diff --git a/commits.txt b/commits.txt
new file mode 100644
index 000000000..bb3988444
--- /dev/null
+++ b/commits.txt
@@ -0,0 +1,7659 @@
+>>> 2026-08-01T23:32:55Z
+https://github.com/servo/servo/pull/46553	(@shubhamg13, #46553)	script: Wire `element` for `LargestContentfulPaint` (#46553)
+    ^ commit 3f08ca6d1664a50265140090b7faf3fcb86d82b1
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Wire the logic for `element` on `LargestContentfulPaint` using `OpaqueNode`
+    # 
+    # While processing the `ReflowResult`, `OpaqueNode` is resolved and `Element` is stored in HashMap located in  `document`. 
+    # 
+    # Testing: New WPT Passed (+ To be Added in #46851)
+    # Fixes: Part of #42000
+    # 
++https://github.com/servo/servo/pull/46917	(@Taym95, @yezhizhen, #46917)	fetch: implement Request navigation flags (#46917)
+    dom; isReloadNavigation and isHistoryNavigation on Request
+    ^ commit d97c8c97a9a32f7aff09a340fa8443d68c2e7997
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Implement Request.isReloadNavigation and Request.isHistoryNavigation.
+    # 
+    # Testing: tests/wpt/meta/fetch/api/idlharness.https.any.js.ini and tests/wpt/meta/fetch/api/request/request-structure.any.js.ini
+    # 
+https://github.com/servo/servo/pull/46926	(@veyndan, #46926)	android: Make `ServoView.GLThread` a static class (#46926)
+    ^ commit d26754353eda205f8ef9bbcb30425f38547828c8
+    # Similar to ae3dbaa17d7c6bdd27a300e79a57e30816e798a7, this makes the inner class easier to reason about and makes the future conversion of `ServoView` to Kotlin easier.
+    # 
+    # Testing: There are no automated tests for Android.
+>>> 2026-08-02T23:26:51Z
+-https://github.com/servo/servo/pull/46928	(@servo-wpt-sync, #46928)	Sync WPT with upstream (02-08-2026) (#46928)
+    ^ commit e7fdc0c794bbff47ad5b338fe46871451966fb2a
+    # Automated downstream sync of changes from upstream as of 02-08-2026
+    # [no-wpt-sync]
+https://github.com/servo/servo/pull/46923	(@mrobinson, #46923)	More gracefully handle header parsing errors (#46923)
+    ^ commit f4dde2701bacd4972e6cfa319a3f0cbc9be21f64
+    # This change is mainly a code health improvement which more gracefully handles
+    # the case that a header name or value cannot be parsed. Instead a
+    # panicking, a warning is issued in more cases. In addition, a few other
+    # `unwrap`s are replaced with graceful error handling in
+    # `xmlhttprequest.rs`. Finally, some header addition is done via typed
+    # headers. This cannot be used for the "Content-Type" header as `hyper`
+    # seems to destroy the original case of the header, leading to WPT
+    # failures.
+    # 
+    # Testing: This change shold not modify behavior so should be covered by existing tests.
+    # 
+https://github.com/servo/servo/pull/46930	(@sagudev, #46930)	script: Stop using an unforgeable holder for global objects with unforgeable properties (#46930)
+    ^ commit aaacc0e62d5e471091aad9df67f60563b97e70e8
+    # Porting https://hg-edge.mozilla.org/mozilla-central/rev/256ea0d0de34 (from FF 51!) to servo
+    # 
+    # This will help with SM bump I am working on.
+    # 
+    # Testing: Should be covered by WPT tests
+https://github.com/servo/servo/pull/46937	(@nicoburns, #46937)	Upgrade to resvg v0.48.0 (#46937)
+    ^ commit 89c1ccd8ff4034c69c052065a1208d85bc545f31
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # - Upgrade resvg to v0.48.0
+    # - Also upgrade base64 to 0.23.0 seeing resvg pulls in the new version anyway
+    # 
+    # There are lots of new passing tests due to resvg now exposing a more web compatible width and height.
+    # 
+    # Testing: WPT tests
+    # 
++https://github.com/servo/servo/pull/46919	(@Gae24, #46919)	script: Don't cache HTTP errors in the module map (#46919)
+    web; we can now retry JS module fetches when fetching fails
+    ^ commit f8ab249c71d9d904b093547659cf7b88457dd6b5
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Align Servo with the recent changes done in https://github.com/whatwg/html/pull/10327. Modules that are null due to network errors or MIME type mismatches are now ignored, allowing fetches to be retried. This change also simplifies the implementation by moving away from the previous Promise-based approach.
+    # 
+    # Testing: New passes, expectations updated
+    # 
+https://github.com/servo/servo/pull/46925	(@veyndan, #46925)	android: Convert `Servo` to Kotlin (#46925)
+    ^ commit 35672cc3d4beb768489f5218e73bee7aff0ddb01
+    # Some types in other files have become non-nullable, since with the conversion of `Servo` to Kotlin, the Kotlin compiler can infer that these types are in fact non-nullable.
+    # 
+    # Some types have also become nullable, as they were incorrectly labelled nullable in Kotlin since the caller was Java. Now that the invoker is also written in Kotlin, the incorrectly specified nullability produces a run time error.
+    # 
+    # Testing: There are no automated tests for Android.
+    # Fixes: Part of #46701.
+>>> 2026-08-03T23:34:33Z
+https://github.com/servo/servo/pull/46940	(@veyndan, #46940)	android: Remove unused code in `ServoView` (#46940)
+    ^ commit 2b3d009af9d8763a77a870e249f2700c21ab96e6
+    # In preparation for converting this file to Kotlin (see #46701), this removes unused code so we're not migrating dead code.
+    # 
+    # Testing: There are no automated tests for Android.
+-https://github.com/servo/servo/pull/46943	(@dependabot[bot], @dependabot[bot], #46943)	build: bump zerocopy from 0.8.54 to 0.8.55 (#46943)
+    ^ commit dac85f094b6e9744e676fac5f584f4c2449617fb
+    # Bumps [zerocopy](https://github.com/google/zerocopy) from 0.8.54 to 0.8.55.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/google/zerocopy/releases">zerocopy's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v0.8.55</h2>
+    # <!-- raw HTML omitted -->
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>Make <code>ByteOrder::ORDER</code> and <code>Order</code> public; release 0.8.54 by <a href="https://github.com/jswrenn"><code>@​jswrenn</code></a> in <a href="https://redirect.github.com/google/zerocopy/pull/3475">google/zerocopy#3475</a></li>
+    # <li>[derive] Support <code>IntoBytes</code> on homogeneous generic structs by <a href="https://github.com/joshlf"><code>@​joshlf</code></a> in <a href="https://redirect.github.com/google/zerocopy/pull/3488">google/zerocopy#3488</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/google/zerocopy/compare/v0.8.54...v0.8.55">https://github.com/google/zerocopy/compare/v0.8.54...v0.8.55</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/google/zerocopy/commit/93ea10b10f5756bd94a8206acf326f491ed3e42a"><code>93ea10b</code></a> Release 0.8.55 (<a href="https://redirect.github.com/google/zerocopy/issues/3491">#3491</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/830bc15e5b29dcad061ce9751845e73713907a5f"><code>830bc15</code></a> [derive] Support <code>IntoBytes</code> on homogeneous generic structs (<a href="https://redirect.github.com/google/zerocopy/issues/3488">#3488</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/5f118f8421afdc04826894e7410765b26d4d58f3"><code>5f118f8</code></a> [CI] Bump the all-actions group with 3 updates (<a href="https://redirect.github.com/google/zerocopy/issues/3490">#3490</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/bac77f015e45699655396333d3b1147a48a8f566"><code>bac77f0</code></a> [CI] Bump the all-actions group with 3 updates (<a href="https://redirect.github.com/google/zerocopy/issues/3484">#3484</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/9fa46da91bd95e4f57e151082082044a41983ee8"><code>9fa46da</code></a> Make <code>ByteOrder::ORDER</code> and <code>Order</code> public; release 0.8.54 (<a href="https://redirect.github.com/google/zerocopy/issues/3475">#3475</a>)</li>
+    # <li>See full diff in <a href="https://github.com/google/zerocopy/compare/v0.8.54...v0.8.55">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zerocopy&package-manager=cargo&previous-version=0.8.54&new-version=0.8.55)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/46944	(@dependabot[bot], @dependabot[bot], #46944)	build: bump time from 0.3.53 to 0.3.54 (#46944)
+    ^ commit e081179e43d61aa5781253585a771782337d4b0d
+    # Bumps [time](https://github.com/time-rs/time) from 0.3.53 to 0.3.54.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/time-rs/time/releases">time's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v0.3.54</h2>
+    # <p>See the <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">changelog</a> for details.</p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/time-rs/time/blob/main/CHANGELOG.md">time's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>0.3.54 [2026-07-20]</h2>
+    # <h3>Added</h3>
+    # <ul>
+    # <li><code>PrimitiveDateTime</code> has been renamed to <code>PlainDateTime</code>.</li>
+    # <li><code>Duration</code> has been renamed to <code>SignedDuration</code>.</li>
+    # <li>Iteration is now possible over <code>Date</code>, <code>Month</code>, and <code>Weekday</code>. Relevant iterator methods have been
+    # overridden to ensure maximum performance.</li>
+    # </ul>
+    # <p>For both <code>PlainDateTime</code> and <code>SignedDuration</code>, a non-deprecated type alias has been added for
+    # backwards compatibility. The new names should be preferred.</p>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>The associated metadata type (for <code>powerfmt</code> implementations) for various types has been changed
+    # to <code>()</code> and made public. This guarantees that no additional metadata will be present.</li>
+    # </ul>
+    # <h3>Performance</h3>
+    # <ul>
+    # <li>More gains when parsing RFC 2822.</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/time-rs/time/commit/d1c55a454051c83e8fd2ad8431cf37b90dd6ea31"><code>d1c55a4</code></a> v0.3.54 release</li>
+    # <li><a href="https://github.com/time-rs/time/commit/2fb04c46225393cf758074ad58a72dc9acab264d"><code>2fb04c4</code></a> Add ability to iterate over <code>Weekday</code>s</li>
+    # <li><a href="https://github.com/time-rs/time/commit/00779fa0e871e0e22a7d672bca3c4bdeef9d3cf7"><code>00779fa</code></a> Add ability to iterate over <code>Month</code>s</li>
+    # <li><a href="https://github.com/time-rs/time/commit/b99c5c2be0f472283355b677719ab7cc8048a011"><code>b99c5c2</code></a> Add ability to iterate over <code>Date</code>s</li>
+    # <li><a href="https://github.com/time-rs/time/commit/41eea5b1db5242662cd6a4ec8875cc547698236b"><code>41eea5b</code></a> Lint on missing panic documentation</li>
+    # <li><a href="https://github.com/time-rs/time/commit/5a0bdd8449dcb1688daa104f772bcee5ba54fe70"><code>5a0bdd8</code></a> Replace optimizing loop with linear pass</li>
+    # <li><a href="https://github.com/time-rs/time/commit/687d4a9a8b3e43d4d708a11bba7f5377e0381f67"><code>687d4a9</code></a> Address clippy lints</li>
+    # <li><a href="https://github.com/time-rs/time/commit/6bf0055e3a4e6af3ee5df230d58c6aa6c0061763"><code>6bf0055</code></a> Add LLM policy</li>
+    # <li><a href="https://github.com/time-rs/time/commit/81f9fe0676d2cc067361e97a9dc774df1252c05e"><code>81f9fe0</code></a> Rename <code>Duration</code> to <code>SignedDuration</code></li>
+    # <li><a href="https://github.com/time-rs/time/commit/058efaec654b08d0153525cb7732b7a34d354b06"><code>058efae</code></a> Rename internals for <code>PlainDateTime</code></li>
+    # <li>Additional commits viewable in <a href="https://github.com/time-rs/time/compare/v0.3.53...v0.3.54">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=time&package-manager=cargo&previous-version=0.3.53&new-version=0.3.54)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/46945	(@dependabot[bot], @dependabot[bot], #46945)	build: bump bpaf from 0.9.26 to 0.9.27 (#46945)
+    ^ commit 7113b5b84e8fc1386a0b213427be901e3bfe1bb5
+    # Bumps [bpaf](https://github.com/pacak/bpaf) from 0.9.26 to 0.9.27.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/pacak/bpaf/blob/master/Changelog.md">bpaf's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>bpaf [0.9.27], bpaf_derive [0.5.26] - 2026-07-29</h2>
+    # <ul>
+    # <li>improve error message if user passes an empty value to argument or positional</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li>See full diff in <a href="https://github.com/pacak/bpaf/commits/v0.9.27">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bpaf&package-manager=cargo&previous-version=0.9.26&new-version=0.9.27)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/46946	(@dependabot[bot], @dependabot[bot], #46946)	build: bump pastey from 0.2.2 to 0.2.3 (#46946)
+    ^ commit d4195103b22bab6e3e18000ad4217a30fa2fcd3d
+    # Bumps [pastey](https://github.com/as1100k/pastey) from 0.2.2 to 0.2.3.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/as1100k/pastey/releases">pastey's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v0.2.3</h2>
+    # <h3>Improved</h3>
+    # <ul>
+    # <li>Improved Branch Coverage <a href="https://redirect.github.com/AS1100K/pastey/pull/34">#34</a></li>
+    # <li>Improved Line Coverage <a href="https://redirect.github.com/AS1100K/pastey/pull/32">#32</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/AS1100K/pastey/compare/v0.2.2...v0.2.3">https://github.com/AS1100K/pastey/compare/v0.2.2...v0.2.3</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/AS1100K/pastey/blob/master/CHANGELOG.md">pastey's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>[0.2.3] - 2026-05-20</h2>
+    # <h3>Improved</h3>
+    # <ul>
+    # <li>Improved Branch Coverage <a href="https://redirect.github.com/AS1100K/pastey/pull/34">#34</a></li>
+    # <li>Improved Line Coverage <a href="https://redirect.github.com/AS1100K/pastey/pull/32">#32</a></li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/AS1100K/pastey/commit/c377d07c9d1a418e9922af59dc932736752a95cc"><code>c377d07</code></a> RELEASE v0.2.3</li>
+    # <li><a href="https://github.com/AS1100K/pastey/commit/d23c755c6628cc75a4571d67747c64fc6ac61468"><code>d23c755</code></a> Improve Branch Coverage to 100% (<a href="https://redirect.github.com/as1100k/pastey/issues/34">#34</a>)</li>
+    # <li><a href="https://github.com/AS1100K/pastey/commit/998437f43a00c5c7c5220909f4890485b2c31a8c"><code>998437f</code></a> Improve Line Coverage (<a href="https://redirect.github.com/as1100k/pastey/issues/32">#32</a>)</li>
+    # <li>See full diff in <a href="https://github.com/as1100k/pastey/compare/v0.2.2...v0.2.3">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pastey&package-manager=cargo&previous-version=0.2.2&new-version=0.2.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/46947	(@dependabot[bot], @dependabot[bot], #46947)	build: bump clang-sys from 1.8.1 to 1.9.1 (#46947)
+    ^ commit 5b8e417fdc0a4156216d6a33f7e602d1917f994a
+    # Bumps [clang-sys](https://github.com/KyleMayes/clang-sys) from 1.8.1 to 1.9.1.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/KyleMayes/clang-sys/releases">clang-sys's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v1.9.1</h2>
+    # <h3>Added</h3>
+    # <ul>
+    # <li>Added support for <code>clang</code> 19.0.x</li>
+    # <li>Added support for <code>clang</code> 20.0.x</li>
+    # <li>Added rewriter API.</li>
+    # </ul>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>Search for libraries in <code>LIBRARY_PATH</code> in addition to <code>LD_LIBRARY_PATH</code>.</li>
+    # </ul>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>Reverted executable search that caused header search path failure on macOS.</li>
+    # <li>Improved Visual Studio search paths.</li>
+    # <li>Improved support for Cygwin.</li>
+    # </ul>
+    # <h2>v1.9.0 [YANKED]</h2>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>Added <code>--link-static</code> flag when listing static libraries to link to</li>
+    # </ul>
+    # <h2>v1.8.2 [YANKED]</h2>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>Improved <code>Clang::find</code> to first check directories related to the runtime-loaded <code>libclang</code> instance (if any)</li>
+    # </ul>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>Fixed linking to <code>libclang</code> on Windows with MSYS2</li>
+    # <li>Fixed <code>Clang::find</code> to support both the <code>-target</code> and <code>--target</code> arguments
+    # when using target-prefixed <code>clang</code> binaries</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/KyleMayes/clang-sys/blob/master/CHANGELOG.md">clang-sys's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>[1.9.1] - 2026-06-29</h2>
+    # <h3>Added</h3>
+    # <ul>
+    # <li>Added support for <code>clang</code> 19.0.x</li>
+    # <li>Added support for <code>clang</code> 20.0.x</li>
+    # <li>Added rewriter API.</li>
+    # </ul>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>Search for libraries in <code>LIBRARY_PATH</code> in addition to <code>LD_LIBRARY_PATH</code>.</li>
+    # </ul>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>Reverted executable search that caused header search path failure on macOS.</li>
+    # <li>Improved Visual Studio search paths.</li>
+    # <li>Improved support for Cygwin.</li>
+    # </ul>
+    # <h2>[1.9.0] - 2024-09-24 [YANKED]</h2>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>Added <code>--link-static</code> flag when listing static libraries to link to</li>
+    # </ul>
+    # <h2>[1.8.2] - 2024-05-29 [YANKED]</h2>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>Fixed linking to <code>libclang</code> on Windows with MSYS2</li>
+    # <li>Fixed <code>Clang::find</code> to support both the <code>-target</code> and <code>--target</code> arguments when using target-prefixed <code>clang</code> binaries</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/KyleMayes/clang-sys/commit/8844c21292e54818d200980cd90a5498e2a5a644"><code>8844c21</code></a> Bump version to 1.9.1 (<a href="https://redirect.github.com/KyleMayes/clang-sys/issues/217">#217</a>)</li>
+    # <li><a href="https://github.com/KyleMayes/clang-sys/commit/57d2920bd19527b319ccdb9caf7692139e1136a7"><code>57d2920</code></a> Check formatting in CI</li>
+    # <li><a href="https://github.com/KyleMayes/clang-sys/commit/fbb4093c147a6f15c1cb1b5dea4282e5f47f5eb2"><code>fbb4093</code></a> Run cargo fmt</li>
+    # <li><a href="https://github.com/KyleMayes/clang-sys/commit/8728999dc6f6e740ac6f62fbd8349d4a85a3d3c6"><code>8728999</code></a> Allow auto-formatting link! macro</li>
+    # <li><a href="https://github.com/KyleMayes/clang-sys/commit/53fcb3879d752a45e7c16eded485280f5e35abcb"><code>53fcb38</code></a> Revert &quot;Improve clang executable search (<a href="https://redirect.github.com/KyleMayes/clang-sys/issues/171">#171</a>)&quot;</li>
+    # <li><a href="https://github.com/KyleMayes/clang-sys/commit/0b404336abbacc5d34df70af981ff5a338206bfe"><code>0b40433</code></a> add cygwin (<a href="https://redirect.github.com/KyleMayes/clang-sys/issues/197">#197</a>)</li>
+    # <li><a href="https://github.com/KyleMayes/clang-sys/commit/fc898226e282cb2b5ffad7533d9e3fc91e67e5b4"><code>fc89822</code></a> Add rewriter API (<a href="https://redirect.github.com/KyleMayes/clang-sys/issues/191">#191</a>)</li>
+    # <li><a href="https://github.com/KyleMayes/clang-sys/commit/4985661aabb2f693713762d1e9ec91f3d4a6f0e5"><code>4985661</code></a> Search in LIBRARY_PATH too (<a href="https://redirect.github.com/KyleMayes/clang-sys/issues/186">#186</a>)</li>
+    # <li><a href="https://github.com/KyleMayes/clang-sys/commit/06fe5792ced22d0e76374ac0039a0f7f1707c848"><code>06fe579</code></a> Fix directories windows path (<a href="https://redirect.github.com/KyleMayes/clang-sys/issues/185">#185</a>)</li>
+    # <li><a href="https://github.com/KyleMayes/clang-sys/commit/a76fd89f1800155e06f99ec5e200a02aadb49e3f"><code>a76fd89</code></a> Add support for libClang 19 and 20 (<a href="https://redirect.github.com/KyleMayes/clang-sys/issues/195">#195</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/KyleMayes/clang-sys/compare/v1.8.1...v1.9.1">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=clang-sys&package-manager=cargo&previous-version=1.8.1&new-version=1.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
++https://github.com/servo/servo/pull/46886	(@SimonSapin, #46886)	script: More consistent compareDocumentPosition for disconnected nodes (#46886)
+    dom; more conformant compareDocumentPosition() on Node when nodes are not in the same tree
+    ^ commit 469f9721e58f65125fe28d88092f275436fcbe6b
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # When comparing disconnected nodes by pointer addresses, use stable GC-owned pointers rather than temporary pointers to pointers.
+    # 
+    # Testing: extending WPT to test the relation is anti-commutative (`a < b => b < a`) and manually checking that it fails before the code change
+    # 
+https://github.com/servo/servo/pull/46951	(@veyndan, #46951)	android: Make `glThread` immutable (#46951)
+    ^ commit e84dbee53e37fd00171e31f631b407516a2f98ca
+    # By doing the initialisation steps directly in the constructor's initialisation section, we can make `glThread` final as the Java compiler knows that we only initialise `glThread` on instantiation. Previously, we could've theoretically called `init()` from elsewhere, hence we couldn't make the immutable guarantee to Java.
+    # 
+    # Testing: There are no automated tests for Android.
++https://github.com/servo/servo/pull/46829	(@mrobinson, #46829)	 layout: Allow shaping across inline box boundaries (#46829)
+    layout; we can now shape text across inline box boundaries, e.g. `<span>ff</span>i`
+    ^ commit da291ca3c487fa525866776a5bcfdc0c34684a88
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Allow shaping across inline box boundaries by collecting text to shape during
+    # inline formatting context construction in a `ShapingQueue`. The `ShapingQueue`
+    # is responsible for shaping all text as well as placing it into its originating
+    # `TextRun`. The queue is flushed when an incompatible piece of text (using CSS
+    # specification rules) is pushed.
+    # 
+    # Testing: This causes a good number of WPT tests to start to pass.
+    # Fixes: #35397.
+    # 
+https://github.com/servo/servo/pull/46836	(@mrobinson, #46836)	font: Expose `ShapedTextSliceType` to clarify different `ShapedTextSlice`s (#46836)
+    ^ commit 72c9b0c8df5e13d76f0e69ba10075fe0feada0bf
+    # Instead of using two boolean fields that could encode unreachable
+    # behavior, this change makes it so that the `ShapedTextSlice` holds a
+    # type. This type more clearly defines the kinds of `ShapedTextSlice`s
+    # making it easier to read what's happening as they are created and
+    # simplifying the constructor.
+    # 
+    # Testing: This does not change behavior, so should be covered by existing tests.
+    # 
+https://github.com/servo/servo/pull/46955	(@veyndan, #46955)	android: Split `SurfaceHolderCallback` into own class (#46955)
+    ^ commit 40dba3dd1f4cef8b442d5768b8cd4861dfc792da
+    # Responding to `SurfaceHolder` callback events from `GLThread` is confusing, as these callback events are unrelated to thread management. Splitting these out into two separate classes creates a separation of concerns.
+    # 
+    # Testing: There are no automated tests for Android.
+https://github.com/servo/servo/pull/46959	(@jschwe, #46959)	mach: Fix windows servoshell version bump regex (#46959)
+    ^ commit 26c53dbddfc03fa3bd989a193dfe2db1ba5a35ef
+    # Recent refactoring broke `./mach release`:
+    # 
+    # - The path to the `wxs.mako` file is now lowercase.
+    # - The added `InstallerVersion` field meant `./mach release` now changed the wrong field (InstallerVersion instead of version). This is fixed by performing lazy matching, requiring whitespace before `Version`, and not requiring the closing `>` tag after Version anymore.
+    # 
+    # Testing: `./mach release` is not covered by automated tests
+    # 
+https://github.com/servo/servo/pull/46960	(@eachra-bawn, #46960)	webcrypto: Add remaining error messages. (#46960)
+    ^ commit f02ab1bb8f586cccb3927ad3da3c187bbc340b06
+    # Part of: #40756
+    # 
+    # 
+    # 
+    # 
+https://github.com/servo/servo/pull/46956	(@jschwe, #46956)	release: Validate tag before release workflow (#46956)
+    ^ commit d908aa399f3162533d806f628295c73de0b0c9ea
+    # We should consistently use the `v` prefix for real releases. This doesn't completely prevent issues, since the job just creates a release draft, which can be edited manually before publish, but getting the tag right here, makes it less likely to forget to add the `v` prefix.
+    # Motivated by https://github.com/servo/servo/issues/46908.
+    # 
+    # Testing: Not covered by automated tests. Manually verified `0.0.5` fails and `v0.0.5` passes in my fork.
+    # 
+-https://github.com/servo/servo/pull/46962	(@jschwe, #46962)	release: Bump version to 0.5.0 (#46962)
+    ^ commit d6ade2f68725062eb04db7670766aad01192320c
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # Monthly version bump, slightly delayed this time.
+    # Created by running `./mach release 0.5.0`
+    # 
+    # Testing: Not required
+    # 
+>>> 2026-08-05T00:00:26Z
+-https://github.com/servo/servo/pull/46970	(@dependabot[bot], @dependabot[bot], #46970)	build: bump cc from 1.2.67 to 1.4.0 (#46970)
+    ^ commit 76771ba28b6cacbde2335e536646ce434dc04a2d
+    # Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.2.67 to 1.4.0.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/releases">cc's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>cc-v1.4.0</h2>
+    # <h3>Added</h3>
+    # <ul>
+    # <li>support trim paths with clang-cl.exe (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1799">#1799</a>)</li>
+    # </ul>
+    # <h2>cc-v1.3.0</h2>
+    # <h3>Added</h3>
+    # <ul>
+    # <li>inherit path remap rules from cargo trim-paths (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1794">#1794</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md">cc's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2><a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.3.0...cc-v1.4.0">1.4.0</a> - 2026-07-24</h2>
+    # <h3>Added</h3>
+    # <ul>
+    # <li>support trim paths with clang-cl.exe (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1799">#1799</a>)</li>
+    # </ul>
+    # <h2><a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.2.67...cc-v1.3.0">1.3.0</a> - 2026-07-18</h2>
+    # <h3>Added</h3>
+    # <ul>
+    # <li>inherit path remap rules from cargo trim-paths (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1794">#1794</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/413c4ec5b2f45d2ee1f654940df244c09cc9fbb1"><code>413c4ec</code></a> chore(cc): release v1.4.0 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1803">#1803</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/3dcd9ce7437f8bfc6c53966913857b7e293f7ce0"><code>3dcd9ce</code></a> feat: support trim paths with clang-cl.exe (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1799">#1799</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/88968769bcfd2ed391ee6d8b4246b12b2ea90d5e"><code>8896876</code></a> Bump release-plz/action from 0.5.130 to 0.5.131 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1798">#1798</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/095401693030850351da26cd63cb6307592c4f3a"><code>0954016</code></a> chore(cc): release v1.3.0 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1796">#1796</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/e805bf34f25c8b2405737922ef55df11bf2f38f3"><code>e805bf3</code></a> feat: inherit path remap rules from cargo trim-paths (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1794">#1794</a>)</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.2.67...cc-v1.4.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cc&package-manager=cargo&previous-version=1.2.67&new-version=1.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/46971	(@dependabot[bot], @dependabot[bot], #46971)	build: bump async-compression from 0.4.42 to 0.4.43 (#46971)
+    ^ commit 577e946d839dd79fc76482613b5269c51c41bee5
+    # Bumps [async-compression](https://github.com/Nullus157/async-compression) from 0.4.42 to 0.4.43.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/Nullus157/async-compression/releases">async-compression's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>async-compression-v0.4.43</h2>
+    # <h3>Other</h3>
+    # <ul>
+    # <li>Fix hang when decoding a corrupt subsequent zstd frame (<a href="https://redirect.github.com/Nullus157/async-compression/pull/470">#470</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/Nullus157/async-compression/commit/6fd95cff631d19157c4533b717939f25971d50b8"><code>6fd95cf</code></a> chore(async-compression): release v0.4.43 (<a href="https://redirect.github.com/Nullus157/async-compression/issues/471">#471</a>)</li>
+    # <li><a href="https://github.com/Nullus157/async-compression/commit/25e903d013144c57a9a8507a6a2adef61d813908"><code>25e903d</code></a> Fix hang when decoding a corrupt subsequent zstd frame (<a href="https://redirect.github.com/Nullus157/async-compression/issues/470">#470</a>)</li>
+    # <li><a href="https://github.com/Nullus157/async-compression/commit/05af670f2b20d40b44c58341a7fba78085d47933"><code>05af670</code></a> chore(deps): bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/Nullus157/async-compression/issues/469">#469</a>)</li>
+    # <li><a href="https://github.com/Nullus157/async-compression/commit/e6d4ba7d60c235ba4ffbb23bc7450583d733039f"><code>e6d4ba7</code></a> chore(deps): bump codecov/codecov-action from 6 to 7 (<a href="https://redirect.github.com/Nullus157/async-compression/issues/468">#468</a>)</li>
+    # <li>See full diff in <a href="https://github.com/Nullus157/async-compression/compare/async-compression-v0.4.42...async-compression-v0.4.43">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=async-compression&package-manager=cargo&previous-version=0.4.42&new-version=0.4.43)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/46972	(@dependabot[bot], @dependabot[bot], #46972)	build: bump clap from 4.6.4 to 4.6.5 (#46972)
+    ^ commit dcfb42a210c815873a5a5dc582810218e99631ff
+    # Bumps [clap](https://github.com/clap-rs/clap) from 4.6.4 to 4.6.5.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/clap-rs/clap/releases">clap's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v4.6.5</h2>
+    # <h2>[4.6.5] - 2026-07-31</h2>
+    # <h3>Fixes</h3>
+    # <ul>
+    # <li><em>(help)</em> Correctly mark which <code>value_names</code> are optional with <code>num_args</code></li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/clap-rs/clap/blob/master/CHANGELOG.md">clap's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>[4.6.5] - 2026-07-31</h2>
+    # <h3>Fixes</h3>
+    # <ul>
+    # <li><em>(help)</em> Correctly mark which <code>value_names</code> are optional with <code>num_args</code></li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/clap-rs/clap/commit/c8c935504a3f1a015470199ae82c3cb124b5b1d5"><code>c8c9355</code></a> chore: Release</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/af74def7141738c51ace956f58eb32dd94e998ab"><code>af74def</code></a> docs: Update changelog</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/c96f222c35c4ef4bd3ab9927809b2724532a8f6e"><code>c96f222</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/6368">#6368</a> from truffle-dev/fix/fish-env-escaping</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/49a05cdc99c2151cdd48d5ec4c974151d21c026e"><code>49a05cd</code></a> fix(complete): Two-pass quote fish env-completer</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/e791004a5bbbfe5418fe573a4db777df24d72490"><code>e791004</code></a> test(complete): Snapshot fish env quoting cases</li>
+    # <li>See full diff in <a href="https://github.com/clap-rs/clap/compare/clap_complete-v4.6.4...clap_complete-v4.6.5">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=clap&package-manager=cargo&previous-version=4.6.4&new-version=4.6.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/46973	(@dependabot[bot], @dependabot[bot], #46973)	build: bump hybrid-array from 0.4.13 to 0.4.14 (#46973)
+    ^ commit a75f0318b6727974171fb5cf9d77350552244dae
+    # Bumps [hybrid-array](https://github.com/RustCrypto/hybrid-array) from 0.4.13 to 0.4.14.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/RustCrypto/hybrid-array/blob/master/CHANGELOG.md">hybrid-array's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>0.4.14 (2026-07-30)</h2>
+    # <h3>Added</h3>
+    # <ul>
+    # <li>Sizes for <code>sntrup</code> (<a href="https://redirect.github.com/RustCrypto/hybrid-array/issues/231">#231</a>)</li>
+    # </ul>
+    # <p><a href="https://redirect.github.com/RustCrypto/hybrid-array/issues/231">#231</a>: <a href="https://redirect.github.com/RustCrypto/hybrid-array/pull/231">RustCrypto/hybrid-array#231</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/RustCrypto/hybrid-array/commit/1b65ce708c931d27b2a17400d0dad92500f23f30"><code>1b65ce7</code></a> v0.4.14 (<a href="https://redirect.github.com/RustCrypto/hybrid-array/issues/232">#232</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/hybrid-array/commit/6900ce94477272972a24849136b7123c414953f4"><code>6900ce9</code></a> Add sizes for sntrup (<a href="https://redirect.github.com/RustCrypto/hybrid-array/issues/231">#231</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/hybrid-array/commit/8b1d28b97b5d78c41d2cefa226e20e72d7aca3ce"><code>8b1d28b</code></a> Bump typenum from 1.20.0 to 1.20.1 (<a href="https://redirect.github.com/RustCrypto/hybrid-array/issues/224">#224</a>)</li>
+    # <li>See full diff in <a href="https://github.com/RustCrypto/hybrid-array/compare/v0.4.13...v0.4.14">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hybrid-array&package-manager=cargo&previous-version=0.4.13&new-version=0.4.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/46953	(@niyabits, #46953)	crown: allow `std::collections::hash_map::Values` in `unrooted_must_root` lint. (#46953)
+    ^ commit 75ec1dc635009c3da4ee9cff10339e6532eadded
+    # Adds a new case for `is_unrooted_ty` for the `std::collections::hash_map::Values` type.
+    # Removes the cases relating to `accountable_refcell` as the crate was removed: https://github.com/servo/servo/issues/44709 
+    # Refactors existing hashmap `iter()`s that don't use the key to use `values()` instead. 
+    # 
+    # Testing: Added a new run-pass test to validate all pointer-like types in the std library that we currently allow.
+    # Fixes: #46920
+https://github.com/servo/servo/pull/46976	(@kkoyung, #46976)	script: Tidy up comments in `subtlecrypto.rs` (#46976)
+    ^ commit e01c44c0e6a7e3c547baefa820678d28b11aea36
+    # - Add spec link to `struct SubtleCrypto` block.
+    # - Add missing spec links on algorithm registrations.
+    # - Change the regular comments for `DecapsulateOperation` and `GetPublicKeyOperation` to outer documentation comments.
+    # 
+    # Testing: No test since there is no actual code change.
