From 6b5ec6c5f80526b8a171212cbd75d7c0bd873174 Mon Sep 17 00:00:00 2001
From: RoyalOughtness <129108030+RoyalOughtness@users.noreply.github.com>
Date: Tue, 4 Feb 2025 13:08:09 -0800
Subject: [PATCH 1/5] chore: update patches for 133

---
 ...hromium-125-disable-FFmpegAllowLists.patch | 12 ---
 ...e-H.264-video-parser-during-demuxing.patch | 32 -------
 patches/default-disable-3d-apis.patch         |  6 +-
 patches/disable-lens.patch                    | 41 ++-------
 patches/disable-promotions-by-default.patch   |  6 +-
 patches/remove-unused-preferences.patch       | 88 +++++--------------
 patches/set-browser-defaults.patch            |  7 +-
 ...08-switch-to-fstack-protector-strong.patch |  4 +-
 ...fwrapv-in-Clang-for-non-UBSan-builds.patch |  4 +-
 ...0-enable-ftrivial-auto-var-init-zero.patch |  4 +-
 .../0012-Checkout-PGO-profiles.patch          |  4 +-
 .../0013-disable-checkout_nacl.patch          |  2 +-
 ...0015-disable-seed-based-field-trials.patch |  6 +-
 ...vigation-error-correction-by-default.patch |  4 +-
 ...isable-hyperlink-auditing-by-default.patch |  4 +-
 ...-content-feed-suggestions-by-default.patch |  8 +-
 ...27-disable-sensors-access-by-default.patch |  4 +-
 ...k-playing-protected-media-by-default.patch |  2 +-
 ...sable-third-party-cookies-by-default.patch |  2 +-
 ...0-disable-background-sync-by-default.patch |  2 +-
 ...dia-router-media-remoting-by-default.patch |  4 +-
 ...0033-disable-media-router-by-default.patch |  6 +-
 ...e-browser-sign-in-feature-by-default.patch |  6 +-
 ...media-DRM-preprovisioning-by-default.patch |  4 +-
 ...fill-server-communication-by-default.patch |  4 +-
 ...042-disable-trivial-subdomain-hiding.patch |  6 +-
 ...AuthFetcher-code-due-to-upstream-bug.patch | 24 ++---
 ...-privacy-sandbox-features-by-default.patch |  8 +-
 .../0050-always-use-local-new-tab-page.patch  |  6 +-
 ...mark-non-secure-origins-as-dangerous.patch |  4 +-
 ...f-privacy-aware-analytics-advertisin.patch |  2 +-
 ...-disable-appending-variations-header.patch |  4 +-
 ...ching-optimization-guides-by-default.patch |  2 +-
 ...-require-HTTPS-for-component-updates.patch |  2 +-
 ...-prefetch-privacy-changes-by-default.patch |  4 +-
 .../0070-enable-split-cache-by-default.patch  |  2 +-
 ...-partitioning-connections-by-default.patch |  2 +-
 ...e-strict-origin-isolation-by-default.patch |  4 +-
 ...ce-accept-language-header-by-default.patch |  8 +-
 ...gle-Chrome-branding-for-client-hints.patch |  4 +-
 ...Always-partition-third-party-storage.patch | 20 ++---
 ...opy-client-hints-with-reduced-user-a.patch | 16 ++--
 ...ent-settings-partitioning-by-default.patch |  4 +-
 ...andboxed-iframes-per-site-by-default.patch |  4 +-
 ...ynamic-code-execution-via-seccomp-bp.patch | 12 +--
 45 files changed, 140 insertions(+), 264 deletions(-)
 delete mode 100644 fedora_patches/chromium-125-disable-FFmpegAllowLists.patch
 delete mode 100644 fedora_patches/chromium-129-disable-H.264-video-parser-during-demuxing.patch

diff --git a/fedora_patches/chromium-125-disable-FFmpegAllowLists.patch b/fedora_patches/chromium-125-disable-FFmpegAllowLists.patch
deleted file mode 100644
index e03688cd..00000000
--- a/fedora_patches/chromium-125-disable-FFmpegAllowLists.patch
+++ /dev/null
@@ -1,12 +0,0 @@
-diff -up chromium-125.0.6422.41/media/base/media_switches.cc.disable-FFmpegAllowLists chromium-125.0.6422.41/media/base/media_switches.cc
---- chromium-125.0.6422.41/media/base/media_switches.cc.disable-FFmpegAllowLists	2024-05-12 21:28:43.694027396 +0200
-+++ chromium-125.0.6422.41/media/base/media_switches.cc	2024-05-12 21:32:48.155063623 +0200
-@@ -1753,7 +1753,7 @@ BASE_FEATURE(kUseWindowBoundsForPip,
- // Enables FFmpeg allow lists for supported codecs / containers.
- BASE_FEATURE(kFFmpegAllowLists,
-              "FFmpegAllowLists",
--             base::FEATURE_ENABLED_BY_DEFAULT);
-+             base::FEATURE_DISABLED_BY_DEFAULT);
- 
- #if BUILDFLAG(IS_WIN)
- // Enables audio offload when supported by endpoints.
diff --git a/fedora_patches/chromium-129-disable-H.264-video-parser-during-demuxing.patch b/fedora_patches/chromium-129-disable-H.264-video-parser-during-demuxing.patch
deleted file mode 100644
index 78f49fa4..00000000
--- a/fedora_patches/chromium-129-disable-H.264-video-parser-during-demuxing.patch
+++ /dev/null
@@ -1,32 +0,0 @@
-diff -up chromium-129.0.6668.42.old/media/filters/ffmpeg_glue.cc.me chromium-129.0.6668.42.old/media/filters/ffmpeg_glue.cc
---- chromium-129.0.6668.42.old/media/filters/ffmpeg_glue.cc.me	2024-09-15 22:12:33.945186323 +0200
-+++ chromium-129.0.6668.42.old/media/filters/ffmpeg_glue.cc	2024-09-16 10:53:13.334970539 +0200
-@@ -17,14 +17,11 @@
- 
- namespace media {
- 
--// Kill switches in case things explode. Remove after M132.
-+// Kill switch in case things explode. Remove after M132.
- // TODO(crbug.com/355485812): Re-enable this flag.
- BASE_FEATURE(kAllowOnlyAudioCodecsDuringDemuxing,
-              "AllowOnlyAudioCodecsDuringDemuxing",
-              base::FEATURE_ENABLED_BY_DEFAULT);
--BASE_FEATURE(kForbidH264ParsingDuringDemuxing,
--             "ForbidH264ParsingDuringDemuxing",
--             base::FEATURE_ENABLED_BY_DEFAULT);
- 
- // Internal buffer size used by AVIO for reading.
- // TODO(dalecurtis): Experiment with this buffer size and measure impact on
-@@ -118,12 +115,6 @@ FFmpegGlue::FFmpegGlue(FFmpegURLProtocol
-   // Enable fast, but inaccurate seeks for MP3.
-   format_context_->flags |= AVFMT_FLAG_FAST_SEEK;
- 
--  // We don't allow H.264 parsing during demuxing since we have our own parser
--  // and the ffmpeg one increases memory usage unnecessarily.
--  if (base::FeatureList::IsEnabled(kForbidH264ParsingDuringDemuxing)) {
--    format_context_->flags |= AVFMT_FLAG_NOH264PARSE;
--  }
--
-   // Ensures format parsing errors will bail out. From an audit on 11/2017, all
-   // instances were real failures. Solves bugs like http://crbug.com/710791.
-   format_context_->error_recognition |= AV_EF_EXPLODE;
diff --git a/patches/default-disable-3d-apis.patch b/patches/default-disable-3d-apis.patch
index c7497f9b..e7491c17 100644
--- a/patches/default-disable-3d-apis.patch
+++ b/patches/default-disable-3d-apis.patch
@@ -1,13 +1,13 @@
 diff --git a/chrome/browser/chrome_content_browser_client.cc b/chrome/browser/chrome_content_browser_client.cc
-index 25b5c325f612d..b5d404abbca92 100644
+index a1a8e77a2ef3f..63a4ef556e036 100644
 --- a/chrome/browser/chrome_content_browser_client.cc
 +++ b/chrome/browser/chrome_content_browser_client.cc
-@@ -1579,7 +1579,7 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
+@@ -1556,7 +1556,7 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
  // static
  void ChromeContentBrowserClient::RegisterProfilePrefs(
      user_prefs::PrefRegistrySyncable* registry) {
 -  registry->RegisterBooleanPref(prefs::kDisable3DAPIs, false);
 +  registry->RegisterBooleanPref(prefs::kDisable3DAPIs, true);
-   registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, false);
+   registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, true);
    // Register user prefs for mapping SitePerProcess and IsolateOrigins in
    // user policy in addition to the same named ones in Local State (which are
diff --git a/patches/disable-lens.patch b/patches/disable-lens.patch
index dfd828ce..02181da5 100644
--- a/patches/disable-lens.patch
+++ b/patches/disable-lens.patch
@@ -1,39 +1,12 @@
 diff --git a/components/lens/lens_features.cc b/components/lens/lens_features.cc
-index d029f6f7242b4..bf1a8c24e5d2d 100644
+index 12b0f931fa71d..cc5952d04b9ae 100644
 --- a/components/lens/lens_features.cc
 +++ b/components/lens/lens_features.cc
-@@ -13,7 +13,7 @@ namespace lens::features {
+@@ -16,16 +16,11 @@ namespace lens::features {
  
  BASE_FEATURE(kLensStandalone,
               "LensStandalone",
 -             base::FEATURE_ENABLED_BY_DEFAULT);
-+             base::FEATURE_DISABLED_BY_DEFAULT);
- 
- BASE_FEATURE(kLensSearchOptimizations,
-              "LensSearchOptimizations",
-@@ -21,7 +21,7 @@ BASE_FEATURE(kLensSearchOptimizations,
- 
- BASE_FEATURE(kEnableLatencyLogging,
-              "LensImageLatencyLogging",
--             base::FEATURE_ENABLED_BY_DEFAULT);
-+             base::FEATURE_DISABLED_BY_DEFAULT);
- 
- BASE_FEATURE(kEnableRegionSearchKeyboardShortcut,
-              "LensEnableRegionSearchKeyboardShortcut",
-@@ -33,7 +33,7 @@ BASE_FEATURE(kEnableImageTranslate,
- 
- BASE_FEATURE(kEnableImageSearchSidePanelFor3PDse,
-              "EnableImageSearchSidePanelFor3PDse",
--             base::FEATURE_ENABLED_BY_DEFAULT);
-+             base::FEATURE_DISABLED_BY_DEFAULT);
- 
- BASE_FEATURE(kLensRegionSearchStaticPage,
-              "LensRegionSearchStaticPage",
-@@ -41,16 +41,11 @@ BASE_FEATURE(kLensRegionSearchStaticPage,
- 
- BASE_FEATURE(kEnableContextMenuInLensSidePanel,
-              "EnableContextMenuInLensSidePanel",
--             base::FEATURE_ENABLED_BY_DEFAULT);
 +             base::FEATURE_DISABLED_BY_DEFAULT);
  
