Update to Chromium 128.0.6613.137

patches/ungoogled/core/ungoogled-chromium/doh-changes.patch

-Index: chromium-128.0.6613.119/chrome/browser/net/dns_probe_runner.cc
+Index: chromium-128.0.6613.137/chrome/browser/net/dns_probe_runner.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/chrome/browser/net/dns_probe_runner.cc
-+++ chromium-128.0.6613.119/chrome/browser/net/dns_probe_runner.cc
+--- chromium-128.0.6613.137.orig/chrome/browser/net/dns_probe_runner.cc
++++ chromium-128.0.6613.137/chrome/browser/net/dns_probe_runner.cc
 @@ -18,7 +18,7 @@
  
  namespace chrome_browser_net {
@@ -11,10 +11,10 @@ Index: chromium-128.0.6613.119/chrome/browser/net/dns_probe_runner.cc
  
  namespace {
  
-Index: chromium-128.0.6613.119/chrome/browser/net/stub_resolver_config_reader.cc
+Index: chromium-128.0.6613.137/chrome/browser/net/stub_resolver_config_reader.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/chrome/browser/net/stub_resolver_config_reader.cc
-+++ chromium-128.0.6613.119/chrome/browser/net/stub_resolver_config_reader.cc
+--- chromium-128.0.6613.137.orig/chrome/browser/net/stub_resolver_config_reader.cc
++++ chromium-128.0.6613.137/chrome/browser/net/stub_resolver_config_reader.cc
 @@ -125,7 +125,7 @@ StubResolverConfigReader::StubResolverCo
                                        base::Value(ShouldEnableAsyncDns()));
      local_state_->SetDefaultPrefValue(prefs::kDnsOverHttpsMode,
@@ -24,10 +24,10 @@ Index: chromium-128.0.6613.119/chrome/browser/net/stub_resolver_config_reader.cc
    }
  
    pref_change_registrar_.Add(prefs::kBuiltInDnsClientEnabled, pref_callback);
-Index: chromium-128.0.6613.119/net/dns/public/doh_provider_entry.cc
+Index: chromium-128.0.6613.137/net/dns/public/doh_provider_entry.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/net/dns/public/doh_provider_entry.cc
-+++ chromium-128.0.6613.119/net/dns/public/doh_provider_entry.cc
+--- chromium-128.0.6613.137.orig/net/dns/public/doh_provider_entry.cc
++++ chromium-128.0.6613.137/net/dns/public/doh_provider_entry.cc
 @@ -166,30 +166,6 @@ const DohProviderEntry::List& DohProvide
            /*display_globally=*/false, /*display_countries=*/{"EE", "DE"},
            LoggingLevel::kNormal),
@@ -59,10 +59,10 @@ Index: chromium-128.0.6613.119/net/dns/public/doh_provider_entry.cc
            "Iij",
            MAKE_BASE_FEATURE_WITH_STATIC_STORAGE(
                DohProviderIij, base::FEATURE_ENABLED_BY_DEFAULT),
-Index: chromium-128.0.6613.119/services/network/public/cpp/features.cc
+Index: chromium-128.0.6613.137/services/network/public/cpp/features.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/services/network/public/cpp/features.cc
-+++ chromium-128.0.6613.119/services/network/public/cpp/features.cc
+--- chromium-128.0.6613.137.orig/services/network/public/cpp/features.cc
++++ chromium-128.0.6613.137/services/network/public/cpp/features.cc
 @@ -126,12 +126,7 @@ BASE_FEATURE(kSplitAuthCacheByNetworkIso
  // Enable usage of hardcoded DoH upgrade mapping for use in automatic mode.
  BASE_FEATURE(kDnsOverHttpsUpgrade,