+https://github.com/servo/servo/pull/46978	(@simonwuelker, #46978)	fonts: Remove manual definition of `FT_LOAD_TARGET_LIGHT` (#46978)
+    ^ commit 5bbf8e075acf5824a835603b922199aa3c297ee5
+    # The constant is now included in the bindings, so there's no need for us to re-define it ourselves.
+https://github.com/servo/servo/pull/46965	(@veyndan, #46965)	android: Convert `ServoView` to Kotlin (#46965)
+    ^ commit d325a76433a5151a1540127f69b8e77b8943188a
+    # I've deliberately kept some non-null assertions. They were always there in the Java world, but they weren't explicit. I'm keeping the assertions as converting them to nullable assertions will balloon out the number of decision paths, making this whole class even harder to reason about.
+    # 
+    # Testing: There are no automated tests for Android.
+    # Fixes: #46701
++https://github.com/servo/servo/pull/46963	(@mrobinson, @SimonSapin, #46963)	layout: No longer combine adjacent text nodes into the same `TextRun` (#46963)
+    layout; part of #46829
+    ^ commit 9453067361cf1ac4b5cbdd3f1309947b60ac2bac
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Previously, adjacent text nodes (for instance those separated by a
+    # comment) were combined into the same `TextRun`. This ensured that the
+    # text was shaped together. Servo now supports shaping across node
+    # boundaries, so this is no longer necessary. For selection, it will be
+    # useful for every `TextFragment` to correspond to, at most, one DOM
+    # node.  This change makes that possible.
+    # 
+    # Testing: One WPT test starts to pass as we no longer combine text fragments before BiDi reordering.
++https://github.com/servo/servo/pull/46906	(@mrobinson, #46906)	script: More carefully handle dirty root and descendant damage marking (#46906)
+    crash; fix crash in layout
+    ^ commit 2eab09483c8783c6f516a2d60c1a6ef83bb0f991
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Script passes a dirty root to layout along with setting the
+    # HAS_DIRTY_DESCENDANTS flag on elements at or below that root indicating
+    # that children need to be traversed. There was an undocumented invariant
+    # that no nodes above that dirty root were marked with
+    # HAS_DIRTY_DESCENDANTS, as the flag itself was used to determine
+    # when the dirty root is raised to some common ancestor of the old dirty
+    # root and a damaged node.
+    # 
+    # There were some problems with the old implementation and this change
+    # fixes them by hewing closer to Gecko (from which we took this design).
+    # Notably:
+    # 
+    # - In the complex situation where we cannot trivially calculate the dirty
+    #   root, we now calculate it by walking up from the old dirty root and
+    #   finding the first element which already has the flag set.
+    # - When removing nodes from the flat tree, if they were the previous
+    #   dirty root, the dirty root is cleared.
+    # - Ensure that all marking traversals for the HAS_DIRTY_DESCENDANTS flag
+    #   marking happen in the flat tree.
+    # - When slotting nodes into `<slot>` elements, the style and layout data
+    #   of fallback content is cleared, and the dirty root is potentially reset.
+    # - Comments are added everywhere in this tricky algorithm explaining what
+    #   the heck is going on.
+    # - The new debug assertion for the invariant found a case where we were
+    #   triggering restyles too late before a relayout -- when setting selection flags.
+    #   This is moved earlier in the method.
+    # 
+    # Testing: This change adds a new WPT crash test.
+    # Fixes: #46024.
+    # Fixes: #46883.
+    # 
+https://github.com/servo/servo/pull/46867	(@jschwe, #46867)	deps: Update bundled harfbuzz to 14.2.1 (#46867)
+    ^ commit 679c211fda1cc353b9dbfda908b8be76054abc2a
+    # pending crates.io release
+    # 
+    # Testing: Dependency update, covered by existing tests.
+    # 
+https://github.com/servo/servo/pull/46985	(@Narfinger, #46985)	paint: Switch forgotten IpcChannel to GenericChannel (#46985)
+    ^ commit 655f052f26a6a19438ceaccb40c3cacf6b059608
+    # This just switches the channel for profiling exit msg to GenericChannel to be more consistent.
+    # 
+    # Testing: Does not change functionality.
+    # 
+https://github.com/servo/servo/pull/46983	(@yezhizhen, #46983)	paint: Lock touch panning to its initial dominant axis (#46983)
+    ^ commit 882810b5568a1b7d1e6b10b8443cd0ff870300ad
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Lock a touch pan gesture to the axis dominant at pan-start, for the whole sequence, to match FF/Chrome.
+    # The video in https://github.com/servo/servo/issues/46954 explains visual difference better.
+    # 
+    # Testing: For existing test `/pointerevents/touch-action-with-swipe-dir-change.html`,
+    # - New Passing in: 
+    # touch-action:pan-x with right,down swipe
+    # touch-action:pan-y with down,right swipe
+    # - New failure in:
+    # touch-action:auto with right,down swipe
+    # touch-action:auto with down,right swipe
+    # 
+    # The passing/failure are accidental, as we don't support `touch-action` yet, which controls gesture within element's region.
+    # 
+    # For right, down, we would now only move horizontally. This matches `pan-x` expectation, but fails `auto` which expects both axis to move.
+    # 
+    # Also added a new test similar to `touch-action-with-swipe-dir-change.html` to match our issue. This reuses logic introduced in https://github.com/web-platform-tests/wpt/pull/57804 to avoid accelerated scrolling & out of bound error, as we scroll the viewport.
+    # 
+    # Fixes: https://github.com/servo/servo/issues/46954 which has strange jitter when we pan.
+    # 
+https://github.com/servo/servo/pull/46981	(@Narfinger, #46981)	script: Cleanup custom node dirty inclusive ancestor walk (#46981)
+    ^ commit 21faece5673d75323f6c3084d0dc96e754b4f8ba
+    # This replaces the custom method in Node::dirty to do an inclusive ancestor walk without rooting with our unrooted iterator, cleaning up the code.
+    # This requires no_gc to be propagates through places.
+    # 
+    # Testing: This should not change functionality.
+    # 
+https://github.com/servo/servo/pull/41309	(@Narfinger, #41309)	OHOS: More efficient window buffer mode (#41309)
+    ^ commit 5ad865393fdef9b45e9c0c17dbc410e2f9b335c5
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # According to https://developer.huawei.com/consumer/en/doc/harmonyos-faqs/faqs-arkgraphics-2d-14 we can enable a performance hint here.
+    # 
+    # Signed-off-by: Narfinger <Narfinger@users.noreply.github.com>
+    # 
+    # Testing: Tested on device and it doesn't crash.
+    # 
+https://github.com/servo/servo/pull/46988	(@jdm, #46988)	constellation: Do not request permission for initial about:blank loads. (#46988)
+    ^ commit 66d034cfc8cbd9824da5a4a19164f1afb063c678
+    # The initial about:blank document is intended to be synchronously available. Our current implementation is too tied to our asynchronous navigation infrastructure, and this gets in the way of the work happening in #46975. This change removes one source of intermittent failures due to timing when a test attempts to navigate the initial about:blank shortly after it is created—when the constellation observes that there is a pending navigation approval for the about:blank, it will silently discard any navigation attempt for the pipeline. I expect to revisit this later after we have decoupled about:blank from our asynchronous navigation infrastructure.
+    # 
+    # Testing: Not observable behaviour within WPT except via timing changes in tests that involve navigating about:blank iframes/windows.
+    # Fixes: part of #43149
+    # 
+>>> 2026-08-05T23:44:36Z
+-https://github.com/servo/servo/pull/46994	(@veyndan, #46994)	android: Inline `InitOptions` (#46994)
+    ^ commit 8d959efeb696b493de0e7ede89dcfc54a6e25f2b
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # This can be seen as the Rust equivalent to #46916. Wrapping some of these `init()` options in a `struct` and then immediately unwrapping them makes the code harder to following by being a bit obtuse.
+    # 
+    # Testing: There are no automated tests for Android.
+-https://github.com/servo/servo/pull/47000	(@dependabot[bot], @dependabot[bot], #47000)	build: bump rustls from 0.23.42 to 0.23.43 (#47000)
+    ^ commit cc5aa44dc3e13b60eb93973a9b2969cf976f8232
+    # Bumps [rustls](https://github.com/rustls/rustls) from 0.23.42 to 0.23.43.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rustls/rustls/commit/fcf61cdbba30913cfd5b40aefa83989c6233812d"><code>fcf61cd</code></a> Prepare 0.23.43</li>
+    # <li><a href="https://github.com/rustls/rustls/commit/f0dad4c57112955eb1f4fa2f076458329b4221b3"><code>f0dad4c</code></a> Check server's proposed suite against actual offer</li>
+    # <li><a href="https://github.com/rustls/rustls/commit/b480cc674c5229cbd56d0551d1fc0e32839e5fdd"><code>b480cc6</code></a> Test for server choosing a non-QUIC TLS1.3 suite</li>
+    # <li><a href="https://github.com/rustls/rustls/commit/883a44d45aa3e8fd6db56b3429c3156cc28d737b"><code>883a44d</code></a> Consider <code>Protocol</code> in <code>ServerConfig::supports_version</code></li>
+    # <li><a href="https://github.com/rustls/rustls/commit/c2f1fd9c38e53f2c902a2481f4f78ae8aaa37e64"><code>c2f1fd9</code></a> Check suitability of server version in QUIC client</li>
+    # <li><a href="https://github.com/rustls/rustls/commit/d98e1b9ea10138f6dddfe48f5440dc0aa95e22cc"><code>d98e1b9</code></a> Add test for server <code>Tls13RequiredForQuic</code></li>
+    # <li><a href="https://github.com/rustls/rustls/commit/e63d9bf2c0c8f67932a0941890d36845329f7abe"><code>e63d9bf</code></a> Bound ticket age calculation</li>
+    # <li><a href="https://github.com/rustls/rustls/commit/79cd46294ccb50f6a5faac9a67857e3201ddba2a"><code>79cd462</code></a> Defensiveness improvement for binder suffix arithmetic</li>
+    # <li><a href="https://github.com/rustls/rustls/commit/4a9f025d50e6b98ebaa0ccb35c416998f51776d0"><code>4a9f025</code></a> use checked_sub for the mac tag offset in Rfc5077Ticketer::decrypt</li>
+    # <li><a href="https://github.com/rustls/rustls/commit/3131e5c307591c0627cd670ec2585657661093d9"><code>3131e5c</code></a> Accept that libcrux deps are vulnerable</li>
+    # <li>Additional commits viewable in <a href="https://github.com/rustls/rustls/compare/v/0.23.42...v/0.23.43">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls&package-manager=cargo&previous-version=0.23.42&new-version=0.23.43)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47003	(@dependabot[bot], @dependabot[bot], #47003)	build: bump bytemuck from 1.25.1 to 1.25.2 (#47003)
+    ^ commit a8c9c9007a648e29621666fdd90ec8c7ab5eec1b
+    # Bumps [bytemuck](https://github.com/Lokathor/bytemuck) from 1.25.1 to 1.25.2.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/Lokathor/bytemuck/blob/main/changelog.md">bytemuck's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>1.25.2</h2>
+    # <ul>
+    # <li>implement NoUninit for char, bool, NonZero* arrays</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/Lokathor/bytemuck/commit/f363643e951a7ac9e4b9921de982f2b0918902e3"><code>f363643</code></a> chore: Release bytemuck version 1.25.2</li>
+    # <li><a href="https://github.com/Lokathor/bytemuck/commit/3de980b403470219a41a6ff9e62bb21fbd15c24f"><code>3de980b</code></a> changelog</li>
+    # <li><a href="https://github.com/Lokathor/bytemuck/commit/1d05bec37e3c850151b4856024efa78c04807887"><code>1d05bec</code></a> implement <code>NoUninit</code> for <code>char</code>,<code>bool</code>,<code>NoZero*</code> array (<a href="https://redirect.github.com/Lokathor/bytemuck/issues/350">#350</a>)</li>
+    # <li>See full diff in <a href="https://github.com/Lokathor/bytemuck/compare/v1.25.1...v1.25.2">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bytemuck&package-manager=cargo&previous-version=1.25.1&new-version=1.25.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/46991	(@jschwe, #46991)	canvas: Limit worker threads for vello_cpu (#46991)
+    ^ commit 49fa5106cac95620e985ede1c0ddf744709e6c62
+    # The default implementation (as of 0.0.9) spawns too many threads:
+    # 
+    # ```
+    # num_threads: (std::thread::available_parallelism()
+    #                 .unwrap()
+    #                 .get()
+    #                 .saturating_sub(1) as u16)
+    #                 .min(8),
+    # ```
+    # 
+    # We override this and define a minimum canvas size to use multi-threading and limit the amount of threads to 3, since upstream docs suggest 2-4 is usually best.
+    # I don't see an immediate need to add a pref! to finetune the behavior, but could be an idea for the future.
+    # 
+    # Testing: No functional changes. No automated performance tests for canvas.
+    # 
+    # 
+-https://github.com/servo/servo/pull/46989	(@TimvdLippe, #46989)	script: Move form controls into form_controls (#46989)
+    ^ commit a7a5eff507bf4054c93020d12535ecd80b810087
+    # Testing: it compiles
+    # Part of #46329
+https://github.com/servo/servo/pull/46986	(@mrobinson, #46986)	script: Only note dirty `Element`s (#46986)
+    ^ commit 61f178247759dfe44416d0d025eec3a73e9123f8
+    # In practice this is always the case, except when the `Document` itself
+    # is marked. In that case, we just need to do some bookkeeping for removed
+    # documents. This changes removes a long-standing FIXME and simplifies the
+    # way the dirty root is calculated quite a bit.
+    # 
+    # Testing: This should not change behavior so is covered by existing tests.
+    # 
+https://github.com/servo/servo/pull/47005	(@jdm, #47005)	script: Prevent borrow hazards in Element::ensure_rare_data. (#47005)
+    ^ commit 6e8d1679605b48e4c4181e6411a30cf3623a3589
+    # Element::ensure_rare_data returns a dynamic mutable borrow, so by using safe_borrow_mut we can statically prevent multiple lurking borrow hazards. First noticed in an unexpected test failure in #46990.
+    # 
+    # Testing: Existing test coverage suffices.
+    # Fixes: #47004
+    # 
++https://github.com/servo/servo/pull/46980	(@RichardTjokroutomo, @yezhizhen, #46980)	script: Fire `focusin`/`focusout` (#46980)
+    dom; partial impl ‘focusin’ and ‘focusout’ events, except with <iframe>
+    ^ commit c17ddb2cdf641e1935fa175b2199bda059e4ad1b
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Add basic support for `focusin`/`focusout` `FocusEvent` type.
+    # The code fires focusin/focusout **unconditionally** alongside focus/blur. Same-document scenarios work correctly, but cross-document cases (e.g. across iframes) have known gaps because FocusEvent's impl is not complete yet:
+    # https://github.com/servo/servo/blob/49fa5106cac95620e985ede1c0ddf744709e6c62/components/script/dom/document/focus.rs#L273. Cross-document support will be addressed in a follow-up (subtask 2 of #46979).
+    # 
+    # Also fix a minor issue, to set composed flag for https://html.spec.whatwg.org/multipage/interaction.html#fire-a-focus-event
+    # 
+    # Testing: Existing WPT tests. There are some new passing & failling tests. For detail, see https://github.com/servo/servo/pull/46980#issuecomment-5177445471
+    # Fixes: part of #46979 
+    # 
+https://github.com/servo/servo/pull/46982	(@mrobinson, @SimonSapin, #46982)	layout: Unify the way that selection is represented in the box tree (#46982)
+    ^ commit f785b0658aa5d89683ca2e43b107995cbb654f61
+    # Previously, document selection and form control selection were handled
+    # through different paths in layout. This change makes it so that they
+    # share more of the same code. Selection is now always handled
+    # per-`TextRun` rather than at the IFC level. This will simplify the way
+    # that text offsets are calculated during hit testing.
+    # 
+    # Testing: This should not change observable behavior so should be
+    # covered by existing tests.
+    # 
+https://github.com/servo/servo/pull/46856	(@niyabits, #46856)	script: fix worklet implementation to fetch modules instead of classic scripts (#46856)
+    ^ commit 086a3d63f099c68749f0510668425c29abb0ebbd
+    # Fix the existing Worklet implementation by adding the necessary infrastructure for fetching modules (e.g., implementing task manager on Worklet) and using our implementation of `fetch a worklet/module worker script graph` instead of fetching classic scripts using `load_whole_resource`.    
+    # 
+    # Testing: Tests in `tests/wpt/mozilla/tests/mozilla/worklets` already cover the changes, some fixes were made to comply with the specs.
+    # 
+    # Fixes: https://github.com/servo/servo/issues/45306
+https://github.com/servo/servo/pull/46990	(@jdm, @aniebietafia, #46990)	script: Make `performance.timing` a PerformanceTiming object (#46990)
+    ^ commit 68fdd5155964f83342bf7384b4db868f56db49be
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Rebased and expanded version of #36441. These changes ensure the document load timing information is shared between the various interfaces that use it so we don't need to duplicate the code that marks when certain events occur.
+    # 
+    # Testing: New passing tests.
+    # Fixes: #33334
+    # Fixes: #36171
+    # 
+https://github.com/servo/servo/pull/46891	(@calvaris, #46891)	media: avoid crash in pulsesink (#46891)
+    ^ commit c03e7adb28a7e554545c8dbb858716dcd8367f80
+    # Hold a reference to pulsesink to avoid the crash. Real fix will be in https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12194 .
+    # 
+    # Fixes: https://github.com/servo/servo/issues/46251
+    # 
+https://github.com/servo/servo/pull/47016	(@niyabits, #47016)	script: Move `WorkletThreadPool` intialization out of `ScriptThread` (#47016)
+    ^ commit 6ca7f7d5808a7075c17e7cad3cecc926eb9cf0af
+    #  This PR is a part of refactoring Worklet for implementing AudioWorklet
+    # 
+    # Remove Worklet Thread Pool from `ScriptThread`.
+    # The Worklet Thread Pool is currently unused by the `ScriptThread`.
+    # 
+    # For `AudioWorklet`s, each `AudioContext` will need its own `Worklet`, so `Worklet`s can be defined on the `AudioContext`.
+    # 
+    # For the Paint Worklet, the initialization will be done by `Window` in a follow up PR. 
+    # 
+    # Testing: existing worklet WPT covers the changes. 
+https://github.com/servo/servo/pull/47015	(@mrobinson, @SimonSapin, #47015)	layout: Add `TextFragmentRunData` (#47015)
+    ^ commit 8e22026ef30d53b20f8fc8d6cb92b14c8e846d62
+    # Add a shared data structure to be used with all `TextFragment`s that
+    # are generated by a `TextRun`. The idea here is that no matter how many
+    # `TextFragment`s a `TextRuns` generates, the shared data is only in
+    # memory once. This opens up the way for exposing more data (such as the
+    # `InlineFormattingContext`'s `OffsetMap`) on each `TextFragment`. This
+    # will be used converting glyph offsets into DOM offsets and for
+    # incremental layout of `Document` selections. Longer-term the in-memory
+    # size of `TextFragment`s will be minimized using an approach like this.
+    # 
+    # Testing: This should not change observable behavior so is covered by existing tests.
+    # 
++https://github.com/servo/servo/pull/47014	(@lumiscosity, #47014)	constellation: Remove broken built-in sampling profiler (#47014)
+    api; breaking. WebView::toggle_sampling_profiler has been removed. use samply instead <https://book.servo.org/contributing/profiling.html#sampling-profiling>
+    ^ commit 69de7f3dc8b5bdf61e0ad0f940d859771893963d
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # As discussed [on Zulip](https://servo.zulipchat.com/#narrow/channel/263398-general/topic/Poking.20at.20the.20built-in.20sampling.20profiler/with/613859819), there's no reason to keep this maintained when better profiling solutions exist. The removal includes the code in Servo as well as the tool for converting from this profiler's output to the Firefox profiler.
+    # 
+    # This includes an embedder API change, since toggling the profiler was exposed to the embedder to make the keybind work.
+    # 
+    # Companion book PR will be made shortly.
+    # 
+    # Testing: Manual - it compiles and Ctrl+P no longer does anything
+    # 
+https://github.com/servo/servo/pull/46950	(@jschwe, #46950)	deps: Do not enable the `webrender` `capture` feature (#46950)
+    ^ commit 1df1dba0e1de2726ef142f4a67d179b7321cf5ce
+    # The feature isn't needed in production, only for debugging. Since we can't make features conditional on profiles. we disable the capture feature. It can still be enabled if necessary, but that should be rare.
+    # This removes ~1MB binary size.
+    # 
+    # Testing: It compiles
+    # Fixes: #46685
+    # 
++https://github.com/servo/servo/pull/47022	(@mrobinson, @SimonSapin, #47022)	layout: Map between pre-transformed and post-transformed selection offsets during display list construction (#47022)
+    layout; fix rendering of selections in <input> and <textarea> with ‘text-transform: uppercase’ etc
+    ^ commit 58a582c5b29784df8ba35953dd72e475f6fc1737
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # There are two types of DOM-node-relative text offsets to consider in
+    # layout. One is pre-transformed, that is before any white space collapse
+    # or `text-transform` is applied to the node's text content. This is how
+    # selections are stored, so that they can be updated without triggering a
+    # full layout. The other is post-transformed, that is after white space
+    # collapse and `text-transform`. This is how glyph character advances are
+    # measured. This changes moves the mapping from the first to the second to
+    # display list construction, so that it is done also for form control
+    # selections. This fixes the behavior of visual selections and
+    # `text-transform` in form control elements and is also foundational for
+    # ensuring that the reverse transform can happen during hit testing.
+    # 
+    # Testing: This change adds a new WPT test.
+    # 
+https://github.com/servo/servo/pull/43376	(@shubhamg13, #43376)	layout: Pass `poster_url` for `LargestContentfulPaint` Entry (#43376)
+    ^ commit dce660c1921fe1a1e34d96a6535ec34b7073d8fc
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Fetches the `poster_url` from `HTMLVideoElement` and pass it for `LargestContentfulPaint`
+    # 
+    # Testing: More WPT Passed
+    # Fixes: Part of #42000 
+    # 
+>>> 2026-08-07T01:16:51Z
+-https://github.com/servo/servo/pull/47034	(@dependabot[bot], @dependabot[bot], #47034)	build: bump ipnet from 2.12.0 to 2.12.1 (#47034)
+    ^ commit 5128b4cffee29be705068dabb0c2ab91c2627a3e
+    # Bumps [ipnet](https://github.com/krisprice/ipnet) from 2.12.0 to 2.12.1.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/krisprice/ipnet/blob/master/RELEASES.md">ipnet's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>Version 2.12.1</h2>
+    # <ul>
+    # <li>Fixes bug where Ipv4Subnets(0.0.0.0, u32::MAX-1, 0) and Ipv6Subnets(::, u128::MAX-1, 0) incorrectly included u32::MAX and u128::MAX. See issue <a href="https://redirect.github.com/krisprice/ipnet/issues/70">#70</a>.</li>
+    # <li>Fixes some typos in documentation and error messages</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li>See full diff in <a href="https://github.com/krisprice/ipnet/commits">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ipnet&package-manager=cargo&previous-version=2.12.0&new-version=2.12.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47037	(@dependabot[bot], @dependabot[bot], #47037)	build: bump libredox from 0.1.18 to 0.1.19 (#47037)
+    ^ commit 803ce95d4f7d516a021e04149867b7e5da58b51b
+    # Bumps libredox from 0.1.18 to 0.1.19.
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=libredox&package-manager=cargo&previous-version=0.1.18&new-version=0.1.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47038	(@jschwe, #47038)	fonts: Optimize hasher by using `FxHashMap` in CachedShapeData (#47038)
+    ^ commit 0d31f6f3ebc6808fa7fd45f88f4a236f101e9cd9
+    # For they glyph caches using the faster FxHasher should be fine from a DoS perspective and FxHashMap should probably be the default choice for integer / integer-like keys. For shaped_text we keep the standard hashmap since it contains a web controlled string. I don't expect this change to be measurable (and i didn't attempt to), it's a drive-by change while looking at surrounding code.
+    # 
+    # Testing: No observable behavior change, so existing tests should suffice.
+    # 
+https://github.com/servo/servo/pull/46851	(@shubhamg13, #46851)	wpt: Add tests for LCP element removed after paint (#46851)
+    ^ commit b74b0418b44182a8e82a0544c7a23b868e56cf3c
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Adding new WPT tests for LCP element removed. 
+    # 
+    # There is one existing test [element-only-when-fully-active.html](https://github.com/web-platform-tests/wpt/blob/master/largest-contentful-paint/element-only-when-fully-active.html). But contains `Text` (missing support in Servo yet) inside iframe.
+    # 
+    # So, adding simpler version with image. 
+    # 
+    # Testing: No Code changes.
+    # 
+https://github.com/servo/servo/pull/47040	(@jschwe, @mrobinson, #47040)	ci: Add sccache for faster try wpt builds in forks (#47040)
+    ^ commit 44ab2c88f0476609576eb6f33f0751ab9aca4d71
+    # [trial run (pushed to main)](https://github.com/jschwe/servo/actions/runs/31079634622/job/92545361508) in my fork, shows that the variables take effect, so based on our previous experience it should just work.
+    # 
+    # Testing: CI changes are not covered by automated tests.
+    # Fixes: #46635
+    # 
+https://github.com/servo/servo/pull/47039	(@shubhamg13, #47039)	layout: Report LCP only once per element (#47039)
+    ^ commit d32404331defffd789ef4fe468d3e3f28ec1a6dc
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Adds a HashSet for LCP Nodes to check if they are already reported.
+    # 
+    # Testing: Additional WPT
+    # Fixes: Part of #42000
+    # 
+https://github.com/servo/servo/pull/46958	(@janeoa, @jdm, #46958)	 canvas: report malloc sizeof vello_cpu (#46958)
+    ^ commit fefcb83a2b44ccedcc8bd29bd45d40019561f5a5
+    # I've added the `malloc_size_of` as a dependancy, so that we `impl MallocSizeOf for vello_cpu::Pixmap`
+    # Added a `memory_report` to the canvas. 
+    # As we have two backends (vello and vello_cpu), I did one common `CanvasStoreSizesPerType` to report them in the `backend.rs`.
+    # Added `mem_profiler_chan.clone()` to the constellation.
+    # 
+    # Vello_cpu does have a nice 
+    # ```rust
+    # /// Returns a reference to the underlying data as premultiplied RGBA8.
+    # ///
+    # /// The pixels are in row-major order.
+    # pub fn data(&self) -> &[PremulRgba8] {
+    #     &self.buf
+    # }
+    # ```
+    # to hook into. But for the Vello I have left a `TODO` instead and report 0.
+    # 
+    # <img width="416" height="301" alt="image" src="https://github.com/user-attachments/assets/05cca5af-1957-4a21-a67e-84b77a2677b1" />
+    # 
+    # Testing: I have no auto tests, but I did spawn some canvases and saw them being reported. 
+    # Fixes: https://github.com/servo/servo/issues/46785
+    # 
+https://github.com/servo/servo/pull/47020	(@Loirooriol, #47020)	layout: Fix interaction of margin and stretch size on block-level box inside inline box (#47020)
+    ^ commit 7b34e567726cf4424ec04f16ddcaa67633eb1b39
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # For the purpose of resolving a stretch size of a block-level in the block axis, sometimes we need to treat margins as zero. The spec said to check a condition on the parent.
+    # 
+    # However, it wasn't clear what to do inside of an inline formatting context, since the parent is an inline box. Then we were never treating margins as zero.
+    # 
+    # But in https://github.com/w3c/csswg-drafts/issues/13260 the CSSWG has resolved to check the condition on the containing block.
+    # 
+    # So this amends #35904 to implement the new resolution.
+    # 
+    # Testing: Adding a test
+    # 
++https://github.com/servo/servo/pull/46232	(@Taym95, #46232)	script: Deliver animation frames to dedicated workers (#46232)
+    dom; requestAnimationFrame() and cancelAnimationFrame() in web workers (DedicatedWorkerGlobalScope)
+    ^ commit 12c190817bde4fb823a6cbb615a4c27d6259d369
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # this exposess AnimationFrameProvider on DedicatedWorkerGlobalScope, stores and cancels worker rAF callbacks on the worker global, and delivers callbacks through the worker event loop
+    # 
+    # Testing: 
+    # tests/wpt/tests/workers/WorkerGlobalScope_requestAnimationFrame.worker.js 
+    # tests/wpt/tests/workers/worker-request-animation-frame.html 
+    # tests/wpt/tests/html/dom/idlharness.any.js
+    # 
+    # 
+    # 
+https://github.com/servo/servo/pull/47029	(@jschwe, #47029)	fonts: Eagerly memory-map local FreeType fonts (#47029)
+    ^ commit c0c4dbe78f37723f0d1fdbbba8871ded0afee00e
+    # Since the font data is memory mapped anyway, we can simply move the memory mapping up and create the `face` via `new_from_memory`. With the bundled freetype new_from_file is not backed with mmap (see #46808).
+    # 
+    # We can then simplify `FreeTypeFace` and remove the load from file path, and improve the `new_from_memory` safety, by storing the backing memory in the FreeTypeFace struct, so the type system ensures we don't accidentally free the backing memory.
+    # 
+    # In the example from #45199 tested on a HarmonyOS device this removes around ~1 ms of kernel-time per frame (~85% reduction of time spent in kernel in that thread), since the file-based read would execute many times, when accessing glyph information.
+    # 
+    # Testing: This should not change any behavior, hence covered by existing tests
+    # 
++https://github.com/servo/servo/pull/47030	(@Ms2ger, #47030)	script: Pass the prefix from the parser when creating attributes (#47030)
+    dom; properly impl prefix property on Attr (notably when created by parser)
+    ^ commit dda6e3d11dd0f033d7e2bde06a760972b474e705
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Follow-up to #46868: now passing the correct prefix and qualified name when creating elements from the parser.
+    # 
+    # Testing: WPTs now pass.
++https://github.com/servo/servo/pull/44032	(@jschwe, #44032)	allocator: Make jemalloc code optional (#44032)
+    api; new features cargo -p servo --features default_web_features bundled
+    ^ commit b29cc74b7cb51976ade6481949f1ea91545b9fd0
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # Add a feature, so we can avoid compiling the tikv-jemalloc crates, when they are not needed.
+    # Reviewer feedback requested the jemalloc and and the system allocator backends to be mutually exclusive, meaning that `use-system-allocator` and the new `use-jemalloc` feature shouldn't be able to be used together.
+    # That leads to the removal of the `use-system-allocator`  feature, since we can also detect the absense of custom allocator features instead, which means we remove on error path. 
+    # For convenience purposes, this PR also adds feature groups, which bundle certain features: Our default web features, and bundled options. In servoshell we consolidate those into a `default_without_allocator` feature, so that in our ASAN build we can use the system allocator, while keeping other default dependencies.
+    # 
+    # These feature groups should also be more generally useful, e.g. if we start feature-gating more web-platform features.
+    # 
+    # 
+    # Testing: Requires manual testing, to test the non-default allocator (system allocator) is still selected via `./mach build --no-default-features --features default_without_allocator`.
+>>> 2026-08-08T23:20:57Z
++https://github.com/servo/servo/pull/47018	(@jschwe, #47018)	canvas: Add pref to control thread_pool_canvas_workers (#47018)
+    perf; new pref to configure number of worker threads for rasterising 2D canvas (--pref thread_pool_canvas_workers=3)
+    ^ commit d149710e4b19626d67429169c2fa1c1e38b26243
+    ^ /!\ may contain changes to feature flags
+    # Local experimentation showed that after pinning canvas threads to non-little cores, I can't observe a performance benefit on my device using multithreading.
+    # The potential benefits of multithreading likely highly vary depending on the scenario and device, so having a pref to be able to turn off multithreading or fine-tune the workers, seems useful.
+    # 
+    # Testing: No behavior change.
+    # 
+    # 
+https://github.com/servo/servo/pull/47025	(@mrobinson, @SimonSapin, #47025)	layout: Take `OffsetMap` into account when getting glyph character index (#47025)
+    ^ commit 93b30d41e4414ce3d9214b789f832d9a076531c0
+    # When text is transformed by `InlineFormattingContext` construction, we
+    # keep an `OffsetMap` to map between indices pre-and-post-transform.
+    # This change ensures the map is used when mapping back to
+    # pre-transformed DOM indices, meaning that moving the edit point with
+    # the mouse in `<textarea>` that has a CSS `text-transform` or is
+    # subject to white space collapse works properly.
+    # 
+    # Testing: A Servo-specific WPT test is added for this change as it depends on mouse interaction behavior.
+    # 
+https://github.com/servo/servo/pull/47046	(@lumiscosity, #47046)	script: Move srcset-related structs and functions out of HTMLImageElement (#47046)
+    ^ commit 3ee1205e3fcc0cb8c68f79bfda5a5d9a4fc8d82d
+    # This is a prerequisite for implementing the `imagesrcset` attribute on `<link>` elements. Not 100% on the final placement of this file or the visibility changes (I just did the simplest changes to get it compiling), some feedback would be appreciated.
+    # 
+    # Testing: Internal refactoring only - compilation is the test.
+    # Fixes: Part of #47024.
+https://github.com/servo/servo/pull/46476	(@Narfinger, @jdm, #46476)	script: Do not load all fonts for SVG font database (#46476)
+    ^ commit b3a63fd3bcb520be56bf25bc89df3b967d53ec64
+    # Currently the SVG font database loads all system fonts at the start and also inserts any fonts it loads.
+    # This removes both of these.
+    # Additionally, we add a small cache that handles the returned fontdb::IDs if they are already entered.
+    # This will also improve the startup time of constellation (and hence everything depending on it) as we do not need to wait for all fonts to be loaded.
