[rpms/chromium] epel9-next: - Update to 143.0.7499.146

[rpms/chromium] epel9-next: - Update to 143.0.7499.146

[Than Ngo]

            A new commit has been pushed.

            Repo   : rpms/chromium
            Branch : epel9-next
            Commit : cbf28082932227ac2c0a3d47e4aa0702f619596c
            Author : Than Ngo <than@redhat.com>
            Date   : 2025-12-17T11:30:05+01:00
            Stats  : +11/-100 in 4 file(s)
            URL    : https://src.fedoraproject.org/rpms/chromium/c/cbf28082932227ac2c0a3d47e4aa0702f619596c?branch=epel9-next

            Log:
            - Update to 143.0.7499.146
  * High CVE-2025-14765: Use after free in WebGPU
  * High CVE-2025-14766: Out of bounds read and write in V8
- Force dark mode when auto dark mode web content is on
- Remove omnibox-next-Improve-cutout-mouse-handling-for-Wayla patch, as it's merged

---
diff --git a/chromium-143-omnibox-next-Improve-cutout-mouse-handling-for-Wayla.patch b/chromium-143-omnibox-next-Improve-cutout-mouse-handling-for-Wayla.patch
deleted file mode 100644
index 0f4b452..0000000
--- a/chromium-143-omnibox-next-Improve-cutout-mouse-handling-for-Wayla.patch
+++ /dev/null
@@ -1,94 +0,0 @@
-From 88e4cfe5112964f9ee82926539821790c1041832 Mon Sep 17 00:00:00 2001
-From: Aviv Kiss <avivkiss@google.com>
-Date: Tue, 09 Dec 2025 09:27:11 -0800
-Subject: [PATCH] [omnibox][next] Improve cutout mouse handling for Wayland users.
-
-Partial revert of https://crrev.com/c/7151889 maintaining
-`forward_mouse_events_` while reverting the event/lifecycle changes that
-caused b:465871759.
-
-https://crrev.com/c/7151889 introduced a bug impacting Linux users with
-Wayland windowing that results in the Omnibox ignoring click events.
-Weirdly this bug doesn't seem to reproduce when the WebUI dropdown popup
-is enabled although I'm not sure why.
-
-Keren explains why this bug is happening in
-https://crrev.com/c/7240486/6/chrome/browser/ui/views/omnibox/rounded_omnibox_results_frame.cc#b373
-on this change. Keren also suggested a simpler version of this fix that
-is the version of this change that is submitted. The suggestion is to
-revert back to the state prior to https://crrev.com/c/7151889 while
-maintaining the `forward_mouse_events_` bool that allows the composebox
-to opt out of forwarding.
-
-While drafting https://crrev.com/c/7151889 I recall testing this
-approach and composebox mouse events being forwarded to the Omnibox
-anyways. Either I didn't test what I thought I tested or perhaps I ran
-into a build caching issue with Cider/Cog/Chrome. Since this seems to
-work now I've updated the change to use the simpler approach.
-
-Bug: b:465871759
-Change-Id: Ib1ebc2ef5cb6d3bd6a00be5b59eb4b635d30c531
-Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7240486
-Reviewed-by: Moe Ahmadi <mahmadi@chromium.org>
-Reviewed-by: Keren Zhu <kerenzhu@chromium.org>
-Auto-Submit: Aviv Kiss <avivkiss@google.com>
-Commit-Queue: Keren Zhu <kerenzhu@chromium.org>
-Cr-Commit-Position: refs/heads/main@{#1556206}
----
-
-diff --git a/chrome/browser/ui/views/omnibox/rounded_omnibox_results_frame.cc b/chrome/browser/ui/views/omnibox/rounded_omnibox_results_frame.cc
-index 119d5fd..feb71623 100644
---- a/chrome/browser/ui/views/omnibox/rounded_omnibox_results_frame.cc
-+++ b/chrome/browser/ui/views/omnibox/rounded_omnibox_results_frame.cc
-@@ -17,7 +17,6 @@
- #include "chrome/browser/ui/views/frame/browser_view.h"
- #include "chrome/browser/ui/views/location_bar/location_bar_view.h"
- #include "chrome/browser/ui/views/omnibox/omnibox_aim_popup_webui_content.h"
--#include "components/omnibox/common/omnibox_features.h"
- #include "ui/base/cursor/cursor.h"
- #include "ui/base/metadata/metadata_header_macros.h"
- #include "ui/base/metadata/metadata_impl_macros.h"
-@@ -356,24 +355,16 @@
-   contents_->SetBoundsRect(results_bounds);
- }
- 
--void RoundedOmniboxResultsFrame::VisibilityChanged(View* starting_from,
--                                                   bool is_visible) {
--  views::View::VisibilityChanged(starting_from, is_visible);
-+void RoundedOmniboxResultsFrame::AddedToWidget() {
- #if defined(USE_AURA)
-   if (!forward_mouse_events_) {
-     return;
-   }
--
--  if (is_visible) {
--    // Use a ui::EventTargeter that allows mouse and touch events in the top
--    // portion of the Widget to pass through to the omnibox beneath it.
--    auto results_targeter = std::make_unique<aura::WindowTargeter>();
--    results_targeter->SetInsets(GetContentInsets());
--    GetWidget()->GetNativeWindow()->SetEventTargeter(
--        std::move(results_targeter));
--  } else {
--    GetWidget()->GetNativeWindow()->SetEventTargeter(nullptr);
--  }
-+  // Use a ui::EventTargeter that allows mouse and touch events in the top
-+  // portion of the Widget to pass through to the omnibox beneath it.
-+  auto results_targeter = std::make_unique<aura::WindowTargeter>();
-+  results_targeter->SetInsets(GetContentInsets());
-+  GetWidget()->GetNativeWindow()->SetEventTargeter(std::move(results_targeter));
- #endif  // USE_AURA
- }
- 
-diff --git a/chrome/browser/ui/views/omnibox/rounded_omnibox_results_frame.h b/chrome/browser/ui/views/omnibox/rounded_omnibox_results_frame.h
-index d83435dc..529703f 100644
---- a/chrome/browser/ui/views/omnibox/rounded_omnibox_results_frame.h
-+++ b/chrome/browser/ui/views/omnibox/rounded_omnibox_results_frame.h
-@@ -51,7 +51,7 @@
- 
-   // views::View:
-   void Layout(PassKey) override;
--  void VisibilityChanged(View* starting_from, bool is_visible) override;
-+  void AddedToWidget() override;
- #if !defined(USE_AURA)
-   void OnMouseMoved(const ui::MouseEvent& event) override;
-   void OnMouseEvent(ui::MouseEvent* event) override;

