diff --git a/_posts/2025-12-12-november-in-servo.md b/_posts/2025-12-12-november-in-servo.md
new file mode 100644
index 000000000..e7c97e0b4
--- /dev/null
+++ b/_posts/2025-12-12-november-in-servo.md
@@ -0,0 +1,44 @@
+---
+layout:     post
+tags:       blog
+title:      "November in Servo: ???"
+date:       2025-12-12
+summary:    ao!! wrrrrao!!
+categories:
+---
+
+<style>
+    ._correction {
+        max-width: 33em;
+        margin: 1em auto;
+        border-bottom: 1px solid;
+        padding-bottom: 1em;
+    }
+    ._note {
+        margin: 1em 1em;
+        border-left: 1px solid;
+        padding-left: 1em;
+        opacity: 0.75;
+    }
+</style>
+
+<script>
+    (function makeVideoPlayersClickable() {
+        addEventListener("toggle", event => {
+            const details = event.target.closest("details");
+            if (!details?.open) {
+                return;
+            }
+            const video = details.querySelector("video");
+            if (!video) {
+                return;
+            }
+            if (video.fastSeek) {
+                video.fastSeek(0);
+            } else {
+                video.currentTime = 0;
+            }
+            video.play();
+        }, true);
+    })();
+</script>
diff --git a/commits.txt b/commits.txt
new file mode 100644
index 000000000..06ab41981
--- /dev/null
+++ b/commits.txt
@@ -0,0 +1,4818 @@
+>>> 2025-11-01T06:22:46Z
+-https://github.com/servo/servo/pull/40326	(@yerke, #40326)	devtools: move test for IdMap to a separate mod test (#40326)
+    # devtools: move test for IdMap to a separate mod test
+    # Testing: existing unit test still runs with mach test-unit.
+    # This change will reduce the amount of code that the compiler has to compile when we are not running tests.
+-https://github.com/servo/servo/pull/40325  (@yerke, #40325)    script: add CanGc as argument to VirtualMethods::children_changed (#40325)
+    # script: add CanGc as argument to VirtualMethods::children_changed
+    # Testing: These changes do not require tests because they are a refactor.
+    # Addresses part of https://github.com/servo/servo/issues/34573
+https://github.com/servo/servo/pull/40321	(@lumiscosity, #40321)	Properly provide architecture in useragent string (#40321)
+    # Uses `std::env::consts::ARCH` to accurately provide the target CPU architecture for the useragent string.
+    # Testing: Manual.
+    # Fixes: #12123
+https://github.com/servo/servo/pull/40310	(@lumiscosity, #40310)	script: fix defaults on formMethod getters on <input> and <button> (#40310)
+    # Fixes the getters for `formMethod` on `` and `` elements providing a missing value default when they shouldn't.
+    # Testing: 3 new passing tests in `html/dom/reflection-forms.html` and `/html/dom/reflection-forms-weekmonth.html`.
+    # Fixes: #8302. (`formEnctype` seems to have already been fixed since that issue was filed.)
+https://github.com/servo/servo/pull/40254	(@jdm, #40254)	script: Report target padding and desired sizes for ResizeObserver notifications (#40254)
+    # We were not following the specification for computing the values of the content rect. Additionally, any non-content-box
+    # observer would get confused because we never stored the correct size, leading to infinite notifications when the
+    # latest size didn't match the last observed size.
+    # Testing: Various tests now pass.
+    # Fixes: #32549
+    # Fixes: #40107
+-https://github.com/servo/servo/pull/40317	(@jschwe, #40317)	ci: Fix unit-test coverage (#40317)
+    # `linker-features` stabilized in rust 1.90, so using it with -Z causes ci to fail.
+    # lld is also the default on linux now, so we can just remove the feature.
+    # Testing: [Try run](https://github.com/servo/servo/actions/runs/18976287667)
+    # Fixes: #40313
+-https://github.com/servo/servo/pull/40318	(@lumiscosity, #40318)	servoshell: Fix typo in unrecognized debug option message (#40318)
+    # Changes "urnecognized" to "unrecognized".
+    # Testing: Not relevant.
+-https://github.com/servo/servo/pull/40311	(@jschwe, #40311)	installer: Change windows installation directory (#40311)
+    # Change the installation directory to Servo.
+    # This was discussed during the October TSC meeting
+    # and removes the outdated reference to mozilla research.
+    # Testing: Manually tested the windows installer
+    # Fixes: #40068
+https://github.com/servo/servo/pull/40309	(@mukilan, @mrobinson, #40309)	compositor: Make new frame notifications per Painter (#40309)
+    # Track the `PainterId` in the `RenderNotifier` and use it to ensure needs_repaint is set independently for each
+    # `Painter`. This allows us to post new frame notifications only to the painters that WebRender notified us about.
+    # Testing: Should be covered by existing tests.
++https://github.com/servo/servo/pull/40305	(@kkoyung, #40305)	script: Implement generate key operation of ECDH (#40305)
+    dom; crypto.subtle.generateKey("ECDH")
+    # Continue on adding ECDH support to WebCrypto API. This patch implements generate key operation of ECDH.
+    # Testing:
+    # - Pass some WPT tests that were expected to fail.
+    # - Some FAIL expectations are added. They require not-yet-implemented "derive bits" operation of ECDH. WPT skipped
+    # them when "generate key" operation for ECDH were not yet implemented.
+    # Fixes: Part of #39060
+https://github.com/servo/servo/pull/40303	(@yezhizhen, #40303)	servoshell: Implement `WebDriverCommandMsg::TakeScreenshot` for egl (#40303)
+    # Move the screenshot handler to `RunningAppStateBase` to be shared between egl and desktop. This enables
+    # screenshot/element screenshot capability for egl.
+    # Testing: Existing test. For egl, tested on Ohos.
+    # Fixes: Part of #40279
+https://github.com/servo/servo/pull/40302	(@mukilan, #40302)	compositor: use the `Painter` terminology in `RefreshDriver` traits (#40302)
+    # Also clean up the code and remove unnecesary borrow in the `Painter::render` method. This was missed during code
+    # review of #40264.
+    # Testing: No testing. This is just a small code cleanup.
+https://github.com/servo/servo/pull/40308	(@atbrakhi, #40308)	servoshell: Move `servoshell_preferences` to `RunningAppStateBase`  (#40308)
+    # There are several code duplicates in servoshell. In this PR, we extract `servoshell_preference` from the desktop
+    # and EGL implementations into a shared RunningAppStateBase trait. This eliminates duplicate code while maintaining
+    # the same functionality across all platforms.
+    # This is part of refactoring effort to consolidate shared code between desktop and EGL implementations.
+    # Testing: No functional changes. Existing tests should test this.
+https://github.com/servo/servo/pull/40307	(@mukilan, @mrobinson, #40307)	compositor: Rename `RenderingGroupId` to `PainterId` (#40307)
+    # And let the Compositor create the `PainterId` when it creates a new `Painter`. Also make inline formatting code take
+    # `LayoutContext` rather than threading it via the `InlineFormattingContextBuilder`.
+    # Testing: Should preserve existing behavior, so covered by existing tests.
++https://github.com/servo/servo/pull/40158	(@mrobinson, #40158)	pixels: Store decoded images as RGBA premultiplied data (#40158)
+    perf; faster animated GIF rendering
+    # Canvas expects input data to be in RGBA premultiplied format and
+    # WebRender already supports RGBA and BGRA data as long as they are
+    # premultiplied. Pre-multiplying up front allows:
+    # - Avoiding many conversions when painting images to canvas.
+    # - Passing the `RasterImage` IpcSharedMemory of the image instead of creating
+    #   a new one with the premultiplied data every time we upload to
+    #   WebRender. This is a big deal for animated gifs, because before every
+    #   frame was creating a new shared memory segment.
+    # It seems that for rasterized SVGs were were already putting
+    # premultplied data into the `RasterImage` so it's quite likely SVGs were
+    # being composited incorrectly.
+    # Testing: This causes 8 tests to start passing and 2 tests to fail in the WebGL conformance suite.
+    # The failures are due to the fact that premultiplying alpha is lossy when alpha is 0. In that case,
+    # the resulting color of a blend operation might be wrong. This is typically only a problem if you
+    # use RGBA data as RGB data, which is pretty unusual. In the case that you are blending with
+    # RGBA the final color values will be 0 or close to 0 anyway. Gecko solves this issue by having a
+    # cacheable surface generation API that can fetch both premulitplied and unpremulitplied data
+    # from things like image elements. We do not have that yet, but I argue that this change
+    # is important anyway due to the amount that it reduces memory and file descriptor usage
+    # as well as the cost of copying image data so much in memory.
++https://github.com/servo/servo/pull/39384	(@shubhamg13, @boluochoufeng, #39384)	Add support for LargestContentfulPaint PaintMetric (#39384)
+    perf; LCP measurement
+    # Steps for calculating LCP:
+    # 1. When the pref for `largest_contentful_paint_enabled` is enabled, `LargestContentfulPaintCandidateCollector`
+    # is created once per LayoutThread using `viewport_size`.
+    # 2. While building the `display_list`, it send the pre-calculated `clip_rect` and  `bounds` to   `LCPCollector`
+    # along with `transform` and `LCPCandidateType` for `visual_rect` calculation for `LCPCandidates`.
+    # 3. After `visual_rect` calculation, update the `lcp_candidate` based on `area` of `visual_rect` and send it to
+    # `compositor`.
+    # 4. Then among `lcp_candidates`, we find out the `largest_contentful_paint` and send it to `paint_metric`
+    # 5. In addition to above `LCP` also uses `PaintMetricState` to save console from spamming with duplicate entries.
+    # This PR includes following commits better segregation of code
+    # 1. Add `LargestContentfulPaintCandidate` struct
+    # 2. Add `LargestContentfulPaintCandidateCollector`
+    # 6. Collect the `LargestContentfulPaintCandidates`when feature is enabled.
+    # 7. Send the `LargestContentfulPaintCandidates` to compositor
+    # 8. Add `LargestContentfulPaintCalculator`
+    # 9. Calculates the `LargestContentfulPaint`
+    # 10. Send `LCP` to `PaintMetrics`
+    # 11. Disable `LCP` feature on user interaction
+    # Elements considered for LCP in this PR:
+    # - Image element
+    # - An element with background image
+    # Reference: https://github.com/servo/servo/pull/38041
+    # Testing: Tested using [perf-analysis-tools](https://github.com/servo/perf-analysis-tools) See attached screenshot.
+    # Fixes: None
+    # Perfetto
+    # Console Output of Metric
+https://github.com/servo/servo/pull/40128	(@aaron-wgd, #40128)	servoshell/desktop: Draw WebViews without using an egui::CentralPanel (#40128)
+    # Showing a CentralPanel causes egui to claim touch events over the WebView, making workarounds like that in [commit
+    # f182f74](https://github.com/servo/servo/commit/f182f748ab31e75e585c59681648739b3c77132a) necessary. Since we are
+    # only using the panel to determine the size of the WebView, we can also use ctx.available_rect() instead.
+    # The reason I looked into this is that I noticed servoshell very often (but not always) panicking when I end touch
+    # events on my linux/wayland. It was pretty clear that this was triggered by touch start events not being forwarded
+    # to compositing/touch.rs such that the end events acted on inconsistent state. This happened because egui claimed
+    # to consume the start events, just like for pinch zoom in commit f182f74.
+    # Extending the workaround to touch start events fixes my panics as well. But while I was at it, I looked
+    # into egui's code, where the decision to count all space as used by egui after adding a central panel happens
+    # [here](https://github.com/emilk/egui/blob/f6fa74c66578be17c1a2a80eb33b1704f17a3d5f/crates/egui/src/pass_state.rs#L360).
+    # It looks intentional - by adding a central panel, we are expressing our intention to let egui handle events not
+    # just in the side panels, but everywhere. I think this commit is therefore a cleaner way to handle this instead of
+    # extending the workaround - but I'm not certain and curious what y'all think!
+    # The fact that the commit title of f182f74 mentions macOS and that the panics on ending touch events were not noticed
+    # when pinch gestures were added makes me worry that there is some platform dependency here that I do not understand,
+    # so it would probably be best if someone on different platforms tested this as well.
+    # Finally, we were actually adding two central panels [in the previous
+    # code](https://github.com/servo/servo/blob/025abc855ef4f2225db4e2a28e5d29529dbf9894/ports/servoshell/desktop/minibrowser.
+    # rs#L453).
+    # I suspect that was unintentional, at least dialogs seem to work fine if I call `state.for_each_active_dialog(..)`
+    # outside of a panel.
+    # Testing: Tested manually on linux/wayland.
+    # Fixes: Intermittent panics on touch end events, see above.
++https://github.com/servo/servo/pull/40298	(@kkoyung, #40298)	script: Implement export key operation of ECDH (#40298)
+    dom; crypto.subtle.exportKey() for ECDH keys
+    # Continue on adding ECDH support to WebCrypto WPI. This patch implements export key operation of ECDH.
+    # Testing:
+    # - Pass some WPT tests that were expected to fail.
+    # - Some FAIL expectations are added. They require not-yet-implemented "derive bits" operation of ECDH. WPT skipped
+    # them when "export key" operation for ECDH were not yet implemented.
+    # Fixes: Part of #39060
+-https://github.com/servo/servo/pull/40300	(@kkoyung, #40300)	script: Remove unneeded unsafe code annotation (#40300)
+    # These two functions no longer use unsafe code. The annotation `#[allow(unsafe_code)]` can be removed.
+    # Testing: Refactoring. Existing tests suffice.
+>>> 2025-11-02T06:18:03Z
+-https://github.com/servo/servo/pull/40346	(@servo-wpt-sync, #40346)	Sync WPT with upstream (02-11-2025) (#40346)
+    # Automated downstream sync of changes from upstream as of 02-11-2025
+    # [no-wpt-sync]
+-https://github.com/servo/servo/pull/40345	(@sagudev, #40345)	CI: Add free disk space in docs workflow (#40345)
+    # Should fix docs workflow which currently fails because not enough space is left:
+    # https://github.com/servo/servo/actions/runs/18964865479
+    # run: https://github.com/servo/servo/actions/runs/18997885819
+-https://github.com/servo/servo/pull/40327	(@mukilan, #40327)	wpt: Have `ServoRefTestExecutor` inherit from `RefTestExecutor` (#40327)
+    # Since `ProcessTestExecutor` is only used by Servo and doesn't add much
+    # on top of `ServoExecutor`, merge the former into the latter.
+    # Also make `ServoExecutor` a mixin so that the derived classes can
+    # inherit from upstream `wptrunner`'s classes and avoid the diamond
+    # inheritance of `TestExecutor` base class.
+    # Another issue is that new changes in the
+    # `RefTestImplementation.get_screenshot_list` method upstream conflicts
+    # with the assumptions in Servo's executor:
+    #   - The `dpi` argument is used as an `int` although it is a string
+    #   - The `viewport_size` argument is treated as a tuple of ints but it is
+    #     in fact a string of the format `WxH`. It also treats the viewport
+    #     dimensions as being specified in device pixel coordinates while
+    #     Servo treats it as logical coordinates and will scale it by `dpi`.
+    # These issues need to discussed with upstream and patched in
+    # `RefTestImplementation`.
+    # Finally, add back `**kwargs` argument to `ServoCrashtestExecutor`'s
+    # constructor to fix #40322.
+    # Testing: Tested on fork with changes from upstream's base executor.
+    # Fixes #40288
+    # Fixes #40322
+-https://github.com/servo/servo/pull/40342	(@sagudev, #40342)	chore: Update mozjs to remove cargo_metadata (#40342)
+    # With https://github.com/servo/mozjs/pull/639 we use vendored icu_capi headers, thus we removed cargo_metadata. Offline
+    # builds should now work.
+    # Testing: Done in mozjs
+-https://github.com/servo/servo/pull/40315	(@atbrakhi, #40315)	servoshell: Move `servo` to `RunningAppStateBase` (#40315)
+    # There are several code duplicates in servoshell. In this PR, we extract `servo` from the desktop and EGL
+    # implementations into a shared `RunningAppStateBase` trait. This eliminates duplicate code while maintaining the
+    # same functionality across all platforms.
+    # This is part of refactoring effort to consolidate shared code between desktop and EGL implementations.
+    # Testing: No functional changes. Existing tests should test this.
+-https://github.com/servo/servo/pull/40330	(@yezhizhen, #40330)	servoshell: Move `webview_by_id` into `RunningAppStateTrait` (#40330)
+    # This reduces code duplication between egl and Desktop.
+    # Testing: No behaviour change. Just simplification.
+-https://github.com/servo/servo/pull/40337	(@mrobinson, #40337)	wpt: Remove annotations in `executorservo.py` (#40337)
+    # The upstream WPT runs with Python 3.8 which does not support type
+    # annotations. This is an attempt to get future changes to the file to
+    # merge successfully upstream.
+https://github.com/servo/servo/pull/40205	(@yerke, #40205)	layout: Show pointer cursor for submit input with text value (#40205)
+    # layout: Show pointer cursor for submit input with text value
+    # Before:
+    # After:
+    # Testing: tested manually, as [suggested](https://github.com/servo/servo/issues/9084#issuecomment-3257188850) by @jdm.
+    # Fixes: https://github.com/servo/servo/issues/9084
+-https://github.com/servo/servo/pull/40329  (@yerke, #40329)    script: add `CanGc` as argument to `VirtualMethods.post_connection_steps` (#40329)
+    # script: add `CanGc` as argument to `VirtualMethods.post_connection_steps`
+    # Testing: These changes do not require tests because they are a refactor.
+    # Addresses part of https://github.com/servo/servo/issues/34573
+-https://github.com/servo/servo/pull/40335	(@yerke, #40335)	script: move media interfaces to `script/dom/media` module (#40335)
+    # script: move media interfaces to `script/dom/media` module
+    # Testing: Just a refactor shouldn't need any testing
+    # Fixes: Partially https://github.com/servo/servo/issues/38901
+-https://github.com/servo/servo/pull/40332	(@yerke, #40332)	move unit tests to a separate mod test (#40332)
+    # move unit tests to a separate mod test
+    # Testing: existing unit test still runs with mach test-unit.
+    # This change will reduce the amount of code that the compiler has to compile when we are not running tests.
+-https://github.com/servo/servo/pull/40331	(@simonwuelker, #40331)	Turn all commented links before functions into doccomments (#40331)
+    # Servo has a lot of comments like this:
+    # ```rust
+    # // https://example-spec.com/#do-the-thing
+    # fn do_the_thing() {}
+    # ```
+    # and I keep turning these into doc comments whenever I'm working close to one of them. Doing so allows me to
+    # hover over a function call in an IDE and open its specification without having to jump to the function definition
+    # first. This change fixes all of these comments at once.
+    # This was done using `find components -name '*.rs' -exec perl -i -0777 -pe 's|^([ \t]*)// (https?://.*)\n\1(fn
+    # )|\1/// \n\1$3|mg' {} +`.
+    # Note that these comments should be doc comments even within trait `impl` blocks, because rustdoc will use them as
+    # fallback documentation when the method definition on the trait does not have documentation.
+    # Testing: Comments only, no testing required
+    # Preparation for https://github.com/servo/servo/pull/39552
+>>> 2025-11-03T06:08:32Z
+-https://github.com/servo/servo/pull/40364	(@yezhizhen, #40364)	deps: Update tungstenite-related group (#40364)
+    # tungstenite: 0.27->0.28
+    # async-tungstenite: 0.31->0.32
+    # Fixes: #40359
+-https://github.com/servo/servo/pull/40361	(@dependabot[bot], @dependabot[bot], #40361)	build(deps): bump webpki-roots from 1.0.3 to 1.0.4 (#40361)
+    # Bumps [webpki-roots](https://github.com/rustls/webpki-roots) from 1.0.3 to 1.0.4.
+    # Release notes
+    # Sourced from webpki-roots's releases.
+    # 1.0.4
+    # CommScope removal
+    # https://bugzilla.mozilla.org/show_bug.cgi?id=1994866 tracks the voluntary removal of:
+    # CommScope Public Trust ECC Root-01
+    # CommScope Public Trust ECC Root-02
+    # CommScope Public Trust RSA Root-01
+    # CommScope Public Trust RSA Root-02
+    # What's Changed
+    # 1.0.4: track removal of CommScope by @​ctz in rustls/webpki-roots#109
+    # Full Changelog: https://github.com/rustls/webpki-roots/compare/v/1.0.3...v/1.0.4
+    # Commits
+    # 28ead9c 1.0.4: track removal of CommScope
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpki-roots&package-manager=c
+    # argo&previous-version=1.0.3&new-version=1.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/abou
+    # t-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40360	(@dependabot[bot], @dependabot[bot], #40360)	build(deps): bump ordered-float from 4.6.0 to 5.0.0 (#40360)
+    # Bumps [ordered-float](https://github.com/reem/rust-ordered-float) from 4.6.0 to 5.0.0.
+    # Release notes
+    # Sourced from ordered-float's releases.
+    # v5.0.0
+    # What's Changed
+    # Breaking change: Implement Hash for f32 and f64 only by @​mbrubeck in reem/rust-ordered-float#168
+    # Breaking change: Remove implicit panics in NotNan&lt;T&gt; x T operators by @​Ten0 in reem/rust-ordered-float#167
+    # Full Changelog: https://github.com/reem/rust-ordered-float/compare/v4.6.0...v5.0.0
+    # Commits
+    # 478e67d Version 5.0.0
+    # 5c8edf3 Implement Hash for f32 and f64 only.
+    # 428ab8c Merge pull request #167 from Ten0/less_implicit_panic_on_binary_operations
+    # 86f0b79 Adapt tests
+    # 8ff0bb1 Re-add NotNan x PossiblyNan operations (now returning PossiblyNan)
+    # f9fd9a7 Remove evil impls
+    # facb424 Increase rust-version to 1.63
+    # 1740c93 Add libm-only tests to CI
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ordered-float&package-manager=
+    # cargo&previous-version=4.6.0&new-version=5.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/abo
+    # ut-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40358	(@dependabot[bot], @dependabot[bot], #40358)	build(deps): bump the gstreamer-related group with 2 updates (#40358)
+    # Bumps the gstreamer-related group with 2 updates: gstreamer and gstreamer-video.
+    # Updates `gstreamer` from 0.24.2 to 0.24.3
+    # Updates `gstreamer-video` from 0.24.2 to 0.24.3
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
++https://github.com/servo/servo/pull/40271	(@lukewarlow, #40271)	script: Implement `ToggleEvent` and use for `<details>` element (#40271)
+    dom; toggle events on HTMLDetailsElement
+    # Implement ToggleEvent and use for details element
+    # Testing: Covered by existing WPTs
++https://github.com/servo/servo/pull/40328	(@mark-buer, #40328)	devtools: Expose cache status for requests in network monitor. (#40328)
+    devtools
+    # Expose cache status for requests in network monitor.
+    # Testing: Net tests pass. No existing test infrastructure for devtools, adding them seems outside the scope of this PR.
+    # Fixes: #40237
+https://github.com/servo/servo/pull/40286	(@lukewarlow, #40286)	Update Attr::SetValue to match updated spec (#40286)
+    # Update Attr::SetValue to match updated spec
+    # We no longer early return if the attributes owner changes after the Trusted Types callback runs.
+    # Testing: https://wpt.live/trusted-types/set-attributes-mutations-in-callback.tentative.html - not sure how to
+    # import the test change?
+-https://github.com/servo/servo/pull/40353	(@jdm, #40353)	script: Trigger rendering update for skipped resize observations. (#40353)
+    # When resize observations are skipped, they get delayed until the next turn of the event loop. In headless tests,
+    # we're not guaranteed that this next turn occurs in time, unless some other event happens to run. This leads to
+    # intermittent results unless we ensure that the event loop will run again.
+    # Testing: Newly passing test.
+    # Fixes: #33599
+-https://github.com/servo/servo/pull/40351	(@mrobinson, #40351)	wpt: Always run Servo tests in headless mode on WPT TaskCluster (#40351)
+    # This was done inside of the Servo executor, but we must do it manually
+    # now that the `--headless` and `--no-headless` command line arguments are
+    # processed properly.
+    # Testing: This is tested by the WPT CI.
+    # Fixes: #40350
+-https://github.com/servo/servo/pull/40349	(@mrobinson, #40349)	wpt: Turn on `selectFiles` and handle asynchronicity in FileAPI test (#40349)
+    # This change fixes the Servo-specific FileAPI tests which need the
+    # special `SelectFiles` API. In addition, file selection is now totally
+    # asynchronous, so update the tests to handle this.
+    # Testing: This change fixes some tests.
+    # Fixes: #40348.
+>>> 2025-11-07T06:18:32Z
++https://github.com/servo/servo/pull/39714	(@shubhamg13, #39714)	Add basic `IDL` implementation for `LargestContentfulPaint` (#39714)
+    perf; `observe({type: "largest-contentful-paint"})` on PerformanceObserver
+    # Add basic `IDL` implementation for `LargestContentfulPaint`
+    # Testing: Tested locally
+    # Fixes: N/A
++https://github.com/servo/servo/pull/40463	(@WaterWhisperer, #40463)	script: Add message to IndexSizeError (#40463)
+    dom; exception messages
+    # Adding an optional message to be attached to a IndexSizeError.
+    # The enum definition of IndexSize is now `IndexSize(Option)`. Future PRs should probably add more appropriate
+    # messages to some of the `IndexSize(None)`s.
+    # Testing: Just a refactor
+    # Fixes: Partially #39053
+-https://github.com/servo/servo/pull/40470	(@dependabot[bot], @dependabot[bot], #40470)	build(deps): bump quote from 1.0.41 to 1.0.42 (#40470)
+    # Bumps [quote](https://github.com/dtolnay/quote) from 1.0.41 to 1.0.42.
+    # Release notes
+    # Sourced from quote's releases.
+    # 1.0.42
+    # Tweaks to improve build speed (#305, #306, #307, #308, thanks @​dishmaker)
+    # Commits
+    # bb9e7a4 Release 1.0.42
+    # 683c1d6 Merge pull request #311 from dtolnay/append
+    # ed93e8e Revert PR 305
+    # 1f2a959 Merge pull request #310 from dtolnay/up
+    # 37448aa Raise required compiler to Rust 1.68
+    # 39ac89e Resolve manual_let_else pedantic clippy lint
+    # f3eac36 Raise required compiler to Rust 1.65
+    # 7b490c5 Merge pull request #309 from dtolnay/append
+    # 71dfa84 Apply pattern from PR 306 to append_separated &amp; append_terminated
+    # df32af7 Touch up PR 306
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=quote&package-manager=cargo&pr
+    # evious-version=1.0.41&new-version=1.0.42)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dep
+    # endabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+https://github.com/servo/servo/pull/40462	(@Taym95, #40462)	WebGLBuffer: follow spec for buffer binding restrictions (#40462)
+    # WebGLBuffer: follow spec for buffer binding restrictions
+    # Testing: more WebGLBuffer pass
+-https://github.com/servo/servo/pull/40468	(@jschwe, #40468)	ci: Fix ohos libservoshell.so artifact path (#40468)
+    # cargo places the shared library artifact under
+    # `target///libservoshell.so`. The openharmony prefix, is something we do in mach for the hap, and is not relevant
+    # for the .so (essentially a copy-paste mistake).
+    # Can be compared by looking at the job run of
+    # https://github.com/servo/servo/actions/runs/19125758002/job/54655560361 which failed due to the wrong path.
+    # Testing: Not tested
+    # Fixes: #40467
+-https://github.com/servo/servo/pull/40464	(@Narfinger, #40464)	Script: Do not double copy for javascript source (#40464)
+    # Previously, `evaluate_js_on_global_with_result` took a &str and most cases
+    # of it being called are owned strings. As it itself converts it to a
+    # DOMString which owns the string it double copied it.
+    # We now use Cow as input making both sides happy.
+    # Testing: Does not change functionality.
+-https://github.com/servo/servo/pull/40461	(@mrobinson, #40461)	net: Simplify `FetchResponseListener` and move it to `script` (#40461)
+    # `FetchReponseListener` has traditionally lived in `net` even though it
+    # is only used in `script` currently. Because of the two way dependency,
+    # it has also use a lot of templating to implement something pretty basic
+    # (call methods on a trait object).
+    # This change moves the trait to `script` and removes several levels of
+    # templating, making the code quite a bit shorter and easier to
+    # understand.
+    # This change is preparation for fixing #22550 and implementing
+    # off-the-main-thread CSS parsing.
+    # Testing: This should not change any behavior so is covered by existing tests.
+-https://github.com/servo/servo/pull/40453	(@mrobinson, @mukilan, #40453)	net: Use callbacks instead of IPC channels in the `ImageCache` API (#40453)
+    # Previously, the `ImageCache` would inform consumers of changes to image
+    # availability by messaging an IPC channel. This isn't great, because it
+    # requires serialization and deserialization. Nowadays, `ImageCache`s are
+    # always owned by the same `Global` that uses them. This change replaces
+    # the IPC channel with callback that implements `Send`.
+    # For the case of normal HTML document images, the results are still sent
+    # over the pre-existing Crossbeam channel that was connected via an IPC
+    # route. A followup change might eliminate that channel entirely.
+    # Testing: This should not change observable behavior so is covered by existing tests.
+    # Fixes: #24338.
+-https://github.com/servo/servo/pull/40430	(@atbrakhi, #40430)	libservo: Fix panic in `Reload` of `ContextMenuAction` (#40430)
+    # Right now when the Reload action is selected from a right-click context menu, Servo would
+    # panic. Context menu's Reload action was calling `Location.Reload()`, which caused the panic. As per [HTML
+    # spec](https://html.spec.whatwg.org/multipage/#dom-location-reload) it looks like, to perform a user-requested
+    # reload we should be using `reload_without_origin_check()` instead.
+    # Testing: Added a test for `ContextMenuAction::Relaod` action.
+-https://github.com/servo/servo/pull/40458	(@WaterWhisperer, #40458)	Change some `#[allow]`s to `#[expect]`s (#40458)
+    # Removes some unneeded lints.
+    # Testing: Refactor
+    # Part of: #40383
+https://github.com/servo/servo/pull/40451	(@simonwuelker, #40451)	xpath: Enforce tree order in node sets during evaluation (#40451)
+    # This change adds `NodeSet`, which is more or less a `Vec` that knows whether it is sorted, and can sort itself if
+    # it isn't. This allows us to efficiently enforce tree order in intermediary node sets that occur during evaluation.
+    # Notably, in many cases it is not necessary to sort at all, because all location step expressions yield node
+    # sets that are either already sorted (`Axis::DescendantOrSelf` for example), or that are in inverse tree order
+    # (`Axis::PrecedingSiblings` for example).
+    # There's still optimization work left to be done. When merging two node sets that are already sorted then we could
+    # use merge sort instead of appending one to the other and naively sorting. But I suspect that the sorting algorithm
+    # used by the standard library is already well tuned to handle such cases...
+    # Testing: This change adds a web platform test
+    # Fixes https://github.com/servo/servo/issues/40435
+https://github.com/servo/servo/pull/40436	(@Taym95, #40436)	script: Properly handle foreign contexts in `Context2D`'s `isSync` and `isTransformFeedback` (#40436)
+    # CanvasContext: follow spec for isSync and isTransformFeedback
+    # Testing: more CanvasContext test will pass.
+-https://github.com/servo/servo/pull/40454	(@WaterWhisperer, #40454)	script/dom/: Change some `#[allow]`s to `#[expect]`s (#40454)
+    # Removes some unneeded lints, especially `#[allow(unsafe_code)]`.
+    # Testing: Refactor
+    # Part of: #40383
+https://github.com/servo/servo/pull/40235	(@delan, #40235)	ci: Move runner-select and runner-timeout to servo/ci-runners (#40235)
+    # continuing from #40234, this patch moves the runner-select and runner-timeout composite actions to
+    # [servo/ci-runners](https://github.com/servo/ci-runners), avoiding an extra checkout step. the action calls are
+    # locked to a commit, to avoid problems when making breaking changes.
+    # while [servo/actions](https://github.com/servo/actions) is a reasonable place to store this action,
+    # i’m planning to document our self-hosted CI system and potentially make it usable by other projects,
+    # and this action is effectively part of that system. that said, actions in that repo will undergo
+    # [review](https://github.com/servo/ci-runners/commit/00deefd2be1ce9f8bb065157f42b37cba04780da)
+    # as if they were in this repo. feel free to check the actions being adopted in this patch:
+    # [runner-select](https://github.com/servo/ci-runners/blob/0b9edd49381b22c14e5b123f21377269864ddf54/actions/runner-select/
+    # action.yml),
+    # [runner-timeout](https://github.com/servo/ci-runners/blob/0b9edd49381b22c14e5b123f21377269864ddf54/actions/runner-timeou
+    # t/action.yml).
+    # Testing:
+    # - GitHub-hosted: [full](https://github.com/delan/servo/actions/runs/19126025419),
+    # [coverage](https://github.com/delan/servo/actions/runs/19126126210/job/54656556991)
+    # - self-hosted: [full](https://github.com/servo/servo/actions/runs/19126029083),
+    # [coverage](https://github.com/servo/servo/actions/runs/19126130030/job/54656604357)
+https://github.com/servo/servo/pull/40449	(@mrobinson, #40449)	script: Also set the `Theme` on incomplete loads (#40449)
+    # When updating the theme, ensure that it is also set on incomplete loads.
+    # This is particularly necessary to make it so that a non-Light theme is
+    # used when it is set before the page loads.
+    # Testing: This adds a new WebView API test.
+    # Fixes: #40437.
+https://github.com/servo/servo/pull/40429	(@mrobinson, @mukilan, #40429)	script: Handle broken image icon in `HTMLImageElement` (#40429)
+    # Instead of having the `ImageCache` return the broken image icon for
+    # failed loads, have `HTMLImageElement` explicitly request it. This means
+    # that the image is loaded on demand (reducing the usage of resources) and
+    # also simplifying the interface of the `ImageCache` greatly.
+    # In addition, the display of the broken image icon is improved, more
+    # closely matching other browsers. A test for this display (which was
+    # falsely passing before) is updated to reflect the new display of the
+    # broken image icon.
+    # Testing: There is a Servo-specific test for this change. Some WPT tests
+    # start to fail as well. Before these were not properly loading the broken
+    # image icon so they were failing before, just in a hidden way.
+-https://github.com/servo/servo/pull/40450	(@yezhizhen, #40450)	webdriver: Allow dummy sessionId for `ServoExtensionCommand::Shutdown` (#40450)
+    # ...This is unavoidable, unless we have our own fork of [webdriver crate](https://crates.io/crates/webdriver). Right
+    # now it does not allow any self-defined command to run without sessionId. See
+    # [this](https://hg-edge.mozilla.org/mozilla-central/file/tip/testing/webdriver/src/server.rs#l84). There is also no
+    # way to override [Dispatcher](https://hg-edge.mozilla.org/mozilla-central/file/tip/testing/webdriver/src/server.rs#l65).
+    # A follow up PR which changes wptrunner to gracefully shutdown servo without killing depends on this.
+-https://github.com/servo/servo/pull/40445	(@yezhizhen, #40445)	webdriver: Remove session requirement from Shutdown command (#40445)
+    # Change API endpoint from "/session/{sessionId}/servo/shutdown" to "/servo/shutdown", similar to [Status
+    # command](https://w3c.github.io/webdriver/#dfn-status).
+    # This will make it much easier to shutdown Servo properly from wptrunner.
+https://github.com/servo/servo/pull/40234	(@delan, #40234)	ci: Extract fast checkout steps into composite action (#40234)
+    # this patch extracts the “faster checkout” steps we use for jobs that may run on self-hosted runners into a
+    # composite action. the action is stored in [servo/ci-runners](https://github.com/servo/ci-runners), to avoid an
+    # extra checkout step, and the action calls are locked to a commit, to avoid problems when making breaking changes.
+    # while [servo/actions](https://github.com/servo/actions) is a reasonable place to store this action,
+    # i’m planning to document our self-hosted CI system and potentially make it usable by other projects,
+    # and this action is effectively part of that system. that said, actions in that repo will undergo
+    # [review](https://github.com/servo/ci-runners/commit/00deefd2be1ce9f8bb065157f42b37cba04780da) as if they were in
+    # this repo.
+    # Testing:
+    # - self-hosted: [windows](https://github.com/servo/servo/actions/runs/19125076579/job/54653625055#step:2:25),
+    # [lint](https://github.com/servo/servo/actions/runs/19125076579/job/54653630737#step:2:21)
+    # - GitHub-hosted: [windows](https://github.com/delan/servo/actions/runs/19125003933/job/54653410264#step:2:25),
+    # [lint](https://github.com/delan/servo/actions/runs/19125003933/job/54653410010#step:2:21)
+-https://github.com/servo/servo/pull/40439	(@dependabot[bot], @dependabot[bot], #40439)	build(deps): bump the servo-media-related group with 12 updates (#40439)
+    # Bumps the servo-media-related group with 12 updates:
+    # | Package | From | To |
+    # | --- | --- | --- |
+    # | [servo-media](https://github.com/servo/media) | ``a644ff6`` | ``5b788a9`` |
+    # | [servo-media-dummy](https://github.com/servo/media) | ``a644ff6`` | ``5b788a9`` |
+    # | [servo-media-gstreamer](https://github.com/servo/media) | ``a644ff6`` | ``5b788a9`` |
+    # | servo-media-audio | ``a644ff6`` | ``5b788a9`` |
+    # | servo-media-derive | ``a644ff6`` | ``5b788a9`` |
+    # | servo-media-gstreamer-render | ``a644ff6`` | ``5b788a9`` |
+    # | servo-media-gstreamer-render-android | ``a644ff6`` | ``5b788a9`` |
+    # | servo-media-gstreamer-render-unix | ``a644ff6`` | ``5b788a9`` |
+    # | servo-media-player | ``a644ff6`` | ``5b788a9`` |
+    # | servo-media-streams | ``a644ff6`` | ``5b788a9`` |
+    # | servo-media-traits | ``a644ff6`` | ``5b788a9`` |
+    # | servo-media-webrtc | ``a644ff6`` | ``5b788a9`` |
+    # Updates `servo-media` from `a644ff6` to `5b788a9`
+    # Commits
+    # 5b788a9 Apply servo style rust formatting (#459)
+    # See full diff in compare view
+    # Updates `servo-media-dummy` from `a644ff6` to `5b788a9`
+    # Commits
+    # 5b788a9 Apply servo style rust formatting (#459)
+    # See full diff in compare view
+    # Updates `servo-media-gstreamer` from `a644ff6` to `5b788a9`
+    # Commits
+    # 5b788a9 Apply servo style rust formatting (#459)
+    # See full diff in compare view
+    # Updates `servo-media-audio` from `a644ff6` to `5b788a9`
+    # Updates `servo-media-derive` from `a644ff6` to `5b788a9`
+    # Updates `servo-media-gstreamer-render` from `a644ff6` to `5b788a9`
+    # Updates `servo-media-gstreamer-render-android` from `a644ff6` to `5b788a9`
+    # Updates `servo-media-gstreamer-render-unix` from `a644ff6` to `5b788a9`
+    # Updates `servo-media-player` from `a644ff6` to `5b788a9`
+    # Updates `servo-media-streams` from `a644ff6` to `5b788a9`
+    # Updates `servo-media-traits` from `a644ff6` to `5b788a9`
+    # Updates `servo-media-webrtc` from `a644ff6` to `5b788a9`
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40443	(@dependabot[bot], @dependabot[bot], #40443)	build(deps): bump orbclient from 0.3.48 to 0.3.49 (#40443)
+    # Bumps orbclient from 0.3.48 to 0.3.49.
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=orbclient&package-manager=carg
+    # o&previous-version=0.3.48&new-version=0.3.49)](https://docs.github.com/en/github/managing-security-vulnerabilities/about
+    # -dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40442	(@dependabot[bot], @dependabot[bot], #40442)	build(deps): bump syn from 2.0.108 to 2.0.109 (#40442)
+    # Bumps [syn](https://github.com/dtolnay/syn) from 2.0.108 to 2.0.109.
+    # Release notes
+    # Sourced from syn's releases.
