\nBecause these construction and destruction tasks were untracked,\nSqlAsyncTaskManager::RunUntilAllTasksCompleteForTest() could return\nbefore the background task runner finished deleting or constructing the\nobject. This resulted in flaky DCHECK failures during test teardown\n(e.g., base::Lock::~Lock() in ScopedFeatureList) when background threads\naccessed feature flags while ScopedFeatureList was being destroyed.\n\nThis CL updates SqlTrackedSequenceBound to store its task runner and\npost a tracking task (holding a SqlAsyncTaskToken) after sequence_bound_\nconstruction and inside Reset() / destructor. Since SequencedTaskRunner\nexecutes tasks FIFO, the tracking task runs immediately after the\nobject\u0027s construction or destruction completes, ensuring\nSqlAsyncTaskManager waits for all background tasks to finish.\n\nBug: 473666511\nChange-Id: I3a80b803bbef7cdf7a33a659ec74ae2ab262618f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8045120\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nReviewed-by: Mingyu Lei \u003cleimy@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1657681}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 18b1306558ef1853e8a8635bef27208a0a076ca0\n" }, { "commit": "2855bd7c224a9e08db774a4d2d5e84c3aed6cf34", "tree": "71fbf66b63a54a9cd9cba2f91b5cba2a4efa6e18", "parents": [ "43ff82b34898bda3e235c8e0c559717064622910" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Tue Jul 07 02:42:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 07 02:44:18 2026" }, "message": "Refresh instead of finalizing on stale negative results for ServiceEndpointRequest\n\nWith CacheUsage::STALE_ALLOWED_WHILE_REFRESHING,\nServiceEndpointRequestImpl::DoResolveLocally() treated a stale\nnegative cache entry (e.g. an expired ERR_NAME_NOT_RESOLVED entry) as\na final result because the stale-while-refreshing logic only\nrecognized positive stale results. The request completed with the\nstale error without starting a refresh. Since failures are not\nwritten back to the cache, subsequent requests kept being served the\nsame stale negative entry until it got evicted, so such requests\ncould keep failing even after DNS recovered.\n\nTreat a stale negative result the same way as a cache miss: don\u0027t\nserve it as an intermediate result, clear the stale info, and start a\nrefresh.\n\nThis behavior somewhat aligns with the Optimistic DNS draft\n(draft-gakiwate-dnsop-optimistic-dns-00): The draft states that\noptimistic negative answers should not be used to generate error\nmessages until we confirm fresh results. Treating stale negative\nresults as a cache miss (i.e., not serving intermediate errors\nand initiating a refresh) prevents premature connection failures.\n\nBug: 383174960\nChange-Id: Idf6c12deb3afce99635146543f169b4ce60f25a4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8043929\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1657659}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a066708277f64742a0d9bba0a25053c1b1930953\n" }, { "commit": "43ff82b34898bda3e235c8e0c559717064622910", "tree": "fc43b0b1ea74378722fedb45cb65e74c43b85d87", "parents": [ "8f20292cffd12f9ac1c14319245f6da4ad793f6f" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Mon Jul 06 23:09:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 23:12:21 2026" }, "message": "Reland: Enable HappyEyeballsV2 by default except for Cronet and WebView\n\nThis CL enables the HappyEyeballsV2 feature by default for most\nplatforms.\n\nCronet is excluded since StaleHostResolver doesn\u0027t support\nServiceEndpointRequest, which the HEv2 feature depends on.\n\nWebView is also excluded by explicitly disabling the feature in\n`AwFieldTrials::RegisterFeatureOverrides` so that we can run a\nseparate, controlled field trial experiment for WebView.\n\nThe original CL (https://crrev.com/c/8038040) was reverted since it\nenabled the feature for Cronet, but we can\u0027t simply enable the\nfeature because Cronet supports StaleHostResolver.\n\nBug: 529948671, 484073410\nChange-Id: I1aa0820c26484de4b5d731edd0c67406112c1cdf\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8045380\nReviewed-by: Peter Conn \u003cpeconn@chromium.org\u003e\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nCommit-Queue: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1657551}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4640a96ade90b8affaf278bd231ea102bc15cb14\n" }, { "commit": "8f20292cffd12f9ac1c14319245f6da4ad793f6f", "tree": "b9bd30fa942505577cb42a8919d34a3f07e0f319", "parents": [ "792385d24ff8a2b6fe3f439e4ad40c543967d9bf" ], "author": { "name": "luci-bisection@appspot.gserviceaccount.com", "email": "luci-bisection@appspot.gserviceaccount.com", "time": "Mon Jul 06 09:32:44 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 09:34:30 2026" }, "message": "Revert \"Enable HappyEyeballsV2 by default except for WebView\"\n\nThis reverts commit dfe97bcefceca8a7612fb8e856c8aff3742c556b.