[rpms/chromium] epel9-next: - Update to 144.0.7559.132

[rpms/chromium] epel9-next: - Update to 144.0.7559.132

[Than Ngo]

            A new commit has been pushed.

            Repo   : rpms/chromium
            Branch : epel9-next
            Commit : 06fade93506a5b62cf074ff1e4327efb082e6002
            Author : Than Ngo <than@redhat.com>
            Date   : 2026-02-05T11:48:25+01:00
            Stats  : +62/-40 in 4 file(s)
            URL    : https://src.fedoraproject.org/rpms/chromium/c/06fade93506a5b62cf074ff1e4327efb082e6002?branch=epel9-next

            Log:
            - Update to 144.0.7559.132
  * CVE-2026-1861: Heap buffer overflow in libvpx
  * CVE-2026-1862: Type Confusion in V8
- Add BR on esbuild
- Disable devtool bundle
- Update scripts for downloading the source

---
diff --git a/chromium-latest.py b/chromium-latest.py
index 269c1d0..c381d7f 100755
--- a/chromium-latest.py
+++ b/chromium-latest.py
@@ -1,7 +1,9 @@
 #!/usr/bin/python3
-# Copyright 2021-2025, Than Ngo <than@redhat.com>
+#
+# Copyright 2021-2026, Than Ngo <than@redhat.com>
 # Copyright 2010,2015-2019 Tom Callaway <tcallawa@redhat.com>
 # Copyright 2013-2016 Tomas Popela <tpopela@redhat.com>
+#
 # Permission is hereby granted, free of charge, to any person obtaining
 # a copy of this software and associated documentation files (the
 # "Software"), to deal in the Software without restriction, including
@@ -161,7 +163,7 @@ def download_file_and_compare_hashes(file_to_download):
 
 def download_version(version):
 
-  download_file_and_compare_hashes ('chromium-%s.tar.xz' % version)
+  download_file_and_compare_hashes ('chromium-%s-lite.tar.xz' % version)
 
   if (args.tests):
     download_file_and_compare_hashes ('chromium-%s-testdata.tar.xz' % version)
@@ -298,7 +300,7 @@ if __name__ == '__main__':
     if (not (args.ffmpegclean or args.tests)):
       sys.exit(0)
 
-  latest = 'chromium-%s.tar.xz' % chromium_version
+  latest = 'chromium-%s-lite.tar.xz' % chromium_version
 
   download_version(chromium_version)
 

diff --git a/chromium.spec b/chromium.spec
index f3f8381..1588bd6 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -260,7 +260,7 @@
 %endif
 
 Name:	chromium
-Version: 144.0.7559.109
+Version: 144.0.7559.132
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -838,6 +838,9 @@ BuildRequires: libevdev-devel
 BuildRequires: simdutf-devel
 %endif
 
+# esbuild is needed
+BuildRequires: golang-github-evanw-esbuild
+
 # There is a hardcoded check for nss 3.26 in the chromium code (crypto/nss_util.cc)
 Requires: nss%{_isa} >= 3.26
 Requires: nss-mdns%{_isa}
@@ -1186,8 +1189,9 @@ find -type f \( -iname "*.py" \) -exec sed -i '1s=^#! */usr/bin/\(python\|env py
   ln -s $(which node) third_party/node/linux/node-linux-x64/bin/node
 %endif
 
-# Get rid of the prebuilt esbuild binary
-rm -rf third_party/devtools-frontend/src/third_party/esbuild
+# Add correct path for esbuild binary
+mkdir -p third_party/devtools-frontend/src/third_party/esbuild
+ln -s $(which esbuild) third_party/devtools-frontend/src/third_party/esbuild/esbuild
 
 # Remove bundle gn and replace it with a system gn or bootstrap gn as it is x86_64 and causes
 # FTBFS on other arch like aarch64/ppc64le
@@ -1351,6 +1355,8 @@ CHROMIUM_CORE_GN_DEFINES+=' angle_has_histograms=false'
 # drop unrar
 CHROMIUM_CORE_GN_DEFINES+=' safe_browsing_use_unrar=false'
 CHROMIUM_CORE_GN_DEFINES+=' v8_enable_backtrace=true'
+# disable devtools buildle
+CHROMIUM_CORE_GN_DEFINES+=' devtools_bundle=false'
 export CHROMIUM_CORE_GN_DEFINES
 
 # browser gn defines
@@ -1811,6 +1817,14 @@ fi
 %endif
 
 %changelog
+* Thu Feb 05 2026 Than Ngo <than@redhat.com> - 144.0.7559.132-1
+- Update to 144.0.7559.132
+  * CVE-2026-1861: Heap buffer overflow in libvpx
+  * CVE-2026-1862: Type Confusion in V8
+- Add BR on esbuild
+- Disable devtool bundle
+- Update scripts for downloading the source
+
 * Wed Jan 28 2026 Than Ngo <than@redhat.com> - 144.0.7559.109-1
 - Update to 144.0.7559.109
   * CVE-2026-1504: Inappropriate implementation in Background Fetch API

diff --git a/get_chromium_from_git.sh b/get_chromium_from_git.sh
index c36e5c0..cd4e4f2 100755
--- a/get_chromium_from_git.sh
+++ b/get_chromium_from_git.sh
@@ -1,38 +1,30 @@
 #! /bin/bash
 