+    # 2.0.109
+    # Tweaks to improve build speed (#1927, #1928, #1930, #1932, #1934, thanks @​dishmaker)
+    # Commits
+    # 085e597 Release 2.0.109
+    # 675c845 Disable rustdoc's automatic selection of cfg markers
+    # 8d87f3b Import Spacing for all of tt module
+    # 46104b3 Touch up PR 1930
+    # f6e1310 Merge pull request #1930 from dishmaker/dishmaker/tokenstream_collect_cmp
+    # 1893ecd Touch up PR 1933
+    # f365a65 Merge pull request #1933 from dishmaker/dishmaker/perf_fold_vec
+    # b25abd1 Merge pull request #1934 from dishmaker/dishmaker/perf_llvml_punct_into_iter
+    # b62dc57 Consolidate on iter::once for pushing TokenTree into TokenStream
+    # 1535d5d Resolve explicit_into_iter_loop clippy lint from PR 1932
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=syn&package-manager=cargo&prev
+    # ious-version=2.0.108&new-version=2.0.109)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dep
+    # endabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40438	(@dependabot[bot], @dependabot[bot], #40438)	build(deps): bump the napi-ohos-related group with 5 updates (#40438)
+    # Bumps the napi-ohos-related group with 5 updates:
+    # | Package | From | To |
+    # | --- | --- | --- |
+    # | [napi-derive-ohos](https://github.com/ohos-rs/ohos-rs) | `1.1.3` | `1.1.4` |
+    # | [napi-ohos](https://github.com/ohos-rs/ohos-rs) | `1.1.3` | `1.1.4` |
+    # | [napi-build-ohos](https://github.com/ohos-rs/ohos-rs) | `1.1.3` | `1.1.4` |
+    # | [napi-derive-backend-ohos](https://github.com/ohos-rs/ohos-rs) | `1.1.3` | `1.1.4` |
+    # | [napi-sys-ohos](https://github.com/ohos-rs/ohos-rs) | `1.1.3` | `1.1.4` |
+    # Updates `napi-derive-ohos` from 1.1.3 to 1.1.4
+    # Commits
+    # 45a39d0 Merge pull request #158 from ohos-rs/feat-1105
+    # f998bc9 Bump version
+    # 3e48db5 Merge branch 'main' into feat-1105
+    # 31bde7a chore(napi): mark tsfn data as pub and split SendableResolver to indent file ...
+    # edd419a chore(deps): lock file maintenance (#2989)
+    # 8173c22 chore(deps): update dependency @​rollup/plugin-commonjs to v29 (#2983)
+    # bfc3cae ci: change armv7-lts to armv7-22 (#2984)
+    # a62b9f2 chore(deps): update dependency @​rollup/plugin-alias to v6 (#2982)
+    # dd26253 chore(napi): mark SendableResolver and PromiseRaw as pub (#2981)
+    # e2a4ee6 chore(deps): update dependency electron to v39 (#2979)
+    # Additional commits viewable in compare view
+    # Updates `napi-ohos` from 1.1.3 to 1.1.4
+    # Commits
+    # 45a39d0 Merge pull request #158 from ohos-rs/feat-1105
+    # f998bc9 Bump version
+    # 3e48db5 Merge branch 'main' into feat-1105
+    # 31bde7a chore(napi): mark tsfn data as pub and split SendableResolver to indent file ...
+    # edd419a chore(deps): lock file maintenance (#2989)
+    # 8173c22 chore(deps): update dependency @​rollup/plugin-commonjs to v29 (#2983)
+    # bfc3cae ci: change armv7-lts to armv7-22 (#2984)
+    # a62b9f2 chore(deps): update dependency @​rollup/plugin-alias to v6 (#2982)
+    # dd26253 chore(napi): mark SendableResolver and PromiseRaw as pub (#2981)
+    # e2a4ee6 chore(deps): update dependency electron to v39 (#2979)
+    # Additional commits viewable in compare view
+    # Updates `napi-build-ohos` from 1.1.3 to 1.1.4
+    # Release notes
+    # Sourced from napi-build-ohos's releases.
+    # ohrs@1.1.4
+    # What's Changed
+    # fix(cli): skip-check by default by @​richerfu in ohos-rs/ohos-rs#156
+    # Sync by @​richerfu in ohos-rs/ohos-rs#158
+    # Full Changelog: https://github.com/ohos-rs/ohos-rs/compare/ohrs@1.1.3...ohrs@1.1.4
+    # Commits
+    # 45a39d0 Merge pull request #158 from ohos-rs/feat-1105
+    # f998bc9 Bump version
+    # 3e48db5 Merge branch 'main' into feat-1105
+    # 31bde7a chore(napi): mark tsfn data as pub and split SendableResolver to indent file ...
+    # edd419a chore(deps): lock file maintenance (#2989)
+    # 8173c22 chore(deps): update dependency @​rollup/plugin-commonjs to v29 (#2983)
+    # bfc3cae ci: change armv7-lts to armv7-22 (#2984)
+    # a62b9f2 chore(deps): update dependency @​rollup/plugin-alias to v6 (#2982)
+    # dd26253 chore(napi): mark SendableResolver and PromiseRaw as pub (#2981)
+    # e2a4ee6 chore(deps): update dependency electron to v39 (#2979)
+    # Additional commits viewable in compare view
+    # Updates `napi-derive-backend-ohos` from 1.1.3 to 1.1.4
+    # Commits
+    # 45a39d0 Merge pull request #158 from ohos-rs/feat-1105
+    # f998bc9 Bump version
+    # 3e48db5 Merge branch 'main' into feat-1105
+    # 31bde7a chore(napi): mark tsfn data as pub and split SendableResolver to indent file ...
+    # edd419a chore(deps): lock file maintenance (#2989)
+    # 8173c22 chore(deps): update dependency @​rollup/plugin-commonjs to v29 (#2983)
+    # bfc3cae ci: change armv7-lts to armv7-22 (#2984)
+    # a62b9f2 chore(deps): update dependency @​rollup/plugin-alias to v6 (#2982)
+    # dd26253 chore(napi): mark SendableResolver and PromiseRaw as pub (#2981)
+    # e2a4ee6 chore(deps): update dependency electron to v39 (#2979)
+    # Additional commits viewable in compare view
+    # Updates `napi-sys-ohos` from 1.1.3 to 1.1.4
+    # Release notes
+    # Sourced from napi-sys-ohos's releases.
+    # ohrs@1.1.4
+    # What's Changed
+    # fix(cli): skip-check by default by @​richerfu in ohos-rs/ohos-rs#156
+    # Sync by @​richerfu in ohos-rs/ohos-rs#158
+    # Full Changelog: https://github.com/ohos-rs/ohos-rs/compare/ohrs@1.1.3...ohrs@1.1.4
+    # Commits
+    # 45a39d0 Merge pull request #158 from ohos-rs/feat-1105
+    # f998bc9 Bump version
+    # 3e48db5 Merge branch 'main' into feat-1105
+    # 31bde7a chore(napi): mark tsfn data as pub and split SendableResolver to indent file ...
+    # edd419a chore(deps): lock file maintenance (#2989)
+    # 8173c22 chore(deps): update dependency @​rollup/plugin-commonjs to v29 (#2983)
+    # bfc3cae ci: change armv7-lts to armv7-22 (#2984)
+    # a62b9f2 chore(deps): update dependency @​rollup/plugin-alias to v6 (#2982)
+    # dd26253 chore(napi): mark SendableResolver and PromiseRaw as pub (#2981)
+    # e2a4ee6 chore(deps): update dependency electron to v39 (#2979)
+    # Additional commits viewable in compare view
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+https://github.com/servo/servo/pull/40428	(@eerii, #40428)	tools: Use ISO8601 timestamps and filter ports correctly in the Devtools parser (#40428)
+    # A recent change in tshark makes it emit timestamps in ISO 8601 format
+    # (https://gitlab.com/wireshark/wireshark/-/merge_requests/17273), which breaks the existing parser. Simplify the
+    # code to simply print the new timestamp as is.
+    # The captured messages were not being filtered correctly by the devtools port, which could result in messy logs. The
+    # `-f "tcp port ..."` option filters the port, while `-d "tcp.port==...,http"` just specifies how the messages from
+    # that port should be treated.
+    # Simplify the tshark command function and some variable names.
+    # Testing: Using `mach test-scripts`.
+https://github.com/servo/servo/pull/40432	(@mrobinson, #40432)	script: Eagerly update the `Device` in Layout when it changes (#40432)
+    # Instead of waiting for a reflow to update the `Device` in layout, update
+    # it eagerly. This ensures that media queries can be answered correctly in
+    # script before the next reflow. Also, it ensure that a new reflow is
+    # triggered and reflects the change to the theme or viewport.
+    # In addition, an unused viewport-related message from the Constellation
+    # is removed. This would have needed to be updated by change, but since
+    # it's unused I've just removed it.
+    # This depends on https://github.com/servo/stylo/pull/260.
+    # Testing: This fixes a WebView API test and improves
+    #  `/html/semantics/embedded-content/the-img-element/environment-changes/viewport-change.html`.
+    # Fixes: #40395.
+    # Fixes: #40129.
+https://github.com/servo/servo/pull/40431	(@Taym95, #40431)	script: Error if `program` in `TransformFeedbackVaryings` and `GetTransformFeedbackVarying` is from another context (#40431)
+    # Follow spec for TransformFeedbackVaryings GetTransformFeedbackVarying
+    # Testing: more webgl tests pass
++https://github.com/servo/servo/pull/40405	(@lukewarlow, #40405)	Partially implement dialog.showModal() (#40405)
+    dom; check how partial is partial
+    # Partially implement dialog.showModal()
+    # Follow-ups will be needed to further implement proper dialog functionality but this makes a good start.
+    # Testing: Existing WPTs cover this.
++https://github.com/servo/servo/pull/40304	(@WaterWhisperer, #40304)	script/layout: Implement Element.currentCSSZoom attribute (#40304)
+    dom; currentCSSZoom property on Element
+    # Implements the `currentCSSZoom` readonly attribute on the Element interface as
+    # [spec](https://drafts.csswg.org/cssom-view/#dom-element-currentcsszoom).
+    # - Adds a new layout query (`CurrentCSSZoomQuery`) that traverses from the target element up through its ancestors
+    # - Accumulates the product of all `zoom` CSS property values to compute the effective zoom
+    # - Returns 1.0 for elements that are not being rendered (display: none or no layout data)
+    # Testing: Updated WPT (removed 4 FAIL expectations from `idlharness.html.ini`). Behavior tests in
+    # Element-currentCSSZoom.html remain as expected FAIL because the underlying CSS `zoom` property implementation in
+    # Servo does not yet apply zoom values to layout (the zoom property is parsed but computed values remain 1.0).
+    # Fixes: #40256
+-https://github.com/servo/servo/pull/40427	(@WaterWhisperer, #40427)	Disallow running `clippy` and `--use-crown` together (#40427)
+    # Prevent users from running `./mach clippy --use-crown` together, which doesn't work as expected.
+    # Testing: Verified error message appears when running `./mach clippy --use-crown`
+    # Fixes: #39334
+https://github.com/servo/servo/pull/40422	(@yezhizhen, #40422)	webdriver: Implement extension command `Shutdown` (#40422)
+    # We implement `ServoExtensionCommand::Shutdown`, which shutdown Servo elegantly. This is
+    # required for Coverage Report. Later, we will implement Servo's override of [`stop()` in
+    # `WebDriverBrowser`](https://github.com/servo/servo/blob/0d44ca8ddcea5399807abf0e3aef7b097133f679/tests/wpt/tests/tools/w
+    # ptrunner/wptrunner/browsers/base.py#L389).
+    # Testing: Manually tested with PowerShell script.
+https://github.com/servo/servo/pull/40316	(@tharkum, #40316)	html: Support releasing of <media> underlying resources and frames (#40316)
+    # The HTMLMediaElement should stop playback of any previously playing media resource on running media element loading
+    # algorithm or before attempt to load next source child.
+    # This step will reset media player (including release of the underlying media resources and media frames from the
+    # video renderer).
+    # The closure for marshalling the incoming GLPLayer messages from ROUTER ("router-proxy") thread to script thread
+    # will use `Weak` instead of `Trusted` to break circular references dependency (decouple ownership).
+    # The media frame renderer will track the media player id to be able ignore async locking render call with new frame
+    # after playback of any previously playing media was stopped.
+    # Testing: No WPT test expectation changes
+    # Fixes (partially): https://github.com/servo/servo/issues/40243
+    # Fixes (partially): https://github.com/servo/servo/issues/40265
+    # Fixes: https://github.com/servo/servo/issues/37173
++https://github.com/servo/servo/pull/40421	(@kkoyung, #40421)	script: Implement export key operation of X25519 (#40421)
+    dom; crypto.subtle.exportKey() for X25519 keys
+    # Continue on adding X25519 support to WebCrypto API. This patch implements export key operation of X25519, using
+    # X25519 implementation from the crate `x25519-dalek`.
+    # Testing:
+    # - Pass some WPT tests that were expected to fail.
+    # - Some FAIL expectations are added. They require derive_bits operations of X25519, and RSA-OAEP, which have not
+    # yet implemented.
+    # Fixes: Part of #39060
+-https://github.com/servo/servo/pull/40420	(@kkoyung, #40420)	script: Implement MallocSizeOf for (De)Compressor (#40420)
+    # Implement `MallocSizeOf` for the internal context of `CompressionStream` and `DecompressionStream`. This helps
+    # remove the `ignore_malloc_size_of` annotation in the structs `CompressionStream` and `DecompressionStream`
+    # Testing: Existing tests suffice.
++https://github.com/servo/servo/pull/40333	(@kkoyung, #40333)	script: Implement derive bits operation of ECDH (#40333)
+    dom; crypto.subtle.deriveBits("ECDH")
+    # Finish adding ECDH support to WebCrypto API. This patch implements derive bits operation of ECDH.
+    # Testing: Pass some WPT tests that were expected to fail.
+    # Fixes: Part of #39060
+-https://github.com/servo/servo/pull/40415	(@dependabot[bot], @dependabot[bot], #40415)	build(deps): bump rustls from 0.23.34 to 0.23.35 (#40415)
+    # Bumps [rustls](https://github.com/rustls/rustls) from 0.23.34 to 0.23.35.
+    # Commits
+    # 7768cd2 Bump version to 0.23.35
+    # 6ed925e Address nightly clippy::derivable_impls lints
+    # 645095f Pass through attributes for enum_builder!
+    # 90e28d6 fix: only add ocsp in ConfigBuilder::with_single_cert_with_ocsp if
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls&package-manager=cargo&p
+    # revious-version=0.23.34&new-version=0.23.35)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-
+    # dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
++https://github.com/servo/servo/pull/40408	(@mrobinson, #40408)	libservo: Add a fallback clipboard (#40408)
+    api
+    # Add a fallback implementation of the default clipboard delegate that
+    # works within a single Servo process. This introduces one failure, which
+    # was hidden before.
+    # Testing: This fixes some WPT tests.
+https://github.com/servo/servo/pull/40400	(@mrobinson, #40400)	layout: Have ServoRestyleDamage immediately update flags on `LayoutImpl` (#40400)
+    # Instead of passing a `damage` variable around during a single layout, have the
+    # damage update flags immediately on the `LayoutImpl`. This ensure that
+    # damage from a restyle are not lost event when a layout query doesn't
+    # need a display list or stacking context tree. In addition, it makes it
+    # so that this is handled consistently across all different kinds of
+    # layout (from queries or for display lists).
+    # Testing: This should fix the test case from #40367.
+    # Fixes: #40367.
+-https://github.com/servo/servo/pull/40414	(@dependabot[bot], @dependabot[bot], #40414)	build(deps): bump the servo-media-related group with 12 updates (#40414)
+    # Bumps the servo-media-related group with 12 updates:
+    # | Package | From | To |
+    # | --- | --- | --- |
+    # | [servo-media](https://github.com/servo/media) | ``29446c7`` | ``a644ff6`` |
+    # | [servo-media-dummy](https://github.com/servo/media) | ``29446c7`` | ``a644ff6`` |
+    # | [servo-media-gstreamer](https://github.com/servo/media) | ``29446c7`` | ``a644ff6`` |
+    # | servo-media-audio | ``29446c7`` | ``a644ff6`` |
+    # | servo-media-derive | ``29446c7`` | ``a644ff6`` |
+    # | servo-media-gstreamer-render | ``29446c7`` | ``a644ff6`` |
+    # | servo-media-gstreamer-render-android | ``29446c7`` | ``a644ff6`` |
+    # | servo-media-gstreamer-render-unix | ``29446c7`` | ``a644ff6`` |
+    # | servo-media-player | ``29446c7`` | ``a644ff6`` |
+    # | servo-media-streams | ``29446c7`` | ``a644ff6`` |
+    # | servo-media-traits | ``29446c7`` | ``a644ff6`` |
+    # | servo-media-webrtc | ``29446c7`` | ``a644ff6`` |
+    # Updates `servo-media` from `29446c7` to `a644ff6`
+    # Commits
+    # a644ff6 gstreamer: Use weak ptr to renderer in sink callbacks (#457)
+    # See full diff in compare view
+    # Updates `servo-media-dummy` from `29446c7` to `a644ff6`
+    # Commits
+    # a644ff6 gstreamer: Use weak ptr to renderer in sink callbacks (#457)
+    # See full diff in compare view
+    # Updates `servo-media-gstreamer` from `29446c7` to `a644ff6`
+    # Commits
+    # a644ff6 gstreamer: Use weak ptr to renderer in sink callbacks (#457)
+    # See full diff in compare view
+    # Updates `servo-media-audio` from `29446c7` to `a644ff6`
+    # Updates `servo-media-derive` from `29446c7` to `a644ff6`
+    # Updates `servo-media-gstreamer-render` from `29446c7` to `a644ff6`
+    # Updates `servo-media-gstreamer-render-android` from `29446c7` to `a644ff6`
+    # Updates `servo-media-gstreamer-render-unix` from `29446c7` to `a644ff6`
+    # Updates `servo-media-player` from `29446c7` to `a644ff6`
+    # Updates `servo-media-streams` from `29446c7` to `a644ff6`
+    # Updates `servo-media-traits` from `29446c7` to `a644ff6`
+    # Updates `servo-media-webrtc` from `29446c7` to `a644ff6`
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+https://github.com/servo/servo/pull/40409	(@mrobinson, #40409)	wpt: Ensure that the correct argument is read when outputting stable unexpected log (#40409)
+    # In the review for #40369, the name of a command-line argument was
+    # changed, but not the code that accessed the argument. This meant that
+    # the unexpected log was never dumped, even when there are stable
+    # unexpected results. This change fixes that.
+    # Testing: This should ensure that the `stable-unexpected-results-linux` artifact
+    # is not empty when running WPT on CI.
+https://github.com/servo/servo/pull/40411	(@simonwuelker, #40411)	xpath: Handle OOB conditions and non-char-boundaries in `substring` (#40411)
+    # This change fixes two panics and cleans up a bunch of the surrounding code.
+    # Testing: I've added new unit tests
++https://github.com/servo/servo/pull/40314	(@simonwuelker, #40314)	script: Enforce exclusivity between <details> elements in the same tree (#40314)
+    layout; <details name> exclusivity
+    # Within the same tree, only one `` element with the same name may be open at a time. Before this change, this
+    # invariant was not enforced.
+    # I've added a `HashMap` to `Document` and `ShadowRoot` which maps from a name to the a list of details elements
+    # with the same name. This map allows us to find conflicting details elements without having to traverse the whole
+    # tree. Of course this only works when the tree is a document tree or a shadow tree, so we still have to fall back to
+    # `traverse_preorder` in some cases (which I believe to be uncommon).
+    # This is ready for review, but I'd like to wait until https://github.com/servo/servo/pull/40271 is merged to not
+    # cause unnecessary merge conflicts.
+    # Testing: New web platform tests start to pass
++https://github.com/servo/servo/pull/40402	(@mrobinson, @atbrakhi, #40402)	libservo: Integrate context menu into the show_embedder_control API (#40402)
+    api servoshell; rework context menu api, embedders can now know the position and know what each item does (`show_context_menu(webview, result_sender, title, items)` → `ContextMenu.{id,position,items,select,dismiss}()`)
+    # This PR integrates showing context menus into the
+    # `WebViewDelegate::show_embedder_control` API. In addition,
+    # `ContextMenuItem` and `ContextMenuAction` data types are exposed which
+    # abstract away the different components of the context menu. Later
+    # changes will implement this API for servoshell as well as add
+    # element-specific actions such as "Select All" and "Copy Image URL".
+    # Testing: This change adds a WebView API test.
+-https://github.com/servo/servo/pull/40404  (@Taym95, #40404)   Add CanGc argument to SafeFromJSValConvertible::safe_from_jsval (#40404)
+    # Add CanGc argument to SafeFromJSValConvertible::safe_from_jsval
+    # Fixes: #40392
++https://github.com/servo/servo/pull/40398	(@kkoyung, #40398)	script: Implement import key operation of X25519 (#40398)
+    dom; crypto.subtle.importKey(,,"X25519")
+    # Start adding X25519 support to WebCrypto API. This patch implements import key operation of X25519, using X25519
+    # implementation from the crate `x25519-dalek`.
+    # Testing:
+    # - Pass some WPT tests that were expected to fail.
+    # - Some FAIL expectations are added. They require other not-yet-implemented operations of X25519. WPT skipped them
+    # when "import key" operation for X25519 were not yet implemented.
+    # Fixes: Part of #39060
+-https://github.com/servo/servo/pull/40403	(@arihant2math, #40403)	`script/dom/`: Change some `#[allow]`s to `#[expect]`s (#40403)
+    # This removes some unneeded lints, especially `#[allow(unsafe_code)]`.
+    # Testing: Refactor
+    # Part of: #40383
+-https://github.com/servo/servo/pull/40393	(@yezhizhen, #40393)	Reduce unnecessary type conversion and share `WebDriverCommandMsg::LoadUrl` handler across platform (#40393)
+    # - Reduces unnecessary type conversion between `ServoUrl`, `Url`, string slice
+    # - Share `WebDriverCommandMsg::LoadUrl` handler across platform
+    # Testing: Covered by existing test. Manually tested for OHOS.
+https://github.com/servo/servo/pull/40375	(@mrobinson, @mukilan, #40375)	script: Let `HTMLCanvasElement` manage the `ImageKey` for canvases (#40375)
+    # This change makes it so that the `HTMLCanvasElement` is responsible for
+    # managing the `ImageKey` for associated `RenderingContext`s. Only
+    # canvases display their contents into WebRender directly, so this makes
+    # it so that keys are not generated for `OffscreenCanvas`.
+    # The main goal here is that `ImageKey`s are always associated with a
+    # particular `WebView`, which isn't possible in the various canvas
+    # backends yet. This is important because each `WebView` may soon have a
+    # different WebRender instance entirely with its own set of `ImageKey`s.
+    # This also allows for clearing `ImageKey`s when canvases are disconnected
+    # from the DOM in a future change. One tricky thing here is placeholder
+    # canvases, which are meant to be driven from workers.
+    # It seems that the implementation isn't correct for these at the moment
+    # as they need to be updated to the specification. Instead, what is
+    # happening is that any existing context / image is completely lost when
+    # converting to an `OffscreenCanvas`.
+    # Testing: This shouldn't change observable behavior, so is covered by
+    # existing tests.
+    # Fixes: This is part of #40261.
++https://github.com/servo/servo/pull/40357	(@arihant2math, @jschwe, #40357)	Add bump-version command (#40357)
+    release
+    # Comprehensively sets the version across Cargo.toml and all installer/config files (i.e. `Info.plist`, `Servo.wxs.mako`,
+    # etc.)
+    # Testing: Manual
+    # Fixes: #40312
+-https://github.com/servo/servo/pull/40376	(@mrobinson, #40376)	net: Associate every `ImageCache` with a `WebView` (#40376)
+    # Every `ImageCache` should be assigned a `Pipeline` and a `WebView`, so
+    # that it knows what WebRender instance to create image keys in. This
+    # change accomplishes that by splitting the `ImageCache` trait into
+    # `ImageCache` and `ImageCacheFactory`. There should only be one
+    # `ImageCacheFactory` per process.
+    # Testing: This should not change observable behavior and is thus covered by
+    # existing tests.
+    # Fixes: This is part of #40261.
+https://github.com/servo/servo/pull/40391	(@richerfu, #40391)	ohos: Support resize for tablet (#40391)
+    # This change can allow resize window in pad and pc device.
+https://github.com/servo/servo/pull/40388	(@arihant2math, #40388)	Initial credential management checks (#40388)
+    # It's taking longer than expected to implement credential management fully, so I've decided to start branching
+    # individual PRs out. This just implements some basic scaffolding functions.
+    # Testing: Passes a WPT test
+    # Fixes: Partially #38788
+https://github.com/servo/servo/pull/40377	(@sagudev, #40377)	CI: Switch to `macos-15-intel` (#40377)
+    # Intel is not dead till 2027: https://github.com/actions/runner-images/issues/13045
+    # try run: https://github.com/sagudev/servo/actions/runs/19048166686
+    # Closes #40354
+-https://github.com/servo/servo/pull/40382	(@dependabot[bot], @dependabot[bot], #40382)	build(deps): bump version-compare from 0.2.0 to 0.2.1 (#40382)
+    # Bumps [version-compare](https://gitlab.com/timvisee/version-compare) from 0.2.0 to 0.2.1.
+    # Changelog
+    # Sourced from version-compare's changelog.
+    # 0.2.1 (2025-10-31)
+    # Hide cfg(tarpaulin) warning during compilation
+    # Commits
+    # 0c261ec Bump version to 0.2.1
+    # 21305cb Hide warning for tarpaulin cfg attribute in latest Rust version
+    # 52e754d Bump version number in README
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=version-compare&package-manage
+    # r=cargo&previous-version=0.2.0&new-version=0.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/a
+    # bout-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40385	(@dependabot[bot], @dependabot[bot], #40385)	build(deps): bump dtor from 0.1.0 to 0.1.1 (#40385)
+    # Bumps [dtor](https://github.com/mmastrac/rust-ctor) from 0.1.0 to 0.1.1.
+    # Commits
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dtor&package-manager=cargo&pre
+    # vious-version=0.1.0&new-version=0.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depend
+    # abot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40381	(@dependabot[bot], @dependabot[bot], #40381)	build(deps): bump cc from 1.2.43 to 1.2.44 (#40381)
+    # Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.2.43 to 1.2.44.
+    # Release notes
+    # Sourced from cc's releases.
+    # cc-v1.2.44
+    # Other
+    # Fix debug assertion for env/abi mismatch (#1604)
+    # Update CHANGELOG for version 1.2.43 (#1602)
+    # Stop passing an invalid target to llvm-mingw's cross-compilation wrappers (#1495)
+    # Changelog
+    # Sourced from cc's changelog.
+    # 1.2.44 - 2025-10-31
+    # Other
+    # Fix debug assertion for env/abi mismatch (#1604)
+    # Update CHANGELOG for version 1.2.43 (#1602)
+    # Stop passing an invalid target to llvm-mingw's cross-compilation wrappers (#1495)
+    # Commits
+    # 514e4d1 chore(cc): release v1.2.44 (#1603)
+    # 2a2eee3 Fix debug assertion for env/abi mismatch (#1604)
+    # 97281b6 Update CHANGELOG for version 1.2.43 (#1602)
+    # 8a45e2b Stop passing an invalid target to llvm-mingw's cross-compilation wrappers (...
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cc&package-manager=cargo&previ
+    # ous-version=1.2.43&new-version=1.2.44)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depend
+    # abot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40380	(@dependabot[bot], @dependabot[bot], #40380)	build(deps): bump tokio-util from 0.7.16 to 0.7.17 (#40380)
+    # Bumps [tokio-util](https://github.com/tokio-rs/tokio) from 0.7.16 to 0.7.17.
+    # Commits
+    # 454fd8c chore: prepare tokio-util v0.7.17 (#7719)
+    # 4421022 codec: remove unnecessary trait bounds on all Framed constructors (#7716)
+    # 5a709e3 io_uring: change Completable to not return io::Result (#7702)
+    # 5efb1c3 io: doc that AsyncWrite does not inherit from Write (#7705)
+    # f490029 runtime: revert &quot;replace manual vtable definitions with Wake&quot; (#7699)
+    # d25778f task: add tests for task::Builder::spawn_local (#7697)
+    # b8318fa task: add tests for spawn_local in panic scenarios (#7694)
+    # acfdb87 task: use #[tokio::test] explicitly in tests/task_builder.rs (#7698)
+    # d060401 sync: return TryRecvError::Disconnected from Receiver::try_recv after `Re...
+    # 5dacc2e task: add tests for spawn_local and spawn_local_on (#7609)
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tokio-util&package-manager=car
+    # go&previous-version=0.7.16&new-version=0.7.17)](https://docs.github.com/en/github/managing-security-vulnerabilities/abou
+    # t-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
++https://github.com/servo/servo/pull/40291	(@mrobinson, #40291)	wpt: Enable WebDriver by default when running WPT (#40291)
+    testing; testdriver tests enabled, webdriver now enabled by default (`--product servo` to opt out)
+    # This change switches the default test runner for WPT to be WebDriver,
+    # enabling testdriver tests by default. In addition, it update results to
+    # reflect the ones that you would expect when running with WebDriver.
+    # While there are some failures that require more investigation, in
+    # general the differences in results are fairly explicable.
+    # Testing: This change modifies the way that tests are run and is thus
+    # tested by all WPT-like tests.
+    # Fixes: #34683
+https://github.com/servo/servo/pull/40369	(@mrobinson, #40369)	wpt: Filter non-stable expected results and create an artifact for it (#40369)
+    # This change ensures that the filtered raw log file of WPT results only
+    # contains stable unexpected results and uploads a resulting aggregated
+    # log file as an artifact. This artifact can be used to generate new
+    # baselines of *only* stable unexpected results, so is useful for updating
+    # results given a CI run. A future change will add a `mach` command to do
+    # this automatically.
+    # Testing: The CI should run the code to produce this artifact for every WPT run.
+https://github.com/servo/servo/pull/40372	(@yezhizhen, #40372)	servoshell: Move `handle_webdriver_script_command` to `RunningAppStateTrait` (#40372)
+    # Share more code between egl and Desktop.
+    # Testing: Just refactoring
++https://github.com/servo/servo/pull/40378	(@jdm, #40378)	config: Enable ResizeObserver by default. (#40378)
+    dom
+    # Per https://github.com/servo/servo/issues/39790#issuecomment-3460233532 we now pass tests for all the related
+    # engine features that Servo implements, so there's no benefit to keeping this API disabled. Let's ship it!
+    # Testing: No behaviour change, just updating defaults.
+    # Fixes: #39790
+https://github.com/servo/servo/pull/40272	(@arihant2math, #40272)	Light mode for newtab page (#40272)
+    # As requested, the mode changes per the preferences. I had to add a shadow to fix the contrast on light mode (the
+    # colors/shadowing are roughly similar to the firefox new tab page).
+https://github.com/servo/servo/pull/40283	(@Narfinger, #40283)	Script: Efficient DOMString methods for as_bytes, eq_ascii, is_ascii, to_jsval (#40283)
+    # This implements efficient methods for as_bytes, eq_ascii, is_ascii and to_jsval.
+    # Tests were added for as_bytes. Additionally, BytesView now has an internal type to make sure nobody can construct it.
+    # Testing: New unit tests were added and some old ones covered the new functions.
+-https://github.com/servo/servo/pull/40374	(@jschwe, #40374)	ohos CI: Upload screenshot if speedometer failed (#40374)
+    # Upload a screenshot to help debug failures (due to test timeouts) which happen somewhat frequently when running
+    # speedometer in ohos CI.
+    # Testing: Not tested
+-https://github.com/servo/servo/pull/40373	(@jschwe, #40373)	ohos CI: Compile nightly in production and upload libservoshell.so (#40373)
+    # - Compile the nightly in production mode
+    # - Additionally also upload `libservoshell.so` as an artifact. This makes it easier for interested users on HarmonyOS
+    # to test the demo app, since we can't provide a signed version for HarmonyOS, but users can self-sign easily if we
+    # provide the pre-compiled binary.
+    # Testing: Not tested
+https://github.com/servo/servo/pull/40323	(@jdm, #40323)	script: Do not include transforms and inline boxes in ResizeObserver box area queries (#40323)
+    # These changes implement the restrictions for content rects required by the ResizeObserver specification: inline
+    # boxes must return empty rects, and any transforms must be ignored.
+    # Testing: Newly passing tests.
+    # Fixes: #40259
+    # Fixes: #40258
+https://github.com/servo/servo/pull/40371	(@Gae24, #40371)	script: remove microtask queue from globalscope (#40371)
+    # Remove the microtask queue from `GlobalScope`. The queue is moved inside worker global scopes, while for window
+    # globals the script thread's queue is accessed.
+    # Testing: Covered by existing tests
+    # Fixes: #20908
++https://github.com/servo/servo/pull/40334	(@kkoyung, #40334)	script: Use `base64ct` instead of `base64` in SubtleCrypto (#40334)
+    security dom
+    # The `SubtleCrypto` interface of WebCrypto API needs to encode and decode keys in base64 alphabets when
+    # exporting/importing keys in JsonWebKey format.
+    # We currently use the `base64` crate to handle base64 encoding and decoding. This patch switches to use the `base64ct`
+    # crate, which is a constant-time implementation of base64 alphabets.
+    # Using constant-time implementation to handle base64 encoding and decoding of cryptographic secret provides a better
+    # protection against time-based sidechannel attack.
+    # Remarks: The multi-line changes in `ecdh_operation.rs` are mostly caused by `./mach fmt`.
+    # Testing: Refactoring. Existing tests suffice.
++https://github.com/servo/servo/pull/40306	(@mrobinson, #40306)	servoshell: Add a `VsyncRefreshDriver` for Android (#40306)
+    servoshell; use system compositor for vsync
+    # This adds an implementation of `VsyncRefreshDriver` ensuring that frame
+    # updates are driven by the system compositor.
+    # Testing: This should increase the smoothness of animations, but I'm
+    # not sure how to test that exactly.
+-https://github.com/servo/servo/pull/40100	(@gterzian, #40100)	script: improve spec compliance of the iframe load event steps (#40100)
+    # Prevent the running of the iframe load event steps for the initial about:blank document. Part of
+    # https://github.com/servo/servo/issues/31973
+    # Testing: /html/browsers/browsing-the-web/navigating-across-documents/initial-empty-document/iframe-nosrc.html
+    # Fixes: It is expected that the intermittent issue of 34819 will go away, but I will leave it open so we can close
+    # it when we realize it isn't being mentioned by PR's anymore.
+    # https://github.com/servo/servo/issues/34819
+>>> 2025-11-08T06:07:37Z
+-https://github.com/servo/servo/pull/40483	(@yezhizhen, #40483)	webdriver: Do not remove id from `input_state_table` if it still in `input_cancel_list` (#40483)
+    # There ~was~ has been a [bug](https://github.com/servo/servo/issues/37579#issuecomment-2990762713) in spec. Our
+    # workaround has been: for every keyup/pointerup, we remove a corresponding entry in `input_cancel_list`.
+    # But we missed one thing: it is possible to only dispatch keydown in [element send
+    # keys](https://w3c.github.io/webdriver/#dfn-element-send-keys). In that case, we inserted an entry into
+    # `input_cancel_list` but removes Id from `input_state_table` in the end. This causes a panic with a followup
+    # [release actions](https://w3c.github.io/webdriver/#dfn-release-actions).
+    # This PR makes sure we only remove if it is safe.
+    # Testing: CI no longer panic on
+    # https://github.com/servo/servo/blob/dc9696c27d35f407832e6ef2624ee96afe1ba438/components/webdriver_server/actions.rs#L338
+    # for some testdriver tests.
++https://github.com/servo/servo/pull/40494	(@mrobinson, #40494)	script: Wrap unsafe code in `scriptruntime.rs` in `unsafe {}` (#40494)
+    quality
+    # This is another step on the way toward enabling the default set
+    # of rustc compiler warnings for `script`. This also renames two
+    # functions according to Rust snake case guidelines.
+    # Testing: This should not change behavior and is thus covered by existing tests.
+https://github.com/servo/servo/pull/40495	(@mrobinson, #40495)	wpt: Run in headless mode by default unless `--no-headless` is passed (#40495)
+    # This is a more reasonable default as the detection of running one or
+    # more tests is a bit inconsistent. It also makes the behavior of the
+    # command a bit more predictable IMO.
+    # Testing: This was tested manually as there is no tests for this
+    # layer of the test runner
+    # Fixes: #40407.
+-https://github.com/servo/servo/pull/40487	(@mukilan, #40487)	fonts: prime per-painter font key cache during `WebView` creation (#40487)
+    # Currently we only prime the font key cache for the very first painter. Replace this with a mechanism to request
+    # the System Font Service to prime the key cache whenever a new `WebView` is created.
+    # Testing: This only modifies an internal optimization, so should be covered by existing tests.
++https://github.com/servo/servo/pull/40459	(@Narfinger, #40459)	net: Do not implement `Serialize`/`Deserialize` for `RasterImage` and introduce``SharedRasterImage` (#40459)
+    crash; fix crash in Speedometer3.1
+    # RasterImage is now not seralizeable and backed by Vec storage. Add a new struct `SharedRasterImage` that allows
+    # serializeing. This can be constructed from RasterImage. This introduces some more copying but I think the tradeoff
+    # is ok. Newly introduced copies are for favicon response to the embedder and EmbedderNotifications.
+    # Testing: Should not change functionality, so covered by existing tests.
+    # Fixes: https://github.com/servo/servo/issues/39626 and related issues.
+https://github.com/servo/servo/pull/40484	(@mrobinson, @mukilan, #40484)	compositing: Allow mapping from WebRender key types to `PainterId` (#40484)
+    # In order to properly select the appropriate `Painter` when dealing with
+    # incoming keys to the renderer API, we ensure that these keys carry the
+    # `PainterId` encoded as `IdNamespace` inside them. This should eliminate
+    # the need to pass the `WebViewId` or `PainterId` with messages involving
+    # these keys.
+    # Testing: This should not change observable behavior, so should be covered
+    # by existing tests.
+https://github.com/servo/servo/pull/40401	(@gterzian, #40401)	script: extend the prevention of the firing of load events to all iframes (#40401)
+    # This extends the preventing of the firing of the load events when there is a pending navigation from the initial
+    # blank document only to all iframes. Part of https://github.com/servo/servo/issues/31973
+    # Testing: tests/wpt/mozilla/tests/mozilla/FileAPI/file-upload.html
+    # Fixes: This should fix the intermittency of https://github.com/servo/servo/issues/40348
++https://github.com/servo/servo/pull/39916	(@jschwe, #39916)	Add code-coverage option to mach run, test-wpt and test-devtools (#39916)
+    testing
+    # Add a `--coverage` flag to `./mach build` and a  `./mach coverage-report` command to use `cargo llvm-cov` to
+    # generate a coverage report from the raw profiles.
+    # The workflow is:
+    # ```
+    # ./mach build --coverage [--profile ]
+    # # Or test-wpt or test-devtools
+    # ./mach run --coverage [--profile ]
+    # # Note, that coverage-report needs to know the cargo build profile.
+    # ./mach coverage-report [--profile ] [optional parameters for cargo-llvm-cov]
+    # ```
+    # According to the LLVM documentation on source based coverage, the optimization profile should not influence the
+    # accuracy of the coverage profile, so we can gather coverage data from optimized builds.
+    # Note that `./mach test-devtools --coverage`  will not produce any coverage profiles yet, since the test runner
+    # kills the servo binary, which prevents writing the profile data at shutdown.
+    # The same problem also affects `test-wpt` with `servodriver`, which will be fixed by
+    # https://github.com/servo/servo/pull/40455.
+    # Testing: Manually tested. A CI workflow to test wpt coverage will be added in a follow-up PR.
+-https://github.com/servo/servo/pull/40466	(@yezhizhen, @jdm, #40466)	Upgrade wptrunner mozprocess version to 1.4.0 (#40466)
+    # This fixes the error in Windows when Servo shuts down normally without being killed.
+    # Testing: Tested on Windows.
+-https://github.com/servo/servo/pull/40476	(@yezhizhen, #40476)	webdriver: Print details when fail to start server (#40476)
+    # This has made life much easier to debug servodriver.
+https://github.com/servo/servo/pull/40482	(@mukilan, @mrobinson, #40482)	compositor: Allow `GenerateFrame` to take `Vec<WebViewId>` (#40482)
+    # This change simply allows `GenerateFrame` to carry a list of `WebViewId`s and modifies `update_the_rendering`
+    # to collect `WebViewId`s and pass them in the `GenerateFrame` message. The list of `WebViewId`s is currently not
+    # used and that will be handled in a follow-up patch.
+    # Testing: Covered by existing tests.
++https://github.com/servo/servo/pull/40480	(@kkoyung, #40480)	script: Implement generate key operation of X25519 (#40480)
+    dom; crypto.subtle.generateKey("X25519")
+    # Continue on adding X25519 support to WebCrypto API. This patch implements generate key operation of X25519, using
+    # X25519 implementation from the crate `x25519-dalek`.
+    # Testing: Pass some WPT tests that were expected to fail.
+    # Fixes: Part of #39060
+-https://github.com/servo/servo/pull/40477  (@mrobinson, #40477)    background_hang_monitor: Clean up `Sampler` a bit and use `allow(dead_code)` (#40477)
+    # This clean up the way that the `SamplerImpl` is defined slightly and
+    # switches to using `allow(dead_code)` as this code isn't dead on all
+    # platforms. This fixes a build warning.
+    # Testing: This should not change behavior and is thus covered by existing tests.