\n\nReason for revert:\nLUCI Bisection has identified this change as the cause of a test failure. See the analysis: https://ci.chromium.org/ui/p/chromium/bisection/test-analysis/b/5807294433460224\n\nSample build with failed test: https://ci.chromium.org/b/8677043301290091089\nAffected test(s):\n[://components/cronet/android\\:cronet_test_instrumentation_apk!junit:org.chromium.net:ExperimentalOptionsTest#testHostCachePersistence](https://ci.chromium.org/ui/test/chromium/:%2F%2Fcomponents%2Fcronet%2Fandroid%5C:cronet_test_instrumentation_apk%21junit:org.chromium.net:ExperimentalOptionsTest%23testHostCachePersistence?q\u003dVHash%3Ac8a320822f42d36c)\n\nIf this is a false positive, please report it at http://b.corp.google.com/createIssue?component\u003d1199205\u0026description\u003dAnalysis%3A+https%3A%2F%2Fci.chromium.org%2Fui%2Fp%2Fchromium%2Fbisection%2Ftest-analysis%2Fb%2F5807294433460224\u0026format\u003dPLAIN\u0026priority\u003dP3\u0026title\u003dWrongly+blamed+https%3A%2F%2Fchromium-review.googlesource.com%2Fc%2Fchromium%2Fsrc%2F%2B%2F8038040\u0026type\u003dBUG\n\nOriginal change\u0027s description:\n\u003e Enable HappyEyeballsV2 by default except for WebView\n\u003e\n\u003e This CL enables the HappyEyeballsV2 feature by default for most\n\u003e platforms.\n\u003e\n\u003e WebView is excluded by explicitly disabling the feature in\n\u003e `AwFieldTrials::RegisterFeatureOverrides` so that we can run a\n\u003e separate, controlled field trial experiment for WebView.\n\u003e\n\u003e Bug: 529948671, 484073410\n\u003e Change-Id: I4bcc1fd7f6450497a6ba57025f6718764a38c0f4\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8038040\n\u003e Commit-Queue: Peter Conn \u003cpeconn@chromium.org\u003e\n\u003e Auto-Submit: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\n\u003e Reviewed-by: Peter Conn \u003cpeconn@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1657007}\n\u003e\n\nBug: 529948671, 484073410\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: I4ce121bc99ab74a7aa2abed2516683257e45403a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8044483\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nReviewed-by: Peter Conn \u003cpeconn@chromium.org\u003e\nCommit-Queue: Stefano Duo \u003cstefanoduo@google.com\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1657055}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 18089f527b508311b1534c5d9980e9734248fb50\n" }, { "commit": "792385d24ff8a2b6fe3f439e4ad40c543967d9bf", "tree": "f926547305f92f4e0591562542202361eff84704", "parents": [ "449f9b10066067c99a6b5de1ee67dc9958a82506" ], "author": { "name": "Nidhi Jaju", "email": "nidhijaju@chromium.org", "time": "Mon Jul 06 07:42:51 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 07:45:04 2026" }, "message": "Restrict Optimistic DNS to TLS connections\n\nThis CL ensures that Optimistic DNS (using stale DNS records\nwhile a new DNS query is in progress) is only used for secure\nTLS connections. This prevents the browser from sending\ncleartext traffic over HTTP to potentially unauthenticated\nservers that we haven\u0027t verified via TLS.\n\nBug: 521439533\nChange-Id: I2c0699e82070d588335b2e6346a71e52dd89e5b1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7930348\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCommit-Queue: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1657012}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 93334f20aaac30161fe5854eafae384fa790ffe7\n" }, { "commit": "449f9b10066067c99a6b5de1ee67dc9958a82506", "tree": "7b2916e78cc0db508aef459ce429338e82773017", "parents": [ "d8606d8938b8c87df86a85a0a5de9958285466ed" ], "author": { "name": "Kenichi Ishibashi", "email": "bashi@chromium.org", "time": "Mon Jul 06 07:32:27 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 07:33:53 2026" }, "message": "Enable HappyEyeballsV2 by default except for WebView\n\nThis CL enables the HappyEyeballsV2 feature by default for most\nplatforms.\n\nWebView is excluded by explicitly disabling the feature in\n`AwFieldTrials::RegisterFeatureOverrides` so that we can run a\nseparate, controlled field trial experiment for WebView.