git: f598e3559307 - main - www/ungoogled-chromium: update to 119.0.6045.123

From: Robert Nagy <rnagy_at_FreeBSD.org>
Date: Sat, 11 Nov 2023 15:31:39 UTC
The branch main has been updated by rnagy:

URL: https://cgit.FreeBSD.org/ports/commit/?id=f598e35593071318eef4cfbe64737a981ade10e5

commit f598e35593071318eef4cfbe64737a981ade10e5
Author:     Robert Nagy <rnagy@FreeBSD.org>
AuthorDate: 2023-11-11 15:31:12 +0000
Commit:     Robert Nagy <rnagy@FreeBSD.org>
CommitDate: 2023-11-11 15:31:33 +0000

    www/ungoogled-chromium: update to 119.0.6045.123
    
    Security:       https://vuxml.freebsd.org/freebsd/77fc311d-7e62-11ee-8290-a8a1599412c6.html
---
 www/ungoogled-chromium/Makefile                    |  2 +-
 www/ungoogled-chromium/distinfo                    | 14 +++++-----
 .../files/patch-chrome_browser_about__flags.cc     | 30 +++++++++++-----------
 .../patch-chrome_browser_flag__descriptions.cc     | 20 +++++++--------
 .../patch-chrome_browser_flag__descriptions.h      | 18 ++++++-------
 ...zation__guide_core_optimization__guide__util.cc |  4 +--
 .../files/patch-media_base_media__switches.cc      | 14 +++++-----
 .../files/patch-media_base_media__switches.h       |  8 +++---
 ...-media_gpu_chromeos_video__decoder__pipeline.cc |  6 ++---
 .../files/patch-sandbox_policy_features.cc         | 11 +++++++-
 .../files/patch-sandbox_policy_features.h          | 11 ++++++++
 11 files changed, 79 insertions(+), 59 deletions(-)

diff --git a/www/ungoogled-chromium/Makefile b/www/ungoogled-chromium/Makefile
index 82a3b764ce7c..3d76ee2878ce 100644
--- a/www/ungoogled-chromium/Makefile
+++ b/www/ungoogled-chromium/Makefile
@@ -1,5 +1,5 @@
 PORTNAME=	ungoogled-chromium
-PORTVERSION=	119.0.6045.105
+PORTVERSION=	119.0.6045.123
 UGVERSION=	${DISTVERSION}-1
 CATEGORIES=	www wayland
 MASTER_SITES=	https://commondatastorage.googleapis.com/chromium-browser-official/ \
diff --git a/www/ungoogled-chromium/distinfo b/www/ungoogled-chromium/distinfo
index 1e5f817ded65..0da88e462b97 100644
--- a/www/ungoogled-chromium/distinfo
+++ b/www/ungoogled-chromium/distinfo
@@ -1,9 +1,9 @@
-TIMESTAMP = 1699083208
-SHA256 (chromium-119.0.6045.105.tar.xz) = 73cb8c39e928f8c627d747d37a3b020f08913ef5508f893758d70bdbd545dbcf
-SIZE (chromium-119.0.6045.105.tar.xz) = 3299629128
-SHA256 (ungoogled-chromium-119.0.6045.105-1.tar.gz) = e5d74a46cd79b79a3f2f8f8fadce8329ad50f4a4facd76365d28e0761173aa26
-SIZE (ungoogled-chromium-119.0.6045.105-1.tar.gz) = 659861
-SHA256 (chromium-119.0.6045.105-testdata.tar.xz) = 7b8e9f51677e64e2ad653aa5b915b74545299a259238ca1ffd24f1e677470f78
-SIZE (chromium-119.0.6045.105-testdata.tar.xz) = 271101180
+TIMESTAMP = 1699711924
+SHA256 (chromium-119.0.6045.123.tar.xz) = 6b61b87d0a201113b9c4e3d0ce48df52ecf869179c207e34b71add957fb7b48f
+SIZE (chromium-119.0.6045.123.tar.xz) = 3306195384
+SHA256 (ungoogled-chromium-119.0.6045.123-1.tar.gz) = e20df54944837fc5097369b3c52b6d6922c1a32a57f25769c5bbff8a4db8bebe
+SIZE (ungoogled-chromium-119.0.6045.123-1.tar.gz) = 660215
+SHA256 (chromium-119.0.6045.123-testdata.tar.xz) = 2da4cefebcb024168e1b3f605aac6631e57a54126b909a8314e2838c4cf68d89
+SIZE (chromium-119.0.6045.123-testdata.tar.xz) = 265138932
 SHA256 (test_fonts-336e775eec536b2d785cc80eff6ac39051931286.tar.gz) = a2ca2962daf482a8f943163541e1c73ba4b2694fabcd2510981f2db4eda493c8
 SIZE (test_fonts-336e775eec536b2d785cc80eff6ac39051931286.tar.gz) = 32624734
diff --git a/www/ungoogled-chromium/files/patch-chrome_browser_about__flags.cc b/www/ungoogled-chromium/files/patch-chrome_browser_about__flags.cc
index 460761b4ac05..28e28f4b6a23 100644
--- a/www/ungoogled-chromium/files/patch-chrome_browser_about__flags.cc
+++ b/www/ungoogled-chromium/files/patch-chrome_browser_about__flags.cc
@@ -1,4 +1,4 @@
---- chrome/browser/about_flags.cc.orig	2023-11-04 07:08:51 UTC
+--- chrome/browser/about_flags.cc.orig	2023-11-11 14:10:41 UTC
 +++ chrome/browser/about_flags.cc
 @@ -227,7 +227,7 @@
  #include "ui/ui_features.h"
@@ -36,7 +36,7 @@
  const FeatureEntry::Choice kOzonePlatformHintRuntimeChoices[] = {
      {flag_descriptions::kOzonePlatformHintChoiceDefault, "", ""},
      {flag_descriptions::kOzonePlatformHintChoiceAuto,
-@@ -1546,7 +1546,7 @@ const FeatureEntry::FeatureVariation kChromeRefresh202
+@@ -1563,7 +1563,7 @@ const FeatureEntry::FeatureVariation kChromeRefresh202
       nullptr}};
  