+    # 
+    # Testing: WPT test run https://github.com/Narfinger/servo/actions/runs/30888001779
+    # 
+-https://github.com/servo/servo/pull/47055	(@dependabot[bot], @dependabot[bot], #47055)	build: bump xml-rs from 0.8.28 to 0.8.29 (#47055)
+    ^ commit 7d089afbc1ec575bc4c3d0e1e760222d58cbcb96
+    # Bumps [xml-rs](https://github.com/kornelski/xml-rs) from 0.8.28 to 0.8.29.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/kornelski/xml-rs/commit/33cdf417b112c0ebd1f0858b2a67464b3712a4c6"><code>33cdf41</code></a> Fix xmlns serialization</li>
+    # <li>See full diff in <a href="https://github.com/kornelski/xml-rs/compare/0.8.28...0.8.29">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=xml-rs&package-manager=cargo&previous-version=0.8.28&new-version=0.8.29)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/43378	(@shubhamg13, #43378)	layout: Add `effective_visual_size` to `PaintTimingHandler` (#43378)
+    ^ commit 30bba6d1fb3da2f408c520a8c372c595f59c3907
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Align size calculations as much as possible close to W3C specs
+    # 
+    # Testing: More WPT Passed
+    # Fixes: Part of #42000
+    # 
+https://github.com/servo/servo/pull/46843	(@jschwe, @mrobinson, #46843)	perf: add initial threadboost mechanism (for ohos). (#46843)
+    ^ commit 290a778fef23a5b4389800c0793ac912b3f5746c
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    ^ /!\ may contain changes to feature flags
+    # The abstraction design will need to be iterated on, especially since the implementation might diverge strongly based on the target platfrom. On non heterogeneous platforms, we probably don't need to do anything, since all cores are equal. 
+    # 
+    # Background: On a harmonyos device the spread-out nature of servo, with threads calling out to other threads, doesn't interact well with the default scheduler, since the threads on the critical path might not be busy enough (consecutively) to be boosted to a medium or large core. Since the little cores on this device are ~1/3-1/4 as capable as the medium/large ones (according to the sysfs capability metric) this can have a large impact on performance.
+    # 
+    # Improvements on ohos:  
+    # - a moderate 8% reduction in LCP on wikipedia.
+    # - For the reproducer in #45199 it is very noticable and boosts the framerate to 60 fps, where it is capped. With active touch input which raises the display frequency to 120hz, we reach ~74fps.
+    # In speedometer on my test-device the test score improves by ~50%. 
+    # 
+    # This PR should be seen as a first step towards #46813. The abstraction itself as is, is not great, but partially also can't be avoided since mechanisms will diverge depending on the platform. Part of the reason this PR works as well as it does, despite only explicitly prioritising 3 threads, is that all child threads spawned after the thread affinity mask takes effect inherit the affinity mask (which is an implementation detail of the ohos platform, since other platforms likely would not want to use affinity masks). The thread priority set via `OH_QoS_SetThreadQoS` only affects the current thread and not any children.
+    # 
+    # Note: I also checked, and notably chromium on ohos doesn't use thread affinity masks. However, it does more work on the main thread, which seems to interact better with the scheduler heuristics since it is boosted to medium cores under load (or perhaps the scheduler is aware of important chromium threads, since it is an important system app).
+    # 
+    # Testing: We currently don't measure production performance before merging to main. 
+    # 
+    # 
+https://github.com/servo/servo/pull/47047	(@jschwe, #47047)	allocator: Enable jemalloc stats feature (#47047)
+    ^ commit df0cbe45218f7ab28911a1e6872b79459ab91acb
+    # We need to enable this feature to get the jemalloc related statistics in `about:memory`, otherwise they will not appear.
+    # 
+    # Testing: Not covered by automated tests
+    # 
+https://github.com/servo/servo/pull/47048	(@SimonSapin, @mrobinson, @mrobinson, #47048)	Resolve DOM/glyph positions during hit testing (#47048)
+    ^ commit bffc115a9ffce4347d69f244e89dcd37a8bbaadd
+    # Previously, finding a glyph closest to a viewport point was handled after hit testing, deeper in the `<input>`/`<textarea>` code. Since this will soon need to be shared with interactive update of `Document` selection, this change moves it to hit testing itself. When the hit test hits a `TextFragment` directly, this avoids a `FragmentTree` walk. In general, we should know that some input events will need this information and some will not. For instance, when a mouse button is pressed we likely need it, because selection is ongoing. This allows us to opt in to this extra work when asking for the hit test. This can eventually give us a more faithful update of the "sequential focus navigation starting point" which currently cannot be placed inside of text nodes.
+    # 
+    # In addition, this change moves away from the "element from point" terminology to "hit test" for the query name. Not everything returned is an `Element`, most obviously text nodes in this case.
+    # 
+    # Testing: This should not change observable behavior so is covered by existing tests. 
+https://github.com/servo/servo/pull/47049	(@jdm, #47049)	script: Root less in Slottable::find_a_slot. (#47049)
+    ^ commit 826e2533547e72cd7bbf1064afe5d3f069957136
+    # This saves 300ms of 1.6s in the testcase from #47021.
+    # 
+    # Testing: Existing tests suffice.
+    # Fixes: part of #47021.
+    # 
+https://github.com/servo/servo/pull/47060	(@TimvdLippe, #47060)	script: Move individual interfaces into subfolders (#47060)
+    ^ commit 33036ffe35a414338e4ea751f3244c15d530efe8
+    # All of these are used in 1 (or very few) place. Therefore, move them to the subfolder where they are used.
+    # 
+    # Part of #38901
+    # 
+    # Testing: it compiles.
+-https://github.com/servo/servo/pull/47059	(@TimvdLippe, #47059)	script: Move HTML elements into `embedded_content/` (#47059)
+    ^ commit 79e2c7a88278bb5408ed47693bcaf13ce98dd8c0
+    # Part of #46329
+    # 
+    # Testing: it compiles
+https://github.com/servo/servo/pull/47065	(@TimvdLippe, #47065)	script: Move script modules logic into subfolder (#47065)
+    ^ commit 9fce1ea3392f4f1f4fb4821ff6168734e93d2148
+    # This moves the two files related to script modules into a dedicated subfolder. It also splits up the import map logic from `script_module`, since that file is doing too many different things.
+    # 
+    # Testing: it compiles
+https://github.com/servo/servo/pull/47066	(@Narfinger, #47066)	script: Remove unnecessary clone on HTMLScriptElement::prepare_the_script_text (#47066)
+    ^ commit 46ff931c783484dae5102f706921e44d1b216591
+    # This should not need a clone to compare two domstrings.
+    # 
+    # Testing: WPT test should find if this was necessary for some reason.
+    # 
+-https://github.com/servo/servo/pull/47063	(@TimvdLippe, #47063)	script: Move HTML elements into `tabular_data/` (#47063)
+    ^ commit da5f46f1b7a093630d1f320deccfabe8e01f60f8
+    # Part of #46329
+    # 
+    # Testing: it compiles
+https://github.com/servo/servo/pull/47051	(@treetmitterglad, #47051)	script: Fix GC borrow hazard in HTMLImageElement::abort_request (#47051)
+    ^ commit ce73989df3f11b205d6453f5d5f566b0c6232c8c
+    # Rewrote GC handling in the `abort_request` function to prevent potential crashes due to conflicts with the GC during mutable borrows, and to perform immutable borrows when possible.
+    # 
+    # Testing: Ran `./mach test-wpt tests/wpt/tests/html/semantics/embedded-content/the-img-element/ `, 135/135 passed
+    # Fixes: #34107 
+https://github.com/servo/servo/pull/47071	(@TimvdLippe, #47071)	script: Move task related files to `script/tasks/` (#47071)
+    ^ commit 1aab9ba9f2e2d8b50fb0311d54b66efa11081ddb
+    # Maintain the `task_` prefixes, since files like `manager.rs` are too generic. We did something similar recently with `audio/node.rs` -> `audio/audio_node.rs`.
+    # 
+    # Testing: it compiles
+https://github.com/servo/servo/pull/47031	(@nicoburns, #47031)	Upgrade to Taffy v0.13.0 (#47031)
+    ^ commit de7dfdc367f7f6b552a7d74a6725138dac33a343
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This should fix all CSS Grid panics. And also fixes a number of CSS Grid tests. It also switches grid placement to a sparse grid representation which greatly improves performance on pathologically large grids.
+    # 
+    # Draft PR to test changes against Servo test prior to publishing new Taffy release to crates.io
+    # 
+    # Testing: WPT tests
+    # - Fixes #46203
+    # - Fixes https://github.com/servo/servo/issues/46083
+    # - Fixes https://github.com/servo/servo/issues/46022
+    # - Fixes https://github.com/servo/servo/issues/45949
+    # 
++https://github.com/servo/servo/pull/46915	(@yezhizhen, #46915)	canvas: Upgrade `vello_cpu` to 0.2.0 (#46915)
+    crash; fix crash in 2D canvas
+    ^ commit 60bbfea64bdf22978afab5a357d323eba92e6254
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # vello_cpu 0.1.0 fixes a few panics and there is a full rewrite of frontend, which as claimed by the author improves performance by 10%.
+    # 
+    # But we end up upgrading to 0.2.0.
+    # 
+    # Testing: New passing in WPT. 
+    # Fixes: #46580
+    # Fixes: #46907
+https://github.com/servo/servo/pull/47076	(@sagudev, @mrobinson, #47076)	chore: Update Rust to 1.97.1 (#47076)
+    ^ commit 39f05ac150c04dbd135e13a9248343235f4b1116
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # Per request in [#general > Updating crown to Rust 1.97 @ 💬](https://servo.zulipchat.com/#narrow/channel/263398-general/topic/Updating.20crown.20to.20Rust.201.2E97/near/614775189)
+    # 
+    # Reviewable per commit.
+    # 
+    # Testing: Covered by existing tests, but it's just refactor.
+    # 
++https://github.com/servo/servo/pull/47070	(@mrobinson, #47070)	script: Properly clear selection flags on siblings (#47070)
+    layout; fix bug where selection changes may not update rendering
+    ^ commit 2dabc41ab14cbfbceabc624c0f6895ace57ccc1b
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # There were two issues interfering with proper rendering of incremental
+    # selection updates:
+    # 
+    # - During the selection flag clearing traversal, when leaving a node the
+    #   traversal was not advanced. This meant that flags were cleared on
+    #   descendants but not siblings of nodes.
+    # - When selection was updated via DOM APIs, there was nothing triggering
+    #   a new rendering update.
+    # 
+    # Unfortunately these changes have to happen together, as there is no way
+    # to test the second issue in isolation -- things that trigger a
+    # screenshot also trigger rendering updates. The second issue will be
+    # better covered once tests for interactive document selection updates are
+    # implemented though. In addition, the reference for the test must also
+    # use selection APIs as Servo does not yet support `::selection` fully.
+    # 
+    # Testing: This change adds a WPT test.
+    # 
+https://github.com/servo/servo/pull/47075	(@jdm, #47075)	net: Don't treat usvg_options as a child of the image-cache. (#47075)
+    ^ commit a1717c9e9b5f228c1aa8e7bf365006cc2069196a
+    # about:memory assumes that any path like `a b c` is a component of the path `a b` and contributes to `a b`'s total size. Since that is not the case for the usvg_options part of the image cache, we need to differentiate them.
+    # 
+    # Testing: No tests for about:memory.
++https://github.com/servo/servo/pull/47078	(@mrobinson, #47078)	layout: Apply followup fixes for #47022 (#47078)
+    ^ commit d235f24e468145f98d914672eb40303891084f96
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # During reivew of #47022, I made some fixes according to review comments.
+    # Unfortunately I left those fixes uncommitted in my working directory.
+    # This change actually applies them.
+    # 
+    # Testing: These changes are covered by the text from #47022.
+    # 
++https://github.com/servo/servo/pull/47074	(@jdm, #47074)	script: Do not navigate a newly-opened window to about:blank. (#47074)
+    web; see #46975
+    ^ commit d4ed3ed249ed1a5eb182ea317478cd6947cce962
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This improves our conformance with the specification, specifically around the behaviour of `window.open("about:blank")` vs. `window.open()`, both of which should only initialize the about:blank and not perform any subsequent navigation. This is observable by navigating the new window to another URL and checking `window.history.length`; the navigation away from the initial about:blank must always be a replacement navigation. These changes also fix some failures exposed by #47050.
+    # 
+    # Testing: New passing tests.
+    # Fixes: part of #43149
+    # 
+https://github.com/servo/servo/pull/47079	(@lumiscosity, #47079)	script: Move common source set operations into `srcset.rs` (#47079)
+    ^ commit 4e2ad49caae5de92c0125d7b3654bb70579e971e
+    # These are shared for `<img>` and `<link>` elements. This PR does not yet introduce the parts of the algorithm specific to `<link>` - that will be left for a follow-up.
+    # 
+    # Testing: This only moves around code - existing tests suffice
+    # Fixes: Part of #47024.
+    # 
++https://github.com/servo/servo/pull/45621	(@nicoburns, #45621)	layout: Enable CSS Grid by default (#45621)
+    web; grid now enabled by default! (was experimental --pref layout_grid_enabled)
+    ^ commit 76f48dc9e3afa0503045a964c937014ba049eaa7
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    ^ /!\ may contain changes to EXPERIMENTAL_PREFS
+    ^ /!\ may contain changes to feature flags
+    # CSS Grid layout now has no known crashes, and test pass rates are [comparable to Flexbox](https://github.com/servo/servo/issues/34479#issuecomment-4587455201). So let's enable it by default?
+    # 
+    # Changes made:
+    # - Flip the `layout_grid_enabled` pref for CSS Grid to be `true` by default.
+    # - Removes the `layout_grid_enabled` from servoshell's list of experimental prefs.
+    # - Updates a test that was relying on the `layout_grid_enabled` pref being off-by-default to use the `layout_unimplemented` pref instead.
+    # 
+    # Testing: We're already testing with the grid preference enabled.
+    # Part of: https://github.com/servo/servo/issues/34479
+    # 
+>>> 2026-08-10T23:47:36Z
+https://github.com/servo/servo/pull/46938	(@TheZoq2, #46938)	Enable the `wayland-data-control` for `arboard` (#46938)
+    ^ commit ba14b47a9a63e3e2046c8c58bd83f6ed8e2bdb84
+    # Addresses #45470 by enabling the `wayland-data-control` feature as suggested by Gae24. I am not entirely sure what the interaction of this is with the [ext-data-control-v1](https://wayland.app/protocols/ext-data-control-v1) and [wlr-data-control-unstable-v1](https://wayland.app/protocols/wlr-data-control-unstable-v1) features is, I checked the compatibility list and noticed that one of the two isn't supported on kwin, but clipboard does work with kwin on my system.
+    # 
+    # I also tested this on Niri where clipboard did not work before, and works with this change. I don't have any other wayland WMs to test with ready, but if you want further testing i'm happy to install some.
++https://github.com/servo/servo/pull/47092	(@TimvdLippe, #47092)	script: Remove `reflect_dom_object_with_proto_and_cx` (#47092)
+    dom; safety from ground up
+    ^ commit 9978b489c80eea1c13ff0d7b62f0b9306add2e58
+    # This migrates all remaining usages of `reflect_dom_object_with_proto_and_cx`. This PR is the result of applying the following regex replacement to the codebase:
+    # 
+    # Before:
+    # 
+    # ```
+    # reflect_dom_object_with_proto_and_cx\(([^<]+),\s+?cx\)
+    # ```
+    # 
+    # After:
+    # 
+    # ```
+    # reflect_dom_object_with_proto(cx, $1);
+    # ```
+    # 
+    # Part of #40600
+    # 
+    # Testing: it compiles
+https://github.com/servo/servo/pull/47093	(@atouchet, #47093)	Deduplicate petgraph and fixedbitset (#47093)
+    ^ commit abdd34cfe8fcc2ed1eb25a8f0a916a8f00a12533
+    # The dependencies introduced in #46938 weren't updated to the latest releases so it is possible to update them to remove the petgraph and fixedbitset duplicate dependencies.
+    # 
+    # Testing: No tests for Cargo.lock update.
+-https://github.com/servo/servo/pull/47094	(@servo-wpt-sync, #47094)	Sync WPT with upstream (09-08-2026) (#47094)
+    ^ commit a11e9eebba61fc7d7135b0a456aa65413bcb85f7
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Automated downstream sync of changes from upstream as of 09-08-2026
+    # [no-wpt-sync]
+https://github.com/servo/servo/pull/47087	(@jschwe, #47087)	deps: Bump mozjs to 0.21.1 (#47087)
+    ^ commit 44684fac2758f57283df54790294b3c0a8f10156
+    # Updates to latest mozjs, containing https://github.com/servo/mozjs/pull/583. 
+    # 
+    # Testing: Regular mozjs update
+    # 
+https://github.com/servo/servo/pull/47081	(@jschwe, #47081)	android / ohos: Respect `device_pixel_ratio_override` in servoshell (#47081)
+    ^ commit e2bcea2a0f65d5768c75d23f9a2b4d60349749db
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # If the servoshell preference is set, it should be respected instead of ignored.
+    # Desktop already respected this preference.
+    # 
+    # Testing: Not tested. 
+    # 
+    # 
+https://github.com/servo/servo/pull/47077	(@kkoyung, #47077)	script: Directly convert `KeyAlgorithm` to js value (#47077)
+    ^ commit 95333b6101ac8d32e5d6135b82ccfd7b84aaaac8
+    # For each of the WebIDL dictionary `KeyAlgorithm` and its derivatives in WebCrypto API, we have a proxy type on top of the binding type generated by `script-bindings`. When we convert them into js value, we used to convert from the proxy type to generated binding type, then to js value.
+    # 
+    # This patch changes the conversion to be from proxy type to js value directly. This reduces the one intermediate abstract layer to shorten the execution path.
+    # 
+    # Testing: Refactoring. Existing tests suffice.
+    # Part-of: #46948
+https://github.com/servo/servo/pull/47099	(@jschwe, #47099)	deps: Update mozjs to 0.21.2 (#47099)
+    ^ commit ddd17a91035d29be4329b0fd2717cd1615552a2f
+    # Includes https://github.com/servo/mozjs/pull/732 (simple cleanup PR)
+    # 
+    # Testing: Covered by existing tests
+    # 
+    # 
+https://github.com/servo/servo/pull/47100	(@TimvdLippe, #47100)	etc: Add comment with command to close issues (#47100)
+    ^ commit 1e666b9d50aa023b14c84df7fe70a11e96ca49e3
+    # I had to constantly go back to my original PR that introduced the script. Since that's brittle, add the comment in the script itself.
+    # 
+    # Testing: it's a comment
+-https://github.com/servo/servo/pull/47091	(@TimvdLippe, #47091)	script: Move HTML elements to `grouping_content/` (#47091)
+    ^ commit 7595af025e830feb67e6e118b946d6650ca3470d
+    # Part of #46329
+    # 
+    # Testing: it compiles
++https://github.com/servo/servo/pull/47042	(@TimvdLippe, #47042)	layout: Update Stylo to respect color-scheme CSS properties (#47042)
+    layout; impl ‘color-scheme’ overrides color scheme set by the embedder
+    ^ commit dfc8ffec6cbf5e23dd6c4b3d431cf980740f256b
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This both updates Stylo to respect the dark/light mode color scheme flags, as well as enable the `color-scheme` CSS property.
+    # 
+    # In doing so, it uncovered inconsistencies in the user agent styling, which required updating to use the system colors. If we want to change the color values, we need to update Stylo instead which specifies the chosen color values.
+    # 
+    # This also uncovered an issue with the HTML spec where link elements don't necessarily use the LinkText system color [1].
+    # 
+    # Stylo PR: https://github.com/servo/stylo/pull/438
+    # 
+    # Testing: newly passing WPT tests
+    # 
+    # Signed-off-by: Tim van der Lippe <tvanderlippe@gmail.com>
+    # 
+    # [1]: https://github.com/whatwg/html/pull/12761
+-https://github.com/servo/servo/pull/47107	(@dependabot[bot], @dependabot[bot], #47107)	build: bump regex-automata from 0.4.16 to 0.4.18 (#47107)
+    ^ commit 53f3cb95fbe829d5bd306ab2711809641c2a12e8
+    # Bumps [regex-automata](https://github.com/rust-lang/regex) from 0.4.16 to 0.4.18.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/regex/commit/e6ad938198e68339a593f85d228f2d44cb54718f"><code>e6ad938</code></a> regex-automata-0.4.18</li>
+    # <li><a href="https://github.com/rust-lang/regex/commit/92e0f22058e70d58614c47847c05e758a9edefce"><code>92e0f22</code></a> automata: avoid re-computing <code>available_parallelism</code></li>
+    # <li><a href="https://github.com/rust-lang/regex/commit/3af3e27e27417df9acad25b57360b5cf727cfb0e"><code>3af3e27</code></a> regex-automata-0.4.17</li>
+    # <li><a href="https://github.com/rust-lang/regex/commit/c21ed55e3c61dc373a82ad2b1293031a132c408d"><code>c21ed55</code></a> automata: make MAX_POOL_STACKS user configurable</li>
+    # <li><a href="https://github.com/rust-lang/regex/commit/2b527599eb9eea0dcc288c704584f242f26a5c61"><code>2b52759</code></a> 1.13.1, redux</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/regex/compare/regex-automata-0.4.16...regex-automata-0.4.18">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=regex-automata&package-manager=cargo&previous-version=0.4.16&new-version=0.4.18)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47110	(@dependabot[bot], @dependabot[bot], #47110)	build: bump aho-corasick from 1.1.4 to 1.1.5 (#47110)
+    ^ commit aadabcac30bea3a39a42c4ead46b8e0d2783e469
+    # Bumps [aho-corasick](https://github.com/BurntSushi/aho-corasick) from 1.1.4 to 1.1.5.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/BurntSushi/aho-corasick/commit/5178060ce73d91938f8582d0360e3be031380440"><code>5178060</code></a> 1.1.5</li>
+    # <li><a href="https://github.com/BurntSushi/aho-corasick/commit/b68c8d507ae7d355ab5391591a1254bef3cac711"><code>b68c8d5</code></a> api: check for overflow in <code>Match::offset</code> too</li>
+    # <li><a href="https://github.com/BurntSushi/aho-corasick/commit/c82178696b9ddc18b56c3c74853529e7926ff329"><code>c821786</code></a> build(deps): bump actions/checkout in the actions group (<a href="https://redirect.github.com/BurntSushi/aho-corasick/issues/171">#171</a>)</li>
+    # <li><a href="https://github.com/BurntSushi/aho-corasick/commit/8209bb9d614ccdddec1c5e60f4b4d683a4c7788a"><code>8209bb9</code></a> Hash-pin all actions, drop persisted credentials (<a href="https://redirect.github.com/BurntSushi/aho-corasick/issues/170">#170</a>)</li>
+    # <li><a href="https://github.com/BurntSushi/aho-corasick/commit/0f3f5da9bdec0d811f9a344e3cb9c033b15df20b"><code>0f3f5da</code></a> api: document a couple panicking preconditions</li>
+    # <li><a href="https://github.com/BurntSushi/aho-corasick/commit/e88e1fce8f7c2073488842cf8cd3d322329e012b"><code>e88e1fc</code></a> benchmarks: bump dependencies</li>
+    # <li><a href="https://github.com/BurntSushi/aho-corasick/commit/88e4966516aa4427d717578671353bb8969a048f"><code>88e4966</code></a> ci: use older version of <code>log</code> on pinned build</li>
+    # <li>See full diff in <a href="https://github.com/BurntSushi/aho-corasick/compare/1.1.4...1.1.5">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aho-corasick&package-manager=cargo&previous-version=1.1.4&new-version=1.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47111	(@dependabot[bot], @dependabot[bot], #47111)	build: bump zerocopy from 0.8.55 to 0.8.56 (#47111)
+    ^ commit 4593aaf41b34f1d19d9e5cefef77ee7b939e8325
+    # Bumps [zerocopy](https://github.com/google/zerocopy) from 0.8.55 to 0.8.56.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/google/zerocopy/releases">zerocopy's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v0.8.56</h2>
+    # <!-- raw HTML omitted -->
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>[zerocopy] Remove obsolete dependency pinning by <a href="https://github.com/joshlf"><code>@​joshlf</code></a> in <a href="https://redirect.github.com/google/zerocopy/pull/3494">google/zerocopy#3494</a></li>
+    # <li>chore(cargo): remove deprecated package authors field by <a href="https://github.com/xtqqczze"><code>@​xtqqczze</code></a> in <a href="https://redirect.github.com/google/zerocopy/pull/3499">google/zerocopy#3499</a></li>
+    # <li>Fix unused 'extern crate alloc' error under cfg(kani) by <a href="https://github.com/tautschnig"><code>@​tautschnig</code></a> in <a href="https://redirect.github.com/google/zerocopy/pull/3501">google/zerocopy#3501</a></li>
+    # <li>#[zerocopy(crate = &quot;...&quot;)] should parse paths, not idents by <a href="https://github.com/joshuaseaton"><code>@​joshuaseaton</code></a> in <a href="https://redirect.github.com/google/zerocopy/pull/3544">google/zerocopy#3544</a></li>
+    # </ul>
+    # <h2>New Contributors</h2>
+    # <ul>
+    # <li><a href="https://github.com/xtqqczze"><code>@​xtqqczze</code></a> made their first contribution in <a href="https://redirect.github.com/google/zerocopy/pull/3499">google/zerocopy#3499</a></li>
+    # <li><a href="https://github.com/tautschnig"><code>@​tautschnig</code></a> made their first contribution in <a href="https://redirect.github.com/google/zerocopy/pull/3501">google/zerocopy#3501</a></li>
+    # <li><a href="https://github.com/joshuaseaton"><code>@​joshuaseaton</code></a> made their first contribution in <a href="https://redirect.github.com/google/zerocopy/pull/3544">google/zerocopy#3544</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/google/zerocopy/compare/v0.8.55...v0.8.56">https://github.com/google/zerocopy/compare/v0.8.55...v0.8.56</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/google/zerocopy/commit/6dc429c451bdf1d7202ec1ec2cf426514e00d8eb"><code>6dc429c</code></a> Release 0.8.56 (<a href="https://redirect.github.com/google/zerocopy/issues/3545">#3545</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/79777923be3d918d51cd75b28a182a5cc7dba36c"><code>7977792</code></a> #[zerocopy(crate = &quot;...&quot;)] should parse paths, not idents (<a href="https://redirect.github.com/google/zerocopy/issues/3544">#3544</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/6a677c91b717125e02ef3f302799cde189c39b12"><code>6a677c9</code></a> [CI] Bump the all-actions group with 2 updates (<a href="https://redirect.github.com/google/zerocopy/issues/3517">#3517</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/5a907c2986fc05b0d55237dc4d53b8a9f741eb48"><code>5a907c2</code></a> [ci] Gate docs on exact-SHA CI results (<a href="https://redirect.github.com/google/zerocopy/issues/3512">#3512</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/6bdcdab04edb53d54e14109dff43dd6ba0f6df59"><code>6bdcdab</code></a> [ci] Repair weekly toolchain rollers (<a href="https://redirect.github.com/google/zerocopy/issues/3511">#3511</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/8efe66107228163cbc9055d16caf0c97c4b3f590"><code>8efe661</code></a> [ci] Avoid redundant Anneal PR caches (<a href="https://redirect.github.com/google/zerocopy/issues/3509">#3509</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/93ceec4e91abf6474ab028f0313f972d7e4a4deb"><code>93ceec4</code></a> [ci] Distribute immutable workflow artifacts (<a href="https://redirect.github.com/google/zerocopy/issues/3508">#3508</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/bef8e4df913a9755132fe6d47a6f1a7f923290d5"><code>bef8e4d</code></a> [ci] Retry transient setup failures (<a href="https://redirect.github.com/google/zerocopy/issues/3507">#3507</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/b8c2b9fce55957e2cdbf0dc9373c591fb2abebee"><code>b8c2b9f</code></a> [ci] Forward env vars correctly (<a href="https://redirect.github.com/google/zerocopy/issues/3503">#3503</a>)</li>
+    # <li><a href="https://github.com/google/zerocopy/commit/dbb81cc7759bb6b21b82a1ca98bb32e9676f8655"><code>dbb81cc</code></a> Reorganize Anneal v1 and v2 (<a href="https://redirect.github.com/google/zerocopy/issues/3487">#3487</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/google/zerocopy/compare/v0.8.55...v0.8.56">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zerocopy&package-manager=cargo&previous-version=0.8.55&new-version=0.8.56)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47108	(@dependabot[bot], @dependabot[bot], #47108)	build: bump wuff from 0.2.7 to 0.2.8 (#47108)
+    ^ commit 84e4ac985f3b4efea250590a64b971fa6f81fca0
+    # Bumps [wuff](https://github.com/nicoburns/wuff) from 0.2.7 to 0.2.8.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/nicoburns/wuff/blob/main/CHANGELOG.md">wuff's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>0.2.8</h2>
+    # <ul>
+    # <li>Remove <code>arrayvec</code> dependency</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li>See full diff in <a href="https://github.com/nicoburns/wuff/commits">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=wuff&package-manager=cargo&previous-version=0.2.7&new-version=0.2.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47064	(@niyabits, #47064)	script: init `WorkletThreadPool` in `Window` (#47064)
+    ^ commit c3832920feb3db85e60c4c43f0cb9d04474271f3
+    # This PR is a part of refactoring Worklet for implementing AudioWorklet
+    # 
+    # - Move the initialization of the `WorkletThreadPool` to `window/window.rs`
+    # - Use `LazyCell` to spawn a new `WorkletThreadPool`
+    # 
+    # The `WorkletThreadPool` exists on the `ScriptThread` for the Paint Worklet.
+    # For the AudioWorklet, the `WorkletThreadPool` will live on the `AudioContext` as each `AudioContext` needs it's own Worklet Thread.
+    # 
+    # Moving to `LazyCell` allows `AddModule` to be agnostic about constructing the `WorkletThreadPool` instead of initializing it from the `ScriptThread`.
+    #  
+    # Testing: existing worklet WPT covers the changes.
+    # 
+https://github.com/servo/servo/pull/47112	(@kkoyung, #47112)	script: Properly implement usage intersection in `CryptoKey` (#47112)
+    ^ commit 56c05f4bd55ece8f33b0e8af1b5f30d316c35409
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # In our current implementation, when we calculate the **usage intersection** of two lists of key usage value, we do not deduplicate and sort the result, which is required by the specification.
+    # 
+    # This patch properly implement the **usage intersection** of two lists of key usage value, under a new trait `KeyUsageVecHelper`, which provides helper functions for `Vec<KeyUsage>`.
+    # 
+    # Spec: <https://w3c.github.io/webcrypto/#concept-usage-intersection>
+    # Testing: Pass more WPT tests.
+    # Part-of: #47096
+https://github.com/servo/servo/pull/47113	(@mukilan, #47113)	build: Configure jemalloc with 64KB page size on linux-arm64 (#47113)
+    ^ commit 8446a04aa2ef9c8ceae78af3be51df8a7b8130f3
+    # Raspberry Pi OS 13 (used by Pi 5) ships with a kernel that uses 16KB pages on rPI 5 based systems and `jemalloc` requires that it be compiled with a page size that is at least equal to the base size that will be used by the runtime kernel.
+    # 
+    # The upstream `jemalloc` maintained by Meta now ships with 64KB as the default, but `tikv-jemalloc` doesn't have this change yet.
+    # 
+    # This patch forces jemalloc to use the 64KB page size using the `AARCH64_UNKNOWN_LINUX_GNU_JEMALLOC_SYS_WITH_LG_PAGE` environment variable supported by jemalloc.
+    # 
+    # Testing: A production build of servo with the patch has been tested on both rPi 500 (16KB kernel page size) and rPi 400 (4KB kernel page size) and it works on both. Raspberry PI OS 13 was used for testing both configurations.
+    # 
+    # In addition, the Speedometer 3 and Jetstream 2 benchmarks were run using WebKit's run-benchmark script against both 4KB and 64KB builds of servo on rPi 400 and there was negligible difference in metrics. It wasn't possible to get a good idea of memory consumption due to #42769, but the benchmarks completed multiple iterations successfully.
+    # 
+    # Fixes: #46855
+https://github.com/servo/servo/pull/47069	(@mrobinson, #47069)	layout: Consistently map back to DOM offsets from layout offsets (#47069)
+    ^ commit 0f40e5fb164753c3bea1d6cee96f9301a92e03dc
+    # When mapping a character offset in layout text (transformed by white
+    # space collapse and `text-transform`) back to the original DOM offset,
+    # during hit testing, there was a single return path that wasn't
+    # properly doing that mapping. This change makes it so that the
+    # `character_offset` method wraps an `unmapped_character_offset` method
+    # and consistently uses the offset map. This fixes an issue with
+    # interactive edit point and selection updates.
+    # 
+    # Testing: This changes adds a Servo-specific test (edit point selection behavior is unspecified).
+    # 
+https://github.com/servo/servo/pull/47124	(@eachra-bawn, #47124)	html: Add error messages (#47124)
+    ^ commit 74a7f95a9f8692de219d4f96410758a6fd92b2d8
+    # Part of: #40756
+    # 
+https://github.com/servo/servo/pull/47127	(@jdm, #47127)	script: Add error message for invalid selectors. (#47127)
+    ^ commit 4c54c13e4bfa6397a282d971338d894361c5c83e
+    # This provides more useful error messages when websites are doing invalid things with selectors.
+    # 
+    # Testing: No tests for the contents of error messages.
+    # Part of #40756
+    # 
+https://github.com/servo/servo/pull/46964	(@Narfinger, @jdm, @sagudev, #46964)	script: Move GPUAdapter, GPUSupportedFeatures, GPUSupportedLimits and WGSLLanguageFeatures to script_webgpu (#46964)
+    ^ commit e4c90343b1e0357baa716c365c81bc9fe3383fc7
+    # This moves GPUAdapter, GPUSupportedFeatures, GPUSupportedLimits and WGSLLanguageFeatures to script_webgpu crate.
+    # Of note:
+    # - Creation of PromiseHelper Trait which handles creation and usage of Promise. 
+    # - Creation of WebGPUGlobalTrait which handles access to GlobalScope variables.
+    # - Adding of global() method to GPUAdapter which returns `DomRoot<D::GlobalScope>`.  This also moved functionality from DomGlobal impl to  DomGlobalGeneric.
+    # - We added Error messages to gpuadapter and the new gpuadapter_promise_listener.