patches/ungoogled/core/ungoogled-chromium/extensions-manifestv2.patch

-Index: chromium-128.0.6613.119/chrome/browser/extensions/chrome_browser_context_keyed_service_factories.cc
+Index: chromium-128.0.6613.137/chrome/browser/extensions/chrome_browser_context_keyed_service_factories.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/chrome/browser/extensions/chrome_browser_context_keyed_service_factories.cc
-+++ chromium-128.0.6613.119/chrome/browser/extensions/chrome_browser_context_keyed_service_factories.cc
+--- chromium-128.0.6613.137.orig/chrome/browser/extensions/chrome_browser_context_keyed_service_factories.cc
++++ chromium-128.0.6613.137/chrome/browser/extensions/chrome_browser_context_keyed_service_factories.cc
 @@ -22,7 +22,6 @@
  #include "chrome/browser/extensions/extension_web_ui_override_registrar.h"
  #include "chrome/browser/extensions/install_tracker_factory.h"
@@ -18,10 +18,10 @@ Index: chromium-128.0.6613.119/chrome/browser/extensions/chrome_browser_context_
    extensions::MenuManagerFactory::GetInstance();
    extensions::PermissionsUpdater::EnsureAssociatedFactoryBuilt();
  #if BUILDFLAG(ENABLE_PLUGINS)
-Index: chromium-128.0.6613.119/chrome/browser/extensions/extension_management.cc
+Index: chromium-128.0.6613.137/chrome/browser/extensions/extension_management.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/chrome/browser/extensions/extension_management.cc
-+++ chromium-128.0.6613.119/chrome/browser/extensions/extension_management.cc
+--- chromium-128.0.6613.137.orig/chrome/browser/extensions/extension_management.cc
++++ chromium-128.0.6613.137/chrome/browser/extensions/extension_management.cc
 @@ -287,31 +287,7 @@ bool ExtensionManagement::IsAllowedManif
      int manifest_version,
      const std::string& extension_id,
@@ -81,10 +81,10 @@ Index: chromium-128.0.6613.119/chrome/browser/extensions/extension_management.cc
  }
  
  bool ExtensionManagement::IsAllowedByUnpublishedAvailabilityPolicy(
-Index: chromium-128.0.6613.119/chrome/browser/extensions/manifest_v2_experiment_manager.cc
+Index: chromium-128.0.6613.137/chrome/browser/extensions/manifest_v2_experiment_manager.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/chrome/browser/extensions/manifest_v2_experiment_manager.cc
-+++ chromium-128.0.6613.119/chrome/browser/extensions/manifest_v2_experiment_manager.cc
+--- chromium-128.0.6613.137.orig/chrome/browser/extensions/manifest_v2_experiment_manager.cc
++++ chromium-128.0.6613.137/chrome/browser/extensions/manifest_v2_experiment_manager.cc
 @@ -139,17 +139,6 @@ bool ManifestV2ExperimentManagerFactory:
  
  // Determines the current stage of the MV2 deprecation experiments.
@@ -103,10 +103,10 @@ Index: chromium-128.0.6613.119/chrome/browser/extensions/manifest_v2_experiment_
    return MV2ExperimentStage::kNone;
  }
  
-Index: chromium-128.0.6613.119/chrome/browser/ui/webui/extensions/extensions_ui.cc
+Index: chromium-128.0.6613.137/chrome/browser/ui/webui/extensions/extensions_ui.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/chrome/browser/ui/webui/extensions/extensions_ui.cc
-+++ chromium-128.0.6613.119/chrome/browser/ui/webui/extensions/extensions_ui.cc
+--- chromium-128.0.6613.137.orig/chrome/browser/ui/webui/extensions/extensions_ui.cc
++++ chromium-128.0.6613.137/chrome/browser/ui/webui/extensions/extensions_ui.cc
 @@ -468,9 +468,9 @@ content::WebUIDataSource* CreateAndAddEx
            extensions_features::kExtensionsMenuAccessControlWithPermittedSites));
    source->AddBoolean(

patches/ungoogled/core/ungoogled-chromium/fix-learn-doubleclick-hsts.patch

 # Split up the learn.doubleclick.net string literal to prevent domain substitution breaking compilation due to the use of the excluded HSTS list json file in this code.
 
-Index: chromium-128.0.6613.119/net/tools/transport_security_state_generator/transport_security_state_generator.cc
+Index: chromium-128.0.6613.137/net/tools/transport_security_state_generator/transport_security_state_generator.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/net/tools/transport_security_state_generator/transport_security_state_generator.cc
-+++ chromium-128.0.6613.119/net/tools/transport_security_state_generator/transport_security_state_generator.cc
+--- chromium-128.0.6613.137.orig/net/tools/transport_security_state_generator/transport_security_state_generator.cc
++++ chromium-128.0.6613.137/net/tools/transport_security_state_generator/transport_security_state_generator.cc
 @@ -132,7 +132,7 @@ bool CheckDuplicateEntries(const Transpo
  bool CheckNoopEntries(const TransportSecurityStateEntries& entries) {
    for (const auto& entry : entries) {

patches/ungoogled/core/ungoogled-chromium/replace-google-search-engine-with-nosearch.patch