  BASE_FEATURE(kLensOverlay,
@@ -49,10 +22,10 @@ index d029f6f7242b4..bf1a8c24e5d2d 100644
  BASE_FEATURE(kLensOverlayTranslateButton,
               "LensOverlayTranslateButton",
 diff --git a/components/lens/lens_overlay_permission_utils.cc b/components/lens/lens_overlay_permission_utils.cc
-index 5c54e349a6d27..72f40a9593388 100644
+index 5c54e349a6d27..1c3a00f4c0f67 100644
 --- a/components/lens/lens_overlay_permission_utils.cc
 +++ b/components/lens/lens_overlay_permission_utils.cc
-@@ -19,7 +19,7 @@ void RegisterProfilePrefs(user_prefs::PrefRegistrySyncable* registry) {
+@@ -19,11 +19,11 @@ void RegisterProfilePrefs(user_prefs::PrefRegistrySyncable* registry) {
    // policies are registered just in case.
    registry->RegisterIntegerPref(
        kLensOverlaySettings,
@@ -61,4 +34,8 @@ index 5c54e349a6d27..72f40a9593388 100644
  
    registry->RegisterIntegerPref(
        kGenAiLensOverlaySettings,
-
+-      static_cast<int>(GenAiLensOverlaySettingsPolicyValue::kAllowed));
++      static_cast<int>(GenAiLensOverlaySettingsPolicyValue::kDisabled));
+ 
+   registry->RegisterBooleanPref(kLensSharingPageScreenshotEnabled, false);
+   registry->RegisterBooleanPref(kLensSharingPageContentEnabled, false);
diff --git a/patches/disable-promotions-by-default.patch b/patches/disable-promotions-by-default.patch
index e8999c97..67c4acda 100644
--- a/patches/disable-promotions-by-default.patch
+++ b/patches/disable-promotions-by-default.patch
@@ -1,13 +1,13 @@
 diff --git a/chrome/browser/ui/startup/startup_browser_creator.cc b/chrome/browser/ui/startup/startup_browser_creator.cc
-index 8740af9bc6cd6..e7eaae8ea2edb 100644
+index d26f0998c81fc..857eda407e3ab 100644
 --- a/chrome/browser/ui/startup/startup_browser_creator.cc
 +++ b/chrome/browser/ui/startup/startup_browser_creator.cc
-@@ -912,7 +912,7 @@ void StartupBrowserCreator::ClearLaunchedProfilesForTesting() {
+@@ -929,7 +929,7 @@ void StartupBrowserCreator::ClearLaunchedProfilesForTesting() {
  // static
  void StartupBrowserCreator::RegisterLocalStatePrefs(
      PrefRegistrySimple* registry) {
 -  registry->RegisterBooleanPref(prefs::kPromotionsEnabled, true);
 +  registry->RegisterBooleanPref(prefs::kPromotionsEnabled, false);
- #if !BUILDFLAG(IS_CHROMEOS_ASH)
+ #if !BUILDFLAG(IS_CHROMEOS)
    registry->RegisterBooleanPref(prefs::kCommandLineFlagSecurityWarningsEnabled,
                                  true);
diff --git a/patches/remove-unused-preferences.patch b/patches/remove-unused-preferences.patch
index be88bcfd..6134c03f 100644
--- a/patches/remove-unused-preferences.patch
+++ b/patches/remove-unused-preferences.patch
@@ -1,5 +1,5 @@
 diff --git a/chrome/browser/resources/settings/basic_page/basic_page.html b/chrome/browser/resources/settings/basic_page/basic_page.html
-index e33e49405479b..ee86bb13d87d4 100644
+index d79fef3c81ede..b6faaad86b752 100644
 --- a/chrome/browser/resources/settings/basic_page/basic_page.html
 +++ b/chrome/browser/resources/settings/basic_page/basic_page.html
 @@ -27,7 +27,7 @@
@@ -11,51 +11,8 @@ index e33e49405479b..ee86bb13d87d4 100644
                section="people">
              <settings-people-page prefs="{{prefs}}"
                  page-visibility="[[pageVisibility]]">
-@@ -215,13 +215,6 @@
-                 </settings-spell-check-page>
-               </settings-section>
-             </template>
--            <settings-section page-title="$i18n{translatePageTitle}"
--                section="translate" nest-under-section="languages">
--              <settings-translate-page prefs="{{prefs}}"
--                  languages="{{languages}}"
--                  language-helper="{{languageHelper}}">
--              </settings-translate-page>
--            </settings-section>
- </if>
-             <template is="dom-if" if="[[showPage_(pageVisibility.downloads)]]"
-                 restamp>
-diff --git a/chrome/browser/resources/settings/basic_page/basic_page.ts b/chrome/browser/resources/settings/basic_page/basic_page.ts
-index 06ed8d7e28bc0..165fdeea5c3e6 100644
---- a/chrome/browser/resources/settings/basic_page/basic_page.ts
-+++ b/chrome/browser/resources/settings/basic_page/basic_page.ts
-@@ -350,8 +350,7 @@ export class SettingsBasicPageElement extends SettingsBasicPageElementBase {
-   }
- 
-   private showSafetyCheckPage_(visibility?: boolean): boolean {
--    return !loadTimeData.getBoolean('enableSafetyHub') &&
--        this.showPage_(visibility);
-+    return false && this.showPage_(visibility); // Kept to prevent errors
-   }
- 
-   private showSafetyHubEntryPointPage_(visibility?: boolean): boolean {
-diff --git a/chrome/browser/resources/settings/languages_page/translate_page.html b/chrome/browser/resources/settings/languages_page/translate_page.html
-index fcebeb17e856f..fbe0becf128c5 100644
---- a/chrome/browser/resources/settings/languages_page/translate_page.html
-+++ b/chrome/browser/resources/settings/languages_page/translate_page.html
-@@ -1,10 +1,4 @@
- <style include="cr-shared-style settings-shared md-select iron-flex"></style>
--<settings-toggle-button id="offerTranslateOtherLanguages"
--    pref="{{prefs.translate.enabled}}"
--    label="$i18n{offerToEnableTranslate}"
--    sub-label="$i18n{offerToEnableTranslateSublabel}"
--    on-settings-boolean-control-change="onTranslateToggleChange_">
--</settings-toggle-button>
- <cr-collapse opened="[[prefs.translate.enabled.value]]">
-   <div class="cr-row continuation">
-     <div id="targetLanguageLabel" class="flex cr-padded-text"
 diff --git a/chrome/browser/resources/settings/people_page/people_page.html b/chrome/browser/resources/settings/people_page/people_page.html
-index ca51e9017e5bc..3f290596b8576 100644
+index 4d187ff2f57a9..788d8af1e9f0a 100644
 --- a/chrome/browser/resources/settings/people_page/people_page.html
 +++ b/chrome/browser/resources/settings/people_page/people_page.html
 @@ -107,12 +107,6 @@ shown on non-ChromeOS platforms -->
@@ -72,10 +29,10 @@ index ca51e9017e5bc..3f290596b8576 100644
  <if expr="not chromeos_ash">
          <template is="dom-if" if="[[signinAllowed_]]">
 diff --git a/chrome/browser/resources/settings/privacy_page/privacy_page.html b/chrome/browser/resources/settings/privacy_page/privacy_page.html
-index 7d47622af880c..468303b31b657 100644
+index b2577376fdb93..5fca74b795af4 100644
 --- a/chrome/browser/resources/settings/privacy_page/privacy_page.html
 +++ b/chrome/browser/resources/settings/privacy_page/privacy_page.html
-@@ -87,8 +87,8 @@
+@@ -76,8 +76,8 @@
            </cr-link-row>
          </template>
          <cr-link-row id="securityLinkRow" start-icon="privacy:lock"
@@ -86,7 +43,7 @@ index 7d47622af880c..468303b31b657 100644
              on-click="onSecurityPageClick_"
              role-description="$i18n{subpageArrowRoleDescription}"></cr-link-row>
          <cr-link-row id="permissionsLinkRow" start-icon="privacy:page-info"
-@@ -191,7 +191,7 @@
+@@ -180,7 +180,7 @@
        </template>
  
        <template is="dom-if" route-path="/security">
@@ -96,10 +53,10 @@ index 7d47622af880c..468303b31b657 100644
              learn-more-url="$i18n{safeBrowsingHelpCenterURL}">
            <settings-security-page prefs="{{prefs}}"
 diff --git a/chrome/browser/resources/settings/privacy_page/privacy_page.ts b/chrome/browser/resources/settings/privacy_page/privacy_page.ts
-index f3df01d26ac04..28eef94c62fee 100644
+index e09c5bda751ca..642feef913a1c 100644
 --- a/chrome/browser/resources/settings/privacy_page/privacy_page.ts
 +++ b/chrome/browser/resources/settings/privacy_page/privacy_page.ts
-@@ -643,8 +643,7 @@ export class SettingsPrivacyPageElement extends SettingsPrivacyPageElementBase {
+@@ -631,8 +631,7 @@ export class SettingsPrivacyPageElement extends SettingsPrivacyPageElementBase {
    }
  
    private shouldShowAdPrivacy_(): boolean {
@@ -110,7 +67,7 @@ index f3df01d26ac04..28eef94c62fee 100644
  
    private shouldShowComposeProactiveNudge_(): boolean {
 diff --git a/chrome/browser/resources/settings/privacy_page/security_page.html b/chrome/browser/resources/settings/privacy_page/security_page.html
-index 6ac062af92b06..0edc8e2134222 100644
+index 117b42d142e9e..0edc8e2134222 100644
 --- a/chrome/browser/resources/settings/privacy_page/security_page.html
 +++ b/chrome/browser/resources/settings/privacy_page/security_page.html
 @@ -79,155 +79,6 @@
@@ -170,7 +127,7 @@ index 6ac062af92b06..0edc8e2134222 100644
 -                    </div>
 -                  </li>
 -                  <template is="dom-if" if="[[!enablePasswordLeakToggleMove_]]">
--                    <li>
+-                    <li id="whenOnBulFive">
 -                      <cr-icon icon="settings20:vpn-key-new" aria-hidden="true">
 -                      </cr-icon>
 -                      <div class="secondary">
@@ -326,7 +283,7 @@ index 12390b95903a6..8f8fabc099463 100644
      r.SIGN_OUT = r.PEOPLE.createChild('/signOut');
      r.SIGN_OUT.isNavigableDialog = true;
 diff --git a/chrome/browser/resources/settings/settings_menu/settings_menu.html b/chrome/browser/resources/settings/settings_menu/settings_menu.html
-index 5f0ac710c3a63..30d076f0127e3 100644
+index 20e21e770d21f..897469dece88a 100644
 --- a/chrome/browser/resources/settings/settings_menu/settings_menu.html
 +++ b/chrome/browser/resources/settings/settings_menu/settings_menu.html
 @@ -54,7 +54,7 @@
@@ -339,10 +296,10 @@ index 5f0ac710c3a63..30d076f0127e3 100644
          </a>
          <a role="menuitem" id="autofill" href="/autofill"
 diff --git a/chrome/browser/ui/webui/settings/settings_ui.cc b/chrome/browser/ui/webui/settings/settings_ui.cc
-index 89f3190f3bde5..2ff32d4c675ed 100644
+index b57e66a90e566..86629759a9bce 100644
 --- a/chrome/browser/ui/webui/settings/settings_ui.cc
 +++ b/chrome/browser/ui/webui/settings/settings_ui.cc
-@@ -353,10 +353,7 @@ SettingsUI::SettingsUI(content::WebUI* web_ui)
+@@ -346,10 +346,7 @@ SettingsUI::SettingsUI(content::WebUI* web_ui)
    html_source->AddBoolean("isOSSettings", false);
  #endif  // BUILDFLAG(IS_CHROMEOS_ASH)
  
@@ -352,24 +309,21 @@ index 89f3190f3bde5..2ff32d4c675ed 100644
 -  html_source->AddBoolean("showPrivacyGuide", show_privacy_guide);
 +  html_source->AddBoolean("showPrivacyGuide", false);
  