+-https://github.com/servo/servo/pull/34960	(@webbeef, #34960)	Reduce boilerplate in `Constellation` and `ScriptThread` (#34960)
+    # The constellation has many cases of early returns in match expressions that can be rewritten using `if let Some(...) =
+    # xyz else { return abc; }`. Two macros are introduced to help with repetitive code blocks that can't be extracted
+    # as functions.
+>>> 2025-11-09T06:21:04Z
+-https://github.com/servo/servo/pull/40510	(@servo-wpt-sync, #40510)	Sync WPT with upstream (09-11-2025) (#40510)
+    # Automated downstream sync of changes from upstream as of 09-11-2025
+    # [no-wpt-sync]
++https://github.com/servo/servo/pull/39989	(@excitablesnowball, #39989)	script: Use InputEvent for input events (#39989)
+    dom; {composed,data,isComposing,inputType} properties on `input`/`beforeinput` events
+    # Use `InputEvent` for text input and set appropriate values for the `composed`, `data`, `isComposing`, and
+    # `inputType` attributes. Use a placeholder for `dataTransfer` attribute and `getTargetRanges` function, as they
+    # are only applicable to contenteditable, which isn't implemented.
+    # Testing: I added two tests under `tests/wpt/mozilla/tests/input-events` based on the similarly named ones for
+    # contenteditable under `tests/wpt/tests/input-events`.
+    # Fixes: https://github.com/servo/servo/issues/36398
+-https://github.com/servo/servo/pull/40505	(@jschwe, #40505)	bootstrap: Run apt update before apt-cache (#40505)
+    # In a fresh container skipping the apt-update will cause only 4 packages to be installed and the rest filtered. Also
+    # add a debug print to inform the user if packages were skipped.
+    # Testing: Manually tested
+https://github.com/servo/servo/pull/40456	(@tharkum, #40456)	html: Render media controls without ready state precondition (#40456)
+    # Follow the specification and allow to render media controls (expose a user interface to the user) without any
+    # HTMLMediaElement `readyState` precondition.
+    # The media controls be shown for the following examples without specified media source (e.g. without `src` attribute).
+    # ```
+    # /
+    # ```
+    # See https://html.spec.whatwg.org/multipage/media.html#user-interface
+    # For media controls UI don't define root `div` element's style `width` property from the video natural size
+    # (`videoWidth/Height` IDL attributes which return `0` if `readyState` is `HAVE_NOTHING`).
+    # When the `media` element is adopted between different documents need adopt the media controls id, so media controls UI
+    # will keep access to the whilelist of media controls identifiers via `document.servoGetMediaControls(id)` API.
+    # Testing: Improvements in the following tests
+    # - html/rendering/replaced-elements/embedded-content-rendering-rules/audio-controls-00*
+    # - html/semantics/the-button-element/command-and-commandfor/on-audio-behavior.tentative.html
+    # - html/semantics/the-button-element/command-and-commandfor/on-audio-invalid-behavior.tentative.html
+    #   Note that `Invoker Commands` API is not yet supported so these `command and commandfor` tests should fail, but due
+    #   to  previous bug  with delayed media controls shown up. The invoker `onClick` function send actions with mouse events
+    #   (move/up/down) to the test driver at the position of the button element (via getBoundingClientRect), but before
+    #   test driver
+    #   will handle these actions the mediadata is received and media controls are shown up with "play" button at this
+    #   position.
+    #   So the media control "play" button is clicked instead of the button, and it triggers media element `pause`
+    #   state change.
+    #   See https://open-ui.org/components/invokers.explainer/
+-https://github.com/servo/servo/pull/38789	(@jdm, #38789)	Suppress debug representations of network response bodies (#38789)
+    # Adds a wrapper type for vectors that can contain large response bodies to prevent flooding debug logs with the
+    # contents of those bodies.
+    # Testing: Can't test debug log output.
+    # Fixes: #37769
+-https://github.com/servo/servo/pull/40506	(@eerii, #40506)	Remove tshark from mach bootstrap (#40506)
+    # `mach bootstrap` no longer installs Wireshark, as it isn't useful for people not working directly on DevTools
+    # support. The linux runner that runs `mach test-scripts` now installs it manually, skipping the security prompt.
+    # Testing: Manual test of `mach test-scripts`
+    # Fixes: #40503
+-https://github.com/servo/servo/pull/40488	(@eerii, #40488)	tools: Update DevTools parser flags (#40488)
+    # Rename the `--scan` argument to `-w/--write-file` and the `--use` argument to `-r/--read-file`. This is more
+    # aligned with `tshark`'s syntax, and I think it is a more intuitive naming scheme.
+    # Remove the `--filter` and `--range` arguments. They are very easily replaced by more powerful tools like `grep` and
+    # `jq`. It seems unnecessary to have them in this script (specially when the most useful thing it does is exporting
+    # the capture as NDJSON for other tools to process). This fixes an issue with the last message not being exported.
+    # Change the default port to `6080`. This matches the current information [in the
+    # book](https://book.servo.org/hacking/using-devtools.html#connecting-to-servo) on how to run Servo with DevTools
+    # enabled.
+    # Testing: Checked with `math test-scripts`
++https://github.com/servo/servo/pull/40499	(@mrobinson, #40499)	script: Wrap remaining unsafe code and enable `unsafe_op_in_unsafe_fn` (#40499)
+    quality; unsafe as signature vs unsafe as fence around operations
+    # This is last step toward enabling the default rustc
+    # `unsafe_op_in_unsafe_fn` warning for the script crate. It wraps the
+    # remaining unsafe code in `unsafe {}` and removes the line disabling this
+    # warning from `script`'s `Cargo.toml`. In addition, two variables are
+    # renamed from `v` to something slightly more descriptive.
+    # Testing: This should not change behavior so is covered by existing tests.
+https://github.com/servo/servo/pull/40490	(@mrobinson, #40490)	script: Handle more `ScriptThread` messages synchronously (#40490)
+    # Make the handling of more messages to the `ScriptThread` happen
+    # synchronously with the rest of the message handling. Previously these
+    # had to be handled first, but the resiliency of the `ScriptThread` has
+    # increased such that they can be done inline now. This simplifies message
+    # handling.
+    # Testing: This should not change observable behavior and is thus covered
+    # by existing tests. In fact, no tests fail with this change which is
+    # the reason we can do it.
+https://github.com/servo/servo/pull/40491	(@mrobinson, #40491)	script: Rename `ScriptThreadMessage::AttachLayout` to `ScriptThreadMessage::SpawnPipeline` (#40491)
+    # The thing that this message does is to spawn a pipeline in a
+    # `ScriptThread`. I believe that the `AttachLayout` name is a relic of a
+    # different time. The corresponding procedure in the `Constellation` is
+    # already called `Pipeline::spawn`.
+    # Testing: This is just a rename, so existing tests should cover this change.
++https://github.com/servo/servo/pull/40434	(@atbrakhi, @mrobinson, #40434)	servoshell: Implement context menu in servoshell (#40434)
+    servoshell; initial context menu (back, forward, reload)
+    # This PR adds context menu support with clickable menu items in the Minibrowser. The menu appears on right click
+    # and supports basic navigation actions (Back, Forward, Reload).
+    # Testing: We already have tests for ContextMenu in WebView API test.
+-https://github.com/servo/servo/pull/40486	(@jschwe, #40486)	mach try: Don't run commit hooks (#40486)
+    # An implementation detail of `./mach try` is that it creates a git commit containing information about the try
+    # configuration. Adding `--no-verify` skips running git pre-commit hooks, which could cause the commit to fail. This
+    # is useful for draft / work-in-progress branches, where you quickly want to commit something and test CI works,
+    # before fixing lints / formatting etc.
+    # Testing: Manually tested with `./mach try`.
+    # Fixes: #40475
+https://github.com/servo/servo/pull/40489	(@eerii, #40489)	tools: Remove wrapped JSON message in the DevTools parser (#40489)
+    # Instead of outputing `{"_to": "...", "message": {"to": "...", ...}}` the JSON message is simplified to `{"to":
+    # "...", ...}`. This is possible since all valid devtools messages include a "to" or a "from" field. These two fields
+    # will always be placed at the start of the serialized message, with the rest of fields being sorted alphabetically.
+    # Simplify detection of server or client message, removing the need to pass the devtools port when reading a .pcap
+    # file. Now the pretty message says "Server" and "Client" instead of "Servo" and "Firefox", which was innacurate
+    # when inspecting one instance of Firefox from another.
+    # Testing: Check with `mach test-scripts`
++https://github.com/servo/servo/pull/40497	(@kkoyung, #40497)	script: Implement derive bits operation of X25519 (#40497)
+    dom; crypto.subtle.deriveBits("X25519")
+    # Finish adding X25519 support to WebCrypto API. This patch implements derive bits operation of X25519, using X25519
+    # implementation from the crate `x25519-dalek`.
+    # Testing: Pass some WPT tests that were expected to fail.
+    # Fixes: Part of #39060
++https://github.com/servo/servo/pull/40493	(@mrobinson, #40493)	script: Wrap unsafe code in `windowproxy.rs` in `unsafe {}` (#40493)
+    quality
+    # This is another step on the way toward enabling the default set
+    # of rustc compiler warnings for `script`. This also renames two
+    # functions according to Rust snake case guidelines.
+    # Testing: This should not change behavior and is thus covered by existing tests.
+-https://github.com/servo/servo/pull/40492	(@arihant2math, #40492)	Fix some typos in comments across various parts of the codebase (#40492)
+    # Testing: This only updates comments, so should not need new tests.
+>>> 2025-11-11T06:50:51Z
+-https://github.com/servo/servo/pull/40547	(@arihant2math, #40547)	mach: Remove unused setup/config (#40547)
+    # Removed `setup.py`, `setup.cfg`, `mach.egg-info/`, and `PKG-INFO`. I don't see these being used
+    # anywhere and mach isn't packaged by us. I checked the firefox source tree and couldn't find them:
+    # https://github.com/mozilla-firefox/firefox/tree/45fd8b48b2906e1b83e0307502e655ce430ef702/python/mach.
+-https://github.com/servo/servo/pull/40549	(@RichardTjokroutomo, #40549)	Fixed codegen to prevent double declaration of -webkit- prefixed CSS properties (#40549)
+    # Removed the following on `script_bindings/codegen/run.py`:
+    # ```
+    # # https://drafts.csswg.org/cssom/#dom-cssstyledeclaration-webkit-cased-attribute
+    #     if property_name.startswith("-webkit-"):
+    #         yield "".join(camel_case(property_name, True))
+    # ```
+    # Credits to @jdm !
+    # Fixes: issue #40545
+-https://github.com/servo/servo/pull/40522	(@Loirooriol, #40522)	Upgrade Stylo to 2025-11-01 (#40522)
+    # This continues #39612
+    # Changelog:
+    #  - Upstream:
+    #  https://github.com/servo/stylo/compare/b98470a5cbd3792db79366ec1559d72231ef2c1f...d71fd89b781dca6e92ee9a6e683269c3e6a28
+    # 115
+    #  - Servo fixups:
+    #  https://github.com/servo/stylo/compare/4714bab122cc233eaf7e8330bdfbf55ab859efa8...7481d7f7afe698b1ad141755f6f525857da7b
+    # c49
+    # Stylo tracking issue: https://github.com/servo/stylo/issues/264
+-https://github.com/servo/servo/pull/40546	(@arihant2math, #40546)	storage: Run storage tests (#40546)
+    # These were accidentally disabled when creating the storage crate.
+-https://github.com/servo/servo/pull/40544	(@webbeef, #40544)	script: improve cookie processing of control characters (#40544)
+    # This implements character set restrictions both for the DOM API and when getting cookies from http/ws headers. This
+    # is a local workaround for https://github.com/rwf2/cookie-rs/issues/243
+    # We still fail some tests because hyper errors out when parsing headers with %x1 characters.
+    # This patch also makes a minor change to 'ServoCookie::from_cookie_string()' to avoid some string cloning when possible.
+    # Testing: wpt tests expectations are updated
+-https://github.com/servo/servo/pull/40539	(@Narfinger, #40539)	Net: ServoUrl.into_string().parse() optimization (#40539)
+    # parse takes by reference, so it is enough to use as_str() (which is fast according to the Url documentation)
+    # instead of `into_string`.
+    # `into_string()` copies the whole url into a new string.
+    # Signed-off-by: Narfinger
+    # Testing: Should not change any functionality.
+-https://github.com/servo/servo/pull/40538	(@atbrakhi, #40538)	servoshell: Move `webdriver_receiver` to shared base (#40538)
+    # This PR eliminates duplicate code while maintaining the same functionality across all platforms.. We move
+    # `webdriver_receiver` to shared base where `webdriver_sender` lives
+    # Testing: No functional changes. Existing tests should test this.
+    # Fixes: Part of https://github.com/servo/servo/issues/40530
+-https://github.com/servo/servo/pull/40537  (@Narfinger, #40537)    script_bindings: Small USVString cleanup (#40537)
+-https://github.com/servo/servo/pull/40534	(@atbrakhi, #40534)	servoshell: Move screenshot stability tracking to shared base (#40534)
+    # Move screenshot stability tracking to shared base. This PR eliminates duplicate code while maintaining the same
+    # functionality across all platforms.
+    # Testing: No functional changes. Existing tests should test this.
+    # Fixes: Part of #40530
++https://github.com/servo/servo/pull/40536	(@kkoyung, #40536)	script: Implement export key operation of ECDSA (#40536)
+    dom; crypto.subtle.exportKey() for ECDSA keys
+    # Continue on adding ECDSA support to WebCrypto API. This patch implements export key operation of ECDSA, using
+    # ECDSA implementation from the crates `p256`, `p384`, `p521` and `elliptic_curve`.
+    # Testing:
+    # - Pass some WPT tests that were expected to fail.
+    # - The new FAIL expectations are added to `wrapKey_unwrapKey.https.any.js.ini`, which require the not-yet-implemented
+    # sign/verify operations of ECDSA and RSA-OAEP. These tests were skipped by WPT when the export key operation of
+    # ECDSA had not been implemented at the time.
+    # Fixes: Part of #39060
+-https://github.com/servo/servo/pull/40535	(@tharkum, #40535)	html: Add description for steps of legacy <audio> constructor (#40535)
+    # Add missing description for steps of legacy  constructor with a small refactoring, avoiding unnecessary `upcast`
+    # from `HTMLAudioElement` to `Element`.
+    # See https://html.spec.whatwg.org/multipage/media.html#dom-audio
+    # Testing: No expected changes in tests (added steps description).
+-https://github.com/servo/servo/pull/40498	(@WaterWhisperer, #40498)	net: Create unit tests for the image cache (#40498)
+    # Add unit tests for ImageCache
+    # Testing:
+    # Fixes: #10793
+https://github.com/servo/servo/pull/40529	(@mrobinson, #40529)	constellation: Reuse `InitialScriptState` and `InitialPipelineState` in `UnprivilegedPipelineContent` (#40529)
+    # `UnprivilegedPipelineContent` contains all of the data necessary to
+    # create a new `ScriptThread` with an initial `Pipeline` in a new
+    # process. This change reuses the `InitialScriptState` and
+    # `InitialPipelineState` structs inside `UnprivilegedPipelineContent` and
+    # renames it to `NewScriptEventLoopProcessInfo` to clarify what it does.
+    # In addition, `InitialScriptState` also repeated much of the data of
+    # `NewPipelineInfo`, which is now deduplicated and passed separately to
+    # the `ScriptThreadFactory`.
+    # The overall goal here is to make `ScriptThread` and `Pipeline` creation
+    # separate. A `ScriptThread` contains many `Pipeline`s which come and go,
+    # so it should not depend on a single creation `Pipeline`. This is the
+    # first step toward doing that.
+    # Some inputs to `ScriptThreadFactory` differ based on whether the new
+    # `ScriptThread` is created in a new process or not. This change makes it
+    # so that these input are passed as extra arguments.
+    # Finally these changes have revealed a couple members of data structures
+    # that aren't used. These have been removed.
+    # Testing: This is just a refactor and shouldn't change behavior so is
+    # covered by existing tests.
++https://github.com/servo/servo/pull/40525	(@Loirooriol, #40525)	Upgrade cssparser to version 0.36 (#40525)
+    upgrade; CSS now support color(display-p3-linear) and color-mix(in display-p3-linear)
+    # Stylo PR: https://github.com/servo/stylo/pull/262
+    # Testing: Various WPT now pass
+-https://github.com/servo/servo/pull/40531	(@jschwe, #40531)	Remove duplicate entry for 'rustc-dev' in toolchain (#40531)
+    # Testing: Trivial, Not required
+https://github.com/servo/servo/pull/40527	(@tharkum, #40527)	dom: Add the attribute mutation reason (#40527)
+    # For some specific cases (one of them see below) where are requirement to identify the reason of the attribute
+    # mutation (by whom/why it was changed - by cloning, parser or directly), so the following `reason` parameter was
+    # added to `AttributeMutation::Set` option.
+    # Note that for the HTMLMediaElement the internal `muted` state should be set to true when the element is created
+    # and the element has a `muted` content attribute specified (should be done once on the first attribute mutation
+    # caused by parser or cloning).
+    # See https://html.spec.whatwg.org/multipage/#dom-media-muted
+    # Testing: Improvements in the following tests
+    # - html/semantics/embedded-content/media-elements/user-interface/muted.html
++https://github.com/servo/servo/pull/40523	(@kkoyung, #40523)	script: Implement import key operation of ECDSA (#40523)
+    dom; crypto.subtle.importKey(,,"ECDSA")
+    # Start adding ECDSA support to WebCrypto API. This patch implements import key operation of ECDSA, using ECDSA
+    # implementation from the crates `p256`, `p384`, `p521` and `elliptic_curve`.
+    # Testing:
+    # - Pass some WPT tests that were expected to fail.
+    # - Remaining failed tests in `ec_importKey.https.any.js.ini` require the not-yet-implemented export key operation
+    # of ECDSA.
+    # - The new FAIL expectations are added to `ecdsa.https.any.js.ini`, which require the not-yet-implemented sign/verify
+    # operations of ECDSA. These tests were skipped by WPT because the import key operation had not been implemented at
+    # the time.
+    # Fixes: Part of #39060
+-https://github.com/servo/servo/pull/40514	(@sagudev, #40514)	Update mozjs to include SpiderMonkey 140.5 (#40514)
+    # Companion to https://github.com/servo/mozjs/pull/644.
+    # Testing: Covered by WPT tests
+    # try run: https://github.com/sagudev/servo/actions/runs/19208771497/job/54909497069
+-https://github.com/servo/servo/pull/40524	(@sagudev, #40524)	CI: Remove llvm upgrade from Windows workflow (#40524)
+    # Windows image has enough new LLVM version.
+    # This will hopefully fix CI, because it currently fails on choco:
+    # https://github.com/servo/servo/actions/runs/19221588811/job/54940572416
+-https://github.com/servo/servo/pull/40521	(@dependabot[bot], @dependabot[bot], #40521)	build(deps): bump sea-query from 1.0.0-rc.16 to 1.0.0-rc.17 (#40521)
+    # Bumps [sea-query](https://github.com/SeaQL/sea-query) from 1.0.0-rc.16 to 1.0.0-rc.17.
+    # Commits
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sea-query&package-manager=carg
+    # o&previous-version=1.0.0-rc.16&new-version=1.0.0-rc.17)](https://docs.github.com/en/github/managing-security-vulnerabili
+    # ties/about-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40519	(@dependabot[bot], @dependabot[bot], #40519)	build(deps): bump cc from 1.2.44 to 1.2.45 (#40519)
+    # Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.2.44 to 1.2.45.
+    # Release notes
+    # Sourced from cc's releases.
+    # cc-v1.2.45
+    # Other
+    # Regenerate target info (#1606)
+    # Use a default check for the &quot;env&quot; variable in apple_sdk_name (#1605)
+    # Changelog
+    # Sourced from cc's changelog.
+    # 1.2.45 - 2025-11-07
+    # Other
+    # Regenerate target info (#1606)
+    # Use a default check for the &quot;env&quot; variable in apple_sdk_name (#1605)
+    # Commits
+    # df67ed3 chore(cc): release v1.2.45 (#1607)
+    # 0c15d10 Regenerate target info (#1606)
+    # c1fa376 Use a default check for the &quot;env&quot; variable in apple_sdk_name (#1605)
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cc&package-manager=cargo&previ
+    # ous-version=1.2.44&new-version=1.2.45)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depend
+    # abot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40518	(@dependabot[bot], @dependabot[bot], #40518)	build(deps): bump jiff from 0.2.15 to 0.2.16 (#40518)
+    # Bumps [jiff](https://github.com/BurntSushi/jiff) from 0.2.15 to 0.2.16.
+    # Changelog
+    # Sourced from jiff's changelog.
+    # 0.2.16 (2025-11-07)
+    # This release contains a number of enhancements and bug fixes that have accrued
+    # over the last few months. Most are small polishes. A couple of the bug fixes
+    # apply to panics that could occur when parsing invalid TZ strings or invalid
+    # strptime format strings.
+    # Also, parsing into a Span should now be much faster (for both the ISO 8601
+    # and &quot;friendly&quot; duration formats).
+    # Enhancements:
+    # #298:
+    # Add Serde helpers for (de)serializing std::time::Duration values.
+    # #396:
+    # Add Sub and Add trait implementations for Zoned (in addition to the
+    # already existing trait implementations for &amp;Zoned).
+    # #397:
+    # Add BrokenDownTime::set_meridiem and ensure it overrides the hour when
+    # formatting.
+    # #409:
+    # Switch dependency on serde to serde_core. This should help speed up
+    # compilation times in some cases.
+    # #430:
+    # Add new Zoned::series API, making it consistent with the same API on other
+    # datetime types.
+    # #432:
+    # When lenient mode is enabled for strftime, Jiff will no longer error when
+    # the formatting string contains invalid UTF-8.
+    # #432:
+    # Formatting of %y and %g no longer fails based on the specific year value.
+    # #432:
+    # Parsing of %s is now a bit more consistent with other fields. Moreover,
+    # BrokenDownTime::{to_timestamp,to_zoned} will now prefer timestamps parsed
+    # with %s over any other fields that have been parsed.
+    # #433:
+    # Allow parsing just a %s into a Zoned via the Etc/Unknown time zone.
+    # Bug fixes:
+    # #386:
+    # Fix a bug where 2087-12-31T23:00:00Z in the Africa/Casablanca time zone
+    # could not be round-tripped (because its offset was calculated incorrectly as
+    # a result of not handling &quot;permanent DST&quot; POSIX time zones).
+    # #407:
+    # Fix a panic that occurred when parsing an empty string as a POSIX time zone.
+    # #410:
+    # Fix a panic that could occur when parsing %: via strptime APIs.
+    # #414:
+    # Update some parts of the documentation to indicate that TimeZone::unknown()
+    # ... (truncated)
+    # Commits
+    # 2ef6045 0.2.16
+    # 0b293b4 doc: a few documentation fixes
+    # 0fe02f2 changelog: add entries for duration work
+    # b9484ea fmt/serde: add helpers for std::time::Duration
+    # 87c607b fmt: add parsing routines for std::time::Duration
+    # 8a7f249 fmt: add support for printing std::time::Duration
+    # 3e49cbe signed_duration: remove extraneous comments
+    # b5f30f2 fmt: make fractional formatting use u32
+    # 8e61ffd fmt: add unsigned integer formatting
+    # 1910063 fmt: refactor friendly printer to use std::time::Duration
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jiff&package-manager=cargo&pre
+    # vious-version=0.2.15&new-version=0.2.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depe
+    # ndabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40517	(@dependabot[bot], @dependabot[bot], #40517)	build(deps): bump font-types from 0.10.0 to 0.10.1 (#40517)
+    # Bumps [font-types](https://github.com/googlefonts/fontations) from 0.10.0 to 0.10.1.
+    # Commits
+    # c64c8f7 [chore] bump patch for types, read, skrifa (#1691)
+    # c75b6fc Merge pull request #1689 from googlefonts/space_splitting
+    # 1f61198 [klippa-repacker] space splitting overflow resolution
+    # b022894 [read-fonts+skrifa] CFF: clear stem hints for seac components (#1688)
+    # 0bd210e [read-fonts] CFF: ignore unknown operators (#1687)
+    # 8b20dfd [read-fonts] CFF: relax stack checks (#1686)
+    # 185e369 Merge pull request #1685 from googlefonts/fix_doc_link
+    # 4b0b683 fix broken_intra_doc_links
+    # 8b1798a Merge pull request #1682 from crlf0710/main
+    # ec7bbff Merge pull request #1683 from googlefonts/assign_spaces
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=font-types&package-manager=car
+    # go&previous-version=0.10.0&new-version=0.10.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/abou
+    # t-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40516	(@dependabot[bot], @dependabot[bot], #40516)	build(deps): bump weezl from 0.1.10 to 0.1.11 (#40516)
+    # Bumps [weezl](https://github.com/image-rs/weezl) from 0.1.10 to 0.1.11.
+    # Changelog
+    # Sourced from weezl's changelog.
+    # Version 0.1.11
+    # Adjusted a debug assertion that handled 1-bit code sizes incorrectly in the
+    # decoder (relevant for TIFF but non-standard for GIF). In that case the size
+    # switch semantics are a bit messy.
+    # Commits
+    # fca39dd Bump version to 0.1.11
+    # e2af58a Release notes for 0.1.11
+    # fa42aa4 Merge pull request #53 from image-rs/cleanup-fuzzers
+    # a686f30 Cleanup fuzzer runs
+    # 954cef3 Merge pull request #50 from image-rs/release-0.1.10
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=weezl&package-manager=cargo&pr
+    # evious-version=0.1.10&new-version=0.1.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dep
+    # endabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40515	(@dependabot[bot], @dependabot[bot], #40515)	build(deps): bump async-compression from 0.4.32 to 0.4.33 (#40515)
+    # Bumps [async-compression](https://github.com/Nullus157/async-compression) from 0.4.32 to 0.4.33.
+    # Commits
+    # 2aa1b5f chore: release (#393)
+    # 47667f0 Simplify WriteBuffer: Rm unwritten_initialized_mut (#413)
+    # e6b3819 fix: UnexpectedEof on truncated input (#412)
+    # 83a06fe Update async-compression to use codecs v2 (#410)
+    # 2c13c1d Dedup write::Encoder and simplify write::Decoder impl (#409)
+    # 7944821 Dedup write::Decoder::poll_write (#408)
+    # 28f4272 Optimize BufWriter::poll_* method (#407)
+    # 52e1043 Dedup write::{AsyncBufWriter, BufWriter, Decoder} (#406)
+    # 386f59e Early return in do_poll_read instead of keep polling (#404)
+    # 6c0835e Deduplicate bufread::Encoder impl (#402)
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=async-compression&package-mana
+    # ger=cargo&previous-version=0.4.32&new-version=0.4.33)](https://docs.github.com/en/github/managing-security-vulnerabiliti
+    # es/about-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+https://github.com/servo/servo/pull/39510	(@Taym95, #39510)	Implement read looping using a read request following the spec (#39510)
+    # Implement read looping using a read request following the spec.
+    # Testing:  current wpt test should pass.
+    # Fixes: #39482
++https://github.com/servo/servo/pull/40465	(@sagudev, #40465)	script: Start preparation to use safer JSContext (#40465)
+    script; safer mozjs api
+    # This PR is companion to https://github.com/servo/mozjs/pull/638, currently it only make stuff compile. In follwups
+    # we will start passing/using safer JSContext down everywhere.
+    # Testing: Not needed as it's just refactorings.
+    # try run: https://github.com/sagudev/servo/actions/runs/19196312972/job/54879090390
+>>> 2025-11-12T06:28:11Z
+-https://github.com/servo/servo/pull/40558	(@jschwe, #40558)	ohos: Make test-speedometer-ohos more robust (#40558)
+    # The main change is running `hdc shell power-shell setmode 602`, which sets the device to performance mode,
+    # increasing the screen timeout and manually waking the device up.
+    # We add a helper class for that, so that we can use the `with` syntax to undo these changes at the end of scope.
+    # We also add a small HDC wrapper class, which slightly simplifies and abstracts over some common functionality like
+    # running commands or making a screenshot.
+    # Testing: This is a CI script change.
+    # Fixes: Speculative fix for speedometer sometimes timing out on HOS and the screenshot showing a locked device screen.
+-https://github.com/servo/servo/pull/40577	(@dependabot[bot], @dependabot[bot], #40577)	build(deps): bump syn from 2.0.109 to 2.0.110 (#40577)
+    # Bumps [syn](https://github.com/dtolnay/syn) from 2.0.109 to 2.0.110.
+    # Release notes
+    # Sourced from syn's releases.
+    # 2.0.110
+    # Tweaks to improve build speed (#1939, thanks @​dishmaker)
+    # Make syn::ext::IdentExt::unraw available without &quot;parsing&quot; feature (#1940)
+    # Support parsing syn::Meta followed by =&gt; (#1944)
+    # Commits
+    # 1c8cabe Release 2.0.110
+    # 8ef195b Merge pull request #1944 from dtolnay/metaarrow
+    # 9ab4aef Support parsing Meta followed by fat arrow
+    # 7711764 Add test of parsing fat arrow after meta
+    # 193f52e Update test suite to nightly-2025-11-10
+    # 5ece7e1 Merge pull request #1941 from dtolnay/ext
+    # 6a44478 Add extension trait for Punct construction with span
+    # 798e109 Drop 2 from name of TokenStreamExt2
+    # b344f2d Never import name of quote::TokenStreamExt
+    # b0ec4c7 Touch up PR 1939
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=syn&package-manager=cargo&prev
+    # ious-version=2.0.109&new-version=2.0.110)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dep
+    # endabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40576	(@dependabot[bot], @dependabot[bot], #40576)	build(deps): bump hyper from 1.7.0 to 1.8.0 (#40576)
+    # Bumps [hyper](https://github.com/hyperium/hyper) from 1.7.0 to 1.8.0.
+    # Release notes
+    # Sourced from hyper's releases.
+    # v1.8.0
+    # Highlights
+    # Features
+    # rt: add Timer::now() method to allow overriding the instant returned (#3965) (5509ebe6)
+    # Bug Fixes
+    # http1: fix rare missed write wakeup on connections (#3952) (2377b893)
+    # http2: fix internals of HTTP/2 CONNECT upgrades (#3967) (58e0e7dc, closes #3966)
+    # Breaking Changes
+    # While technically breaking, it's assumed you will not need to do anything or be affected.
+    # The HTTP/2 client connection no longer allows an executor
+    # that can not spawn itself.
+    # This was an oversight originally. The client connection will now include spawning
+    # a future that keeps a copy of the executor to spawn other futures. Thus, if it is
+    # !Send, it needs to spawn !Send futures. The likelihood of executors that match
+    # the previously allowed behavior should be very remote.
+    # There is also technically a semver break in here, which is that the
+    # Http2ClientConnExec trait no longer dyn-compatible, because it now expects to
+    # be Clone. This should not break usage of the conn builder, because it already
+    # separately had E: Clone bounds. If someone were using dyn Http2ClientConnExec,
+    # that will break. However, there is no purpose for doing so, and it is not usable
+    # otherwise, since the trait only exists to propagate bounds into hyper. Thus, the
+    # breakage should not affect anyone.
+    # (58e0e7dc)
+    # What's Changed
+    # chore(ci): update to actions/checkout@v5 by @​tottoto in hyperium/hyper#3935
+    # refactor(ffi): specify &quot;C&quot; ABI explicitly in ffi_fn! macro by @​1911860538 in hyperium/hyper#3937
+    # Update documented default values for http1::Builder by @​Will-Low in hyperium/hyper#3938
+    # fix(client): port tests to in-memory socket by @​cratelyn in hyperium/hyper#3947
+    # feat: allow overriding the instant returned from Timer by @​arielb1 in hyperium/hyper#3965
+    # fix(http1): poll_loop writes when ready by @​lthiery in hyperium/hyper#3952
+    # test(ready_stream): replace tracing with printlns by @​seanmonstar in hyperium/hyper#3973
+    # fix(http2): fix internals of HTTP/2 CONNECT upgrades by @​seanmonstar in hyperium/hyper#3967
+    # Release v1.8.0 by @​seanmonstar in hyperium/hyper#3974
+    # New Contributors
+    # @​Will-Low made their first contribution in hyperium/hyper#3938
+    # @​arielb1 made their first contribution in hyperium/hyper#3965
+    # @​lthiery made their first contribution in hyperium/hyper#3952
+    # Changelog
+    # Sourced from hyper's changelog.
+    # v1.8.0 (2025-11-11)
+    # Bug Fixes
+    # http1: fix rare missed write wakeup on connections (#3952) (2377b893)
+    # http2: fix internals of HTTP/2 CONNECT upgrades (#3967) (58e0e7dc, closes #3966)
+    # Features
+    # rt: add Timer::now() method to allow overriding the instant returned (#3965) (5509ebe6)
+    # Breaking Changes
+    # The HTTP/2 client connection no longer allows an executor
+    # that can not spawn itself.
+    # This was an oversight originally. The client connection will now include spawning
+    # a future that keeps a copy of the executor to spawn other futures. Thus, if it is
+    # !Send, it needs to spawn !Send futures. The likelihood of executors that match
+    # the previously allowed behavior should be very remote.
+    # There is also technically a semver break in here, which is that the
+    # Http2ClientConnExec trait no longer dyn-compatible, because it now expects to
+    # be Clone. This should not break usage of the conn builder, because it already
+    # separately had E: Clone bounds. If someone were using dyn Http2ClientConnExec,
+    # that will break. However, there is no purpose for doing so, and it is not usable
+    # otherwise, since the trait only exists to propagate bounds into hyper. Thus, the
+    # breakage should not affect anyone.
+    # (58e0e7dc)
+    # Commits
+    # dbe6f25 v1.8.0
+    # 58e0e7d fix(http2): fix internals of HTTP/2 CONNECT upgrades (#3967)
+    # 0a37a8c test(ready_stream): replace tracing with printlns (#3973)
+    # 2377b89 fix(http1): fix rare missed write wakeup on connections (#3952)
+    # 5509ebe feat(rt): add Timer::now() method to allow overriding the instant returned ...
+    # f9f8f44 tests(client): port tests to in-memory socket (#3947)
+    # 5803a9c docs(server): update default values for http1::Builder (#3938)
+    # e1e1f2b refactor(ffi): specify &quot;C&quot; ABI explicitly in ffi_fn! macro (#3937)
+    # 64ab7ae chore(ci): update to actions/checkout@v5 (#3935)
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hyper&package-manager=cargo&pr
+    # evious-version=1.7.0&new-version=1.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depen
+    # dabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40573	(@dependabot[bot], @dependabot[bot], #40573)	build(deps): bump glslopt from 0.1.11 to 0.1.12 (#40573)
+    # Bumps [glslopt](https://github.com/jamienicol/glslopt-rs) from 0.1.11 to 0.1.12.
+    # Commits
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=glslopt&package-manager=cargo&
+    # previous-version=0.1.11&new-version=0.1.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-d
+    # ependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40574	(@dependabot[bot], @dependabot[bot], #40574)	build(deps): bump weezl from 0.1.11 to 0.1.12 (#40574)
+    # Bumps [weezl](https://github.com/image-rs/weezl) from 0.1.11 to 0.1.12.
+    # Changelog
+    # Sourced from weezl's changelog.
+    # Version 0.1.12
+    # Further adjusted a debug assertion for TIFF compatibility. It still had one
+    # of its OR conditions formulated incorrectly, relying on equality of the
+    # code word mask and the size switch code. In TIFF we hit the limit of the
+    # code dictionary (all 12-bit words) one code later than we would detect a
+    # code switch that we need to ignore.
+    # Commits
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=weezl&package-manager=cargo&pr
+    # evious-version=0.1.11&new-version=0.1.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dep
+    # endabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+https://github.com/servo/servo/pull/40556	(@mrobinson, #40556)	script: Have `FetchResponseListener::process_response_eof` consume the listener (#40556)
+    # The goal of this change is to prevent having to copy so much data out of
+    # listeners when a fetch completes, which will be particularly important
+    # for off-the-main thread parsing of CSS (see #22478). This change has
+    # pros and cons:
+    # Pros:
+    #  - This makes the design of the `FetchResponseListener` a great deal simpler.
+    #    They no longer individually store a dummy `ResourceFetchTiming` that is
+    #    only replaced right before `process_response_eof`.
+    #  - The creation of the `Arc>` in the
+    #    `NetworkListener` is abstracted away from clients and now they just
+    #    pass the `FetchResponseListener` to the fetch methods in the global.
+    # Cons:
+    #  - Now each `FetchResponseListener` must explicitly call `submit_timing`
+    #    instead of having the `NetworkListener` do it. This is arguably a bit
+    #    easier to follow in the code.
+    #  - Since the internal data of the `NetworkListener` is now an
+    #    `Arc>>`, when the fetching code
+    #    needs to share state with the `NetworkListener` it either needs to
+    #    share an `Option` or some sort of internal state. In one case I've
+    #    stored the `Option` and in another case, I've stored a new inner
+    #    shared value.
+    # Testing: This should not change observable behavior and is thus covered by existing tests.
+    # Fixes: #22550
+-https://github.com/servo/servo/pull/40565	(@simonwuelker, #40565)	tests: Remove duplicate xpath test (#40565)
+    # The test query `//L/*` is present twice in the xpathmark-FT test suite. Our WPT harness was complaining about that,
+    # so I've removed the second test instance.
+    # Depends on https://github.com/servo/servo/pull/40564
+    # Testing: The relevant test is now `OK`
+-https://github.com/servo/servo/pull/40564	(@simonwuelker, #40564)	script: Choose correct document for xpath queries (#40564)
+    # The result of an xpath query can depend on whether or not the document is a HTMLDocument. We should always use the
+    # document that `document.evaluate` was called on. Instead, we were using the document of the relevant window. This
+    # makes a difference when a script creates a document and calls `document.evaluate` on that.
+    # Testing: New tests start to pass
+https://github.com/servo/servo/pull/40542	(@simonwuelker, #40542)	xpath: Don't expect ancestor-or-self axis to be in tree order (#40542)
+    # Depends on https://github.com/servo/servo/pull/40541
+    # We still don't really pass any tests because we incorrectly compare local names case-sensitively. Needs more
+    # investigation.
+    # Testing: New tests start to not-crash
+    # Fixes https://github.com/servo/servo/issues/40540
+-https://github.com/servo/servo/pull/40559  (@Narfinger, #40559)    net: Small cleanup in http_network_or_cache_fetch (#40559)
+    # Previously there where two functions defined in this function which was already
+    # roughly 600 lines. There was also a blocking section which was split out.
+    # Testing: Should not change functionality and tests still work.
++https://github.com/servo/servo/pull/40501	(@mrobinson, @atbrakhi, #40501)	script: Add context-based context menu options (#40501)
+    api servoshell; copy link, open link in new, copy image link, open image in new, cut, copy, paste, select all
+    # Add context menu options for images, links, and editable text areas. In
+    # addition add the ability to show menu options that are disabled. This
+    # also improves the visual style of the context menu in egui as part of
+    # supporting disabled options.
+    # Testing: This has been manually tested, but we could we should be able to
+    # easily add unit tests when enriching the API with information about the
+    # active element under context menus.
+https://github.com/servo/servo/pull/40541	(@simonwuelker, #40541)	tests: Import the XPathMark-FT test suite (#40541)
+    # [XPathMark-FT](https://web.archive.org/web/20070720155520/https://users.dimi.uniud.it/~massimo.franceschet/xpathmark/FT.
+    # html)
+    # is a test suite targeting xpath 1.0 from 2005. It's not very big, but covers all operators, axes and functions. I've
+    # converted it to a web platform test in `mozilla/`.
+    # This exposes numerous new bugs (one of which being https://github.com/servo/servo/issues/40540), which will be
+    # fixed in followup changes. Firefox and chrome both pass all tests.
+    # Testing: This change adds new tests
+    # Fixes #39726
++https://github.com/servo/servo/pull/40554	(@Loirooriol, #40554)	script: Pass the right base URI to inline sheets (#40554)
+    layout; inline <style> now takes <base> into account
+    # HTMLStyleElement was creating stylesheets using the URI of the document, ignoring ``.
+    # To avoid having to create the UrlExtraData twice (or clone it), this inlines the `stylesheetcontents_create_callback`.
+    # Testing: 2 WPT are now passing
+    # Fixes: #40550
++https://github.com/servo/servo/pull/40557	(@kkoyung, #40557)	script: Implement verify operation of ECDSA (#40557)
+    dom; crypto.subtle.verify("ECDSA")
+    # Continue on adding ECDSA support to WebCrypto API. This patch implements verify operation of ECDSA, using ECDSA
+    # implementation from the crates `ecdsa` for the operation, `p256`, `p384`, `p521`, and `elliptic_curve` for the key,
+    # and `sha1`, `sha2` and `digest` for digesting messages.
+    # Testing: Pass some WPT tests that were expected to fail.