diff --git a/chromium.conf b/chromium.conf
index 09adb8e..31173c6 100644
--- a/chromium.conf
+++ b/chromium.conf
@@ -65,6 +65,7 @@ if [ "$WEB_AUTO_DARKMODE_WEBCONTENT" == "on" ] ; then
    else
        ENABLE_FEATURES+=",$darktype"
    fi
+   CHROMIUM_FLAGS+=" --force-dark-mode"
 fi
 
 [ -z "$DISABLE_FEATURES" ] || CHROMIUM_FLAGS+=" --disable-features=$DISABLE_FEATURES"

diff --git a/chromium.spec b/chromium.spec
index a659713..32afd29 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -254,8 +254,8 @@
 %endif
 
 Name:	chromium
-Version: 143.0.7499.109
-Release: 2%{?dist}
+Version: 143.0.7499.146
+Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
 License: BSD-3-Clause AND LGPL-2.1-or-later AND Apache-2.0 AND IJG AND MIT AND GPL-2.0-or-later AND ISC AND OpenSSL AND (MPL-1.1 OR GPL-2.0-only OR LGPL-2.0-only)
@@ -479,8 +479,6 @@ Patch511: 0002-Fix-Missing-OPENSSL_NO_ENGINE-Guard.patch
 # Fix Wayland URI DnD issues
 Patch1001: chromium-142-Add-ExtractData-support-for-text-uri-list.patch
 Patch1002: chromium-142-Update-pointer-position-during-draggin.patch
-# Fix Wayland Omnibox issue
-Patch1003: chromium-143-omnibox-next-Improve-cutout-mouse-handling-for-Wayla.patch
 
 # Use chromium-latest.py to generate clean tarball from released build tarballs, found here:
 # http://build.chromium.org/buildbot/official/
@@ -1175,7 +1173,6 @@ Qt6 UI for chromium.
 # Upstream patches
 %patch -P1001 -p1 -b .Add-ExtractData-support-for-text-uri-list.patch
 %patch -P1002 -p1 -b .Update-pointer-position-during-draggin.patch
-%patch -P1003 -p1 -b .Improve-cutout-mouse-handling-for-Wayla.patch
 
 # Change shebang in all relevant files in this directory and all subdirectories
 # See `man find` for how the `-exec command {} +` syntax works
@@ -1814,6 +1811,13 @@ fi
 %endif
 
 %changelog
+* Wed Dec 17 2025 Than Ngo <than@redhat.com> - 143.0.7499.146-1
+- Update to 143.0.7499.146
+  * High CVE-2025-14765: Use after free in WebGPU
+  * High CVE-2025-14766: Out of bounds read and write in V8
+- Force dark mode when auto dark mode web content is on
+- Remove omnibox-next-Improve-cutout-mouse-handling-for-Wayla patch, as it's merged
+
 * Thu Dec 11 2025 Than Ngo <than@redhat.com> - 143.0.7499.109-2
 - Enable gtk4 by default
 

diff --git a/sources b/sources
index d53ee0f..290f4a3 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (node-v22.14.0-stripped.tar.gz) = affddb541009c6d378049c2d7845b981335d9e7aa387efcc472e5efb621c345cd58ca69778a394f7e4ebbb5e4b1a115a389838ef1b6458ef5e98f2071b166e15
-SHA512 (chromium-143.0.7499.109-clean.tar.xz) = 353e4334516821ac491c01d4104c469ba280d3acf6d11dd1c44db0f7baad4127bbbb7c60fd750e9d6e931b311f2ee52e0fb9760bbb2e04d9b90925c0f48daab4
+SHA512 (chromium-143.0.7499.146-clean.tar.xz) = e88a1b6c18a3424a51f9df05189c147d24bdf078a58e942a04446e2ec186fc71127869c422b34baba1a3d748ff99ba8adc86aafe5ac5c0ff42cd49bf96d2bf1b