Roll V8 from c0a1e34459d0 to 6140ee10b169 (71 revisions)

https://chromium.googlesource.com/v8/v8.git/+log/c0a1e34459d0..6140ee10b169

2026-11-05 arashk@chromium.org [snapshot][sandbox] Add code cache fuzzing hooks
2026-11-05 v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com Update ICU (trusted)
2026-11-05 v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com Update V8 DEPS (trusted)
2026-11-05 tao.pan@intel.com [heap] Don't clear recorded slots when thinning a young string
2026-11-04 ryandiaz@chromium.org [x64-stack-align] Align Wasm-to-JS returns, continuations and Liftoff args
2026-11-04 victorvianna@google.com [infra] Copy infra/config branch into infra/config/
2026-11-04 rahul.s.chaphalkar@intel.com [wasm-simd][AVX10] Lower f16x8.pmin and f16x8.pmax
2026-11-04 leszeks@chromium.org [tools] Require CL priority prefix on upload and strip before merge
2026-11-04 etiennep@chromium.org [heap] Enable sqrt_allocation_limits by default
2026-11-04 thibaudm@chromium.org [wasmfx][sandbox] Make StackMemory a ManagedResource and clear on retire
2026-11-04 pthier@chromium.org [builtins] Relax generator state DCHECK on async resume catch
2026-11-04 bmeurer@google.com [inspector] Remove throwOnSideEffect from ProtocolPromiseHandler
2026-11-04 joyee@igalia.com [tools] recover parameter names from ScopeInfo in debug helper plugins
2026-11-04 v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com Update V8 DEPS (trusted)
2026-11-04 clemensb@chromium.org [wasm] Set crash key on all async compile failure paths
2026-11-04 jkummerow@chromium.org [wasm] Fix exception propagation check on secondary stacks
2026-11-04 ahaas@google.com [fastcall][deopt] Preserve exception in LazyAfterFastCall
2026-11-04 bmeurer@google.com [inspector] Migrate regress/regress-5575-1 to inspector
2026-11-04 dlehmann@chromium.org [wasm][turboshaft] Deduplicate WasmFuncRef to WasmInternalFunction loads
2026-11-04 mlippautz@chromium.org [security] Keep regular Security_Impact for V8 Sandbox bypasses
2026-11-04 leszeks@chromium.org [maglev] Pool KnownNodeAspects and KnaMap via KNAPool and Ptr
2026-11-04 machenbach@chromium.org [infra] Switch win trybot to a component build
2026-11-04 leszeks@chromium.org [P3][debug] Verify SourcePositionTable offsets in BreakIterator
2026-11-04 dlehmann@chromium.org [wasm] Make WasmInternalFunction and WasmFuncRef fields immutable
2026-11-04 clemensb@chromium.org [agents] Install relevant shared Chromium skills for Jetski
2026-11-04 andrew@gaul.org [x64] Allocate R12 last
2026-11-04 andrew@gaul.org [heap] Allocate the context cell map and undefined cell early
2026-11-04 andrew@gaul.org [maglev] Clamp constant string slice indices at compile time
2026-11-04 bmeurer@google.com [inspector] Restrict awaitPromise with throwOnSideEffect
2026-11-04 dinfuehr@chromium.org [heap] Skip generational and shared barrier check for shared hosts
2026-11-04 olivf@chromium.org [builtins] Enforce no-JS execution scopes in InvokeApiFunction
2026-11-04 leszeks@chromium.org [maglev] Don't copy context cache map in TryGetContextCachedValue
2026-11-04 hpayer@chromium.org Reland "[heap] Promote all survivors after a high-survival scavenge"
2026-11-04 victorgomes@chromium.org [maglev] Handle HoleyFloat64 directly in BuildCheckNumber
2026-11-04 ishell@chromium.org [objects] Remove --feedback-normalization
2026-11-04 olivf@chromium.org [maglev] Fix KNA lookup for TypedArray and DataView loads
2026-11-04 dlehmann@chromium.org [regalloc] Remove SpillMode and --turbo-always-optimize-spills
2026-11-04 olivf@chromium.org [interpreter] Only track eval ScopeInfos within closure scope
2026-11-04 olivf@chromium.org [maglev] Remove LICM
2026-11-04 tikuta@chromium.org [build] Set public = [] on v8_component("v8") to prune harddeps
2026-11-04 jkummerow@chromium.org [wasm] Allow eager tier-up in OnDetectedFeatures DCHECK
2026-11-04 bmeurer@google.com [debug] Don't treat initialized undefined switch locals as in TDZ
2026-11-04 ecmziegler@chromium.org [wasm][compiler] Clean up remaining Sea-of-Nodes Simd256 leftovers
2026-11-04 jkummerow@chromium.org [wasm] Move WasmExportWrapperCache to trusted space
2026-11-04 leszeks@chromium.org [test] Skip regress-580193566 in gc_stress
2026-11-04 clemensb@chromium.org [wasm] Remove unused AsyncCompileJob::UseExistingForegroundTask
2026-11-04 machenbach@chromium.org Revert "Reland [etw] add API to enable ETW logging at runtime"
2026-11-04 bmeurer@google.com [inspector] Propagate termination across getProperties
2026-11-04 emaxx@google.com [d8][fuzzilli] Unset SetAllocationTimeout across REPRL
2026-11-04 victorgomes@chromium.org [maglev] Merge dead subgraph loops on early abort
2026-11-04 jkummerow@chromium.org [compiler] Lower single-input phis via EmitIdentity
2026-11-04 marja@chromium.org [ic] Fix the megamorphic cache variant of the DefineNamedOwn-inside-class bug
2026-11-04 v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com Update V8 DEPS (trusted)
2026-11-04 thibaudm@chromium.org [arm64] Use MacroAssembler::Add in PopTempStackSlots
2026-11-04 jgruber@chromium.org [scopes] Fix parameter-scope arguments checks for direct eval
2026-11-04 andrew@gaul.org [riscv] Load unrecorded addresses as plain constants
2026-11-04 rherouart@chromium.org [redline] Expand the generators and add a Turbolev profile of d8 flags
2026-11-04 rherouart@chromium.org [redline] Add change-based fuzzing
2026-11-04 rherouart@chromium.org [redline] Improve the engine, the mutators and the generators
2026-11-04 sxa@ibm.com [riscv] Allow vlen=1024
2026-11-04 rherouart@chromium.org [redline] Read the coverage counters of d8
2026-11-04 rherouart@chromium.org [redline] Write one coverage header for all modes, and the PC table
2026-11-04 olivf@chromium.org [runtime] Check access in CheckIfCanDefineAsConfigurable
2026-11-04 victorgomes@chromium.org [maglev] Do not unwrap former loop phis into hole constants
2026-11-04 dinfuehr@chromium.org [heap] Collapse FreeList type hierarchy
2026-11-04 bmeurer@google.com [debug] Verify bytecode and bound register reads in Debug::Break
2026-11-04 v8-airc-bot@v8-airc.iam.gserviceaccount.com [inspector] Reset termination state before sendSuccess in V8Debugger
2026-11-04 marja@chromium.org [maglev] Fix bailouts messing up non-escaping use counting
2026-11-04 liuyu@loongson.cn [loong64][compiler] Use amswap_db.{w/d} for atomic store variants
2026-11-04 machenbach@chromium.org Revert "Temporarily go back to old clang-format/script"
2026-11-04 kprokopenko@google.com [profiler] Relax AllocationNode name DCHECK for script functions