+    # Fixes: Part of #39060
+-https://github.com/servo/servo/pull/40555	(@Loirooriol, #40555)	deps: De-duplicate phf (#40555)
+    # Other than upgrading phf, phf_codegen and phf_shared to 0.13, this also upgrades html5ever, markup5ever and xml5ever
+    # to 0.36, string_cache to 0.9, and Stylo to https://github.com/servo/stylo/pull/266.
+    # Testing: Not needed, no behavior change
+    # Fixes: #40533
+-https://github.com/servo/servo/pull/40551	(@yezhizhen, #40551)	Fix compilation warning for platforms other than Linux (#40551)
+    # Testing: This only changes lint.
++https://github.com/servo/servo/pull/40553	(@kkoyung, #40553)	script: Implement generate key operation of ECDSA (#40553)
+    dom; crypto.subtle.generateKey("ECDSA")
+    # Continue on adding ECDSA support to WebCrypto API. This patch implements generate key operation of ECDSA, using
+    # ECDSA implementation from the crates `p256`, `p384`, `p521` and `elliptic_curve`.
+    # Testing: Pass some WPT tests that were expected to fail.
+    # Fixes: Part of #39060
+>>> 2025-11-13T06:23:16Z
+-https://github.com/servo/servo/pull/40587  (@tharkum, #40587)  html: Remove `canGC` argument from <media> internal `seek` method (#40587)
+    # The `seek` method isn't explicitly exposed in the API, but is called from various places (`currentTime`, `fastSeek`,
+    # by the `media metadata` event) and doesn't itself create new DOM objects, so the `canGC` argument can be omitted.
+    # It was previously required because calling the `Seekable` method creates a new `TimeRanges` object, but it will
+    # now be replaced by the internal `seekable` method to avoid interaction with the JavaScript engine (and potential
+    # garbage collector).
+    # The `earlyest possible position` method has been changed to match the specification and use `seekable` instead of
+    # `played`. See https://html.spec.whatwg.org/multipage/#earliest-possible-position
+    # Testing: No expected changes in tests
++https://github.com/servo/servo/pull/40598	(@mrobinson, #40598)	libservo: Add `WebView::can_go_forward` and `WebView::can_go_back` (#40598)
+    api servoshell
+    # These two new API method make it easier to enable and disable the back
+    # and forward buttons in the browser UI. In addition, they are used to
+    # enable and disable the context menu items for "Back" and "Forward". This
+    # is something that is much, much easier to do in the embedding layer,
+    # rather than in script.
+    # In addition, the new methods are wired up to the buttons in Servoshell.
+    # Testing: This change includes a new API test.
+https://github.com/servo/servo/pull/40590	(@mrobinson, #40590)	script: Use `ScriptEventLoopSender` for Runtime event loop callbacks (#40590)
+    # Instead of using a task source for SpiderMonkey runtime callbacks, use a
+    # `ScriptEventLoopSender`. Task sources are associated with a particular
+    # Pipeline, but the runtime callback is run indepenently of any particular
+    # Pipeline and could theoretically happen when no Pipeline exists at all.
+    # This reduces the dependency of the `ScriptThread` on the existence of
+    # the first Pipeline.
+    # Testing: This should not change observable behavior, so is covered by existing tests.
+-https://github.com/servo/servo/pull/40569	(@arihant2math, #40569)	storage: Webstorage testing (#40569)
+    # Adds some integration testing for webstorage.
+-https://github.com/servo/servo/pull/40563	(@tharkum, #40563)	bump(deps): bump servo-media from 5b788a9 to 8aca9f7 (#40563)
+    # Updated the `PlayerEvent::PositionChanged/SeekDone` events to support precise position timestamps (u64 -> f64).
+    # Also set precise time value (seconds with fractional part) for the HTMLMediaElement `duration` from media metadata
+    # to sync with `PlayerEvent` changes.
+    # servo-media:
+    # - Pass precise position timestamp within PlayerEvent (https://github.com/servo/media/pull/460)
+    # Testing: No expected changes in test results
+-https://github.com/servo/servo/pull/40586	(@mrobinson, #40586)	script: Consolidate more logic into `ScriptThread::spawn_pipeline` (#40586)
+    # Have more of the code follow the same path calling
+    # `ScriptThread::spawn_pipeline`. Somewhat tricky was that the `origin` of
+    # the new Pipeline was being determined in several different places, but
+    # all in a consistent way for different types of page loads. This change
+    # makes it is so that the origin is always determined in the same place.
+    # This change is preparation for splitting out the creation of a new
+    # `ScriptThread` and the spawning of its first pipeline.
+    # Testing: This should not change observable behavior, so is covered by existing tests.
+-https://github.com/servo/servo/pull/40595	(@nicoburns, #40595)	Bump html5ever to 0.36.1, stylo to f319793 (#40595)
+    # The versions of html5ever were bumped due to a breaking change to the `web_atoms` crate initially being published
+    # under the wrong version number.
+    # Testing: not required as the code is identical, only version numbers have changed.
++https://github.com/servo/servo/pull/40591	(@kkoyung, #40591)	script: Implement sign operation of ECDSA (#40591)
+    dom; crypto.subtle.sign("ECDSA")
+    # Finish adding ECDSA support to WebCrypto API. This patch implements sign operation of ECDSA, using ECDSA implementation
+    # from the crates `ecdsa` for the operation, `p256`, `p384`, `p521`, and `elliptic_curve` for the key, and `sha1`,
+    # `sha2` and `digest` for digesting messages.
+    # Testing: Pass some WPT tests that were expected to fail.
+    # Fixes: Part of #39060
+https://github.com/servo/servo/pull/40579	(@Loirooriol, #40579)	layout: Do not stretch block-level widgets by default (#40579)
+    # If a widget like `` had `display: block` and `width: auto`, we were stretching it like a ``. However, similar to
+    # replaced elements, widgets should not stretch by default.
+    # It will still be possible to opt into stretching with an explicit `justify-self: stretch` or `width: stretch`.
+    # Testing: Adding new test.
+-https://github.com/servo/servo/pull/40585  (@jschwe, #40585)   tidy: Minor cleanup of licenseck.py (#40585)
+https://github.com/servo/servo/pull/40588	(@simonwuelker, #40588)	xpath: Fix implementation for `preceding::`/`following::` axes (#40588)
+    # `preceding::` needs to yield all preceding nodes, excluding ancestors.
+    # `following::` needs to yield all following nodes, excluding descendants.
+    # Both `Node::preceding_nodes` and `Node::following_nodes` (which we're currently using) don't quite match these
+    # requirements, so we have to engineer some xpath-specific iterators.
+    # Testing: New tests start to pass
+https://github.com/servo/servo/pull/40568	(@rodio, #40568)	script: Introduce HtmlSerialize to support extensible node serialization (#40568)
+    # XML and HTML serialization routines relied on a single, shared implementation of the `markup5ever::Serialize`
+    # trait for the DOM Node type.
+    # These changes introduce the HtmlSerialize type to make it possible to support XML serialization and fix other issues.
+    # Testing: It does not change any behavior and it builds.
+    # Fixes: #40552
+-https://github.com/servo/servo/pull/40566  (@simonwuelker, #40566) xpath: Cleanup `normalize-space` and `translate` (#40566)
+https://github.com/servo/servo/pull/40366	(@austinwillis, #40366)	script: Add message to HierarchyRequestError (#40366)
+    # Adds an optional error message to HierarchyRequestError
+    # Testing: refactor
+    # Fixes: one item in #39053
+https://github.com/servo/servo/pull/40571	(@mrobinson, #40571)	script: Return only a `JoinHandle` from `ScriptThread` constructor (#40571)
+    # The `JoinHandle` was added as a newer return value from this
+    # constructor. Both return values accomplish more or less the same thing.
+    # The difference is that the `Sender` return value is triggered right
+    # before the thread ends while the `JoinHandle` is triggered after thread
+    # completion. One was used in multiprocess mode and one in single process
+    # mode. In any case, the `JoinHandle` works fine for both cases.
+    # Testing: Multiprocess isn't tested currently, but I confirmed that the
+    # ScripThread shut down properly in multiprocess mode with this change.
+>>> 2025-11-14T06:36:24Z
+-https://github.com/servo/servo/pull/40627	(@dependabot[bot], @dependabot[bot], #40627)	build(deps): bump libz-sys from 1.1.22 to 1.1.23 (#40627)
+    # Bumps [libz-sys](https://github.com/rust-lang/libz-sys) from 1.1.22 to 1.1.23.
+    # Release notes
+    # Sourced from libz-sys's releases.
+    # 1.1.23
+    # What's Changed
+    # Bump the github-actions group across 1 directory with 2 updates by @​dependabot[bot] in rust-lang/libz-sys#238
+    # Bump the github-actions group with 2 updates by @​dependabot[bot] in rust-lang/libz-sys#239
+    # Bump actions/download-artifact from 4.2.1 to 4.3.0 in the github-actions group by @​dependabot[bot] in
+    # rust-lang/libz-sys#240
+    # fix: Remove forcing static builds when cross-compiling by @​polarathene in rust-lang/libz-sys#244
+    # update to zlib-ng version 2.2.5 by @​folkertdev in rust-lang/libz-sys#251
+    # New Contributors
+    # @​polarathene made their first contribution in rust-lang/libz-sys#244
+    # Full Changelog: https://github.com/rust-lang/libz-sys/compare/1.1.22...1.1.23
+    # 1.1.23-zng
+    # What's Changed
+    # Bump the github-actions group across 1 directory with 2 updates by @​dependabot[bot] in rust-lang/libz-sys#238
+    # Bump the github-actions group with 2 updates by @​dependabot[bot] in rust-lang/libz-sys#239
+    # Bump actions/download-artifact from 4.2.1 to 4.3.0 in the github-actions group by @​dependabot[bot] in
+    # rust-lang/libz-sys#240
+    # fix: Remove forcing static builds when cross-compiling by @​polarathene in rust-lang/libz-sys#244
+    # update to zlib-ng version 2.2.5 by @​folkertdev in rust-lang/libz-sys#251
+    # New Contributors
+    # @​polarathene made their first contribution in rust-lang/libz-sys#244
+    # Full Changelog: https://github.com/rust-lang/libz-sys/compare/1.1.22...1.1.23-zng
+    # Commits
+    # 6452d5d Merge pull request #251 from folkertdev/zlib-ng-2.2.5
+    # 0a0dbc6 remove explicit usage of lld on nightly; it is the default now
+    # f39b070 update to zlib-ng version 2.2.5
+    # 1c2c7b0 Merge pull request #244 from polarathene/patch-1
+    # d382873 fix: Remove forcing static builds when cross-compiling
+    # 9c453d3 Merge pull request #240 from rust-lang/dependabot/github_actions/github-actio...
+    # dc00f04 Bump actions/download-artifact in the github-actions group
+    # 15c7dba Merge pull request #239 from rust-lang/dependabot/github_actions/github-actio...
+    # 229dc35 Bump the github-actions group with 2 updates
+    # b8dd5d4 Merge pull request #238 from rust-lang/dependabot/github_actions/github-actio...
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=libz-sys&package-manager=cargo
+    # &previous-version=1.1.22&new-version=1.1.23)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-
+    # dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40625	(@dependabot[bot], @dependabot[bot], #40625)	build(deps): bump crypto-common from 0.1.6 to 0.1.7 (#40625)
+    # Bumps [crypto-common](https://github.com/RustCrypto/traits) from 0.1.6 to 0.1.7.
+    # Commits
+    # 66a997c Pin generic-array to v0.14.7 and release crypto-common v0.1.7 (#2088)
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=crypto-common&package-manager=
+    # cargo&previous-version=0.1.6&new-version=0.1.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/abo
+    # ut-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40624	(@dependabot[bot], @dependabot[bot], #40624)	build(deps): bump anstyle-wincon from 3.0.10 to 3.0.11 (#40624)
+    # Bumps [anstyle-wincon](https://github.com/rust-cli/anstyle) from 3.0.10 to 3.0.11.
+    # Commits
+    # 368a871 chore: Release
+    # 4d5c297 docs: Update changelog
+    # 263b34c Merge pull request #284 from hanna-kruppe/windows-sys-0.61
+    # 8029e72 Merge pull request #286 from epage/template
+    # 5b1cab4 fix(syntect): Update a windows minimal dep
+    # 21b13fa chore(ci): Run more jobs on Windows
+    # 51e86fa chore: Update from '_rust/main' template
+    # b0881a6 chore(ci): Give more control over where alt version jobs run
+    # 829ebd7 chore(deps): Allow windows-sys 0.61
+    # 36dd1a2 Merge pull request #285 from epage/template
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anstyle-wincon&package-manager
+    # =cargo&previous-version=3.0.10&new-version=3.0.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/
+    # about-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40623	(@dependabot[bot], @dependabot[bot], #40623)	build(deps): bump aws-lc-rs from 1.14.1 to 1.15.0 (#40623)
+    # Bumps [aws-lc-rs](https://github.com/aws/aws-lc-rs) from 1.14.1 to 1.15.0.
+    # Release notes
+    # Sourced from aws-lc-rs's releases.
+    # aws-lc-rs v1.15.0
+    # What's Changed
+    # Universal Binding in aws-lc-sys 🎉 by @​justsmth in aws/aws-lc-rs#896
+    # Users of aws-lc-rs (non-FIPS) will no longer need to generate platform-specific bindings! This was previously a
+    # pain point for many as it added build latency and increased the tooling requirements on the build environment.
+    # Support for AES-CBC mode w/ no padding by @​Elvrarin in aws/aws-lc-rs#895
+    # New API supporting CMAC operations by @​Elvrarin in aws/aws-lc-rs#903
+    # Previously pub static values in our API are now pub const by @​justsmth in aws/aws-lc-rs#905
+    # Build Improvements
+    # Support for NetBSD by @​justsmth in aws/aws-lc-rs#945
+    # Fix: Add -Wa,--noexecstack to cc_builder for assembly files (resolves #939) by @​psifertex in aws/aws-lc-rs#940
+    # Support +crt-static through cargo xwin by  @​honsunrise and @​justsmth in aws/aws-lc-rs#938
+    # Set the correct runtime flags for FIPS binaries by @​elad-solomon in aws/aws-lc-rs#930
+    # (aws-lc-sys v0.32.2) Fix failure when CFLAGS provides -O3 by @​justsmth in aws/aws-lc-rs#900
+    # (aws-lc-sys v0.32.3) Fix for _FORTIFY_SOURCE by @​justsmth in aws/aws-lc-rs#906
+    # (aws-lc-sys v0.32.3) Drop explicit/pinned libloading dependency by @​djc in aws/aws-lc-rs#913
+    # (aws-lc-fips-sys v0.13.9) preserve optimization options from CFLAGS by @​justsmth in aws/aws-lc-rs#916)
+    # Issues Being Resolved
+    # aws-lc-sys-0.32.3: build breaks on NetBSD -- #932
+    # Build failure when targeting aarch64-pc-windows-gnullvm -- #919
+    # digest::Algorithm definitions are defined as static instead of const -- #904
+    # Is it possible to support arm v7 32-bit compilation? -- #890
+    # Pregenerated bindings for riscv64gc-unknown-linux-musl -- #874
+    # ESP32 target error -- #831
+    # Add bindgen by default if the OS needs to rebuild it -- #769
+    # Consolidate FFI bindings -- #371
+    # Other Merged PRs
+    # Prepare aws-lc-sys v0.32.1 by @​justsmth in aws/aws-lc-rs#898
+    # Prepare aws-lc-sys v0.32.2 by @​justsmth in aws/aws-lc-rs#901
+    # Prepare aws-lc-fips-sys v0.13.9 by @​justsmth in aws/aws-lc-rs#920
+    # Prepare aws-lc-sys v0.32.3 by @​justsmth in aws/aws-lc-rs#922
+    # Align aws-lc-sys v0.33.0 w/ AWS-LC v1.64.0 by @​justsmth in aws/aws-lc-rs#944
+    # Fix rustls integration CI by @​justsmth in aws/aws-lc-rs#915
+    # ci: scope down GitHub Token permissions by @​AdnaneKhan in aws/aws-lc-rs#928
+    # Include &quot;cmac.h&quot; header in universal bindings by @​justsmth in aws/aws-lc-rs#927
+    # CI to verify GNU-stack section is present by @​justsmth in aws/aws-lc-rs#942
+    # Replace macos-13 w/ macos-15-intel by @​justsmth in aws/aws-lc-rs#907
+    # Fix paths on macos-15-latest by @​justsmth in aws/aws-lc-rs#943
+    # Bump aws-lc-rs to v1.15.0 by @​justsmth in aws/aws-lc-rs#946
+    # Commits
+    # ce17e88 Bump aws-lc-rs to v1.15.0 (#946)
+    # 0c88590 Switch pub static values to pub const (#905)
+    # b161316 CI for NetBSD (#945)
+    # a58c3f0 Align aws-lc-sys v0.33.0 w/ AWS-LC v1.64.0 (#944)
+    # e3dcd05 Adds CMAC (#903)
+    # 962dbb1 Fix paths on macos-15-latest (#943)
+    # 75eae54 Support +crt-static through cargo xwin (#938)
+    # 61b520d Replace macos-13 w/ macos-15-intel (#907)
+    # b90b2a6 CI to verify GNU-stack section is present (#942)
+    # 9fe1e15 Set the correct runtime flags for FIPS binaries (#930)
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aws-lc-rs&package-manager=carg
+    # o&previous-version=1.14.1&new-version=1.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about
+    # -dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40622	(@dependabot[bot], @dependabot[bot], #40622)	build(deps): bump hyper-util from 0.1.17 to 0.1.18 (#40622)
+    # Bumps [hyper-util](https://github.com/hyperium/hyper-util) from 0.1.17 to 0.1.18.
+    # Release notes
+    # Sourced from hyper-util's releases.
+    # v0.1.18
+    # Highlights
+    # Fix rt::TokioTimer to support Tokio's paused time.
+    # Fix client::proxy::match::Matcher to parse auth without passwords.
+    # What's Changed
+    # chore(ci): add a github actions workflow to preview rustdocs of a PR by @​seanmonstar in hyperium/hyper-util#229
+    # chore(ci): fix rustdoc preview job by @​seanmonstar in hyperium/hyper-util#231
+    # chore(ci): fix rustdoc preview workflow typo by @​seanmonstar in hyperium/hyper-util#232
+    # docs: replace auto_doc_cfg by @​seanmonstar in hyperium/hyper-util#237
+    # perf(client): avoid redundant memory copies of Host header by @​0x676e67 in hyperium/hyper-util#235
+    # chore: bump windows-registry to 0.6 by @​Vaiz in hyperium/hyper-util#236
+    # fix: fix msrv on windows and macos target by @​tottoto in hyperium/hyper-util#239
+    # chore(ci): update to actions/checkout@v5 by @​tottoto in hyperium/hyper-util#240
+    # fix: allow proxy env URIs without password by @​karanabe in hyperium/hyper-util#241
+    # fix: support fake time by @​arielb1 in hyperium/hyper-util#238
+    # New Contributors
+    # @​Vaiz made their first contribution in hyperium/hyper-util#236
+    # @​karanabe made their first contribution in hyperium/hyper-util#241
+    # @​arielb1 made their first contribution in hyperium/hyper-util#238
+    # Thanks
+    # @​tottoto
+    # @​seanmonstar
+    # Full Changelog: https://github.com/hyperium/hyper-util/compare/v0.1.17...v0.1.18
+    # Changelog
+    # Sourced from hyper-util's changelog.
+    # 0.1.18 (2025-11-13)
+    # Fix rt::TokioTimer to support Tokio's paused time.
+    # Fix client::proxy::match::Matcher to parse auth without passwords.
+    # Commits
+    # 203c956 v0.1.18
+    # d91ea8e fix(rt): support fake time in legacy client and TokioTimer (#238)
+    # dde14d3 fix(client): Proxy Matcher to handle proxy auth without password (#241)
+    # b9dc3d2 chore(ci): update to actions/checkout@v5 (#240)
+    # d4f5706 ci: fix msrv on windows and macos target (#239)
+    # 3c8dbe4 chore: bump windows-registry to 0.6 (#236)
+    # 72bbd22 perf(client): avoid redundant memory copies of Host header (#235)
+    # 1c8f7c6 docs: replace auto_doc_cfg (#237)
+    # 66afc93 chore(ci): use auto pr ref in rustdoc-preview workflow
+    # faf5ca2 chore(ci): fix rustdoc preview workflow typo (#232)
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hyper-util&package-manager=car
+    # go&previous-version=0.1.17&new-version=0.1.18)](https://docs.github.com/en/github/managing-security-vulnerabilities/abou
+    # t-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40621	(@dependabot[bot], @dependabot[bot], #40621)	build(deps): bump hyper from 1.8.0 to 1.8.1 (#40621)
+    # Bumps [hyper](https://github.com/hyperium/hyper) from 1.8.0 to 1.8.1.
+    # Release notes
+    # Sourced from hyper's releases.
+    # v1.8.1
+    # Bug Fixes
+    # http1: fix consuming extra CPU from previous change (#3977) (4492f31e)
+    # Full Changelog: https://github.com/hyperium/hyper/compare/v1.8.0...v1.8.1
+    # Changelog
+    # Sourced from hyper's changelog.
+    # v1.8.1 (2025-11-13)
+    # Bug Fixes
+    # http1: fix consuming extra CPU from previous change (#3977) (4492f31e)
+    # Commits
+    # 166c6ca v1.8.1
+    # 4492f31 fix(http1): fix consuming extra CPU from previous change (#3977)
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hyper&package-manager=cargo&pr
+    # evious-version=1.8.0&new-version=1.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depen
+    # dabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40620	(@dependabot[bot], @dependabot[bot], #40620)	build(deps): bump anstyle-query from 1.1.4 to 1.1.5 (#40620)
+    # Bumps [anstyle-query](https://github.com/rust-cli/anstyle) from 1.1.4 to 1.1.5.
+    # Commits
+    # 368a871 chore: Release
+    # 4d5c297 docs: Update changelog
+    # 263b34c Merge pull request #284 from hanna-kruppe/windows-sys-0.61
+    # 8029e72 Merge pull request #286 from epage/template
+    # 5b1cab4 fix(syntect): Update a windows minimal dep
+    # 21b13fa chore(ci): Run more jobs on Windows
+    # 51e86fa chore: Update from '_rust/main' template
+    # b0881a6 chore(ci): Give more control over where alt version jobs run
+    # 829ebd7 chore(deps): Allow windows-sys 0.61
+    # 36dd1a2 Merge pull request #285 from epage/template
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anstyle-query&package-manager=
+    # cargo&previous-version=1.1.4&new-version=1.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/abo
+    # ut-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40619	(@dependabot[bot], @dependabot[bot], #40619)	build(deps): bump the egui-related group with 7 updates (#40619)
+    # Bumps the egui-related group with 7 updates:
+    # | Package | From | To |
+    # | --- | --- | --- |
+    # | [egui](https://github.com/emilk/egui) | `0.33.0` | `0.33.2` |
+    # | [egui-winit](https://github.com/emilk/egui) | `0.33.0` | `0.33.2` |
+    # | [egui_glow](https://github.com/emilk/egui) | `0.33.0` | `0.33.2` |
+    # | [ecolor](https://github.com/emilk/egui) | `0.33.0` | `0.33.2` |
+    # | [emath](https://github.com/emilk/egui) | `0.33.0` | `0.33.2` |
+    # | [epaint](https://github.com/emilk/egui) | `0.33.0` | `0.33.2` |
+    # | [epaint_default_fonts](https://github.com/emilk/egui) | `0.33.0` | `0.33.2` |
+    # Updates `egui` from 0.33.0 to 0.33.2
+    # Release notes
+    # Sourced from egui's releases.
+    # 0.33.2
+    # egui is an easy-to-use immediate mode GUI for Rust that runs on both web and native.
+    # Try it now: https://www.egui.rs/
+    # egui development is sponsored by Rerun, a startup building an SDK for visualizing streams of multimodal data.
+    # egui changelog
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # eframe changelog
+    # Fix jittering during window resize on MacOS for WGPU/Metal #7641 by @​aspcartman
+    # Make sure native_pixels_per_point is set during app creation #7683 by @​emilk
+    # Changelog
+    # Sourced from egui's changelog.
+    # 0.33.2 - 2025-11-13
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # Commits
+    # 978ec6c Update changelogs and version for 0.33.2
+    # 0ef57d5 Fix ui.response().interact(Sense::click()) being flakey (#7713)
+    # d06c28c Fix double negative in documentation (#7711)
+    # 787c467 Prevent widgets sometimes appearing to move relative to each other (#7710)
+    # 33cc8ef Prevent drift when resizing and moving windows (#7709)
+    # 5ae6d6d Add Response::total_drag_delta and PointerState::total_drag_delta (#7708)
+    # 74dce78 Hide scroll bars when dragging other things (#7689)
+    # d5320fe Improve accessibility and testability of ComboBox (#7658)
+    # 0b9bb5f Make sure native_pixels_per_point is set during app creation (#7683)
+    # 9253acd Fix edge cases in &quot;smart aiming&quot; in sliders (#7680)
+    # Additional commits viewable in compare view
+    # Updates `egui-winit` from 0.33.0 to 0.33.2
+    # Release notes
+    # Sourced from egui-winit's releases.
+    # 0.33.2
+    # egui is an easy-to-use immediate mode GUI for Rust that runs on both web and native.
+    # Try it now: https://www.egui.rs/
+    # egui development is sponsored by Rerun, a startup building an SDK for visualizing streams of multimodal data.
+    # egui changelog
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # eframe changelog
+    # Fix jittering during window resize on MacOS for WGPU/Metal #7641 by @​aspcartman
+    # Make sure native_pixels_per_point is set during app creation #7683 by @​emilk
+    # Changelog
+    # Sourced from egui-winit's changelog.
+    # 0.33.2 - 2025-11-13
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # Commits
+    # 978ec6c Update changelogs and version for 0.33.2
+    # 0ef57d5 Fix ui.response().interact(Sense::click()) being flakey (#7713)
+    # d06c28c Fix double negative in documentation (#7711)
+    # 787c467 Prevent widgets sometimes appearing to move relative to each other (#7710)
+    # 33cc8ef Prevent drift when resizing and moving windows (#7709)
+    # 5ae6d6d Add Response::total_drag_delta and PointerState::total_drag_delta (#7708)
+    # 74dce78 Hide scroll bars when dragging other things (#7689)
+    # d5320fe Improve accessibility and testability of ComboBox (#7658)
+    # 0b9bb5f Make sure native_pixels_per_point is set during app creation (#7683)
+    # 9253acd Fix edge cases in &quot;smart aiming&quot; in sliders (#7680)
+    # Additional commits viewable in compare view
+    # Updates `egui_glow` from 0.33.0 to 0.33.2
+    # Release notes
+    # Sourced from egui_glow's releases.
+    # 0.33.2
+    # egui is an easy-to-use immediate mode GUI for Rust that runs on both web and native.
+    # Try it now: https://www.egui.rs/
+    # egui development is sponsored by Rerun, a startup building an SDK for visualizing streams of multimodal data.
+    # egui changelog
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # eframe changelog
+    # Fix jittering during window resize on MacOS for WGPU/Metal #7641 by @​aspcartman
+    # Make sure native_pixels_per_point is set during app creation #7683 by @​emilk
+    # Changelog
+    # Sourced from egui_glow's changelog.
+    # 0.33.2 - 2025-11-13
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # Commits
+    # 978ec6c Update changelogs and version for 0.33.2
+    # 0ef57d5 Fix ui.response().interact(Sense::click()) being flakey (#7713)
+    # d06c28c Fix double negative in documentation (#7711)
+    # 787c467 Prevent widgets sometimes appearing to move relative to each other (#7710)
+    # 33cc8ef Prevent drift when resizing and moving windows (#7709)
+    # 5ae6d6d Add Response::total_drag_delta and PointerState::total_drag_delta (#7708)
+    # 74dce78 Hide scroll bars when dragging other things (#7689)
+    # d5320fe Improve accessibility and testability of ComboBox (#7658)
+    # 0b9bb5f Make sure native_pixels_per_point is set during app creation (#7683)
+    # 9253acd Fix edge cases in &quot;smart aiming&quot; in sliders (#7680)
+    # Additional commits viewable in compare view
+    # Updates `ecolor` from 0.33.0 to 0.33.2
+    # Release notes
+    # Sourced from ecolor's releases.
+    # 0.33.2
+    # egui is an easy-to-use immediate mode GUI for Rust that runs on both web and native.
+    # Try it now: https://www.egui.rs/
+    # egui development is sponsored by Rerun, a startup building an SDK for visualizing streams of multimodal data.
+    # egui changelog
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # eframe changelog
+    # Fix jittering during window resize on MacOS for WGPU/Metal #7641 by @​aspcartman
+    # Make sure native_pixels_per_point is set during app creation #7683 by @​emilk
+    # Changelog
+    # Sourced from ecolor's changelog.
+    # 0.33.2 - 2025-11-13
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # Commits
+    # 978ec6c Update changelogs and version for 0.33.2
+    # 0ef57d5 Fix ui.response().interact(Sense::click()) being flakey (#7713)
+    # d06c28c Fix double negative in documentation (#7711)
+    # 787c467 Prevent widgets sometimes appearing to move relative to each other (#7710)
+    # 33cc8ef Prevent drift when resizing and moving windows (#7709)
+    # 5ae6d6d Add Response::total_drag_delta and PointerState::total_drag_delta (#7708)
+    # 74dce78 Hide scroll bars when dragging other things (#7689)
+    # d5320fe Improve accessibility and testability of ComboBox (#7658)
+    # 0b9bb5f Make sure native_pixels_per_point is set during app creation (#7683)
+    # 9253acd Fix edge cases in &quot;smart aiming&quot; in sliders (#7680)
+    # Additional commits viewable in compare view
+    # Updates `emath` from 0.33.0 to 0.33.2
+    # Release notes
+    # Sourced from emath's releases.
+    # 0.33.2
+    # egui is an easy-to-use immediate mode GUI for Rust that runs on both web and native.
+    # Try it now: https://www.egui.rs/
+    # egui development is sponsored by Rerun, a startup building an SDK for visualizing streams of multimodal data.
+    # egui changelog
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # eframe changelog
+    # Fix jittering during window resize on MacOS for WGPU/Metal #7641 by @​aspcartman
+    # Make sure native_pixels_per_point is set during app creation #7683 by @​emilk
+    # Changelog
+    # Sourced from emath's changelog.
+    # 0.33.2 - 2025-11-13
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # Commits
+    # 978ec6c Update changelogs and version for 0.33.2
+    # 0ef57d5 Fix ui.response().interact(Sense::click()) being flakey (#7713)
+    # d06c28c Fix double negative in documentation (#7711)
+    # 787c467 Prevent widgets sometimes appearing to move relative to each other (#7710)
+    # 33cc8ef Prevent drift when resizing and moving windows (#7709)
+    # 5ae6d6d Add Response::total_drag_delta and PointerState::total_drag_delta (#7708)
+    # 74dce78 Hide scroll bars when dragging other things (#7689)
+    # d5320fe Improve accessibility and testability of ComboBox (#7658)
+    # 0b9bb5f Make sure native_pixels_per_point is set during app creation (#7683)
+    # 9253acd Fix edge cases in &quot;smart aiming&quot; in sliders (#7680)
+    # Additional commits viewable in compare view
+    # Updates `epaint` from 0.33.0 to 0.33.2
+    # Release notes
+    # Sourced from epaint's releases.
+    # 0.33.2
+    # egui is an easy-to-use immediate mode GUI for Rust that runs on both web and native.
+    # Try it now: https://www.egui.rs/
+    # egui development is sponsored by Rerun, a startup building an SDK for visualizing streams of multimodal data.
+    # egui changelog
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # eframe changelog
+    # Fix jittering during window resize on MacOS for WGPU/Metal #7641 by @​aspcartman
+    # Make sure native_pixels_per_point is set during app creation #7683 by @​emilk
+    # Changelog
+    # Sourced from epaint's changelog.
+    # 0.33.2 - 2025-11-13
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # Commits
+    # 978ec6c Update changelogs and version for 0.33.2
+    # 0ef57d5 Fix ui.response().interact(Sense::click()) being flakey (#7713)
+    # d06c28c Fix double negative in documentation (#7711)
+    # 787c467 Prevent widgets sometimes appearing to move relative to each other (#7710)
+    # 33cc8ef Prevent drift when resizing and moving windows (#7709)
+    # 5ae6d6d Add Response::total_drag_delta and PointerState::total_drag_delta (#7708)
+    # 74dce78 Hide scroll bars when dragging other things (#7689)
+    # d5320fe Improve accessibility and testability of ComboBox (#7658)
+    # 0b9bb5f Make sure native_pixels_per_point is set during app creation (#7683)
+    # 9253acd Fix edge cases in &quot;smart aiming&quot; in sliders (#7680)
+    # Additional commits viewable in compare view
+    # Updates `epaint_default_fonts` from 0.33.0 to 0.33.2
+    # Release notes
+    # Sourced from epaint_default_fonts's releases.
+    # 0.33.2
+    # egui is an easy-to-use immediate mode GUI for Rust that runs on both web and native.
+    # Try it now: https://www.egui.rs/
+    # egui development is sponsored by Rerun, a startup building an SDK for visualizing streams of multimodal data.
+    # egui changelog
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # eframe changelog
+    # Fix jittering during window resize on MacOS for WGPU/Metal #7641 by @​aspcartman
+    # Make sure native_pixels_per_point is set during app creation #7683 by @​emilk
+    # Changelog
+    # Sourced from epaint_default_fonts's changelog.
+    # 0.33.2 - 2025-11-13
+    # ⭐ Added
+    # Add Plugin::on_widget_under_pointer to support widget inspector #7652 by @​juancampa
+    # Add Response::total_drag_delta and PointerState::total_drag_delta #7708 by @​emilk
+    # 🔧 Changed
+    # Improve accessibility and testability of ComboBox #7658 by @​lucasmerlin
+    # 🐛 Fixed
+    # Fix profiling::scope compile error when profiling using tracing backend #7646 by @​PPakalns
+    # Fix edge cases in &quot;smart aiming&quot; in sliders #7680 by @​emilk
+    # Hide scroll bars when dragging other things #7689 by @​emilk
+    # Prevent widgets sometimes appearing to move relative to each other #7710 by @​emilk
+    # Fix ui.response().interact(Sense::click()) being flakey #7713 by @​lucasmerlin
+    # Commits
+    # 978ec6c Update changelogs and version for 0.33.2
+    # 0ef57d5 Fix ui.response().interact(Sense::click()) being flakey (#7713)
+    # d06c28c Fix double negative in documentation (#7711)
+    # 787c467 Prevent widgets sometimes appearing to move relative to each other (#7710)
+    # 33cc8ef Prevent drift when resizing and moving windows (#7709)
+    # 5ae6d6d Add Response::total_drag_delta and PointerState::total_drag_delta (#7708)
+    # 74dce78 Hide scroll bars when dragging other things (#7689)
+    # d5320fe Improve accessibility and testability of ComboBox (#7658)
+    # 0b9bb5f Make sure native_pixels_per_point is set during app creation (#7683)
+    # 9253acd Fix edge cases in &quot;smart aiming&quot; in sliders (#7680)
+    # Additional commits viewable in compare view
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40617	(@sagudev, #40617)	CI: Limit github runner mac to macos-arm-unit-tests only on merge queue (#40617)
+    # Based on the chat here: https://github.com/servo/servo/issues/40596#issuecomment-3528514438 we limit mac-arm (those
+    # are bottlenecks as they are not self hosted) to merge queue (so we know that main is good so we can skip run there)
+    # and we do not run MSRV check there to further limit uses.
+    # Testing: None, because it's just infra.
+    # Temp fixes: #40596
+https://github.com/servo/servo/pull/40608	(@WaterWhisperer, #40608)	script: Fix MutationObserver to use `Dom` instead of `DomRoot` (#40608)
+    # converts MutationObserver's record_queue and node_list, as well as RegisteredObserver's observer field, to use
+    # Dom instead.
+    # Testing: `./mach build --use-crown` pass locally
+    # Fixes #40602
+https://github.com/servo/servo/pull/40593	(@simonwuelker, #40593)	xpath: Handle a NodeSet being passed to `id` (#40593)
+    # When a NodeSet is passed to the `id` function then we want to act as if we were computing the union of individual
+    # `id` calls for each node in the set. We weren't doing that before.
+    # Depends on https://github.com/servo/servo/pull/40592
+    # Testing: A new test starts to pass
++https://github.com/servo/servo/pull/40614	(@jschwe, #40614)	Update servoshell to v0.0.2 (#40614)
+    release
+    # Ran ./mach release 0.0.2 to update the version number and update the license.html
+    # This is in preperation for the v0.0.2 release with the next nightly, as discussed on zulip.
+    # Testing: Not tested
+-https://github.com/servo/servo/pull/40612	(@simonwuelker, #40612)	Replace calls to ".filter_map()" followed by ".next()" with ".find_map()" (#40612)
+    # The two are semantically equivalent, but `find_map` is more concise.
+    # Testing: Covered by existing tests
+-https://github.com/servo/servo/pull/40606	(@WaterWhisperer, #40606)	chore: Update actions/checkout to @v5 (#40606)
+    # update all occurences (in `servo/.github`) to v5
+    # Testing: None
+    # Fixes: #40604
+-https://github.com/servo/servo/pull/40609	(@tharkum, #40609)	html: Add <media> `current` and `official` playback positions (#40609)
+    # Follow the HTML specification and split the previous `playback position` to `current playback position` (a time
+    # on the media timeline) and `official playbac position` (an approximation of the current playback position that
+    # is kept stable while scripts are running) which must be set to `the current playback position` any time the user
+    # agent provides a stable state.
+    # See https://html.spec.whatwg.org/multipage/#current-playback-position
+    # See https://html.spec.whatwg.org/multipage/#official-playback-position
+    # Note that at this point, there are no difference between the `current` and `official` playback positions (as the
+    # time on the media timeline), except the `seek` case.
+    # Testing: Improvements in the following tests
+    # - html/semantics/embedded-content/media-elements/seeking/seek-to-max-value.htm
+    # - html/semantics/embedded-content/media-elements/seeking/seek-to-negative-time.htm
+    # Fixes: https://github.com/servo/servo/issues/34496
+-https://github.com/servo/servo/pull/40508	(@Taym95, #40508)	Add AbortSignal garbage collection (#40508)
+    # Add AbortSignal garbage collection
+    # Testing: all AbortSignal should pass.
+    # Fixes: #40481
+https://github.com/servo/servo/pull/40592	(@simonwuelker, #40592)	xpath: Apply predicate list before sorting result when evaluating location step expression (#40592)
+    # The result of a predicate can depend on the position of the node in its set, and this position is dependent on
+    # the axis that the node set came from. This is specified in https://www.w3.org/TR/1999/REC-xpath-19991116/#predicates.
+    # Additionally, this change fixes a small bug in the implementation of `preceding::`
+    # (https://github.com/servo/servo/pull/40588) where the root of a subtree would be included twice. That wasn't
+    # discovered earlier because nodes are deduplicated at the end of the evaluation.
+    # Testing: New tests start to pass, this change adds more tests
+https://github.com/servo/servo/pull/40507	(@mrobinson, #40507)	servoshell: Close all embedder controls when loading a toplevel page in WebDriver (#40507)
+    # This is a speculative attempt to make WebDriver WPT runs more stable.
+    # Without this change, it seems likely that embedder controls could stay
+    # open indefinitely during WebDriver test runs.
+    # Signed-off-by: Martin Robinson
+    # Testing: This should (hopefully) decrease the amount of tests that flake
+    # when running WPT.
+https://github.com/servo/servo/pull/40597	(@WaterWhisperer, @zazabap, #40597)	script: servoparser line number pass to CSP (#40597)
+    # takes over the initial work from @zazabap in PR #38675 (Thanks @zazabap!)
+    # Testing:
+    # `./mach test-wpt content-security-policy/securitypolicyviolation/blockeduri-inline.html`
+    # `./mach test-wpt /css/CSS2/abspos/abspos-containing-block-initial-001.xht`
+    # Fixes #38167
+    # Closes #38675
+https://github.com/servo/servo/pull/40605	(@kkoyung, #40605)	script: Correctly parse spki and pkcs8 of ECDH (#40605)
+    # We parse the `parameter` field of the `algorithm` AlgorithmIdentifier field of `spki` and `pkcs8` of ECDH keys as
+    # an object identifier. However, according to WebCrypto API specification, we should parse it as an `ECParameters`
+    # ASN.1 type defined in [RFC5480].
+    # ```plaintext
+    # ECParameters ::= CHOICE {
+    #   namedCurve         OBJECT IDENTIFIER
+    #   -- implicitCurve   NULL
+    #   -- specifiedCurve  SpecifiedECDomain
+    # }
+    # ```
+    # Although our current implementation works fine since `ECParameters` is defined as a `CHOICE` type with an object
+    # identifier as the only option, it is technically incorrect. This patch fixes this mistake.
+    # Testing: No behavioral change. Existing tests suffice.