  #if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_MAC) || \
@@ -45,7 +45,7 @@
  const FeatureEntry::FeatureParam kShortcutBoostSearchAndUrl1414[] = {
      {"ShortcutBoostSearchScore", "1414"},
      {"ShortcutBoostUrlScore", "1414"}};
-@@ -5304,13 +5304,13 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -5321,13 +5321,13 @@ const FeatureEntry kFeatureEntries[] = {
       FEATURE_VALUE_TYPE(features::kWebShare)},
  #endif  // BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_WIN) || BUILDFLAG(IS_MAC)
  
@@ -61,7 +61,7 @@
      {"skip-undecryptable-passwords",
       flag_descriptions::kSkipUndecryptablePasswordsName,
       flag_descriptions::kSkipUndecryptablePasswordsDescription,
-@@ -5621,7 +5621,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -5638,7 +5638,7 @@ const FeatureEntry kFeatureEntries[] = {
       FEATURE_VALUE_TYPE(feed::kFeedSportsCard)},
  #endif  // BUILDFLAG(IS_ANDROID)
  #if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_MAC) || \
@@ -70,7 +70,7 @@
      {"following-feed-sidepanel", flag_descriptions::kFollowingFeedSidepanelName,
       flag_descriptions::kFollowingFeedSidepanelDescription, kOsDesktop,
       FEATURE_VALUE_TYPE(feed::kWebUiFeed)},
-@@ -6288,7 +6288,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -6305,7 +6305,7 @@ const FeatureEntry kFeatureEntries[] = {
       FEATURE_VALUE_TYPE(omnibox::kZeroSuggestInMemoryCaching)},
  
  #if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_MAC) || \
@@ -79,7 +79,7 @@
      {"omnibox-actions-ui-simplification",
       flag_descriptions::kOmniboxActionsUISimplificationName,
       flag_descriptions::kOmniboxActionsUISimplificationDescription, kOsDesktop,
-@@ -7123,7 +7123,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -7140,7 +7140,7 @@ const FeatureEntry kFeatureEntries[] = {
       flag_descriptions::kParallelDownloadingDescription, kOsAll,
       FEATURE_VALUE_TYPE(download::features::kParallelDownloading)},
  
@@ -88,7 +88,7 @@
      {"enable-async-dns", flag_descriptions::kAsyncDnsName,
       flag_descriptions::kAsyncDnsDescription, kOsWin | kOsLinux,
       FEATURE_VALUE_TYPE(features::kAsyncDns)},
-@@ -8131,7 +8131,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -8152,7 +8152,7 @@ const FeatureEntry kFeatureEntries[] = {
       FEATURE_VALUE_TYPE(supervised_user::kEnableProtoApiForClassifyUrl)},
  #endif  // BUILDFLAG(ENABLE_SUPERVISED_USERS)
  
@@ -97,7 +97,7 @@
      {"enable-network-service-sandbox",
       flag_descriptions::kEnableNetworkServiceSandboxName,
       flag_descriptions::kEnableNetworkServiceSandboxDescription,
-@@ -8824,7 +8824,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -8845,7 +8845,7 @@ const FeatureEntry kFeatureEntries[] = {
  #endif
  