\n\nBug: 529948671, 484073410\nChange-Id: I4bcc1fd7f6450497a6ba57025f6718764a38c0f4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8038040\nCommit-Queue: Peter Conn \u003cpeconn@chromium.org\u003e\nAuto-Submit: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nReviewed-by: Peter Conn \u003cpeconn@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1657007}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dfe97bcefceca8a7612fb8e856c8aff3742c556b\n" }, { "commit": "d8606d8938b8c87df86a85a0a5de9958285466ed", "tree": "21b08cddbd31ef109878b4f3ad66c25ca8f64817", "parents": [ "5e0a2fa64d9d9974133b2d903d998470ef26c13a" ], "author": { "name": "Nidhi Jaju", "email": "nidhijaju@chromium.org", "time": "Mon Jul 06 06:02:10 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 06:04:39 2026" }, "message": "Retry TLS connection on fatal errors for optimistic DNS\n\nWhen optimistic DNS (kOptimisticDnsForTcp) is enabled, Chromium may\nestablish a TCP connection to a stale IP address while waiting for\nfresh DNS results. If the IP address has been reallocated or no\nlonger hosts the requested domain, the TLS handshake will fail.\n\nThis CL updates SSLConnectJob to track whether the underlying TCP\nconnection was established using stale DNS results. If it was, and\nthe TLS handshake fails with any fatal error (such as a certificate\nerror or a connection reset), we restart the connection attempt and\nwait for the fresh DNS results instead of failing the request\nimmediately.\n\nAdditionally, this CL disables 0-RTT early data on connections made\nvia stale DNS. Because early data allows SSLClientSocket::Connect()\nto return OK before the TLS handshake fully completes, any fatal\nerrors from the stale server would surface later in the HTTP layer\n(during ConfirmHandshake), completely bypassing SSLConnectJob\u0027s\nretry logic. By disabling early data on the stale attempt, we force\nthe socket to wait for the handshake to finish, ensuring we correctly\nintercept any fatal errors and retry. Early data can still be safely\nnegotiated on the subsequent retry with fresh DNS.\n\nBug: 521439533\nChange-Id: Ib7651f3cabe44b49c9be55d2aa226d6185f06437\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7930347\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCommit-Queue: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1656986}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a8d42449d548392df7cb71e31d64117b902c3ebf\n" }, { "commit": "5e0a2fa64d9d9974133b2d903d998470ef26c13a", "tree": "405ba7d3b60326f15cc008150f37a7b7690400fb", "parents": [ "031a2982982dd6d4ad510dd2c9f86fe1e3a715ab" ], "author": { "name": "Hyowon Kim", "email": "hyowon@igalia.com", "time": "Mon Jul 06 04:53:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 04:55:00 2026" }, "message": "Allow Cache-Control: immutable to override Pragma: no-cache\n\nParse the `immutable` Cache-Control directive when calculating response\nfreshness and allow it to override the legacy `Pragma: no-cache`\nbehavior. The precedence order is `Cache-Control: no-cache/no-store`,\n`Cache-Control: immutable`, then `Pragma: no-cache`.\n\nThe behavior is guarded by the disabled-by-default CacheControlImmutable\nfeature.\n\nBug: 416704402, 41253661\nChange-Id: I441fd726701da516a2a860b016eb37f6b13525cd\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7923907\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Hyowon Kim \u003chyowon@igalia.com\u003e\nCr-Commit-Position: refs/heads/main@{#1656978}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 04ecd29528a907a5a3be36db88c1da2d15ca0f05\n" }, { "commit": "031a2982982dd6d4ad510dd2c9f86fe1e3a715ab", "tree": "2f1b5a8b905c8bcc35461b06ca18ecbb8fc147a9", "parents": [ "87ab5d0ba5a530f191ed335c33eb539d0db9d29c" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Mon Jul 06 04:30:44 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 04:32:17 2026" }, "message": "net/disk_cache/sql: Re-insert in-memory index entry on kNotFound\n\nBackendShard::DoomEntry optimistically removes the (hash, res_id) pair\nfrom the in-memory index before posting the database update. The\nrecovery branch re-inserts it on database failure but excluded\nError::kNotFound. kNotFound is returned when the database row was not\nmodified (e.g. when res_id is present in the index for the key\u0027s hash\nbucket but the row\u0027s cache_key belongs to a different key with a\ncolliding hash), so the index removal must be rolled back in that case\nas well; otherwise the entry stays absent from the index while still\ndoomed\u003d0 on disk, the kHashNotFound fast paths force a miss for that\nkey, and SpeculativeCreateEntry can write a duplicate live row for it.