-   html_source->AddBoolean(
-       "enableCbdTimeframeRequired",
+   html_source->AddBoolean("enableHandTrackingContentSetting",
+ #if BUILDFLAG(ENABLE_VR)
 diff --git a/chrome/common/chrome_features.cc b/chrome/common/chrome_features.cc
-index 1010d8d4b20a7..08b60ed8b845d 100644
+index b2fe398bcf5a8..39abd4a64ee3b 100644
 --- a/chrome/common/chrome_features.cc
 +++ b/chrome/common/chrome_features.cc
-@@ -1030,11 +1030,7 @@ BASE_FEATURE(kSafetyHubExtensionsOffStoreTrigger,
+@@ -961,7 +961,7 @@ BASE_FEATURE(kSafetyHubExtensionsOffStoreTrigger,
+ #endif
+ 
  // Enables Safety Hub feature.
- BASE_FEATURE(kSafetyHub,
-              "SafetyHub",
--#if BUILDFLAG(IS_ANDROID)
-              base::FEATURE_DISABLED_BY_DEFAULT
--#else
--             base::FEATURE_ENABLED_BY_DEFAULT
--#endif  // BUILDFLAG(IS_ANDROID)
- );
+-BASE_FEATURE(kSafetyHub, "SafetyHub", base::FEATURE_ENABLED_BY_DEFAULT);
++BASE_FEATURE(kSafetyHub, "SafetyHub", base::FEATURE_DISABLED_BY_DEFAULT);
  
  #if BUILDFLAG(IS_ANDROID)
+ // Enables Safety Hub card in magic stack.
 diff --git a/components/security_interstitials/core/browser/resources/interstitial_large.js b/components/security_interstitials/core/browser/resources/interstitial_large.js
 index 69992131be6df..9f7e15f55bc0a 100644
 --- a/components/security_interstitials/core/browser/resources/interstitial_large.js
diff --git a/patches/set-browser-defaults.patch b/patches/set-browser-defaults.patch
index ba667bfa..bfd935cc 100644
--- a/patches/set-browser-defaults.patch
+++ b/patches/set-browser-defaults.patch
@@ -1,5 +1,5 @@
 diff --git a/chrome/browser/ui/browser_ui_prefs.cc b/chrome/browser/ui/browser_ui_prefs.cc
-index dc3191190654b..0be79c7d5dba7 100644
+index ee2364fc09eb4..f3f9300e3484a 100644
 --- a/chrome/browser/ui/browser_ui_prefs.cc
 +++ b/chrome/browser/ui/browser_ui_prefs.cc
 @@ -97,10 +97,10 @@ void RegisterBrowserUserPrefs(user_prefs::PrefRegistrySyncable* registry) {
@@ -15,12 +15,13 @@ index dc3191190654b..0be79c7d5dba7 100644
    registry->RegisterDictionaryPref(prefs::kBrowserWindowPlacement);
    registry->RegisterDictionaryPref(prefs::kBrowserWindowPlacementPopup);
    registry->RegisterDictionaryPref(prefs::kAppWindowPlacement);
-@@ -109,19 +109,19 @@ void RegisterBrowserUserPrefs(user_prefs::PrefRegistrySyncable* registry) {
+@@ -109,20 +109,20 @@ void RegisterBrowserUserPrefs(user_prefs::PrefRegistrySyncable* registry) {
                                  false);
  #endif
    registry->RegisterStringPref(prefs::kWebRTCIPHandlingPolicy,
 -                               blink::kWebRTCIPHandlingDefault);
 +                               blink::kWebRTCIPHandlingDisableNonProxiedUdp);
+   registry->RegisterListPref(prefs::kWebRTCIPHandlingUrl, base::Value::List());
    registry->RegisterStringPref(prefs::kWebRTCUDPPortRange, std::string());
    registry->RegisterBooleanPref(prefs::kWebRtcEventLogCollectionAllowed, false);
    registry->RegisterListPref(prefs::kWebRtcLocalIpsAllowedUrls);
@@ -39,7 +40,7 @@ index dc3191190654b..0be79c7d5dba7 100644
  #endif  // BUILDFLAG(ENABLE_CLICK_TO_CALL)
  
  #if BUILDFLAG(IS_MAC)
-@@ -170,7 +170,7 @@ void RegisterBrowserUserPrefs(user_prefs::PrefRegistrySyncable* registry) {
+@@ -171,7 +171,7 @@ void RegisterBrowserUserPrefs(user_prefs::PrefRegistrySyncable* registry) {
  #endif
  
    registry->RegisterBooleanPref(
diff --git a/vanadium_patches/0008-switch-to-fstack-protector-strong.patch b/vanadium_patches/0008-switch-to-fstack-protector-strong.patch
index 75385a44..3c070b46 100644
--- a/vanadium_patches/0008-switch-to-fstack-protector-strong.patch
+++ b/vanadium_patches/0008-switch-to-fstack-protector-strong.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] switch to -fstack-protector-strong
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/build/config/compiler/BUILD.gn b/build/config/compiler/BUILD.gn
-index 8771a5dcdb5dd..3029bbb1101df 100644
+index 2e4e5205b5de0..b42626fde7d8f 100644
 --- a/build/config/compiler/BUILD.gn
 +++ b/build/config/compiler/BUILD.gn
-@@ -372,7 +372,7 @@ config("compiler") {
+@@ -382,7 +382,7 @@ config("compiler") {
        } else if ((is_posix && !is_nacl) || is_fuchsia) {
          if (current_os != "aix") {
            # Not available on aix.
diff --git a/vanadium_patches/0009-enable-fwrapv-in-Clang-for-non-UBSan-builds.patch b/vanadium_patches/0009-enable-fwrapv-in-Clang-for-non-UBSan-builds.patch
index 370b1cf9..21fb6fc9 100644
--- a/vanadium_patches/0009-enable-fwrapv-in-Clang-for-non-UBSan-builds.patch
+++ b/vanadium_patches/0009-enable-fwrapv-in-Clang-for-non-UBSan-builds.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] enable -fwrapv in Clang for non-UBSan builds
  1 file changed, 4 insertions(+)
 
 diff --git a/build/config/compiler/BUILD.gn b/build/config/compiler/BUILD.gn
-index 3029bbb1101df..345faddef7534 100644
+index b42626fde7d8f..608098e9feb3b 100644
 --- a/build/config/compiler/BUILD.gn
 +++ b/build/config/compiler/BUILD.gn
-@@ -388,6 +388,10 @@ config("compiler") {
+@@ -398,6 +398,10 @@ config("compiler") {
        }
      }
  
diff --git a/vanadium_patches/0010-enable-ftrivial-auto-var-init-zero.patch b/vanadium_patches/0010-enable-ftrivial-auto-var-init-zero.patch
index dfd8181d..73ccb72d 100644
--- a/vanadium_patches/0010-enable-ftrivial-auto-var-init-zero.patch
+++ b/vanadium_patches/0010-enable-ftrivial-auto-var-init-zero.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] enable -ftrivial-auto-var-init=zero
  1 file changed, 4 insertions(+)
 
 diff --git a/build/config/compiler/BUILD.gn b/build/config/compiler/BUILD.gn
-index 345faddef7534..e5e3ec4b201a3 100644
+index 608098e9feb3b..41cd325f53dd8 100644
 --- a/build/config/compiler/BUILD.gn
 +++ b/build/config/compiler/BUILD.gn
-@@ -392,6 +392,10 @@ config("compiler") {
+@@ -402,6 +402,10 @@ config("compiler") {
        cflags += [ "-fwrapv" ]
      }
  
diff --git a/vanadium_patches/0012-Checkout-PGO-profiles.patch b/vanadium_patches/0012-Checkout-PGO-profiles.patch
index 50f45730..a09665e3 100644
--- a/vanadium_patches/0012-Checkout-PGO-profiles.patch
+++ b/vanadium_patches/0012-Checkout-PGO-profiles.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] Checkout PGO profiles
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/DEPS b/DEPS
-index 52d2c6e300624..4e22051c3515e 100644
+index 928234f52fad2..39c3cb827ce9e 100644
 --- a/DEPS
 +++ b/DEPS
-@@ -145,7 +145,7 @@ vars = {
+@@ -149,7 +149,7 @@ vars = {
    'checkout_clang_coverage_tools': False,
  
    # Fetch the pgo profiles to optimize official builds.
diff --git a/vanadium_patches/0013-disable-checkout_nacl.patch b/vanadium_patches/0013-disable-checkout_nacl.patch
index fec41f76..4b81ee92 100644
--- a/vanadium_patches/0013-disable-checkout_nacl.patch
+++ b/vanadium_patches/0013-disable-checkout_nacl.patch
@@ -8,7 +8,7 @@ Subject: [PATCH] disable checkout_nacl
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/DEPS b/DEPS
-index 4e22051c3515e..d54cab2a9fc70 100644
+index 39c3cb827ce9e..deb75a8c4e14d 100644
 --- a/DEPS
 +++ b/DEPS
 @@ -114,7 +114,7 @@ vars = {
diff --git a/vanadium_patches/0015-disable-seed-based-field-trials.patch b/vanadium_patches/0015-disable-seed-based-field-trials.patch
index 54b92db7..14f5063c 100644
--- a/vanadium_patches/0015-disable-seed-based-field-trials.patch
+++ b/vanadium_patches/0015-disable-seed-based-field-trials.patch
@@ -9,10 +9,10 @@ Subject: [PATCH] disable seed-based field trials
  2 files changed, 12 insertions(+)
 
 diff --git a/components/variations/service/variations_field_trial_creator_base.cc b/components/variations/service/variations_field_trial_creator_base.cc
-index 73ff906e1b51a..d4324986fd65f 100644
+index 753fc845cc205..d8fbd413acabc 100644
 --- a/components/variations/service/variations_field_trial_creator_base.cc
 +++ b/components/variations/service/variations_field_trial_creator_base.cc
-@@ -263,8 +263,14 @@ bool VariationsFieldTrialCreatorBase::SetUpFieldTrials(
+@@ -260,8 +260,14 @@ bool VariationsFieldTrialCreatorBase::SetUpFieldTrials(
    }
    // Force the variation ids selected in chrome://flags and/or specified using
    // the command-line flag.
@@ -27,7 +27,7 @@ index 73ff906e1b51a..d4324986fd65f 100644
  
    switch (result) {
      case VariationsIdsProvider::ForceIdsResult::INVALID_SWITCH_ENTRY:
-@@ -322,13 +328,17 @@ bool VariationsFieldTrialCreatorBase::SetUpFieldTrials(
+@@ -318,13 +324,17 @@ bool VariationsFieldTrialCreatorBase::SetUpFieldTrials(
  