  #if BUILDFLAG(IS_WIN) || BUILDFLAG(IS_MAC) || BUILDFLAG(IS_LINUX) || \
@@ -106,7 +106,7 @@
      {"quick-commands", flag_descriptions::kQuickCommandsName,
       flag_descriptions::kQuickCommandsDescription, kOsDesktop,
       FEATURE_VALUE_TYPE(features::kQuickCommands)},
-@@ -9128,7 +9128,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -9149,7 +9149,7 @@ const FeatureEntry kFeatureEntries[] = {
       FEATURE_VALUE_TYPE(ash::features::kWallpaperRefreshRevamp)},
  #endif  // BUILDFLAG(IS_CHROMEOS_ASH)
  
@@ -115,7 +115,7 @@
      {"enable-get-all-screens-media", flag_descriptions::kGetAllScreensMediaName,
       flag_descriptions::kGetAllScreensMediaDescription,
       kOsCrOS | kOsLacros | kOsLinux,
-@@ -9184,7 +9184,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -9205,7 +9205,7 @@ const FeatureEntry kFeatureEntries[] = {
  
  #if BUILDFLAG(IS_WIN) ||                                      \
      (BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS_LACROS)) || \
@@ -124,7 +124,7 @@
      {
          "ui-debug-tools",
          flag_descriptions::kUIDebugToolsName,
-@@ -9748,7 +9748,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -9769,7 +9769,7 @@ const FeatureEntry kFeatureEntries[] = {
  #endif
  
  #if BUILDFLAG(IS_WIN) || BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_MAC) || \
@@ -133,7 +133,7 @@
      {"document-picture-in-picture-api",
       flag_descriptions::kDocumentPictureInPictureApiName,
       flag_descriptions::kDocumentPictureInPictureApiDescription,
-@@ -10347,7 +10347,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -10368,7 +10368,7 @@ const FeatureEntry kFeatureEntries[] = {
       flag_descriptions::kWebUIOmniboxPopupDescription, kOsDesktop,
       FEATURE_VALUE_TYPE(omnibox::kWebUIOmniboxPopup)},
  
@@ -142,7 +142,7 @@
      {"webui-system-font", flag_descriptions::kWebUiSystemFontName,
       flag_descriptions::kWebUiSystemFontDescription, kOsAll,
       FEATURE_VALUE_TYPE(features::kWebUiSystemFont)},
-@@ -10548,7 +10548,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -10569,7 +10569,7 @@ const FeatureEntry kFeatureEntries[] = {
  #endif
  
  #if BUILDFLAG(IS_WIN) || (BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)) || \
@@ -151,7 +151,7 @@
      {"data-retention-policies-disable-sync-types-needed",
       flag_descriptions::kDataRetentionPoliciesDisableSyncTypesNeededName,
       flag_descriptions::kDataRetentionPoliciesDisableSyncTypesNeededDescription,
-@@ -10954,7 +10954,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -10975,7 +10975,7 @@ const FeatureEntry kFeatureEntries[] = {
       FEATURE_VALUE_TYPE(features::kProcessPerSiteUpToMainFrameThreshold)},
  
  #if BUILDFLAG(IS_MAC) || BUILDFLAG(IS_WIN) || BUILDFLAG(IS_LINUX) || \
@@ -160,7 +160,7 @@
      {"camera-mic-effects", flag_descriptions::kCameraMicEffectsName,
       flag_descriptions::kCameraMicEffectsDescription,
       static_cast<unsigned short>(kOsMac | kOsWin | kOsLinux | kOsFuchsia),
-@@ -11141,7 +11141,7 @@ const FeatureEntry kFeatureEntries[] = {
+@@ -11162,7 +11162,7 @@ const FeatureEntry kFeatureEntries[] = {
       flag_descriptions::kDigestAuthEnableSecureAlgorithmsDescription, kOsAll,
       FEATURE_VALUE_TYPE(net::features::kDigestAuthEnableSecureAlgorithms)},
  