\n\nAdd unit tests that exercise the hash-collision case at the\nSqlPersistentStore and SqlBackendImpl layers.\n\nBug: 518062961\nChange-Id: I5c5413098c646b234addcb61871d8250892f5df2\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8037960\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nReviewed-by: Mingyu Lei \u003cleimy@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1656973}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 1d8f576aeea3ee0daeb3d680392a30a05e1c4f48\n" }, { "commit": "87ab5d0ba5a530f191ed335c33eb539d0db9d29c", "tree": "630a39a5aa96ea9bf3f026acb398c505f81564ba", "parents": [ "30a984220db9b838de42969190bbed0eb81f4b60" ], "author": { "name": "Martin Verde", "email": "thesalsa@google.com", "time": "Mon Jul 06 02:22:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 02:24:23 2026" }, "message": "NQE: Enable NetworkQualityEstimatorAsyncNotifyHeadersReceived by default\n\nThis change enables the\nNetworkQualityEstimatorAsyncNotifyHeadersReceived feature flag and the\ndefer_notify_headers_until_next_step parameter by default, and removes\nthe corresponding fieldtrial testing config.\n\nBug: 481197117\nChange-Id: I5cb6eabeb2bd667ae8b21f446617232197a77fcf\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7954737\nReviewed-by: Kouhei Ueno \u003ckouhei@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Martin Pan-Verde \u003cthesalsa@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1656958}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a810a8f16a3d0958374081420e85d3bb9cddc1e8\n" }, { "commit": "30a984220db9b838de42969190bbed0eb81f4b60", "tree": "19fb92d5ce461726040f0e5264bcac41b38b2a18", "parents": [ "9bb83ca29b776232c21034f542bc9c3c1bd2c8dd" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Mon Jul 06 00:29:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 00:31:41 2026" }, "message": "net/disk_cache/sql: Support WAL mode for SqlSharedCacheIsolatedDatabase\n\nThis CL adds support for configuring Write-Ahead Logging (WAL) mode for\n`SqlSharedCacheIsolatedDatabase` via the\n`kRendererAccessibleHttpCacheWalMode` feature parameter.\n\nIt updates `SqlSharedCacheIsolatedDatabase` to toggle WAL mode according\nto the feature param during database initialization and parameterizes\nexisting isolated database unit tests to verify behavior with both WAL\nenabled and disabled.\n\nBug: 473666511\nChange-Id: Ic9ef830140248eb38b7c114ac1fd58ef26bceda2\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8035380\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nReviewed-by: Mingyu Lei \u003cleimy@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1656944}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: cef75eab0612f895a6f2955ebcd61cfc2550ccd0\n" }, { "commit": "9bb83ca29b776232c21034f542bc9c3c1bd2c8dd", "tree": "0065915feacbbcd5c0a1074b62576cb651be8535", "parents": [ "40f8200743e6e3939957d4f24b65920ac8e95cf2" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Mon Jul 06 00:09:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 00:10:36 2026" }, "message": "net/disk_cache/sql: Remove meta_table_ from SqlSharedCacheIndexDatabase\n\nThere is no need to keep the `meta_table_`.\n\nBug: 473666511\nChange-Id: Ief37fb93e1869f38822ec2a582a5d9bf27ad7fb3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8033742\nReviewed-by: Mingyu Lei \u003cleimy@chromium.org\u003e\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1656943}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a07fee6b9d4a1e922a21a46e5fbc670528a6c554\n" }, { "commit": "40f8200743e6e3939957d4f24b65920ac8e95cf2", "tree": "184573ec320de35e709644522dad9b720ea2778d", "parents": [ "68b66fc40b59200f2a0a8035fdfa7c931a704f16" ], "author": { "name": "Adam Rice", "email": "ricea@chromium.org", "time": "Fri Jul 03 20:18:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 03 20:20:37 2026" }, "message": "Migrate HashingLRUCache to Abseil containers\n\nThis CL switches the internal implementation of HashingLRUCache and\nHashingLRUCacheSet from std::unordered_map to absl::flat_hash_map.\nAbseil containers typically offer better performance and reduced memory\nusage.\n\nTo prevent the inclusion of Abseil\u0027s container headers from increasing\nbuild times for the many users of the standard base::LRUCache, the\nhashing-based variants are moved to a new header:\nbase/containers/hashing_lru_cache.h.\n\nThe hashing and equality logic now prefers Abseil\u0027s default hash traits,\nwith a fallback for types that do not yet support Abseil hashing.