-Index: chromium-128.0.6613.119/components/search_engines/prepopulated_engines.json
+Index: chromium-128.0.6613.137/components/search_engines/prepopulated_engines.json
 ===================================================================
---- chromium-128.0.6613.119.orig/components/search_engines/prepopulated_engines.json
-+++ chromium-128.0.6613.119/components/search_engines/prepopulated_engines.json
+--- chromium-128.0.6613.137.orig/components/search_engines/prepopulated_engines.json
++++ chromium-128.0.6613.137/components/search_engines/prepopulated_engines.json
 @@ -133,27 +133,11 @@
      // TODO(b/343792225): Identify a way to resolve this problem and implement
      // necessary changes.

patches/ungoogled/extra/inox-patchset/0008-restore-classic-ntp.patch

-Index: chromium-128.0.6613.119/chrome/browser/search/search.cc
+Index: chromium-128.0.6613.137/chrome/browser/search/search.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/chrome/browser/search/search.cc
-+++ chromium-128.0.6613.119/chrome/browser/search/search.cc
+--- chromium-128.0.6613.137.orig/chrome/browser/search/search.cc
++++ chromium-128.0.6613.137/chrome/browser/search/search.cc
 @@ -179,33 +179,8 @@ struct NewTabURLDetails {
      const GURL local_url(default_is_google
                               ? chrome::kChromeUINewTabPageURL

patches/ungoogled/extra/inox-patchset/0013-disable-missing-key-warning.patch

-Index: chromium-128.0.6613.119/chrome/browser/ui/startup/google_api_keys_infobar_delegate.cc
+Index: chromium-128.0.6613.137/chrome/browser/ui/startup/google_api_keys_infobar_delegate.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/chrome/browser/ui/startup/google_api_keys_infobar_delegate.cc
-+++ chromium-128.0.6613.119/chrome/browser/ui/startup/google_api_keys_infobar_delegate.cc
+--- chromium-128.0.6613.137.orig/chrome/browser/ui/startup/google_api_keys_infobar_delegate.cc
++++ chromium-128.0.6613.137/chrome/browser/ui/startup/google_api_keys_infobar_delegate.cc
 @@ -17,9 +17,6 @@
  // static
  void GoogleApiKeysInfoBarDelegate::Create(

patches/ungoogled/extra/inox-patchset/0016-chromium-sandbox-pie.patch

-Index: chromium-128.0.6613.119/sandbox/linux/BUILD.gn
+Index: chromium-128.0.6613.137/sandbox/linux/BUILD.gn
 ===================================================================
---- chromium-128.0.6613.119.orig/sandbox/linux/BUILD.gn
-+++ chromium-128.0.6613.119/sandbox/linux/BUILD.gn
+--- chromium-128.0.6613.137.orig/sandbox/linux/BUILD.gn
++++ chromium-128.0.6613.137/sandbox/linux/BUILD.gn
 @@ -304,6 +304,12 @@ if (is_linux || is_chromeos) {
        # These files have a suspicious comparison.
        # TODO fix this and re-enable this warning.

patches/ungoogled/extra/iridium-browser/Remove-EV-certificates.patch

@@ -8,10 +8,10 @@ certificates. The web of trust is considered a failure in itself, so
 do not give users a false sense of extra security with EV certs.
 Instead, let them appear just like regular ones.
 
-Index: chromium-128.0.6613.119/net/cert/ev_root_ca_metadata.cc
+Index: chromium-128.0.6613.137/net/cert/ev_root_ca_metadata.cc
 ===================================================================
---- chromium-128.0.6613.119.orig/net/cert/ev_root_ca_metadata.cc
-+++ chromium-128.0.6613.119/net/cert/ev_root_ca_metadata.cc
+--- chromium-128.0.6613.137.orig/net/cert/ev_root_ca_metadata.cc
++++ chromium-128.0.6613.137/net/cert/ev_root_ca_metadata.cc
 @@ -36,7 +36,17 @@ struct EVMetadata {
    const std::string_view policy_oids[kMaxOIDsPerCA];
  };