Unverified Commit dbbab34f authored by emilylange's avatar emilylange
Browse files

chromium,chromedriver: 147.0.7727.55 -> 147.0.7727.101 

https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html

This update includes 31 security fixes.

CVEs:
CVE-2026-6296 CVE-2026-6297 CVE-2026-6298 CVE-2026-6299 CVE-2026-6358
CVE-2026-6359 CVE-2026-6300 CVE-2026-6301 CVE-2026-6302 CVE-2026-6303
CVE-2026-6304 CVE-2026-6305 CVE-2026-6306 CVE-2026-6307 CVE-2026-6308
CVE-2026-6309 CVE-2026-6360 CVE-2026-6310 CVE-2026-6311 CVE-2026-6312
CVE-2026-6313 CVE-2026-6314 CVE-2026-6315 CVE-2026-6316 CVE-2026-6361
CVE-2026-6362 CVE-2026-6317 CVE-2026-6363 CVE-2026-6318 CVE-2026-6319
CVE-2026-6364
parent 608994ab

pkgs/applications/networking/browsers/chromium/info.json

+22 −22
Original line number Diff line number Diff line 
{

  "chromium": {

    "version": "147.0.7727.55",

    "version": "147.0.7727.101",

    "chromedriver": {

      "version": "147.0.7727.56",

      "hash_darwin": "sha256-AbHim5zUBLMqlSQgsx0PofidANxk8kSDmQfhLG5xjXM=",

      "hash_darwin_aarch64": "sha256-9cnKUiay2l5Ti6TC+u7eUKS4VwYNxI50qXfOJxhsxNI="

      "version": "147.0.7727.102",

      "hash_darwin": "sha256-OI5e9h2sxF5BtStqxCFQaOZWgZusw/BzjuqSUKPIL2Y=",

      "hash_darwin_aarch64": "sha256-uE7rgMAZrk4kyafAGqIZa2z/CgLcnqhptkcSXUvBQZc="

    },

    "deps": {

      "depot_tools": {

        "rev": "4ce8ba39a3488397a2d1494f167020f21de502f3",

        "hash": "sha256-WTzjmLFjh1yDDEvYE7Qfx8aBxMLdATx14+Jprwh8ZgQ="

        "rev": "b9d2b54daea64fa757df5ba737e611b691dc6201",

        "hash": "sha256-GKm6qIrlXLTBvlY+BcXFEL4hR5T63sXUkP0i1vATCAc="

      },

      "gn": {

        "version": "0-unstable-2026-03-05",
@@ -21,8 +21,8 @@ 
    "DEPS": {

      "src": {

        "url": "https://chromium.googlesource.com/chromium/src.git",

        "rev": "7dc2b8f6f651b42c0a8f3634c9feb5e0b6b25c91",

        "hash": "sha256-mAauWiP5AlyzoRFOSGA71ljtZ9MtYLKtRlSolCA/spE=",

        "rev": "56536d2a8034c51b0e68e1a0483ab9f1a0165ae3",

        "hash": "sha256-94TMvPkcWm+IEVYwTh+m1ys5du75bvJcc1RpkSKpAwc=",

        "recompress": true

      },

      "src/third_party/clang-format/script": {
@@ -92,8 +92,8 @@ 
      },

      "src/third_party/angle": {

        "url": "https://chromium.googlesource.com/angle/angle.git",

        "rev": "401e94882e22cf2aa7af649b92ab123eaa329321",

        "hash": "sha256-WD8GaB8LYhICdHZ+meCXSmLylAcISzEaZj06g+z1sfw="

        "rev": "cbc4f074126e6f1acf72ad620a28cd4a8dd86f2a",

        "hash": "sha256-MUgLUj2L0vmpAoxt/TJy1clsJfvYkQqe3Xm2+e4Y6tw="

      },

      "src/third_party/angle/third_party/glmark2/src": {

        "url": "https://chromium.googlesource.com/external/github.com/glmark2/glmark2",
@@ -132,8 +132,8 @@ 
      },

      "src/third_party/dawn": {

        "url": "https://dawn.googlesource.com/dawn.git",

        "rev": "3ab1df504f1af37a64f8d3949e77b0868e154894",

        "hash": "sha256-wWoXEvgROx5FLx4nnvaiEW7N9q5VibulffWwCkkEXOs="

        "rev": "2c681aed02b0add6bcf6724175660c4b35ece843",

        "hash": "sha256-io3X9zu6tHgqJGXjygUXMa98rXELRNl6Y330U2nRc/M="

      },

      "src/third_party/dawn/third_party/glfw": {

        "url": "https://chromium.googlesource.com/external/github.com/glfw/glfw",
@@ -427,8 +427,8 @@ 
      },