    bool used_seed = false;
    if (!used_testing_config) {
diff --git a/vanadium_patches/0019-disable-navigation-error-correction-by-default.patch b/vanadium_patches/0019-disable-navigation-error-correction-by-default.patch
index 968372a9..7a9921e6 100644
--- a/vanadium_patches/0019-disable-navigation-error-correction-by-default.patch
+++ b/vanadium_patches/0019-disable-navigation-error-correction-by-default.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] disable navigation error correction by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/chrome/browser/net/profile_network_context_service.cc b/chrome/browser/net/profile_network_context_service.cc
-index 3956f9fea2546..47e5679388e37 100644
+index c29bbe4620212..ab19ae156407b 100644
 --- a/chrome/browser/net/profile_network_context_service.cc
 +++ b/chrome/browser/net/profile_network_context_service.cc
-@@ -501,7 +501,7 @@ void ProfileNetworkContextService::ConfigureNetworkContextParams(
+@@ -511,7 +511,7 @@ void ProfileNetworkContextService::ConfigureNetworkContextParams(
  void ProfileNetworkContextService::RegisterProfilePrefs(
      user_prefs::PrefRegistrySyncable* registry) {
    registry->RegisterBooleanPref(embedder_support::kAlternateErrorPagesEnabled,
diff --git a/vanadium_patches/0023-disable-hyperlink-auditing-by-default.patch b/vanadium_patches/0023-disable-hyperlink-auditing-by-default.patch
index 740cf39c..42d74a52 100644
--- a/vanadium_patches/0023-disable-hyperlink-auditing-by-default.patch
+++ b/vanadium_patches/0023-disable-hyperlink-auditing-by-default.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] disable hyperlink auditing by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/chrome/browser/chrome_content_browser_client.cc b/chrome/browser/chrome_content_browser_client.cc
-index 25b5c325f612d..71117258f70f8 100644
+index a1a8e77a2ef3f..01a90b8b97c6b 100644
 --- a/chrome/browser/chrome_content_browser_client.cc
 +++ b/chrome/browser/chrome_content_browser_client.cc
-@@ -1580,7 +1580,7 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
+@@ -1557,7 +1557,7 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
  void ChromeContentBrowserClient::RegisterProfilePrefs(
      user_prefs::PrefRegistrySyncable* registry) {
    registry->RegisterBooleanPref(prefs::kDisable3DAPIs, false);
diff --git a/vanadium_patches/0026-disable-content-feed-suggestions-by-default.patch b/vanadium_patches/0026-disable-content-feed-suggestions-by-default.patch
index e8af2468..a687a6ad 100644
--- a/vanadium_patches/0026-disable-content-feed-suggestions-by-default.patch
+++ b/vanadium_patches/0026-disable-content-feed-suggestions-by-default.patch
@@ -8,15 +8,15 @@ Subject: [PATCH] disable content feed suggestions by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/components/feed/feed_feature_list.cc b/components/feed/feed_feature_list.cc
-index 6e15d1a1fd751..0019b41180af5 100644
+index 1eb7a97d785fa..713f489300a14 100644
 --- a/components/feed/feed_feature_list.cc
 +++ b/components/feed/feed_feature_list.cc
-@@ -27,7 +27,7 @@ const char kEnableRssLinkReader[] = "enable-rss-link-reader";
+@@ -22,7 +22,7 @@ namespace feed {
  // changed, please update the cached one's default value in CachedFeatureFlags.
  BASE_FEATURE(kInterestFeedV2,
               "InterestFeedV2",
 -             base::FEATURE_ENABLED_BY_DEFAULT);
 +             base::FEATURE_DISABLED_BY_DEFAULT);
  
- BASE_FEATURE(kInterestFeedV2Hearts,
-              "InterestFeedV2Hearts",
+ BASE_FEATURE(kDiscoFeedEndpoint,
+              "DiscoFeedEndpoint",
diff --git a/vanadium_patches/0027-disable-sensors-access-by-default.patch b/vanadium_patches/0027-disable-sensors-access-by-default.patch
index 3a37fee9..15419830 100644
--- a/vanadium_patches/0027-disable-sensors-access-by-default.patch
+++ b/vanadium_patches/0027-disable-sensors-access-by-default.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] disable sensors access by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/components/content_settings/core/browser/content_settings_registry.cc b/components/content_settings/core/browser/content_settings_registry.cc
-index 06431fe9ee873..4d70229b0712e 100644
+index 217c1e811de81..65301c0621352 100644
 --- a/components/content_settings/core/browser/content_settings_registry.cc
 +++ b/components/content_settings/core/browser/content_settings_registry.cc
-@@ -374,7 +374,7 @@ void ContentSettingsRegistry::Init() {
+@@ -383,7 +383,7 @@ void ContentSettingsRegistry::Init() {
    // TODO(crbug.com/40602007): Update this to "SECURE_ONLY" once
    // DeviceOrientationEvents and DeviceMotionEvents are only fired in secure
    // contexts.
diff --git a/vanadium_patches/0028-block-playing-protected-media-by-default.patch b/vanadium_patches/0028-block-playing-protected-media-by-default.patch
index 1f4006f0..2dabdebd 100644
--- a/vanadium_patches/0028-block-playing-protected-media-by-default.patch
+++ b/vanadium_patches/0028-block-playing-protected-media-by-default.patch
@@ -8,7 +8,7 @@ Subject: [PATCH] block playing protected media by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/components/content_settings/core/browser/content_settings_registry.cc b/components/content_settings/core/browser/content_settings_registry.cc
-index 4d70229b0712e..003d66572f811 100644
+index 65301c0621352..4c6690bcce3ab 100644
 --- a/components/content_settings/core/browser/content_settings_registry.cc
 +++ b/components/content_settings/core/browser/content_settings_registry.cc
 @@ -211,7 +211,7 @@ void ContentSettingsRegistry::Init() {
diff --git a/vanadium_patches/0029-disable-third-party-cookies-by-default.patch b/vanadium_patches/0029-disable-third-party-cookies-by-default.patch
index 6c18ea93..94322ada 100644
--- a/vanadium_patches/0029-disable-third-party-cookies-by-default.patch
+++ b/vanadium_patches/0029-disable-third-party-cookies-by-default.patch
@@ -8,7 +8,7 @@ Subject: [PATCH] disable third party cookies by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/components/content_settings/core/browser/cookie_settings.cc b/components/content_settings/core/browser/cookie_settings.cc
-index e78605d5e0782..68bdbc8856731 100644
+index 2916d802872a5..445109ad3142f 100644
 --- a/components/content_settings/core/browser/cookie_settings.cc
 +++ b/components/content_settings/core/browser/cookie_settings.cc
 @@ -94,7 +94,7 @@ void CookieSettings::RegisterProfilePrefs(
diff --git a/vanadium_patches/0030-disable-background-sync-by-default.patch b/vanadium_patches/0030-disable-background-sync-by-default.patch
index 83bbb08e..925a8968 100644
--- a/vanadium_patches/0030-disable-background-sync-by-default.patch
+++ b/vanadium_patches/0030-disable-background-sync-by-default.patch
@@ -8,7 +8,7 @@ Subject: [PATCH] disable background sync by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/components/content_settings/core/browser/content_settings_registry.cc b/components/content_settings/core/browser/content_settings_registry.cc
-index 003d66572f811..4f35fdd0b0162 100644
+index 4c6690bcce3ab..5e6bdb6c3e13a 100644
 --- a/components/content_settings/core/browser/content_settings_registry.cc
 +++ b/components/content_settings/core/browser/content_settings_registry.cc
 @@ -238,7 +238,7 @@ void ContentSettingsRegistry::Init() {
diff --git a/vanadium_patches/0032-disable-media-router-media-remoting-by-default.patch b/vanadium_patches/0032-disable-media-router-media-remoting-by-default.patch
index 9f573b11..70a02968 100644
--- a/vanadium_patches/0032-disable-media-router-media-remoting-by-default.patch
+++ b/vanadium_patches/0032-disable-media-router-media-remoting-by-default.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] disable media router media remoting by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/chrome/browser/media/router/media_router_feature.cc b/chrome/browser/media/router/media_router_feature.cc
-index 3deb85ae0d542..ab523a7a94b4a 100644
+index 7a5f1c892b9cf..22437807a9112 100644
 --- a/chrome/browser/media/router/media_router_feature.cc
 +++ b/chrome/browser/media/router/media_router_feature.cc
-@@ -160,7 +160,7 @@ void RegisterProfilePrefs(PrefRegistrySimple* registry) {
+@@ -157,7 +157,7 @@ void RegisterProfilePrefs(PrefRegistrySimple* registry) {
    registry->RegisterStringPref(prefs::kMediaRouterReceiverIdHashToken, "",
                                 PrefRegistry::PUBLIC);
    registry->RegisterBooleanPref(
diff --git a/vanadium_patches/0033-disable-media-router-by-default.patch b/vanadium_patches/0033-disable-media-router-by-default.patch
index ea1e1614..b9978416 100644
--- a/vanadium_patches/0033-disable-media-router-by-default.patch
+++ b/vanadium_patches/0033-disable-media-router-by-default.patch
@@ -9,10 +9,10 @@ Subject: [PATCH] disable media router by default
  2 files changed, 2 insertions(+), 2 deletions(-)
 
 diff --git a/chrome/browser/media/router/media_router_feature.cc b/chrome/browser/media/router/media_router_feature.cc
-index ab523a7a94b4a..8e37a8ac9f862 100644
+index 22437807a9112..9e1fcd17352cb 100644
 --- a/chrome/browser/media/router/media_router_feature.cc
 +++ b/chrome/browser/media/router/media_router_feature.cc
-@@ -145,7 +145,7 @@ bool MediaRouterEnabled(content::BrowserContext* context) {
+@@ -142,7 +142,7 @@ bool MediaRouterEnabled(content::BrowserContext* context) {
      pref_values.insert(std::make_pair(context, allowed));
      return allowed;
    }
@@ -22,7 +22,7 @@ index ab523a7a94b4a..8e37a8ac9f862 100644
  
  #if !BUILDFLAG(IS_ANDROID)
 diff --git a/chrome/browser/profiles/profile_impl.cc b/chrome/browser/profiles/profile_impl.cc
-index 3dd5f9818cfa0..8c5d37711299a 100644
+index 22aa92b18ffe4..fffffdde83029 100644
 --- a/chrome/browser/profiles/profile_impl.cc
 +++ b/chrome/browser/profiles/profile_impl.cc
 @@ -426,7 +426,7 @@ void ProfileImpl::RegisterProfilePrefs(
diff --git a/vanadium_patches/0035-disable-browser-sign-in-feature-by-default.patch b/vanadium_patches/0035-disable-browser-sign-in-feature-by-default.patch
index ed9afc6b..7eeaa540 100644
--- a/vanadium_patches/0035-disable-browser-sign-in-feature-by-default.patch
+++ b/vanadium_patches/0035-disable-browser-sign-in-feature-by-default.patch
@@ -9,10 +9,10 @@ Subject: [PATCH] disable browser sign in feature by default
  2 files changed, 2 insertions(+), 2 deletions(-)
 
 diff --git a/chrome/browser/signin/account_consistency_mode_manager.cc b/chrome/browser/signin/account_consistency_mode_manager.cc
-index c8c3d849d0510..0a284c80461d8 100644
+index 75d4f871e93ec..bf475559b3e4b 100644
 --- a/chrome/browser/signin/account_consistency_mode_manager.cc
 +++ b/chrome/browser/signin/account_consistency_mode_manager.cc
-@@ -117,7 +117,7 @@ AccountConsistencyModeManager::~AccountConsistencyModeManager() {}
+@@ -117,7 +117,7 @@ AccountConsistencyModeManager::~AccountConsistencyModeManager() = default;
  // static
  void AccountConsistencyModeManager::RegisterProfilePrefs(
      user_prefs::PrefRegistrySyncable* registry) {
@@ -22,7 +22,7 @@ index c8c3d849d0510..0a284c80461d8 100644
  