\n\nChanges to other files were automated by Python scripts written by\nGemini, except for moving the definition of RecentlyUsedBackgroundsCache\nin home_background_customization_service.h, which was done manually.\nabsl::flat_hash_set is stricter than std::unordered_set about requiring\nthe definition of std::hash to be complete.\n\nThis change adds around 1.2GB to the total volume of source code read by\nClang in order to compile Chrome. Unfortunately, this is unavoidable as\nblink::Document needs to use a HashingLRUCache for performance-critical\nURL lookup caching, and third_party/blink/renderer/core/dom/document.h\nis included by over 1000 files.\n\nCompile-Size: Size increase is unavoidable.\nChange-Id: If760289f525c32395638ffdfe5a8a318c9fbb433\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7960447\nOwners-Override: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Adam Rice \u003cricea@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1656728}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dc4ae83d0adbb6a99904a635ab90642e1055682d\n" }, { "commit": "68b66fc40b59200f2a0a8035fdfa7c931a704f16", "tree": "e3e6b86267e4b830b84cdcb2c962b7c5480473ef", "parents": [ "b5bff0293e800025b4d41d7d8aad810951920ec2" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Fri Jul 03 14:37:31 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 03 18:46:33 2026" }, "message": "[dbsc] Persist attestation keys and protect them from GC\n\nEnable support for serializing, deserializing, and persisting wrapped\nhardware-backed attestation keys within the Device Bound Session\nCredentials (DBSC) network storage layer. This provides the necessary\ninfrastructure for DBSC Single Sign-On (SSO) flows that require an\nAttestation Identity Key (AIK) to cryptographically bind sessions.\n\nKey changes:\n\n- Protocol Buffers: Add an optional \u0027wrapped_attestation_key\u0027 field to\n the Session proto to persist wrapped attestation keys on disk.\n- Persistence: Implement SetWrappedAttestationKey to manage\n serialization outcomes. During a session refresh, if the key is not\n yet ready (kKeyNotReady), copy the existing wrapped key from the\n database to avoid expensive TPM reloading. Disallow this preservation\n on new sessions to prevent key leakage.\n- Restoration: Add RestoreSessionAttestationKey to asynchronously unwrap\n and restore the persisted attestation key.\n- Garbage Collection: Include active wrapped attestation keys in the set\n of known keys tracked by SessionStoreImpl to prevent them from being\n deleted during periodic garbage collection.\n- Telemetry: Introduce the save outcome histogram and enum\n Net.DeviceBoundSessions.AttestationKeySaveOutcome to monitor success,\n failure, and key preservation outcomes.\n- Refactoring: Remove the redundant restore*callbacks* mapping from\n SessionStoreImpl to simplify the binding key restoration process, as\n deduplication is already handled by UnexportableKeyService.\n\nBug: 501306421\nChange-Id: Icecf6025bd9bb6b03670d16c69b30e706a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8002925\nCommit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nAuto-Submit: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1656564}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: cd72e14ffd06f2b23bcf870a27ec147455cd2b54\n" }, { "commit": "b5bff0293e800025b4d41d7d8aad810951920ec2", "tree": "2a896e3a6c2c1b235710e0c4ca86fe7f5924e49f", "parents": [ "e30b083f0a786acb8e3686feafb76450db24786d" ], "author": { "name": "Etienne Pierre-doray", "email": "etiennep@chromium.org", "time": "Fri Jul 03 12:06:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 03 18:46:17 2026" }, "message": "[tracing] Migrate legacy TRACE_EVENT_BEGIN/END[012] macros\n\nTRACE_EVENT_BEGIN[012](...) -\u003e TRACE_EVENT_BEGIN(...)\nTRACE_EVENT_END[012](cat, name, ...) -\u003e TRACE_EVENT_END(cat, ...)\n\nTRACE_EVENT_BEGIN requires compile time string or StaticString.\nThis CL changes string definitions required to fix this.\n\nThis also converts some _BEGIN/_END pairs to a scoped TRACE_EVENT\nwhen possible.\n\nBug: 432427382\nChange-Id: I57986ea1bba109dbe3a3926137215d34fa546a3a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8028395\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nOwners-Override: Gabriel Charette \u003cgab@chromium.org\u003e\nCommit-Queue: Etienne Pierre-Doray \u003cetiennep@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1656501}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 89c1b22f118a7441205302e6a0e7c4fbd067f826\n" }, { "commit": "e30b083f0a786acb8e3686feafb76450db24786d", "tree": "69d6ce54253ff94788ab5c82e2f6a10b7d79614f", "parents": [ "606cde106f10f32cd6686948cf0910a5cd44c204" ], "author": { "name": "Shunya Shishido", "email": "sisidovski@chromium.org", "time": "Fri Jul 03 04:13:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 03 18:45:56 2026" }, "message": "NEL: consider all attempted addresses in report downgrade\n\nWhen a hostname resolves to multiple addresses,\nHttpNetworkTransaction::GenerateNetworkErrorLoggingReport() only\nreported the last attempted address as RequestDetails::server_ip.