      "src/third_party/libaom/source/libaom": {

        "url": "https://aomedia.googlesource.com/aom.git",

        "rev": "9dd1b8af51cfd431cbcdeebc95256c0ec6b249eb",

        "hash": "sha256-IX9mgT9f8fyAd0e1HzBNDE6tNAK4JC+OVqQLJIsvMY0="

        "rev": "ab9876a5983227865ee26e91caac87c6b8750e27",

        "hash": "sha256-V40GL7fKj1qratP0KcrhedEPDIsg0XVb3ha5nroM0ws="

      },

      "src/third_party/crabbyavif/src": {

        "url": "https://chromium.googlesource.com/external/github.com/webmproject/CrabbyAvif.git",
@@ -542,8 +542,8 @@ 
      },

      "src/third_party/libvpx/source/libvpx": {

        "url": "https://chromium.googlesource.com/webm/libvpx.git",

        "rev": "9a2d3d1f46afbdfa9b9820a9fd3aacb084e65e2f",

        "hash": "sha256-9OkXFvBDfh/NFA96IQzaJcXSKSKW6tBN/HJSAwAr3S8="

        "rev": "aec2a6f1cd6e3d9e8cf5d9682fcb8a442799bd22",

        "hash": "sha256-PNreh1VisA46I0WZqq8wZRCjbQRiVMxbL5Gl2Bfzo3M="

      },

      "src/third_party/libwebm/source": {

        "url": "https://chromium.googlesource.com/webm/libwebm.git",
@@ -607,8 +607,8 @@ 
      },

      "src/third_party/pdfium": {

        "url": "https://pdfium.googlesource.com/pdfium.git",

        "rev": "f99c212599bb85ce2e60936099f829cbcc3d4f5c",

        "hash": "sha256-jq5qVIRWmC1xTvV/YwaosJMQH3XpS2N6Xn601uUPFkc="

        "rev": "e5bafd3be58c26673576fd5bb5cbf413b485de5b",

        "hash": "sha256-umtG2n6kWYD0hT44GpmnwUVztkZ0RtQDV0h0+4CTC9w="

      },

      "src/third_party/perfetto": {

        "url": "https://chromium.googlesource.com/external/github.com/google/perfetto.git",
@@ -657,8 +657,8 @@ 
      },

      "src/third_party/skia": {

        "url": "https://skia.googlesource.com/skia.git",

        "rev": "abbe599fb3c0ef2fa82bfadbb0ddcd321f22faf0",

        "hash": "sha256-QR0R8gwDh6m4RCCCj0EJ/oQQd/mHdUkOVSO8mg74WkE="

        "rev": "f8cd2da0256752afb0059bf17e4bf2bec422967e",

        "hash": "sha256-dtSWBpCaewkKMW3Jc1PNDQh0jSQHIPduaXsIU9rcTa0="

      },

      "src/third_party/smhasher/src": {

        "url": "https://chromium.googlesource.com/external/smhasher.git",
@@ -822,8 +822,8 @@ 
      },

      "src/v8": {

        "url": "https://chromium.googlesource.com/v8/v8.git",

        "rev": "0cd69a9ba82925f5eb2c91376c4e7ba0da9dd445",

        "hash": "sha256-PKaDXkDkdUVBlcXRmlfWjd5tqvLTCywhC7KdP/xp5NM="

        "rev": "c207e34c08865143dc6774c1c624f3cea07f7420",

        "hash": "sha256-5rc28tPK9mOJDO3HA3F1ZgsRQmWXhoLZGeKTzxWSISw="

      }

    }

  },

pkgs/applications/networking/browsers/chromium/update.mjs

+5 −1
Original line number Diff line number Diff line
@@ -72,7 +72,11 @@ for (const attr_path of Object.keys(lockfile)) { 
      DEPS: {},

    }



    const depot_tools = await fetch_depot_tools(chromium_rev, lockfile_initial[attr_path].deps.depot_tools)

    // The DEPS schema was modified in https://chromium-review.googlesource.com/c/chromium/tools/depot_tools/+/7007552

    // and https://chromium-review.googlesource.com/c/chromium/src/+/7683270. And while the breaking change itself got

    // backported to M147 (and M146 fwiw), the necessary depot_tools roll was not.

    // So for now we simply resort to whatever depot_tools is currently pinned on chromium's main branch.

    const depot_tools = await fetch_depot_tools(/* chromium_rev */ 'main', lockfile_initial[attr_path].deps.depot_tools)

    lockfile[attr_path].deps.depot_tools = {

      rev: depot_tools.rev,

      hash: depot_tools.hash,