  // static
 diff --git a/components/signin/internal/identity_manager/primary_account_manager.cc b/components/signin/internal/identity_manager/primary_account_manager.cc
-index 5fc38ba5149de..2b6c4b57db9cf 100644
+index aefc281b823fb..55e33b94197c1 100644
 --- a/components/signin/internal/identity_manager/primary_account_manager.cc
 +++ b/components/signin/internal/identity_manager/primary_account_manager.cc
 @@ -299,7 +299,7 @@ void PrimaryAccountManager::RegisterProfilePrefs(PrefRegistrySimple* registry) {
diff --git a/vanadium_patches/0038-disable-media-DRM-preprovisioning-by-default.patch b/vanadium_patches/0038-disable-media-DRM-preprovisioning-by-default.patch
index 36bb7084..2b2dc2fe 100644
--- a/vanadium_patches/0038-disable-media-DRM-preprovisioning-by-default.patch
+++ b/vanadium_patches/0038-disable-media-DRM-preprovisioning-by-default.patch
@@ -10,10 +10,10 @@ support is enabled.
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/media/base/media_switches.cc b/media/base/media_switches.cc
-index d5695e08eb073..eb4fc9ad57fc9 100644
+index 4df38fe102c1b..1f7e821c5442f 100644
 --- a/media/base/media_switches.cc
 +++ b/media/base/media_switches.cc
-@@ -1101,7 +1101,7 @@ BASE_FEATURE(kMediaDrmPersistentLicense,
+@@ -1086,7 +1086,7 @@ BASE_FEATURE(kMediaDrmPersistentLicense,
  // which will trigger provisioning process after MediaDrmBridge is created.
  BASE_FEATURE(kMediaDrmPreprovisioning,
               "MediaDrmPreprovisioning",
diff --git a/vanadium_patches/0039-disable-autofill-server-communication-by-default.patch b/vanadium_patches/0039-disable-autofill-server-communication-by-default.patch
index 2b0e2495..d5ccaee3 100644
--- a/vanadium_patches/0039-disable-autofill-server-communication-by-default.patch
+++ b/vanadium_patches/0039-disable-autofill-server-communication-by-default.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] disable autofill server communication by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/components/autofill/core/common/autofill_features.cc b/components/autofill/core/common/autofill_features.cc
-index 6783e2c63d688..a5f6e6aeae4ae 100644
+index 700af2be3aa4b..7ad589916fc77 100644
 --- a/components/autofill/core/common/autofill_features.cc
 +++ b/components/autofill/core/common/autofill_features.cc
-@@ -820,7 +820,7 @@ const base::FeatureParam<std::string>
+@@ -939,7 +939,7 @@ const base::FeatureParam<std::string>
  // i.e., https://other.autofill.server:port/tbproxy/af/
  BASE_FEATURE(kAutofillServerCommunication,
               "AutofillServerCommunication",
diff --git a/vanadium_patches/0042-disable-trivial-subdomain-hiding.patch b/vanadium_patches/0042-disable-trivial-subdomain-hiding.patch
index 72df3c6c..ff690a60 100644
--- a/vanadium_patches/0042-disable-trivial-subdomain-hiding.patch
+++ b/vanadium_patches/0042-disable-trivial-subdomain-hiding.patch
@@ -8,11 +8,11 @@ Subject: [PATCH] disable trivial subdomain hiding
  1 file changed, 1 insertion(+), 2 deletions(-)
 
 diff --git a/components/url_formatter/url_formatter.cc b/components/url_formatter/url_formatter.cc
-index e832e4dc55206..ff67dc8c176ee 100644
+index ae2193253bb29..0a735f9d0c4f0 100644
 --- a/components/url_formatter/url_formatter.cc
 +++ b/components/url_formatter/url_formatter.cc
-@@ -664,8 +664,7 @@ std::u16string FormatUrlWithAdjustments(
-     *prefix_end = static_cast<size_t>(url_string.length());
+@@ -675,8 +675,7 @@ std::u16string FormatUrlWithAdjustments(
+   }
  
    // Host.
 -  bool trim_trivial_subdomains =
diff --git a/vanadium_patches/0045-disable-GaiaAuthFetcher-code-due-to-upstream-bug.patch b/vanadium_patches/0045-disable-GaiaAuthFetcher-code-due-to-upstream-bug.patch
index c84cf8aa..23e67ba1 100644
--- a/vanadium_patches/0045-disable-GaiaAuthFetcher-code-due-to-upstream-bug.patch
+++ b/vanadium_patches/0045-disable-GaiaAuthFetcher-code-due-to-upstream-bug.patch
@@ -5,24 +5,14 @@ Subject: [PATCH] disable GaiaAuthFetcher code due to upstream bug
 
 https://bugs.chromium.org/p/chromium/issues/detail?id=1150817
 ---
- google_apis/gaia/gaia_auth_fetcher.cc | 4 ++++
- 1 file changed, 4 insertions(+)
+ google_apis/gaia/gaia_auth_fetcher.cc | 2 ++
+ 1 file changed, 2 insertions(+)
 
 diff --git a/google_apis/gaia/gaia_auth_fetcher.cc b/google_apis/gaia/gaia_auth_fetcher.cc
-index 9ba4e97c83076..7d845a351e4ea 100644
+index f2655601f16cc..40b40ebf256b9 100644
 --- a/google_apis/gaia/gaia_auth_fetcher.cc
 +++ b/google_apis/gaia/gaia_auth_fetcher.cc
-@@ -45,7 +45,9 @@
- 
- namespace {
- 
-+#if 0
- const size_t kMaxMessageSize = 1024 * 1024;  // 1MB
-+#endif
- 
- constexpr char kBadAuthenticationError[] = "BadAuthentication";
- constexpr char kBadAuthenticationShortError[] = "badauth";
-@@ -295,6 +297,7 @@ void GaiaAuthFetcher::CreateAndStartGaiaFetcher(
+@@ -252,6 +252,7 @@ void GaiaAuthFetcher::CreateAndStartGaiaFetcher(
      const net::NetworkTrafficAnnotationTag& traffic_annotation) {
    DCHECK(!fetch_pending_) << "Tried to fetch two things at once!";
  
@@ -30,10 +20,10 @@ index 9ba4e97c83076..7d845a351e4ea 100644
    auto resource_request = std::make_unique<network::ResourceRequest>();
    resource_request->url = gaia_gurl;
    original_url_ = gaia_gurl;
-@@ -349,6 +352,7 @@ void GaiaAuthFetcher::CreateAndStartGaiaFetcher(
-       base::BindOnce(&GaiaAuthFetcher::OnURLLoadComplete,
+@@ -307,6 +308,7 @@ void GaiaAuthFetcher::CreateAndStartGaiaFetcher(
                       base::Unretained(this)),
-       kMaxMessageSize);
+       // Limit to 1 MiB.
+       1024 * 1024);
 +#endif
  }
  
diff --git a/vanadium_patches/0047-Disable-newer-privacy-sandbox-features-by-default.patch b/vanadium_patches/0047-Disable-newer-privacy-sandbox-features-by-default.patch
index b322f1bb..9b20478f 100644
--- a/vanadium_patches/0047-Disable-newer-privacy-sandbox-features-by-default.patch
+++ b/vanadium_patches/0047-Disable-newer-privacy-sandbox-features-by-default.patch
@@ -9,7 +9,7 @@ Subject: [PATCH] Disable newer privacy sandbox features by default
  2 files changed, 4 insertions(+), 4 deletions(-)
 
 diff --git a/components/privacy_sandbox/privacy_sandbox_features.cc b/components/privacy_sandbox/privacy_sandbox_features.cc
-index 6f67ea518dbc7..388d54abf70c5 100644
+index 0cf88269bcc1a..fdc713e4dbf7d 100644
 --- a/components/privacy_sandbox/privacy_sandbox_features.cc
 +++ b/components/privacy_sandbox/privacy_sandbox_features.cc
 @@ -21,7 +21,7 @@ const base::FeatureParam<std::string> kPrivacySandboxAdsNoticeCCTAppId{
@@ -22,10 +22,10 @@ index 6f67ea518dbc7..388d54abf70c5 100644
  const char kPrivacySandboxSettings4ConsentRequiredName[] = "consent-required";
  const char kPrivacySandboxSettings4NoticeRequiredName[] = "notice-required";
 diff --git a/third_party/blink/common/features.cc b/third_party/blink/common/features.cc
-index e7224e03e80f8..9d9d41553f5fc 100644
+index 5870616c41448..a64804f3719f6 100644
 --- a/third_party/blink/common/features.cc
 +++ b/third_party/blink/common/features.cc
-@@ -255,7 +255,7 @@ BASE_FEATURE(kBoostNonRenderBlockingStyleLoadingTaskPriority,
+@@ -244,7 +244,7 @@ BASE_FEATURE(kBoostNonRenderBlockingStyleLoadingTaskPriority,
  // Kill switch for the Topics API.
  BASE_FEATURE(kBrowsingTopics,
               "BrowsingTopics",
@@ -34,7 +34,7 @@ index e7224e03e80f8..9d9d41553f5fc 100644
  
  // If enabled, the check for whether the IP address is publicly routable will be
  // bypassed when determining the eligibility for a page to be included in topics
-@@ -271,13 +271,13 @@ BASE_FEATURE(kBrowsingTopicsBypassIPIsPubliclyRoutableCheck,
+@@ -260,13 +260,13 @@ BASE_FEATURE(kBrowsingTopicsBypassIPIsPubliclyRoutableCheck,
  // is enabled.)
  BASE_FEATURE(kBrowsingTopicsDocumentAPI,
               "BrowsingTopicsDocumentAPI",
diff --git a/vanadium_patches/0050-always-use-local-new-tab-page.patch b/vanadium_patches/0050-always-use-local-new-tab-page.patch
index 305bc3bd..81d26625 100644
--- a/vanadium_patches/0050-always-use-local-new-tab-page.patch
+++ b/vanadium_patches/0050-always-use-local-new-tab-page.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] always use local new tab page
  1 file changed, 7 insertions(+)
 
 diff --git a/chrome/browser/search/search.cc b/chrome/browser/search/search.cc
-index 40c586fb4f715..cb9ab332c947d 100644
+index cb37fdb16846e..4196f8f4e0e46 100644
 --- a/chrome/browser/search/search.cc
 +++ b/chrome/browser/search/search.cc
-@@ -163,6 +163,10 @@ struct NewTabURLDetails {
+@@ -162,6 +162,10 @@ struct NewTabURLDetails {
    NewTabURLDetails(const GURL& url, NewTabURLState state)
        : url(url), state(state) {}
  
@@ -22,7 +22,7 @@ index 40c586fb4f715..cb9ab332c947d 100644
    static NewTabURLDetails ForProfile(Profile* profile) {
      // Incognito and Guest profiles have their own New Tab.
      // This function may also be called by other off-the-record profiles that
-@@ -174,6 +178,9 @@ struct NewTabURLDetails {
+@@ -173,6 +177,9 @@ struct NewTabURLDetails {
  