diff --git a/www/ungoogled-chromium/files/patch-chrome_browser_flag__descriptions.cc b/www/ungoogled-chromium/files/patch-chrome_browser_flag__descriptions.cc
index 48ba23d5db56..41e8c1e0b9d5 100644
--- a/www/ungoogled-chromium/files/patch-chrome_browser_flag__descriptions.cc
+++ b/www/ungoogled-chromium/files/patch-chrome_browser_flag__descriptions.cc
@@ -1,4 +1,4 @@
---- chrome/browser/flag_descriptions.cc.orig	2023-11-04 07:08:51 UTC
+--- chrome/browser/flag_descriptions.cc.orig	2023-11-11 14:10:41 UTC
 +++ chrome/browser/flag_descriptions.cc
 @@ -2603,7 +2603,7 @@ const char kWebUIOmniboxPopupName[] = "WebUI Omnibox P
  const char kWebUIOmniboxPopupDescription[] =
@@ -18,7 +18,7 @@
  const char kGetAllScreensMediaName[] = "GetAllScreensMedia API";
  const char kGetAllScreensMediaDescription[] =
      "When enabled, the getAllScreensMedia API for capturing multiple screens "
-@@ -7479,7 +7479,7 @@ const char kSearchWebInSidePanelDescription[] =
+@@ -7485,7 +7485,7 @@ const char kSearchWebInSidePanelDescription[] =
  // Random platform combinations -----------------------------------------------
  
  #if BUILDFLAG(IS_WIN) || BUILDFLAG(IS_MAC) || BUILDFLAG(IS_LINUX) || \
@@ -27,7 +27,7 @@
  const char kQuickCommandsName[] = "Quick Commands";
  const char kQuickCommandsDescription[] =
      "Enable a text interface to browser features. Invoke with Ctrl-Space.";
-@@ -7488,7 +7488,7 @@ const char kQuickCommandsDescription[] =
+@@ -7494,7 +7494,7 @@ const char kQuickCommandsDescription[] =
          // BUILDFLAG(IS_FUCHSIA)
  
  #if BUILDFLAG(IS_WIN) || BUILDFLAG(IS_MAC) || BUILDFLAG(IS_LINUX) || \
@@ -36,7 +36,7 @@
  const char kFollowingFeedSidepanelName[] = "Following feed in the sidepanel";
  const char kFollowingFeedSidepanelDescription[] =
      "Enables the following feed in the sidepanel.";
-@@ -7503,7 +7503,7 @@ const char kEnableProtoApiForClassifyUrlDescription[] 
+@@ -7509,7 +7509,7 @@ const char kEnableProtoApiForClassifyUrlDescription[] 
      "instead of JSON.";
  #endif
  
@@ -45,7 +45,7 @@
  const char kEnableNetworkServiceSandboxName[] =
      "Enable the network service sandbox.";
  const char kEnableNetworkServiceSandboxDescription[] =
-@@ -7527,7 +7527,7 @@ const char kWebShareDescription[] =
+@@ -7533,7 +7533,7 @@ const char kWebShareDescription[] =
      "platforms.";
  #endif  // BUILDFLAG(IS_WIN) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_MAC)
  
@@ -54,7 +54,7 @@
  const char kOzonePlatformHintChoiceDefault[] = "Default";
  const char kOzonePlatformHintChoiceAuto[] = "Auto";
  const char kOzonePlatformHintChoiceX11[] = "X11";
-@@ -7547,7 +7547,7 @@ const char kWebBluetoothConfirmPairingSupportDescripti
+@@ -7553,7 +7553,7 @@ const char kWebBluetoothConfirmPairingSupportDescripti
      "Bluetooth";
  #endif  // BUILDFLAG(IS_WIN) || BUILDFLAG(IS_LINUX)
  
@@ -63,7 +63,7 @@
  const char kSkipUndecryptablePasswordsName[] =
      "Skip undecryptable passwords to use the available decryptable "
      "passwords.";
-@@ -7561,7 +7561,7 @@ const char kForcePasswordInitialSyncWhenDecryptionFail
+@@ -7567,7 +7567,7 @@ const char kForcePasswordInitialSyncWhenDecryptionFail
      "storage and requests initial sync.";
  #endif  // BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_MAC)
  
@@ -72,7 +72,7 @@
  const char kAsyncDnsName[] = "Async DNS resolver";
  const char kAsyncDnsDescription[] = "Enables the built-in DNS resolver.";
  #endif  // BUILDFLAG(IS_WIN) || BUILDFLAG(IS_LINUX)
-@@ -7660,7 +7660,7 @@ const char kElasticOverscrollDescription[] =
+@@ -7666,7 +7666,7 @@ const char kElasticOverscrollDescription[] =
  
  #if BUILDFLAG(IS_WIN) ||                                      \
      (BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS_LACROS)) || \
@@ -81,7 +81,7 @@
  const char kUIDebugToolsName[] = "Debugging tools for UI";
  const char kUIDebugToolsDescription[] =
      "Enables additional keyboard shortcuts to help debugging.";
-@@ -7672,7 +7672,7 @@ const char kSyncPollImmediatelyOnEveryStartupDescripti
+@@ -7678,7 +7678,7 @@ const char kSyncPollImmediatelyOnEveryStartupDescripti
  #endif
  