+    # 
+    # Signed-off-by: Narfinger <Narfinger@users.noreply.github.com>
+    # 
+    # Testing: WebGPU WPT tests should find if there is anything wrong. WPT run here: https://github.com/Narfinger/servo/actions/runs/30824929512
+    # Part of https://github.com/servo/servo/issues/46658
+    # 
+>>> 2026-08-12T23:26:05Z
+-https://github.com/servo/servo/pull/47139	(@dependabot[bot], @dependabot[bot], #47139)	build: bump xcursor from 0.3.10 to 0.3.11 (#47139)
+    ^ commit 4987f75404dba16a898022f68b7a51e0be376f7f
+    # Bumps [xcursor](https://github.com/esposm03/xcursor-rs) from 0.3.10 to 0.3.11.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li>See full diff in <a href="https://github.com/esposm03/xcursor-rs/commits">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=xcursor&package-manager=cargo&previous-version=0.3.10&new-version=0.3.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47136	(@dependabot[bot], @dependabot[bot], #47136)	build: bump keccak from 0.2.0 to 0.2.1 (#47136)
+    ^ commit 35bc3727ae28f7b41a5613755e2be5e385f7fc66
+    # Bumps [keccak](https://github.com/RustCrypto/sponges) from 0.2.0 to 0.2.1.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/RustCrypto/sponges/commit/13b709c25386f4a66ea524d07ace5857110c8a4d"><code>13b709c</code></a> Release keccak v0.2.1 (<a href="https://redirect.github.com/RustCrypto/sponges/issues/127">#127</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/sponges/commit/50f28e01489cf196ba35255e94d5f61726f3955e"><code>50f28e0</code></a> keccak: disable <code>aarch64_sha3</code> backend on targets with softfloat ABI (<a href="https://redirect.github.com/RustCrypto/sponges/issues/126">#126</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/sponges/commit/f0863a4bee808b421224f2bdbec4a640cc1d4389"><code>f0863a4</code></a> Release ascon v0.5.0 (<a href="https://redirect.github.com/RustCrypto/sponges/issues/123">#123</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/sponges/commit/c8caab973a54571cf5f3d70db67d57b54b848a88"><code>c8caab9</code></a> Tweak root README (<a href="https://redirect.github.com/RustCrypto/sponges/issues/124">#124</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/sponges/commit/e2ac1d1f96de3fdf74db4cb000b219d73ef54666"><code>e2ac1d1</code></a> ascon: refactor implementation (<a href="https://redirect.github.com/RustCrypto/sponges/issues/122">#122</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/sponges/commit/54f6e435935e980b1bb2e6d413dc7046a06201cf"><code>54f6e43</code></a> Tweak license files (<a href="https://redirect.github.com/RustCrypto/sponges/issues/121">#121</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/sponges/commit/35a53705239cb1854ea62136a4e8a316de901686"><code>35a5370</code></a> ascon: improve performance of permutation (<a href="https://redirect.github.com/RustCrypto/sponges/issues/118">#118</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/sponges/commit/6004289dde16db873c143518ced222d9608b1a83"><code>6004289</code></a> benches: update criterion, tweak code (<a href="https://redirect.github.com/RustCrypto/sponges/issues/120">#120</a>)</li>
+    # <li>See full diff in <a href="https://github.com/RustCrypto/sponges/compare/keccak-v0.2.0...keccak-v0.2.1">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=keccak&package-manager=cargo&previous-version=0.2.0&new-version=0.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47141	(@kkoyung, #47141)	script: Normalize key usages in generateKey operations (#47141)
+    ^ commit 12b604fc48b008989e2d6840a64ad2142f25a169
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # The Web Cryptography API specification and Modern Algorithms in the Web Cryptography API specification have updated to require normalization of key usages during the generateKey operations of symmetric key algorithms, including AES-CTR, AES-CBC, AES-GCM, AES-KW, HMAC, AES-OCB, ChaCha20-Poly1305 and KMAC.
+    # 
+    # Commit in the Web Cryptography API spec:
+    # <https://github.com/w3c/webcrypto/commit/1ecb1af28884e918a5f2f273a7ea8361a5c3cbe4>
+    # 
+    # Commit in the Modern Algorithms in the Web Cryptography API spec:
+    # <https://github.com/WICG/webcrypto-modern-algos/commit/a693d46c60215ad0cac9b4cf361e3bdcc6a3264d>
+    # 
+    # We implement the concept of the **normalized value of a usages list**, under the trait `KeyUsageVecHelper`, and apply it to the key usages stored in the [[usages]] internal slot of the `CryptoKey` during the generateKey operations of symmetric key algorithms.
+    # 
+    # Spec: <https://w3c.github.io/webcrypto/#concept-normalized-usages>
+    # Testing: Pass more WPT tests.
+    # Part-of: #47096
+    # 
+-https://github.com/servo/servo/pull/47135	(@dependabot[bot], @dependabot[bot], #47135)	build: bump base64 from 0.23.0 to 0.23.1 (#47135)
+    ^ commit c2be9c7c3155c7612dd48420e0d944e4d0325b68
+    # Bumps [base64](https://github.com/marshallpierce/rust-base64) from 0.23.0 to 0.23.1.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md">base64's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.23.1</h1>
+    # <ul>
+    # <li>Make the tests build again on non-SIMD architectures</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/marshallpierce/rust-base64/commit/069bf7067b949f5c0a92b6ceb82492920502f2c2"><code>069bf70</code></a> v0.23.1</li>
+    # <li><a href="https://github.com/marshallpierce/rust-base64/commit/6ab1fb0a5843013557a52c45c84b91f5d1bb87af"><code>6ab1fb0</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/310">#310</a> from musicinmybrain/test-on-non-simd-arches</li>
+    # <li><a href="https://github.com/marshallpierce/rust-base64/commit/7cffce6f971acdf48f83112cbdd63bd61125ba06"><code>7cffce6</code></a> Fix testing on architectures without unsafe SIMD support</li>
+    # <li><a href="https://github.com/marshallpierce/rust-base64/commit/e34f9a08c5c89a4641350ac22033f3fa4f5d4d97"><code>e34f9a0</code></a> Merge pull request <a href="https://redirect.github.com/marshallpierce/rust-base64/issues/308">#308</a> from atouchet/com</li>
+    # <li><a href="https://github.com/marshallpierce/rust-base64/commit/e9240c9a01e0a4934c5619e74740caa6d1f67ce9"><code>e9240c9</code></a> Remove outdated comment</li>
+    # <li>See full diff in <a href="https://github.com/marshallpierce/rust-base64/compare/v0.23.0...v0.23.1">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=base64&package-manager=cargo&previous-version=0.23.0&new-version=0.23.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47137	(@dependabot[bot], @dependabot[bot], #47137)	build: bump find-msvc-tools from 0.1.9 to 0.1.10 (#47137)
+    ^ commit 8968d1235e2d0a0c50c75c599ec8fe78b406c19d
+    # Bumps [find-msvc-tools](https://github.com/rust-lang/cc-rs) from 0.1.9 to 0.1.10.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/releases">find-msvc-tools's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>find-msvc-tools-v0.1.10</h2>
+    # <h3>Other</h3>
+    # <ul>
+    # <li>Update edition to 2021 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1811">#1811</a>)</li>
+    # <li>Update MSRV to 1.64 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1808">#1808</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/b27570c6644e4f5a43ea4561878a80ea334c5a14"><code>b27570c</code></a> chore: release (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1841">#1841</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/303e57e06d83d05d5b9c95242cd39f941fc773f3"><code>303e57e</code></a> Fix parsing of thumbv7a-vex-v5 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1840">#1840</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/9c1645edc6466306070c4fcc45154162df9fc509"><code>9c1645e</code></a> Regenerate target info (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1839">#1839</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/a51f2f6aee346fd372d101460103646ca3573b73"><code>a51f2f6</code></a> ci: Read msrv from Cargo.toml (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1837">#1837</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/30bc0995991475e72bc6f4abc1d3f84ed5861e77"><code>30bc099</code></a> add <code>aarch64_be</code> to <code>prefix_for_target</code> (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1835">#1835</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/fb7eb039156d8bb100cae84048a609a713d06010"><code>fb7eb03</code></a> ci: allow flaky failure of check-motor (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1836">#1836</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/55149ecf37eeb0e49de8561b88533697057461ae"><code>55149ec</code></a> ci: compile all test targets for cross builds (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1833">#1833</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/609a0806c5b0251c3055dc241d4e66508d72220c"><code>609a080</code></a> ci: run clippy on more targets (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1831">#1831</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/7defff94833e8e12e47fc84acae501f99aee2496"><code>7defff9</code></a> cargo: fix for minimal-versions (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1825">#1825</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/3108dfee9b167d19fac52c103d6437917d070fe7"><code>3108dfe</code></a> ci: update Swatinem/rust-cache (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1830">#1830</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/rust-lang/cc-rs/compare/find-msvc-tools-v0.1.9...find-msvc-tools-v0.1.10">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=find-msvc-tools&package-manager=cargo&previous-version=0.1.9&new-version=0.1.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47130	(@jdm, #47130)	script: Move FontContext into each global that requires it. (#47130)
+    ^ commit 020175c83d23f20bafd1df709d69f79ba5e31f74
+    # In preparation for #46975, we need to ensure that we don't expose an outdated font context if the document is replaced. This fixes a timeout exposed by #46975.
+    # 
+    # Testing: No behaviour change expected; existing tests suffice.
+    # Part of #43149
+    # 
+https://github.com/servo/servo/pull/47116	(@RichardTjokroutomo, #47116)	OHOS: Also push `HarmonyOS Sans SC` & `HarmonyOS Sans TC` as candidate fallback fonts when special characters are encountered.  (#47116)
+    ^ commit eff9ff0bfa47fa046da2231fe0c84d48aee2be5d
+    # Currently, `fallback_font_families()` only push `HarmonyOS Sans SC` & `HarmonyOS Sans TC` when a character is a Chinese character (e.g. `你`, `我`, etc.). However, there are also Chinese special characters such as Chinese brackets ( `【】`). These special characters are not considered as Han scripts by `unicode_script`. As a result, these special characters won't be rendered on OHOS devices.
+    # 
+    # Therefore, we need to also consider `HarmonyOS Sans SC` & `HarmonyOS Sans TC` if we encounter special characters.
+    # 
+    # Testing: Manual testing.
+    # 
++https://github.com/servo/servo/pull/47123	(@shubhamg13, @jdm, #47123)	script: Implement `fully exit fullscreen` steps partially (#47123)
+    security dom; navigating to a new page now exits fullscreen if it was initiated by web API
+    ^ commit 4d6c61c48c1d5a0b86b8685945809047515e982d
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # Implement `fully exit fullscreen` steps
+    # 
+    # Testing: `tests/webview.rs: test_fullscreen`
+    # Fixes: #45157
+https://github.com/servo/servo/pull/47027	(@jschwe, #47027)	threadboost: Fine-tune boosting and explicitly boost webrender threads (#47027)
+    ^ commit a40c8f29010c7f3160db5faf2b4b8e04852be28b
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # Follow-up to #46843.
+    # 
+    # Instead of boosting the embedder thread, which happened to also boost the webrender (children) threads (threads spawned after we changed the thread affinity for the embedder thread), boost the webrender threads explicitly and remove the embedder thread boost. This seems to have the same net performance, hence it's better to avoid changing the properties of the embedder thread.
+    # Additionally modified the boosting API, so that we can specify a priority level, and opt-in to the thread affinity boosting. This gives us more flexibility, since some threads might just want one or the other. 
+    # In the future this might also be useful if we want to de-prioritize certain threads.
+    # 
+    # Testing: We don't have any automated tests measuring performance or thread placement.
+    # 
+    # 
+https://github.com/servo/servo/pull/47145	(@Narfinger, #47145)	clippy: Delete not needed .clippy.toml file (#47145)
+    ^ commit 9afd4bce84e9252606469c05b4fa9186e08b554e
+    # We do not need this anymore as we are past the required time-rs version.
+    # 
+    # Testing: If the CI is happy, this should work.
+    # 
+https://github.com/servo/servo/pull/47147	(@jschwe, #47147)	script: Cache UrlExtraData for about:blank (#47147)
+    ^ commit f49ec0ab27e6eccb639d64fecd48628029df9253
+    # Instead of parsing `about:blank` every time `parser_context_for_anonymous_content` is called,
+    # we cache the value in a LazyLock.
+    # Two caller locations actually pass in a real URL, so I kept `url_data` in the signature, and only changed
+    # the caller locations which constructed `UrlExtraData` from `about:blank`.
+    # The parsing showed up in a perf profile while investigating canvas performance.
+    # 
+    # Testing: This does not change observable behavior and is thus covered by existing tests.
+    # 
+    # 
++https://github.com/servo/servo/pull/47143	(@yezhizhen, #47143)	script: Make Range client rects empty when not in the document (#47143)
+    dom; more conformant getClientRects() and getBoundingClientRect() on Range
+    ^ commit 8d899872b7df7a99843517ba494fdd43797ccf5b
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # https://drafts.csswg.org/cssom-view/#dom-range-getclientrects
+    # > The getClientRects() method, when invoked, must return an empty DOMRectList object if the range is not in the document.
+    # 
+    # Testing: Added a test `tests/wpt/tests/css/cssom-view/range-bounding-client-rect-with-shadow-dom.html` since no existing test cover this.
+    # Fixes: #47115
+    # 
+https://github.com/servo/servo/pull/47045	(@Narfinger, #47045)	pixels: Create Image Decoder trait (#47045)
+    ^ commit e8ffe8e88ce3fc7ef47f48d9e368be4029bfb51e
+    # In the future we want to have platform being able to supply their own way to decode images (either because of resource constraints or because not all formats might make sense).
+    # This creates a trait to abstract over this.
+    # We create a `ServoImageDecoder` trait with a couple of methods to create a decoder and get an `impl image::Decoder`/`impl image::AnimationDecoder` out of it.
+    # We also cleanup the way that animation and apngs are handled.
+    # 
+    # In the future we will use this trait to implement image decoding on OHOS platforms without using image-rs.
+    # 
+    # Testing: WPT tests should find anything that is wrong. (https://github.com/Narfinger/servo/actions/runs/31089302869)
+    # 
+https://github.com/servo/servo/pull/43819	(@Narfinger, #43819)	net: Implement on disk cache (#43819)
+    ^ commit fb04f8f1613717418b3c0d0c48ee2b8eec65fd8d
+    ^ /!\ may contain changes to feature flags
+    # This implements an on disk cache using the cacache library.
+    # 
+    # This is currently not ready for merging as I did not do any performance testing.
+    # 
+    # Design:
+    # - On cache miss in the quick_cache we check the on disk cache for an element and restore it by putting it in the memory cache and reloading.
+    # - We hook into the lifecycle components of quick_cache to save to disk the elements evicted from the
+    # memory cache.
+    # - Spawn a long running tokio task to delete the oldest cache entry from the list if we are over a specific size.
+    # 
+    # Current limitations:
+    # - The cache is currently disabled in the preferences.
+    # - While the cache is persistent, we do not store any elements that are in the memory cache to the disk.
+    # - Currently there is no way to clear the on disk cache.
+    # - ./mach test-tidy complains because of multiple versions of some libraries.
+    # - We do not update the timestamps of the on disk cache.
+    # 
+    # Fixes: https://github.com/servo/servo/issues/47012
+    # 
+https://github.com/servo/servo/pull/47131	(@jschwe, #47131)	deps: Bump mozjs to 0.21.3 (#47131)
+    ^ commit c58591ae31b370d769d31105c8f4c125b6af4391
+    # Companion PR to  https://github.com/servo/mozjs/pull/789, with a minor build-system refactor and no other changes.
+    # 
+    # try run: https://github.com/jschwe/servo/actions/runs/31407322992
+    # 
+    # Testing: Dependency update, covered by existing tests. No functional changes in mozjs.
+    # 
++https://github.com/servo/servo/pull/47160	(@SimonSapin, #47160)	layout: Implement `text-transform: full-size-kana` (#47160)
+    layout; ‘text-transform: full-size-kana’, ‘full-width’, and ‘math-auto’
+    ^ commit 859bd5edd60c0fb162a1f73c083a23e55474faf7
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Spec: https://drafts.csswg.org/css-text-4/#valdef-text-transform-full-size-kana
+    # Testing: some existing tests from WPT start passing
+https://github.com/servo/servo/pull/47165	(@Narfinger, #47165)	script: Use NoGC for note_dirty_element (#47165)
+    ^ commit b49e982758bf2993e8720599851787440885224f
+    # This uses the NoGC framework for note_dirty_element.
+    # This replaces the `inclusive_ancestors_in_flat_tree` with an unrooted variant.
+    # Additionally, parent_in_flat_tree now always returns an unrooted value as it was easier then implementing the logic separately and a new FlatTreeParent struct.
+    # In the cases where we still need the rooted version we use the 'as_rooted()' function.
+    # 
+    # The rest of the changes is just "bubbling up" the NoGC parameter.
+    # This saves us in total a 0.2% cpu in a busy script thread slice on walrusaudio.com
+    # 
+    # Testing: This changes just the rooting behavior, hence, no extra tests are necessary.
+    # 
+-https://github.com/servo/servo/pull/47172	(@dependabot[bot], @dependabot[bot], #47172)	build: bump clap from 4.6.5 to 4.6.6 (#47172)
+    ^ commit cb9c8f9f01021873d58c72b713f869d3abcfd585
+    # Bumps [clap](https://github.com/clap-rs/clap) from 4.6.5 to 4.6.6.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/clap-rs/clap/releases">clap's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v4.6.6</h2>
+    # <h2>[4.6.6] - 2026-08-06</h2>
+    # <h3>Features</h3>
+    # <ul>
+    # <li>Add <code>Command::get_overridden_usage</code></li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/clap-rs/clap/blob/master/CHANGELOG.md">clap's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>[4.6.6] - 2026-08-06</h2>
+    # <h3>Features</h3>
+    # <ul>
+    # <li>Add <code>Command::get_overridden_usage</code></li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/clap-rs/clap/commit/348cff3fc4d42d09a2ed1ad07b9b2cb79efc233a"><code>348cff3</code></a> chore: Release</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/d4783779f80f486310a642bfe1d24f24e512fae8"><code>d478377</code></a> docs: Update changelog</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/04b9fbb83a88a3dac4c33b5589c8aa79f7c965f7"><code>04b9fbb</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/6414">#6414</a> from koopatroopa787/fix-bash-completion-bracket-glob</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/70752392a8ca7ea877c651622a2247b2ccc0fb5e"><code>7075239</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/6422">#6422</a> from BaumiCoder/fix-fish-indentations</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/f90a96636ad3b62c17790a97c1192a525b7db286"><code>f90a966</code></a> fix(complete): Use spaces for indentation in fish</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/dd4997ba2d5eecf789936f46f2ccb52126e128bf"><code>dd4997b</code></a> fix(complete): Don't glob-expand bash positionals</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/8387c812c4b9726474b8407f81ec97f0acf570ed"><code>8387c81</code></a> Merge pull request <a href="https://redirect.github.com/clap-rs/clap/issues/6399">#6399</a> from clap-rs/renovate/crate-ci-typos-1.x</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/8141e110ecee321277e90b4baa22a5baa02813ea"><code>8141e11</code></a> chore(deps): Update compatible (dev) (<a href="https://redirect.github.com/clap-rs/clap/issues/6398">#6398</a>)</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/8a6bd4e43e85da71accfc407641bfff9ff71ca8f"><code>8a6bd4e</code></a> chore(deps): Update pre-commit hook crate-ci/typos to v1.47.0</li>
+    # <li><a href="https://github.com/clap-rs/clap/commit/71a7213d6e45758bb8c9c5f7c36ed768edef872e"><code>71a7213</code></a> chore(deps): Update Rust Stable to v1.96 (<a href="https://redirect.github.com/clap-rs/clap/issues/6396">#6396</a>)</li>
+    # <li>See full diff in <a href="https://github.com/clap-rs/clap/compare/clap_complete-v4.6.5...clap_complete-v4.6.6">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=clap&package-manager=cargo&previous-version=4.6.5&new-version=4.6.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47174	(@dependabot[bot], @dependabot[bot], #47174)	build: bump aws-lc-rs from 1.17.3 to 1.18.0 (#47174)
+    ^ commit 0a5c50e52a65a13017290bc843afafe3758fd0ac
+    # Bumps [aws-lc-rs](https://github.com/aws/aws-lc-rs) from 1.17.3 to 1.18.0.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/aws/aws-lc-rs/releases">aws-lc-rs's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>aws-lc-rs v1.18.0</h2>
+    # <h2>AWS-LC-FIPS module updated to 4.x</h2>
+    # <p>This release switches <code>aws-lc-fips-sys</code> (used via the <code>fips</code> feature) from the AWS-LC-FIPS 3.x branch to <a href="https://github.com/aws/aws-lc/releases/tag/v4.0.0">AWS-LC-FIPS 4.0</a>.</p>
+    # <ul>
+    # <li><strong>If your project requires FIPS compliance, please consult your local FIPS compliance experts before upgrading.</strong> The FIPS v3 module shipped in aws-lc-rs v1.17.x is FIPS 140-3 validated ([Certificate <a href="https://redirect.github.com/aws/aws-lc-rs/issues/5314">#5314</a>](<a href="https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5314">https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5314</a>) static, [Certificate <a href="https://redirect.github.com/aws/aws-lc-rs/issues/5298">#5298</a>](<a href="https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5298">https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5298</a>) dynamic). The 4.x module has completed validation testing by an accredited lab and has been submitted to NIST for certification. Refer to the <a href="https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/Modules-In-Process-List">CMVP Modules In Progress List</a> for its current status, and to <a href="https://github.com/aws/aws-lc/blob/main/crypto/fipsmodule/FIPS.md">FIPS.md</a> for security policies and supported operating environments.</li>
+    # <li>Consumers who need to remain on the FIPS 3.x module should pin <code>aws-lc-rs</code> to <code>&lt;1.18.0</code>. See the Cargo Book on <a href="https://doc.rust-lang.org/cargo/reference/specifying-dependencies.html">Specifying Dependencies</a>.</li>
+    # </ul>
+    # <table>
+    # <thead>
+    # <tr>
+    # <th>AWS-LC-FIPS module</th>
+    # <th>aws-lc-rs</th>
+    # </tr>
+    # </thead>
+    # <tbody>
+    # <tr>
+    # <td>2.0.x</td>
+    # <td>&lt;1.12.0</td>
+    # </tr>
+    # <tr>
+    # <td>3.0.x</td>
+    # <td>&lt;1.18.0</td>
+    # </tr>
+    # <tr>
+    # <td>4.x</td>
+    # <td><em>latest</em></td>
+    # </tr>
+    # </tbody>
+    # </table>
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>Switch <code>aws-lc-fips-sys</code> to AWS-LC's &quot;FIPS 4.0&quot; branch by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1185">aws/aws-lc-rs#1185</a>
+    # <ul>
+    # <li><code>aws-lc-fips-sys</code> v0.13.16 -&gt; v0.14.0. Please see the call-out above.</li>
+    # </ul>
+    # </li>
+    # <li><strong>The ML-DSA signature APIs are now stable</strong> 🎉 by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1188">aws/aws-lc-rs#1188</a> and <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1189">aws/aws-lc-rs#1189</a>
+    # <ul>
+    # <li><code>PqdsaKeyPair</code>, <code>PqdsaPublicKey</code>, <code>PqdsaPrivateKey</code>, <code>PqdsaSigningAlgorithm</code>, <code>PqdsaVerificationAlgorithm</code>, and the <code>ML_DSA_44</code> / <code>ML_DSA_65</code> / <code>ML_DSA_87</code> algorithms (and their <code>_SIGNING</code> counterparts) now live in <code>aws_lc_rs::signature</code>. ML-DSA no longer requires the <code>unstable</code> feature, and is now available under <code>fips</code> -- the FIPS 4.0 module provides ML-DSA, which is what had kept these APIs unstable. See our updated <a href="https://docs.rs/aws-lc-rs/latest/aws_lc_rs/signature/index.html">API documentation</a>.</li>
+    # <li>Please migrate any use of <code>aws_lc_rs::unstable::signature</code> to <code>aws_lc_rs::signature</code>. The <code>unstable::signature</code> module remains as deprecated aliases and will be removed in a future release.</li>
+    # <li><code>PqdsaKeyPair::to_pkcs8</code> has been renamed to <code>to_pkcs8v1</code>, since elsewhere in the module an unqualified <code>to_pkcs8</code> means PKCS#8 v2. A deprecated <code>to_pkcs8</code> alias remains available under the <code>unstable</code> feature.</li>
+    # <li>Existing <code>unstable</code> consumers continue to compile, with deprecation warnings. Two cases need a source change: builds using <code>#![deny(warnings)]</code>, and code that glob-imports both <code>signature::*</code> and <code>unstable::signature::*</code>, which now needs an explicit import to disambiguate.</li>
+    # <li><strong>Behavior change:</strong> <code>PqdsaVerificationAlgorithm::parsed_verify_digest_sig</code> now always returns <code>Unspecified</code>. Digest-then-verify is not an operation defined by FIPS 204 -- pure ML-DSA signs the message itself, and the pre-hash variant (HashML-DSA) uses a distinct domain separator that this API does not implement.</li>
+    # </ul>
+    # </li>
+    # <li>Add out-of-place AEAD sealing by <a href="https://github.com/iainmcgin"><code>@​iainmcgin</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1183">aws/aws-lc-rs#1183</a>
+    # <ul>
+    # <li>Adds <code>seal_separate_out_of_place</code> to <code>LessSafeKey</code> and <code>TlsRecordSealingKey</code>. Every sealing entry point was previously in-place, so a caller whose plaintext was borrowed or shared had to copy it into a scratch buffer purely to make it mutable. This mirrors the existing <code>open_separate_gather</code>, so the sealing and opening directions now match.</li>
+    # </ul>
+    # </li>
+    # <li>Add <code>rsa::KeyPair::from_components</code> for constructing RSA key pairs from raw components by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1175">aws/aws-lc-rs#1175</a>
+    # <ul>
+    # <li>Adds <code>rsa::KeyPairComponents</code> and <code>rsa::KeyPair::from_components</code>, matching ring 0.17, so a signing key can be built from formats such as JWK without first encoding the components as DER. Unlike ring, <code>d</code> and the CRT parameters are validated at construction using <code>RSA_check_key</code>, so keys with inconsistent or placeholder values that ring accepts may be rejected. Unnecessary generic bounds were also removed from <code>PublicKeyComponents</code>.</li>
+    # </ul>
+    # </li>
+    # <li>Automatically optimize aws-lc for size when opt-level is &quot;s&quot; or &quot;z&quot; by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1159">aws/aws-lc-rs#1159</a>
+    # <ul>
+    # <li>The builder now enables AWS-LC's size-optimized configuration (<code>OPENSSL_SMALL</code>, and no AVX-512 assembly on x86_64) whenever Cargo is already building for size. In CI, a small binary exercising SHA-256, AES-256-GCM, and ECDSA P-256 is <strong>36-50% smaller</strong> at <code>opt-level=z</code> than at <code>opt-level=3</code>: 50% on x86_64 Linux, 48% on aarch64 macOS, 39% on x86_64 Windows, 36% on aarch64 Linux. Your own savings depend on how much of AWS-LC your binary retains.</li>
+    # <li>No algorithms are removed and outputs are unchanged; the trade-off is slower elliptic-curve performance. Set <code>AWS_LC_SYS_SMALL=1</code>/<code>=0</code> to force it on or off independently of opt-level.</li>
+    # <li>FIPS builds do not opt in automatically: <code>aws-lc-fips-sys</code> requires an explicit <code>AWS_LC_FIPS_SYS_SMALL=1</code>, and warns when it is set.</li>
+    # <li>Partially addresses <a href="https://redirect.github.com/aws/aws-lc-rs/issues/745">aws/aws-lc-rs#745</a>; the default size under <code>opt-level=3</code> footprint is unchanged.</li>
+    # </ul>
+    # </li>
+    # <li>Export native library build metadata from the -sys crates by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1187">aws/aws-lc-rs#1187</a>, including original commits from <a href="https://github.com/glebpom"><code>@​glebpom</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1184">aws/aws-lc-rs#1184</a>
+    # <ul>
+    # <li>Downstream build scripts compiling C code against AWS-LC can now locate our artifacts via <code>DEP_AWS_LC_*</code> / <code>DEP_AWS_LC_FIPS_*</code> (<code>libdir</code>, <code>libcrypto_path</code>, <code>link_kind</code>, and <code>libssl_path</code> with <code>ssl</code>), consistently across the CC, CMake, and system-library build paths. Existing linker directives are unchanged. On Windows, the <code>*_path</code> values are the link-time artifact (import library), not the runtime DLL.</li>
+    # </ul>
+    # </li>
+    # <li>Key wrap hardening by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1190">aws/aws-lc-rs#1190</a> and <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1191">aws/aws-lc-rs#1191</a>
+    # <ul>
+    # <li><code>KeyEncryptionKey::unwrap</code> no longer underflows on ciphertexts shorter than 8 bytes. Since the ciphertext is untrusted input, builds with <code>overflow-checks = true</code> would panic instead of returning the documented <code>Err(Unspecified)</code>; default release builds were unaffected.</li>
+    # <li><code>KeyEncryptionKey</code> now zeroizes its key material on drop, consistent with the other key types in this crate.</li>
+    # </ul>
+    # </li>
+    # <li>docs(signature): correct outdated note about signing a separate digest by <a href="https://github.com/WesleyRosenblum"><code>@​WesleyRosenblum</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1186">aws/aws-lc-rs#1186</a></li>
+    # </ul>
+    # <h3>Upstream AWS-LC (v5.5.0)</h3>
+    # <p><code>aws-lc-sys</code> v0.44.0 aligns with <a href="https://github.com/aws/aws-lc/releases/tag/v5.5.0">AWS-LC v5.5.0</a> (previously v5.2.0). See also the release notes for <a href="https://github.com/aws/aws-lc/releases/tag/v5.3.0">v5.3.0</a> and <a href="https://github.com/aws/aws-lc/releases/tag/v5.4.0">v5.4.0</a>.</p>
+    # <h3>Build Improvements</h3>
+    # <ul>
+    # <li>Fix bindings copy from read-only prebuilt AWS-LC install by <a href="https://github.com/justsmth"><code>@​justsmth</code></a> in <a href="https://redirect.github.com/aws/aws-lc-rs/pull/1194">aws/aws-lc-rs#1194</a>
+    # <ul>
+    # <li>Copies into <code>OUT_DIR</code> now remove any stale destination first and leave the fresh copy writable, so building against a read-only prebuilt install (e.g. the Nix store) no longer fails with <code>Permission denied</code> on a build-script rerun. An <code>OUT_DIR</code> already poisoned by an earlier build now recovers without a <code>cargo clean</code>.</li>
+    # </ul>
+    # </li>
+    # </ul>
+    # <h3>Issues Being Closed</h3>
+    # <ul>
+    # <li>ML-DSA stabilization? -- <a href="https://redirect.github.com/aws/aws-lc-rs/issues/964">aws/aws-lc-rs#964</a></li>
+    # <li>Expose out-of-place AEAD sealing -- <a href="https://redirect.github.com/aws/aws-lc-rs/issues/1182">aws/aws-lc-rs#1182</a></li>
+    # </ul>
+    # <!-- raw HTML omitted -->
+    # </blockquote>
+    # <p>... (truncated)</p>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/aws/aws-lc-rs/commit/f464440d1fd3983ce9fb023e9eaf1698530919a2"><code>f464440</code></a> Prepare aws-lc-rs v1.18.0 (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/1200">#1200</a>)</li>
+    # <li><a href="https://github.com/aws/aws-lc-rs/commit/7085f8b6c855ae9271fac007c48c368ed0b91e46"><code>7085f8b</code></a> Fix bindings copy from read-only prebuilt AWS-LC install (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/1194">#1194</a>)</li>
+    # <li><a href="https://github.com/aws/aws-lc-rs/commit/21964403d21d3ccd302a5a59758bd1054aa50322"><code>2196440</code></a> Export native library build metadata from the -sys crates (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/1187">#1187</a>)</li>
+    # <li><a href="https://github.com/aws/aws-lc-rs/commit/623100f654e5d63cd909146a7ba4d53087c37828"><code>623100f</code></a> Prepare aws-lc-sys v0.44.0 (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/1199">#1199</a>)</li>
+    # <li><a href="https://github.com/aws/aws-lc-rs/commit/90c687e4f4e1ab886446545e604a73e70c50817d"><code>90c687e</code></a> Add <code>rsa::KeyPair::from_components</code> for constructing RSA key pairs from raw c...</li>
+    # <li><a href="https://github.com/aws/aws-lc-rs/commit/b84076fd5a4a2cc3b8d5ba2e89e3a67bc9096172"><code>b84076f</code></a> Automatically optimize aws-lc for size when opt-level is &quot;s&quot; or &quot;z&quot; (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/1159">#1159</a>)</li>
+    # <li><a href="https://github.com/aws/aws-lc-rs/commit/5a5408bc487adf4efab42f49ec9e8500fdf52357"><code>5a5408b</code></a> Publish script fixes: cargo clean failure, and verify aws-lc-rs against minim...</li>
+    # <li><a href="https://github.com/aws/aws-lc-rs/commit/a23dd3821222945eb989918e92d856da1b0c3092"><code>a23dd38</code></a> ci: fix mdbook test failure and run docs checks on PRs (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/1181">#1181</a>)</li>
+    # <li><a href="https://github.com/aws/aws-lc-rs/commit/390622ed837aa17b81ce20462ae09f5d28c2aef2"><code>390622e</code></a> fix: align PQDSA API with signature module conventions (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/1189">#1189</a>)</li>
+    # <li><a href="https://github.com/aws/aws-lc-rs/commit/4b0cb00c43463ee2c129672cf715ba195311f7cb"><code>4b0cb00</code></a> docs(signature): correct outdated note about signing a separate digest (<a href="https://redirect.github.com/aws/aws-lc-rs/issues/1186">#1186</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/aws/aws-lc-rs/compare/v1.17.3...v1.18.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aws-lc-rs&package-manager=cargo&previous-version=1.17.3&new-version=1.18.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47176	(@dependabot[bot], @dependabot[bot], #47176)	build: bump cookie from 0.18.1 to 0.18.2 (#47176)
+    ^ commit 452f4864229f8d74460b3236b7504793ea8683d6
+    # Bumps [cookie](https://github.com/SergioBenitez/cookie-rs) from 0.18.1 to 0.18.2.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rwf2/cookie-rs/blob/0.18.2/CHANGELOG.md">cookie's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>Version 0.18.2 (Aug 8, 2026)</h2>
+    # <h3>Changes and Fixes</h3>
+    # <ul>
+    # <li>
+    # <p>Stopped using internal <code>time</code> APIs.</p>
+    # </li>
+    # <li>
+    # <p><code>Expires</code> parsing is more RFC 6265-compliant.</p>
+    # <ul>
+    # <li>Weekday prefixes are now optional.</li>
+    # <li>Two-digit years follow the RFC boundary: <code>69</code> is <code>2069</code> (not <code>1969</code>).</li>
+    # </ul>
+    # </li>
+    # <li>
+    # <p>The manifest now declares <code>rust-version = &quot;1.56&quot;</code>.</p>
+    # </li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rwf2/cookie-rs/commit/1ec8fded5654679482a91c784e7ff2874b0fdeff"><code>1ec8fde</code></a> New version: 0.18.2.</li>
+    # <li><a href="https://github.com/rwf2/cookie-rs/commit/2b610058a2c9ce793a77ebba33b54dacf0e32825"><code>2b61005</code></a> Make weekdays optional when parsing 'Expires'.</li>
+    # <li><a href="https://github.com/rwf2/cookie-rs/commit/d4472e32618b197fc2ba5dfefd09fba44f7ccee6"><code>d4472e3</code></a> Stop using internal <code>time</code> APIs; preserve MSRV.</li>
+    # <li>See full diff in <a href="https://github.com/SergioBenitez/cookie-rs/compare/0.18.1...0.18.2">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cookie&package-manager=cargo&previous-version=0.18.1&new-version=0.18.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
++https://github.com/servo/servo/pull/47177	(@yezhizhen, @jschwe, #47177)	servo: Add clipboard backend for ohos (#47177)
+    dom; navigator.clipboard.writeText() now works on openharmony
+    ^ commit 5c2a3839525ed23d04cf347e28b516bec3c8733f
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # Testing: Manually tested. Note that **this only supports setting the clipboard**, as reading requires restricted permission that requires review from AppGallery: See https://developer.huawei.com/consumer/en/doc/harmonyos-guides/restricted-permissions#ohospermissionread_pasteboard.