+https://github.com/servo/servo/pull/40319	(@arihant2math, #40319)	Add servo:license (#40319)
+    # Similar to about:license in firefox. Generated with `cargo-about`.
+    # A few open questions:
+    # - When/how should it be updated (the command I used was `cargo about generate etc/about.hbs >
+    # resources/resource_protocol/license.html`, it takes ~20 seconds)
+    # - How should `about.toml` be kept in sync with `deny.toml`
+    # - What about licenses for packages that are not crates (i.e. gstreamer)
+    # Fixes: #40266
+https://github.com/servo/servo/pull/40603	(@tharkum, #40603)	html: Add <media> internal `ended_playback` method (#40603)
+    # Following the HTML specification, a new internal method, `ended_playback`, has been added to differentiate it from
+    # the `ended` attribute:
+    # - `ended_playback`: playback has ended for the `forward/backward` directions
+    # - `ended` attribute: playback has ended for the `forward` direction
+    # See https://html.spec.whatwg.org/multipage/#ended-playback
+    # Added descriptions for the steps of the `Play`, `Pause`, `internal_play_steps` (new), `internal_pause_steps`,
+    # `notify_about_playing`, `change_ready_state`  methods.
+    # Testing: No expected changes in test results.
+>>> 2025-11-15T06:07:10Z
++https://github.com/servo/servo/pull/34846	(@nicoburns, #34846)	Support `calc()` values in CSS Grid (#34846)
+    layout
+    # Depends on:
+    # - https://github.com/servo/stylo/pull/104
+    # - https://github.com/servo/servo/pull/34926
+    # - https://github.com/servo/servo/pull/34927
+    # - https://github.com/servo/servo/pull/34948
+    # In addition to that a `resolve_calc_value` function has been added which resolves calc values during the layout
+    # process once a percentage resolution basis is available.
+    # ~~There is 1 newly failing test and 1 newly failing subtest here.~~ These issues have now been fixed.
+    # There are 8 new subtest failures in `css/css-grid/grid-definition/grid-minimum-contribution-with-percentages.html`.
+    # These are genuine failures, but are unrelated to the calc implementation. The calc implementation is just exposing
+    # a pre-existing bug around percentage resolution that also now correctly also applies to `calc()` values containing
+    # percentages. The fix for would best be done in a followup as it requires teaching Taffy about "compressible replaced
+    # elements". (update: I have this [implemented](https://github.com/servo/servo/pull/34948) but in the interest of
+    # keeping it to one feature per PR I have not included it here)
+https://github.com/servo/servo/pull/40644	(@tharkum, #40644)	html: Handle new `DurationChanged` event by <media> (#40644)
+    # A new event `PlayerEvent::DurationChanged` has been added to the media engine to simplify handling changes in the
+    # duration of a media stream (sometimes the duration could be inaccurate or even determined by the media engine with
+    # significant delay after the initial metadata was ready).
+    # This new event eliminates the need to check conditions for two consecutive `MetadataUpdated` events (the initial
+    # metadata and the metadata with the changed duration) during the loading phase.
+    # servo-media:
+    # - Add new `PlayerEvent::DurationChanged` event (https://github.com/servo/media/pull/461)
+    # Testing: No expected changes in test results
+    # Fixes: https://github.com/servo/servo/issues/40626
+https://github.com/servo/servo/pull/40616	(@TimvdLippe, #40616)	Implement protocol handler web API's behind flag (#40616)
+    # This implements the web-facing API's behind a flag, where we further design the embedding API in a
+    # follow-up PR.
+    # It passes all relevant WPT tests, since the HTML
+    # specification leaves it up to user agents to
+    # determine when to process these protocol handlers.
+    # It also uses `once_cell` to lazily construct the
+    # regex, which is what the CSP crate also uses for
+    # its regexes [1].
+    # Part of #40615
+    # [1]:
+    # https://github.com/rust-ammonia/rust-content-security-policy/blob/db8f2e97fed57a6f903ee4f5e8109e5ed4c10141/src/lib.rs#L1
+    # 550-L1569
+-https://github.com/servo/servo/pull/40643	(@kkoyung, #40643)	script: Flatten nested match arms in `NormalizedAlgorithm` (#40643)
+    # This patch flattens nested match arms in `NormalizedAlgorithm` to simplify our code. Moreover, primarily matching
+    # the algorithm names, instead of matching the enum variant types, makes more sense, since some algorithms share
+    # the same enum variant type.
+    # Testing: Refactoring. Existing tests suffice.
+-https://github.com/servo/servo/pull/40642	(@kkoyung, #40642)	wpt: Remove legacy expectation (#40642)
+    # These WPT tests on WebCrypto API were either renamed or removed. We can safely remove these legacy test expectations
+-https://github.com/servo/servo/pull/40629	(@kongbai1996, #40629)	Add scroll and fling trace. (#40629)
+    # Add scroll and fling trace.
+    # Testing: There are no related tests available for now; we will add a test item for frame rate statistics on CI later.
+    # Fixes: NA
+https://github.com/servo/servo/pull/40618	(@mrobinson, #40618)	script: Issue resource timing for stylesheets before the "load" event (#40618)
+    # Tests seem to assume that resource timing is available during the "load"
+    # event. Doing so causes some tests to pass and others to fail, which
+    # appear to have been false passes.
+    # This is a preparatory change for asynchronous stylesheet parsing, when
+    # resource timing entires must be added before sending stylesheets to
+    # another thread for parsing.
+    # Testing: This change updates WPT test results.
+>>> 2025-11-16T06:14:11Z
+https://github.com/servo/servo/pull/40455	(@yezhizhen, #40455)	servodriver: Shut down Servo elegantly when all tests finish (#40455)
+    # Previously, we always kill the instance when tests finish instead of normally shutting down. That blocked clean-ups
+    # works, such as Code Coverage we wanted to add, and other things I'm not aware of.
+    # Testing: We have tested for a week and checked the logs of CI to confirm it works normally now.
+-https://github.com/servo/servo/pull/40660	(@servo-wpt-sync, #40660)	Sync WPT with upstream (16-11-2025) (#40660)
+    # Automated downstream sync of changes from upstream as of 16-11-2025
+    # [no-wpt-sync]
+-https://github.com/servo/servo/pull/40658	(@arihant2math, #40658)	indexeddb: Fix typo in range sql generator (#40658)
+    # Minor typo.
+    # Testing: WPT
+    # Fixes: WPT Tests
+https://github.com/servo/servo/pull/38286	(@sagudev, #38286)	canvas: Clear bitmap without transform (#38286)
+    # We only need to clear the viewport and with wrong transform this will not do.
+    # Testing: Existing WPT tests
+https://github.com/servo/servo/pull/40657	(@simonwuelker, #40657)	script: Don't rely on Attr nodes when communicating with layout (#40657)
+    # When script is looking up an attribute for layout then it only needs to care about the attribute value. The
+    # `Attr` node itself is not required. If we want to lazily construct attribute nodes in the future
+    # (https://github.com/servo/servo/issues/36697) then we should use `Attr` as little as possible.
+    # This also ends up simplifying the code by accident.
+    # Testing: No behaviour change intended, regressions are covered by existing tests.
+    # Part of https://github.com/servo/servo/issues/36697
+https://github.com/servo/servo/pull/40646	(@mrobinson, #40646)	script: Eliminate duplicate quirks mode origin check in stylesheet loader (#40646)
+    # This was due to the fact that two PRs doing this landed around the same
+    # time. This PR eliminates the duplicate check.
+    # Testing: This should not change behavior so is covered by existing tests.
+-https://github.com/servo/servo/pull/40652	(@kkoyung, #40652)	script: Housekeeping WebIDL dictionaries of WebCrypto API (#40652)
+    # Housekeeping of WebIDL dictionaries of WebCrypto API, including:
+    # - Add/Fix spec links in `SubtleCrypto.webidl` and `CryptoKey.webidl`.
+    # - Sort dictionaries in `subtlecrypto.webidl` based on the spec.
+    # - Sort the `subtle` structs in `subtlecrypto.rs`, based on the spec.
+    # - Reduce unneeded visibility of those `subtle` structs.
+    # Testing: No behavioral change. Existing tests suffice.
+https://github.com/servo/servo/pull/40651	(@jschwe, @jdm, #40651)	Tweak automatic release notes (#40651)
+    # When drafting github releases, there is an option
+    # to automatically generate a list of changes based on merged PR titles.
+    # For now we simply exclude dependabot PRs, but in the future we might want to use labels to further optimise the
+    # automatic release notes usefulness.
+    # Documentation:
+    # https://docs.github.com/en/repositories/releasing-projects-on-github/automatically-generated-release-notes#configuring-a
+    # utomatically-generated-release-notes
+    # Testing: Not tested, no impact on servo itself.
+https://github.com/servo/servo/pull/40650	(@kkoyung, #40650)	script: Use `hkdf` crate for HKDF in WebCrypto (#40650)
+    # We currently use the crate `aws-lc-rs` for HKDF in the WebCrypto API. When generating output
+    # bytes from the output of HKDF-Expand operation (OKM, Output Key Material), it enforces the
+    # requested output length must match the length of key type (see error condition of `Okm::fill`
+    # at https://docs.rs/aws-lc-rs/1.14.1/aws_lc_rs/hkdf/struct.Okm.html#method.fill). However,
+    # according to the WebCrypto API specification, user should be allowed to choose the output length
+    # (https://w3c.github.io/webcrypto/#hkdf-operations-derive-bits). The restriction from `aws-lc-rs` causes several
+    # HKDF-related WPT tests to fail.
+    # This patch switches to use a more flexible crate `hkdf` (https://crates.io/crates/hkdf) for implementing HKDF in
+    # our WebCrypto API, and allowing variable length output. This helps to make those HKDF-related WPT tests pass.
+    # Testing: Pass some WPT tests that were expected to fail.
++https://github.com/servo/servo/pull/40639	(@mrobinson, @vimpunk, #40639)	script: Add support for parsing CSS in parallel (#40639)
+    perf
+    # This change is a rework of #22478, originally authored by @vimpunk.
+    # It adds parsing of CSS in parallel with the main script thread. The
+    # big idea here is that when the transfer of stylesheet bytes is
+    # finished, the actual parsing is pushed to a worker thread from the Stylo
+    # thread pool. This also applies for subsequent loads triggered by
+    # `@import` statements.
+    # The design is quite similar to the previous PR with a few significant
+    # changes:
+    #  - Error handling works properly. The `CSSErrorReporter` is a crossbeam
+    #    `Sender` and a `PipelineId` so it can be trivially cloned and sent to
+    #    the worker thread.
+    #  - Generation checking is done both before and after parsing, in order
+    #    to both remove the race condition and avoid extra work when the
+    #    generations do not match.
+    #  - The design is reworked a bit to avoid code duplication, dropping added
+    #    lines from 345 to 160.
+    #  - Now that `process_response_eof` gives up ownership to the
+    #    `FetchResponseListener`, this change avoids all extra copies.
+    # Testing: This shouldn't change observable behavior, so is covered
+    # by existing tests.
+    # Fixes: #20721
+    # Closes: #22478
+https://github.com/servo/servo/pull/40649	(@WaterWhisperer, #40649)	script: Remove unnecessary `Trusted` wrapper in `RemovableDomEventListener` (#40649)
+    #  Replace `Trusted` with `Dom` and add the appropriate crown attribute.
+    # Testing: `./mach build --use-crown` succeed and no difference in behaviour when running `./mach test-wpt
+    # tests/wpt/tests/dom/abort`
+    # Fixes: #40631
+>>> 2025-11-21T06:10:25Z
+-https://github.com/servo/servo/pull/40774	(@dependabot[bot], @dependabot[bot], #40774)	build(deps): bump sea-query from 1.0.0-rc.19 to 1.0.0-rc.20 (#40774)
+    # Bumps [sea-query](https://github.com/SeaQL/sea-query) from 1.0.0-rc.19 to 1.0.0-rc.20.
+    # Commits
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sea-query&package-manager=carg
+    # o&previous-version=1.0.0-rc.19&new-version=1.0.0-rc.20)](https://docs.github.com/en/github/managing-security-vulnerabili
+    # ties/about-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40772	(@dependabot[bot], @dependabot[bot], #40772)	build(deps): bump zerocopy from 0.8.27 to 0.8.28 (#40772)
+    # Bumps [zerocopy](https://github.com/google/zerocopy) from 0.8.27 to 0.8.28.
+    # Release notes
+    # Sourced from zerocopy's releases.
+    # v0.8.28
+    # What's Changed
+    # [docs] Fix spelling in documentation by @​jbcrail in google/zerocopy#2733
+    # [README] Update Thanks section by @​joshlf in google/zerocopy#2766
+    # Make errors Clone and relax PartialEq/Eq bounds by @​raldone01 in google/zerocopy#2715
+    # Add support for uint16x4x4_t AArch64 SIMD type family by @​google-labs-jules[bot] in google/zerocopy#2779
+    # New Contributors
+    # @​jbcrail made their first contribution in google/zerocopy#2733
+    # @​raldone01 made their first contribution in google/zerocopy#2715
+    # @​google-labs-jules[bot] made their first contribution in google/zerocopy#2779
+    # Full Changelog: https://github.com/google/zerocopy/compare/v0.8.27...v0.8.28
+    # Commits
+    # c6932f4 Release 0.8.28 (#2780)
+    # f4ad83c Add support for uint16x4x[2-4]_t AArch64 SIMD types (#2779)
+    # 42dd48e [ci] Roll pinned nightly toolchain (#2778)
+    # 27f948e [ci] Roll toolchains weekly (#2773)
+    # bcfe762 [ci] Roll pinned nightly toolchain (#2775)
+    # e443f44 [ci] Roll pinned nightly toolchain (#2774)
+    # c48163c [ci] Roll pinned nightly toolchain (#2772)
+    # 53fb821 [ci] Roll pinned nightly toolchain (#2771)
+    # 96b7024 [ci] Roll pinned stable toolchain (#2768)
+    # 927b5cc [ci] Roll pinned nightly toolchain (#2769)
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zerocopy&package-manager=cargo
+    # &previous-version=0.8.27&new-version=0.8.28)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-
+    # dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40771	(@dependabot[bot], @dependabot[bot], #40771)	build(deps): bump the servo-media-related group with 12 updates (#40771)
+    # Bumps the servo-media-related group with 12 updates:
+    # | Package | From | To |
+    # | --- | --- | --- |
+    # | [servo-media](https://github.com/servo/media) | ``226272a`` | ``6c1766f`` |
+    # | [servo-media-dummy](https://github.com/servo/media) | ``226272a`` | ``6c1766f`` |
+    # | [servo-media-gstreamer](https://github.com/servo/media) | ``226272a`` | ``6c1766f`` |
+    # | servo-media-audio | ``226272a`` | ``6c1766f`` |
+    # | servo-media-derive | ``226272a`` | ``6c1766f`` |
+    # | servo-media-gstreamer-render | ``226272a`` | ``6c1766f`` |
+    # | servo-media-gstreamer-render-android | ``226272a`` | ``6c1766f`` |
+    # | servo-media-gstreamer-render-unix | ``226272a`` | ``6c1766f`` |
+    # | servo-media-player | ``226272a`` | ``6c1766f`` |
+    # | servo-media-streams | ``226272a`` | ``6c1766f`` |
+    # | servo-media-traits | ``226272a`` | ``6c1766f`` |
+    # | servo-media-webrtc | ``226272a`` | ``6c1766f`` |
+    # Updates `servo-media` from `226272a` to `6c1766f`
+    # Commits
+    # 6c1766f Update examples to winit@0.26 (#463)
+    # 76639ea gst: Use buffered ranges with precise position timestamps (#468)
+    # d09d806 Update to byte-slice-cast 1 (#469)
+    # See full diff in compare view
+    # Updates `servo-media-dummy` from `226272a` to `6c1766f`
+    # Commits
+    # 6c1766f Update examples to winit@0.26 (#463)
+    # 76639ea gst: Use buffered ranges with precise position timestamps (#468)
+    # d09d806 Update to byte-slice-cast 1 (#469)
+    # See full diff in compare view
+    # Updates `servo-media-gstreamer` from `226272a` to `6c1766f`
+    # Commits
+    # 6c1766f Update examples to winit@0.26 (#463)
+    # 76639ea gst: Use buffered ranges with precise position timestamps (#468)
+    # d09d806 Update to byte-slice-cast 1 (#469)
+    # See full diff in compare view
+    # Updates `servo-media-audio` from `226272a` to `6c1766f`
+    # Updates `servo-media-derive` from `226272a` to `6c1766f`
+    # Updates `servo-media-gstreamer-render` from `226272a` to `6c1766f`
+    # Updates `servo-media-gstreamer-render-android` from `226272a` to `6c1766f`
+    # Updates `servo-media-gstreamer-render-unix` from `226272a` to `6c1766f`
+    # Updates `servo-media-player` from `226272a` to `6c1766f`
+    # Updates `servo-media-streams` from `226272a` to `6c1766f`
+    # Updates `servo-media-traits` from `226272a` to `6c1766f`
+    # Updates `servo-media-webrtc` from `226272a` to `6c1766f`
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40769  (@Loirooriol, #40769)   layout: Cleanup for replaced elements with widgets (#40769)
+https://github.com/servo/servo/pull/40762	(@simonwuelker, #40762)	script: Don't crash when encountering unexpected node types in `Range::createContextualFragment` (#40762)
+    # The spec says that all node types other than element, text and comment should be treated as `None`. We were
+    # panicking on a few instead.
+    # Testing: This change adds a simple crashtest
+    # Fixes: https://github.com/servo/servo/issues/40719
++https://github.com/servo/servo/pull/40768	(@simonwuelker, #40768)	script: Add messages to exceptions thrown in Element::attachShadow (#40768)
+    dom; exception messages
+    # Part of https://github.com/servo/servo/issues/40756
+https://github.com/servo/servo/pull/40433	(@mrobinson, #40433)	paint: Do trigger animations when a non-animation paint happens (#40433)
+    # Otherwise the `RefreshObsever` can get wedged. This does mean that we
+    # will overpaint a bit when processing input events and animating, but we
+    # could integrate scroll / zoom event handling with the animation loop to
+    # eliminate this overpaint.
+    # Testing: This kind of fix for touch interaction is currently very hard to test as it
+    # relies heavily on the order that operations happen between Servo and the
+    # `RefreshDriver`. It is easy to reproduce in interactive usage though and this
+    # change fixes it.
+-https://github.com/servo/servo/pull/40764	(@jschwe, #40764)	Prefer log over (e)println! (#40764)
+    # Switches to log methods over eprintln in cases where it makes sense. stdout / stderr output may be difficult to
+    # view on devices like android / ohos, and has no filter options, so we should prefer log methods.
+    # This PR avoids prints, which are controlled by a debugging option.
+    # Testing: Only changes logging, no functional behavior change.
++https://github.com/servo/servo/pull/40765	(@kkoyung, #40765)	script: Implement SHA-3 in WebCrypto API (#40765)
+    dom; crypto.subtle.digest("SHA3-256"), SHA3-384, SHA3-512; first among major engines!
+    # Implements digest operation of SHA-3, including `SHA3-256`, `SHA3-384` and `SHA3-512`, using the crate `sha3`
+    # for the SHA-3 calculation.
+    # Testing: Pass WPT tests that were expected to fail.
+    # Fixes: Part of #40687
+https://github.com/servo/servo/pull/40763	(@tharkum, #40763)	html: The queued <media> `volumechange` event should be cancellable (#40763)
+    # Following the HTML specification, on the `volume` or `mute` attrubute changes the user agent must queue a media
+    # element task given the media element to fire an event named `volumechange` at the media element (the `generation_id`
+    # value will be captured to allow cancel this task - `media-element-load-algorithm` steps 3-5)
+    # See https://html.spec.whatwg.org/multipage/#event-media-volumechange
+    # See https://html.spec.whatwg.org/multipage/#media-element-load-algorithm
+    # Changed the naming of the `playbackRate` and `defaultPlaybackRate` members to match Rust naming conventions
+    # (`snake_case`).
+    # Testing: Added the `cancellable` subtest to `event_volumechange` test
+    # - html/semantics/embedded-content/media-elements/event_volumechange.html
++https://github.com/servo/servo/pull/40760	(@eerii, #40760)	devtools: Support reloading tab (#40760)
+    devtools
+    # Allows to use the reload button from the top bar of `about:debugging`.
+    # Testing: Manual testing.
+https://github.com/servo/servo/pull/40757	(@kongbai1996, #40757)	compositing: Do not set scroll offsets of zero when restoring scroll offsets in new display lists (#40757)
+    # This results in a significant reduction in the number of `FrameMsg::SetScrollOffsets`, which in turn greatly
+    # reduces the number of `set_scroll_offsets` calls in the WebRender backend. This is beneficial for performance.
+    # Testing: This is an attempt to increase performance, so is covered by existing tests.
+-https://github.com/servo/servo/pull/40758	(@jschwe, #40758)	profiling: Fix missing span enter (#40758)
+    # If we don't enter the span, then nothing will be traced. This was overlooked during review of
+    # https://github.com/servo/servo/pull/40629.
+    # Also clean-up some `tracing` feature flag occurence, which is not needed when using the macro from profile_traits.
+    # Testing: Manually tested with `tracing-hitrace` feature
+-https://github.com/servo/servo/pull/40755	(@sagudev, #40755)	CI: Do not `fail_fast` on push to main (#40755)
+    # Fixes: #40741
+-https://github.com/servo/servo/pull/40753	(@mukilan, #40753)	mach: Normalize the `--profile` argument to build commands (#40753)
+    # The current logic treats the explict version of release and dev build specification i.e the `--profile release`
+    # and `--profile dev` options as custom profiles. This breaks other logic that explictly check for release and dev
+    # profile types, like the android build.
+    # Normalize the `--profile` argument so that the strings `release` and `dev` are treated correctly as
+    # `BuildType.Kind.RELEASE` and `BuildType.Kind.DEV` respectively.
+    # Fixes: #40752
+    # Testing: Tested manually that building android with `--profile release` creates the correct directory structure.
+-https://github.com/servo/servo/pull/40750	(@arihant2math, #40750)	script: Finish converting all error message enum variants to Option<String> (#40750)
+    # I used find and replace to finish the job. All this PR does is replace all `Error::` occurrences with `Error::(None)`.
+    # Testing: Refactor
+    # Fixes: #39053
++https://github.com/servo/servo/pull/40742	(@webbeef, #40742)	script: Optimize Node::insert (#40742)
+    perf; faster parseFromString() on DOMParser
+    # - Change how the static node list is built to prevent a second iteration of new_nodes
+    # - Memoize some invariants of the parent
+    # Testing: No wpt regressions: https://github.com/webbeef/servo/actions/runs/19493174678
+    # This improves the `parseFromString()` benchmark by ~7% on my machine.
+https://github.com/servo/servo/pull/40473	(@monissaJ, @jschwe, #40473)	ohos CI: Add webdriver based scenario tests (#40473)
+    # Add webdriver based scripts to run scenario tests on OpenHarmony devices, with the purpose of testing functionality
+    # in CI. For now passing these tests will not be enforced, as we first need to see how reliable the CI tests are in
+    # daily usage.
+    # Testing:
+    # Functional and Performance Test Cases: Test that when new code is deployed, the Servo homepage and Mossel homepage
+    # load correctly; Mossel's navigation and swipe functions work properly.
+https://github.com/servo/servo/pull/40745	(@d-kraus, #40745)	script: Add message to Dom exception Error::NotSupported (#40745)
+    # Adding an optional message to Error::NotSupported. Unblocks https://github.com/servo/servo/issues/39050.
+    # The enum definition of NotSupported is now `NotSupported(Option)`.
+    # Testing: Just a refactor
+    # Fixes: Partially https://github.com/servo/servo/issues/39053
+-https://github.com/servo/servo/pull/40748	(@dependabot[bot], @dependabot[bot], #40748)	build(deps): bump clap from 4.5.52 to 4.5.53 (#40748)
+    # Bumps [clap](https://github.com/clap-rs/clap) from 4.5.52 to 4.5.53.
+    # Release notes
+    # Sourced from clap's releases.
+    # v4.5.53
+    # [4.5.53] - 2025-11-19
+    # Features
+    # Add default_values_if, default_values_ifs
+    # Changelog
+    # Sourced from clap's changelog.
+    # [4.5.53] - 2025-11-19
+    # Features
+    # Add default_values_if, default_values_ifs
+    # Commits
+    # 3716f9f chore: Release
+    # 613b69a docs: Update changelog
+    # d117f7a Merge pull request #6028 from epage/arg
+    # cb8255d feat(builder): Allow quoted id's for arg macro
+    # 1036060 Merge pull request #6025 from AldaronLau/typos-in-faq
+    # 2fcafc0 docs: Fix minor grammar issues in FAQ
+    # a380b65 Merge pull request #6023 from epage/template
+    # 4d7ab14 chore: Update from _rust/main template
+    # b8a7ea4 chore(deps): Update Rust Stable to v1.87 (#18)
+    # f9842b3 chore: Avoid MSRV problems out of the box
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=clap&package-manager=cargo&pre
+    # vious-version=4.5.52&new-version=4.5.53)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depe
+    # ndabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40747	(@dependabot[bot], @dependabot[bot], #40747)	build(deps): bump sea-query from 1.0.0-rc.18 to 1.0.0-rc.19 (#40747)
+    # Bumps [sea-query](https://github.com/SeaQL/sea-query) from 1.0.0-rc.18 to 1.0.0-rc.19.
+    # Commits
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sea-query&package-manager=carg
+    # o&previous-version=1.0.0-rc.18&new-version=1.0.0-rc.19)](https://docs.github.com/en/github/managing-security-vulnerabili
+    # ties/about-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40746	(@dependabot[bot], @dependabot[bot], #40746)	build(deps): bump the servo-media-related group with 12 updates (#40746)
+    # Bumps the servo-media-related group with 12 updates:
+    # | Package | From | To |
+    # | --- | --- | --- |
+    # | [servo-media](https://github.com/servo/media) | ``7ba5e7d`` | ``226272a`` |
+    # | [servo-media-dummy](https://github.com/servo/media) | ``7ba5e7d`` | ``226272a`` |
+    # | [servo-media-gstreamer](https://github.com/servo/media) | ``7ba5e7d`` | ``226272a`` |
+    # | servo-media-audio | ``7ba5e7d`` | ``226272a`` |
+    # | servo-media-derive | ``7ba5e7d`` | ``226272a`` |
+    # | servo-media-gstreamer-render | ``7ba5e7d`` | ``226272a`` |
+    # | servo-media-gstreamer-render-android | ``7ba5e7d`` | ``226272a`` |
+    # | servo-media-gstreamer-render-unix | ``7ba5e7d`` | ``226272a`` |
+    # | servo-media-player | ``7ba5e7d`` | ``226272a`` |
+    # | servo-media-streams | ``7ba5e7d`` | ``226272a`` |
+    # | servo-media-traits | ``7ba5e7d`` | ``226272a`` |
+    # | servo-media-webrtc | ``7ba5e7d`` | ``226272a`` |
+    # Updates `servo-media` from `7ba5e7d` to `226272a`
+    # Commits
+    # 226272a Suppress warning about field that's not read. (#466)
+    # e6c0ba9 Build additional examples. (#465)
+    # See full diff in compare view
+    # Updates `servo-media-dummy` from `7ba5e7d` to `226272a`
+    # Commits
+    # 226272a Suppress warning about field that's not read. (#466)
+    # e6c0ba9 Build additional examples. (#465)
+    # See full diff in compare view
+    # Updates `servo-media-gstreamer` from `7ba5e7d` to `226272a`
+    # Commits
+    # 226272a Suppress warning about field that's not read. (#466)
+    # e6c0ba9 Build additional examples. (#465)
+    # See full diff in compare view
+    # Updates `servo-media-audio` from `7ba5e7d` to `226272a`
+    # Updates `servo-media-derive` from `7ba5e7d` to `226272a`
+    # Updates `servo-media-gstreamer-render` from `7ba5e7d` to `226272a`
+    # Updates `servo-media-gstreamer-render-android` from `7ba5e7d` to `226272a`
+    # Updates `servo-media-gstreamer-render-unix` from `7ba5e7d` to `226272a`
+    # Updates `servo-media-player` from `7ba5e7d` to `226272a`
+    # Updates `servo-media-streams` from `7ba5e7d` to `226272a`
+    # Updates `servo-media-traits` from `7ba5e7d` to `226272a`
+    # Updates `servo-media-webrtc` from `7ba5e7d` to `226272a`
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+https://github.com/servo/servo/pull/40737	(@mrobinson, @mukilan, #40737)	compositor: Share the `WebGpuExternalImageMap` among all `Painter`s (#40737)
+    # This is required so that there can be multiple `WebGpuExternalImages`
+    # for a single `Constellation`.
+    # Testing: This should not change behavior so is covered by existing tests.
++https://github.com/servo/servo/pull/40738	(@mrobinson, @mukilan, #40738)	compositing: Make `RefreshDriver` per-`RenderingContext` (#40738)
+    api; part of per-webview RenderingContext
+    # Instead of having a global `RefreshDriver` for all of Servo, let each
+    # `RenderingContext` have its own `RefreshDriver`. This allows for things
+    # like per-monitor `RefreshDriver`s and helps to ensure that multiple
+    # `BaseRefreshDriver`s can be created for the same `RefreshDriver`.
+    # Testing: This shouldn't change behavior and thus is covered by existing tests.
+-https://github.com/servo/servo/pull/40739	(@sagudev, #40739)	CI: only upload test results to codecov if unit-test are actually run (#40739)
+    # This should prevent comments like this: https://github.com/servo/servo/pull/40736#issuecomment-3552372357
+https://github.com/servo/servo/pull/40736	(@mrobinson, #40736)	webgl: Ensure all Surfman surfaces are released properly (#40736)
+    # This change ensures that all Surfman surfaces used for WebRendering
+    # rendering are released in the WebGL thread properly by:
+    # - Moving `WebGLThread` shutdown to the renderer. The renderer starts it,
+    #   so it makes sense that the renderer also shuts it down when it can
+    #   guarantee that no WebRender painting is currently happening and no
+    #   images will be in use again.
+    # - Delaying WebGL context release until all WebRender operations have
+    #   finished. This ensures that the `SwapChain` is still available for use
+    #   in the external image handler.
+    # The second point is accomplished by sharing a usage map between the
+    # renderer and the `WebGLThread` which tracks whether WebRender is
+    # currently rendering a particular context. In addition, once the WebGL
+    # external image handler is notified that WebRender has finished
+    # rendering, it informs the WebGLThread so that it can released any
+    # contexts already marked for deletion.
+    # Testing: This fixes very common intermittent crashes when running
+    # `/_webgl/conformance` locally. It should reduce the incidence of these flaky
+    # crashes on the CI.
+    # Fixes: #40399.
+    # Fixes: #40417.
++https://github.com/servo/servo/pull/40725	(@mrobinson, #40725)	script: Use a `WeakRef` for references to `WebGLRenderingContext` (#40725)
+    security; fix use-after-free in WebGL
+    # Many WebGL objects refer to a `WebGLRenderingContext` and rely on it for
+    # messaging to the `WebGLThread`. This poses a problem, because WebGL
+    # objects often need to send a message to the `WebGLThread` during their
+    # `Drop` implementation. If the `Drop` is triggered as part of garbage
+    # collection, references to the `WebGLRenderingContext` might be invalid,
+    # if they were garbage collected first as part of the same harvest.
+    # This change makes it so that all of these objects store a `WeakRef`
+    # instead of a `Dom<>`. The `WeakRef` is only used if it can be rooted,
+    # otherwise a `ContextLost` error is given. In cases where only messaging
+    # is needed, a cloned `WebGLMsgSender` is used to perform messages
+    # regardless of whether the context is garbage collected or not.
+    # This isn't a replacement for #37622, but should make it easier to implement as
+    # the `WebGLMsgSender` and the `WeakRef` could be stored in the droppable
+    # portion of the DOM object.
+    # Testing: This fixes a use-after-free issue which is mainly detectable via ASAN
+    # builds. Since we do not run ASAN on CI, this is a bit hard to create automated
+    # tests for. I verified that this fixed the issue manually.
+    # Fixes: #40655.
+https://github.com/servo/servo/pull/40396	(@kongbai1996, #40396)	Compositor: Resize `PinchZoom::unscaled_viewport` when viewport size changes (#40396)
+    # Implement resize method for PinchZoom and update webview_renderer to call it on window size changes
+    # Testing: No new WPT test cases passed.
+    # Fixes: N/A
+https://github.com/servo/servo/pull/40733	(@TimvdLippe, #40733)	webdriver: implement protocol handler automation mode (#40733)
+    # The tests now start running rather than erroring, but they aren't working yet as we don't currently use protocol
+    # handlers yet. That's for follow-up PRs, as that requires more plumbing.
+    # Part of #40615
++https://github.com/servo/servo/pull/40716	(@sagudev, #40716)	Use safe JSContext/AutoRealm/CurrentRealm in codegen (#40716)
+    api; safer api for mozjs bindings
+    # We replace many places that use `SafeJSContext` with `JSContext` and I also rewrote `is_platform_object_same_origin`
+    # to use new `JSContext`. Unfortunately using wrappers2 in them causes crashes (in handle code), so I reverted that
+    # part in last commit and will fix handles in mozjs later.
+    # Testing: Refactor, but it is covered by WPT tests
+    # Part of #40600
+https://github.com/servo/servo/pull/40729	(@Taym95, #40729)	Fix RefCell already borrowed panic in HTMLMediaElement::set_audio_renderer (#40729)
+    # Fix RefCell already borrowed panic in HTMLMediaElement::set_audio_renderer
+    # Testing: new crash test should pass.
+    # Fixes: #40720
+-https://github.com/servo/servo/pull/40728	(@dependabot[bot], @dependabot[bot], #40728)	build(deps): bump the servo-media-related group with 12 updates (#40728)
+    # Bumps the servo-media-related group with 12 updates:
+    # | Package | From | To |
+    # | --- | --- | --- |
+    # | [servo-media](https://github.com/servo/media) | ``1beaae4`` | ``7ba5e7d`` |
+    # | [servo-media-dummy](https://github.com/servo/media) | ``1beaae4`` | ``7ba5e7d`` |
+    # | [servo-media-gstreamer](https://github.com/servo/media) | ``1beaae4`` | ``7ba5e7d`` |
+    # | servo-media-audio | ``1beaae4`` | ``7ba5e7d`` |
+    # | servo-media-derive | ``1beaae4`` | ``7ba5e7d`` |
+    # | servo-media-gstreamer-render | ``1beaae4`` | ``7ba5e7d`` |
+    # | servo-media-gstreamer-render-android | ``1beaae4`` | ``7ba5e7d`` |
+    # | servo-media-gstreamer-render-unix | ``1beaae4`` | ``7ba5e7d`` |
+    # | servo-media-player | ``1beaae4`` | ``7ba5e7d`` |
+    # | servo-media-streams | ``1beaae4`` | ``7ba5e7d`` |
+    # | servo-media-traits | ``1beaae4`` | ``7ba5e7d`` |
+    # | servo-media-webrtc | ``1beaae4`` | ``7ba5e7d`` |
+    # Updates `servo-media` from `1beaae4` to `7ba5e7d`
+    # Commits
+    # 7ba5e7d Return an empty slice on safe slice casting error (#462)
+    # See full diff in compare view
+    # Updates `servo-media-dummy` from `1beaae4` to `7ba5e7d`
+    # Commits
+    # 7ba5e7d Return an empty slice on safe slice casting error (#462)
+    # See full diff in compare view
+    # Updates `servo-media-gstreamer` from `1beaae4` to `7ba5e7d`
+    # Commits
+    # 7ba5e7d Return an empty slice on safe slice casting error (#462)
+    # See full diff in compare view
+    # Updates `servo-media-audio` from `1beaae4` to `7ba5e7d`
+    # Updates `servo-media-derive` from `1beaae4` to `7ba5e7d`
+    # Updates `servo-media-gstreamer-render` from `1beaae4` to `7ba5e7d`
+    # Updates `servo-media-gstreamer-render-android` from `1beaae4` to `7ba5e7d`
+    # Updates `servo-media-gstreamer-render-unix` from `1beaae4` to `7ba5e7d`
+    # Updates `servo-media-player` from `1beaae4` to `7ba5e7d`
+    # Updates `servo-media-streams` from `1beaae4` to `7ba5e7d`
+    # Updates `servo-media-traits` from `1beaae4` to `7ba5e7d`
+    # Updates `servo-media-webrtc` from `1beaae4` to `7ba5e7d`
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+https://github.com/servo/servo/pull/40724	(@simonwuelker, #40724)	script: Don't allocate when retrieving attribute values for layout (#40724)
+    # We end up only calling `.iter` on these `Vec`s anyways.
+    # Testing: No behaviour change intended, regressions are covered by existing tests
+https://github.com/servo/servo/pull/40690	(@mrobinson, @mukilan, #40690)	compositing: Rework WebRender external image handlers to be per-Painter (#40690)
+    # Make external image handlers per-`Painter`, but make some of the shared
+    # data that they use such as the `SwapChains` global to all `Painter`s.
+    # This allows making the WebGL thread and the WebXR thread global to all
+    # `Painter`s as well.
+    # This is necessary to support multiple painters sharing the same WebGL
+    # thread.
+    # Testing: This doesn't really change behavior yet, so is covered by existing tests.
++https://github.com/servo/servo/pull/40721	(@mrobinson, @mukilan, #40721)	compositing: Allow WebGL contexts to have different Surfman devices (#40721)
+    api; part of per-webview RenderingContext
+    # Currently, a single `surfman::Device` is used for all WebGL contexts.
+    # This cannot work when we have multiple rendering contexts. So, extract
+    # the surfman `Connection` and `Adapter` into a per-painter data structure
+    # (`PainterSurfmanDetailsMap`) and store the `Device` directly in the
+    # WebGL context.
+    # This patch also modifies the WebXR traits so that the `Device` doesn't
+    # need to be explictly passed into most methods.
+    # *This is a reland of #40594* with the following changes:
+    #   - Do not remove WebGL contexts from the context map before cleaning up the
+    #     WebXR layers. The layer cleanup process consults the map.
+    #   - When cleanup up layers, be sure to replace the WebXRBridge in the
+    #     WebGLThread data structure.
+    #   - Allow failing to the Device when processing WebXR commands. WebXR
+    #     sometimes tries to access contexts after they have been removed.
+    # Testing: Should be covered by existing tests.
+-https://github.com/servo/servo/pull/40714	(@WaterWhisperer, #40714)	Update expectation for `media-elements/event_timeupdate_noautoplay.html` to PASS by removing .ini (#40714)
+    # Testing: None
+    # Fixes: #25046
+-https://github.com/servo/servo/pull/40717	(@mrobinson, #40717)	python: Remove `notify-py` from Python dependencies (#40717)
+    # Support for sending build notifications was removed in #37818, but the
+    # dependency in `requirements.txt` was not removed. This PR fixest that.
+    # Testing: This change just removes an unsued build dependency, so no testing is necessary.
++https://github.com/servo/servo/pull/40715	(@mrobinson, #40715)	servoshell: Always use `ControlFlow::Wait` on winit (#40715)
+    api; removed in favour of RefreshDriver
+    # Nowadays the renderer will always wake up the event loop when it needs to paint
+    # a new frame, so we can always use `ControlFlow::Wait`. This should be a
+    # more efficient way to run animations.
+    # Testing: This should not change behavior, but should make servoshell a bit more
+    # efficient.
+    # Closes: #21855
+-https://github.com/servo/servo/pull/40718	(@jschwe, #40718)	Replace codecov/test-results-action (#40718)
+    # https://github.com/codecov/test-results-action
+    # The repository now carries a deprecation warning and warns about upload issues (which we seem to be hitting).
+    # Migrate to the codecov action as recommended.
+    # Testing: CI change
+    # Fixes: Should hopefully fix CI errors.
+https://github.com/servo/servo/pull/40160	(@jschwe, #40160)	profiling: Add abstraction over tracing-rs (#40160)
+    # There are multiple motivating factors for this change:
+    # 1. `tracing-rs` can and is commonly used for structured logging, to gain understanding in what is happening in
+    # concurrent code. We would like to attempt to make a distinction of the performance tracing related usage and the
+    # logging related usage.
+    # 2. This reduces boilerplate code. We don't have to feature guard every span anymore, since the macro will do it for us.
+    # 3. This makes it easier to add multiple options for the trace backend (i.e. exchanging tracing-rs for hitrace on
+    # OpenHarmony or System Tracing in Android), or something entirely custom.
+    # 4. This makes it easier to add further compile-time options to control the amount of tracing. E.g. a future PR could
+    # add options to enable tracing based on environment variables set at compile time. Tracing adds runtime overhead, even
+    # if the runtime switch is disabled, so having more fine-grained options to partially enabled tracing could be useful.
+    # Testing: Tested manually by building with and without the `tracing` feature. In CI we also build with the tracing
+    # feature in the HarmonyOS build. We don't have any automated tests for the correctness / presence of the traced entries.