  #if BUILDFLAG(IS_ANDROID)
      const GURL local_url;
diff --git a/vanadium_patches/0051-mark-non-secure-origins-as-dangerous.patch b/vanadium_patches/0051-mark-non-secure-origins-as-dangerous.patch
index c1d87ba4..dbc86870 100644
--- a/vanadium_patches/0051-mark-non-secure-origins-as-dangerous.patch
+++ b/vanadium_patches/0051-mark-non-secure-origins-as-dangerous.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] mark non-secure origins as dangerous
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/components/security_state/core/security_state.cc b/components/security_state/core/security_state.cc
-index aa44bf0aa63d9..e2f08c53901b8 100644
+index 64b2d6d61ec4f..f7fbbe63bec8c 100644
 --- a/components/security_state/core/security_state.cc
 +++ b/components/security_state/core/security_state.cc
-@@ -137,7 +137,7 @@ SecurityLevel GetSecurityLevel(
+@@ -136,7 +136,7 @@ SecurityLevel GetSecurityLevel(
          return NONE;
        }
  #endif  // !BUILDFLAG(IS_ANDROID)
diff --git a/vanadium_patches/0056-disable-trials-of-privacy-aware-analytics-advertisin.patch b/vanadium_patches/0056-disable-trials-of-privacy-aware-analytics-advertisin.patch
index 744a4ae8..5dc84b10 100644
--- a/vanadium_patches/0056-disable-trials-of-privacy-aware-analytics-advertisin.patch
+++ b/vanadium_patches/0056-disable-trials-of-privacy-aware-analytics-advertisin.patch
@@ -8,7 +8,7 @@ Subject: [PATCH] disable trials of privacy-aware analytics/advertising APIs
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/components/privacy_sandbox/privacy_sandbox_prefs.cc b/components/privacy_sandbox/privacy_sandbox_prefs.cc
-index 17c2415d6211c..062fe5a329069 100644
+index 37ce88bf279bf..3709cdf1d54b3 100644
 --- a/components/privacy_sandbox/privacy_sandbox_prefs.cc
 +++ b/components/privacy_sandbox/privacy_sandbox_prefs.cc
 @@ -50,7 +50,7 @@ void RegisterProfilePrefs(PrefRegistrySimple* registry) {
diff --git a/vanadium_patches/0058-disable-appending-variations-header.patch b/vanadium_patches/0058-disable-appending-variations-header.patch
index 8dfed1e1..90c91660 100644
--- a/vanadium_patches/0058-disable-appending-variations-header.patch
+++ b/vanadium_patches/0058-disable-appending-variations-header.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] disable appending variations header
  1 file changed, 1 insertion(+), 4 deletions(-)
 
 diff --git a/components/variations/net/variations_http_headers.cc b/components/variations/net/variations_http_headers.cc
-index aafa7ddf72c5c..12292851115e4 100644
+index 9b6ed6630c7cb..5bf0d95756a42 100644
 --- a/components/variations/net/variations_http_headers.cc
 +++ b/components/variations/net/variations_http_headers.cc
-@@ -118,10 +118,7 @@ URLValidationResult GetUrlValidationResult(const GURL& url) {
+@@ -116,10 +116,7 @@ URLValidationResult GetUrlValidationResult(const GURL& url) {
  // Also, logs the result of validating |url| in histograms, one of which ends in
  // |suffix|.
  bool ShouldAppendVariationsHeader(const GURL& url, const std::string& suffix) {
diff --git a/vanadium_patches/0060-disable-fetching-optimization-guides-by-default.patch b/vanadium_patches/0060-disable-fetching-optimization-guides-by-default.patch
index d69a8221..71ded94e 100644
--- a/vanadium_patches/0060-disable-fetching-optimization-guides-by-default.patch
+++ b/vanadium_patches/0060-disable-fetching-optimization-guides-by-default.patch
@@ -8,7 +8,7 @@ Subject: [PATCH] disable fetching optimization guides by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/components/optimization_guide/core/optimization_guide_features.cc b/components/optimization_guide/core/optimization_guide_features.cc
-index 64f99555e2060..f5b2a8b186b33 100644
+index 8c5a94e662fb0..95e51f1e9ad84 100644
 --- a/components/optimization_guide/core/optimization_guide_features.cc
 +++ b/components/optimization_guide/core/optimization_guide_features.cc
 @@ -55,7 +55,7 @@ BASE_FEATURE(kOptimizationHints,
diff --git a/vanadium_patches/0064-require-HTTPS-for-component-updates.patch b/vanadium_patches/0064-require-HTTPS-for-component-updates.patch
index 1edde98e..2086e2e7 100644
--- a/vanadium_patches/0064-require-HTTPS-for-component-updates.patch
+++ b/vanadium_patches/0064-require-HTTPS-for-component-updates.patch
@@ -22,7 +22,7 @@ index ed1faff27df00..cd438dfce1975 100644
        persisted_data_(update_client::CreatePersistedData(
            base::BindRepeating(
 diff --git a/chrome/browser/component_updater/chrome_component_updater_configurator.cc b/chrome/browser/component_updater/chrome_component_updater_configurator.cc
-index aaff7079f9171..73a12ff3b6c58 100644
+index 22453ebcf1b52..ef09b996cb92d 100644
 --- a/chrome/browser/component_updater/chrome_component_updater_configurator.cc
 +++ b/chrome/browser/component_updater/chrome_component_updater_configurator.cc
 @@ -114,7 +114,7 @@ class ChromeConfigurator : public update_client::Configurator {
diff --git a/vanadium_patches/0069-enable-prefetch-privacy-changes-by-default.patch b/vanadium_patches/0069-enable-prefetch-privacy-changes-by-default.patch
index 55c6ec79..6ce66ea7 100644
--- a/vanadium_patches/0069-enable-prefetch-privacy-changes-by-default.patch
+++ b/vanadium_patches/0069-enable-prefetch-privacy-changes-by-default.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] enable prefetch privacy changes by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/third_party/blink/common/features.cc b/third_party/blink/common/features.cc
-index 9d9d41553f5fc..9ab75c72dc1ef 100644
+index a64804f3719f6..8c736ecb32ae7 100644
 --- a/third_party/blink/common/features.cc
 +++ b/third_party/blink/common/features.cc
-@@ -1982,7 +1982,7 @@ BASE_FEATURE(kPrefetchFontLookupTables,
+@@ -1996,7 +1996,7 @@ BASE_FEATURE(kPrefetchFontLookupTables,
  // crbug.com/988956.
  BASE_FEATURE(kPrefetchPrivacyChanges,
               "PrefetchPrivacyChanges",
diff --git a/vanadium_patches/0070-enable-split-cache-by-default.patch b/vanadium_patches/0070-enable-split-cache-by-default.patch
index 4063f4e0..62b13174 100644
--- a/vanadium_patches/0070-enable-split-cache-by-default.patch
+++ b/vanadium_patches/0070-enable-split-cache-by-default.patch
@@ -8,7 +8,7 @@ Subject: [PATCH] enable split cache by default
  1 file changed, 6 insertions(+), 6 deletions(-)
 
 diff --git a/net/base/features.cc b/net/base/features.cc
-index 76a0e11ffb6ba..2f146bae07477 100644
+index 6ada9cc97b457..29b3fdee57fe3 100644
 --- a/net/base/features.cc
 +++ b/net/base/features.cc
 @@ -122,23 +122,23 @@ const base::FeatureParam<base::TimeDelta>
diff --git a/vanadium_patches/0071-enable-partitioning-connections-by-default.patch b/vanadium_patches/0071-enable-partitioning-connections-by-default.patch
index 9b754102..1447fd46 100644
--- a/vanadium_patches/0071-enable-partitioning-connections-by-default.patch
+++ b/vanadium_patches/0071-enable-partitioning-connections-by-default.patch
@@ -8,7 +8,7 @@ Subject: [PATCH] enable partitioning connections by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/net/base/features.cc b/net/base/features.cc
-index 2f146bae07477..39ca47cf6c806 100644
+index 29b3fdee57fe3..55f71520e99e7 100644
 --- a/net/base/features.cc
 +++ b/net/base/features.cc
 @@ -150,7 +150,7 @@ BASE_FEATURE(kSplitCodeCacheByNetworkIsolationKey,
diff --git a/vanadium_patches/0074-Enable-strict-origin-isolation-by-default.patch b/vanadium_patches/0074-Enable-strict-origin-isolation-by-default.patch
index bf5a0ffb..74b6d9f9 100644
--- a/vanadium_patches/0074-Enable-strict-origin-isolation-by-default.patch
+++ b/vanadium_patches/0074-Enable-strict-origin-isolation-by-default.patch
@@ -15,10 +15,10 @@ for more detail.
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/content/public/common/content_features.cc b/content/public/common/content_features.cc
-index 134681c4a99cb..19cacaac1ee72 100644
+index df8686279993e..1e61eb8972e5d 100644
 --- a/content/public/common/content_features.cc
 +++ b/content/public/common/content_features.cc
-@@ -1139,7 +1139,7 @@ BASE_FEATURE(kSpareRendererForSitePerProcess,
+@@ -1078,7 +1078,7 @@ BASE_FEATURE(kSpareRendererForSitePerProcess,
  // eTLD+1.
  BASE_FEATURE(kStrictOriginIsolation,
               "StrictOriginIsolation",
diff --git a/vanadium_patches/0075-Enable-reduce-accept-language-header-by-default.patch b/vanadium_patches/0075-Enable-reduce-accept-language-header-by-default.patch
index ac2b5f04..2ff847ac 100644
--- a/vanadium_patches/0075-Enable-reduce-accept-language-header-by-default.patch
+++ b/vanadium_patches/0075-Enable-reduce-accept-language-header-by-default.patch
@@ -8,15 +8,15 @@ Subject: [PATCH] Enable reduce accept language header by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/services/network/public/cpp/features.cc b/services/network/public/cpp/features.cc
-index 5cb4dab03d3f4..fe87225aaeca6 100644
+index 51aeaf38e5771..ce11007ad68d3 100644
 --- a/services/network/public/cpp/features.cc
 +++ b/services/network/public/cpp/features.cc
-@@ -289,7 +289,7 @@ constexpr base::FeatureParam<std::string> kCacheTransparencyPervasivePayloads{
+@@ -194,7 +194,7 @@ BASE_FEATURE(kPervasivePayloadsList,
  // accept-language. https://github.com/Tanych/accept-language
  BASE_FEATURE(kReduceAcceptLanguage,
               "ReduceAcceptLanguage",
 -             base::FEATURE_DISABLED_BY_DEFAULT);
 +             base::FEATURE_ENABLED_BY_DEFAULT);
  
- const base::FeatureParam<base::TimeDelta> kReduceAcceptLanguageCacheDuration{
-     &kReduceAcceptLanguage, "reduce-accept-language-cache-duration",
+ BASE_FEATURE_PARAM(base::TimeDelta,
+                    kReduceAcceptLanguageCacheDuration,
diff --git a/vanadium_patches/0076-use-Google-Chrome-branding-for-client-hints.patch b/vanadium_patches/0076-use-Google-Chrome-branding-for-client-hints.patch
index eb0c5b4c..fcb4b546 100644
--- a/vanadium_patches/0076-use-Google-Chrome-branding-for-client-hints.patch
+++ b/vanadium_patches/0076-use-Google-Chrome-branding-for-client-hints.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] use Google Chrome branding for client hints
  1 file changed, 1 insertion(+)
 
 diff --git a/components/embedder_support/user_agent_utils.cc b/components/embedder_support/user_agent_utils.cc
-index d46582b54b943..755e46ae0f5bf 100644
+index 384a829d6a4f5..2aef8f97a9674 100644
 --- a/components/embedder_support/user_agent_utils.cc
 +++ b/components/embedder_support/user_agent_utils.cc
-@@ -191,6 +191,7 @@ const blink::UserAgentBrandList GetUserAgentBrandList(
+@@ -190,6 +190,7 @@ const blink::UserAgentBrandList GetUserAgentBrandList(
    bool parse_result = base::StringToInt(major_version, &major_version_number);
    DCHECK(parse_result);
    std::optional<std::string> brand;
diff --git a/vanadium_patches/0083-temporary-Always-partition-third-party-storage.patch b/vanadium_patches/0083-temporary-Always-partition-third-party-storage.patch
index a2936e11..bdcebfc5 100644
--- a/vanadium_patches/0083-temporary-Always-partition-third-party-storage.patch
+++ b/vanadium_patches/0083-temporary-Always-partition-third-party-storage.patch
@@ -13,30 +13,28 @@ https://developers.google.com/privacy-sandbox/blog/storage-partitioning-deprecat
  2 files changed, 2 insertions(+), 2 deletions(-)
 
 diff --git a/third_party/blink/common/features.cc b/third_party/blink/common/features.cc
-index 9ab75c72dc1ef..03cd21ec7c7c8 100644
+index 8c736ecb32ae7..c3f11bcce9819 100644
 --- a/third_party/blink/common/features.cc
 +++ b/third_party/blink/common/features.cc
-@@ -707,7 +707,7 @@ BASE_FEATURE(kDiscardInputEventsToRecentlyMovedFrames,
+@@ -697,7 +697,7 @@ BASE_FEATURE(kDiscardInputEventsToRecentlyMovedFrames,
  