  #if BUILDFLAG(IS_WIN) || (BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)) || \
@@ -90,7 +90,7 @@
  const char kDataRetentionPoliciesDisableSyncTypesNeededName[] =
      "Data Retention Policies Disable Sync Types";
  const char kDataRetentionPoliciesDisableSyncTypesNeededDescription[] =
-@@ -7717,7 +7717,7 @@ const char kEnableAudioFocusEnforcementDescription[] =
+@@ -7723,7 +7723,7 @@ const char kEnableAudioFocusEnforcementDescription[] =
      "any one time. Requires #enable-media-session-service to be enabled too.";
  #endif  // BUILDFLAG(IS_CHROMEOS_ASH)
  
diff --git a/www/ungoogled-chromium/files/patch-chrome_browser_flag__descriptions.h b/www/ungoogled-chromium/files/patch-chrome_browser_flag__descriptions.h
index 54d35447dd1f..bd504b6c4f86 100644
--- a/www/ungoogled-chromium/files/patch-chrome_browser_flag__descriptions.h
+++ b/www/ungoogled-chromium/files/patch-chrome_browser_flag__descriptions.h
@@ -1,4 +1,4 @@
---- chrome/browser/flag_descriptions.h.orig	2023-11-04 07:08:51 UTC
+--- chrome/browser/flag_descriptions.h.orig	2023-11-11 14:10:41 UTC
 +++ chrome/browser/flag_descriptions.h
 @@ -1488,7 +1488,7 @@ extern const char kOmnibox2023RefreshConnectionSecurit
  extern const char kWebUIOmniboxPopupName[];
@@ -18,7 +18,7 @@
  extern const char kGetAllScreensMediaName[];
  extern const char kGetAllScreensMediaDescription[];
  #endif  // BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_LINUX)
-@@ -4302,14 +4302,14 @@ extern const char kSearchWebInSidePanelDescription[];
+@@ -4305,14 +4305,14 @@ extern const char kSearchWebInSidePanelDescription[];
  // Random platform combinations -----------------------------------------------
  
  #if BUILDFLAG(IS_WIN) || BUILDFLAG(IS_MAC) || BUILDFLAG(IS_LINUX) || \
@@ -35,7 +35,7 @@
  extern const char kWebShareName[];
  extern const char kWebShareDescription[];
  #endif  // BUILDFLAG(IS_WIN) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_MAC)
-@@ -4319,7 +4319,7 @@ extern const char kWebBluetoothConfirmPairingSupportNa
+@@ -4322,7 +4322,7 @@ extern const char kWebBluetoothConfirmPairingSupportNa
  extern const char kWebBluetoothConfirmPairingSupportDescription[];
  #endif  // BUILDFLAG(IS_WIN) || BUILDFLAG(IS_LINUX)
  
@@ -44,7 +44,7 @@
  extern const char kOzonePlatformHintChoiceDefault[];
  extern const char kOzonePlatformHintChoiceAuto[];
  extern const char kOzonePlatformHintChoiceX11[];
-@@ -4329,7 +4329,7 @@ extern const char kOzonePlatformHintName[];
+@@ -4332,7 +4332,7 @@ extern const char kOzonePlatformHintName[];
  extern const char kOzonePlatformHintDescription[];
  #endif  // BUILDFLAG(IS_LINUX)
  
@@ -53,7 +53,7 @@
  extern const char kSkipUndecryptablePasswordsName[];
  extern const char kSkipUndecryptablePasswordsDescription[];
  
-@@ -4337,13 +4337,13 @@ extern const char kForcePasswordInitialSyncWhenDecrypt
+@@ -4340,13 +4340,13 @@ extern const char kForcePasswordInitialSyncWhenDecrypt
  extern const char kForcePasswordInitialSyncWhenDecryptionFailsDescription[];
  #endif  // BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_MAC)
  
@@ -69,7 +69,7 @@
  extern const char kFollowingFeedSidepanelName[];
  extern const char kFollowingFeedSidepanelDescription[];
  #endif  // BUILDFLAG(IS_WIN) || BUILDFLAG(IS_MAC) || BUILDFLAG(IS_LINUX) ||
-@@ -4354,7 +4354,7 @@ extern const char kEnableProtoApiForClassifyUrlName[];
+@@ -4357,7 +4357,7 @@ extern const char kEnableProtoApiForClassifyUrlName[];
  extern const char kEnableProtoApiForClassifyUrlDescription[];
  #endif  // BUILDFLAG(ENABLE_SUPERVISED_USERS)
  