+-https://github.com/servo/servo/pull/40712	(@mrobinson, #40712)	libservo: Trigger a rendering update when waiting for paint readiness in WebView unit tests (#40712)
+    # Some unit tests attempt to wait for the WebView to be paint ready before
+    # executing. The previous code would wait for a frame ready message from
+    # the WebView before running, but this was subject to timing issues due to
+    # the frame being sent before the load complete message. This changes
+    # makes it so that the WebView explicitly triggers another rendering
+    # update and then waits for a frame. It should be guaranteed that the next
+    # frame will be one that reflects load completeness.
+    # Special thanks to jmunroe on Zulip for investigation into this issue.
+    # Testing: This seems to eliminate flaky timeouts on my machine. I ran
+    # the unit tests in a loop, stopping if any error (such as a timeout happened).
+    # Before this would stop within a minute or two, but I could not reproduce
+    # the issue with this change after several minutes.
++https://github.com/servo/servo/pull/40699	(@mrobinson, @Loirooriol, #40699)	layout: Rebuild the box tree when the `quotes` attribute changes on a pseudo-element (#40699)
+    layout
+    # In incremental layout, changes to the `quotes` attribute of a
+    # pseudo-elment can cause the content of the pseudo-element to change so
+    # should cause a box rebuild. This change does that, hopefully fixing
+    # flaky tests.
+    # Testing: This doesn't have any test changes, but should fix the test situation described in #40419.
++https://github.com/servo/servo/pull/40578	(@rayguo17, #40578)	Media: Display User Agent Controls widget for video element. (#40578)
+    layout; UA controls for <video> (was previously supported for <audio>)
+    # Add Contents::ReplacedWithWidget for video elements with UA control widget, to allow Traverse into the children
+    # of video element during Box Tree Construction, Generate IndependentFormattingContextContent::ReplacedWithWidgets,
+    # to store both the `ReplacedContents` and `BlockFormattingContext`. During fragment tree generation process, first
+    # layout the Image Fragment, and then Layout the Inner  Controls BlockFormattingContext. Doing this allow us to
+    # determine the size of Inner Controls widget based on the size of the Image Fragment. Minor Fix: ::before/::after
+    # pseudo elment should be suppress for replaced element.
+    # Testing: Should show the controls widget for ``, and should not affect any existing WPT test. Since how to display
+    # UA widget of Video Element is not defined in the spec, expectedly there has no existing WPT test that testing this.
+    # Fixes https://github.com/servo/servo/issues/40452
+    # Fixes https://github.com/servo/servo/issues/31414
+https://github.com/servo/servo/pull/40637	(@kongbai1996, #40637)	Compositor: Add touch compatibility handling for mouse move events (#40637)
+    # Every time a touchmove event is added, it updates the cursor, causing frequent hit testing and affecting the
+    # performance of scrolling. Adding a flag to mark the current touchmove is done for compatibility with touch events. In
+    # this case, the last_mouse_move_position will not be updated.
+    # Testing: No new use cases will be approved; it's just for performance optimization.
+    # Fixes: A solution for #39433
+-https://github.com/servo/servo/pull/40706	(@dependabot[bot], @dependabot[bot], #40706)	build(deps): bump cc from 1.2.45 to 1.2.46 (#40706)
+    # Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.2.45 to 1.2.46.
+    # Release notes
+    # Sourced from cc's releases.
+    # cc-v1.2.46
+    # Other
+    # Add Visual Studio 2026 support (#1609)
+    # Changelog
+    # Sourced from cc's changelog.
+    # 1.2.46 - 2025-11-14
+    # Other
+    # Add Visual Studio 2026 support (#1609)
+    # Commits
+    # 15145d1 chore: release (#1611)
+    # ef4d378 Add Visual Studio 2026 support (#1609)
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cc&package-manager=cargo&previ
+    # ous-version=1.2.45&new-version=1.2.46)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depend
+    # abot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40707	(@yezhizhen, #40707)	Revert servo/servo#40594 "Allow WebGL contexts to have different Surfman devices" (#40707)
+    # This reverts commit bcbd4a2f19c43e1755a0684e954c7f1ca3c85828.
+    # There was too many intermittents: https://github.com/servo/servo/pull/40699#issuecomment-3544170297. Some PRs fail
+    # to merge.
+    # Testing: It still builds. Number of flaky reduced by half.
+-https://github.com/servo/servo/pull/40705	(@dependabot[bot], @dependabot[bot], #40705)	build(deps): bump bytes from 1.10.1 to 1.11.0 (#40705)
+    # Bumps [bytes](https://github.com/tokio-rs/bytes) from 1.10.1 to 1.11.0.
+    # Release notes
+    # Sourced from bytes's releases.
+    # Bytes v1.11.0
+    # 1.11.0 (November 14th, 2025)
+    # Bump MSRV to 1.57 (#788)
+    # Fixed
+    # fix: BytesMut only reuse if src has remaining (#803)
+    # Specialize BytesMut::put::&lt;Bytes&gt; (#793)
+    # Reserve capacity in BytesMut::put (#794)
+    # Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)
+    # Internal changes
+    # Guarantee address in slice() for empty slices. (#780)
+    # Rename Vtable::to_* -&gt; Vtable::into_* (#776)
+    # Fix latest clippy warnings (#787)
+    # Ignore BytesMut::freeze doctest on wasm (#790)
+    # Move drop_fn of from_owner into vtable (#801)
+    # Changelog
+    # Sourced from bytes's changelog.
+    # 1.11.0 (November 14th, 2025)
+    # Bump MSRV to 1.57 (#788)
+    # Fixed
+    # fix: BytesMut only reuse if src has remaining (#803)
+    # Specialize BytesMut::put::&lt;Bytes&gt; (#793)
+    # Reserve capacity in BytesMut::put (#794)
+    # Change BytesMut::remaining_mut to use isize::MAX instead of usize::MAX (#795)
+    # Internal changes
+    # Guarantee address in slice() for empty slices. (#780)
+    # Rename Vtable::to_* -&gt; Vtable::into_* (#776)
+    # Fix latest clippy warnings (#787)
+    # Ignore BytesMut::freeze doctest on wasm (#790)
+    # Move drop_fn of from_owner into vtable (#801)
+    # Commits
+    # a7952fb chore: prepare bytes v1.11.0 (#804)
+    # 60cbb77 fix: BytesMut only reuse if src has remaining (#803)
+    # 7ce330f Move drop_fn of from_owner into vtable (#801)
+    # 4b53a29 Tweak BytesMut::remaining_mut (#795)
+    # 016fdbd Reserve capacity in BytesMut::put (#794)
+    # ef7f257 Specialize BytesMut::put::&lt;Bytes&gt; (#793)
+    # 8b4f54d Ignore BytesMut::freeze doctest on wasm (#790)
+    # 16132ad Fix latest clippy warnings (#787)
+    # 3e44f88 Bump MSRV to 1.57 (#788)
+    # f29e939 Add some tests for Limit, BytesMut and Reader (#785)
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bytes&package-manager=cargo&pr
+    # evious-version=1.10.1&new-version=1.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dep
+    # endabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40703	(@dependabot[bot], @dependabot[bot], #40703)	build(deps): bump clap from 4.5.51 to 4.5.52 (#40703)
+    # Bumps [clap](https://github.com/clap-rs/clap) from 4.5.51 to 4.5.52.
+    # Release notes
+    # Sourced from clap's releases.
+    # v4.5.52
+    # [4.5.52] - 2025-11-17
+    # Fixes
+    # Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup
+    # Changelog
+    # Sourced from clap's changelog.
+    # [4.5.52] - 2025-11-17
+    # Fixes
+    # Don't panic when args_conflicts_with_subcommands conflicts with an ArgGroup
+    # Commits
+    # 783b291 chore: Release
+    # a88013a docs: Update changelog
+    # a3c6230 Merge pull request #6000 from mernen/fix-zsh-dynamic-completion
+    # 951536e chore: Release
+    # 3c527af chore: Update transitive clap
+    # 8520a7a chore: Release
+    # 2826eed chore(nushell): Require newer clap_complete
+    # c17d25f docs: Update changelog
+    # 493a71a Merge pull request #5999 from cenviity/push-tqqzyttsoktu
+    # c758212 feat(help): Merge lists of short and long aliases
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=clap&package-manager=cargo&pre
+    # vious-version=4.5.51&new-version=4.5.52)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depe
+    # ndabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40702	(@dependabot[bot], @dependabot[bot], #40702)	build(deps): bump sea-query from 1.0.0-rc.17 to 1.0.0-rc.18 (#40702)
+    # Bumps [sea-query](https://github.com/SeaQL/sea-query) from 1.0.0-rc.17 to 1.0.0-rc.18.
+    # Commits
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sea-query&package-manager=carg
+    # o&previous-version=1.0.0-rc.17&new-version=1.0.0-rc.18)](https://docs.github.com/en/github/managing-security-vulnerabili
+    # ties/about-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40700	(@dependabot[bot], @dependabot[bot], #40700)	build(deps): bump find-msvc-tools from 0.1.4 to 0.1.5 (#40700)
+    # Bumps [find-msvc-tools](https://github.com/rust-lang/cc-rs) from 0.1.4 to 0.1.5.
+    # Release notes
+    # Sourced from find-msvc-tools's releases.
+    # find-msvc-tools-v0.1.5
+    # Other
+    # Add Visual Studio 2026 support (#1609)
+    # Commits
+    # 15145d1 chore: release (#1611)
+    # ef4d378 Add Visual Studio 2026 support (#1609)
+    # df67ed3 chore(cc): release v1.2.45 (#1607)
+    # 0c15d10 Regenerate target info (#1606)
+    # c1fa376 Use a default check for the &quot;env&quot; variable in apple_sdk_name (#1605)
+    # 514e4d1 chore(cc): release v1.2.44 (#1603)
+    # 2a2eee3 Fix debug assertion for env/abi mismatch (#1604)
+    # 97281b6 Update CHANGELOG for version 1.2.43 (#1602)
+    # 8a45e2b Stop passing an invalid target to llvm-mingw's cross-compilation wrappers (...
+    # a0b2fd6 Mark static_flag and shared_flag as deprecated (#1582)
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=find-msvc-tools&package-manage
+    # r=cargo&previous-version=0.1.4&new-version=0.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/a
+    # bout-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
++https://github.com/servo/servo/pull/40698	(@mrobinson, @Loirooriol, #40698)	script: Trigger reflow properly for pseudo-elements with `content: attr()` (#40698)
+    layout
+    # When a Node with a pseudo-element style that uses `content: attr()`
+    # has one of its attributes mutated, trigger a reflow starting at that
+    # node. This is a crude implementation, because we currently aren't taking
+    # into account what attributes changed, but at least it works.
+    # Testing: This doesn't have any test changes, but should fix the test situation described in #40419.
++https://github.com/servo/servo/pull/40607	(@mrobinson, #40607)	libservo: Add `ContextMenuElementInformation` to for the context menu API (#40607)
+    api; element_info() on ContextMenu
+    # This new data structure allows passing more information when popping up
+    # context menus. It's possible in the future that it will be adapted into
+    # a more generic "hit test result" type API ala WebKit, but for now, this is probably
+    # enough.
+    # Testing: This change includes new API test assertions.
++https://github.com/servo/servo/pull/39897	(@jschwe, #39897)	Upload junit report of unit-tests in CI  (#39897)
+    testing
+    # This should help identify flaky unit tests, since codecov will gather statistics of tests (of the last 60 days) and
+    # allow us to easily identify flaky unit-tests. [Test page on codecov](https://app.codecov.io/github/servo/servo/tests)
+    # based on an uploaded report from a try run.
+    # Additionally add a catch-all parameter for `test-unit` which is passed through to the `cargo nextest` invocation,
+    # useful for e.g. stressing a test via `--stress-count`.
+    # Testing: Manually tested with [try run](https://github.com/servo/servo/actions/runs/18529823800)
+https://github.com/servo/servo/pull/40628	(@Loirooriol, #40628)	layout: Adjust inset-modified containing block to have non-negative size (#40628)
+    # If the insets of an absolutely positioned box are big enough that the inset-modified containing block (IMCB)
+    # would get a negative size, we will now adjust the weaker inset so that the size of the IMCB becomes zero instead.
+    # This affects auto sizes, auto margins, and self-alignment.
+    # This behavior matches Blink for the most part. However, while Blink also ensures a non-negative IMCB size, it
+    # doesn't necessarily do so by adjusting the weaker inset, so the alignment may differ.
+    # Blink is fine with adopting this behavior, as resolved by the CSSWG in https://github.com/w3c/csswg-drafts/issues/11478
+    # Testing: Adding new WPT
+https://github.com/servo/servo/pull/40688	(@tharkum, #40688)	html: Run the <media> `play` seek if `loop` attribute was set after playback ended (#40688)
+    # The user agent on the `internal play steps` (step 2) must to seek to the earliest possible position if the playback
+    # has ended, but the definition of the `ended playback` prevents looping when the loop attribute was added after
+    # playback has ended (already registered whatwg html issue).
+    # ```
+    # - playback ended (`ended` event)
+    # - loop = true
+    # - play() (no seeking - playback hasn't ended)
+    # ```
+    # Currently this edge case if not yet reflected in the HTML specification so let's do the same as other browsers
+    # and ignore the `loop` attribute for `play` seek.
+    # See https://html.spec.whatwg.org/multipage/#internal-play-steps
+    # See https://github.com/whatwg/html/issues/4487
+    # Testing: Improvements in the following tests
+    # - html/semantics/embedded-content/media-elements/playing-the-media-resource/loop-from-ended.tentative.html
+-https://github.com/servo/servo/pull/40689	(@mukilan, #40689)	wpt: Backport upstream WPT PR for new SVG test. (#40689)
+    # The exported [upstream PR] failed to merge due to lint issues and there was also a suggestion to move the test to
+    # a different folder.
+    # Since that upstream PR has now been merged manually, backport these fixes to Servo's copy of WPT.
+    # [upstream PR]: https://github.com/web-platform-tests/wpt/pull/56050
+https://github.com/servo/servo/pull/40685	(@tharkum, #40685)	html: Fire the <media> `canplaythrough` event in the expected order (#40685)
+    # Follow the HTML specification, queue a media element task to fire `canplaythrough` event in expected order (after
+    # `canplay`) on the changing the ready state to `HAVE_ENOUGH_DATA` which align the event ordering for non-autoplay
+    # and autoplay media.
+    # See https://html.spec.whatwg.org/multipage/#ready-states%3Aevent-media-canplaythrough
+    # The associated WPT PR: https://github.com/web-platform-tests/wpt/pull/56014
+    # Testing: Improvements in the following tests
+    # - html/semantics/embedded-content/media-elements/ready-states/autoplay.html
+-https://github.com/servo/servo/pull/40686	(@kkoyung, #40686)	script: Fix wrongly matched normalized algorithm in `NormalizedAlgorithm::get_key_length` (#40686)
+    # In `NormalizedAlgorithm::get_key_length`, we match the wrong enum variants for HKDF and PBKDF2. Therefore, the
+    # function wrongly returns `NotSupportedError` for them. It causes a few WPT tests fail. This patch fix it with
+    # correct enum variants.
+    # Testing: Pass some WPT tests that were expected to fail.
++https://github.com/servo/servo/pull/40594	(@mukilan, @mrobinson, #40594)	compositing: Allow WebGL contexts to have different Surfman devices (#40594)
+    api; part of per-webview RenderingContext
+    # Currently, a single `surfman::Device` is used for all WebGL contexts. This cannot work when we have multiple
+    # rendering contexts. So, extract the surfman `Connection` and `Adapter` into a per-painter data structure
+    # (`PainterSurfmanDetailsMap`) and store the `Device` directly in the WebGL context.
+    # This patch also modifies the WebXR traits so that the `Device` doesn't need to be explictly passed into most methods.
+    # Testing: Should be covered by existing tests.
++https://github.com/servo/servo/pull/40636	(@mukilan, #40636)	net: Relax the SVG content type detection logic. (#40636)
+    dom; fixed SVG rendering with Content-Type parameters
+    # The current logic fails when the `Content-Type` header includes the character encoding other parameters like `qs`.
+    # Fixes: #40630
+-https://github.com/servo/servo/pull/40675  (@Taym95, #40675)   Remove #![allow(dead_code)] from readablestreambyobreader (#40675)
+    # #![allow(dead_code)]  not needed in readablestreambyobreader(left over stream re-implementation)
+    # PS: this was made using Servo.
+https://github.com/servo/servo/pull/40654	(@TimvdLippe, #40654)	Implement `WindowOrWorkerGlobalScope::reportError` (#40654)
+    # This web API is alternative API to `throw e`, which is why we can reuse a lot of the existing machinery.
+    # The one testcase that isn't passing yet is because it reports an empty `TypeError`. The current logic in
+    # `ErrorInfo` only retrieves the message data, but doesn't include the type of the exception. For that, we need to use
+    # `(*report)._base.errorNumber` and map that back to the original type codes. However, deferring that to a follow-up
+    # as that requires some more work in mozjs.
+-https://github.com/servo/servo/pull/40670	(@arihant2math, #40670)	resources: Ensure that selectors in CSS for the newtab page refer to actual elements (#40670)
+    # I did part of a refactor to address a review but didn't finish it. Fixes white input/button in dark mode.
+https://github.com/servo/servo/pull/40671	(@mrobinson, #40671)	libservo: Make `WebView::set_history` have `crate` visibility (#40671)
+    # I mistakenly made this method have public visibility in a recent PR
+    # Testing: This doesn't change behavior and is thus covered by existing tests.
+    # Fixes: #40667
+https://github.com/servo/servo/pull/40666	(@arihant2math, @yezhizhen, #40666)	indexeddb: Clean shutdown of indexeddb threads/threadpool (#40666)
+    # Clean shutdown of indexeddb.
+    # Testing: Covered by WPT
+-https://github.com/servo/servo/pull/38644	(@sagudev, #38644)	CI: use `--profile` instead of profile shorthands (#38644)
+    # Before, we used shorthands for profiles selection (`--release`, `--production`), but it would be more correct to
+    # just use actual `--profile` so we do not need shorthands for all of them.
+    # Motivation: I want to create "profiling" builds in CI.
+    # Testing: CI change is covered by CI.
+-https://github.com/servo/servo/pull/40648	(@arihant2math, #40648)	Fix indexeddb intermitency (#40648)
+    # Fixes a major source of intermittency in IndexedDB: the dispatching of the complete event. This ensures that all
+    # requests are processed before it is fired.
+    # Fixes: #39162
+    # Fixes: #39221
+    # ... and likely many more.
++https://github.com/servo/servo/pull/40582	(@sagudev, #40582)	script: Add `cx_no_gc`/`cx`/`realm` codegen option and demostrate them (#40582)
+    script; safer api for mozjs bindings
+    # Companion to https://github.com/servo/mozjs/pull/650
+    # We added 3 new options to bindings.conf, each more powerful then the previous one, so one should use the least
+    # powerful as possible to keep things flexible:
+    # 1 `cx_no_gc` prepends argument `&JSContext`, which allows creating NoGC tokens and using functions that do not
+    # trigger GC.
+    # 2. `cx` prepends argument `&mut JSContext`, which allows everything that previous one allows, but it also allows
+    # calling GC triggering functions.
+    # 3. `realm` prepends argument `&mut CurrentRealm`, which can be deref_mut to `&mut JSContext` (so it can do everything
+    # that previous can), but it also ensures that there is current entered realm, which can be used for creation of InRealm.
+    # next steps: #40600
+    # reviewable per commit
+    # Testing: It's just refactoring
+    # try run: https://github.com/sagudev/servo/actions/runs/19287700927
+>>> 2025-11-22T07:09:34Z
+-https://github.com/servo/servo/pull/40784	(@yezhizhen, #40784)	webdriver: Generalize `implicit_wait` (#40784)
+    # I wanted to implement [implicit wait](https://w3c.github.io/webdriver/#dfn-implicit-wait-timeout) for other
+    # commands, such as send key/element clear/click. But the current trait bound, parameters, and logic are way too
+    # tight and specific.
+    # Testing: This should not change existing behaviour.
+-https://github.com/servo/servo/pull/40805	(@webbeef, #40805)	chore: Use parking_lot Mutex and RwLock in net/ code (#40805)
+    # Partial fix for https://github.com/servo/servo/issues/40744
+    # Testing: Refactor covered by existing tests.
+    # Fixes:  Contributes to https://github.com/servo/servo/issues/40744
+-https://github.com/servo/servo/pull/40804	(@Loirooriol, #40804)	compositing_traits: Drop unnecessary variable mutability (#40804)
+    # This avoids a warning when compiling tests.
+    # Testing: Not needed, no behavior change
++https://github.com/servo/servo/pull/40797	(@Loirooriol, @mrobinson, #40797)	layout: Preserve cached layout results of undamaged descendants (#40797)
+    perf; better incremental layout for descendants
+    # We were previously clearing the cached layout results when the element, an ancestor, or a child had relayout
+    # damage. Now we will only clear the cache if the relayout damage is in the element or a descendant.
+    # Testing: Unneeded, no behavior change
++https://github.com/servo/servo/pull/40795	(@Loirooriol, @mrobinson, #40795)	layout: Preserve cached intrinsic sizes of undamaged descendants (#40795)
+    perf; better incremental layout for descendants
+    # We were previously clearing the cached intrinsic inline sizes when the element, an ancestor, or a child had relayout
+    # damage. However, intrinsic sizes don't depend on ancestors for the most part, so now we will only clear the cache
+    # if the relayout damage is in the element or a descendant.
+    # Testing: Not needed, no change in behavior
++https://github.com/servo/servo/pull/40794	(@mrobinson, #40794)	libservo: Have `WebView` take a `RenderingContext` rather than `Servo` (#40794)
+    api; per-webview rendering contexts (big part of support for multiple windows)
+    # This is the last major change before we can try to implement support for
+    # multiple windows in Servo. This change makes it so that each `WebView`
+    # (via `WebViewBuilder`) takes the `RenderingContext` as an argument,
+    # rather than `Servo` (via `ServoBuilder`) as a whole.
+    # In the compositor, when registering the `RenderingContext`, if a
+    # `Painter` is found for it, it is returned. Otherwise, a new `Painter`
+    # (and WebRender instance) is created for it. There is currently no way to
+    # unregister a `RenderingContext`. We should come up with a good metric
+    # for when is the best time to clean up `Painter`s and WebRender instances
+    # for defunct `RenderingContext`s. This could perhaps be done via a `Weak`
+    # handle to the `RenderingContext`.
+    # Testing: This should not really change observable behavior, so should be
+    # covered by existing tests.
+    # Fixes: #13995
+    # Closes: #40261
+https://github.com/servo/servo/pull/40653	(@TimvdLippe, #40653)	libservo: Notify embedder of protocol handler updates (#40653)
+    # This implements step 2 of the web-facing API's.
+    # Now, the embedder receives a notification whether
+    # a webpage wants to register/unregister a protocol
+    # handler. They can't do anything with it yet, that's for a follow-up PR. But locally testing shows the
+    # following debug log:
+    # ```
+    # pid:35180 Requesting to Register for scheme web+test with url
+    # https://web-platform.test:8443/html/webappapis/system-state-and-capabilities/the-navigator-object/%s
+    # ```
+    # Part of #40615
++https://github.com/servo/servo/pull/40799	(@mrobinson, #40799)	libservo: Remove `Servo::animating()` (#40799)
+    api; removed in favour of RefreshDriver
+    # Instead of relying on `Sevo::animating()` in servoshell to drive the
+    # event loop, it is sufficient to just let the `RefreshDriver` wake it up
+    # when it is time to re-render.
+    # This allows us to remove `Servo::animating()` completely. It is a bit
+    # odd that there is a global API to track this, rather than per-`WebView`
+    # or window, so this change just removes it entirely.
+    # Testing: This should make the main loop of headless servoshell more efficient,
+    # but I do not think this difference is going to be observable in any way.
+-https://github.com/servo/servo/pull/40792	(@mrobinson, #40792)	servoshell: Move `Minibrowser` to headed window (#40792)
+    # Instead of storing the `Minibrowser` egui struct in the
+    # `RunningAppState` which is used for both headed and headless windows,
+    # move it to the headed window implementation. This addresses a lot of
+    # bits of the code that would need to test the existance of the
+    # `Minibrowser` even when it should have always existed.
+    # In addition, event handling for the headed window is moved into the
+    # headed window implementation itself, which eliminates the need to expose
+    # so many methods in `WindowPortsMethods`.
+    # One downside is that it is impossible to support tracing of `AppEvent`s
+    # as accessibilty events are not cloneable. This seems like a small price
+    # to pay for this cleanup though.
+    # This is the first step toward supporting multiple windows in servoshell.
+    # Testing: This should not change behavior and is thus covered by existing tests.
+https://github.com/servo/servo/pull/40788	(@mukilan, @mrobinson, #40788)	compositing: Support per-Painter operations and message handling (#40788)
+    # Currently, only the first `Painter` is used for all operations in the `Compositor`. This change modifies the
+    # compositor API and message handling to allow routing the operations to the correct `Painter` via a provided
+    # `PainterId` or `WebViewId`.
+    # This change is to enable support for per-`WebView`s  `RenderingContext`s.
+    # Testing: This change shouldn't change behavior, so existing WPT tests should cover it.
+-https://github.com/servo/servo/pull/40766	(@atbrakhi, #40766)	servoshell: Share WebView management between desktop and EGL platforms (#40766)
+    # Desktop and EGL implementations were maintaining identical WebView collection logic (HashMap, creation order
+    # tracking, focus management).
+    # Extracted this into a shared WebViewCollection struct in RunningAppStateBase. Both platforms now use the common
+    # implementation through trait methods
+    # Testing: Existing tests should cover this change.
+    # Fixes: part of #40530
+-https://github.com/servo/servo/pull/40783	(@mrego, #40783)	Remove `dom_uievent_which` from experimental features (#40783)
+    # `UIEvent.which` was implemented in #40109 and is enabled by default, we don't need it to be listed in the
+    # experimental features.
+    # Testing: No change of behavior.
++https://github.com/servo/servo/pull/37972	(@jschwe, #37972)	Add feature to disable JIT support in mozjs at compile-time (#37972)
+    perf
+    # When the `js_jit` feature is not selected, this reduces the binary size from 89 to 80 MiB for linux
+    # production-stripped.
+    # By default, we still enable JIT, but in scenarios where JIT is not required or not allowed by the system, the size
+    # savings make a feature worthwhile.
+    # To allow disabling the feature, `servoshell` now depends on libservo with `no-default-features`, and hence gains
+    # explicit default features, that were previously enabled via libservos default features. To avoid compile-errors with
+    # `--no-default-features`, `vello-cpu` is unconditionally selected by servoshell (identical to previous behavior).
+    # Testing: The default behavior is unchanged. The HarmonyOS CI job does test with `--no-default-features`
++https://github.com/servo/servo/pull/40775	(@webbeef, #40775)	dom: cache preference access in Document (#40775)
+    perf
+    # They showed up in some profile due to the RwLock access.
+    # Testing: Green wpt tests: https://github.com/webbeef/servo/actions/runs/19559457895/job/56010036063
+>>> 2025-11-23T06:03:05Z
+-https://github.com/servo/servo/pull/40828	(@servo-wpt-sync, #40828)	Sync WPT with upstream (23-11-2025) (#40828)
+    # Automated downstream sync of changes from upstream as of 23-11-2025
+    # [no-wpt-sync]
+https://github.com/servo/servo/pull/40823	(@lumiscosity, #40823)	Don't spawn a channel for ProfilerChan when profiling is off (#40823)
+    # ProfilerChan now takes an Option<> in order to avoid spawning a channel when unnecessary.
+    # Testing: Manual (-p and --profiler-trace-path options still work with these changes).
+    # Fixes: #40810
+https://github.com/servo/servo/pull/40647	(@simonwuelker, #40647)	fonts: Compute applied variations depending on originating `@font-face` rule (#40647)
+    # This change gives the font selection code access to the data from the `@font-face` rule that defined the font -
+    # and uses it to apply `font-variation-settings` inside `@font-face` rules.
+    # Testing: We don't run wpt with `layout_variable_fonts_enabled=true` yet. I've attached a test case that is fixed
+    # by this PR.
+    # Part of #37236
+    # Testcase
+    # ```html
+    #         h1, h2, h3, h4, h5, h6 {
+    #             font-family: 'Montserrat', sans-serif;
+    #         }
+    #         @font-face {
+    #           font-family: 'Montserrat';
+    #           font-display: swap;
+    #           font-variation-settings: "wght" 500;
+    #           src: url(https://fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2) format('woff2');
+    #         }
+    #     The hackfest
+    # ```
++https://github.com/servo/servo/pull/40821	(@nicoburns, #40821)	Upgrade Taffy to v0.9.2 (#40821)
+    crash; fix panic in grid layout
+    # Upgrades the patch version of Taffy (release notes: https://github.com/DioxusLabs/taffy/releases/tag/v0.9.2)
+    # Testing: WPT tests
+    # Fixes https://github.com/servo/servo/issues/40730
+https://github.com/servo/servo/pull/40817	(@jdm, #40817)	testing: Remove ahem.css user stylesheet injection. (#40817)
+    # The current user stylesheet use in our tests is a hack that hides real issues like #40419. Any test that requires
+    # ahem.ttf needs to include the stylesheet like any other webpage.
++https://github.com/servo/servo/pull/40684	(@WaterWhisperer, #40684)	script: Support SVG <use> elements with fragment identifiers (#40684)
+    layout
+    #  implements support for SVG  elements that reference other elements within the same document using fragment
+    #  identifiers.
+    # Testing:
+    # Fixes: #10951
+-https://github.com/servo/servo/pull/40818	(@mrobinson, #40818)	servoshell: Remove `App::suspended` (#40818)
+    # This variable seems to be unused.
+    # Testing: This change just removes dead code so should not need new tests.
+-https://github.com/servo/servo/pull/40815	(@mrobinson, #40815)	servoshell: Remove code duplication in `EventsLoop` and rename to `ServoEventLoop` (#40815)
+    # It used to be that the winit event loop for different platforms was
+    # initialized differently. That isn't the case any longer, so we do not
+    # need platform-specific code here.
+    # In addition, I think that the slightly-odd `EventsLoop` name was chosen
+    # to not conflict with winit's `EventLoop`. Instead I've renamed this to
+    # `ServoShellEventLoop` and removed one level of nesting in the data structure,
+    # which simplifies things a bit.
+    # Testing: This should not change behavior, so the WPT should cover it.
+-https://github.com/servo/servo/pull/40816	(@mrobinson, #40816)	servoshell: Rename `Minibrowser` to `Gui` (#40816)
+    # MiniBrowser was considered at some point for the name of servoshell, but
+    # was discarded. The name of the egui portions of servoshell are a
+    # holdover from this. This change renames this struct to `Gui` to better
+    # reflect what it does.
+    # Testing: This just renames some data structures, so should not need new tests.
+-https://github.com/servo/servo/pull/40787	(@eerii, #40787)	devtools: Add Environment actor boilerplate and Object actor encode (#40787)
+    # Prequisite for implementing pausing in the debugger. The `EnvironmentActor` will be used in the future from the
+    # `FrameActor`, we need the struct defined to start to implement it.
+    # The `ObjectActorMsg` is not only used by the `EnvoironmentActor`, but also by the `ThreadActor` when replying to
+    # `interrupt`.
+    # Testing: Deferred until the pause is fully implemented.
+    # Fixes: Part of #36027.
+-https://github.com/servo/servo/pull/40786	(@eerii, #40786)	devtools: Pause actor boilerplate (#40786)
+    # Prequisite for implementing pausing in the debugger. This will be part of the `ThreadActor` response to `interrupt`. I
+    # decided to split the change in multiple patches since it is quite big. Continuation of #38824.
+    # Testing: Deferred until the pause is fully implemented.
+    # Fixes: Part of #36027.
+https://github.com/servo/servo/pull/40807	(@yerke, #40807)	servoshell: hide tab bar in full screen mode (#40807)
+    # servoshell: hide tab bar in full screen mode
+    # Testing: Tested manually.
+    # Fixes: https://github.com/servo/servo/issues/40789
+    # Before:
+    # After:
+https://github.com/servo/servo/pull/40811	(@jdm, #40811)	script: Improve spec-compliance of Performance resource timing entries (#40811)
+    # The current implementation doesn't match the specification and is broken in a way that makes nytimes.com endlessly
+    # attempt to enqueue resource timing entries, making the page completely unresposive to user input. This PR makes
+    # some surgical changes that fix the NYTimes behaviour and add some comments to make it easier to further improve
+    # the implementation in the future.
+    # Testing: Various WPT that used to timeout now fail instead.
+    # Fixes: #40808
++https://github.com/servo/servo/pull/40692	(@jdm, #40692)	Run SVG tests in CI. (#40692)
+    # Now that we have rudimentary SVG support, we should probably run the testsuite.
+-https://github.com/servo/servo/pull/40806	(@yezhizhen, #40806)	openxr: Fix DirectX 11 build warning and reduce visiblity (#40806)
+    # This mod is only compiled for Win therefore hasn't been captured by Lint.
+-https://github.com/servo/servo/pull/40809	(@kkoyung, #40809)	script: Rename `ExportedKey::Raw` to `ExportedKey::Bytes` (#40809)
+    # The enum variant `ExportedKey::Raw(Vec)` is actually used when a key is exported in "raw", "spki" or "pkcs8"
+    # format. Naming it as `Raw` could be confusing.
+    # This patch renames `ExportedKey::Raw` to `ExportedKey::Bytes`.
+    # Testing: No behavioral change. Existing tests suffice.
+>>> 2025-11-24T06:17:08Z
+-https://github.com/servo/servo/pull/40849	(@dependabot[bot], @dependabot[bot], #40849)	build(deps): bump cc from 1.2.46 to 1.2.47 (#40849)
+    # Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.2.46 to 1.2.47.
+    # Release notes
+    # Sourced from cc's releases.
+    # cc-v1.2.47
+    # Other
+    # add helenos linker identifications (#1615)
+    # Changelog
+    # Sourced from cc's changelog.
+    # 1.2.47 - 2025-11-21
+    # Other
+    # add helenos linker identifications (#1615)
+    # Commits
+    # fbd4807 chore(cc): release v1.2.47 (#1617)
+    # f71d1d6 add helenos linker identifications (#1615)
+    # e0e4b13 Bump actions/checkout from 5 to 6 (#1616)
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cc&package-manager=cargo&previ
+    # ous-version=1.2.46&new-version=1.2.47)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depend
+    # abot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40791	(@eerii, #40791)	devtools: Frame actor boilerplate (#40791)
+    # Prequisite for implementing pausing in the debugger. This will be part of the `ThreadActor` response to
+    # `interrupt`. Continuation of #38824.
+    # Depends on #40787 for `EnvironmentActor*`.
+    # Testing: Deferred until the pause is fully implemented.
+    # Fixes: Part of #36027.
+-https://github.com/servo/servo/pull/40850	(@dependabot[bot], @dependabot[bot], #40850)	build(deps): bump compression-core from 0.4.30 to 0.4.31 (#40850)
+    # Bumps [compression-core](https://github.com/Nullus157/async-compression) from 0.4.30 to 0.4.31.
+    # Release notes
+    # Sourced from compression-core's releases.
+    # compression-core-v0.4.31
+    # Added
+    # Add uninitialized output buffer support (#414)
+    # Commits
+    # 2a28343 chore: release (#417)
+    # 6e86656 chore(deps): bump actions/checkout from 5 to 6 (#426)
+    # 02f81fe Refactor: Simplify AsyncBufWrite (#423)
+    # ad3d41d Set msrv for codecs to 1.83 (#422)
+    # 8947fed Refactor bufread::decoder: Extract poll ready check (#418)
+    # 63a83ad Optimize condition for removing written data in BufWriter (#415)
+    # e894423 feature: Add uninitialized output buffer support (#414)
+    # cf54f96 ci: Always run on main (#416)
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=compression-core&package-manag
+    # er=cargo&previous-version=0.4.30&new-version=0.4.31)](https://docs.github.com/en/github/managing-security-vulnerabilitie
+    # s/about-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40848	(@dependabot[bot], @dependabot[bot], #40848)	build(deps): bump syn from 2.0.110 to 2.0.111 (#40848)
+    # Bumps [syn](https://github.com/dtolnay/syn) from 2.0.110 to 2.0.111.
+    # Release notes
+    # Sourced from syn's releases.
+    # 2.0.111
+    # Allow first argument of braced!, bracketed!, parenthesized! to be an otherwise unused variable (#1946)
+    # Commits
+    # 4e50867 Release 2.0.111
+    # c57334b Merge pull request #1946 from dtolnay/unusedgroup
+    # 6a43384 Suppress unused variable warning on variables used in group macro
+    # 7ff6c86 Update actions/checkout@v5 -&gt; v6
+    # 59ce6bb Update test suite to nightly-2025-11-20
+    # 3d91b8c Update test suite to nightly-2025-11-11
+    # 2d87fca Delete version requirement from readme
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=syn&package-manager=cargo&prev
+    # ious-version=2.0.110&new-version=2.0.111)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dep
+    # endabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40847	(@dependabot[bot], @dependabot[bot], #40847)	build(deps): bump async-compression from 0.4.33 to 0.4.34 (#40847)
+    # Bumps [async-compression](https://github.com/Nullus157/async-compression) from 0.4.33 to 0.4.34.
+    # Commits
+    # 2a28343 chore: release (#417)
+    # 6e86656 chore(deps): bump actions/checkout from 5 to 6 (#426)
+    # 02f81fe Refactor: Simplify AsyncBufWrite (#423)
+    # ad3d41d Set msrv for codecs to 1.83 (#422)
+    # 8947fed Refactor bufread::decoder: Extract poll ready check (#418)
+    # 63a83ad Optimize condition for removing written data in BufWriter (#415)
+    # e894423 feature: Add uninitialized output buffer support (#414)
+    # cf54f96 ci: Always run on main (#416)
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=async-compression&package-mana
+    # ger=cargo&previous-version=0.4.33&new-version=0.4.34)](https://docs.github.com/en/github/managing-security-vulnerabiliti
+    # es/about-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40846	(@dependabot[bot], @dependabot[bot], #40846)	build(deps): bump compression-codecs from 0.4.32 to 0.4.33 (#40846)
+    # Bumps [compression-codecs](https://github.com/Nullus157/async-compression) from 0.4.32 to 0.4.33.
+    # Release notes
+    # Sourced from compression-codecs's releases.
+    # compression-codecs-v0.4.33
+    # Added
+    # Add uninitialized output buffer support (#414)
+    # Other
+    # Set msrv for codecs to 1.83 (#422)
+    # Commits
+    # 2a28343 chore: release (#417)
+    # 6e86656 chore(deps): bump actions/checkout from 5 to 6 (#426)
+    # 02f81fe Refactor: Simplify AsyncBufWrite (#423)
+    # ad3d41d Set msrv for codecs to 1.83 (#422)
+    # 8947fed Refactor bufread::decoder: Extract poll ready check (#418)
+    # 63a83ad Optimize condition for removing written data in BufWriter (#415)
+    # e894423 feature: Add uninitialized output buffer support (#414)
+    # cf54f96 ci: Always run on main (#416)
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=compression-codecs&package-man
+    # ager=cargo&previous-version=0.4.32&new-version=0.4.33)](https://docs.github.com/en/github/managing-security-vulnerabilit
+    # ies/about-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40845	(@dependabot[bot], @dependabot[bot], #40845)	build(deps): bump aws-lc-rs from 1.15.0 to 1.15.1 (#40845)
+    # Bumps [aws-lc-rs](https://github.com/aws/aws-lc-rs) from 1.15.0 to 1.15.1.
+    # Release notes
+    # Sourced from aws-lc-rs's releases.