+    # 
+    # For a test app, user can modify the signing config themselves to grant such permissions.
+    # But being able to set clipboard already make certain debugging easier. 
+    # 
+    # Fixes: Ohos port of #47153
+    # Co-authored-by: Jonathan Schwender <schwenderjonathan@gmail.com>
+https://github.com/servo/servo/pull/47178	(@kkoyung, #47178)	script: Normalize key usage during importKey operations (#47178)
+    ^ commit b8b1070aa2b6cfced7298bff4bb366666e15a895
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # According to WebCrypto API specification, the `SubtleCrypto.deriveKey`, `SubtleCrypto.importKey` and `SubtleCrypto.unwrapKey` methods should set the [[usages]] internal slot of that resultant `CryptoKey` to the normalized value of usages. However, our current implementation does not normalize the usages. This patch aims to fix it.
+    # 
+    # In our implementation, since we delegate the step of setting the [[usages]] internal slot to the importKey operations of supported cryptographic algorithms. We can fix it in those importKey operations, by calling `KeyUsageVecHelper::normalized_value` to normalize the usages during the creation of new `CryptoKey`.
+    # 
+    # Testing: Pass more WPT tests.
+    # Part-of: #47096
+https://github.com/servo/servo/pull/47158	(@Narfinger, #47158)	script: Use inclusive_ancestors_unrooted in interior of UnrootedFollowingNodeIterator (#47158)
+    ^ commit 865a9988f91a865b3cce18200feb733847b27f0c
+    # This uses inclusive_ancestors_unrooted instead of the rooted variant in the interior of UnrootedFollowingNodeIterator (in next_skipping_children_impl).
+    # Additionally, this PR relaxes the PartialEq for UnrootedDom to allow comparing UnrootedDom<'a,T> with UnrootedDom<'b, T>.
+    # 
+    # This saves 0.4% of cpu in a slice on walrusaudio.com
+    # 
+    # Testing: This does not have a specific testcase but inclusive_ancestors_unrooted is tested enough now to be equivalent to the rooted version. So this change should be equivalent.
+    # 
+https://github.com/servo/servo/pull/47101	(@TimvdLippe, #47101)	script: Move script_thread and related structs to `script/event_loop` (#47101)
+    ^ commit 96148a7f022e1b3ba37798f984503276d9eddedd
+    # Testing: it compiles
+https://github.com/servo/servo/pull/47196	(@yezhizhen, #47196)	media (ohos): Replace todo! panics with dummy backend (#47196)
+    ^ commit b3ee31d291c061a63d361425f691a2abdb924d7f
+    # Most of these mimics dummy backend.
+    # 
+    # Testing: Manually tested on #47193. At least these websites load normally without crash.
+    # Fixes: #47193.
+    # 
++https://github.com/servo/servo/pull/47197	(@Narfinger, @jdm, #47197)	script: Guard brotli transport stream with feature flag (#47197)
+    api; new CompressionStream("brotli") is now optional at compile time `cargo -p servo --features brotli-compression-stream` (enabled by default)
+    ^ commit 22b7b75ba42474a17ff2cabf492faae181a44e95
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # This guards brotli Transport Stream compression and decompression with a feature flag. If the feature flag is not enabled and transport stream is in brotli we throw a DOMException.
+    # 
+    # This saves roughly 1Mb in production-stripped binary.
+    # 
+    # Testing: The default is still to include brotli.
+    # Fixes: https://github.com/servo/servo/issues/47190
+    # 
+https://github.com/servo/servo/pull/47195	(@alice, #47195)	layout: Only update the accessibility tree when updating the rendering. (#47195)
+    ^ commit cbf92217ae6d2f87bd726252bc7176f373058b28
+    # In other situations, don't drain accessibility damage or rooted nodes.
+    # 
+    # I floated this idea on #46996 and thought it might be easiest to make it a standalone patch.
+    # 
+    # Testing: Existing tests pass.
+    # Fixes: Part of #47182
+    # 
++https://github.com/servo/servo/pull/46993	(@TimvdLippe, @jdm, #46993)	script: Support `<meta name="color-scheme">` (#46993)
+    layout; impl <meta name=color-scheme> overrides color scheme set by the embedder
+    ^ commit 901dc8ac1a46865ff9746dfe51b9ca4913de69db
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Allows documents to overwrite the preference of the embedder for a particular page. This is different to the preference value, which is conditional. Here, it is always explicitly set for the page, regardless what the user wanted.
+    # 
+    # To make it clear that both a document and an embedder can have a theme set, rename the existing `theme` to `embedder_theme`.
+    # 
+    # Lastly also introduce a convenience method `old_value()` on an `AttributeMutation`, to save me a bit of copy-pasting that was in multiple places.
+    # 
+    # Testing: newly passing WPT tests
+https://github.com/servo/servo/pull/47167	(@Narfinger, #47167)	net: Respect temporary_storage option for disk_cache (#47167)
+    ^ commit 27a317dd69cd43a5dd8ba4607e1a73628c9352fd
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    ^ /!\ may contain changes to EXPERIMENTAL_PREFS
+    # This PR has two changes:
+    # - Make the disk_cache respect temporary_storage option to create disk_cache in a temporary location.
+    # - Reorder servoshell CmdArgs to be in alphabetical order.
+    # 
+    # Testing: WPT run (which enables disk cache with the temporary flag) was done here: https://github.com/Narfinger/servo/actions/runs/31575386386/job/94053742771
+    # 
+>>> 2026-08-13T23:24:12Z
+-https://github.com/servo/servo/pull/47208	(@dependabot[bot], @dependabot[bot], #47208)	build: bump toml_parser from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0 (#47208)
+    ^ commit 4842b770ee579f17e9eb131ee58a0a43181ec776
+    # Bumps [toml_parser](https://github.com/toml-rs/toml) from 1.1.2+spec-1.1.0 to 1.1.3+spec-1.1.0.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/toml-rs/toml/commit/4ec099fed591a172f82007cb2f9d605985bbecee"><code>4ec099f</code></a> chore: Release</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/5a47a5180e8acd71ca17e14be75081041e457051"><code>5a47a51</code></a> docs: Update changelog</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/da0911f7e79a928e2f0f3efe8e30b5bbeb3430d5"><code>da0911f</code></a> perf(parser): Reduce over allocation by better tokens/byte ratio (<a href="https://redirect.github.com/toml-rs/toml/issues/1193">#1193</a>)</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/26eb1571f266a72813df4e02367213bd76f68624"><code>26eb157</code></a> perf(parser): Reduce over allocation by better tokens/byte ratio</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/ca4c7bf420ad3aa5d318156de483e86ec5c632fe"><code>ca4c7bf</code></a> chore(deps): Update Prek to v0.4.11 (<a href="https://redirect.github.com/toml-rs/toml/issues/1191">#1191</a>)</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/a0c14f4b6a46ee61a2ffbb8bd760f014bc157a64"><code>a0c14f4</code></a> chore(deps): Update Prek to v0.4.10 (<a href="https://redirect.github.com/toml-rs/toml/issues/1190">#1190</a>)</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/eb251609a333580bf005cae27df853bb63dffdbe"><code>eb25160</code></a> chore: Release</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/f36fb52c37593b9fece9f4382a56ab51c9e65890"><code>f36fb52</code></a> docs: Update changelog</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/3adbbb7860810b146dbdedba1f315c90813083f2"><code>3adbbb7</code></a> fix(writer): Don't overflow (<a href="https://redirect.github.com/toml-rs/toml/issues/1189">#1189</a>)</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/fb0c1b376d291ee4ffdf5297a67579f2ad7ce70d"><code>fb0c1b3</code></a> fix(writer): Don't overflow</li>
+    # <li>Additional commits viewable in <a href="https://github.com/toml-rs/toml/compare/toml_parser-v1.1.2...toml_parser-v1.1.3">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=toml_parser&package-manager=cargo&previous-version=1.1.2+spec-1.1.0&new-version=1.1.3+spec-1.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47206	(@dependabot[bot], @dependabot[bot], #47206)	build: bump web_atoms from 0.2.5 to 0.2.6 (#47206)
+    ^ commit 7ae8ffcb980c5fbf0e0a863dbdcae2d231018c10
+    # Bumps [web_atoms](https://github.com/servo/html5ever) from 0.2.5 to 0.2.6.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li>See full diff in <a href="https://github.com/servo/html5ever/commits">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=web_atoms&package-manager=cargo&previous-version=0.2.5&new-version=0.2.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47199	(@niyabits, #47199)	script: abstract the cache logic of `PaintWorklet`'s Worklet Tasks (#47199)
+    ^ commit 94945c4b5ca30a250607e7db0369424853ed3ec6
+    # Simplifies the cache logic of `PaintWorkletTask::DrawAPaintImage` and `PaintWorkletTask::SpeculativelyDrawAPaintImage`,
+    # 
+    # Add and use two cache helper methods:
+    # 1. `has_cached_paint_image`
+    # 2. `set_cached_paint_image`
+    # 
+    # Testing: no testing requires as this patch is a refactor and does not change existing logic
+    # 
+https://github.com/servo/servo/pull/47210	(@kkoyung, #47210)	script: Optimize TurboSHAKE support in WebCrypto (#47210)
+    ^ commit 42892b088a2ea622cd07786416545f7cd20f76ae
+    # The TurboSHAKE algorithm provided by the `turboshake` crate (current latest stable version: 0.7.1) takes the domain separation parameter as a const generic, which requires to be known as compile time. However, the WebCrypto API allows users set it at runtime. Our current implementation maps the user-provided value to const generic via the `seq!`, which results in large `match` blocks and instantiating the generic many times.
+    # 
+    # In this patch, we replace the `turboshake` crate with our own TurboSHAKE implementation, which takes the domain separation as a usual function parameter at runtime. The implementation is equivalent to combining `turboshake::TurboShake` and `turboshake::TurboShakeReader` (https://docs.rs/turboshake/0.7.1/turboshake/struct.TurboShake.html and https://docs.rs/turboshake/0.7.1/turboshake/struct.TurboShakeReader.html). Since it is also based on the `keccak` and `sponge-cursor` crate, so it should have the similar performance as the `turboshake` crate.
+    # 
+    # This helps us get rid of the large expanded `match` blocks and the multiple instantiations of the generic function. We already import the `keccak` and `sponge-cursor` crate as dependencies of `sha3`, so we are not actually adding dependencies. Furthermore, we can drop `turboshake` and `seq-macro` from our dependency tree.
+    # 
+    # This reduces the binary size by around 300KB in release mode.
+    # 
+    # Testing: Refactoring. Existing tests suffice.
+    # Fixes: #47202
+-https://github.com/servo/servo/pull/47213	(@sagudev, #47213)	script: maybe_user_interacting_guard in EnqueuedPromiseCallback (#47213)
+    ^ commit ee21893db306eae4c15ac7a624e38b7b146b1779
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # I accidentality fixed this code in SM bump and then spent 2h to discover that we are doing this unconditionally, which is wrong. One test now fails (buggy webxr impl) but one does pass.
+    # 
+    # Testing: Covered by WPT tests 
++https://github.com/servo/servo/pull/47200	(@janeoa, #47200)	webgl: Add feature guard (#47200)
+    perf api; WebGL can now be compiled out (cargo -p servo --features webgl). disabled by default(!) asked in comments
+    ^ commit 522fa371e41f2405025fbccd16bda1f291ce2e2a
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Add webgl feature guard, so that we can build without it.
+    # 
+    # Testing: has no automated tests, but can verify by building without the webgl using `./mach build --no-default-features --features bundled,gamepad,webgpu,max_log_level,js_jit`
+    # Fixes: https://github.com/servo/servo/issues/47184
+    # 
+    # This PR does a lot of small changes:
+    # - adds `webgl = []` as features to script, servoshell, servo, constellation, paint
+    # - adds a lot of `#[cfg(feature = "webgl")]`
+    # - make webxr depend on webgl `webxr = ["webgl",` (as previouslty webgl was non optional)
+    # - adds `// skip-unless CARGO_FEATURE_WEBGL` to the `.webdl`'s
+    # 
+    # The .webdl part was tricky as it had:
+    # ```
+    # typedef (OffscreenCanvasRenderingContext2D
+    #   or ImageBitmapRenderingContext
+    #   or WebGLRenderingContext
+    #   or WebGL2RenderingContext
+    # ) OffscreenRenderingContext;
+    # ```
+    # and as the WebGLRenderingContext is now optional, I had to introduce 
+    # 
+    # ```
+    # typedef (OffscreenCanvasRenderingContext2D
+    #   or ImageBitmapRenderingContext
+    #   // skip-unless CARGO_FEATURE_WEBGL begin
+    #   or WebGLRenderingContext
+    #   or WebGL2RenderingContext
+    #   // skip-unless CARGO_FEATURE_WEBGL end
+    # ) OffscreenRenderingContext;
+    # ```
+    # 
+    # I though about making it a separate PR, but I guess it should stay here, as the separate PR would need a working example anyway.
+    # 
+    # ---
+    # 
+    # I made sure that this would still compile with and without webgl, and currently webxr forces webgl as a dependency 
+https://github.com/servo/servo/pull/47214	(@Narfinger, #47214)	net: Use aws-lc-rs for subresource integrity instead of sha2 crate (#47214)
+    ^ commit e0b630fe3e03d494d87ff977c91cbe6172dd8dfc
+    # This switches the subresource integrity system from the sha2 crate to aws-lc-rs.
+    # 
+    # Aws-lc-rs is currently the backend for tls and tls anyway needs sha2.
+    # 
+    # This saves us ~0.2Mb of binary size in production-stripped when webcrypto is disabled.
+    # 
+    # Testing: SHA algorithms should be the same, no matter from which crate they come. Subresource integrity should have WPT tests.
+    # 
++https://github.com/servo/servo/pull/47224	(@Psychpsyo, #47224)	script: Make inserttext not crash when inserting non-ASCII text (#47224)
+    wip crash dom; fix crash in document.execCommand("insertText")
+    ^ commit 046da7013f1378d86960a97b25e8fdffe1a23df2
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Fixes an infinite loop when inserting non-ASCII text with inserttext.
+    # 
+    # Testing: Less crashes. This uncovers some failures for autolinking and chrome-specific whitespace handling. Autolinking is just not implemented yet and the whitespace handling also has a bunch of failures in Safari and Ladybird. But both of these can be looked at in a subsequent PR.
+    # Fixes: https://github.com/servo/servo/issues/47152
+    # 
+https://github.com/servo/servo/pull/47223	(@Narfinger, #47223)	paint: Small consolidation of webgl features in paint (#47223)
+    ^ commit dbf448faa1bcc001616512605e678e82d0398523
+    # Consolidate webgl feature in paint under a commond struct saving us a couple of flags.
+    # Additionally, shutdown was moved to this struct.
+    # 
+    # Testing: Just a refactor so no extra tests needed.
+    # 
+>>> 2026-08-14T23:28:40Z
+-https://github.com/servo/servo/pull/47230	(@dependabot[bot], @dependabot[bot], #47230)	build: bump ctor from 1.0.12 to 1.0.13 (#47230)
+    ^ commit 4c78a875f2aae7a75bf002a27d77cc24aede06d4
+    # Bumps [ctor](https://github.com/mmastrac/linktime) from 1.0.12 to 1.0.13.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/mmastrac/linktime/releases">ctor's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>ctor-1.0.13</h2>
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>Bumped internal proc macro minimum version to pick up consistent 64-bit hash chunks (<a href="https://redirect.github.com/mmastrac/linktime/issues/508">#508</a>) and the cross-crate section-name fix (<a href="https://redirect.github.com/mmastrac/linktime/issues/509">#509</a>) (should not result in any downstream visible changes)</li>
+    # <li>Document <code>crate_path</code> and re-exports by <a href="https://github.com/mmastrac"><code>@​mmastrac</code></a> in <a href="https://redirect.github.com/mmastrac/rust-ctor/pull/514">mmastrac/rust-ctor#514</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/mmastrac/rust-ctor/compare/ctor-1.0.12...ctor-1.0.13">https://github.com/mmastrac/rust-ctor/compare/ctor-1.0.12...ctor-1.0.13</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/mmastrac/linktime/commit/00ca36a7ed6d959d01866feeeec078a79b6dfa3f"><code>00ca36a</code></a> Prepare for release (<a href="https://redirect.github.com/mmastrac/linktime/issues/515">#515</a>)</li>
+    # <li><a href="https://github.com/mmastrac/linktime/commit/c65b7d0649606a9a9e687f211dd9588db9da53e5"><code>c65b7d0</code></a> Document crate_path and re-exports (<a href="https://redirect.github.com/mmastrac/linktime/issues/514">#514</a>)</li>
+    # <li><a href="https://github.com/mmastrac/linktime/commit/4be33acb5b423d3d0b5b145b96a368170fc5f7a2"><code>4be33ac</code></a> Work around DragonflyBSD crash at startup (<a href="https://redirect.github.com/mmastrac/linktime/issues/513">#513</a>)</li>
+    # <li><a href="https://github.com/mmastrac/linktime/commit/e944fce67830715194730df6934320b84c90d1b1"><code>e944fce</code></a> Test BSD and minimal targets with crok (<a href="https://redirect.github.com/mmastrac/linktime/issues/512">#512</a>)</li>
+    # <li><a href="https://github.com/mmastrac/linktime/commit/e0b8059eac26085a15b265d8159518e2d11c585d"><code>e0b8059</code></a> Fix WASM reference-section const cell layout (<a href="https://redirect.github.com/mmastrac/linktime/issues/511">#511</a>)</li>
+    # <li><a href="https://github.com/mmastrac/linktime/commit/0977936f677cbc5e3b5bceeb9b859f26d72dea73"><code>0977936</code></a> Fix cross-crate section error on Rust versions 1.88-1.94 (<a href="https://redirect.github.com/mmastrac/linktime/issues/509">#509</a>)</li>
+    # <li><a href="https://github.com/mmastrac/linktime/commit/ab85144b8802362e947947be8838b638b95f4bc1"><code>ab85144</code></a> Improve BSD reliability (<a href="https://redirect.github.com/mmastrac/linktime/issues/510">#510</a>)</li>
+    # <li><a href="https://github.com/mmastrac/linktime/commit/8d20542db053116d56d1cb930c1f59c4aea5226b"><code>8d20542</code></a> Ensure hashes always compute 64-bit chunks (<a href="https://redirect.github.com/mmastrac/linktime/issues/508">#508</a>)</li>
+    # <li><a href="https://github.com/mmastrac/linktime/commit/7c3993d7043e81cb60e4544baa8eb31fdc295e10"><code>7c3993d</code></a> Ignore full crate path test as well (<a href="https://redirect.github.com/mmastrac/linktime/issues/506">#506</a>)</li>
+    # <li>See full diff in <a href="https://github.com/mmastrac/linktime/compare/ctor-1.0.12...ctor-1.0.13">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ctor&package-manager=cargo&previous-version=1.0.12&new-version=1.0.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47232	(@dependabot[bot], @dependabot[bot], #47232)	build: bump xml from 1.3.0 to 1.4.0 (#47232)
+    ^ commit c7795dd61aa832fcb54e5d308b930be5016e2393
+    # Bumps [xml](https://github.com/kornelski/xml-rs) from 1.3.0 to 1.4.0.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/kornelski/xml-rs/blob/main/Changelog.md">xml's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>Version 1.4</h2>
+    # <ul>
+    # <li>Added attribute whitespace and newline normalization</li>
+    # <li>Improved checks in CDATA and PI</li>
+    # </ul>
+    # <h2>Version 1.3</h2>
+    # <ul>
+    # <li>Fixed escaping of xmlns attributes</li>
+    # <li>Reduced allocations</li>
+    # <li>Fixed tests to be compatible with BufReader</li>
+    # <li>Improved handling of resuming after EOF</li>
+    # <li>Made duplicate atribute check namespace-aware</li>
+    # </ul>
+    # <h2>Version 1.2</h2>
+    # <ul>
+    # <li>Tolerate future XML versions in the XML prolog, as allowed by the XML 1.0 grammar</li>
+    # <li><code>doctype_ids()</code> for additional DOCTYPE details</li>
+    # </ul>
+    # <h2>Version 1.1</h2>
+    # <ul>
+    # <li><code>Events</code> iterator can access the underlying <code>EventReader</code>.</li>
+    # <li><code>add_entities</code> can be called after <code>DOCTYPE</code> to conditionally support XHTML, etc.</li>
+    # <li>Fixed parsing of namespaces prefixes starting with a non-ASCII char.</li>
+    # </ul>
+    # <h2>Version 1.0.0</h2>
+    # <ul>
+    # <li>Added <code>Doctype</code> event</li>
+    # <li>Marked structs as <code>#[non_exhaustive]</code></li>
+    # <li>Merged <code>ParserConfig2</code> back into <code>ParserConfig</code></li>
+    # <li>Added option to the writer to pass through XML markup unmodified</li>
+    # <li><code>xml-analyze</code> binary has been moved to examples</li>
+    # <li>Writer escapes <code>--</code> in comments and <code>]]&gt;</code> in CDATA</li>
+    # </ul>
+    # <h2>Version 0.8.27</h2>
+    # <ul>
+    # <li>Added detection of invalid <code>&lt;?</code> in attributes</li>
+    # </ul>
+    # <h2>Version 0.8.26</h2>
+    # <ul>
+    # <li>Fixed buffering of files with a broken UTF-16 encoding</li>
+    # </ul>
+    # <h2>Version 0.8.25</h2>
+    # <ul>
+    # <li><code>TryFrom</code> for converting from reader to writer events, to make <code>.as_writer_event()</code> more discoverable.</li>
+    # </ul>
+    # <h2>Version 0.8.24</h2>
+    # <ul>
+    # <li>Fixed reporting of line/column position of CDATA when trimming whitespace</li>
+    # </ul>
+    # <h2>Version 0.8.23</h2>
+    # <!-- raw HTML omitted -->
+    # </blockquote>
+    # <p>... (truncated)</p>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/kornelski/xml-rs/commit/41949a759dada9493b29e0661b318f1960d1f849"><code>41949a7</code></a> 1.4.0</li>
+    # <li><a href="https://github.com/kornelski/xml-rs/commit/12f1f4949dd9337883b508585281bb31e253b711"><code>12f1f49</code></a> Bump</li>
+    # <li><a href="https://github.com/kornelski/xml-rs/commit/0f084ec35f0c0f0e4f96bf4a962c38df2f5a3756"><code>0f084ec</code></a> Fix xmlns serialization</li>
+    # <li><a href="https://github.com/kornelski/xml-rs/commit/6def29fd97a11c4ba00fc9c7a5de0c1f091c5df1"><code>6def29f</code></a> Perform end-of-line normalization</li>
+    # <li><a href="https://github.com/kornelski/xml-rs/commit/ece0f878eb3fe52d025bbb768db8f9627fa53873"><code>ece0f87</code></a> Return Unexpected EOF for broken CDATA under ignoring EOF config</li>
+    # <li><a href="https://github.com/kornelski/xml-rs/commit/656f78a92101a79121872817511ea7b0f69fe215"><code>656f78a</code></a> Improve well-formedness checks for Processing Instructions</li>
+    # <li><a href="https://github.com/kornelski/xml-rs/commit/4e76ad56241ce6d8f0f6b5f32c822dbb01effe8e"><code>4e76ad5</code></a> Normalize whitespace in attribute values</li>
+    # <li>See full diff in <a href="https://github.com/kornelski/xml-rs/compare/1.3.0...1.4.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=xml&package-manager=cargo&previous-version=1.3.0&new-version=1.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47233	(@dependabot[bot], @dependabot[bot], #47233)	build: bump zune-core from 0.5.1 to 0.5.3 (#47233)
+    ^ commit 77cfed039fe673e224736747c83bd63de1f12727
+    # Bumps [zune-core](https://github.com/etemesi254/zune-image) from 0.5.1 to 0.5.3.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/etemesi254/zune-image/commit/df468fb3e8e1d73c09ddd1363e41dbffb48870bd"><code>df468fb</code></a> cargo: Make a release 2</li>
+    # <li><a href="https://github.com/etemesi254/zune-image/commit/63976504ace9cb908341291d563916a2ede60ac7"><code>6397650</code></a> cargo: Make a release</li>
+    # <li>See full diff in <a href="https://github.com/etemesi254/zune-image/compare/0.5.1...0.5.3">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zune-core&package-manager=cargo&previous-version=0.5.1&new-version=0.5.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47234	(@kkoyung, #47234)	script: Simplify internal slots of `CryptoKey` (#47234)
+    ^ commit cb0f70646e7766468b73e3fb366d73b88754f1f1
+    # After #47178, the [[extractable]] and [[usages]] internal slots of the `CryptoKey` interface will not change after the key creation. We can take away the `Cell` from the [[extractable]] internal slot and `DomRefCell` from the [[usages]] internal slot to simplify the code.
+    # 
+    # Testing: Refactoring. Existing tests suffice.
+    # 
+-https://github.com/servo/servo/pull/47201	(@jdm, #47201)	script: Make paint timing unit test wait for performance observer. (#47201)
+    ;test; test only
+    ^ commit 582b09afe95d3685976bb7730d9b207d63f1af4a
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # The existing code tried to wait for requestAnimationFrame but always failed to execute instead. We now guarantee that the performance entries exist before asserting their contents.
+    # 
+    # Testing: modifying existing tests.
+    # Fixes: #47156
+    # 
+https://github.com/servo/servo/pull/47216	(@yezhizhen, #47216)	webdriver: Support latest "Get Element Tag Name" (#47216)
+    ^ commit c5e281afdf8fec12b3f0dbd9ea10739fdf6b9eb9
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This also adds helper `fn qualified_name` to be shared with [tagName](https://dom.spec.whatwg.org/#dom-element-tagname).
+    # 
+    # Testing: Passing updated test in https://github.com/web-platform-tests/wpt/pull/61162
+    # Fixes: #47209
+-https://github.com/servo/servo/pull/47240	(@jdm, #47240)	servo: Wait for URL change notification in unit test. (#47240)
+    ;test; test only
+    ^ commit 386904a38308fb899925aaae7359a3b69131ad5c
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # The test asserts the current URL of the webview, but it doesn't always wait long enough for the URL to be updated. Both conditions are necessary because there is not a guaranteed ordering between the session history update and the load status update, since they are triggered by different threads.
+    # 
+    # Testing: Modifies an existing unit test.
+    # Fixes: #47239
+    # 
++https://github.com/servo/servo/pull/47103	(@lumiscosity, @TimvdLippe, #47103)	script: Implement source set operations for `<link>` (#47103)
+    dom; imageSrcset and imageSizes on HTMLLinkElement
+    ^ commit 777a98ca4e82eec00c92a7e0aded07e1f5e7da25
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Companion Stylo PR: https://github.com/servo/stylo/pull/440
+    # Implements source set operations on the `<link>` element.
+    # 
+    # Testing: 4 new passing in `preload`, attribute tests on idlharness pass.
+    # 
+https://github.com/servo/servo/pull/47250	(@webbeef, #47250)	net: use serde_bytes to serialize ResponseBody (#47250)
+    ^ commit e6b2f237be64121cf16ed92ea97a78de259d9117
+    # That enables postcard to use the more efficient serialize_bytes and deserialize_bytes methods.
+    # 
+    # Testing: optimization covered by existing tests.
+https://github.com/servo/servo/pull/47251	(@Narfinger, #47251)	script: Small performance improvements in queue_a_mutation_record (#47251)
+    ^ commit 2b2dcbd1deefbd8011f0076e045f5f988f8e8141
+    # This contains two small optimizations:
+    # - Use unrooted iterator as now we can statically guarantee that no GC happens.
+    # - Switch normal HashMap to FxHashMap. DomRoot/Dom implements Hash by hashing the ptr, hence, there is no attack vector.
+    # 
+    # Testing: This is refactor and static guaranteed that no gc can happen.
+    # 
+https://github.com/servo/servo/pull/47249	(@Narfinger, #47249)	fonts: Do not copy FontDescriptor needlesly (#47249)
+    ^ commit 84908d3bc6cd40546e4fc6ba0310b1be9439e7be
+    # Previously, FontTemplateRef::descriptor and identifier cloned the value. This just returns the AtomicRef with some call sites using to_owned() but not all. This should save some amount of work, especially for methods such as descriptor_difference.
+    # 
+    # This saves 0.4% in a 308ms slice on script thread.
+    # 
+    # Testing: Refactor so no extra test is needed.
+    # 
+https://github.com/servo/servo/pull/47248	(@Narfinger, #47248)	net: Add AuthCache and Cookie Storage to memory reporting (#47248)
+    ^ commit 7a27057feec1d061a884f6ae5e0df86bf0f6e4d0
+    # This adds auth cache and cookie storage to memory reporting.
+    # Because the cookie storage is complicated we only have a lower approximation for it by only looking at how much the value would have to be allocated.
+    # 
+    # Testing: Memory reporting does not have automatic tests. Tested manually.
+    # 
+https://github.com/servo/servo/pull/47219	(@Narfinger, #47219)	net: Cleanup subresource integrity (#47219)
+    ^ commit 863c4eccbc688ee1d914e683d4173ee9e73d684a
+    # Needs https://github.com/servo/servo/pull/47214
+    # 
+    # Subresource integrity was using strings compares at multiple points and needlessly used allocated strings. This uses an enum which allows us to enforce the priority with a PartialOrd. 
+    # This removes one unit test for checking the order of the hash function as it is now not necessary.
+    # 
+    # Testing: WPT test should test subresource integrity (https://github.com/Narfinger/servo/actions/runs/31698050312)
+    # 
+https://github.com/servo/servo/pull/47254	(@TimvdLippe, #47254)	script: Move single usage files into subdirectories (#47254)
+    ^ commit f2b524b91b32ec1b6e34a18157d9b377a57f76bc
+    # All of these files were only used in a single place. Therefore move them into those relevant directories and reduce visibility.
+    # 
+    # Testing: it compiles
+https://github.com/servo/servo/pull/47245	(@Narfinger, #47245)	net: Fix logic error in disk cache pref parsing (#47245)
+    ^ commit 5a02d9d6a9bc94c6815f7275561e999e68675086
+    # Fix this logic error in disk cache parsing which meant nobody could enable the cache (as an empty string is automatically seen as disabled).
+    # 
+    # Testing: Manually tested.
+    # 
+>>> 2026-08-15T23:27:55Z
+https://github.com/servo/servo/pull/47221	(@Narfinger, @yezhizhen, #47221)	layout: Use phfmap for quotation (#47221)
+    ^ commit ca61f0d1d6e52f0fdc814cce6ad9bd187601e7e9
+    # Previously we used a normal HashMap initialized at usage. Switching to a phf_map should improve performance. As the data was anyway in the binary, the binary size should not increase.
+    # 
+    # Testing: This is equivalent functionality just performance characteristics are different.
+    # 
++https://github.com/servo/servo/pull/47050	(@jdm, #47050)	script: Make about:blank documents load synchronously without a parser. (#47050)
+    web; see #46975
+    ^ commit 7f8f0862de7a020ec0353dc1aa982f95ed2396a2
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This pushes us closer to the specification's model of the document lifecycle by skipping the parser for the initial about:blank document.
+    # 
+    # Testing: New passing tests.
+    # Fixes: part of #43149
+    # 
+-https://github.com/servo/servo/pull/47260	(@jdm, #47260)	wpt: Enable srcdoc referrer-policy tests. (#47260)
+    ;test; test only
+    ^ commit b15d0ca3a165d1b51c6757ccb7167e7197c23fe9
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Since we now have much more consistent about:srcdoc support, the tests no longer exhibit the strange failures that made us disable them years ago.
+    # 
+    # Testing: new tests are running.
+    # Fixes: #24731
+    # 
+https://github.com/servo/servo/pull/47262	(@jschwe, #47262)	script_webgpu: Enable webgpu feature on bindings (#47262)
+    ^ commit feaf6534d845203acf550ceecee34cf933363b40
+    # script_webgpu requires the webgpu feature in bindings. This worked via feature unification for servo builds, but breaks when building script_webgpu individually.
+    # 
+    # Testing: Building script_webgpu individually is not covered by automatic tests
+    # Fixes: #47261
++https://github.com/servo/servo/pull/47266	(@lumiscosity, #47266)	script: Avoid binding link element with empty href (#47266)
+    crash; fix crash when <link rel=preload href> is empty (affects gumtree.com.au)
+    ^ commit 0d558ccb42e7b570b80c85f3e78bf6048d024841
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This was crashing immediately after with an assert checking if the href isn't empty. As per spec: If the [href](https://html.spec.whatwg.org/multipage/semantics.html#attr-link-href) attribute is present, then its value must be a [valid non-empty URL potentially surrounded by spaces](https://html.spec.whatwg.org/multipage/urls-and-fetching.html#valid-non-empty-url-potentially-surrounded-by-spaces).
+    # 
+    # Testing: One new crashtest.
+    # Fixes: #47024.
+    # 
+>>> 2026-08-16T23:21:37Z
+https://github.com/servo/servo/pull/47264	(@yezhizhen, #47264)	url: Avoid allocation when serializing opaque origins (#47264)
+    ^ commit 7bea9ed91f287ad0d98e4c612369f3743c25934f
+    # For opaque origin, we were cloning `ImmutableOrigin` + creating `Origin` + allocating String, which ends up just as "null": [see here](https://github.com/servo/rust-url/blob/00a6ce58d02f4e0d43c5ca0702c0bedb8b1ebf3a/url/src/origin.rs#L78-L80)
+    # 
+    # So we always return Cow instead.