- BASE_FEATURE(kDisableThirdPartyStoragePartitioningDeprecationTrial2,
-              "DisableThirdPartyStoragePartitioningDeprecationTrial2",
+ BASE_FEATURE(kDisableThirdPartyStoragePartitioning3DeprecationTrial,
+              "DisableThirdPartyStoragePartitioning3DeprecationTrial",
 -             base::FEATURE_ENABLED_BY_DEFAULT);
 +             base::FEATURE_DISABLED_BY_DEFAULT);
  
- // Kill switch for not WebGL DrawingBuffer using SharedImage without
- // GpuMemoryBuffer (overlay or low latency canvas).
+ // Drop input events before user sees first paint https://crbug.com/1255485
+ BASE_FEATURE(kDropInputEventsBeforeFirstPaint,
 diff --git a/third_party/blink/renderer/platform/runtime_enabled_features.json5 b/third_party/blink/renderer/platform/runtime_enabled_features.json5
-index db7c64eebdf34..88c88dc756fc5 100644
+index 24d8368d0622c..a897caeadd848 100644
 --- a/third_party/blink/renderer/platform/runtime_enabled_features.json5
 +++ b/third_party/blink/renderer/platform/runtime_enabled_features.json5
-@@ -1491,9 +1491,9 @@
-       name: "DisableThirdPartyStoragePartitioning2",
-       origin_trial_feature_name: "DisableThirdPartyStoragePartitioning2",
+@@ -1506,7 +1506,7 @@
        origin_trial_type: "deprecation",
-+      origin_trial_os: ["win", "mac", "linux", "fuchsia", "chromeos"],
        origin_trial_allows_insecure: true,
        origin_trial_allows_third_party: true,
 -      status: "experimental",
++      status: "test",
        base_feature: "none",
        browser_process_read_write_access: true,
      },
diff --git a/vanadium_patches/0115-Derive-high-entropy-client-hints-with-reduced-user-a.patch b/vanadium_patches/0115-Derive-high-entropy-client-hints-with-reduced-user-a.patch
index f0204bc8..f2082d72 100644
--- a/vanadium_patches/0115-Derive-high-entropy-client-hints-with-reduced-user-a.patch
+++ b/vanadium_patches/0115-Derive-high-entropy-client-hints-with-reduced-user-a.patch
@@ -15,10 +15,10 @@ Android.
  4 files changed, 57 insertions(+)
 
 diff --git a/components/embedder_support/user_agent_utils.cc b/components/embedder_support/user_agent_utils.cc
-index 755e46ae0f5bf..1119d1c3d0adb 100644
+index 2aef8f97a9674..e507f25cd65ef 100644
 --- a/components/embedder_support/user_agent_utils.cc
 +++ b/components/embedder_support/user_agent_utils.cc
-@@ -547,6 +547,36 @@ blink::UserAgentMetadata GetUserAgentMetadata(const PrefService* pref_service,
+@@ -528,6 +528,36 @@ blink::UserAgentMetadata GetUserAgentMetadata(const PrefService* pref_service,
                 : metadata;
    }
  
@@ -56,10 +56,10 @@ index 755e46ae0f5bf..1119d1c3d0adb 100644
      return metadata;
    }
 diff --git a/content/browser/client_hints/client_hints.cc b/content/browser/client_hints/client_hints.cc
-index 67e416d5799c6..d83a076624ad7 100644
+index ed6b4c38f7fe8..fb80409bc647f 100644
 --- a/content/browser/client_hints/client_hints.cc
 +++ b/content/browser/client_hints/client_hints.cc
-@@ -851,6 +851,20 @@ void AddRequestClientHintsHeaders(
+@@ -849,6 +849,20 @@ void AddRequestClientHintsHeaders(
  
    GURL url = origin.GetURL();
  
@@ -81,10 +81,10 @@ index 67e416d5799c6..d83a076624ad7 100644
    if (ShouldAddClientHint(data, WebClientHintsType::kDeviceMemory_DEPRECATED)) {
      AddDeviceMemoryHeader(headers, /*use_deprecated_version*/ true);
 diff --git a/third_party/blink/common/features.cc b/third_party/blink/common/features.cc
-index 03cd21ec7c7c8..6f2e5cdae6cd9 100644
+index c3f11bcce9819..52efad49e251a 100644
 --- a/third_party/blink/common/features.cc
 +++ b/third_party/blink/common/features.cc
-@@ -467,6 +467,16 @@ BASE_FEATURE(kCheckHTMLParserBudgetLessOften,
+@@ -452,6 +452,16 @@ BASE_FEATURE(kCheckHTMLParserBudgetLessOften,
               "CheckHTMLParserBudgetLessOften",
               base::FEATURE_DISABLED_BY_DEFAULT);
  
@@ -102,10 +102,10 @@ index 03cd21ec7c7c8..6f2e5cdae6cd9 100644
  BASE_FEATURE(kClientHintsDPR_DEPRECATED,
               "ClientHintsDPR_DEPRECATED",
 diff --git a/third_party/blink/public/common/features.h b/third_party/blink/public/common/features.h
-index e8f79c39e03f5..dc5e2e1713a67 100644
+index 7d5238a303a1c..1a6bcd0883c09 100644
 --- a/third_party/blink/public/common/features.h
 +++ b/third_party/blink/public/common/features.h
-@@ -249,6 +249,9 @@ BLINK_COMMON_EXPORT BASE_DECLARE_FEATURE(kCaptureJSExecutionLocation);
+@@ -243,6 +243,9 @@ BLINK_COMMON_EXPORT BASE_DECLARE_FEATURE(kCaptureJSExecutionLocation);
  // is a no-op if kTimedHTMLParserBudget is disabled.
  BLINK_COMMON_EXPORT BASE_DECLARE_FEATURE(kCheckHTMLParserBudgetLessOften);
  
diff --git a/vanadium_patches/0163-Enable-content-settings-partitioning-by-default.patch b/vanadium_patches/0163-Enable-content-settings-partitioning-by-default.patch
index 0d47c7f8..4cd18e12 100644
--- a/vanadium_patches/0163-Enable-content-settings-partitioning-by-default.patch
+++ b/vanadium_patches/0163-Enable-content-settings-partitioning-by-default.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] Enable content settings partitioning by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/components/content_settings/core/common/features.cc b/components/content_settings/core/common/features.cc
-index dfddd7a1caeac..d79519ae86dc2 100644
+index a2e98ea00b1c5..9304a8661f6f8 100644
 --- a/components/content_settings/core/common/features.cc
 +++ b/components/content_settings/core/common/features.cc
-@@ -111,7 +111,7 @@ const base::FeatureParam<bool> kTpcdReadHeuristicsGrants{
+@@ -161,7 +161,7 @@ const base::FeatureParam<EnableForIframeTypes>
  
  BASE_FEATURE(kContentSettingsPartitioning,
               "ContentSettingsPartitioning",
diff --git a/vanadium_patches/0179-Isolate-sandboxed-iframes-per-site-by-default.patch b/vanadium_patches/0179-Isolate-sandboxed-iframes-per-site-by-default.patch
index a187a3fc..cad53214 100644
--- a/vanadium_patches/0179-Isolate-sandboxed-iframes-per-site-by-default.patch
+++ b/vanadium_patches/0179-Isolate-sandboxed-iframes-per-site-by-default.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] Isolate sandboxed iframes per site by default
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/third_party/blink/common/features.cc b/third_party/blink/common/features.cc
-index 54a69cf8c1fc4..7e0987e197c14 100644
+index 4ed62cba0c051..ab5f2b60699e1 100644
 --- a/third_party/blink/common/features.cc
 +++ b/third_party/blink/common/features.cc
-@@ -1231,7 +1231,7 @@ BASE_FEATURE_ENUM_PARAM(IsolateSandboxedIframesGrouping,
+@@ -1266,7 +1266,7 @@ BASE_FEATURE_ENUM_PARAM(IsolateSandboxedIframesGrouping,
                          kIsolateSandboxedIframesGroupingParam,
                          &kIsolateSandboxedIframes,
                          "grouping",
diff --git a/vanadium_patches/0188-Restriction-of-dynamic-code-execution-via-seccomp-bp.patch b/vanadium_patches/0188-Restriction-of-dynamic-code-execution-via-seccomp-bp.patch
index a76839e7..93fec634 100644
--- a/vanadium_patches/0188-Restriction-of-dynamic-code-execution-via-seccomp-bp.patch
+++ b/vanadium_patches/0188-Restriction-of-dynamic-code-execution-via-seccomp-bp.patch
@@ -238,7 +238,7 @@ index 0f33163d6a87f..48626cb8111fa 100644
  
  }  // namespace policy
 diff --git a/sandbox/policy/linux/sandbox_seccomp_bpf_linux.cc b/sandbox/policy/linux/sandbox_seccomp_bpf_linux.cc
-index 0f3487e6f2ffa..b03032d463650 100644
+index 1f6067c3b0d1f..f08ca369a3bb8 100644
 --- a/sandbox/policy/linux/sandbox_seccomp_bpf_linux.cc
 +++ b/sandbox/policy/linux/sandbox_seccomp_bpf_linux.cc
 @@ -17,6 +17,8 @@
@@ -256,9 +256,9 @@ index 0f3487e6f2ffa..b03032d463650 100644
  #include "sandbox/policy/linux/bpf_utility_policy_linux.h"
 +#include "third_party/blink/public/common/switches.h"
  
- #if BUILDFLAG(ENABLE_SCREEN_AI_SERVICE)
- #include "sandbox/policy/linux/bpf_screen_ai_policy_linux.h"
-@@ -190,8 +193,26 @@ std::unique_ptr<BPFBasePolicy> SandboxSeccompBPF::PolicyForSandboxType(
+ #if BUILDFLAG(IS_CHROMEOS_ASH)
+ #include "chromeos/ash/components/assistant/buildflags.h"
+@@ -186,8 +189,26 @@ std::unique_ptr<BPFBasePolicy> SandboxSeccompBPF::PolicyForSandboxType(
    switch (sandbox_type) {
      case sandbox::mojom::Sandbox::kGpu:
        return GetGpuProcessSandbox(options);
@@ -287,7 +287,7 @@ index 0f3487e6f2ffa..b03032d463650 100644
  #if BUILDFLAG(ENABLE_PPAPI)
      case sandbox::mojom::Sandbox::kPpapi:
        return std::make_unique<PpapiProcessPolicy>();
-@@ -213,9 +234,27 @@ std::unique_ptr<BPFBasePolicy> SandboxSeccompBPF::PolicyForSandboxType(
+@@ -207,9 +228,27 @@ std::unique_ptr<BPFBasePolicy> SandboxSeccompBPF::PolicyForSandboxType(
      case sandbox::mojom::Sandbox::kAudio:
        return std::make_unique<AudioProcessPolicy>();
      case sandbox::mojom::Sandbox::kService:
@@ -318,7 +318,7 @@ index 0f3487e6f2ffa..b03032d463650 100644
      case sandbox::mojom::Sandbox::kSpeechRecognition:
        return std::make_unique<SpeechRecognitionProcessPolicy>();
  #if BUILDFLAG(IS_LINUX)
-@@ -228,7 +267,7 @@ std::unique_ptr<BPFBasePolicy> SandboxSeccompBPF::PolicyForSandboxType(
+@@ -222,7 +261,7 @@ std::unique_ptr<BPFBasePolicy> SandboxSeccompBPF::PolicyForSandboxType(
  #endif
  #if BUILDFLAG(IS_LINUX)
      case sandbox::mojom::Sandbox::kVideoEffects:

From 1e900374a756a885e1290ce91b357b6f215067ec Mon Sep 17 00:00:00 2001
From: RoyalOughtness <129108030+RoyalOughtness@users.noreply.github.com>
Date: Tue, 4 Feb 2025 13:26:34 -0800
Subject: [PATCH 2/5] comments

---
 patches/default-disable-3d-apis.patch   |  8 +++---
 patches/remove-unused-preferences.patch | 35 ++++++++++++++++++++++---
 2 files changed, 37 insertions(+), 6 deletions(-)

diff --git a/patches/default-disable-3d-apis.patch b/patches/default-disable-3d-apis.patch
index e7491c17..c68d6665 100644
--- a/patches/default-disable-3d-apis.patch
+++ b/patches/default-disable-3d-apis.patch
@@ -1,13 +1,15 @@
 diff --git a/chrome/browser/chrome_content_browser_client.cc b/chrome/browser/chrome_content_browser_client.cc
-index a1a8e77a2ef3f..63a4ef556e036 100644
+index a1a8e77a2ef3f..9489df9c0b80c 100644
 --- a/chrome/browser/chrome_content_browser_client.cc
 +++ b/chrome/browser/chrome_content_browser_client.cc
-@@ -1556,7 +1556,7 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
+@@ -1556,8 +1556,8 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
  // static
  void ChromeContentBrowserClient::RegisterProfilePrefs(
      user_prefs::PrefRegistrySyncable* registry) {
 -  registry->RegisterBooleanPref(prefs::kDisable3DAPIs, false);
+-  registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, true);
 +  registry->RegisterBooleanPref(prefs::kDisable3DAPIs, true);
-   registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, true);
++  registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, false);
    // Register user prefs for mapping SitePerProcess and IsolateOrigins in
    // user policy in addition to the same named ones in Local State (which are
+   // used for mapping the command-line flags).
diff --git a/patches/remove-unused-preferences.patch b/patches/remove-unused-preferences.patch
index 6134c03f..3971842d 100644
--- a/patches/remove-unused-preferences.patch
+++ b/patches/remove-unused-preferences.patch
@@ -1,5 +1,5 @@
 diff --git a/chrome/browser/resources/settings/basic_page/basic_page.html b/chrome/browser/resources/settings/basic_page/basic_page.html
-index d79fef3c81ede..b6faaad86b752 100644
+index d79fef3c81ede..1470d3c74a7b7 100644
 --- a/chrome/browser/resources/settings/basic_page/basic_page.html
 +++ b/chrome/browser/resources/settings/basic_page/basic_page.html
 @@ -27,7 +27,7 @@
@@ -11,6 +11,35 @@ index d79fef3c81ede..b6faaad86b752 100644
                section="people">
              <settings-people-page prefs="{{prefs}}"
                  page-visibility="[[pageVisibility]]">
+@@ -219,13 +219,6 @@
+                 </settings-spell-check-page>
+               </settings-section>
+             </template>
+-            <settings-section page-title="$i18n{translatePageTitle}"
+-                section="translate" nest-under-section="languages">
+-              <settings-translate-page prefs="{{prefs}}"
+-                  languages="{{languages}}"
+-                  language-helper="{{languageHelper}}">
+-              </settings-translate-page>
+-            </settings-section>
+ </if>
+             <template is="dom-if" if="[[showPage_(pageVisibility.downloads)]]"
+                 restamp>
+diff --git a/chrome/browser/resources/settings/languages_page/translate_page.html b/chrome/browser/resources/settings/languages_page/translate_page.html
+index ad9a348aca868..4ba2509c855b5 100644
+--- a/chrome/browser/resources/settings/languages_page/translate_page.html
++++ b/chrome/browser/resources/settings/languages_page/translate_page.html
+@@ -1,10 +1,4 @@
+ <style include="cr-shared-style settings-shared md-select"></style>
+-<settings-toggle-button id="offerTranslateOtherLanguages"
+-    pref="{{prefs.translate.enabled}}"
+-    label="$i18n{offerToEnableTranslate}"
+-    sub-label="$i18n{offerToEnableTranslateSublabel}"
+-    on-settings-boolean-control-change="onTranslateToggleChange_">
+-</settings-toggle-button>
+ <cr-collapse opened="[[prefs.translate.enabled.value]]">
+   <div class="cr-row continuation">
+     <div id="targetLanguageLabel" class="flex cr-padded-text"
 diff --git a/chrome/browser/resources/settings/people_page/people_page.html b/chrome/browser/resources/settings/people_page/people_page.html
 index 4d187ff2f57a9..788d8af1e9f0a 100644
 --- a/chrome/browser/resources/settings/people_page/people_page.html
@@ -270,10 +299,10 @@ index 552f3b5534b01..7c7bad3962f68 100644
      this.lastFocusTime_ = HatsBrowserProxyImpl.getInstance().now();
    }
 diff --git a/chrome/browser/resources/settings/route.ts b/chrome/browser/resources/settings/route.ts
-index 12390b95903a6..8f8fabc099463 100644
+index ce2f533e5c790..77b68e40044c7 100644
 --- a/chrome/browser/resources/settings/route.ts
 +++ b/chrome/browser/resources/settings/route.ts
-@@ -184,7 +184,7 @@ function createRoutes(): SettingsRoutes {
+@@ -182,7 +182,7 @@ function createRoutes(): SettingsRoutes {
  
    if (!loadTimeData.getBoolean('isGuest')) {
      r.PEOPLE = r.BASIC.createSection(

From c10345b40889ed33360661659125c0f07878e3aa Mon Sep 17 00:00:00 2001
From: RoyalOughtness <129108030+RoyalOughtness@users.noreply.github.com>
Date: Tue, 4 Feb 2025 13:29:35 -0800
Subject: [PATCH 3/5] comments

---
 patches/default-disable-3d-apis.patch | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/patches/default-disable-3d-apis.patch b/patches/default-disable-3d-apis.patch
index c68d6665..e7491c17 100644
--- a/patches/default-disable-3d-apis.patch
+++ b/patches/default-disable-3d-apis.patch
@@ -1,15 +1,13 @@
 diff --git a/chrome/browser/chrome_content_browser_client.cc b/chrome/browser/chrome_content_browser_client.cc
-index a1a8e77a2ef3f..9489df9c0b80c 100644
+index a1a8e77a2ef3f..63a4ef556e036 100644
 --- a/chrome/browser/chrome_content_browser_client.cc
 +++ b/chrome/browser/chrome_content_browser_client.cc
-@@ -1556,8 +1556,8 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
+@@ -1556,7 +1556,7 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
  // static
  void ChromeContentBrowserClient::RegisterProfilePrefs(
      user_prefs::PrefRegistrySyncable* registry) {
 -  registry->RegisterBooleanPref(prefs::kDisable3DAPIs, false);
--  registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, true);
 +  registry->RegisterBooleanPref(prefs::kDisable3DAPIs, true);
-+  registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, false);
+   registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, true);
    // Register user prefs for mapping SitePerProcess and IsolateOrigins in
    // user policy in addition to the same named ones in Local State (which are
-   // used for mapping the command-line flags).

From a0366107ccaf4bcad1f0ed03893316628e57a249 Mon Sep 17 00:00:00 2001
From: RoyalOughtness <129108030+RoyalOughtness@users.noreply.github.com>
Date: Tue, 4 Feb 2025 13:35:14 -0800
Subject: [PATCH 4/5] fix

---
 patches/default-disable-3d-apis.patch | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/patches/default-disable-3d-apis.patch b/patches/default-disable-3d-apis.patch
index e7491c17..c68d6665 100644
--- a/patches/default-disable-3d-apis.patch
+++ b/patches/default-disable-3d-apis.patch
@@ -1,13 +1,15 @@
 diff --git a/chrome/browser/chrome_content_browser_client.cc b/chrome/browser/chrome_content_browser_client.cc
-index a1a8e77a2ef3f..63a4ef556e036 100644
+index a1a8e77a2ef3f..9489df9c0b80c 100644
 --- a/chrome/browser/chrome_content_browser_client.cc
 +++ b/chrome/browser/chrome_content_browser_client.cc
-@@ -1556,7 +1556,7 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
+@@ -1556,8 +1556,8 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
  // static
  void ChromeContentBrowserClient::RegisterProfilePrefs(
      user_prefs::PrefRegistrySyncable* registry) {
 -  registry->RegisterBooleanPref(prefs::kDisable3DAPIs, false);
+-  registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, true);
 +  registry->RegisterBooleanPref(prefs::kDisable3DAPIs, true);
-   registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, true);
++  registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, false);
    // Register user prefs for mapping SitePerProcess and IsolateOrigins in
    // user policy in addition to the same named ones in Local State (which are
+   // used for mapping the command-line flags).

From a0954298497089cefc1486f222e9cd34f7962f8e Mon Sep 17 00:00:00 2001
From: RoyalOughtness <129108030+RoyalOughtness@users.noreply.github.com>
Date: Tue, 4 Feb 2025 13:37:50 -0800
Subject: [PATCH 5/5] fix

---
 patches/default-disable-3d-apis.patch | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/patches/default-disable-3d-apis.patch b/patches/default-disable-3d-apis.patch
index c68d6665..c7497f9b 100644
--- a/patches/default-disable-3d-apis.patch
+++ b/patches/default-disable-3d-apis.patch
@@ -1,15 +1,13 @@
 diff --git a/chrome/browser/chrome_content_browser_client.cc b/chrome/browser/chrome_content_browser_client.cc
-index a1a8e77a2ef3f..9489df9c0b80c 100644
+index 25b5c325f612d..b5d404abbca92 100644
 --- a/chrome/browser/chrome_content_browser_client.cc
 +++ b/chrome/browser/chrome_content_browser_client.cc
-@@ -1556,8 +1556,8 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
+@@ -1579,7 +1579,7 @@ void ChromeContentBrowserClient::RegisterLocalStatePrefs(
  // static
  void ChromeContentBrowserClient::RegisterProfilePrefs(
      user_prefs::PrefRegistrySyncable* registry) {
 -  registry->RegisterBooleanPref(prefs::kDisable3DAPIs, false);
--  registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, true);
 +  registry->RegisterBooleanPref(prefs::kDisable3DAPIs, true);
-+  registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, false);
+   registry->RegisterBooleanPref(prefs::kEnableHyperlinkAuditing, false);
    // Register user prefs for mapping SitePerProcess and IsolateOrigins in
    // user policy in addition to the same named ones in Local State (which are
-   // used for mapping the command-line flags).