\nNetworkErrorLoggingService then compared only that single address\nagainst the policy\u0027s received_ip_address when deciding whether to\ndowngrade the report to dns.address_changed, so the downgrade was\nskipped whenever the last attempted address happened to match the policy\naddress even though other addresses had also been contacted.\n\nThis CL plumbs the full set of contacted addresses through to the NEL\nservice:\n\n* RequestDetails gains an `other_server_ips` field.\n* HttpNetworkTransaction populates it from\n `connection_attempts_`.\n* NetworkErrorLoggingService downgrades the report if\n `server_ip` or any of `other_server_ips` differs from the\n policy\u0027s `received_ip_address`.\n\nTAG\u003dagy\nCONV\u003d0627b279-d6cf-4c08-953e-131bdc2b4ee7\n\nBug: 500492844\nChange-Id: I936dd6802a1552db699fc2324bd9288338614143\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8030100\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Shunya Shishido \u003csisidovski@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1656349}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c52ce5c11e9bd2e0581e05771eb42df018d59b1c\n" }, { "commit": "606cde106f10f32cd6686948cf0910a5cd44c204", "tree": "1ef755d97b8f052104b65522eac86c9033404346", "parents": [ "3800249430b759a0b4d5dab7f8ccf83eec6d32d7" ], "author": { "name": "Zequan Wu", "email": "zequanwu@google.com", "time": "Thu Jul 02 13:48:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 02 13:50:52 2026" }, "message": "net: fix -Wunsafe-buffer-usage warning\n\nUse `base::as_byte_span()` instead of `frame-\u003etoken.data()` and\n`frame-\u003etoken.length()` when calling `NetLogBinaryValue()`. This\neliminates raw pointer casting and unsafe buffer invocations, fixing a\n`-Wunsafe-buffer-usage` warning when building with Clang HEAD.\n\nBug: 529689763\nChange-Id: I1ca61f8c285855483605f7366564e1301210736a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8032420\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nCommit-Queue: Hans Wennborg \u003chans@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1656062}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bc19cd78768380b7abea27b0add58ce78c7394d6\n" }, { "commit": "3800249430b759a0b4d5dab7f8ccf83eec6d32d7", "tree": "07ea3232f3eddebaa59454bb55481f6cc3b05976", "parents": [ "7f9fac14cbb2c809d82f560381b68d5ac9e77628" ], "author": { "name": "Carlos IL", "email": "carlosil@chromium.org", "time": "Wed Jul 01 20:57:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 01 21:00:00 2026" }, "message": "[MTCs] Plumb signer set to trust_store_chrome.cc\n\nThis plumbs both the compiled in signer set and the component updater\ndelivered one to TrustStoreChrome if the Verify MTCs flag is enabled.\nThis is still a no-op since nothing uses the data yet in the root store\nside.\n\nBug: 452983502\n\nChange-Id: I11360f178fe39c0d50d29b6ddd8deb673e195ee2\nBinary-Size: This increases the size very slightly over the limit, it is an expected increase from actually loading the signer set data.\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7910921\nReviewed-by: Mustafa Emre Acer \u003cmeacer@chromium.org\u003e\nReviewed-by: Noah Rose Ledesma \u003cnoahrose@google.com\u003e\nReviewed-by: Matt Mueller \u003cmattm@chromium.org\u003e\nCommit-Queue: Carlos IL \u003ccarlosil@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1655737}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2101133a30304a4a60064af6236389cdf382239b\n" }, { "commit": "7f9fac14cbb2c809d82f560381b68d5ac9e77628", "tree": "b645b1ed44140590061052bac4c1578269bb5c0c", "parents": [ "c00d5eee0cdcfe9df3b6e2a9af7ad72489e56047" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Wed Jul 01 20:39:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 01 20:41:29 2026" }, "message": "[dbsc] Support DBSC attestation key generation in registration\n\nIntroduce support for generating an Attestation Identity Key (AIK)\nduring the Device Bound Session Credentials (DBSC) registration process.\nPreviously, only the session signing key was generated. This change\nenables sequential key generation where the attestation key is generated\nasynchronously after the signing key when required.