-SRC_DIR=chromium-src
-VERSION=$1
+SRC_DIR="chromium-src"
+VERSION="$1"
+# clean|remove
+FFMPEG_SOURCE="remove"
+
 if [[ -z $VERSION ]]; then
   echo "Version is missing"
   exit 1
 fi
 
-rm -rf $SRC_DIR && mkdir -p $SRC_DIR
+if [ -d $SRC_DIR ] ; then
+   rm -rf $SRC_DIR
+fi
+mkdir -p $SRC_DIR
 pushd $SRC_DIR
-cat >.gclient <<EOF
-solutions = [
-  {
-    "name": "src",
-    "url": "https://chromium.googlesource.com/chromium/src.git",
-    "managed": False,
-    "custom_deps": {},
-    "custom_vars": {},
-  },
-]
-EOF
-
+echo "cloning depot_tools..."
+git clone https://chromium.googlesource.com/chromium/tools/depot_tools.git
 export PATH+=":$PWD/depot_tools"
-export DEPOT_TOOLS_UPDATE=0
 echo "Clone chromium-$VERSION..." 
-git clone -b $VERSION --depth=2 https://chromium.googlesource.com/chromium/src
-echo "Clone depot_tools..."
-git clone --depth=1 https://chromium.googlesource.com/chromium/tools/depot_tools
-gclient sync --no-history --nohooks
-src/tools/update_pgo_profiles.py --target=linux update --gs-url-base=chromium-optimization-profiles/pgo_profiles
-src/build/util/lastchange.py -o src/build/util/LASTCHANGE
-src/build/util/lastchange.py -s src/third_party/dawn --revision src/gpu/webgpu/DAWN_VERSION
-src/build/util/lastchange.py -m GPU_LISTS_VERSION --revision-id-only --header src/gpu/config/gpu_lists_version.h
-src/build/util/lastchange.py -m SKIA_COMMIT_HASH -s src/third_party/skia --header src/skia/ext/skia_commit_hash.h
+fetch --nohooks --no-history chromium
+pushd src
+git fetch origin tag $VERSION
+git checkout tags/$VERSION
+gclient sync --with_branch_heads --with_tags
+popd # src
 
 find src -type d -name ".git" | xargs rm -rf
 find src/third_party/jdk/current -type f -delete
@@ -40,14 +32,28 @@ rm -rf src/build/linux/debian_bullseye_amd64-sysroot \
        src/build/linux/debian_bullseye_i386-sysroot \
        src/third_party/node/linux/node-linux-x64* \
        src/third_party/rust-toolchain \
-       src/third_party/rust-src
+       src/third_party/rust-src \
+       src/third_party/devtools-frontend/src/third_party/esbuild \
+       src/third_party/enterprise_companion/chromium_linux64 \
+       src/third_party/enterprise_companion/chromium_mac_amd64 \
+       src/third_party/enterprise_companion/chromium_mac_arm64 \
+       src/third_party/enterprise_companion/chromium_win_x86 \
+       src/third_party/enterprise_companion/chromium_win_x86_64 \
+       src/third_party/node/linux/node-linux-x64.tar.gz \
+       src/buildtools/third_party/eu-strip/bin/eu-strip \
+       src/buildtools/linux64/gn
 
-# clean ffmpeg
-echo "Cleaning ffmpeg from proprietary things..."
-ln -s ../clean_ffmpeg.sh .
-ln -s ../ffmpeg-clean.patch .
-ln -s ../get_free_ffmpeg_source_files.py .
-./clean_ffmpeg.sh src 1
+if [ "$FFMPEG_SOURCE" == "clean" ] ; then
+   # clean ffmpeg from proprietary things
+   echo "Cleaning ffmpeg from proprietary things..."
+   ln -s ../clean_ffmpeg.sh .
+   ln -s ../ffmpeg-clean.patch .
+   ln -s ../get_free_ffmpeg_source_files.py .
+   ./clean_ffmpeg.sh src 1
+else
+   # remove ffmpeg source
+   find src/third_party/ffmpeg/* -type d | xargs rm -rf
+fi
 
 # clean openh264
 echo "Cleaning openh264 from proprietary things..."
@@ -57,5 +63,5 @@ popd
 
 echo "Compressing cleaned tree, please wait..."
 tar -cf - chromium-$VERSION | xz -9 -T 0 -f > chromium-$VERSION-clean.tar.xz
-echo "Finished!"
 
+echo "Done!"

diff --git a/sources b/sources
index 3676a78..4e28418 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (node-v22.14.0-stripped.tar.gz) = affddb541009c6d378049c2d7845b981335d9e7aa387efcc472e5efb621c345cd58ca69778a394f7e4ebbb5e4b1a115a389838ef1b6458ef5e98f2071b166e15
-SHA512 (chromium-144.0.7559.109-clean.tar.xz) = c0a614465c6d55dacf0953a94c48caa0b045494274a35a3062b3fdb69ec51af7120a3b698e0263d9167831edfef3d6fbfaeb53d531dc386b4b73e2563cba21d1
+SHA512 (chromium-144.0.7559.132-clean.tar.xz) = fcbd5c2d72d5100844c1ac6b6eace19537be2bf18d0fdefa1a6eb857a02faefb75f4e02e5aaa12a587d4155954dd152110cdbb4f627539d9692c055f7d8db8e8