+    # aws-lc-rs v1.15.1
+    # What's Changed
+    # Uncap HKDF salt length restriction by @​skmcgrail in aws/aws-lc-rs#951
+    # Build Improvements
+    # Respect LDFLAGS in memcmp_check by @​aaronmondal and @​justsmth in aws/aws-lc-rs#958
+    # aws-lc-sys: make bindgen optional by @​justsmth in aws/aws-lc-rs#949
+    # Issues Being Closed
+    # Build failure when targeting powerpc-unknown-linux-gnu -- #950
+    # Build script fails when using bazel -- #858
+    # Other Merged PRs
+    # Align aws-lc-sys v0.34.0 w/ AWS-LC v1.65.0 by @​justsmth in aws/aws-lc-rs#955
+    # Explicit smart pointer conversion by @​justsmth in aws/aws-lc-rs#954
+    # Prepare aws-lc-rs v1.15.1 by @​justsmth in aws/aws-lc-rs#956
+    # Full Changelog: https://github.com/aws/aws-lc-rs/compare/v1.15.0...v1.15.1
+    # Commits
+    # 93f8b32 Prepare aws-lc-rs v1.15.1 (#956)
+    # a825b51 Respect LDFLAGS in memcmp_check (#958)
+    # f67e605 Explicit smart pointer conversion (#954)
+    # ee3917f aws-lc-sys: bindgen is optional (#949)
+    # cd58abe Align aws-lc-sys v0.34.0 w/ AWS-LC v1.65.0 (#955)
+    # 3728f18 Uncap HKDF salt length restriction (#951)
+    # be28b72 Bump aws-lc-fips-sys to v0.13.10 (#948)
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aws-lc-rs&package-manager=carg
+    # o&previous-version=1.15.0&new-version=1.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about
+    # -dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+https://github.com/servo/servo/pull/40822	(@freyacodes, #40822)	Update nixpkgs to current unstable (#40822)
+    # This fixes an incompatibility between mesa and wayland 1.23.x which causes a panic
+    # Testing: `./mach test-unit`
+    # NB: These tests failed. I have no way of verifying if they failed because of this change
+    # ```
+    #      Summary [   5.146s] 814 tests run: 793 passed (1 slow), 21 failed, 0 skipped
+    #         FAIL [   0.010s] compositing_traits rendering_context::test::test_read_pixels
+    #         FAIL [   0.029s] libservo::webview test_confirm_dialog
+    #         FAIL [   0.035s] libservo::webview test_can_go_forward_and_can_go_back
+    #         FAIL [   0.036s] libservo::servo test_simple_start_and_stop_servo
+    #         FAIL [   0.040s] libservo::multiprocess test_multiprocess_preference_observer
+    #         FAIL [   0.039s] libservo::webview test_alert_dialog
+    #         FAIL [   0.032s] libservo::webview test_control_show_and_hide
+    #         FAIL [   0.031s] libservo::webview test_create_webview_and_immediately_drop_webview_before_shutdown
+    #         FAIL [   0.050s] libservo::webview test_contextual_context_menu_items
+    #         FAIL [   0.028s] libservo::webview test_cursor_change
+    #         FAIL [   0.051s] libservo::webview test_create_webview
+    #         FAIL [   0.030s] libservo::webview test_evaluate_javascript_panic
+    #         FAIL [   0.027s] libservo::webview test_prompt_dialog
+    #         FAIL [   0.031s] libservo::webview test_evaluate_javascript_basic
+    #         FAIL [   0.030s] libservo::webview test_negative_resize_to_request
+    #         FAIL [   0.029s] libservo::webview test_page_zoom
+    #         FAIL [   0.034s] libservo::webview test_resize_webview_zero
+    #         FAIL [   0.033s] libservo::webview test_show_and_hide_ime
+    #         FAIL [   0.027s] libservo::webview test_theme_change
+    #         FAIL [   0.031s] libservo::webview test_simple_context_menu
+    #         FAIL [   0.031s] libservo::webview test_viewport_meta_tag_initial_zoom
+    # error: test run failed
+    # ```
++https://github.com/servo/servo/pull/40829	(@simonwuelker, #40829)	Support `font-optical-sizing` (#40829)
+    layout; variable fonts
+    # This doesn't quite fix the issue in https://github.com/servo/servo/pull/38642#issuecomment-3193498155, I think
+    # macos should still have the wrong behaviour for `font-optical-sizing: none` (but I have no way to verify that).
+    # Manual testcase (fixed by this change)
+    # ```html
+    # @font-face {
+    #   font-family: "Amstelvar VF";
+    #   src: url("https://mdn.github.io/shared-assets/fonts/variable-fonts/AmstelvarAlpha-VF.woff2")
+    #     format("woff2-variations");
+    #   font-weight: 300 900;
+    # }
+    # p {
+    #   font:
+    #     1.2em "Amstelvar VF",
+    #     Georgia,
+    #     serif;
+    #     font-optical-sizing: none;
+    #   font-size: 4rem;
+    #   margin: 1rem;
+    #   display: inline-block;
+    # }
+    # .p1 {
+    #   font-variation-settings: "wght" 300;
+    #   font-optical-sizing: auto;
+    # }
+    # .p2 {
+    #   font-variation-settings: "wght" 300;
+    #   font-optical-sizing: none;
+    # }
+    #   Weight
+    #   (font-optical-sizing: auto)
+    #   Weight
+    #   (font-optical-sizing: none)
+    # ```
+    # Testing: We don't run wpt with `layout_variable_fonts` enabled yet. (But I think we could after this change)
+    # Depends on https://github.com/servo/stylo/pull/271
+    # Part of #38800
+-https://github.com/servo/servo/pull/40835	(@jdm, #40835)	servodriver: Fix incorrect method name. (#40835)
+    # Fixes the following error that occurs when servodriver shutdown times out:
+    # ```
+    # Uncaught exception in TestRunnerManager.run:
+    # Traceback (most recent call last):
+    #   File "/Users/jdm/src/alt-servo/tests/wpt/tests/tools/wptrunner/wptrunner/testrunner.py", line 441, in run_loop
+    #     new_state = f()
+    #                 ^^^
+    #   File "/Users/jdm/src/alt-servo/tests/wpt/tests/tools/wptrunner/wptrunner/testrunner.py", line 936, in restart_runner
+    #     self.stop_runner(force=self.state.force_stop)
+    #   File "/Users/jdm/src/alt-servo/tests/wpt/tests/tools/wptrunner/wptrunner/testrunner.py", line 959, in stop_runner
+    #     self.browser.stop(force=True)
+    #   File "/Users/jdm/src/alt-servo/tests/wpt/tests/tools/wptrunner/wptrunner/testrunner.py", line 292, in stop
+    #     self.browser.stop(force=force)
+    #   File "/Users/jdm/src/alt-servo/tests/wpt/tests/tools/wptrunner/wptrunner/browsers/servodriver.py", line 172, in stop
+    #     self.logger.warn("Max retry exceeded to normally shut down. Killing instead.")
+    #     ^^^^^^^^^^^^^^^^
+    # AttributeError: 'StructuredLogger' object has no attribute 'warn'
+    # ```
+    # Testing: Manual test. Can't test the test harness.
+https://github.com/servo/servo/pull/40301	(@jdm, @uthmaniv, #40301)	fonts: Add WebFontDocumentContext for CSS Fonts 4 font fetching (#40301)
+    # Rebase of #37021 with review comments applied. These changes bundle up the required information from the relevant
+    # global when a stylesheet is added so that any requests for web fonts match the specification.
+    # Testing: Newly passing tests.
+    # Fixes: #36590
++https://github.com/servo/servo/pull/40832	(@kkoyung, #40832)	script: Implement CShake in WebCrypto API (#40832)
+    dom; crypto.subtle.digest("cSHAKE128"), cSHAKE256
+    # Implements digest operation of CShake, including `cSHAKE128` and `cSHAKE256`, using the crate `sha3` and `digest`
+    # for the CShake calculation.
+    # Testing: Pass WPT tests that were expected to fail.
+    # Fixes: Part of #40687
+-https://github.com/servo/servo/pull/40824	(@mrobinson, #40824)	servoshell: Make event loop implementations more similar to each other (#40824)
+    # Unify the way that the headed and headless event loop pump the servo
+    # event loop. In addition, make the headless event loop data strucures
+    # match more closely the ones from winit.
+    # This is a step toward adding multiple window support to servoshell, as
+    # the servo event loop pump will need to support multiple windows. This
+    # changes means that this fix will only have to happen in one place
+    # instead of two.
+    # Testing: This should not change behavior and thus is covered by existing tests.
+-https://github.com/servo/servo/pull/40812	(@jdm, #40812)	script: Replace strings for performance entry types with dedicated enum. (#40812)
+    # This both reduces unnecessary string comparisons and fixes several cases where two string arguments were passed
+    # in the wrong order.
+    # Depends on https://github.com/servo/servo/pull/40811.
+    # Testing: New passing tests.
+https://github.com/servo/servo/pull/39582	(@arihant2math, @mrobinson, #39582)	indexeddb: Support deletion of key ranges (#39582)
+    # Allows for key ranges to be deleted, as per spec.
+    # Testing: WPT
+>>> 2025-11-25T07:09:33Z
+https://github.com/servo/servo/pull/40852	(@delan, #40852)	ci: Use new queue API for self-hosted runners (#40852)
+    # this patch enables CI jobs to queue for self-hosted runners by bumping our actions to servo/ci-runners#69, and
+    # bumping our runner-select and runner-timeout jobs to ubuntu-24.04 (for better retry support in curl).
+    # this should further speed up our builds by allowing more jobs to run on self-hosted runners: if a job would take
+    # 5x as long on github-hosted runners, then we can wait up to 80% of that time for a self-hosted runner and still win.
+    # for now, though, jobs will queue for self-hosted runners for up to [**one
+    # hour**](https://github.com/servo/ci-runners/blob/44317e3cd86c5ff2ef0b08878b90da246bc237da/actions/runner-select/action.y
+    # ml#L131-L133)
+    # (note that you won’t have to wait if the servers are down). if your request
+    # for a self-hosted runner can’t be satisfied immediately, it will look like
+    # [this](https://github.com/servo/servo/actions/runs/19624089967/job/56189690571#step:2:161):
+    # ```
+    # POST
+    # https://ci0.servo.org/queue/enqueue?unique_id=92a9e758-f8e2-4301-b4a4-304178a656ae&qualified_repo=servo/servo&run_id=196
+    # 24089967
+    # POST https://ci0.servo.org/queue/take/92a9e758-f8e2-4301-b4a4-304178a656ae
+    # curl: (22) The requested URL returned error: 503
+    # curl: (22) The requested URL returned error: 503
+    # curl: (22) The requested URL returned error: 503
+    # ... [repeating for up to one hour]
+    # ```
+    # to check where you are in the queue, go to  (it’s currently very rudimentary):
+    # Testing:
+    # - mach try windows: [1](https://github.com/servo/servo/actions/runs/19624074289/job/56189642435#step:2:161),
+    # [2](https://github.com/servo/servo/actions/runs/19624077577/job/56189654083#step:2:161),
+    # [3](https://github.com/servo/servo/actions/runs/19624079336/job/56189657185#step:2:161),
+    # [4](https://github.com/servo/servo/actions/runs/19624089967/job/56189690571#step:2:161),
+    # [5](https://github.com/servo/servo/actions/runs/19624100902/job/56189714525#step:2:161),
+    # [6](https://github.com/servo/servo/actions/runs/19624102672/job/56189717605#step:2:161)
+    # - mach try windows linux lint: [1](https://github.com/servo/servo/actions/runs/19624555146),
+    # [2](https://github.com/servo/servo/actions/runs/19624560177),
+    # [3](https://github.com/servo/servo/actions/runs/19624562199),
+    # [4](https://github.com/servo/servo/actions/runs/19624564171),
+    # [5](https://github.com/servo/servo/actions/runs/19624566167),
+    # [6](https://github.com/servo/servo/actions/runs/19624568092)
++https://github.com/servo/servo/pull/40842	(@Taym95, #40842)	Implement brotli support for CompressionStream and DecompressionStream (#40842)
+    dom; new CompressionStream("brotli") and new DecompressionStream("brotli")
+    # Implement brotli support for CompressionStream and DecompressionStream
+    # Testing: brotli test should pass
+    # Fixes: #40831
+-https://github.com/servo/servo/pull/40871	(@dependabot[bot], @dependabot[bot], #40871)	build(deps): bump zerocopy from 0.8.28 to 0.8.30 (#40871)
+    # Bumps [zerocopy](https://github.com/google/zerocopy) from 0.8.28 to 0.8.30.
+    # Release notes
+    # Sourced from zerocopy's releases.
+    # v0.8.30
+    # UPGRADING NOTE: #2804, we invert the order of --cfgs passed by our build.rs script. This will be transparent to
+    # cargo users, but if you vendor zerocopy and build it by invoking rustc directly, you will need to update your
+    # --cfgs. Assuming you're on a relatively recent toolchain, you should simply stop passing any --cfgs when building
+    # zerocopy. For more details, see #2259.
+    # What's Changed
+    # Update AGENTS.md with pre-submission check instruction by @​google-labs-jules[bot] in google/zerocopy#2792
+    # docs: Add safety instructions to AGENTS.md by @​google-labs-jules[bot] in google/zerocopy#2794
+    # Fix Miri symbolic alignment check failures by @​google-labs-jules[bot] in google/zerocopy#2798
+    # docs: Update AGENTS.md to mandate 'yes | ./cargo.sh' by @​google-labs-jules[bot] in google/zerocopy#2799
+    # Add missing copyright headers and audit instructions by @​google-labs-jules[bot] in google/zerocopy#2795
+    # [ci] Add MSRV minimality check by @​joshlf in google/zerocopy#2812
+    # Suppress deprecation warnings in generated code by @​google-labs-jules[bot] in google/zerocopy#2797
+    # Fix safety comment citations by @​google-labs-jules[bot] in google/zerocopy#2800
+    # Invert build.rs version detection flags and update CI by @​joshlf in google/zerocopy#2804
+    # [ci] Integrate action-validator into CI and pre-push hooks by @​joshlf in google/zerocopy#2811
+    # Full Changelog: https://github.com/google/zerocopy/compare/v0.8.29...v0.8.30
+    # v0.8.29
+    # What's Changed
+    # [ci] Fix bug where PR labels are not added by @​joshlf in google/zerocopy#2782
+    # Add configuration files for coding agents by @​google-labs-jules[bot] in google/zerocopy#2784
+    # Deny clippy::multiple_unsafe_ops_per_block by @​google-labs-jules[bot] in google/zerocopy#2781
+    # Support x86 AVX-12 SIMD types on 1.89.0 stable by @​joshlf in google/zerocopy#2574
+    # [byteorder] Note that network-endian is a synonym for big-endian by @​joshlf in google/zerocopy#2785
+    # Add doc(cfg) to read_from_io and write_to_io by @​google-labs-jules[bot] in google/zerocopy#2786
+    # zerocopy-derive: Fix panic with raw identifiers by @​google-labs-jules[bot] in google/zerocopy#2788
+    # Full Changelog: https://github.com/google/zerocopy/compare/v0.8.28...v0.8.29
+    # Commits
+    # aa09c4f Release 0.8.30 (#2816)
+    # 31a2dfa [ci] Integrate action-validator into CI and pre-push hooks (#2811)
+    # 738e3f2 Invert build.rs version detection flags and update CI (#2804)
+    # 16d065d Fix safety comment citations (#2800)
+    # 9483f7d Suppress deprecation warnings in generated code (#2797)
+    # c2e43ce [ci] Add MSRV minimality check (#2812)
+    # 360bb2b [ci] Roll pinned nightly toolchain (#2814)
+    # f65c938 Add missing copyright headers and audit instructions (#2795)
+    # cd0dcd0 docs: Update AGENTS.md to mandate 'yes | ./cargo.sh' (#2799)
+    # ddcf94c Fix Miri symbolic alignment check failures (#2798)
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zerocopy&package-manager=cargo
+    # &previous-version=0.8.28&new-version=0.8.30)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-
+    # dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40870	(@dependabot[bot], @dependabot[bot], #40870)	build(deps): bump http from 1.3.1 to 1.4.0 (#40870)
+    # Bumps [http](https://github.com/hyperium/http) from 1.3.1 to 1.4.0.
+    # Release notes
+    # Sourced from http's releases.
+    # v1.4.0
+    # Highlights
+    # Add StatusCode::EARLY_HINTS constant for 103 Early Hints.
+    # Make StatusCode::from_u16 now a const fn.
+    # Make Authority::from_static now a const fn.
+    # Make PathAndQuery::from_static now a const fn.
+    # MSRV increased to 1.57 (allows legible const fn panic messages).
+    # What's Changed
+    # Updated Rand dependency to v0.9.1 by @​FarzadMohtasham in hyperium/http#763
+    # Fix compilation on latest nightly by @​akonradi-signal in hyperium/http#769
+    # Avoid unnecessary .expect()s for empty HeaderMap by @​akonradi-signal in hyperium/http#768
+    # feat: show types in Extensions debug output by @​crepererum in hyperium/http#773
+    # Docs: Clarify the HeaderMap documentaion by @​Sol-Ell in hyperium/http#774
+    # style: update format for tests by @​seanmonstar in hyperium/http#782
+    # Make StatusCode::from_u16 const by @​coolreader18 in hyperium/http#761
+    # docs: Fix typo 'an' to 'and' in http::status module documentation by @​zxzxovo in hyperium/http#784
+    # fix: Prevent panic in try_reserve/try_with_capacity on capacity overflow by @​AriajSarkar in hyperium/http#787
+    # fix: Add reserve() to Extend impl for (Option, T)) by @​AriajSarkar in hyperium/http#788
+    # chore: minor improvement for docs by @​claudecodering in hyperium/http#790
+    # chore: bump MSRV to 1.57 by @​seanmonstar in hyperium/http#793
+    # Add EARLY_HINTS status code by @​mdevino in hyperium/http#758
+    # refactor(header): use better panic message in const HeaderName and HeaderValue by @​seanmonstar in hyperium/http#797
+    # docs: remove unnecessary extern crate sentence by @​tottoto in hyperium/http#799
+    # chore(ci): update to actions/checkout@v5 by @​tottoto in hyperium/http#800
+    # feat(uri): make Authority/PathAndQuery::from_static const by @​WaterWhisperer in hyperium/http#786
+    # refactor(header): inline FNV hasher to reduce dependencies by @​seanmonstar in hyperium/http#796
+    # v1.4.0 by @​seanmonstar in hyperium/http#803
+    # New Contributors
+    # @​FarzadMohtasham made their first contribution in hyperium/http#763
+    # @​akonradi-signal made their first contribution in hyperium/http#769
+    # @​crepererum made their first contribution in hyperium/http#773
+    # @​Sol-Ell made their first contribution in hyperium/http#774
+    # @​coolreader18 made their first contribution in hyperium/http#761
+    # @​zxzxovo made their first contribution in hyperium/http#784
+    # @​AriajSarkar made their first contribution in hyperium/http#787
+    # @​claudecodering made their first contribution in hyperium/http#790
+    # @​mdevino made their first contribution in hyperium/http#758
+    # @​WaterWhisperer made their first contribution in hyperium/http#786
+    # Full Changelog: https://github.com/hyperium/http/compare/v1.3.1...v1.4.0
+    # Changelog
+    # Sourced from http's changelog.
+    # 1.4.0 (November 24, 2025)
+    # Add StatusCode::EARLY_HINTS constant for 103 Early Hints.
+    # Make StatusCode::from_u16 now a const fn.
+    # Make Authority::from_static now a const fn.
+    # Make PathAndQuery::from_static now a const fn.
+    # MSRV increased to 1.57 (allows legible const fn panic messages).
+    # Commits
+    # b9625d8 v1.4.0
+    # 50b009c refactor(header): inline FNV hasher to reduce dependencies (#796)
+    # b370d36 feat(uri): make Authority/PathAndQuery::from_static const (#786)
+    # 0d74251 chore(ci): update to actions/checkout@v5 (#800)
+    # a760767 docs: remove unnecessary extern crate sentence (#799)
+    # fb1d457 refactor(header): use better panic message in const HeaderName and HeaderValu...
+    # 20dbd6e feat(status): Add 103 EARLY_HINTS status code (#758)
+    # e7a7337 chore: bump MSRV to 1.57
+    # 1888e28 tests: downgrade rand back to 0.8 for now
+    # 918bbc3 chore: minor improvement for docs (#790)
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=http&package-manager=cargo&pre
+    # vious-version=1.3.1&new-version=1.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depend
+    # abot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40869	(@dependabot[bot], @dependabot[bot], #40869)	build(deps): bump signal-hook-registry from 1.4.6 to 1.4.7 (#40869)
+    # Bumps [signal-hook-registry](https://github.com/vorner/signal-hook) from 1.4.6 to 1.4.7.
+    # Changelog
+    # Sourced from signal-hook-registry's changelog.
+    # signal-hook-registry-1.4.7
+    # Using earlier monopolization to reduce binary size (#190).
+    # signal-hook-mio-0.2.5
+    # Allow mio 1.1
+    # Commits
+    # 58ab668 Release registry 1.4.7
+    # ee9a032 Merge pull request #189 from hanna-kruppe/small-cleanups
+    # f45fc81 Merge pull request #190 from hanna-kruppe/type-erase-closure-asap
+    # c26ed87 type-erase actions ASAP to reduce monomorphization
+    # 27c07a5 fix new function_casts_as_integer warning
+    # e578cc1 avoid int-to-fn transmute
+    # b7f941f fix typo in QNX related comment
+    # 164b2a3 move comment about android to the right place
+    # ac4c81c Release version signal-hook-mio-0.2.5
+    # 4ff0879 Merge pull request #188 from dbanty/master
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=signal-hook-registry&package-m
+    # anager=cargo&previous-version=1.4.6&new-version=1.4.7)](https://docs.github.com/en/github/managing-security-vulnerabilit
+    # ies/about-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40866	(@Loirooriol, #40866)	script: Don't use named fields for `StylesheetContextSource::Import` (#40866)
+    # After #40639, this variant holds a single value, and I don't think think using named fields was providing much
+    # extra clarity.
+    # Testing: not needed, no behavior change
+-https://github.com/servo/servo/pull/40865	(@d-kraus, #40865)	Replace some #[allow] with #[expect] (#40865)
+    # Replaces some #[allow] with #[expect]. In case where the lint expectation was unfulfilled, I removed it.
+    # Testing: Refactor
+    # Part of: https://github.com/servo/servo/issues/40383
++https://github.com/servo/servo/pull/40861	(@simonwuelker, #40861)	Add `layout_variable_fonts_enabled` to experimental preferences  (#40861)
+    layout; variable fonts
+    # Part of #38800
+https://github.com/servo/servo/pull/40856	(@WaterWhisperer, #40856)	script: Align Streams implementation with spec step calls (#40856)
+    # updates several methods in `ReadableStream` to use `.expect()` instead of `?` where the spec indicates an infallible
+    # operation (denoted by `!`).
+    # Testing: `mach test-wpt /streams/`
+    # Fixes: part of #36906
+https://github.com/servo/servo/pull/40793	(@tharkum, #40793)	html: Update MediaSession `setPositionState` method (#40793)
+    # The MediaSession `setPositionState` method should only update the position state and propagate it to the platform
+    # media session UI controller and shouldn't change somehow the properties of the media element directly (duration,
+    # playback rate or position).
+    # See https://w3c.github.io/mediasession/#dom-mediasession-setpositionstate
+    # Testing: Improvements in the following tests
+    # - /mediasession/positionstate.html
+    # The media session UI functionality is implemented for Android and didn't test due lack of testing sample.
+https://github.com/servo/servo/pull/40599	(@Narfinger, #40599)	profile: Added Pss measure to memory report. (#40599)
+    # Added pss memory report to the memory reporting.
+    # Signed-off-by: Narfinger
+    # Testing: Looked locally at the pss and it works.
+    # Fixes: https://github.com/servo/servo/issues/40424
+https://github.com/servo/servo/pull/40862	(@Narfinger, #40862)	OHOS: Set the correct input type for url field (#40862)
+    # This makes it mostly that the correct keyboard will be selected and we don't start with an uppercase letter.
+    # Testing: Compiled on OHOS and looked on the phone.
+https://github.com/servo/servo/pull/40413	(@lukewarlow, #40413)	Add CommandEvent (#40413)
+    # Add CommandEvent
+    # This is behind the new dom_command_invokers_enabled pref.
+    # Testing: Existing WPTs
+https://github.com/servo/servo/pull/40843	(@dyegoaurelio, #40843)	script: Move CSP DOM interfaces to `script/dom/security` (#40843)
+    # *Describe the changes that this pull request makes here. This will be the commit message.*
+    # Move CSP DOM interfaces to `script/dom/security`
+    # Testing: Just a refactor, it doesn't require tests
+    # Fixes: part of #38901
+-https://github.com/servo/servo/pull/40841	(@jschwe, #40841)	ohos CI: Try and improve the scenario test stability (#40841)
+    # - Factor out some common code
+    # - Create and use `hdc_py` library, used for enabling (and disabling) performance mode and screen timeout.
+    # - Add screenshots on test failure
+    # The performance mode / screen timeout should hopefully help with the timeouts, or at least the screenshots might
+    # help show what's going wrong.
+    # Testing: This is a CI modification for ohos. [mach
+    # try](https://github.com/servo/servo/actions/runs/19614805970/job/56165963814)
+>>> 2025-11-26T06:18:52Z
++https://github.com/servo/servo/pull/40886	(@mrobinson, #40886)	libservo: Remove `ServoDelegate::notify_animating_changed` (#40886)
+    api; removed in favour of RefreshDriver
+    # This is dead code #40799, as it is never called. Remove the delegate
+    # call and the entire `ServoShellServoDelegate` as the only thing that it
+    # was doing was printing top-level errors which only happen when something
+    # goes very wrong. It's quite likely that backtraces printed earlier
+    # will be more useful.
+    # Testing: This just removes dead code, so should be covered by existing tests.
+https://github.com/servo/servo/pull/40881	(@tharkum, #40881)	html: Fix handling of the media playback `EnoughData` event (#40881)
+    # The media engine signals with the `PlayerEvent::EnoughData` event that the media source has enough data and the
+    # application should stop pushing more data to avoid excessive buffer queueing and wait `PlayerEvent::NeedData`
+    # event to continue.
+    # Note that the source buffer size - MAX_SRC_QUEUE_SIZE (50MB).
+    # This event is reflecting the state of the media source so the application shouldn't change the media element ready
+    # state somehow.
+    # Testing: No expected testing results changes
+    # Fixes (partially): https://github.com/servo/servo/issues/40740
+https://github.com/servo/servo/pull/40860	(@dyegoaurelio, #40860)	nix: Add FHS wrappers for venv binaries (ruff, pyrefly) on NixOS (#40860)
+    # On NixOS, dynamically linked binaries from the Python venv (installed via uv/pip) cannot run directly because they
+    # expect standard Linux library paths that don't exist on NixOS.
+    # This commit adds FHS wrappers that allow these binaries to run in an FHS-compatible environment at runtime,
+    # without patching them.
+    # I considered using the nixpkgs versions of ruff and pyrefly directly, or overriding their derivations to match
+    # the versions in requirements.txt. However, decided against it because:
+    # - Version mismatches between nixpkgs and requirements.txt caused type checking incompatibilities (pyrefly 0.34.0
+    # vs 0.23.1)
+    # - Building these tools from source in nix is slow and adds significant time to nix-shell initialization (both are
+    # rust packages that take quite some time to build)
+    # Testing: just improvements to the NixOS development environment, no test needed
+    # **Before:**
+    # ```
+    # ➜ servo (main) ✔ nix-shell
+    # ➜ servo (main) ✔ ./mach fmt
+    # Could not start dynamically linked executable: /home/dyego/coding/random/servo/.venv/bin/ruff
+    # NixOS cannot run dynamically linked executables intended for generic
+    # linux environments out of the box. For more information, see:
+    # https://nix.dev/permalink/stub-ld
+    # ➜ servo (main) ✔ ./mach test-tidy
+    #  ➤  Checking config file (./servo-tidy.toml)...
+    #  ➤  Checking directories for correct file extensions...
+    # Could not start dynamically linked executable: ruff
+    # NixOS cannot run dynamically linked executables intended for generic
+    # linux environments out of the box. For more information, see:
+    # https://nix.dev/permalink/stub-ld
+    # Error running mach:
+    #     ['test-tidy']
+    # The error occurred in code that was called by the mach command. This is either
+    # a bug in the called code itself or in the way that mach is calling it.
+    # You can invoke |./mach busted| to check if this issue is already on file. If it
+    # isn't, please use |./mach busted file| to report it. If |./mach busted| is
+    # misbehaving, you can also inspect the dependencies of bug 1543241.
+    # If filing a bug, please include the full output of mach, including this error
+    # message.
+    # The details of the failure are as follows:
+    # json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)
+    #   File "/home/dyego/coding/random/servo/python/servo/testing_commands.py", line 322, in test_tidy
+    #     tidy_failed = tidy.scan(not all_files, not no_progress, github_annotations)
+    #                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    #   File "/home/dyego/coding/random/servo/python/tidy/tidy.py", line 919, in scan
+    #     for error in errors:
+    #   File "/home/dyego/coding/random/servo/python/tidy/tidy.py", line 401, in check_ruff_lints
+    #     for error in json.loads(e.output):
+    #                  ^^^^^^^^^^^^^^^^^^^^
+    #   File "/nix/store/2g9b898aq9kmizmhmhbdip5mixrc5wrk-python3-3.11.14/lib/python3.11/json/__init__.py", line 346,
+    #   in loads
+    #     return _default_decoder.decode(s)
+    #            ^^^^^^^^^^^^^^^^^^^^^^^^^^
+    #   File "/nix/store/2g9b898aq9kmizmhmhbdip5mixrc5wrk-python3-3.11.14/lib/python3.11/json/decoder.py", line 337,
+    #   in decode
+    #     obj, end = self.raw_decode(s, idx=_w(s, 0).end())
+    #                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+    #   File "/nix/store/2g9b898aq9kmizmhmhbdip5mixrc5wrk-python3-3.11.14/lib/python3.11/json/decoder.py", line 355,
+    #   in raw_decode
+    #     raise JSONDecodeError("Expecting value", s, err.value) from None
+    # ➜ servo (main) ✔
+    # ```
+    # (note that the `JSONDecodeError` is because we're trying to parse the "NixOS cannot run dynamically linked
+    # executables intended..." string as JSON)
+    # **Now:**
+    # ```
+    # ➜ servo (fix-nix-mach) ✔ nix-shell
+    # ➜ servo (fix-nix-mach) ✔ ./mach fmt
+    # ➜ servo (fix-nix-mach) ✔ ./mach test-tidy
+    #  ➤  Checking config file (./servo-tidy.toml)...
+    #  ➤  Checking directories for correct file extensions...
+    #  ➤  Checking type annotations in python files ...
+    #  ➤  Skipping WPT lint checks, because no relevant files changed.
+    #  ➤  Running `cargo-deny` checks...
+    #  ➤  Checking formatting of Rust files...
+    #  ➤  Checking formatting of python files...
+    #  ➤  Checking formatting of toml files...
+    #  ✅ test-tidy reported no errors.
+    # ➜ servo (fix-nix-mach) ✔
+    # ```
+https://github.com/servo/servo/pull/40876	(@delan, #40876)	ci: Remove self-hosted runner timeout jobs (#40876)
+    # the runner timeout jobs are a helpful safeguard against bugs (or github infra failures) that cause jobs to not
+    # get picked up by self-hosted runners, but all they do is wait two minutes and cancel the run, clogging up our
+    # github-hosted runner capacity (limited to 60).
+    # this patch removes the timeout jobs, based on the expectation that our CI system is reliable enough to not need
+    # that automated safeguard.
+    # if you have a build that gets stuck on “Waiting for a runner to pick up this job...”, it may be a bug or a
+    # github infra failure. you can cancel the build yourself, but please take a screenshot and report it first!
+    # Testing:
+    # - [mach try windows linux lint](https://github.com/servo/servo/actions/runs/19659755273)
+https://github.com/servo/servo/pull/40877	(@yezhizhen, #40877)	compositor: Update doc of `ExternalScrollId` in `ScrollResult` (#40877)
+    # The original attempt is to remove it. But we can't do this. Add doc to explain why.
+    # Testing: This should change nothing.
+    # Fixes: Preparing for #40663.
++https://github.com/servo/servo/pull/40867	(@simonwuelker, #40867)	fonts: Apply variations for `font-weight`, `font-stretch` (#40867)
+    layout; variable fonts
+    # `font-style` is not included yet because it requires us to have information about the selected font, which is not
+    # possible yet.
+    # Testing: New tests start to pass
+    # Fixes #37236
+    # Part of #38800
+https://github.com/servo/servo/pull/40875	(@tharkum, #40875)	html: Use WeakRef for the `MediaSession` media element (#40875)
+    # The media session is allowed to control the state of the media element (play, pause) and is holding DOM reference,
+    # so the latest registered media element is not be able to be GCed, so let's use the weak reference to break this
+    # dependency.
+    # Note that `weakReference` property was added to interfaces
+    # - HTMLMediaElement: The `Mutable/WeakRef` requires T to be bound by `WeakReferenceable`
+    # - HTMLAudio/VideoElement: The `DOM_WEAK_SLOT` must be reserved by concrete DOM JS class
+    # Testing: No expected testing results changes
+    # The media session UI functionality is implemented for Android and didn't test due lack of testing sample.
+    # Fixes: https://github.com/servo/servo/issues/40854
+-https://github.com/servo/servo/pull/40873  (@yerke, #40873)    script: add CanGc as argument to methods in HTMLOptionElement (#40873)
+    # script: add CanGc as argument to methods in HTMLOptionElement
+    # Testing: These changes do not require tests because they are a refactor.
+    # Addresses part of https://github.com/servo/servo/issues/34573
+-https://github.com/servo/servo/pull/40874	(@yezhizhen, #40874)	Fix compilation warning for `background_hang_monitor` (#40874)
+    # Fix warnings exposed by 0a0a20a9c6b7983ed96fb86715ada5b9f6d61f2e
+-https://github.com/servo/servo/pull/40872	(@yezhizhen, #40872)	Remove unnecessary clones in various places (#40872)
+    # Testing: This should not change anything. Still, things have to build.
+>>> 2025-11-27T06:15:41Z
+-https://github.com/servo/servo/pull/40910	(@dependabot[bot], @dependabot[bot], #40910)	build(deps): bump tracing-attributes from 0.1.30 to 0.1.31 (#40910)
+    # Bumps [tracing-attributes](https://github.com/tokio-rs/tracing) from 0.1.30 to 0.1.31.
+    # Release notes
+    # Sourced from tracing-attributes's releases.
+    # tracing-attributes 0.1.31
+    # Added
+    # Support constant expressions as instrument field names (#3158)
+    # #3158: tokio-rs/tracing#3158
+    # Commits
+    # 5508623 chore: prepare tracing-attributes 0.1.31 (#3417)
+    # d92b4c0 chore: prepare tracing-core 0.1.35 (#3414)
+    # 9751b6e chore: run tracing-subscriber tests with all features (#3412)
+    # efa0169 mock: add doctests for on_register_dispatch negative cases (#3416)
+    # a093858 docs: fix link in FmtSpan docs (#3411)
+    # 976fa55 mock: add test case for layer not calling on_register_dispatch (#3415)
+    # 8bc008c fix(subscriber): make Layered propagate on_register_dispatch (#3379)
+    # adbd8a4 appender: fix max_files integer underflow when set to zero (#3348)
+    # 2a8b040 chore: add Hayden (@​hds) to codeowners (#3410)
+    # cf5c2bd subscriber: remove clone_span on enter (#3289)
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tracing-attributes&package-man
+    # ager=cargo&previous-version=0.1.30&new-version=0.1.31)](https://docs.github.com/en/github/managing-security-vulnerabilit
+    # ies/about-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40909	(@dependabot[bot], @dependabot[bot], #40909)	build(deps): bump winnow from 0.7.13 to 0.7.14 (#40909)
+    # Bumps [winnow](https://github.com/winnow-rs/winnow) from 0.7.13 to 0.7.14.
+    # Changelog
+    # Sourced from winnow's changelog.
+    # [0.7.14] - 2025-11-26
+    # Features
+    # Add combinator::expression parser for parsing expressions with precedence (a pratt parser)
+    # Commits
+    # faa6214 chore: Release
+    # 5b3b7a9 docs: Update changelog
+    # fca75c5 Merge pull request #804 from ssmendon/ssmendon-pratt-pr
+    # 9aef8d2 feat: Add a Pratt parser
+    # 716ff2e Merge pull request #846 from clint-white/fix-typos-in-docs
+    # 3040b97 docs(tutorial): Add missing word
+    # 1b50ab4 docs(ref): Fix typo: add missing period
+    # c56d4fb Merge pull request #841 from winnow-rs/renovate/actions-checkout-5.x
+    # ffb90ad chore(deps): Update actions/checkout action to v5
+    # de4f84b Merge pull request #842 from winnow-rs/renovate/actions-setup-python-6.x
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=winnow&package-manager=cargo&p
+    # revious-version=0.7.13&new-version=0.7.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-de
+    # pendabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
++https://github.com/servo/servo/pull/40913	(@simonwuelker, #40913)	fonts: Don't panic when font information contains invalid UTF-8 (#40913)
+    crash; fix panic with unusual fonts
+    # `freetype` gives us `*const c_char` which is not necessarily UTF-8. In some cases we can simply ignore such fonts
+    # instead of panicking. (We can also save on allocation when comparing font formats)
+    # Testing: Covered by existing tests
+    # Part of https://github.com/servo/servo/issues/40744
+-https://github.com/servo/servo/pull/40914	(@dependabot[bot], @dependabot[bot], #40914)	build(deps): bump tracing-core from 0.1.34 to 0.1.35 (#40914)
+    # Bumps [tracing-core](https://github.com/tokio-rs/tracing) from 0.1.34 to 0.1.35.
+    # Release notes
+    # Sourced from tracing-core's releases.
+    # tracing-core 0.1.35
+    # Added
+    # Switch to unconditional no_std (#3323)
+    # Improve code generation at trace points significantly (#3398)
+    # Fixed
+    # Add missing dyn keyword in Visit documentation code sample (#3387)
+    # Documented
+    # Add favicon for extra pretty docs (#3351)
+    # #3323: tokio-rs/tracing#3323
+    # #3351: tokio-rs/tracing#3351
+    # #3387: tokio-rs/tracing#3387
+    # #3398: tokio-rs/tracing#3398
+    # Commits
+    # d92b4c0 chore: prepare tracing-core 0.1.35 (#3414)
+    # 9751b6e chore: run tracing-subscriber tests with all features (#3412)
+    # efa0169 mock: add doctests for on_register_dispatch negative cases (#3416)
+    # a093858 docs: fix link in FmtSpan docs (#3411)
+    # 976fa55 mock: add test case for layer not calling on_register_dispatch (#3415)
+    # 8bc008c fix(subscriber): make Layered propagate on_register_dispatch (#3379)
+    # adbd8a4 appender: fix max_files integer underflow when set to zero (#3348)
+    # 2a8b040 chore: add Hayden (@​hds) to codeowners (#3410)
+    # cf5c2bd subscriber: remove clone_span on enter (#3289)
+    # c287c84 subscriber: change registry exit to decrement local span ref only (#3331)
+    # Additional commits viewable in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tracing-core&package-manager=c
+    # argo&previous-version=0.1.34&new-version=0.1.35)](https://docs.github.com/en/github/managing-security-vulnerabilities/ab
+    # out-dependabot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+-https://github.com/servo/servo/pull/40912	(@dependabot[bot], @dependabot[bot], #40912)	build(deps): bump endi from 1.1.0 to 1.1.1 (#40912)
+    # Bumps [endi](https://github.com/zeenix/endi) from 1.1.0 to 1.1.1.
+    # Release notes
+    # Sourced from endi's releases.
+    # 🔖 Release 1.1.1
+    # 🚑️ Declare the crate no_std when std feature is disabled.
+    # Commits
+    # 2262245 Merge pull request #4 from zeenix/rel-1.1.1
+    # efbae5e 🔖 Release 1.1.1
+    # 99f6bd9 👷 CI: Run cargo with --locked
+    # 7b2182f 💚 Add Cargo.lock to git
+    # b20ba57 Merge pull request #3 from zeenix/fix-nostd
+    # 165e8f3 🚑️ Declare the crate no_std when std feature is disabled
+    # d5722df Merge pull request #2 from zeenix/manual-workflow
+    # 23af661 👷 Allow Rust workflow to be manually triggered
+    # See full diff in compare view
+    # [![Dependabot compatibility
+    # score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=endi&package-manager=cargo&pre
+    # vious-version=1.1.0&new-version=1.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-depend
+    # abot-security-updates#about-compatibility-scores)
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
++https://github.com/servo/servo/pull/40884	(@simonwuelker, #40884)	Don't override `opsz` from `font-variation-settings` when `font-optical-sizing` is `auto` (#40884)
+    layout; part of font-optical-sizing
+    # `font-optical-sizing:auto` is UA-defined, and other browsers only set `opsz` when other variation sources don't
+    # already set it.
+    # Gecko code for reference: https://searchfox.org/firefox-main/source/gfx/src/nsFont.cpp#277.
+    # Testing: New tests start to pass
+-https://github.com/servo/servo/pull/40907	(@janvarga, #40907)	Fix inconsistent strum dependencies and imports (#40907)
+    # The `scripts_traits` crate was the only crate depending on `strum` with the
+    # `derive` feature. This accidentally allowed other crates to import strum
+    # macros via `strum::` without declaring their own dependency on `strum_macros`,
+    # causing compilation issues when running `./mach test-unit -p net`.
+    # This PR makes the imports consistent across the code base by:
+    # - replacing all `strum_macro::` imports with `strum::` imports
+    # - removing strum_macro dependencies
+    # - adding derive feature to the strum workspace
+    # Testing: Unit tests continue to pass
+-https://github.com/servo/servo/pull/40903	(@jschwe, #40903)	build(deps): Bump mozangle to 0.5.4 (#40903)
+    # This allows removing a duplicate bindgen version.