\n\nTo implement this, propagate the AttestationMode enum from fetcher\nparameters to the registration request parameters. Additionally, split\nthe generic `kKeyError` into `kSigningKeyGenerationError` and\n`kAttestationKeyGenerationError` to improve error tracking and metric\nreporting when key generation fails.\n\nSpecifically, this change:\n\n- Refactors `RegistrationFetcherParam` and `RegistrationRequestParam` to\n pass `AttestationMode`.\n- Modifies `RegistrationFetcherImpl` to generate the attestation key in\n parallel with the signing key using concurrent callbacks.\n- Propagates the generated attestation key ID to `SessionParams`.\n- Replaces `kKeyError` with `kSigningKeyGenerationError` and\n `kAttestationKeyGenerationError` across net, mojom, and metrics.\n\nBug: 501306421\nChange-Id: Ie9ac580faeb194d68a8f61b46228ec326a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7992495\nAuto-Submit: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nCommit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nReviewed-by: Alex Ilin \u003calexilin@chromium.org\u003e\nReviewed-by: Alex Rudenko \u003calexrudenko@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1655731}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 07b5d450afad65a5ffca7cddad1cd7e365d32632\n" }, { "commit": "c00d5eee0cdcfe9df3b6e2a9af7ad72489e56047", "tree": "77fdcd4e2757e4702f431eede51380a41066945d", "parents": [ "4d59dfcb6783a5da871b7f7aab1bdee72c9be8da" ], "author": { "name": "PKI Metadata Updates Bot", "email": "mdb.chrome-pki-metadata-release-jobs@google.com", "time": "Wed Jul 01 14:41:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 01 14:43:12 2026" }, "message": "[CRS] Automatic update from google3\n\nAutomatic update for 2026-07-01 UTC\n\nMerge-Approval-Bypass: pki-metadata-updater\nChange-Id: Iaad86ca45d7dac29b6cbc2821dba5a2f7800531e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8030301\nCommit-Queue: PKI Metadata Updates Bot \u003cmdb.chrome-pki-metadata-release-jobs@google.com\u003e\nBot-Commit: PKI Metadata Updates Bot \u003cmdb.chrome-pki-metadata-release-jobs@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1655493}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b577bf8c9e8385912d1c62243b0af84043fa0238\n" }, { "commit": "4d59dfcb6783a5da871b7f7aab1bdee72c9be8da", "tree": "aef36df9292eb00d1cdc82ed22bd82448ff18797", "parents": [ "07f56df3157165eacb6f061368f4633210f7846d" ], "author": { "name": "Deepak Ravichandran", "email": "deepakr@google.com", "time": "Wed Jul 01 08:18:07 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 01 08:20:50 2026" }, "message": "Net: Add HttpCache invalidation filter getter and UMA telemetry\n\nExtends the logical HTTP cache invalidation engine in `HttpCache`\nwith getter access and telemetry:\n\n- Adds `invalidation_filters()` const getter so `NetworkContext`\n can read the active in-memory filters and save them to disk\n persistence.\n- Records UMA histograms in `HttpCache::IsInvalidated` to track\n lookup outcomes (`Net.HttpCache.LogicalInvalidation.MatchResult`)\n and verify stale data protection after crash recovery\n (`Net.HttpCache.LogicalInvalidation.StaleDataProtectedAfterCrash`).\n- Adds standard `// LINT.IfChange` guards around\n `LogicalInvalidationMatchResult` to ensure enums stay\n synchronized.\n- Updates time range validation in `AddInvalidationFilter` to use\n `CHECK_LE`.\n\nBug: 40088702\nChange-Id: Ia1b3f29d690d2ec31720b0cc72b9afb7294b2e21\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7960342\nReviewed-by: Takashi Toyoshima \u003ctoyoshim@chromium.org\u003e\nReviewed-by: Adam Rice \u003cricea@chromium.org\u003e\nCommit-Queue: Deepak Ravichandran \u003cdeepakr@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1655338}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6e71157cff0c2ed6859f3f7615959b3514e0b948\n" }, { "commit": "07f56df3157165eacb6f061368f4633210f7846d", "tree": "285437af1ac17af80cbe361e2dfa5d936d1f119f", "parents": [ "94ff1f56f47dd5b48e1fcbf472d48bda2bee6344" ], "author": { "name": "Vasili Svirski", "email": "vsvirski@google.com", "time": "Wed Jul 01 06:49:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 01 06:51:13 2026" }, "message": "Remove kDnsResponseDiscardPartialQuestions feature flag\n\nThe logic to discard partially parsed questions on failure enabled by\ndefault since 143.0.7474.0.