@@ -78,7 +78,7 @@
  extern const char kEnableNetworkServiceSandboxName[];
  extern const char kEnableNetworkServiceSandboxDescription[];
  
-@@ -4431,7 +4431,7 @@ extern const char kElasticOverscrollDescription[];
+@@ -4434,7 +4434,7 @@ extern const char kElasticOverscrollDescription[];
  
  #if BUILDFLAG(IS_WIN) ||                                      \
      (BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS_LACROS)) || \
@@ -87,7 +87,7 @@
  extern const char kUIDebugToolsName[];
  extern const char kUIDebugToolsDescription[];
  
-@@ -4440,7 +4440,7 @@ extern const char kSyncPollImmediatelyOnEveryStartupDe
+@@ -4443,7 +4443,7 @@ extern const char kSyncPollImmediatelyOnEveryStartupDe
  #endif
  
  #if BUILDFLAG(IS_WIN) || (BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)) || \
@@ -96,7 +96,7 @@
  extern const char kDataRetentionPoliciesDisableSyncTypesNeededName[];
  extern const char kDataRetentionPoliciesDisableSyncTypesNeededDescription[];
  #endif
-@@ -4467,7 +4467,7 @@ extern const char kEnableAudioFocusEnforcementName[];
+@@ -4470,7 +4470,7 @@ extern const char kEnableAudioFocusEnforcementName[];
  extern const char kEnableAudioFocusEnforcementDescription[];
  #endif  // BUILDFLAG(IS_CHROMEOS_ASH)
  
diff --git a/www/ungoogled-chromium/files/patch-components_optimization__guide_core_optimization__guide__util.cc b/www/ungoogled-chromium/files/patch-components_optimization__guide_core_optimization__guide__util.cc
index 3be5659cefc9..45efd8ec833a 100644
--- a/www/ungoogled-chromium/files/patch-components_optimization__guide_core_optimization__guide__util.cc
+++ b/www/ungoogled-chromium/files/patch-components_optimization__guide_core_optimization__guide__util.cc
@@ -1,6 +1,6 @@
---- components/optimization_guide/core/optimization_guide_util.cc.orig	2023-11-04 07:08:51 UTC
+--- components/optimization_guide/core/optimization_guide_util.cc.orig	2023-11-11 14:10:41 UTC
 +++ components/optimization_guide/core/optimization_guide_util.cc
-@@ -33,7 +33,7 @@ optimization_guide::proto::Platform GetPlatform() {
+@@ -34,7 +34,7 @@ optimization_guide::proto::Platform GetPlatform() {
    return optimization_guide::proto::PLATFORM_CHROMEOS;
  #elif BUILDFLAG(IS_ANDROID)
    return optimization_guide::proto::PLATFORM_ANDROID;
diff --git a/www/ungoogled-chromium/files/patch-media_base_media__switches.cc b/www/ungoogled-chromium/files/patch-media_base_media__switches.cc
index 59cc03ed875d..f56b98b42038 100644
--- a/www/ungoogled-chromium/files/patch-media_base_media__switches.cc
+++ b/www/ungoogled-chromium/files/patch-media_base_media__switches.cc
@@ -1,4 +1,4 @@
---- media/base/media_switches.cc.orig	2023-11-04 07:08:51 UTC
+--- media/base/media_switches.cc.orig	2023-11-11 14:10:41 UTC
 +++ media/base/media_switches.cc
 @@ -17,7 +17,7 @@
  #include "ui/gl/gl_features.h"
@@ -9,7 +9,7 @@
  #include "base/cpu.h"
  #endif
  