+    # 
+    # Testing: Should not change behaviour. Existing tests.
+-https://github.com/servo/servo/pull/47267	(@servo-wpt-sync, #47267)	Sync WPT with upstream (16-08-2026) (#47267)
+    ^ commit a6a3fa2ecb39f94d377e62672085828ecf80630e
+    # Automated downstream sync of changes from upstream as of 16-08-2026
+    # [no-wpt-sync]
+-https://github.com/servo/servo/pull/47088	(@shubhamg13, #47088)	servoshell: Only hide toolbar when full-screen is from Web API (#47088)
+    ^ commit 203cf40d43d7e1408bc97e82608c48cc9c2baa48
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # This hides toolbar when full-screen is from Web API
+    # 
+    # > Please view changes with `Hide whitespaces` option
+    # 
+    # Testing: Attached Screenshot
+    # - MacOS: Fixed (Tabbar and Tool-bar are visible)
+    # <img width="1280" height="828" alt="Screenshot 2026-08-08 at 10 06 59 PM" src="https://github.com/user-attachments/assets/4b76f33f-0027-4f96-857b-e7faa8cc359a" />
+    # 
+    # - Linux : No Effect
+    # <img width="2560" height="1440" alt="Screenshot from 2026-08-10 11-43-05" src="https://github.com/user-attachments/assets/ba6b6a93-40d9-4ecf-b51d-6f0cfa69bb34" />
+    # - Windows: No Effect
+    # <img width="1280" height="800" alt="image" src="https://github.com/user-attachments/assets/fcdcb9ef-9189-45fd-813f-7e9a1c999dea" />
+    # 
+    # 
+    # Fixes: #47144
+    # 
+https://github.com/servo/servo/pull/47211	(@jschwe, #47211)	script_bindings: Deduplicate wrap (#47211)
+    ^ commit 9701eef0441b037af8126bd48523f4acffb9505d
+    # `wrap` is instantiated many times. Moving most of the code into a non-generic helper, reduces the code size (~370KB in production-stripped).
+    # This does move `raw.reflect_with()` and `set_proto_id()`, which are now after `config.has_legacy_unforgeable_members`, but I think that should be fine. But that should be looked at by someone who is more familiar with SM.
+    # Note: The generic instances still seems to have half the original size, so further outlining might be able to reduce the size a bit more.
+    # 
+    # Testing: Should be covered by existing WPT-tests.
+    # 
+    # 
+https://github.com/servo/servo/pull/47226	(@TimvdLippe, #47226)	script: Fix handling of blobs for hyperlinks (#47226)
+    ^ commit d156d4dded5b8598d95a6dce9c0dcc9915a0f65a
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # There were several issues. First of all, setting a `href` attribute didn't trigger the appropriate mutation callback.
+    # 
+    # That uncovered an issue with handling of blobs, which are tested by `url/a-element-origin*` tests. These tests check that the logic for obtaining origins of blobs correctly handles the case where the blob URL is not actually a blob with UUID. E.g. `blob:blob:https://example.org/`. In this case, the origin is opaque, whereas before it would return `blob:https://example.org/`. That's because the origin was computed, then a UUID was attempted to be parsed from the URL (which fails) and then no token is generated.
+    # 
+    # Instead, we need to obtain the origin on the `UrlWithBlobClaim` whenever requested. This actually fully implements https://url.spec.whatwg.org/#concept-url-origin where it now handles the Blob URL entries. That's the token we attach to it, where the token has the origin of the document/global.
+    # 
+    # All of this needed `get_url()` for `<a>` and `<area>` to be a `UrlWithBlobClaim`. When I ported that over together with the mutation callback, I ran into double borrow issues. Therefore, I ported the `borrow_mut` to `safe_borrow_mut`, ensuring the `cx.no_gc` checks if no GC happens. Then, the `self.update_href(cx, url.as_ref().unwrap());` was no longer required, since that can be the serialization of the URL.
+    # 
+    # There's quite a bit going on in this PR, but mostly is mechanical since the same logic was used in all of these places.
+https://github.com/servo/servo/pull/47215	(@shubhamg13, #47215)	layout: Wrap up LCP Image things into PendingImageRecord (#47215)
+    ^ commit 68813fb122a7c408972035615416b2a8a24ace76
+    # Adding a struct `PendingImageRecord`. 
+    # Add complimentary `W3C` spec steps.
+    # Pre-requisite for #47212
+    # 
+    # Testing: WPT Unchanged.
+    # Fixes: Part of #42000
+    # 
++https://github.com/servo/servo/pull/47270	(@TimvdLippe, @jdm, #47270)	script: Fix iframe name for initial navigation (#47270)
+    dom; fix bug in get name() on Window (window.name)
+    ^ commit 80b2c05fb8c0261977d033c70a00d7c50d0192e5
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # During the initial load of an iframe, the name wasn't available yet. Now, we set the name immediately when creating the child navigable, following the spec.
+    # 
+    # Fixes #47259
+    # 
+    # Testing: new WPT passes
+    # 
+https://github.com/servo/servo/pull/47271	(@TimvdLippe, #47271)	script: Move files into `script/{css,fetch}` (#47271)
+    ^ commit 6e3ac825df322ad3fe002c559eb326a7bb976caf
+    # Both `css.rs` and `fetch.rs` should be cleaned up after, since these names don't reflect the behavior they implement. For `css.rs` that should be a single name probably, but for `fetch.rs` that's more tricky. I kept that separate to keep things manageable with reviewing.
+    # 
+    # Testing: it compiles
+    # 
+-https://github.com/servo/servo/pull/47274	(@jdm, #47274)	wpt: Remove all skipped test files from include.ini (#47274)
+    ;test; test only
+    ^ commit 36965f73dd6edb60daf13c7ee45ed2e2dd1fc5f8
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # It's too easy to forget about these, since they never get run as part of our CI when listed in include.ini. It's better to file issues about tests that have intermittent results so they can benefit from our related tooling.
+    # 
+    # Testing: Now running more tests.
+https://github.com/servo/servo/pull/47168	(@eachra-bawn, #47168)	script: Add error messages for `Node` (#47168)
+    ^ commit a3d9ed9f0002a21962e48301a10bcb4f51c86a18
+    # Part of: #40756
+    # 
+https://github.com/servo/servo/pull/47276	(@veyndan, #47276)	android: Remove uninvoked `onRedrawing` callback (#47276)
+    ^ commit 59e005c79c5fac6b5fbf804a86a74f6aaa12f6c1
+    # The native code never calls this callback, and even if it did, the Android-side just ignores this.
+    # 
+    # Testing: There are no automated tests for Android.
+>>> 2026-08-17T23:26:16Z
+-https://github.com/servo/servo/pull/47280	(@dependabot[bot], @dependabot[bot], #47280)	build: bump rustls-webpki from 0.103.13 to 0.103.14 in the rustls-webpki-related group (#47280)
+    ^ commit 55b68dfc6e7cd97cdfe101b6d052d21242576ccd
+    # Bumps the rustls-webpki-related group with 1 update: [rustls-webpki](https://github.com/rustls/webpki).
+    # 
+    # Updates `rustls-webpki` from 0.103.13 to 0.103.14
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li>See full diff in <a href="https://github.com/rustls/webpki/commits">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls-webpki&package-manager=cargo&previous-version=0.103.13&new-version=0.103.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
+    # - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
+    # - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47283	(@dependabot[bot], @dependabot[bot], #47283)	build: bump http-body-util from 0.1.4 to 0.1.5 (#47283)
+    ^ commit f61c51e89a0cead30083b66628b5616bdbaac29c
+    # Bumps [http-body-util](https://github.com/hyperium/http-body) from 0.1.4 to 0.1.5.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/hyperium/http-body/commit/07838bd97b714b95bd783cd695ebf211b67545c4"><code>07838bd</code></a> http-body-util v0.1.5</li>
+    # <li><a href="https://github.com/hyperium/http-body/commit/612118cc69be10ae8fef090798420846bfb606ba"><code>612118c</code></a> docs: migrate from doc_auto_cfg to doc_cfg (<a href="https://redirect.github.com/hyperium/http-body/issues/175">#175</a>)</li>
+    # <li>See full diff in <a href="https://github.com/hyperium/http-body/compare/http-body-util-v0.1.4...http-body-util-v0.1.5">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=http-body-util&package-manager=cargo&previous-version=0.1.4&new-version=0.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47277	(@veyndan, #47277)	android: Add button to dismiss alert (#47277)
+    ^ commit b527c3620cb356e1887ff69dafc03c7dad4c5cac
+    # Adds an explicit button to dismiss dialogs that are created via an `alert()` in JavaScript. The dialog can already be dismissed by hitting the back button or clicking outside the dialog, but this is all very hidden. By adding an "OK" button, there is an explicit way to dismiss the dialog if the other two options weren't self-evident.
+    # 
+    # Both the presence of this button and the wording of this button was found on Firefox for Android, Chrome for Android, and Firefox for Linux.
+    # 
+    # |Before|After|
+    # |---|---|
+    # |<img width="1080" height="2400" alt="image" src="https://github.com/user-attachments/assets/01bcf224-66bf-46d5-bac7-dae728abbfd6" />|<img width="1080" height="2400" alt="image" src="https://github.com/user-attachments/assets/cb669796-8e73-4397-bc1e-9b1b035968c8" />|
+    # 
+    # Testing: There are no automated tests for Android.
+-https://github.com/servo/servo/pull/47286	(@jdm, @TimvdLippe, #47286)	wpt: Ensure javascript: URL produces a load event. (#47286)
+    ;test; test only
+    ^ commit b1927851d9412687293691a8b47de312f31c39f6
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Per https://github.com/whatwg/html/issues/12788, the current test relies on Chrome-specific behaviour and causes timeouts in other browsers, even when fetchLater is supported.
+    # 
+    # https://wpt.fyi/results/fetch/fetch-later/new-window.https.window.html?label=experimental&label=master&aligned
+-https://github.com/servo/servo/pull/47288	(@jdm, #47288)	wpt: Make domInteractive timing tests fail better. (#47288)
+    ;test; test only
+    ^ commit 0be8e7b73fc931ace1eeb5803648365b38722478
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Assertions should only run inside of the WPT step functions, or else the test fails with confusing ERROR/NOTRUN codes.
+https://github.com/servo/servo/pull/47289	(@jdm, #47289)	script: Use global's active document's navigation timing for PerformanceTiming (#47289)
+    ^ commit 4f616abe0cb610490b5b4e6f290050102a2724c6
+    # #46975 exposes a case where the navigation timing information for documents in iframes is incorrect, because PerformanceTiming is initialized with the timing information for about:blank. We can avoid this by always returning timing information derived from the global's active document instead.
+    # 
+    # Testing: No behaviour change possible before #46975, and this change fixes failures exposed in that PR.
+    # Part of #43149
+    # 
++https://github.com/servo/servo/pull/47169	(@SimonSapin, #47169)	layout: Implement `text-transform: full-width` (#47169)
+    layout; ‘text-transform: full-size-kana’, ‘full-width’, and ‘math-auto’
+    ^ commit a986ae10955d7bfdff03f2e6af0e5407050279f2
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Spec:
+    # * https://drafts.csswg.org/css-text-4/#valdef-text-transform-full-width
+    # * https://drafts.csswg.org/css-text-4/#full-width
+    # * https://drafts.csswg.org/css-text-4/#text-transform-order
+    # 
+    # I didn’t find an existing Rust crate that exposes the raw `Decomposition_Mapping` field from `UnicodeData.txt`, so this PR adds a python script that parses it manually to generate a Rust file with the desired mappings. The generated file is committed to git, so the script only needs to be run again when updating to a new Unicode version.
+    # 
+    # Testing: some existing tests from WPT start passing. Some related tests still fail but I believe for reasons related to hanging white space at the end of lines, rather than `text-transform` reasons.
+https://github.com/servo/servo/pull/47285	(@yezhizhen, #47285)	script_bindings: Add efficient ASCII case-insensitive match function for `DOMString` (#47285)
+    ^ commit 8f652c303d3ce050e2070b0d07d2d33fdca7c085
+    # There is actually [spec](https://infra.spec.whatwg.org/#ascii-case-insensitive) for this.
+    # But it seems we always do the conversion manually in an inefficient way that allocates a new String.
+    # 
+    # Testing: Just an optimization without changing semantics.
++https://github.com/servo/servo/pull/47225	(@SimonSapin, #47225)	Implement `text-transform: math-auto` (#47225)
+    layout; ‘text-transform: full-size-kana’, ‘full-width’, and ‘math-auto’
+    ^ commit 9e00f85c8e264ba2bb4dad5df508ce8ebae1b0a3
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Spec:
+    # 
+    # * https://drafts.csswg.org/css-text-4/#text-transform-property
+    # * https://w3c.github.io/mathml-core/#math-auto-transform
+    # * https://w3c.github.io/mathml-core/#italic-mappings
+    # 
+    # Stylo PR: https://github.com/servo/stylo/pull/442
+    # 
+    # Testing: WPT
++https://github.com/servo/servo/pull/47044	(@Taym95, #47044)	Implement CookieStoreManager and expose ServiceWorkerRegistration.cookies (#47044)
+    wip dom; impl CookieStoreManager (non-experimental --pref dom_cookiestore_enabled)
+    ^ commit c65518f8960041caa9acc18e6548ebcad66d2db2
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Implement CookieStoreManager and expose ServiceWorkerRegistration.cookies
+    # 
+    # Testing: CookieStoreManager and ServiceWorkerRegistration.cookies WPT test.
+    # 
+    # Part of #37674
+https://github.com/servo/servo/pull/47292	(@kkoyung, #47292)	script: Rename `SubtleAlgorithm` and `SubtleKeyAlgorithm` (#47292)
+    ^ commit 518078cd6598ce282665cb512372bd95d9f8b8e8
+    # Rename the type `SubtleAlgorithm` and `SubtleKeyAlgorithm` to `Algorithm` and `KeyAlgorithm`, respectively.
+    # 
+    # The `normalize_algorithm` function is still using the `Algorithm` generated by script-bindings. To avoid name collision, we import it as the alias `AlgorithmWithDOMString` in `subtlecrypto.rs`.
+    # 
+    # This is part of #46948 in order to replace the generated binding types with custom binding types for WebCrypto.
+    # 
+    # Testing: It compiles.
+    # Part-of: #46948
+https://github.com/servo/servo/pull/47299	(@veyndan, #47299)	android: Convert `alert(string)` dialog to Material 3 (#47299)
+    ^ commit b288e5be5403654f25f65cc09cd5f67edc7a3878
+    # Since much of the rest of the app is using the Material 3 design language, this aligns the dialog with the Material 3 design language too for visual consistency.
+    # 
+    # |Before|After|
+    # |---|---|
+    # |<img width="1080" height="2400" alt="image" src="https://github.com/user-attachments/assets/cb669796-8e73-4397-bc1e-9b1b035968c8"/>|<img width="1080" height="2400" alt="image" src="https://github.com/user-attachments/assets/cedb9f0d-67a2-425d-b338-c42dab921ecf" />|
+    # 
+    # Testing: There are no automated tests for Android.
+https://github.com/servo/servo/pull/46551	(@shubhamg13, #46551)	script: Align `Node::Adopt` according to Specs (#46551)
+    ^ commit 8462c2bb0d706fd96f0fd1d8a5e43c93624f5e5f
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Complement spec steps related with custom element registry.
+    # 
+    # Testing: Existing WPT
+    # Fixes: https://github.com/servo/servo/issues/45603
+https://github.com/servo/servo/pull/47304	(@veyndan, #47304)	android: Remove unused `entryCal` variable (#47304)
+    ^ commit 3b1e4ed2886a25a4f90693eccfe1fcb405d64ea1
+    # Testing: There are no automated tests for Android.
++https://github.com/servo/servo/pull/47198	(@Narfinger, #47198)	script: Feature Flag WebCrypto crate (#47198)
+    perf api; Crypto API can now be compiled out (cargo -p servo --features webcrypto). enabled by default
+    ^ commit 723dd93c61e1ac6eaaa57e9a796b0c094315215a
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Feature flagging WebCrypto. This saves us  2MB in production-stripped for embedders who do not need this functionality.
+    # 
+    # Testing: Compilation is the test for default feature. Manually tested with feature disabled.
+    # Part of https://github.com/servo/servo/issues/47183
+    # 
+>>> 2026-08-19T01:00:26Z
+-https://github.com/servo/servo/pull/47311	(@dependabot[bot], @dependabot[bot], #47311)	build: bump wayland-backend from 0.3.16 to 0.3.17 in the wayland-related group (#47311)
+    ^ commit 003e8f40aa1959c7ded982b72c387227b86974f5
+    # Bumps the wayland-related group with 1 update: [wayland-backend](https://github.com/smithay/wayland-rs).
+    # 
+    # Updates `wayland-backend` from 0.3.16 to 0.3.17
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li>See full diff in <a href="https://github.com/smithay/wayland-rs/commits">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=wayland-backend&package-manager=cargo&previous-version=0.3.16&new-version=0.3.17)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
+    # - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
+    # - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47313	(@dependabot[bot], @dependabot[bot], #47313)	build: bump find-msvc-tools from 0.1.10 to 0.1.11 (#47313)
+    ^ commit d2566f5633981afbc21cbb4d1491c1886cba51f3
+    # Bumps [find-msvc-tools](https://github.com/rust-lang/cc-rs) from 0.1.10 to 0.1.11.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/releases">find-msvc-tools's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>find-msvc-tools-v0.1.11</h2>
+    # <h3>Other</h3>
+    # <ul>
+    # <li>Update MSRV to 1.65 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1834">#1834</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/3c4ab883616b373c0287319d1a2f237aad0c79a0"><code>3c4ab88</code></a> chore: release (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1858">#1858</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/951c5f54587b8957312c08741c3f3a5f54e97359"><code>951c5f5</code></a> cc-test: add loongarch64 assembly shim (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1855">#1855</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/60e2e0054d07ee394964ae375431e497c62a14ed"><code>60e2e00</code></a> chore(deps): bump Swatinem/rust-cache from 2.9.1 to 2.9.2 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1853">#1853</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/cdb470173f4c9ffe0fa96abe4a408e9d1345fb99"><code>cdb4701</code></a> ci: replace rustup installation with actions-rust-lang/setup-rust-toolchain (...</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/3af3b8decd2af3e4423360468234a3aec1b3411a"><code>3af3b8d</code></a> cargo: use workspace inheritance (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1850">#1850</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/6df6471c063ed96f9ac5a2ccd2d087a75984a536"><code>6df6471</code></a> cargo: convert to workspace lints (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1849">#1849</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/36efa48bf7d1740d94a0d8c9c734d495363127fb"><code>36efa48</code></a> Update MSRV to 1.65 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1834">#1834</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/59170f958c929d3a6cccf3c559385e7c762b41c0"><code>59170f9</code></a> Regenerate target info (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1848">#1848</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/7fa314c661fcbc556e102f060d43652ccfcf2f66"><code>7fa314c</code></a> ci: run clippy in more cases (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1832">#1832</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/a91e05ec40f26d4637d4bff9e9764221d0a59dd8"><code>a91e05e</code></a> chore(cc): release v1.4.2 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1846">#1846</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/rust-lang/cc-rs/compare/find-msvc-tools-v0.1.10...find-msvc-tools-v0.1.11">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=find-msvc-tools&package-manager=cargo&previous-version=0.1.10&new-version=0.1.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47314	(@dependabot[bot], @dependabot[bot], #47314)	build: bump uuid from 1.24.0 to 1.24.1 (#47314)
+    ^ commit 97d012d8044269616e9442c0bd9783c488451c6f
+    # Bumps [uuid](https://github.com/uuid-rs/uuid) from 1.24.0 to 1.24.1.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/uuid-rs/uuid/releases">uuid's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v1.24.1</h2>
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>Fix non-ASCII character handling in parse diagnostics by <a href="https://github.com/questfever"><code>@​questfever</code></a> in <a href="https://redirect.github.com/uuid-rs/uuid/pull/899">uuid-rs/uuid#899</a></li>
+    # <li>Prepare for 1.24.1 release by <a href="https://github.com/KodrAus"><code>@​KodrAus</code></a> in <a href="https://redirect.github.com/uuid-rs/uuid/pull/900">uuid-rs/uuid#900</a></li>
+    # </ul>
+    # <h2>New Contributors</h2>
+    # <ul>
+    # <li><a href="https://github.com/questfever"><code>@​questfever</code></a> made their first contribution in <a href="https://redirect.github.com/uuid-rs/uuid/pull/899">uuid-rs/uuid#899</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/uuid-rs/uuid/compare/v1.24.0...v1.24.1">https://github.com/uuid-rs/uuid/compare/v1.24.0...v1.24.1</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/2ea38af9f226cad4b50b560cbc18e38927a0a58d"><code>2ea38af</code></a> Merge pull request <a href="https://redirect.github.com/uuid-rs/uuid/issues/900">#900</a> from uuid-rs/cargo/v1.24.1</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/9dbeb04a438d422f73d6ca222d135f060f239cce"><code>9dbeb04</code></a> prepare for 1.24.1 release</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/e113df8c8fa56874b15e4637038d30f0185058f5"><code>e113df8</code></a> Merge pull request <a href="https://redirect.github.com/uuid-rs/uuid/issues/899">#899</a> from questfever/main</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/b0177659b3f37777f30d8b12bf2d86b592bf1feb"><code>b017765</code></a> Fix non-ASCII character handling in parse diagnostics</li>
+    # <li>See full diff in <a href="https://github.com/uuid-rs/uuid/compare/v1.24.0...v1.24.1">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=uuid&package-manager=cargo&previous-version=1.24.0&new-version=1.24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47307	(@yezhizhen, #47307)	script: Use efficient `DOMString` ASCII case-insensitive match functions in more places (#47307)
+    ^ commit 49065a68180c4f8fd59ecd22dc8a9aab16db3769
+    # This extends #47285 by using it in more places.
+    # Fix some typo/sentence in `domstring.rs`.
+    # 
+    # Testing: Covered by existing test.
++https://github.com/servo/servo/pull/47306	(@Psychpsyo, #47306)	script: Make inserttext handle surrogate pairs correctly. (#47306)
+    wip dom; more conformant document.execCommand("insertText")
+    ^ commit 4a2e0234390ca465213bcebb6f5ecc8c6893accb
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Any characters that are longer than one UTF-16 code unit weren't inserted correctly before this. Now they are.
+    # 
+    # The note about MutationObserver in my comment is referring to other browsers specifically, because we do generate one mutation event per character here. I'm not sure if that's just because no browser implements this spec verbatim or if maybe mutation events need to or could be aggregated somehow somewhere, but it's a discrepancy to be aware of, I guess. I would say that this could have performance implications if any JavaScript wants to act upon these events in some major way, but Firefox generates exactly 0 characterData mutation events from `insertText`, so I'd hope that there's no websites that depend on any of this behavior.
+    # Edit: Firefox actually only generates 0 characterData mutation events when `inserttext` has to create a new text node.
+    # 
+    # Also, Ladybird, as the only other browser to implement this spec somewhat verbatim, ends up emitting mutation events per character as well (or rather per UTF-16 code unit), but they generate 2 for each character for some reason. No idea why.
+    # 
+    # Testing: Added a new WPT tests that verifies that this works.
+    # 
++https://github.com/servo/servo/pull/47317	(@jdm, #47317)	script: Convert IntersectionObserver, ResizeObserver, and XMLHTTPRequest to safe_borrow_mut. (#47317)
+    dom; safety from ground up
+    ^ commit ddfc66dec8361cecad0aa3393775dcd060a11815
+    # Testing: Existing tests suffice.
+    # Part of #40600
+    # 
+https://github.com/servo/servo/pull/47325	(@Narfinger, #47325)	deps: Update h2 dependency (#47325)
+    ^ commit bac2e246585df7dc8d7f20d1a964a8c88c8788be
+    # This updates the h2 dependency so we don't get flagged by cargo deny.
+    # 
+    # Testing: Not needed for semver compatible.
+    # 
++https://github.com/servo/servo/pull/47318	(@mukilan, #47318)	script: Basic support for mapping 'role' attribute into the a11y tree. (#47318)
+    wip a11y; initial support for role global attribute. supported: alert banner blockquote caption code complementary contentinfo definition deletion directory document emphasis feed figure generic insertion list log main math navigation none note paragraph presentation rowgroup search status strong term time timer
+    ^ commit a57e1ff105c03a5c04d49dd86284920e58659eee
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # This patch
+    # 1. Fixes the way we parse the 'role' attribute of HTML elements to allow a list of role names as required by the specifiction.
+    # 2. Maps the role attribute of the element to an accesskit role. Support is limited to non-abstract roles that don't require an accessible name or properties and states other than the global supported states and properties.
+    # 3. Handles propagation of damage when the role attribute is mutated. Only the basic scenarios involving role changes are supported at the moment.
+    # 
+    # Part of #46242
+    # Testing: New integration tests have been added.
+https://github.com/servo/servo/pull/47328	(@kkoyung, #47328)	script: Rename RSA-related structs in WebCrypto (#47328)
+    ^ commit 8185511c1320b226f28c14e60f9431dd11710b0d
+    # Rename the following structs:
+    # 
+    # `SubtleRsaHashedKeyGenParams` to `RsaHashedKeyGenParams`
+    # `SubtleRsaHashedKeyAlgorithm` to `RsaHashedKeyAlgorithm`
+    # `SubtleRsaHashedImportParams` to `RsaHashedImportParams`
+    # `SubtleRsaPssParams` to `RsaPssParams`
+    # `SubtleRsaOaepParams` to `RsaOaepParams`
+    # 
+    # This is part of #46948 in order to replace the generated binding types with custom binding types for WebCrypto.
+    # 
+    # Testing: It compiles.
+    # Part-of: #46948
+https://github.com/servo/servo/pull/47326	(@jschwe, #47326)	mach: Simplify bootstrap (#47326)
+    ^ commit 480bc117e5044fcd1d492b753644bdf2ebf909a7
+    # Since we switched to `uv`, `uv` is responsible for setting up the environment and `mach bootstrap` actually has the full environment available, so we don't need to duplicate the logic anymore.
+    # 
+    # Testing: `./mach bootstrap` is run on non-selfhosted CI runners. [Try run](https://github.com/jschwe/servo/actions/runs/32124284987) from my fork.
+    # 
+    # 
+https://github.com/servo/servo/pull/47256	(@jdm, #47256)	Update stylo for clip-path damage change. (#47256)
+    ^ commit 48f6de122579de240a7837df02d9b3789e0fc686
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Testing: New reference test.
+    # Fixes: #46932
+    # 
++https://github.com/servo/servo/pull/43766	(@rayguo17, #43766)	layout: Use scrollable overflow to calculate sticky offset boundary when the containing block of sticky node is a scroll node (#43766)
+    layout; fix bug in ‘position: sticky’
+    ^ commit 79ac6c56f3c0c7cabd72f6945b383125a66ea942
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # When `build_sticky_frame_if_necessary`, if the containing block is scrollable, we should use its content rect to calculate sticky offset boundary.
+    # 
+    # Testing: More WPTs are passing, while the new failure related to input focus should be falsely passed previously.
+    # Fixes: #38259
+    # 
+https://github.com/servo/servo/pull/47296	(@Narfinger, #47296)	script: Switch to `safe_borrow_mut` in `CookieStorageManager` and reorder borrows (#47296)
+    ^ commit 2a5f73586c331119e1ea880b27156fa15fb59348
+    # Fix borrow hazard in cookiestoragemanager and switching to safe methods..
+    # 
+    # Testing: Switching to safe_borrow_mut allows the compiler to guarantee that the borrow hazard is gone.
+    # 
++https://github.com/servo/servo/pull/47330	(@eachra-bawn, #47330)	servoshell: Update deprecated keycodes (#47330)
+    servoshell; Command and Windows keys are now Meta in key property on KeyboardEvent (was Super)
+    ^ commit 748bf81026f91bda8151e7c9179506270c4e81d8
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # This updates servoshell's key event interpretation so that the macOS Command key and the Windows Logo key correspond to 'Meta'. Previously, this was causing servoshell to interpret these as 'Super', which is unlike other browsers' behaviour such as Chrome, which interpret these keys as 'Meta'.
+    # 
+    # Here is the documentation from winit regarding the 'Super' key:
+    # https://docs.rs/winit/latest/winit/keyboard/enum.NamedKey.html#variant.Super
+    # 
+    # Testing: servoshell does not have testing at this layer.
+    # Fixes: #41306
+    # 
+    # 
+    # 
+    # 
+https://github.com/servo/servo/pull/47323	(@Narfinger, #47323)	script: Fix borrow hazard in uncaught_exception handling (#47323)
+    ^ commit 52bd46cc085dba55a2b696af359c1c4958183dc0
+    # This fixes the borrow hazard in notify_about_rejected_promise.
+    # 
+    # We switch the code from a drain over the iterator to a simple iter() and following clear. The additional change to safe_borrow_mut enforces that no borrow hazards occur.
+    # 
+    # Testing: This is a refactor with safe_borrow_mut enforces that no borrow hazards occur. Additionally, as script_thread is single threaded, no exceptions can occur in between the iter and clear.
+    # 
++https://github.com/servo/servo/pull/47293	(@mrobinson, #47293)	constellation: Queue session history traversals (#47293)
+    web; more reliable navigation in history
+    ^ commit 27775d1d904e8279e135f7fa32b809e659e29a1c
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # Instead of running history traversals (moving backward and forward in
+    # the session history) immediately, only run each traversal after the
+    # previous one has finished. Traversals may not finish immediately if a
+    # page needs to be reloaded due to being a sufficient distance away in the
+    # back-forward list to not be cached or because an `unload` handler ran.
+    # 
+    # This fixes issues with intermittency when running history navigation
+    # tests. Previously, history traversals were run immediately (instead of
+    # being queued) which could lead to nondeterminate navigation outcomes.
+    # 
+    # Testing: This should eliminate test flakiness on the CI.
+    # Fixes: #21383.
+    # 
++https://github.com/servo/servo/pull/47327	(@mrobinson, @SimonSapin, #47327)	script: Use `MouseButton` in events and add `MouseButtons` (#47327)
+    api; breaking. MouseButton::{Left,Middle,Right} have been renamed to MouseButton::{Primary,Auxiliary,Secondary}
+    ^ commit 6ee336ce836324f52c1821f51e9b5cdb2b99c239
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # Instead of storing raw numbers in DOM input events, store `MouseButton`
+    # and `MouseButtons` (a new `bitflags`). This reduces quite a bit the
+    # amount of magic numbers thoughout the codebase and makes various bits of
+    # code easier to reason about.
+    # 
+    # In addition, `MouseButton` names are renamed according to what they
+    # represent internally (e.g. `Primary` instead of `Left`). This is an API
+    # change.
+    # 
+    # Testing: This should not change observable behavior so should be covered by existing tests.
+    # 
++https://github.com/servo/servo/pull/47337	(@simonwuelker, #47337)	script: Don't mark script-created `<title>` elements as being actively parsed (#47337)
+    dom; fix bug in set title() on Document (document.title)
+    ^ commit 6da8677fda9a9b9e6791a913235a77f5827deca7
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # While a `<title>` element is on the parsers stack of open elements we don't bother notifying the embedder about changes to its content, because it hasn't finished parsing yet. When a `<title>` element is created then we mark it as "parsing" and then when its popped from the stack of open elements then we unset that flag.
+    # 
+    # This is wrong for script-created title elements, because those are never parsed in the first place and thus the flag is never unset. This change forwards the `ElementCreator` to `HTMLTitleElement::new` so we can handle this correctly.
+    # 
+    # Testing: This change adds two tests
+    # Fixes https://github.com/servo/servo/issues/47319
+https://github.com/servo/servo/pull/47212	(@shubhamg13, #47212)	layout: Consider Text as LCP candidate (#47212)
+    ^ commit 6de1edc66210fc590a5944233c8be4e44f6521ac
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Since the spec says, for text nodes we need to do union of border box per element.
+    # 
+    # -  Adding `containing_element_tag` for making this union.
+    #  - Adding `TextRecord` to store `TextNodes` related to an `Element`.
+    #  
+    # 
+    # > Note: Please view using `Hide whitespace` option.
+    # 
+    # Testing: More WPT Passed
+    # - Added a specific test to verify union logic of rect - size calculation is correct in WPT 
+    #   - `tests/wpt/tests/largest-contentful-paint/text-fragment-union.html`- web-platform-tests/wpt#61873
+    #   - (_TODO: set loadTime to zero for text, other failing tests will also pass #47315_)
+    # 
+    # 
+    # 
+    # Fixes: Part of #42000
+-https://github.com/servo/servo/pull/47338	(@simonwuelker, #47338)	servo: Fix incorrect documentation for ServoTest::spin (#47338)
+    ;test; test only
+    ^ commit cae28d4ff858a6748bd3afd6cea11fc7bd1c2012
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # Testing: This only modifies documentation, so no tests are required.
+>>> 2026-08-20T00:38:05Z
+https://github.com/servo/servo/pull/47329	(@mrobinson, @SimonSapin, #47329)	script: Add `DragGesture` and `DragHandler` abstractions (#47329)
+    ^ commit 544c99bc90eb2957959362ba3c47c6fb50ce7b0e
+    # This change adds two abstractions that allow drags to be updated even
+    # when they extend outside the boundaries of the element that starts them.
+    # This allows continuing to select text in an input box even when the
+    # cursor leaves the box. In addition, this will make it more
+    # straight-forward to properly implement document selection which will be
+    # different variant of `DragHandler`.
+    # 
+    # Notes:
+    # 
+    # - This cannot reuse the pointer capture code because these kind of drag
+    #   gestures do not change the target of input events.
+    # - Cross document drags are not supported yet.
+    # - Moving drag updates to before event handling means that
+    #   `preventDefault()` on the input events won't prevent drag updates,
+    #   which is what we want.
+    # 
+    # 
+    # Testing: This change includes new and updated Servo-specific WPT tests.