\n\nBug: 448685357\nChange-Id: I966898befc58d5c8ab979a41d85ca2a19547926d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7991262\nReviewed-by: Nidhi Jaju \u003cnidhijaju@chromium.org\u003e\nReviewed-by: Eric Orth \u003cericorth@chromium.org\u003e\nCommit-Queue: Vasili Svirski \u003cvsvirski@google.com\u003e\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nReviewed-by: Kenichi Ishibashi \u003cbashi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1655296}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c1a17c28ec1dc2ef4784a0a3c9c85a585dfb4dc4\n" }, { "commit": "94ff1f56f47dd5b48e1fcbf472d48bda2bee6344", "tree": "265739df3bb77205663cf0afa90d3001d03ec5b8", "parents": [ "7b3be68f209ac62d2c4d75996084735098b1a20b" ], "author": { "name": "Gazal", "email": "agazal@google.com", "time": "Wed Jul 01 00:06:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 01 00:08:39 2026" }, "message": "[code-health] Remove redundant @VisibleForTesting in net\n\nAdditionally, move ForTesting methods to bottom of the class.\n\nBug: 529051459\nChange-Id: I6e4057b00d7f7776e7d52d21b43cee73a6cd29aa\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8027933\nAuto-Submit: Gazal Agarwal \u003cagazal@google.com\u003e\nReviewed-by: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCommit-Queue: Gazal Agarwal \u003cagazal@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1655149}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ad38982f3aec333a8847306b9bedc51dff9ca196\n" }, { "commit": "7b3be68f209ac62d2c4d75996084735098b1a20b", "tree": "2b5d0c57f45914ea249864216721b71851019b51", "parents": [ "8ba307ab9201719a1f1d9797c3f382ad82862a32" ], "author": { "name": "Tsuyoshi Horo", "email": "horo@chromium.org", "time": "Tue Jun 30 22:50:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jun 30 22:52:21 2026" }, "message": "[sql] Fix UBSan failure in StreamingBlobHandle::Read on zero-size read\n\nWhen reading 0 bytes from a blob, sqlite3_blob_read may be called with a\nnull pointer and a size of 0. This can trigger a UBSan warning because\nSQLite may call memcpy with a null destination, even if the size is 0,\nwhich is undefined behavior in C++.\n\nFix this by early returning from StreamingBlobHandle::Read when the\nrequested read size is 0. In this case, we only verify that the offset\nis within the bounds of the blob size (offset \u003c\u003d GetSize()).\n\nThis allows re-enabling\nSqlSharedCacheIsolatedDatabaseReaderTest.ReadEmptyHeader which was\ndisabled due to this issue.\n\nFixed: 528258777\nChange-Id: I48bda8dc661104735fb2c622a1a341490c2c0b77\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8022922\nReviewed-by: Mingyu Lei \u003cleimy@chromium.org\u003e\nReviewed-by: Greg Thompson \u003cgrt@chromium.org\u003e\nCommit-Queue: Tsuyoshi Horo \u003choro@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1655116}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3f692772beacb86e37afef40fea539f755df1b0c\n" }, { "commit": "8ba307ab9201719a1f1d9797c3f382ad82862a32", "tree": "fb73d4af0a762aaeea3ec8438ca562bf32373451", "parents": [ "01856194101a8382a1eec695fe9026f3e446122d" ], "author": { "name": "Lily Chen", "email": "chlily@chromium.org", "time": "Tue Jun 30 20:52:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jun 30 20:54:08 2026" }, "message": "Enable GREASE for signature_algorithms extension\n\nBehind a base::Feature that is default-enabled (i.e. as a killswitch).\n\nBug: 526597789\nChange-Id: I049b62c4eea072bb82c205a4b523fd776a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8027270\nCommit-Queue: Lily Chen \u003cchlily@chromium.org\u003e\nReviewed-by: David Benjamin \u003cdavidben@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1655020}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7dbbf30ea6aa146852400b519609fe03915d91c4\n" }, { "commit": "01856194101a8382a1eec695fe9026f3e446122d", "tree": "73441d90cd4d950b3d120eaa35099b1baa867ea3", "parents": [ "95a1ab4f0682240de679dd157ebee39e5d6294d0" ], "author": { "name": "Ari Chivukula", "email": "arichiv@chromium.org", "time": "Tue Jun 30 18:25:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jun 30 18:26:57 2026" }, "message": "[TCP] Remove TcpSocketPoolProxyLimit feature\n\nThis is launched in M148 and default enabled in M149, so after the\nbranch cut we can remove this for M152.\n\nFixed: 467278609\nChange-Id: Ib9bec832211d1fb42f3a722459b0ebb24bb99792\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7800756\nReviewed-by: mmenke \u003cmmenke@chromium.org\u003e\nCommit-Queue: Ari Chivukula \u003carichiv@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1654906}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d839ed9cc2b32740f0136e209e80de640ac58789\n" } ], "next": "95a1ab4f0682240de679dd157ebee39e5d6294d0" }