-@@ -694,7 +694,7 @@ BASE_FEATURE(kFallbackAfterDecodeError,
+@@ -699,7 +699,7 @@ BASE_FEATURE(kFallbackAfterDecodeError,
  // Show toolbar button that opens dialog for controlling media sessions.
  BASE_FEATURE(kGlobalMediaControls,
               "GlobalMediaControls",
@@ -18,7 +18,7 @@
               base::FEATURE_ENABLED_BY_DEFAULT
  #else
               base::FEATURE_DISABLED_BY_DEFAULT
-@@ -717,7 +717,7 @@ BASE_FEATURE(kGlobalMediaControlsCrOSUpdatedUI,
+@@ -722,7 +722,7 @@ BASE_FEATURE(kGlobalMediaControlsCrOSUpdatedUI,
  // If enabled, users can request Media Remoting without fullscreen-in-tab.
  BASE_FEATURE(kMediaRemotingWithoutFullscreen,
               "MediaRemotingWithoutFullscreen",
@@ -27,7 +27,7 @@
               base::FEATURE_ENABLED_BY_DEFAULT
  #else
               base::FEATURE_DISABLED_BY_DEFAULT
-@@ -729,7 +729,7 @@ BASE_FEATURE(kMediaRemotingWithoutFullscreen,
+@@ -734,7 +734,7 @@ BASE_FEATURE(kMediaRemotingWithoutFullscreen,
  BASE_FEATURE(kGlobalMediaControlsPictureInPicture,
               "GlobalMediaControlsPictureInPicture",
  #if BUILDFLAG(IS_WIN) || BUILDFLAG(IS_MAC) || BUILDFLAG(IS_LINUX) || \
@@ -36,7 +36,7 @@
               base::FEATURE_ENABLED_BY_DEFAULT
  #else
               base::FEATURE_DISABLED_BY_DEFAULT
-@@ -773,7 +773,7 @@ BASE_FEATURE(kUnifiedAutoplay,
+@@ -778,7 +778,7 @@ BASE_FEATURE(kUnifiedAutoplay,
               "UnifiedAutoplay",
               base::FEATURE_ENABLED_BY_DEFAULT);
  
@@ -45,7 +45,7 @@
  // Enable vaapi video decoding on linux. This is already enabled by default on
  // chromeos, but needs an experiment on linux.
  BASE_FEATURE(kVaapiVideoDecodeLinux,
-@@ -857,7 +857,7 @@ BASE_FEATURE(kVaapiVp9SModeHWEncoding,
+@@ -862,7 +862,7 @@ BASE_FEATURE(kVaapiVp9SModeHWEncoding,
               "VaapiVp9SModeHWEncoding",
               base::FEATURE_DISABLED_BY_DEFAULT);
  #endif  // defined(ARCH_CPU_X86_FAMILY) && BUILDFLAG(IS_CHROMEOS)
@@ -54,7 +54,7 @@
  // Enables the new V4L2StatefulVideoDecoder instead of V4L2VideoDecoder.
  BASE_FEATURE(kV4L2FlatStatelessVideoDecoder,
               "V4L2FlatStatelessVideoDecoder",
-@@ -1392,7 +1392,7 @@ const base::Feature MEDIA_EXPORT kUseOutOfProcessVideo
+@@ -1397,7 +1397,7 @@ const base::Feature MEDIA_EXPORT kUseOutOfProcessVideo
  };
  #endif  // BUILDFLAG(ALLOW_OOP_VIDEO_DECODER)
  
diff --git a/www/ungoogled-chromium/files/patch-media_base_media__switches.h b/www/ungoogled-chromium/files/patch-media_base_media__switches.h
index 5a52a65fc1c0..e49c32fe42a6 100644
--- a/www/ungoogled-chromium/files/patch-media_base_media__switches.h
+++ b/www/ungoogled-chromium/files/patch-media_base_media__switches.h
@@ -1,6 +1,6 @@
---- media/base/media_switches.h.orig	2023-11-04 07:08:51 UTC
+--- media/base/media_switches.h.orig	2023-11-11 14:10:41 UTC
 +++ media/base/media_switches.h
-@@ -319,7 +319,7 @@ MEDIA_EXPORT BASE_DECLARE_FEATURE(kUseElementInsteadOf
+@@ -320,7 +320,7 @@ MEDIA_EXPORT BASE_DECLARE_FEATURE(kUseElementInsteadOf
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kUseFakeDeviceForMediaStream);
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kUseMediaHistoryStore);
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kUseR16Texture);
@@ -9,7 +9,7 @@
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kVaapiVideoDecodeLinux);
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kVaapiVideoDecodeLinuxGL);
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kVaapiVideoEncodeLinux);
-@@ -338,7 +338,7 @@ MEDIA_EXPORT BASE_DECLARE_FEATURE(kVaapiVp8TemporalLay
+@@ -339,7 +339,7 @@ MEDIA_EXPORT BASE_DECLARE_FEATURE(kVaapiVp8TemporalLay
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kVaapiVp9kSVCHWEncoding);
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kVaapiVp9SModeHWEncoding);
  #endif  // defined(ARCH_CPU_X86_FAMILY) && BUILDFLAG(IS_CHROMEOS)
@@ -18,7 +18,7 @@
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kV4L2FlatStatelessVideoDecoder);
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kV4L2FlatStatefulVideoDecoder);
  #endif  // BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_LINUX)
-@@ -458,7 +458,7 @@ MEDIA_EXPORT BASE_DECLARE_FEATURE(kExposeOutOfProcessV
+@@ -459,7 +459,7 @@ MEDIA_EXPORT BASE_DECLARE_FEATURE(kExposeOutOfProcessV
  MEDIA_EXPORT BASE_DECLARE_FEATURE(kUseOutOfProcessVideoDecoding);
  #endif  // BUILDFLAG(ALLOW_OOP_VIDEO_DECODER)
  