+    # 
+-https://github.com/servo/servo/pull/47349	(@dependabot[bot], @dependabot[bot], #47349)	build: bump pkg-config from 0.3.33 to 0.3.34 (#47349)
+    ^ commit 7f4e1676eb32609ac71eead8fe2722a8535637f0
+    # Bumps [pkg-config](https://github.com/rust-lang/pkg-config-rs) from 0.3.33 to 0.3.34.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/pkg-config-rs/blob/master/CHANGELOG.md">pkg-config's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>[0.3.34] - 2026-08-14</h2>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>
+    # <p>Update README.md (<a href="https://redirect.github.com/rust-lang/pkg-config-rs/issues/190">#190</a>).</p>
+    # </li>
+    # <li>
+    # <p>Update MSRV to 1.63 and remove <code>lazy_static</code> dependency (<a href="https://redirect.github.com/rust-lang/pkg-config-rs/issues/191">#191</a>).</p>
+    # </li>
+    # <li>
+    # <p>Fix various clippy warnings (<a href="https://redirect.github.com/rust-lang/pkg-config-rs/issues/193">#193</a>).</p>
+    # </li>
+    # </ul>
+    # <h3>Added</h3>
+    # <ul>
+    # <li>
+    # <p>Allow disabling passing --cflags to pkg-config (<a href="https://redirect.github.com/rust-lang/pkg-config-rs/issues/183">#183</a>).</p>
+    # </li>
+    # <li>
+    # <p>Make Library::extract_lib_from_filename public (<a href="https://redirect.github.com/rust-lang/pkg-config-rs/issues/192">#192</a>).</p>
+    # </li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/pkg-config-rs/commit/a8852cc148f8f7d504bf3a62444c298dcd3637f0"><code>a8852cc</code></a> Release 0.3.34</li>
+    # <li><a href="https://github.com/rust-lang/pkg-config-rs/commit/f3be98321e68e302232b3f4bc2ebbda2ea293dc4"><code>f3be983</code></a> Fix a couple of clippy warnings</li>
+    # <li><a href="https://github.com/rust-lang/pkg-config-rs/commit/694b8df46cb1d700cff03f02ad740f06e9108ac6"><code>694b8df</code></a> Update MSRV and remove dependency</li>
+    # <li><a href="https://github.com/rust-lang/pkg-config-rs/commit/10693b587b8e1771f8a82b47d804368760823401"><code>10693b5</code></a> Allow disabling passing <code>--cflags</code> to pkg-config.</li>
+    # <li><a href="https://github.com/rust-lang/pkg-config-rs/commit/9ffb971ddc04d9b0306ab5853dc2335a30769a7e"><code>9ffb971</code></a> Make Library::extract_lib_from_filename public</li>
+    # <li><a href="https://github.com/rust-lang/pkg-config-rs/commit/f36d32a09824a6b2c18475c8a4b7df1cb2c50c95"><code>f36d32a</code></a> Update Readme</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/pkg-config-rs/compare/0.3.33...0.3.34">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pkg-config&package-manager=cargo&previous-version=0.3.33&new-version=0.3.34)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47351	(@dependabot[bot], @dependabot[bot], #47351)	build: bump toml from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0 (#47351)
+    ^ commit 51c59b9ff908b45f399deef20cd088125a7c27a3
+    # Bumps [toml](https://github.com/toml-rs/toml) from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/toml-rs/toml/commit/beee9fe5a93347722335e1b99a693f3216986132"><code>beee9fe</code></a> chore: Release</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/16e2ac15983e8bf9389fc0cdb9ae0f8452973794"><code>16e2ac1</code></a> docs: Update changelog</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/89f55411d47ee9fb349ab0704f287aa82aa12258"><code>89f5541</code></a> fix(toml): preserve datetimes when deserializing Value (<a href="https://redirect.github.com/toml-rs/toml/issues/1194">#1194</a>)</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/534039ccff11412422b3d365d092ef2ed43df2ac"><code>534039c</code></a> fix(serde): Deserialize Value datetimes into typed targets</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/6e45cef5d5061fee00fe43cb6b52c3126e05d57a"><code>6e45cef</code></a> test(serde): Reproduce Value datetime deserialization error</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/4ec099fed591a172f82007cb2f9d605985bbecee"><code>4ec099f</code></a> chore: Release</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/5a47a5180e8acd71ca17e14be75081041e457051"><code>5a47a51</code></a> docs: Update changelog</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/da0911f7e79a928e2f0f3efe8e30b5bbeb3430d5"><code>da0911f</code></a> perf(parser): Reduce over allocation by better tokens/byte ratio (<a href="https://redirect.github.com/toml-rs/toml/issues/1193">#1193</a>)</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/26eb1571f266a72813df4e02367213bd76f68624"><code>26eb157</code></a> perf(parser): Reduce over allocation by better tokens/byte ratio</li>
+    # <li><a href="https://github.com/toml-rs/toml/commit/ca4c7bf420ad3aa5d318156de483e86ec5c632fe"><code>ca4c7bf</code></a> chore(deps): Update Prek to v0.4.11 (<a href="https://redirect.github.com/toml-rs/toml/issues/1191">#1191</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/toml-rs/toml/compare/toml-v1.1.3...toml-v1.1.4">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=toml&package-manager=cargo&previous-version=1.1.3+spec-1.1.0&new-version=1.1.4+spec-1.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47343	(@yezhizhen, #47343)	layout: Reduce allocation when constructing `InnerOrOuterTextItem` (#47343)
+    ^ commit 09a6a4fe44bafef12de5c3d0f0a3ecf3ee50f3b8
+    # Make `InnerOrOuterTextItem::Text` takes Cow instead of owned String.
+    # 
+    # Testing: No behaviour change.
+    # 
+-https://github.com/servo/servo/pull/47350	(@dependabot[bot], @dependabot[bot], #47350)	build: bump portable-atomic from 1.14.0 to 1.15.0 (#47350)
+    ^ commit fd5c7f3bd33385d62ccdcf99d1a5217e7fa8acab
+    # Bumps [portable-atomic](https://github.com/taiki-e/portable-atomic) from 1.14.0 to 1.15.0.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/taiki-e/portable-atomic/blob/main/CHANGELOG.md">portable-atomic's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>[1.15.0] - 2026-08-09</h2>
+    # <ul>
+    # <li>
+    # <p>Work around <a href="https://redirect.github.com/rust-lang/compiler-builtins/pull/1234"><code>core::sync::atomic</code> bug</a> which may cause data races with non-relaxed load/CAS on pre-v6 ARM Linux/Android due to missing memory barrier. (<a href="https://redirect.github.com/taiki-e/portable-atomic/pull/112">#112</a>)</p>
+    # </li>
+    # <li>
+    # <p>Make {8,16,32}-bit non-relaxed load compatible with read-only memory on pre-v6 ARM Linux/Android. Previously only relaxed load was compatible with read-only memory. (<a href="https://redirect.github.com/taiki-e/portable-atomic/pull/112">#112</a>)</p>
+    # </li>
+    # <li>
+    # <p>Make <code>from_ptr</code> <code>const fn</code> on Rust 1.58+. Previously it was <code>const fn</code> only on Rust 1.83+. (<a href="https://github.com/taiki-e/portable-atomic/commit/c09d0e624f1416a01bbb11bba22c148b42dcb081">c09d0e6</a>)</p>
+    # </li>
+    # <li>
+    # <p>Optimize non-relaxed load/store on pre-v6 ARM Linux/Android. (<a href="https://redirect.github.com/taiki-e/portable-atomic/pull/112">#112</a>)</p>
+    # </li>
+    # <li>
+    # <p>Optimize fence on pre-v6 ARM Linux/Android. (<a href="https://redirect.github.com/taiki-e/portable-atomic/pull/112">#112</a>)</p>
+    # </li>
+    # <li>
+    # <p>Optimize 128-bit CAS/swap/min/max on s390x. This also includes removing the code complexity that caused the bug fixed in 1.14.0. (<a href="https://github.com/taiki-e/portable-atomic/commit/33cd7e55acfe1438c853b20b09ec786613228122">33cd7e5</a>, <a href="https://github.com/taiki-e/portable-atomic/commit/6c8f764bee3c3ca570552e49a8117402b0186ead">6c8f764</a>)</p>
+    # </li>
+    # <li>
+    # <p>Documentation improvements.</p>
+    # </li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/taiki-e/portable-atomic/commit/e4595528211f1d53b7f4d93e528ef84b491fc871"><code>e459552</code></a> Release 1.15.0</li>
+    # <li><a href="https://github.com/taiki-e/portable-atomic/commit/cb58081f88cd02681dbb32482acec7ae198850d5"><code>cb58081</code></a> Update changelog</li>
+    # <li><a href="https://github.com/taiki-e/portable-atomic/commit/c5b8b98ba4a37c85e7330ab67f5328c336db0207"><code>c5b8b98</code></a> arm_linux: Remove useless cache</li>
+    # <li><a href="https://github.com/taiki-e/portable-atomic/commit/b97efba24aabde59585f37db3bf94d1f5ecfd19a"><code>b97efba</code></a> ci: Re-enable detect_false test on Android</li>
+    # <li><a href="https://github.com/taiki-e/portable-atomic/commit/eaee7ec590dbab02c45acd69bbb5690f2cbbf9f8"><code>eaee7ec</code></a> detect: Update comments</li>
+    # <li><a href="https://github.com/taiki-e/portable-atomic/commit/c6fab541d4c36704dcfe086028b0575df76947b9"><code>c6fab54</code></a> tests: AArch64 L4Re is now available as builtin target</li>
+    # <li><a href="https://github.com/taiki-e/portable-atomic/commit/d0832a115b07c7bce149e96da7bdaff2b3ca9f4a"><code>d0832a1</code></a> tsan: Enable Adaptive Delay</li>
+    # <li><a href="https://github.com/taiki-e/portable-atomic/commit/81c2ee5fe02a9ccc05fc91a36fb4fa496aa2eb51"><code>81c2ee5</code></a> ci: Clean up sanitizer job</li>
+    # <li><a href="https://github.com/taiki-e/portable-atomic/commit/cfb767de5d1858ed88804d97f1d8f08da6d760ba"><code>cfb767d</code></a> Optimize non-relaxed load/store/fence and work around compiler-builtins bug o...</li>
+    # <li><a href="https://github.com/taiki-e/portable-atomic/commit/f19289e1fc1178159cfc01c15883c9b2b5077c0f"><code>f19289e</code></a> ci: Use full-length rev for mgba-test-runner</li>
+    # <li>Additional commits viewable in <a href="https://github.com/taiki-e/portable-atomic/compare/v1.14.0...v1.15.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=portable-atomic&package-manager=cargo&previous-version=1.14.0&new-version=1.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47353	(@kkoyung, #47353)	script: Rename EC-related and AES-related structs in WebCrypto (#47353)
+    ^ commit 2c08527d97378be9dde7bb8dc12f891570ed3cf9
+    # Rename the following structs:
+    # 
+    # `SubtleEcdsaParams` to `EcdsaParams`
+    # `SubtleEcKeyGenParams` to `EcKeyGenParams`
+    # `SubtleEcKeyAlgorithm` to `EcKeyAlgorithm`
+    # `SubtleEcKeyImportParams` to ` EcKeyImportParams`
+    # `SubtleEcdhKeyDeriveParams` to ` EcdhKeyDeriveParams`
+    # `SubtleAesCtrParams` to `AesCtrParams`
+    # `SubtleAesKeyAlgorithm` to `AesKeyAlgorithm`
+    # `SubtleAesKeyGenParams` to `AesKeyGenParams`
+    # `SubtleAesDerivedKeyParams` to `AesDerivedKeyParams`
+    # `SubtleAesCbcParams` to `AesCbcParams`
+    # `SubtleAesGcmParams` to `AesGcmParams`
+    # 
+    # This is part of #46948 in order to replace the generated binding types with custom binding types for WebCrypto.
+    # 
+    # Testing: It compiles.
+    # Part-of: #46948
+https://github.com/servo/servo/pull/47340	(@Gae24, #47340)	script: Use safe variants of `throw_range_error` and `throw_type_error` (#47340)
+    ^ commit 3d77be2fccac86d7859dee0a5ca5f91a31c53824
+    # By switching to `throw_type_error_safe`, the unsafe blocks that wrapped dictionary types creation are no longer required. For the handful of cases where a callback is part of a dictionary, the unsafe blocks are now narrowed to the single function. 
+    # Companion PR of https://github.com/servo/mozjs/pull/797
+    # 
+    # Testing: It compiles
+    # 
+https://github.com/servo/servo/pull/47355	(@Gae24, #47355)	script: Don't store rooted value inside `DebuggerGetEnvironmentEvent` (#47355)
+    ^ commit 113679f9fe964a6a2336410b6a3d218a485b6333
+    # 
+    # 
+    # Testing: It compiles
+    # Part of #39139 
+    # 
+https://github.com/servo/servo/pull/47357	(@Narfinger, #47357)	base: Switch all occurences in generic_channel to use fn use_ipc instead of checking options (#47357)
+    ^ commit e7b419402009e97581478ce4f38248be97cd29cd
+    # This switches GenericSharedMemory and LazyCallback to use the use_ipc() function for deciding instead of manually checkking opts and prefs.
+    # 
+    # Testing: This is just a refactor so does not need special tests.
+    # 
++https://github.com/servo/servo/pull/46918	(@simonwuelker, @mrobinson, #46918)	fonts: Synthesize variations from `font-style` for macos & freetype systems (#46918)
+    layout; ‘font-style’ now works on variable fonts, setting either ‘ital’ or ‘slnt’ feature depending on the font
+    ^ commit 88497f86e6d79e44004baacac178d32a3f72f21e
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Synthesizing variations from `font-style` requires a bit more work than for other properties because depending on which variation axes the font has we need to set either `ital` (to 0 or 1) or `slnt` (to a number of degrees). Currently we synthesize variations too early, when the font data is not yet avaiable. That's why this change moves the implementation of https://drafts.csswg.org/css-fonts-4/#apply-font-matching-variations to `Font::new`.
+    # 
+    # On macos and windows `PlatformFont::copy_with_variations` is not yet implemented, so variations are synthesized but they do nothing. I hope to fix this in future changes but its hard to approach since I don't have access to macos/windows machines.
+    # 
+    # Testing: New tests start to pass
+    # Part of https://github.com/servo/servo/issues/38800
+https://github.com/servo/servo/pull/47356	(@simonwuelker, #47356)	fonts: Replace AtomicRefCell with RwLock for resolving font variant alternates (#47356)
+    ^ commit 4a599939e758ef283d35c7c4fb3c5e9c82a3ac23
+    # When upgrading the lock from a read lock to a write lock to initialize the map of font variant alternates then we need to wait until all other threads have also dropped their read guards, otherwise we run into panics. `AtomicRefCell` doesn't wait, causing https://github.com/servo/servo/issues/47352. Instead we can use to a `RwLock`.
+    # 
+    # I'm fairly sure I did initially used a RwLock when implementing `font-variant-alternates`, but apparently I switched to a `AtomicRefCell` at some point :/
+    # 
+    # Testing: This issue is intermittent and I don't think there's a way to test for it reliably.
+    # Fixes: https://github.com/servo/servo/issues/47352
++https://github.com/servo/servo/pull/47359	(@jschwe, #47359)	ohos: Better keyboard support (#47359)
+    servoshell; external keyboard support in openharmony
+    ^ commit c1517a950ccf85f9060c49abc8e1cfe9572c4a6a
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # For physical keyboards we need to translate the OH KeyEventCode into a KeyEvent with a Unicode character, taking into account keyboard state (like shift or caps lock).
+    # Since OH still doesn't have a keyboard layout API, this is greatly simplified due to only needing to support US keyboard layout. The actual conversion is handled in the xcomponent-sys crate.
+    # 
+    # This now allows typing with a real (US-layout) keyboard to work as expected on OpenHarmony.
+    # 
+    # Testing: This is not covered by any automatic tests, and I also didn't find an API that allows simulating raw keyboard events (`hdc shell uinput` seems to behave differently to a raw keyboard). This was manually tested on a dayu-200 developer board with a keyboard attached.
+    # 
+    # 
+https://github.com/servo/servo/pull/45628	(@steigeo, #45628)	script: Use constellation event's mouse button state instead of tracking count (#45628)
+    ^ commit 808e65262f52955c498fa28230e8932e52428d2f
+    # Instead of keeping track of the number of mouse buttons currently pressed from within the document event handler, we use the input event from the constellation as the source of truth for currently pressed mouse buttons. This fixes an issue where the internal count would permanently increase, preventing the firing of `pointerup`/`pointerdown` events.
+    # 
+    # This also fixes an issue where the `buttons` field of pointer capture boundary transition events was improperly set to a button count instead of an integer bitmap.
+    # 
+    # Testing: The issue is caused by the embedder not sending a corresponding mouse up event with a mouse down one, so I'm not sure if WPT can enable us to test this.
+    # Fixes: Partially fixes #45491, prevents `pointerup`/`pointerdown` events from breaking entirely. 
+    # Fixes #47300.
++https://github.com/servo/servo/pull/47362	(@Psychpsyo, #47362)	script: Prevent text editing commands from running in uneditable nodes. (#47362)
+    wip crash dom; fix crash in document.execCommand()
+    ^ commit b86633c99cc5b0bf9abec4a2e2630a256ab09d1f
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Nothing good can come of trying to run editing commands when the selection boundaries are inside of HTML comment or processing instruction nodes, so this bumps the selection out of those problematic nodes before trying.
+    # 
+    # Testing: Added 2 new web platform tests
+    # Fixes: #47336
+    # 
+https://github.com/servo/servo/pull/47364	(@mrobinson, #47364)	fonts: Add Windows support for `PlatformFont::copy_with_variations` (#47364)
+    ^ commit 1c2d7d145fb5c7b2f573ef97507c4832999c6f47
+    # This adds an implementation of this method for Windows, effectively
+    # renabling font variations for that platform.
+    # 
+    # Testing: Tests are not currently run for Windows, but this causes more web platform tests to run on that platform.
+    # 
+    # 
+https://github.com/servo/servo/pull/47316	(@jdm, #47316)	script: Access HTMLTrackElement attributes inside synchronous section. (#47316)
+    ^ commit 0753df091a51fad6f3289b63a67a677ee17710c9
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # The specification lists the steps that need to happen inside the synchronous section, which means that any changes to the element's attributes will be visible when the stable state is reached. This allows a number of tests to run to completion that were previously timing out because the attribute modifications weren't observed.
+    # 
+    # Testing: A bunch of tests no longer time out.
+    # Fixes: #47275
+    # 
+https://github.com/servo/servo/pull/47354	(@shubhamg13, #47354)	layout: Implement bits of mark_paint_timing (#47354)
+    ^ commit 66bac8a96e815f85d78ae805733684b08e0022c0
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Implement bits of mark_paint_timing
+    # 
+    # Testing: Existing WPT Unchanged
+    # Fixes: Part of #42000
+    # 
++https://github.com/servo/servo/pull/47368	(@jdm, #47368)	script: Convert Document/ShadowRoot.details_name_groups to safe_borrow_mut. (#47368)
+    dom; safety from ground up
+    ^ commit ed93ab7018d7e40bf9a449818364db4cb32f2804
+    # Testing: Existing tests suffice.
+    # Part of #40600
+    # 
+https://github.com/servo/servo/pull/47341	(@mrobinson, #47341)	constellation: Move `pending_changes` to `ConstellationWebView` (#47341)
+    ^ commit 24bee0c63ecc023732725b1971766d9ad3cca81f
+    # This makes dealing with pending changes a bit more complicated, but once
+    # more members of `Constellation` are moved to `ConstellationWebView`,
+    # this should become simpler.
+    # 
+    # Testing: This should not change observable behavior so should be covered by existing tests.
+    # Fixes: This is part of #47294.
+    # 
+https://github.com/servo/servo/pull/47369	(@mrobinson, #47369)	constellation: Remove `ScriptToConstellationMessage::SetDocumentState` (#47369)
+    ^ commit b683b4032cc9bafb781af102081edb477bb1d5f1
+    # This was part of the old screenshot architecture which is no more.
+    # The message is not sent, so the related type and hash map are completely
+    # unused and can be removed.
+    # 
+    # Testing: This does not change behavior so is covered by existing tests.
+    # Fixes: This is part of #47294.
+    # 
+https://github.com/servo/servo/pull/47371	(@jdm, #47371)	script: Rename post_barrier to reflect its purpose. (#47371)
+    ^ commit acc63cef0bd48d8cd694c02edf2e20327fcf4b9e
+    # The fact that it performs a post_barrier call is less important than the fact that it is setting an entry in the cache of webidl constructor objects.
+    # 
+    # Testing: Just renaming a function.
+>>> 2026-08-20T23:18:04Z
+https://github.com/servo/servo/pull/47366	(@wood-ghost, #47366)	mime_classifier: fix wrong byte matcher pattern for rar header (#47366)
+    ^ commit 67d568715df9edfdc778cb3b5ebfae28f2eda7cb
+    # The wrong byte matcher pattern for rar header is now fixed based on the latest whatwg MIME Sniffing Standard.
+    # 
+    # Testing:  The original invalid rar test file was changed into a valid one.
+    # Fixes: #47365
+    # 
+https://github.com/servo/servo/pull/47372	(@jschwe, #47372)	script: Reduce codegen-units to 16 to avoid ICE (#47372)
+    ^ commit a95e5a7d3e7087c0c57037bfa1817f035177508d
+    # With the default amount of codegen-units (256) the `rlib` size of script increases beyond 4GB, which seems to hit a limit of the COFF format, and causes an ICE in rustc.
+    # `codegen-units = 16` fixed the issue, and resulted in an rlib of ~1.2GB, which is well below 4GB.
+    # The alternative would have been to reduce debug-info.
+    # 
+    # Testing: Not covered by automatic tests. Perform a debug build on a windows machine to validate.
+    # 
+    # 
++https://github.com/servo/servo/pull/45826	(@skyz1, @mrobinson, #45826)	script: Implement autofocus delegate (#45826)
+    web; impl autofocus for <{input etc} autofocus> inside <dialog>
+    ^ commit 7fcdc22f62ffa9e83c9733e69a4f6e21b2d8e5a4
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # This implements the autofocus delegate in order to focus elements with the autofocus attribute when opening dialogs.
+    # 
+    # Testing: Passes additional web platform tests.
+    # 
+-https://github.com/servo/servo/pull/47380	(@dependabot[bot], @dependabot[bot], #47380)	build: bump android_system_properties from 0.1.5 to 0.1.6 (#47380)
+    ^ commit ce33b03d5c3300086691fbba0cf63ac2a42d25b4
+    # Bumps [android_system_properties](https://github.com/nical/android_system_properties) from 0.1.5 to 0.1.6.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li>See full diff in <a href="https://github.com/nical/android_system_properties/commits">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=android_system_properties&package-manager=cargo&previous-version=0.1.5&new-version=0.1.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47381	(@dependabot[bot], @dependabot[bot], #47381)	build: bump vello from 0.9.0 to 0.10.0 (#47381)
+    ^ commit 358bd38ea022afb7db87a8822baa46399545753a
+    # Bumps [vello](https://github.com/linebender/vello) from 0.9.0 to 0.10.0.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/linebender/vello/releases">vello's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v0.10.0</h2>
+    # <p><strong><a href="https://crates.io/crates/vello/0.10.0">Crates.io</a> | <a href="https://docs.rs/vello/0.10.0/">Docs</a></strong></p>
+    # <p>This release has an <a href="README.md#minimum-supported-rust-version-msrv">MSRV</a> of 1.88.</p>
+    # <h3>Added</h3>
+    # <ul>
+    # <li>Support for gradient interpolation in the unpremultiplied alpha space. (<a href="https://redirect.github.com/linebender/vello/issues/1268">#1268</a> by <a href="https://github.com/sagudev"><code>@​sagudev</code></a>)</li>
+    # </ul>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>Updated Skrifa to v0.44.0. (<a href="https://redirect.github.com/linebender/vello/issues/1774">#1774</a> by <a href="https://github.com/LaurenzV"><code>@​LaurenzV</code></a>)</li>
+    # </ul>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>Rendering scenes whose binning requires more than 256 bins. (<a href="https://redirect.github.com/linebender/vello/issues/1700">#1700</a> by <a href="https://github.com/b0nes164"><code>@​b0nes164</code></a>)</li>
+    # <li>Image textures are now explicitly destroyed when freed, releasing their GPU resources promptly. (<a href="https://redirect.github.com/linebender/vello/issues/1777">#1777</a> by <a href="https://github.com/timon-schelling"><code>@​timon-schelling</code></a>)</li>
+    # </ul>
+    # <hr />
+    # <p>This release also coincides with the release of v0.10.0 of Vello Shaders:</p>
+    # <p><strong><a href="https://crates.io/crates/vello_shaders/0.10.0">Crates.io</a> | <a href="https://docs.rs/vello_shaders/0.10.0/">Docs</a></strong></p>
+    # <p>and Vello Encoding:</p>
+    # <p><strong><a href="https://crates.io/crates/vello_encoding/0.10.0">Crates.io</a> | <a href="https://docs.rs/vello_encoding/0.10.0/">Docs</a></strong></p>
+    # <h2>New Contributors</h2>
+    # <ul>
+    # <li><a href="https://github.com/dipeshbabu"><code>@​dipeshbabu</code></a> made their first contribution in <a href="https://redirect.github.com/linebender/vello/pull/1666">linebender/vello#1666</a></li>
+    # <li><a href="https://github.com/jesses-canva"><code>@​jesses-canva</code></a> made their first contribution in <a href="https://redirect.github.com/linebender/vello/pull/1682">linebender/vello#1682</a></li>
+    # <li><a href="https://github.com/yezhizhen"><code>@​yezhizhen</code></a> made their first contribution in <a href="https://redirect.github.com/linebender/vello/pull/1732">linebender/vello#1732</a></li>
+    # <li><a href="https://github.com/tronical"><code>@​tronical</code></a> made their first contribution in <a href="https://redirect.github.com/linebender/vello/pull/1760">linebender/vello#1760</a></li>
+    # <li><a href="https://github.com/timon-schelling"><code>@​timon-schelling</code></a> made their first contribution in <a href="https://redirect.github.com/linebender/vello/pull/1777">linebender/vello#1777</a></li>
+    # <li><a href="https://github.com/Soundcreates"><code>@​Soundcreates</code></a> made their first contribution in <a href="https://redirect.github.com/linebender/vello/pull/1807">linebender/vello#1807</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/linebender/vello/compare/v0.9.0...v0.10.0">https://github.com/linebender/vello/compare/v0.9.0...v0.10.0</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/linebender/vello/blob/main/CHANGELOG.md">vello's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>[0.10.0][] - 2026-08-14</h2>
+    # <p>This release has an [MSRV][] of 1.88.</p>
+    # <h3>Added</h3>
+    # <ul>
+    # <li>Support for gradient interpolation in the unpremultiplied alpha space. (<a href="https://redirect.github.com/linebender/vello/issues/1268">#1268</a>[] by [<a href="https://github.com/sagudev"><code>@​sagudev</code></a>][])</li>
+    # </ul>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>Updated Skrifa to v0.44.0. (<a href="https://redirect.github.com/linebender/vello/issues/1774">#1774</a>[] by [<a href="https://github.com/LaurenzV"><code>@​LaurenzV</code></a>][])</li>
+    # </ul>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>Rendering scenes whose binning requires more than 256 bins. (<a href="https://redirect.github.com/linebender/vello/issues/1700">#1700</a>[] by [<a href="https://github.com/b0nes164"><code>@​b0nes164</code></a>][])</li>
+    # <li>Image textures are now explicitly destroyed when freed, releasing their GPU resources promptly. (<a href="https://redirect.github.com/linebender/vello/issues/1777">#1777</a>[] by [<a href="https://github.com/timon-schelling"><code>@​timon-schelling</code></a>][])</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/linebender/vello/commit/fc0baddd06c63287ef516180d276333aa2401e6e"><code>fc0badd</code></a> Bump vello to v0.10.0 (<a href="https://redirect.github.com/linebender/vello/issues/1828">#1828</a>)</li>
+    # <li><a href="https://github.com/linebender/vello/commit/ea474c2014f1ace419b1f18792f9a70865925147"><code>ea474c2</code></a> Don't enable WGPU in std (<a href="https://redirect.github.com/linebender/vello/issues/1822">#1822</a>)</li>
+    # <li><a href="https://github.com/linebender/vello/commit/dbb3992040dc849eecdc7395fdd6491b8937f6bf"><code>dbb3992</code></a> vello_hybrid: Prohibit dynamic indexing (<a href="https://redirect.github.com/linebender/vello/issues/1821">#1821</a>)</li>
+    # <li><a href="https://github.com/linebender/vello/commit/1a661c3e7c97c2e46740ba948badf4f9f9734626"><code>1a661c3</code></a> vello_hybrid: Read pixel pack buffer data into JS array first (<a href="https://redirect.github.com/linebender/vello/issues/1814">#1814</a>)</li>
+    # <li><a href="https://github.com/linebender/vello/commit/522c4ed096ea5c56f55fdd90fe39618d254f3ede"><code>522c4ed</code></a> refactor: split WESL shaders into helper modules (<a href="https://redirect.github.com/linebender/vello/issues/1818">#1818</a>)</li>
+    # <li><a href="https://github.com/linebender/vello/commit/08576de9df7d4b8f4108fe4fd5a436bd69146c43"><code>08576de</code></a> vello_hybrid: Support extend modes for external texture rects (<a href="https://redirect.github.com/linebender/vello/issues/1813">#1813</a>)</li>
+    # <li><a href="https://github.com/linebender/vello/commit/3e6bb96ce20fae69f26ab8cdbfe2f46537619cfc"><code>3e6bb96</code></a> vello_hybrid: Add support for setting a transparency hint for external textur...</li>
+    # <li><a href="https://github.com/linebender/vello/commit/016342ddc55ecc42510e8b41a6ae31e0e6ac8178"><code>016342d</code></a> Run tests with debug assertions enabled (<a href="https://redirect.github.com/linebender/vello/issues/1748">#1748</a>)</li>
+    # <li><a href="https://github.com/linebender/vello/commit/5649225810025188ec8ae903b65b556129ddf848"><code>5649225</code></a> vello_hybrid: Add more descriptive message if WebGl2 context creation fails (...</li>
+    # <li><a href="https://github.com/linebender/vello/commit/0d25341cafe490fb2cc3722dd2470e4fe53314af"><code>0d25341</code></a> refactor: move hybrid depth texture ownership to callers (<a href="https://redirect.github.com/linebender/vello/issues/1810">#1810</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/linebender/vello/compare/v0.9.0...v0.10.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vello&package-manager=cargo&previous-version=0.9.0&new-version=0.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47382	(@dependabot[bot], @dependabot[bot], #47382)	build: bump error-code from 3.3.2 to 3.4.0 (#47382)
+    ^ commit a6c1e449c68e4ad9c87231835603ef1df52d77c0
+    # Bumps [error-code](https://github.com/DoumanAsh/error-code) from 3.3.2 to 3.4.0.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li>See full diff in <a href="https://github.com/DoumanAsh/error-code/commits">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=error-code&package-manager=cargo&previous-version=3.3.2&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47383	(@dependabot[bot], @dependabot[bot], #47383)	build: bump libredox from 0.1.19 to 0.1.20 (#47383)
+    ^ commit bb9dca570430904e7762b6b4d7d6843a94b007c6
+    # Bumps libredox from 0.1.19 to 0.1.20.