If this roll has caused a breakage, revert this CL and set the roller
to dry run mode using the controls here:
https://autoroll.skia.org/r/v8-dawn
Please CC alanbaker@google.com,webgpu-dev-team@google.com on the revert to ensure that a human
is aware of the problem.

To file a bug in V8: https://issues.chromium.org/issues/new?component=1456824
To file a bug in Dawn: https://crbug.com/dawn

To report a problem with the AutoRoller itself, please file a bug:
https://issues.skia.org/issues/new?component=1389291&template=1850622

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md

Bug: None
Change-Id: I253b1f7a3bc267ba2654814f9ce8aa5931dfaef6
Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/356215
Bot-Commit: dawn-autoroll@skia-public.iam.gserviceaccount.com <dawn-autoroll@skia-public.iam.gserviceaccount.com>
Commit-Queue: dawn-autoroll@skia-public.iam.gserviceaccount.com <dawn-autoroll@skia-public.iam.gserviceaccount.com>
diff --git a/DEPS b/DEPS
index 664948a..b470027 100644
--- a/DEPS
+++ b/DEPS
@@ -829,7 +829,7 @@
 
   # V8 and its dependencies for standalone builds.
   'third_party/v8/src': {
-    'url': '{chromium_git}/v8/v8.git@c0a1e34459d0da739044d7a77cf0f89d4af7a6e2',
+    'url': '{chromium_git}/v8/v8.git@6140ee10b169514d15b61577d0c22deb73e7d9c2',
     'condition': 'dawn_standalone and checkout_v8',
   },
 
diff --git a/third_party/v8/README.chromium b/third_party/v8/README.chromium
index 8c8e9da..f865cce 100644
--- a/third_party/v8/README.chromium
+++ b/third_party/v8/README.chromium
@@ -1,7 +1,7 @@
 Name: V8
 URL: https://chromium.googlesource.com/v8/v8
 Version: N/A
-Revision: c0a1e34459d0da739044d7a77cf0f89d4af7a6e2
+Revision: 6140ee10b169514d15b61577d0c22deb73e7d9c2
 Update Mechanism: Autoroll
 License: BSD-3-Clause
 License File: LICENSE
diff --git a/third_party/v8/src b/third_party/v8/src
index c0a1e34..6140ee1 160000
--- a/third_party/v8/src
+++ b/third_party/v8/src
@@ -1 +1 @@
-Subproject commit c0a1e34459d0da739044d7a77cf0f89d4af7a6e2
+Subproject commit 6140ee10b169514d15b61577d0c22deb73e7d9c2