+    # Testing: Regular dependency bump testing
+-https://github.com/servo/servo/pull/40878  (@mrobinson, #40878)    bhm: Fix a build warning about unexpectedly used `dead_code` (#40878)
+https://github.com/servo/servo/pull/40899	(@jschwe, #40899)	CI: Add retries for unit-tests with code-coverage (#40899)
+    # Some unit-tests are flaky, so we rerun them normally. We didn't do this until now when measuring coverage, which
+    # has been a source of failures for the coverage job.
+    # Additionally, we can also remove the install lld step, since we are now using a newer version of Rust, where we
+    # can just use lld out of the box.
+    # Testing: [mach try linux-coverage](https://github.com/servo/servo/actions/runs/19704473261)
+-https://github.com/servo/servo/pull/40887	(@Narfinger, #40887)	OHOS CI: Update to a new version of hitrace-bench (#40887)
+    # New versions of the OS changed the hitrace tracing format. This PR updates the hitrace-bench version that supports
+    # both log formats.
+    # We also update the check if servo crashed as the bundle name is not anymore included in the traces.
+    # Testing: Tested on CI here: https://github.com/Narfinger/servo/actions/runs/19677035300
+https://github.com/servo/servo/pull/40890	(@Taym95, #40890)	Fixes ByteLengthQueuingStrategy.size WPTs that were previously marked as TIMEOUT/CRASH (#40890)
+    # I got trigged by this:
+    # Servo is the only one TIMEOUT on this test, but we don't have a `tests/wpt/meta/streams/queuing-strategies.any.js.ini`,
+    # when I run it locally I get one test TIMEOUT and another one CRASH, this should fix it.
+    # Before this fix:
+    # ```
+    # [queuing-strategies.any.worker.html]
+    #   expected: CRASH
+    # [queuing-strategies.any.html]
+    #   expected: TIMEOUT
+    #   [ByteLengthQueuingStrategy: size behaves as expected with strange arguments]
+    #     expected: TIMEOUT
+    # ```
+-https://github.com/servo/servo/pull/40895	(@yezhizhen, #40895)	display_list: Fix doc for `ScrollType` (#40895)
+    # In #37412 we renamed `ScrollSensitivity` to `ScrollType`. This PR updates the doc.
+>>> 2025-11-28T06:11:01Z
+https://github.com/servo/servo/pull/40857	(@kkoyung, #40857)	script: Add new KeyFormat and KeyUsage for modern algorithms (#40857)
+    # The specification of Modern Algorithms in the Web Cryptography API (https://wicg.github.io/webcrypto-modern-algos/)
+    # adds new key formats and key usages to support modern cryptographic algorithms.
+    # This patch adds those new key formats and key usages, preparing for the implementation of the new algorithms.
+    # Testing: No behavioral changes in existing cryptographic algorithms. Existing tests suffice.
+    # Fixes: Part of #40687
++https://github.com/servo/servo/pull/40447	(@stevennovaryo, #40447)	dom: Focus scroll to the element only if it is not visible (#40447)
+    dom; focus no longer scrolls if element is visible
+    # Currently when we call a `Focus` we always scroll a focusable element to the center of
+    # the container. However, this would causes a different behavior where UAs wouldn't scroll
+    # when a focus is called to a visible element. This PR add implementations following the behavior of Firefox
+    # [nsFocusManager::ScrollIntoView](https://github.com/mozilla-firefox/firefox/blob/e613f4df351a21871cfeadf7d5b4043ffad157b
+    # 1/dom/base/nsFocusManager.cpp#L3121),
+    # where we are scrolling to the element if it is not visible.
+    # This would enhance the user experience of focusing an input element, where we should avoid moving the element if
+    # it is visible.
+    # Incidentally fix a calculation bug for the calculation of `ScrollIntoView` with `nearest` block or inline option.
+    # Testing: Private WPT for the implementation defined behavior and public WPT for the bug.
+-https://github.com/servo/servo/pull/40930	(@dependabot[bot], @dependabot[bot], #40930)	build(deps): bump the servo-media-related group with 12 updates (#40930)
+    # Bumps the servo-media-related group with 12 updates:
+    # | Package | From | To |
+    # | --- | --- | --- |
+    # | [servo-media](https://github.com/servo/media) | ``6c1766f`` | ``2c036f2`` |
+    # | [servo-media-dummy](https://github.com/servo/media) | ``6c1766f`` | ``2c036f2`` |
+    # | [servo-media-gstreamer](https://github.com/servo/media) | ``6c1766f`` | ``2c036f2`` |
+    # | servo-media-audio | ``6c1766f`` | ``2c036f2`` |
+    # | servo-media-derive | ``6c1766f`` | ``2c036f2`` |
+    # | servo-media-gstreamer-render | ``6c1766f`` | ``2c036f2`` |
+    # | servo-media-gstreamer-render-android | ``6c1766f`` | ``2c036f2`` |
+    # | servo-media-gstreamer-render-unix | ``6c1766f`` | ``2c036f2`` |
+    # | servo-media-player | ``6c1766f`` | ``2c036f2`` |
+    # | servo-media-streams | ``6c1766f`` | ``2c036f2`` |
+    # | servo-media-traits | ``6c1766f`` | ``2c036f2`` |
+    # | servo-media-webrtc | ``6c1766f`` | ``2c036f2`` |
+    # Updates `servo-media` from `6c1766f` to `2c036f2`
+    # Commits
+    # 2c036f2 Revert &quot;chore: switch to parking_lot Mutex (#471)&quot; (#474)
+    # a3e6fcf chore: switch to parking_lot Mutex (#471)
+    # See full diff in compare view
+    # Updates `servo-media-dummy` from `6c1766f` to `2c036f2`
+    # Commits
+    # 2c036f2 Revert &quot;chore: switch to parking_lot Mutex (#471)&quot; (#474)
+    # a3e6fcf chore: switch to parking_lot Mutex (#471)
+    # See full diff in compare view
+    # Updates `servo-media-gstreamer` from `6c1766f` to `2c036f2`
+    # Commits
+    # 2c036f2 Revert &quot;chore: switch to parking_lot Mutex (#471)&quot; (#474)
+    # a3e6fcf chore: switch to parking_lot Mutex (#471)
+    # See full diff in compare view
+    # Updates `servo-media-audio` from `6c1766f` to `2c036f2`
+    # Updates `servo-media-derive` from `6c1766f` to `2c036f2`
+    # Updates `servo-media-gstreamer-render` from `6c1766f` to `2c036f2`
+    # Updates `servo-media-gstreamer-render-android` from `6c1766f` to `2c036f2`
+    # Updates `servo-media-gstreamer-render-unix` from `6c1766f` to `2c036f2`
+    # Updates `servo-media-player` from `6c1766f` to `2c036f2`
+    # Updates `servo-media-streams` from `6c1766f` to `2c036f2`
+    # Updates `servo-media-traits` from `6c1766f` to `2c036f2`
+    # Updates `servo-media-webrtc` from `6c1766f` to `2c036f2`
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger
+    # a rebase manually by commenting `@dependabot rebase`.
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+https://github.com/servo/servo/pull/40898	(@tharkum, #40898)	html: Update the media player state without delays (#40898)
+    # Currently the sequence order of the DOM method calls and the media player API calls is mismatched because some
+    # media player operations (*) posted to media task with delayed processing (while should be processed immediately).
+    # - DOM (script): pause -> seek -> play
+    # - Media: seek -> pause* -> play*
+    # Also the associated queued media events can be fired and processed by script somehow (e.g. by calling `seek`
+    # in event listener handler) even before the calling of the media player `play/pause` API.
+    # To handle it the application will try to update media state (by calling media player API) on each DOM `play, pause`
+    # method calls and on some `ready state` changes with checking if the media element can be potencially playing.
+    # See https://html.spec.whatwg.org/multipage/#potentially-playing
+    # Testing: No expected testing results changes because there are unexpected `seek completion` signals from the media
+    # engine with invalid time positions which are affecting passing test score (by masking false positive results).
+    # https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/4762
+https://github.com/servo/servo/pull/40919	(@jdm, #40919)	script_bindings: Disallow manual Drop implementations for DOM interfaces. (#40919)
+    # This implements the solution from #26488 that prevents implementing Drop manually for DOM interfaces, which is
+    # very easy to write in a way that can cause memory safety errors during JS runtime teardown. Since we have a bunch
+    # of pre-existing implementations that we are working on removing, this PR adds an opt-out mechanism that those
+    # interfaces use.
+    # Testing: Compile-time code generation; not possible to test.
+    # Fixes: part of #26488
+https://github.com/servo/servo/pull/40922	(@Loirooriol, #40922)	script: Stop assuming that previous dirty root is still connected (#40922)
+    # We were trying to update the dirty root to be the common ancestor of the old dirty root and the element noted with
+    # dirty descendants. But that would panic if when the old dirty root had been disconnected.
+    # In that case, just set the dirty root to be the element, as if the old dirty root was None.
+    # Testing: Adding a crashtest, and one existing test now fails instead of crashing
+    # Fixes: #40920
+-https://github.com/servo/servo/pull/40921	(@jschwe, #40921)	servoshell: Remove unnecessary unwrap (#40921)
+    # The unwrap would have never been hit, but
+    # we can remove it so lets do that.
+    # Also fixed some typos in surrounding code.
+    # Testing: No behavior change, covered by existing tests
+https://github.com/servo/servo/pull/40918	(@mrobinson, #40918)	script: Break the `ScriptThread` dependency on the initial `Pipeline` (#40918)
+    # `ScriptThread`s start with an initial `Pipeline`, but that `Pipeline`
+    # should not be used for any `ScriptThread` global data as a
+    # `ScriptThread` can have any number of `Pipeline`s that come and go.
+    # There's no architectural reason why a `ScriptThread` should be
+    # associated with only a single `WebView`.
+    # This change makes it so that the `ScriptThread` no longer uses the
+    # `PipelineId` and the `WebViewId` of the initial `Pipeline` to initialize
+    # itself. Instead a `ScriptEventLoopId` is used to uniquely identify every
+    # `ScriptThread` in both the `ScriptThread` and the `Constellation`.
+    # The remaining use was for crash reporting. Now when a crash happens, it
+    # launches the sad tab in all `WebView`s that depeneded on that
+    # `ScriptThread`.
+    # This is a change which should allow simplifying the way that
+    # `EventLoop`s/`ScriptThread`s are started in the `Constellation`, which
+    # will be handled in a followup.
+    # Testing: This shouldn't change behavior except in the case where a
+    # `ScriptThread` is used in more than a single `WebView`, which should work
+    # properly now. I tested this change manually by running servoshell in
+    # multiprocess mode while causing a panic to happen due to a null pointer
+    # dereference. The sad tab appeared after this change, so things seem to work
+    # properly still. Testing crashes is tricky with the way we test servo now.
++https://github.com/servo/servo/pull/40916	(@Loirooriol, @mrobinson, #40916)	stylo: Add stacking context damage when outline-width becomes non-zero (#40916)
+    layout; incremental layout for ‘outline’ changes
+    # Bumps Stylo to https://github.com/servo/stylo/pull/274
+    # Testing: Adding new test
++https://github.com/servo/servo/pull/40883	(@mrobinson, @mukilan, #40883)	servoshell: Add architectural support for opening multiple windows (#40883)
+    servoshell; towards multiple windows
+    # This change is a major re-architecture of servoshell to support multiple
+    # windows. Unfortunately it was not possible to do this incrementally, but
+    # @mukilan and I did this together so we feel more confident about these
+    # changes.
+    # The main change here is that now the `HashMap` of windows that `App`
+    # has can be filled with more than one `ServoShellWindow`.
+    # `ServoShellWindow` is a wrapper around a `PlatformWindow` which can
+    # either be headed, headless, or for embedded platforms. Embedded
+    # platforms (Android and OHOS) are only expected to have a single window,
+    # but there is no reason that more windows cannot be added.
+    # There is still a little bit more work to be done in order to fully enable
+    # mulitple windows, so this change is just the architectural preparation.
+    # This change enables the embedded and desktop versions of servoshell to
+    # start to be fully integrated so that the entire `RunningAppState` is
+    # shared between them.
+    # Testing: servoshell is the test harness so these changes are covered
+    # by the WPT tests.
+https://github.com/servo/servo/pull/40836	(@yezhizhen, #40836)	webdriver: Enable implicit wait on error (#40836)
+    # ... and reduce code duplication in element retrieval. Note that we are not using the functionality of "wait on
+    # error" yet.
+    # Testing: We added WPT tests for "Find element", "Find element from element", "Find element from shadow root"
+    # for both successful implicit wait and timeout case.
++https://github.com/servo/servo/pull/40911	(@Taym95, #40911)	fix RefCell already borrowed panic in readablestream (#40911)
+    crash; fix panic in ReadableStream
+    # fixes an intermittent RefCell already borrowed panic in the ReadableStream implementation by tightening the borrow
+    # scope of ReadableStream::reader in the error and cancel.
+    # Testing: super hard to make crash test for this.
+    # Fixes: #40894
+https://github.com/servo/servo/pull/40917	(@tharkum, #40917)	html: Add new media tracks when receiving the initial media `metadata` event (#40917)
+    # The new audio/video tracks should be added to the media element from the initial `metadata` event from the media
+    # engine because there are possibility of the multiple `metadata` events without any associated `media track` state
+    # changes and previously the application added new tracks into lists unconditionally.
+    # The registered issue to handle possible dynamic `media track` state changes from the media engine gracefully.
+    # https://github.com/servo/media/issues/473
+    # Testing: Improvements in the following tests
+    # - html/semantics/embedded-content/the-video-element/video_size_preserved_after_ended.html
+    # Fixes: https://github.com/servo/servo/issues/32623
+-https://github.com/servo/servo/pull/40855	(@jschwe, #40855)	Bump mozjs to 140.5-5 (#40855)
+    # Companion PR to https://github.com/servo/mozjs/pull/671
+    # Fixes issues with ohos related patches in spidermonkey, specifically when compiling servo with --debug-mozjs.
+    # Testing: Covered by existing tests
+>>> 2025-11-29T06:19:57Z
+-https://github.com/servo/servo/pull/40934	(@nacho, #40934)	Fix various typos throughout the code base (#40934)
+    # null
++https://github.com/servo/servo/pull/40933	(@mrobinson, #40933)	servoshell: Schedule keyboard shortcut exits so that they can be done cleanly (#40933)
+    crash; fix crashes when exiting servo
+    # This is a speculative fix for a crash mentioned by @mukilan[^1]. It will
+    # also make moving to a more consistent shutdown model (even one driven by
+    # dropping of the `Servo` instance) possible.
+    # [^1]: https://github.com/servo/servo/pull/40883#issuecomment-3584090609
+    # Testing: It's difficult to test this crash because it seems to only happen on
+    # nixOS and we currently don't have a good way to test crashes on exit.
+https://github.com/servo/servo/pull/40661	(@janvarga, #40661)	storage: Introduce storage coordination thread and infrastructure for parallel next-generation IndexedDB implementation (#40661)
+    # This PR introduces a new storage coordination thread, intended to serve as the central point for managing all
+    # current and future storage endpoints in Servo.
+    # In addition to the new coordination thread, this PR also lays the infrastructure required to develop a parallel,
+    # next-generation IndexedDB implementation under the indexeddb_next feature flag living on a separate branch.
+    # Testing: Unit and WPT tests continue to pass
++https://github.com/servo/servo/pull/40923	(@mrobinson, #40923)	libservo: Starting removing the multi-document interface API (#40923)
+    api; remove old multiple webview features in favour of per-webview RenderingContext
+    # For a while Servo has while had a somewhat unfinished multi-document
+    # interface API that was meant to implement a kind of window manager
+    # inside a single `RenderingContext`. This came with some focus handling
+    # and a paint order implementation. This code was never really finished
+    # and the `WebView` API is moving toward a design where compositing
+    # different `WebView`s together is up to the embedder.
+    # This is finally possible now that rendering to multiple
+    # `RenderingContext`s is supported. In addition, the MDI API interferes
+    # with focus handling when `WebView`s are distributed across windows.
+    # Given these two points, this change starts to remove the MDI API.
+    # - All `WebView`s can still be hidden / unhidden and start in an unhidden
+    #   state.
+    # - All `WebView`s always have system focus. System focus never properly
+    #   interfaced with Servo's internal focus system anyway. A followup
+    #   change will add proper system focus integration.
+    # - There are still some leftovers from the MDI interface (such as
+    #   `WebView`s having their own size). These will be cleaned up in a
+    #   followup change. Only the changes necessary to get multi-window
+    #   support working are included here.
+    # Testing: This should not change observable behavior and tests are updated for the
+    # new APIs.
++https://github.com/servo/servo/pull/40936	(@kkoyung, #40936)	script: Finishing implementation of Argon2 in WebCrypto (#40936)
+    dom; full support for Argon2 including crypto.subtle.deriveBits("Argon2d"), Argon2i, Argon2id (get key length is an internal algorithm)
+    # Finish adding Argon2 support to WebCrypto API, using the crate `argon2` to support the cryptographic calculation.
+    # This patch implements "derive bits" operation and the "get key length" operation of Argon2. Actual error messages
+    # are also provided for the existing "import key" operation of Argon2.
+    # Testing: Pass some WPT tests that were expected to fail.
+    # Fixes: Part of #40687
+-https://github.com/servo/servo/pull/40776	(@webbeef, #40776)	dom: avoid short lived rooting in Node::is_ancestor_of (#40776)
+    # When using the iterator nodes are rooted but they are dropped immediately.
+    # Testing: Green wpt run: https://github.com/webbeef/servo/actions/runs/19560383039/job/56012660243
+https://github.com/servo/servo/pull/40709	(@jdm, #40709)	servodriver: Clear cookies between tests. (#40709)
+    # To ensure that tests that modify cookies but don't finish cleanly don't leave cookie values that interfere with
+    # subsequent tests, we need to clear the cookie storage in between each test that's run.
+    # Testing: Can't test the test runner, just have to watch the patterns in our test runs.
+    # Fixes: #40668
+    # Fixes: #40672
+    # Fixes: #40673
+    # Fixes: #40674
+    # Fixes: #40695
+    # Fixes: #40697
++https://github.com/servo/servo/pull/40932	(@kkoyung, #40932)	script: Implement import key operation of Argon2 (#40932)
+    dom; roll this into the other Argon2 patch (import key is an internal algorithm)
+    # Start adding Argon2 support to WebCrypto API.
+    # This patch implements import key operation of Argon2.
+    # Testing:
+    # - Pass some WPT tests that were expected to fail.
+    # - Some new FAIL expectations are added to `argon2.tentative.https.any.js.ini`, which require the not-yet-implemented
+    # derive bits operation of Argon2. These tests were skipped by WPT when the import key operation of Argon2 had not
+    # been implemented at the time.
+    # Fixes: Part of #40687
++https://github.com/servo/servo/pull/40925	(@lukewarlow, #40925)	servoshell: Add proper labels to UI elements (#40925)
+    a11y
+    # The various UI controls in servo are now announced nicely to screen readers rather than e.g. "Radioactive button".
+    # Fixes: #38130
+>>> 2025-11-30T06:10:54Z
+-https://github.com/servo/servo/pull/40958	(@servo-wpt-sync, #40958)	Sync WPT with upstream (30-11-2025) (#40958)
+    # Automated downstream sync of changes from upstream as of 30-11-2025
+    # [no-wpt-sync]
+https://github.com/servo/servo/pull/40949	(@WaterWhisperer, #40949)	script: Reflect infallible Streams operation in spec (#40949)
+    # updates several methods in `ReadableByteStream` to use `.expect()` instead of `?` where the spec indicates an
+    # infallible operation (denoted by `!`).
+    # Testing: `./mach test-wpt /streams/readable-byte-streams`
+    # Fixes: part of #36906
+https://github.com/servo/servo/pull/40944	(@mrobinson, #40944)	constellation: Break the `EventLoop` dependency on the initial `Pipeline` (#40944)
+    # Currently starting a script `EventLoop` depends on sending data about
+    # the initial `Pipeline`. This change breaks this dependency. The goal
+    # here is to:
+    # 1. Allow `ScriptThread`s to be shared between `WebView`s. This will
+    #    allow more flexiblity with the way that `ScriptThread`s are created,
+    #    which should allow us to perserve system resources by allowing them
+    #    to be shared between `WebView`s. With this change, we can do away
+    #    with the `InitialPipelineState` entirely, which was gather
+    #    information necessary for both a new `EventLoop` and a new
+    #    `Pipeline`. We no longer have to do many clones when reusing an
+    #    existing even loop.
+    # 1. Simplify the way that `EventLoop`s and `Pipeline`s are spawned. Now
+    #    `Pipeline`s are spawned in the same way no matter what.
+    # Now the general order of operations when starting a pipeline is:
+    # 1. Get or create an event loop for the pipeline:
+    #     - If the event loop needs to be spawn, spawned it in a new thread or
+    #       process.
+    # 2. Send the spawn pipeline message to the event loop (kept alive via an
+    #    `Rc`.
+    # Testing: This should not change behavior in a way that is observable, so should
+    # be covered by existing tests.
++https://github.com/servo/servo/pull/40951	(@mrobinson, #40951)	libservo: Clean up Servo exports and export more at the root (#40951)
+    api; `use servo::*`
+    # This change makes it easier for embedders to embed the types that they
+    # need by exporting almost everything necessary to use Servo at the root
+    # of libservo, apart from a few exceptions. In addition, the `Servo` is moved
+    # to its own file so that public exports can be more easily spotted from
+    # `components/servo/lib.rs`.
+    # Testing: This should not change behavior and is thus covered by existing tests.
+    # Fixes: #18475.
+https://github.com/servo/servo/pull/40953	(@mrobinson, #40953)	servoshell: Always exit via `RunningAppState::schedule_exit` (#40953)
+    # This prevents crashes when exiting servoshell in different situations.
+    # For instance, this fixes a crash when running WPT tests on some systems.
+    # Testing: This fixes an issue when running WPT tests locally.
++https://github.com/servo/servo/pull/40948	(@kkoyung, #40948)	script: Implement import/export key operation of ChaCha20-Poly1305 (#40948)
+    dom; crypto.subtle.importKey("ChaCha20-Poly1305") and exportKey() for ChaCha20-Poly1305 keys
+    # Start adding ChaCha20-Poly1305 support to WebCrypto API.
+    # This patch implements "import key" operation and "export key" operation of ChaCha20-Poly1305, using the crate
+    # `chacha20poly1305` to support the cryptographic calculation.
+    # Testing: Pass some WPT tests that were expected to fail.
+    # Fixes: Part of #40687
+>>> 2025-12-01T06:09:12Z
diff --git a/outline.txt b/outline.txt
new file mode 100644
index 000000000..8b021c67a
--- /dev/null
+++ b/outline.txt
@@ -0,0 +1,196 @@
+- a11y
+    - https://github.com/servo/servo/pull/40925	(@lukewarlow, #40925)	servoshell: Add proper labels to UI elements (#40925)
+      a11y
+- api
+    - https://github.com/servo/servo/pull/40408	(@mrobinson, #40408)	libservo: Add a fallback clipboard (#40408)
+      api
+    - https://github.com/servo/servo/pull/40402	(@mrobinson, @atbrakhi, #40402)	libservo: Integrate context menu into the show_embedder_control API (#40402)
+      api servoshell; rework context menu api, embedders can now know the position and know what each item does (`show_context_menu(webview, result_sender, title, items)` → `ContextMenu.{id,position,items,select,dismiss}()`)
+    - https://github.com/servo/servo/pull/40501	(@mrobinson, @atbrakhi, #40501)	script: Add context-based context menu options (#40501)
+      api servoshell; copy link, open link in new, copy image link, open image in new, cut, copy, paste, select all
+    - https://github.com/servo/servo/pull/40598	(@mrobinson, #40598)	libservo: Add `WebView::can_go_forward` and `WebView::can_go_back` (#40598)
+      api servoshell
+    - https://github.com/servo/servo/pull/40738	(@mrobinson, @mukilan, #40738)	compositing: Make `RefreshDriver` per-`RenderingContext` (#40738)
+      api; part of per-webview RenderingContext
+    - https://github.com/servo/servo/pull/40716	(@sagudev, #40716)	Use safe JSContext/AutoRealm/CurrentRealm in codegen (#40716)
+      api; safer api for mozjs bindings
+    - https://github.com/servo/servo/pull/40721	(@mrobinson, @mukilan, #40721)	compositing: Allow WebGL contexts to have different Surfman devices (#40721)
+      api; part of per-webview RenderingContext
+    - https://github.com/servo/servo/pull/40715	(@mrobinson, #40715)	servoshell: Always use `ControlFlow::Wait` on winit (#40715)
+      api; removed in favour of RefreshDriver
+    - https://github.com/servo/servo/pull/40607	(@mrobinson, #40607)	libservo: Add `ContextMenuElementInformation` to for the context menu API (#40607)
+      api; element_info() on ContextMenu
+    - https://github.com/servo/servo/pull/40594	(@mukilan, @mrobinson, #40594)	compositing: Allow WebGL contexts to have different Surfman devices (#40594)
+      api; part of per-webview RenderingContext
+    - https://github.com/servo/servo/pull/40794	(@mrobinson, #40794)	libservo: Have `WebView` take a `RenderingContext` rather than `Servo` (#40794)
+      api; per-webview rendering contexts (big part of support for multiple windows)
+    - https://github.com/servo/servo/pull/40799	(@mrobinson, #40799)	libservo: Remove `Servo::animating()` (#40799)
+      api; removed in favour of RefreshDriver
+    - https://github.com/servo/servo/pull/40886	(@mrobinson, #40886)	libservo: Remove `ServoDelegate::notify_animating_changed` (#40886)
+      api; removed in favour of RefreshDriver
+    - https://github.com/servo/servo/pull/40923	(@mrobinson, #40923)	libservo: Starting removing the multi-document interface API (#40923)
+      api; remove old multiple webview features in favour of per-webview RenderingContext
+    - https://github.com/servo/servo/pull/40951	(@mrobinson, #40951)	libservo: Clean up Servo exports and export more at the root (#40951)
+      api; `use servo::*`
+- crash
+    - https://github.com/servo/servo/pull/40459	(@Narfinger, #40459)	net: Do not implement `Serialize`/`Deserialize` for `RasterImage` and introduce``SharedRasterImage` (#40459)
+      crash; fix crash in Speedometer3.1
+    - https://github.com/servo/servo/pull/40821	(@nicoburns, #40821)	Upgrade Taffy to v0.9.2 (#40821)
+      crash; fix panic in grid layout
+    - https://github.com/servo/servo/pull/40913	(@simonwuelker, #40913)	fonts: Don't panic when font information contains invalid UTF-8 (#40913)
+      crash; fix panic with unusual fonts
+    - https://github.com/servo/servo/pull/40911	(@Taym95, #40911)	fix RefCell already borrowed panic in readablestream (#40911)
+      crash; fix panic in ReadableStream
+    - https://github.com/servo/servo/pull/40933	(@mrobinson, #40933)	servoshell: Schedule keyboard shortcut exits so that they can be done cleanly (#40933)
+      crash; fix crashes when exiting servo
+- devtools
+    - https://github.com/servo/servo/pull/40328	(@mark-buer, #40328)	devtools: Expose cache status for requests in network monitor. (#40328)
+      devtools
+    - https://github.com/servo/servo/pull/40760	(@eerii, #40760)	devtools: Support reloading tab (#40760)
+      devtools
+- dom
+    - https://github.com/servo/servo/pull/40305	(@kkoyung, #40305)	script: Implement generate key operation of ECDH (#40305)
+      dom; crypto.subtle.generateKey("ECDH")
+    - https://github.com/servo/servo/pull/40298	(@kkoyung, #40298)	script: Implement export key operation of ECDH (#40298)
+      dom; crypto.subtle.exportKey() for ECDH keys
+    - https://github.com/servo/servo/pull/40271	(@lukewarlow, #40271)	script: Implement `ToggleEvent` and use for `<details>` element (#40271)
+      dom; toggle events on HTMLDetailsElement
+    - https://github.com/servo/servo/pull/40463	(@WaterWhisperer, #40463)	script: Add message to IndexSizeError (#40463)
+      dom; exception messages
+    - https://github.com/servo/servo/pull/40405	(@lukewarlow, #40405)	Partially implement dialog.showModal() (#40405)
+      dom; check how partial is partial
+    - https://github.com/servo/servo/pull/40304	(@WaterWhisperer, #40304)	script/layout: Implement Element.currentCSSZoom attribute (#40304)
+      dom; currentCSSZoom property on Element
+    - https://github.com/servo/servo/pull/40421	(@kkoyung, #40421)	script: Implement export key operation of X25519 (#40421)
+      dom; crypto.subtle.exportKey() for X25519 keys
+    - https://github.com/servo/servo/pull/40333	(@kkoyung, #40333)	script: Implement derive bits operation of ECDH (#40333)
+      dom; crypto.subtle.deriveBits("ECDH")
+    - https://github.com/servo/servo/pull/40398	(@kkoyung, #40398)	script: Implement import key operation of X25519 (#40398)
+      dom; crypto.subtle.importKey(,,"X25519")
+    - https://github.com/servo/servo/pull/40378	(@jdm, #40378)	config: Enable ResizeObserver by default. (#40378)
+      dom
+    - https://github.com/servo/servo/pull/40334	(@kkoyung, #40334)	script: Use `base64ct` instead of `base64` in SubtleCrypto (#40334)
+      security dom
+    - https://github.com/servo/servo/pull/40480	(@kkoyung, #40480)	script: Implement generate key operation of X25519 (#40480)
+      dom; crypto.subtle.generateKey("X25519")
+    - https://github.com/servo/servo/pull/39989	(@excitablesnowball, #39989)	script: Use InputEvent for input events (#39989)
+      dom; {composed,data,isComposing,inputType} properties on `input`/`beforeinput` events
+    - https://github.com/servo/servo/pull/40497	(@kkoyung, #40497)	script: Implement derive bits operation of X25519 (#40497)
+      dom; crypto.subtle.deriveBits("X25519")
+    - https://github.com/servo/servo/pull/40536	(@kkoyung, #40536)	script: Implement export key operation of ECDSA (#40536)
+      dom; crypto.subtle.exportKey() for ECDSA keys
+    - https://github.com/servo/servo/pull/40523	(@kkoyung, #40523)	script: Implement import key operation of ECDSA (#40523)
+      dom; crypto.subtle.importKey(,,"ECDSA")
+    - https://github.com/servo/servo/pull/40557	(@kkoyung, #40557)	script: Implement verify operation of ECDSA (#40557)
+      dom; crypto.subtle.verify("ECDSA")
+    - https://github.com/servo/servo/pull/40553	(@kkoyung, #40553)	script: Implement generate key operation of ECDSA (#40553)
+      dom; crypto.subtle.generateKey("ECDSA")
+    - https://github.com/servo/servo/pull/40591	(@kkoyung, #40591)	script: Implement sign operation of ECDSA (#40591)
+      dom; crypto.subtle.sign("ECDSA")
+    - https://github.com/servo/servo/pull/40768	(@simonwuelker, #40768)	script: Add messages to exceptions thrown in Element::attachShadow (#40768)
+      dom; exception messages
+    - https://github.com/servo/servo/pull/40765	(@kkoyung, #40765)	script: Implement SHA-3 in WebCrypto API (#40765)
+      dom; crypto.subtle.digest("SHA3-256"), SHA3-384, SHA3-512; first among major engines!
+    - https://github.com/servo/servo/pull/40636	(@mukilan, #40636)	net: Relax the SVG content type detection logic. (#40636)
+      dom; fixed SVG rendering with Content-Type parameters
+    - https://github.com/servo/servo/pull/40832	(@kkoyung, #40832)	script: Implement CShake in WebCrypto API (#40832)
+      dom; crypto.subtle.digest("cSHAKE128"), cSHAKE256
+    - https://github.com/servo/servo/pull/40842	(@Taym95, #40842)	Implement brotli support for CompressionStream and DecompressionStream (#40842)
+      dom; new CompressionStream("brotli") and new DecompressionStream("brotli")
+    - https://github.com/servo/servo/pull/40447	(@stevennovaryo, #40447)	dom: Focus scroll to the element only if it is not visible (#40447)
+      dom; focus no longer scrolls if element is visible
+    - https://github.com/servo/servo/pull/40936	(@kkoyung, #40936)	script: Finishing implementation of Argon2 in WebCrypto (#40936)
+      dom; full support for Argon2 including crypto.subtle.deriveBits("Argon2d"), Argon2i, Argon2id (get key length is an internal algorithm)
+    - https://github.com/servo/servo/pull/40932	(@kkoyung, #40932)	script: Implement import key operation of Argon2 (#40932)
+      dom; roll this into the other Argon2 patch (import key is an internal algorithm)
+    - https://github.com/servo/servo/pull/40948	(@kkoyung, #40948)	script: Implement import/export key operation of ChaCha20-Poly1305 (#40948)
+      dom; crypto.subtle.importKey("ChaCha20-Poly1305") and exportKey() for ChaCha20-Poly1305 keys
+- layout
+    - https://github.com/servo/servo/pull/40314	(@simonwuelker, #40314)	script: Enforce exclusivity between <details> elements in the same tree (#40314)
+      layout; <details name> exclusivity
+    - https://github.com/servo/servo/pull/40554	(@Loirooriol, #40554)	script: Pass the right base URI to inline sheets (#40554)
+      layout; inline <style> now takes <base> into account
+    - https://github.com/servo/servo/pull/34846	(@nicoburns, #34846)	Support `calc()` values in CSS Grid (#34846)
+      layout
+    - https://github.com/servo/servo/pull/40699	(@mrobinson, @Loirooriol, #40699)	layout: Rebuild the box tree when the `quotes` attribute changes on a pseudo-element (#40699)
+      layout
+    - https://github.com/servo/servo/pull/40578	(@rayguo17, #40578)	Media: Display User Agent Controls widget for video element. (#40578)
+      layout; UA controls for <video> (was previously supported for <audio>)
+    - https://github.com/servo/servo/pull/40698	(@mrobinson, @Loirooriol, #40698)	script: Trigger reflow properly for pseudo-elements with `content: attr()` (#40698)
+      layout
+    - https://github.com/servo/servo/pull/40684	(@WaterWhisperer, #40684)	script: Support SVG <use> elements with fragment identifiers (#40684)
+      layout
+    - https://github.com/servo/servo/pull/40829	(@simonwuelker, #40829)	Support `font-optical-sizing` (#40829)
+      layout; variable fonts
+    - https://github.com/servo/servo/pull/40861	(@simonwuelker, #40861)	Add `layout_variable_fonts_enabled` to experimental preferences  (#40861)
+      layout; variable fonts
+    - https://github.com/servo/servo/pull/40867	(@simonwuelker, #40867)	fonts: Apply variations for `font-weight`, `font-stretch` (#40867)
+      layout; variable fonts
+    - https://github.com/servo/servo/pull/40884	(@simonwuelker, #40884)	Don't override `opsz` from `font-variation-settings` when `font-optical-sizing` is `auto` (#40884)
+      layout; part of font-optical-sizing
+    - https://github.com/servo/servo/pull/40916	(@Loirooriol, @mrobinson, #40916)	stylo: Add stacking context damage when outline-width becomes non-zero (#40916)
+      layout; incremental layout for ‘outline’ changes
+- perf
+    - https://github.com/servo/servo/pull/40158	(@mrobinson, #40158)	pixels: Store decoded images as RGBA premultiplied data (#40158)
+      perf; faster animated GIF rendering
+    - https://github.com/servo/servo/pull/39384	(@shubhamg13, @boluochoufeng, #39384)	Add support for LargestContentfulPaint PaintMetric (#39384)
+      perf; LCP measurement
+    - https://github.com/servo/servo/pull/39714	(@shubhamg13, #39714)	Add basic `IDL` implementation for `LargestContentfulPaint` (#39714)
+      perf; `observe({type: "largest-contentful-paint"})` on PerformanceObserver
+    - https://github.com/servo/servo/pull/40639	(@mrobinson, @vimpunk, #40639)	script: Add support for parsing CSS in parallel (#40639)
+      perf
+    - https://github.com/servo/servo/pull/40742	(@webbeef, #40742)	script: Optimize Node::insert (#40742)
+      perf; faster parseFromString() on DOMParser
+    - https://github.com/servo/servo/pull/40797	(@Loirooriol, @mrobinson, #40797)	layout: Preserve cached layout results of undamaged descendants (#40797)
+      perf; better incremental layout for descendants
+    - https://github.com/servo/servo/pull/40795	(@Loirooriol, @mrobinson, #40795)	layout: Preserve cached intrinsic sizes of undamaged descendants (#40795)
+      perf; better incremental layout for descendants
+    - https://github.com/servo/servo/pull/37972	(@jschwe, #37972)	Add feature to disable JIT support in mozjs at compile-time (#37972)
+      perf
+    - https://github.com/servo/servo/pull/40775	(@webbeef, #40775)	dom: cache preference access in Document (#40775)
+      perf
+- quality
+    - https://github.com/servo/servo/pull/40494	(@mrobinson, #40494)	script: Wrap unsafe code in `scriptruntime.rs` in `unsafe {}` (#40494)
+      quality
+    - https://github.com/servo/servo/pull/40499	(@mrobinson, #40499)	script: Wrap remaining unsafe code and enable `unsafe_op_in_unsafe_fn` (#40499)
+      quality; unsafe as signature vs unsafe as fence around operations
+    - https://github.com/servo/servo/pull/40493	(@mrobinson, #40493)	script: Wrap unsafe code in `windowproxy.rs` in `unsafe {}` (#40493)
+      quality
+- release
+    - https://github.com/servo/servo/pull/40357	(@arihant2math, @jschwe, #40357)	Add bump-version command (#40357)
+      release
+    - https://github.com/servo/servo/pull/40614	(@jschwe, #40614)	Update servoshell to v0.0.2 (#40614)
+      release
+- script
+    - https://github.com/servo/servo/pull/40465	(@sagudev, #40465)	script: Start preparation to use safer JSContext (#40465)
+      script; safer mozjs api
+    - https://github.com/servo/servo/pull/40582	(@sagudev, #40582)	script: Add `cx_no_gc`/`cx`/`realm` codegen option and demostrate them (#40582)
+      script; safer api for mozjs bindings
+- security
+    - https://github.com/servo/servo/pull/40334	(@kkoyung, #40334)	script: Use `base64ct` instead of `base64` in SubtleCrypto (#40334)
+      security dom
+    - https://github.com/servo/servo/pull/40725	(@mrobinson, #40725)	script: Use a `WeakRef` for references to `WebGLRenderingContext` (#40725)
+      security; fix use-after-free in WebGL
+- servoshell
+    - https://github.com/servo/servo/pull/40402	(@mrobinson, @atbrakhi, #40402)	libservo: Integrate context menu into the show_embedder_control API (#40402)
+      api servoshell; rework context menu api, embedders can now know the position and know what each item does (`show_context_menu(webview, result_sender, title, items)` → `ContextMenu.{id,position,items,select,dismiss}()`)
+    - https://github.com/servo/servo/pull/40306	(@mrobinson, #40306)	servoshell: Add a `VsyncRefreshDriver` for Android (#40306)
+      servoshell; use system compositor for vsync
+    - https://github.com/servo/servo/pull/40434	(@atbrakhi, @mrobinson, #40434)	servoshell: Implement context menu in servoshell (#40434)
+      servoshell; initial context menu (back, forward, reload)
+    - https://github.com/servo/servo/pull/40501	(@mrobinson, @atbrakhi, #40501)	script: Add context-based context menu options (#40501)
+      api servoshell; copy link, open link in new, copy image link, open image in new, cut, copy, paste, select all
+    - https://github.com/servo/servo/pull/40598	(@mrobinson, #40598)	libservo: Add `WebView::can_go_forward` and `WebView::can_go_back` (#40598)
+      api servoshell
+    - https://github.com/servo/servo/pull/40883	(@mrobinson, @mukilan, #40883)	servoshell: Add architectural support for opening multiple windows (#40883)
+      servoshell; towards multiple windows
+- testing
+    - https://github.com/servo/servo/pull/40291	(@mrobinson, #40291)	wpt: Enable WebDriver by default when running WPT (#40291)
+      testing; testdriver tests enabled, webdriver now enabled by default (`--product servo` to opt out)
+    - https://github.com/servo/servo/pull/39916	(@jschwe, #39916)	Add code-coverage option to mach run, test-wpt and test-devtools (#39916)
+      testing
+    - https://github.com/servo/servo/pull/39897	(@jschwe, #39897)	Upload junit report of unit-tests in CI  (#39897)
+      testing
+- upgrade
+    - https://github.com/servo/servo/pull/40525	(@Loirooriol, #40525)	Upgrade cssparser to version 0.36 (#40525)
+      upgrade; CSS now support color(display-p3-linear) and color-mix(in display-p3-linear)