diff --git a/www/ungoogled-chromium/files/patch-media_gpu_chromeos_video__decoder__pipeline.cc b/www/ungoogled-chromium/files/patch-media_gpu_chromeos_video__decoder__pipeline.cc
index ff9e58e96178..b53ed64ba188 100644
--- a/www/ungoogled-chromium/files/patch-media_gpu_chromeos_video__decoder__pipeline.cc
+++ b/www/ungoogled-chromium/files/patch-media_gpu_chromeos_video__decoder__pipeline.cc
@@ -1,6 +1,6 @@
---- media/gpu/chromeos/video_decoder_pipeline.cc.orig	2023-10-13 13:20:35 UTC
+--- media/gpu/chromeos/video_decoder_pipeline.cc.orig	2023-11-11 14:10:41 UTC
 +++ media/gpu/chromeos/video_decoder_pipeline.cc
-@@ -1026,14 +1026,14 @@ VideoDecoderPipeline::PickDecoderOutputFormat(
+@@ -1033,14 +1033,14 @@ VideoDecoderPipeline::PickDecoderOutputFormat(
      }
    }
  
@@ -17,7 +17,7 @@
    // Linux w/ V4L2 should not use a custom allocator
    // Only tested with video_decode_accelerator_tests
    // TODO(wenst@) Test with full Chromium Browser
-@@ -1170,7 +1170,7 @@ VideoDecoderPipeline::PickDecoderOutputFormat(
+@@ -1177,7 +1177,7 @@ VideoDecoderPipeline::PickDecoderOutputFormat(
               << " VideoFrames";
      auxiliary_frame_pool_->set_parent_task_runner(decoder_task_runner_);
  
diff --git a/www/ungoogled-chromium/files/patch-sandbox_policy_features.cc b/www/ungoogled-chromium/files/patch-sandbox_policy_features.cc
index 67bea1c73e99..92c31045660e 100644
--- a/www/ungoogled-chromium/files/patch-sandbox_policy_features.cc
+++ b/www/ungoogled-chromium/files/patch-sandbox_policy_features.cc
@@ -1,4 +1,4 @@
---- sandbox/policy/features.cc.orig	2023-10-13 13:20:35 UTC
+--- sandbox/policy/features.cc.orig	2023-11-11 14:10:41 UTC
 +++ sandbox/policy/features.cc
 @@ -19,7 +19,11 @@ namespace sandbox::policy::features {
  // (Only causes an effect when feature kNetworkServiceInProcess is disabled.)
@@ -12,3 +12,12 @@
  
  #if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
  // Enables a fine-grained seccomp-BPF syscall filter for the network service.
+@@ -126,7 +130,7 @@ BASE_FEATURE(kForceSpectreVariant2Mitigation,
+              base::FEATURE_DISABLED_BY_DEFAULT);
+ #endif  // BUILDFLAG(IS_CHROMEOS_ASH)
+ 
+-#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
++#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_BSD)
+ // Enabling the kNetworkServiceSandbox feature automatically enables Spectre
+ // variant 2 mitigations in the network service. This can lead to performance
+ // regressions, so enabling this feature will turn off the Spectre Variant 2
diff --git a/www/ungoogled-chromium/files/patch-sandbox_policy_features.h b/www/ungoogled-chromium/files/patch-sandbox_policy_features.h
new file mode 100644
index 000000000000..c0e1e8739077
--- /dev/null
+++ b/www/ungoogled-chromium/files/patch-sandbox_policy_features.h
@@ -0,0 +1,11 @@
+--- sandbox/policy/features.h.orig	2023-11-11 14:10:41 UTC
++++ sandbox/policy/features.h
+@@ -44,7 +44,7 @@ SANDBOX_POLICY_EXPORT BASE_DECLARE_FEATURE(kSpectreVar
+ SANDBOX_POLICY_EXPORT BASE_DECLARE_FEATURE(kForceSpectreVariant2Mitigation);
+ #endif  // BUILDFLAG(IS_CHROMEOS_ASH)
+ 
+-#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
++#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_BSD)
+ SANDBOX_POLICY_EXPORT BASE_DECLARE_FEATURE(
+     kForceDisableSpectreVariant2MitigationInNetworkService);
+ #endif  // BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)