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=libredox&package-manager=cargo&previous-version=0.1.19&new-version=0.1.20)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47386	(@dependabot[bot], @dependabot[bot], #47386)	build: bump inotify from 0.11.4 to 0.11.5 (#47386)
+    ^ commit a43b2f90dab9c62c38a2d200092961aa19a751d5
+    # Bumps [inotify](https://github.com/hannobraun/inotify-rs) from 0.11.4 to 0.11.5.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/hannobraun/inotify-rs/blob/main/CHANGELOG.md">inotify's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2>v0.11.5 (2026-08-14)</h2>
+    # <ul>
+    # <li>Show in API docs where <code>stream</code> feature is required (<a href="https://redirect.github.com/hannobraun/inotify-rs/issues/266">#266</a>)</li>
+    # </ul>
+    # <p><a href="https://redirect.github.com/hannobraun/inotify-rs/issues/266">#266</a>: <a href="https://redirect.github.com/hannobraun/inotify-rs/pull/266">hannobraun/inotify-rs#266</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/hannobraun/inotify-rs/commit/7f1a8001400b59e75345c47ab991eb21f0ba5a86"><code>7f1a800</code></a> Update version</li>
+    # <li><a href="https://github.com/hannobraun/inotify-rs/commit/1db51d55ca4253852c6d5aabfd2cfe2524e2134d"><code>1db51d5</code></a> Update changelog</li>
+    # <li><a href="https://github.com/hannobraun/inotify-rs/commit/ffc7c5b15b74f99aff64153ad114e34a2769e7cb"><code>ffc7c5b</code></a> Merge pull request <a href="https://redirect.github.com/hannobraun/inotify-rs/issues/266">#266</a> from w3lld1/docs/stream-feature</li>
+    # <li><a href="https://github.com/hannobraun/inotify-rs/commit/027ede8488de43d07d2db67ab2e84630bf11e4a3"><code>027ede8</code></a> docs: show stream feature requirements in API docs</li>
+    # <li><a href="https://github.com/hannobraun/inotify-rs/commit/73eb7cc94ddb8b1806744bee6573aae3d1f0b4ef"><code>73eb7cc</code></a> Merge pull request <a href="https://redirect.github.com/hannobraun/inotify-rs/issues/265">#265</a> from hannobraun/release</li>
+    # <li>See full diff in <a href="https://github.com/hannobraun/inotify-rs/compare/v0.11.4...v0.11.5">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=inotify&package-manager=cargo&previous-version=0.11.4&new-version=0.11.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47385	(@dependabot[bot], @dependabot[bot], #47385)	build: bump zerovec-derive from 0.10.3 to 0.10.4 (#47385)
+    ^ commit 2c15569aa7fdde2a0dcd712ae2840729fc158879
+    # Bumps [zerovec-derive](https://github.com/unicode-org/icu4x) from 0.10.3 to 0.10.4.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/unicode-org/icu4x/blob/main/CHANGELOG.md">zerovec-derive's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>Changelog</h1>
+    # <h2>icu4x 2.3.x</h2>
+    # <p>Several crates have had patch releases in the 2.3 stream:</p>
+    # <ul>
+    # <li>Utils
+    # <ul>
+    # <li>(0.11.5) <code>zerovec-derive</code>
+    # <ul>
+    # <li>Fix soundness issue around multi element buffer validation in ULE derives (unicode-org#8393)</li>
+    # </ul>
+    # </li>
+    # <li>(0.11.8) <code>zerovec</code>
+    # <ul>
+    # <li>Fix length check in <code>impl ULE for [T; N]</code></li>
+    # </ul>
+    # </li>
+    # </ul>
+    # </li>
+    # </ul>
+    # <h2>icu4x 2.3</h2>
+    # <ul>
+    # <li>Components
+    # <ul>
+    # <li>General
+    # <ul>
+    # <li>Updated data to TZDB 2026c (unicode-org#8200)</li>
+    # </ul>
+    # </li>
+    # <li><code>icu_calendar</code>
+    # <ul>
+    # <li>Fix extended year calculations in Gregorian-like and Coptic-like calendars (unicode-org#7849)</li>
+    # <li>Add <code>Julian</code> to <code>AnyCalendar</code> (unicode-org#7224)
+    # <ul>
+    # <li>New enum variants: <code>AnyCalendarKind::Julian</code>, <code>AnyCalendar::Julian</code></li>
+    # </ul>
+    # </li>
+    # <li>Fix safety issue in <code>Japanese::try_new_with_buffer_provider</code> (unicode-org#8095)</li>
+    # <li>Add <code>AnyCalendarKind::try_new</code> and deprecate  <code>AnyCalendarKind::new</code>. The new version uses locale data to infer calendars from locales. (unicode-org#8102)</li>
+    # <li>Deprecate <code>CalendarPreferences::resolve_calendar</code>. This method did not perform likely-subtags expansion. (unicode-org#8102)</li>
+    # </ul>
+    # </li>
+    # <li><code>icu_casemapping</code>
+    # <ul>
+    # <li>Fix <code>TrailingCase::Unchanged</code> handling for Dutch (unicode-org#7863)</li>
+    # </ul>
+    # </li>
+    # <li><code>icu_collator</code>
+    # <ul>
+    # <li>Add <code>CollatorBorrowed::new_root</code> (unicode-org#7893)</li>
+    # <li>Fix a possible panic when generating a sort key for a collation that uses backward secondary level. (unicode-org#7927)</li>
+    # <li>Fix generation of identical level sort keys containing the codepoint U+A000. (unicode-org#7928)</li>
+    # <li>Fixed an issue where the emoji collation was not loading correctly (unicode-org#7989)</li>
+    # <li>Tune the performance of sort key generation (unicode-org#7930)</li>
+    # <li>Enforce more invariants in the <code>CollationSpecialPrimariesV1</code> data struct (unicode-org#7872)</li>
+    # </ul>
+    # </li>
+    # <li><code>icu_collections</code>
+    # <ul>
+    # <li>Fix a bug in <code>CodePointInversionList::contains_set</code> (unicode-org#8121)</li>
+    # <li>New trait implementation: <code>impl Hash for CodePointInversionList</code> (unicode-org#8282)</li>
+    # </ul>
+    # </li>
+    # <li><code>icu_datetime</code>
+    # <ul>
+    # <li>Add unstable range formatter (unicode-org#8149)
+    # <ul>
+    # <li>New types: <code>DateRangeFormatter</code>, <code>FixedCalendarDateRangeFormatter</code>, <code>NoCalendarRangeFormatter</code>, <code>FormattedDateRange</code></li>
+    # <li>(Scaffolding) New associated type: <code>TypedDateDataMarkers::RangeSkel</code> (unicode-org#8173)</li>
+    # </ul>
+    # </li>
+    # <li>Support numbering system overrides for datetime patterns when found in data (unicode-org#7905)</li>
+    # <li>Implement flexible day periods, i.e. the <code>B</code> pattern in hour field sets (unicode-org#7971)</li>
+    # <li>Use the correct calendar even if the region is only implied by the language (i.e. <code>fa</code>) (unicode-org#8102)</li>
+    # <li>Preserve zero minutes in MinuteOptional format for 24-hour hour cycles (unicode-org#8237)</li>
+    # <li>Correctly implement numeric month fields for calendars with leap months (unicode-org#7986)</li>
+    # <li>Correctly handle CLDR 48.2 data with &quot;c&quot; in the skeletons (unicode-org#7945)</li>
+    # </ul>
+    # </li>
+    # <li><code>icu_decimal</code>
+    # <ul>
+    # <li>Fix integer overflow in UnsignedDecimal exponent parsing (unicode-org#8289)</li>
+    # </ul>
+    # </li>
+    # <li><code>icu_experimental</code>: <code>0.5.0 -&gt; 0.6.0</code>
+    # <ul>
+    # <li><code>icu_experimental::currency</code></li>
+    # </ul>
+    # </li>
+    # </ul>
+    # </li>
+    # </ul>
+    # <!-- raw HTML omitted -->
+    # </blockquote>
+    # <p>... (truncated)</p>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/unicode-org/icu4x/commit/f7d4a25df2d35ee114c1ff3293289830d2c9d8fe"><code>f7d4a25</code></a> Fix multi-element buffer validation in zerovec-derive ULE, publish 0.11.5 (<a href="https://redirect.github.com/unicode-org/icu4x/issues/8">#8</a>...</li>
+    # <li><a href="https://github.com/unicode-org/icu4x/commit/58e7b89140dd95dfc778b1bc34d88abefe598208"><code>58e7b89</code></a> Fix link in Quickstart on 1.5 branch (<a href="https://redirect.github.com/unicode-org/icu4x/issues/6377">#6377</a>)</li>
+    # <li><a href="https://github.com/unicode-org/icu4x/commit/25d577f891ff1b3bb01b2150a570aa4d4c97dfb8"><code>25d577f</code></a> Fixes to v1.5 tutorials content (<a href="https://redirect.github.com/unicode-org/icu4x/issues/6362">#6362</a>)</li>
+    # <li><a href="https://github.com/unicode-org/icu4x/commit/dc9542424f6034b9548c48b70c6f5bddcfc7e13e"><code>dc95424</code></a> bump experimental</li>
+    # <li><a href="https://github.com/unicode-org/icu4x/commit/044c9659f217ad1e197fb778701829e4f597646c"><code>044c965</code></a> [Backport] Add toplevel build.rs to workspace includes (<a href="https://redirect.github.com/unicode-org/icu4x/issues/6357">#6357</a>)</li>
+    # <li><a href="https://github.com/unicode-org/icu4x/commit/2eee427c1497b318818df1f0889962082989ac47"><code>2eee427</code></a> Fix tutorial links on release 1.5 branch (<a href="https://redirect.github.com/unicode-org/icu4x/issues/6321">#6321</a>)</li>
+    # <li><a href="https://github.com/unicode-org/icu4x/commit/16cbb546fb22948660bbcccc1a69fd55a8a67a7b"><code>16cbb54</code></a> Update and fix tutorial Markdown files on 1.5 release branch (<a href="https://redirect.github.com/unicode-org/icu4x/issues/6306">#6306</a>)</li>
+    # <li><a href="https://github.com/unicode-org/icu4x/commit/97c4b7f51122040d67da65dbc2c4b50b5f7133b0"><code>97c4b7f</code></a> Backport CLDR 46 (<a href="https://redirect.github.com/unicode-org/icu4x/issues/5646">#5646</a>)</li>
+    # <li><a href="https://github.com/unicode-org/icu4x/commit/3c47d82f8ba9f36699b71566844ed28b3f742b21"><code>3c47d82</code></a> (Backport) Fix OptionVarULE in zerovec to also use C, packed (<a href="https://redirect.github.com/unicode-org/icu4x/issues/5144">#5144</a>)</li>
+    # <li><a href="https://github.com/unicode-org/icu4x/commit/6336fc844ee41aa66a4da2883d90c9e888596376"><code>6336fc8</code></a> Release icu_capi 1.5.1 (<a href="https://redirect.github.com/unicode-org/icu4x/issues/5123">#5123</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/unicode-org/icu4x/compare/ind/zerovec-derive@0.10.3...zerovec-derive@0.10.4">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zerovec-derive&package-manager=cargo&previous-version=0.10.3&new-version=0.10.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47384	(@dependabot[bot], @dependabot[bot], #47384)	build: bump redox_syscall from 0.9.1 to 0.9.2 (#47384)
+    ^ commit bddbebff5de0ab9961efb35effc5e5c565410b2f
+    # Bumps redox_syscall from 0.9.1 to 0.9.2.
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=redox_syscall&package-manager=cargo&previous-version=0.9.1&new-version=0.9.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47390	(@kkoyung, #47390)	script: Rename MAC-related structs in WebCrypto (#47390)
+    ^ commit 7576642cae7fc3515bde0e75679d82de9168cf14
+    # Rename the following structs:
+    # 
+    # `SubtleHmacImportParams` to `HmacImportParams`
+    # `SubtleHmacKeyAlgorithm` to `HmacKeyAlgorithm`
+    # `SubtleHmacKeyGenParams` to `HmacKeyGenParams`
+    # `SubtleKmacKeyGenParams` to `KmacKeyGenParams`
+    # `SubtleKmacImportParams` to `KmacImportParams`
+    # `SubtleKmacKeyAlgorithm` to `KmacKeyAlgorithm`
+    # `SubtleKmacParams` to `KmacParams`
+    # 
+    # This is part of #46948 in order to replace the generated binding types with custom binding types for WebCrypto.
+    # 
+    # Testing: It compiles.
+    # Part-of: #46948
+    # 
++https://github.com/servo/servo/pull/46975	(@jdm, #46975)	script: Replace initial about:blank document (#46975)
+    web; more conformant with rules around “initial about:blank”. <iframe> navigation is now much more reliable, always loading about:blank synchronously, then replacing it with whatever non-‘about:blank’ page is being requested. many web platform tests rely on this and were flaky when this wasn’t implemented correctly
+    ^ commit ea54c00a1cccc008ac4f6a4f982b0a7b6ebe48a4
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # These changes move away from the 1:1 model for windows and documents and implement initial about:blank document replacement. This means that the concept of a global's active document becomes meaningful, so we need to be more careful about verifying that a particular document is actually relevant in various operations.
+    # 
+    # Testing: Many new passing tests.
+    # Fixes: part of #43149
+    # Fixes: #44521
+    # Fixes: https://github.com/servo/servo/issues/28691
+    # Fixes: https://github.com/servo/servo/issues/24145
+    # Fixes: https://github.com/servo/servo/issues/28684
+    # 
+https://github.com/servo/servo/pull/47361	(@yezhizhen, #47361)	Reduce owned String creation in various places (#47361)
+    ^ commit 27ccefba34d8e2c7260503946116802473f8dd91
+    # Testing: No behaviour change. Covered by existing tests.
+    # 
+https://github.com/servo/servo/pull/47374	(@jschwe, #47374)	fonts: Fix line height calculation on windows (#47374)
+    ^ commit 0d579bd5aab6df3764fad805427254751632a6e4
+    # Negative values are allowed for lineGap, so we should do calculation with signed arithmetic. To quote the docs:
+    # 
+    # > The line gap in font design units. Recommended additional white space to add between lines
+    # > to improve legibility. The recommended line spacing (baseline-to-baseline distance) is the
+    # > sum of ascent, descent, and lineGap. The line gap is usually positive or zero but can be
+    # > negative, in which case the recommended line spacing is less than the height of the character
+    # > alignment box.
+    # 
+    # Testing: We don't run wpt-tests on windows in CI. Local testing of `css/css-fonts` showed the following diff: https://github.com/servo/servo/commit/f0b62e5904d34057bb1185629a0e6f24beacd9e2. Fixing the crashes in the `font-stretch` test cases.  `font-size-zero-2` appears to be flaky.
+    # Fixes: #47367
+https://github.com/servo/servo/pull/47394	(@Gae24, #47394)	script: Small unminify-js clean-up (#47394)
+    ^ commit 16e0d8c6223f717a91cf8c31d337728391fd3048
+    # The trait‑object parameter for `unminify_js` was mainly needed when we had `ScriptOrigin`.
+    # Currently for both classic scripts and modules we are using `ModuleSource`, so convert `ScriptSource` to a helper struct.
+    # 
+    # Testing: This is a simple refactor, `--unminify-js` shouldn't show any behavioural changes
+    # 
+https://github.com/servo/servo/pull/47391	(@moamenhesham0, @mrobinson, #47391)	dom: Add TextEvent support (#47391)
+    ^ commit fe277c8a38301b0de61f301012bb866933ec3946
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Add support for legacy TextEvent DOM API.
+    # 
+    # Running : ```<!doctype html><script>console.log(document.createEvent('textevent').constructor.name)</script>```
+    # 
+    # Before this PR: `CompositionEvent`
+    # After : `TextEvent`
+    # 
+    # Testing: Passes 3 new tests in tests/wpt/tests/dom/nodes/Document-createEvent.https.html
+    # ```
+    # web-platform-test
+    # ~~~~~~~~~~~~~~~~~
+    # Ran 280 checks (279 subtests, 1 tests)
+    # Expected results: 277
+    # Unexpected results: 3
+    #   subtest: 3 (3 pass)
+    # 
+    # Error Summary
+    # -------------
+    # /dom/nodes/Document-createEvent.https.html
+    #   UNEXPECTED-PASS TextEvent should be an alias for TextEvent.
+    #   UNEXPECTED-PASS textevent should be an alias for TextEvent.
+    #   UNEXPECTED-PASS TEXTEVENT should be an alias for TextEvent.
+    # ```
+    # 
+    # Fixes: https://github.com/servo/servo/issues/47246
+    # 
+https://github.com/servo/servo/pull/47395	(@jschwe, #47395)	net: Skip needless clone of response bodies if devtools are off (#47395)
+    ^ commit 8b3eb30f1b76eabef6a0803eb50bc1f763a6e49c
+    # `send_response_values_to_devtools` is also called from send_response_to_devtools, and there it seems we have at least one user that wants to pass in a Vec (without needing to clone), so I'm not sure how to avoid the clone otherwise.
+    # 
+    # Testing: No behavior change
+    # 
+    # 
++https://github.com/servo/servo/pull/47393	(@mrobinson, #47393)	script: Avoid double adjustment of Selection ranges during `contenteditable` node movement (#47393)
+    crash; fix crash when using Selection API with document.execCommand()
+    ^ commit e3ce86a81d87626df1d86aba4da26dc022cf1778
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # The editing specification has a different way of updating selection
+    # ranges than the typical live range update method in the `insert` and
+    # `remove` algorithms. Because selections are currently represented as
+    # live ranges (something that will change soon), this means that the
+    # adjustment was being applied twice: once by the live range update and
+    # then once by the `contenteditable` code's range fixup. This change makes
+    # it so that the `contenteditable` fixup runs against the original
+    # selection boundaries, meaning that the final fixup is done only once.
+    # 
+    # Testing: This change adds a WPT crash test.
+    # Fixes: #47333.
+    # 
+https://github.com/servo/servo/pull/47334	(@jschwe, #47334)	mach: Let `cargo-ohos` setup the OpenHarmony build environment (#47334)
+    ^ commit 058c55ed4a1aa9ff34af783a982a045ae9792a57
+    # Setting up the cross-compiling environment for ohos is a somewhat generic thing. Instead of duplicating the effort in every repository that wants to build for ohos, we now use the `cargo ohos` crate to setup the environment. 
+    # In the future we will likely to the same for android with cargo-ndk (tracked in #47181).
+    # 
+    # This allows us to remove most of the ohos setup code. We currently still keep the sanitizer code, but I should be able to move that to `cargo-ohos` in the future too.
+    # 
+    # This also adds a new `--ohos` flag to `./mach bootstrap`. `cargo-ohos` is only required for OpenHarmony so it makes sense to keep it optional and non-default. 
+    # 
+    # 
+    # Testing: Covered by the OpenHarmony CI testing.
+    # Part of #47332
+    # 
+>>> 2026-08-21T23:23:54Z
+-https://github.com/servo/servo/pull/47402	(@TimvdLippe, #47402)	script: Remove already enabled prefs (#47402)
+    ^ commit cb680edc199331ea1b3bf96f9787d44ff1beebb9
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    ^ /!\ may contain changes to feature flags
+    # These prefs were all enabled and the corresponding issue was already closed as completed. Therefore, remove these preferences and consider them feature complete.
+    # 
+    # Testing: it compiles
+    # 
+-https://github.com/servo/servo/pull/47414	(@dependabot[bot], @dependabot[bot], #47414)	build: bump num-integer from 0.1.46 to 0.1.47 (#47414)
+    ^ commit dd446c04cd0fb1a078be070c70a5b929e187a235
+    # Bumps [num-integer](https://github.com/rust-num/num-integer) from 0.1.46 to 0.1.47.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-num/num-integer/blob/main/RELEASES.md">num-integer's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>Release 0.1.47 (2026-08-11)</h1>
+    # <ul>
+    # <li><a href="https://redirect.github.com/rust-num/num-integer/pull/80">Implement Karatsuba Square Root for 128-bit <code>Roots::sqrt</code></a></li>
+    # <li>Miscellaneous other improvements to docs and testing.</li>
+    # </ul>
+    # <p><strong>Contributors</strong>: <a href="https://github.com/durin42"><code>@​durin42</code></a>, <a href="https://github.com/cuviper"><code>@​cuviper</code></a>, <a href="https://github.com/mikem8891"><code>@​mikem8891</code></a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-num/num-integer/commit/765fd9b3eb9397471d41b9f613e530f6d9d6383f"><code>765fd9b</code></a> Fix the release date</li>
+    # <li><a href="https://github.com/rust-num/num-integer/commit/1377fb6d215312d920269b60af8698523072df33"><code>1377fb6</code></a> Merge pull request <a href="https://redirect.github.com/rust-num/num-integer/issues/80">#80</a> from cuviper/karatsuba-sqrt</li>
+    # <li><a href="https://github.com/rust-num/num-integer/commit/6c3bec6c600b0783e326522b98bc1bd913a23e23"><code>6c3bec6</code></a> Release 0.1.47</li>
+    # <li><a href="https://github.com/rust-num/num-integer/commit/e16458846a9fdc4c09a2c83543c13b230623cc0e"><code>e164588</code></a> implement Karatsuba Square Root</li>
+    # <li><a href="https://github.com/rust-num/num-integer/commit/3fbe47f22bc3ee924d4ed103e69b3f3579122865"><code>3fbe47f</code></a> Merge pull request <a href="https://redirect.github.com/rust-num/num-integer/issues/78">#78</a> from cuviper/rename-head</li>
+    # <li><a href="https://github.com/rust-num/num-integer/commit/dcaece19c04de6187ea8a77ee7a72f9192dc11a7"><code>dcaece1</code></a> ci: use the fallback resolver for deps</li>
+    # <li><a href="https://github.com/rust-num/num-integer/commit/3e242f52ab9b9db4656d35f4f3136806a87bb07a"><code>3e242f5</code></a> Rename master to main</li>
+    # <li><a href="https://github.com/rust-num/num-integer/commit/dcaa9654419bdc37bae1cc6b0a41a118c8b53dba"><code>dcaa965</code></a> Merge pull request <a href="https://redirect.github.com/rust-num/num-integer/issues/75">#75</a> from mikem8891/master</li>
+    # <li><a href="https://github.com/rust-num/num-integer/commit/f9279a28a956499a1c1420c8f386a6f6a51a3854"><code>f9279a2</code></a> non-negative</li>
+    # <li><a href="https://github.com/rust-num/num-integer/commit/4b1818d3bf458cef402b6b8bf6eda68cf9259adb"><code>4b1818d</code></a> Merge pull request <a href="https://redirect.github.com/rust-num/num-integer/issues/69">#69</a> from durin42/rustc-nightly-is_multiple_of-stable</li>
+    # <li>Additional commits viewable in <a href="https://github.com/rust-num/num-integer/compare/num-integer-0.1.46...num-integer-0.1.47">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=num-integer&package-manager=cargo&previous-version=0.1.46&new-version=0.1.47)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47412	(@dependabot[bot], @dependabot[bot], #47412)	build: bump yuv from 0.8.16 to 0.8.17 (#47412)
+    ^ commit 327798b93ca4eef518febc9636fd89292ebbfe05
+    # Bumps [yuv](https://github.com/awxkee/yuvutils-rs) from 0.8.16 to 0.8.17.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/awxkee/yuvutils-rs/releases">yuv's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>0.8.17</h2>
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>Bugfixes by <a href="https://github.com/awxkee"><code>@​awxkee</code></a> in <a href="https://redirect.github.com/awxkee/yuvutils-rs/pull/127">awxkee/yuvutils-rs#127</a></li>
+    # <li>Drop dead bilinear entries by <a href="https://github.com/awxkee"><code>@​awxkee</code></a> in <a href="https://redirect.github.com/awxkee/yuvutils-rs/pull/131">awxkee/yuvutils-rs#131</a></li>
+    # <li>SSe bilinear fixes by <a href="https://github.com/awxkee"><code>@​awxkee</code></a> in <a href="https://redirect.github.com/awxkee/yuvutils-rs/pull/132">awxkee/yuvutils-rs#132</a></li>
+    # <li>Bilinear fixes by <a href="https://github.com/awxkee"><code>@​awxkee</code></a> in <a href="https://redirect.github.com/awxkee/yuvutils-rs/pull/133">awxkee/yuvutils-rs#133</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/awxkee/yuvutils-rs/compare/0.8.16...0.8.17">https://github.com/awxkee/yuvutils-rs/compare/0.8.16...0.8.17</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/awxkee/yuvutils-rs/commit/64fd1eba280c0fc9371933b22dddf9e06630bdfb"><code>64fd1eb</code></a> Merge pull request <a href="https://redirect.github.com/awxkee/yuvutils-rs/issues/133">#133</a> from awxkee/dev7_26</li>
+    # <li><a href="https://github.com/awxkee/yuvutils-rs/commit/2738acb8348bffa8bcd5ecbe8cca88db81607f18"><code>2738acb</code></a> Bilinear fixes</li>
+    # <li><a href="https://github.com/awxkee/yuvutils-rs/commit/3931653059c259152bcafbe2008c8280794feafe"><code>3931653</code></a> Merge pull request <a href="https://redirect.github.com/awxkee/yuvutils-rs/issues/132">#132</a> from awxkee/dev7_26</li>
+    # <li><a href="https://github.com/awxkee/yuvutils-rs/commit/e9afcb9f2b1882d0a673c99f18fbb4e2c141cb33"><code>e9afcb9</code></a> SSe bilinear fixes</li>
+    # <li><a href="https://github.com/awxkee/yuvutils-rs/commit/9c6b58227e0a2b39dc12cff96f677dad5eb23801"><code>9c6b582</code></a> SSe bilinear fixes</li>
+    # <li><a href="https://github.com/awxkee/yuvutils-rs/commit/78d8281336dcfb5d4376ce00979b785fe26175dd"><code>78d8281</code></a> Merge pull request <a href="https://redirect.github.com/awxkee/yuvutils-rs/issues/131">#131</a> from awxkee/dev7_26</li>
+    # <li><a href="https://github.com/awxkee/yuvutils-rs/commit/7d5f942539d71b01c75d88b82d85212bfb7bd6c9"><code>7d5f942</code></a> Clippy</li>
+    # <li><a href="https://github.com/awxkee/yuvutils-rs/commit/9537952255b45de8ac9fa5d0f1569fe435248f83"><code>9537952</code></a> Drop dead bilinear entries</li>
+    # <li><a href="https://github.com/awxkee/yuvutils-rs/commit/c2ef5c9f4ca096ee6dff9edf80a191c6ae930be3"><code>c2ef5c9</code></a> Merge pull request <a href="https://redirect.github.com/awxkee/yuvutils-rs/issues/127">#127</a> from awxkee/dev4_26</li>
+    # <li><a href="https://github.com/awxkee/yuvutils-rs/commit/d95e07265fe875a46ac234f7cfae5cd0aed5d968"><code>d95e072</code></a> Bugfixes</li>
+    # <li>See full diff in <a href="https://github.com/awxkee/yuvutils-rs/compare/0.8.16...0.8.17">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=yuv&package-manager=cargo&previous-version=0.8.16&new-version=0.8.17)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47411	(@dependabot[bot], @dependabot[bot], #47411)	build: bump cc from 1.4.0 to 1.4.3 (#47411)
+    ^ commit 28ed998eea2974c16e83fb366cbe76dbc134fe73
+    # Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.4.0 to 1.4.3.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/releases">cc's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>cc-v1.4.3</h2>
+    # <h3>Other</h3>
+    # <ul>
+    # <li>Update MSRV to 1.65 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1834">#1834</a>)</li>
+    # <li>Regenerate target info (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1848">#1848</a>)</li>
+    # </ul>
+    # <h2>cc-v1.4.2</h2>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>Infer NEON, not VFPv4, from <code>neon</code> in the target name (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1843">#1843</a>)</li>
+    # <li>do not emit <code>-mno-omit-leaf-frame-pointer</code> if unsupported (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1845">#1845</a>)</li>
+    # </ul>
+    # <h2>cc-v1.4.1</h2>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>Fix <code>-Cforce-frame-pointers</code>'s corresponding <code>CFLAGS</code> (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1814">#1814</a>)</li>
+    # <li>Fix parsing of thumbv7a-vex-v5 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1840">#1840</a>)</li>
+    # </ul>
+    # <h3>Other</h3>
+    # <ul>
+    # <li>Regenerate target info (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1839">#1839</a>)</li>
+    # <li>Add <code>aarch64_be</code> to <code>prefix_for_target</code> (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1835">#1835</a>)</li>
+    # <li>Use lp64d ABI for Managarm riscv64 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1829">#1829</a>)</li>
+    # <li>Make cc work on Motor OS (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1822">#1822</a>)</li>
+    # <li>Update edition to 2021 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1811">#1811</a>)</li>
+    # <li>Update MSRV to 1.64 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1808">#1808</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md">cc's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2><a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.4.2...cc-v1.4.3">1.4.3</a> - 2026-08-14</h2>
+    # <h3>Other</h3>
+    # <ul>
+    # <li>Update MSRV to 1.65 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1834">#1834</a>)</li>
+    # <li>Regenerate target info (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1848">#1848</a>)</li>
+    # </ul>
+    # <h2><a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.4.1...cc-v1.4.2">1.4.2</a> - 2026-08-08</h2>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>Infer NEON, not VFPv4, from <code>neon</code> in the target name (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1843">#1843</a>)</li>
+    # <li>do not emit <code>-mno-omit-leaf-frame-pointer</code> if unsupported (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1845">#1845</a>)</li>
+    # </ul>
+    # <h2><a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.4.0...cc-v1.4.1">1.4.1</a> - 2026-08-07</h2>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>Fix <code>-Cforce-frame-pointers</code>'s corresponding <code>CFLAGS</code> (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1814">#1814</a>)</li>
+    # <li>Fix parsing of thumbv7a-vex-v5 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1840">#1840</a>)</li>
+    # </ul>
+    # <h3>Other</h3>
+    # <ul>
+    # <li>Regenerate target info (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1839">#1839</a>)</li>
+    # <li>Add <code>aarch64_be</code> to <code>prefix_for_target</code> (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1835">#1835</a>)</li>
+    # <li>Use lp64d ABI for Managarm riscv64 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1829">#1829</a>)</li>
+    # <li>Make cc work on Motor OS (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1822">#1822</a>)</li>
+    # <li>Update edition to 2021 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1811">#1811</a>)</li>
+    # <li>Update MSRV to 1.64 (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1808">#1808</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/3c4ab883616b373c0287319d1a2f237aad0c79a0"><code>3c4ab88</code></a> chore: release (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1858">#1858</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/951c5f54587b8957312c08741c3f3a5f54e97359"><code>951c5f5</code></a> cc-test: add loongarch64 assembly shim (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1855">#1855</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/60e2e0054d07ee394964ae375431e497c62a14ed"><code>60e2e00</code></a> chore(deps): bump Swatinem/rust-cache from 2.9.1 to 2.9.2 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1853">#1853</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/cdb470173f4c9ffe0fa96abe4a408e9d1345fb99"><code>cdb4701</code></a> ci: replace rustup installation with actions-rust-lang/setup-rust-toolchain (...</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/3af3b8decd2af3e4423360468234a3aec1b3411a"><code>3af3b8d</code></a> cargo: use workspace inheritance (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1850">#1850</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/6df6471c063ed96f9ac5a2ccd2d087a75984a536"><code>6df6471</code></a> cargo: convert to workspace lints (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1849">#1849</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/36efa48bf7d1740d94a0d8c9c734d495363127fb"><code>36efa48</code></a> Update MSRV to 1.65 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1834">#1834</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/59170f958c929d3a6cccf3c559385e7c762b41c0"><code>59170f9</code></a> Regenerate target info (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1848">#1848</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/7fa314c661fcbc556e102f060d43652ccfcf2f66"><code>7fa314c</code></a> ci: run clippy in more cases (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1832">#1832</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/a91e05ec40f26d4637d4bff9e9764221d0a59dd8"><code>a91e05e</code></a> chore(cc): release v1.4.2 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1846">#1846</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.4.0...cc-v1.4.3">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cc&package-manager=cargo&previous-version=1.4.0&new-version=1.4.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47413	(@dependabot[bot], @dependabot[bot], #47413)	build: bump data-encoding from 2.11.0 to 2.11.1 (#47413)
+    ^ commit c3969856c6d9123fa281b1f7082046ba14c69b2b
+    # Bumps [data-encoding](https://github.com/ia0/data-encoding) from 2.11.0 to 2.11.1.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/ia0/data-encoding/commit/834737d9c3dc957ce1b653959e3f35061dd77ade"><code>834737d</code></a> Release 2.11.1 (<a href="https://redirect.github.com/ia0/data-encoding/issues/160">#160</a>)</li>
+    # <li><a href="https://github.com/ia0/data-encoding/commit/a57da53784fd1f928fb5bec5b72cf44cd10294f8"><code>a57da53</code></a> Remove deprecated authors field from Cargo.toml (<a href="https://redirect.github.com/ia0/data-encoding/issues/158">#158</a>)</li>
+    # <li><a href="https://github.com/ia0/data-encoding/commit/8e44011f38f6f24ea8116c8aa57080e070ffbc3a"><code>8e44011</code></a> Support syn v3 (<a href="https://redirect.github.com/ia0/data-encoding/issues/157">#157</a>)</li>
+    # <li>See full diff in <a href="https://github.com/ia0/data-encoding/compare/v2.11.0...v2.11.1">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=data-encoding&package-manager=cargo&previous-version=2.11.0&new-version=2.11.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47415	(@dependabot[bot], @dependabot[bot], #47415)	build: bump font-types from 0.12.1 to 0.12.3 (#47415)
+    ^ commit fe082febc243f846fe0bee2067f8dfd3745ea283
+    # Bumps [font-types](https://github.com/googlefonts/fontations) from 0.12.1 to 0.12.3.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/74915340ab076dd6edf11c5ddfd285d20459fc78"><code>7491534</code></a> [chore] breaking release for all except font-types, shared-brotli (<a href="https://redirect.github.com/googlefonts/fontations/issues/2046">#2046</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/39fdc1af68cf31f571f9e0189c8cd2460de33b20"><code>39fdc1a</code></a> [chore] tidy for release (<a href="https://redirect.github.com/googlefonts/fontations/issues/2045">#2045</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/d28db340e438eed1120120b2fda94827911fbeec"><code>d28db34</code></a> [font-types] remove assert from Version16Dot16::new (<a href="https://redirect.github.com/googlefonts/fontations/issues/2041">#2041</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/78aa50da911a4ec64a45d091765154e8b7843e12"><code>78aa50d</code></a> [read-fonts] fvar: use different normalization path for large number of axes ...</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/c2446237f91fc40122601f8028ad34b4f9a44828"><code>c244623</code></a> [skrifa] tthint: ignore fractional bits in parity checks- <a href="https://redirect.github.com/googlefonts/fontations/issues/2040">#2040</a> <a href="https://redirect.github.com/googlefonts/fontations/issues/2040">#2040</a></li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/21b17b4c946559832bc94e09509046048665ee35"><code>21b17b4</code></a> [font-types] add normalize method to bbox (<a href="https://redirect.github.com/googlefonts/fontations/issues/2043">#2043</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/f3edd9d2d4d87789a51f22f2736e7443ea2cb711"><code>f3edd9d</code></a> [skrifa] tthint: avoid overflow in line_vector (<a href="https://redirect.github.com/googlefonts/fontations/issues/2039">#2039</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/60877df3b5b89fae4e60b31f836c42108470e410"><code>60877df</code></a> [skrifa] autohint: avoid panic on font with 0 glyphs (<a href="https://redirect.github.com/googlefonts/fontations/issues/2044">#2044</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/73fd5ce7035069913c561b7978a015e4e23b12d4"><code>73fd5ce</code></a> [read-fonts] reduce avar application complexity (<a href="https://redirect.github.com/googlefonts/fontations/issues/2036">#2036</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/29ae374343fe1f62429e2889324fe5cfac3847c8"><code>29ae374</code></a> [skrifa] COLRv1: avoid unbalanced stack state on error  (<a href="https://redirect.github.com/googlefonts/fontations/issues/2031">#2031</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/googlefonts/fontations/compare/font-types-v0.12.1...font-types-v0.12.3">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=font-types&package-manager=cargo&previous-version=0.12.1&new-version=0.12.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47397	(@TimvdLippe, #47397)	script: Create remaining folders in `script/dom/html` (#47397)
+    ^ commit 1a6db6c4ea6c7a5afae192fd388387b2b59d0134
+    # These are the last folders that were initially listed in #46329 There are still a couple of files left that will be moved to their respective location in a follow-up, since they all end up in different places.
+    # 
+    # Part of #46329
+    # 
+    # Testing: it compiles
++https://github.com/servo/servo/pull/47398	(@Gae24, #47398)	script: JSContextify more mozjs APIs (#47398)
+    dom; safety from ground up
+    ^ commit 2ea5417a8a6d3a4182b65390845263e641278310
+    # Companion PR of https://github.com/servo/mozjs/pull/800
+    # 
+    # Testing: It compiles
+    # 
++https://github.com/servo/servo/pull/47416	(@Psychpsyo, #47416)	script: Implement indent command (#47416)
+    wip dom; document.execCommand("indent") <https://w3c.github.io/editing/docs/execCommand/#the-indent-command> experimental --pref dom_exec_command_enabled
+    ^ commit 3081b148d8364c6afaaa87781a861913b7215c11
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Implements the "indent" command for contenteditable elements.
+    # 
+    # Testing: More passes
+    # 
+https://github.com/servo/servo/pull/47418	(@kkoyung, #47418)	script: Conversion of `SubtleEncapsulatedKey` and `SubtleEncapsulatedBits` (#47418)
+    ^ commit fa5af8b522d7d2069dd5931143153e51b6e346bf
+    # We currently have proxy types `SubtleEncapsulatedKey` and `SubtleEncapsulatedBits` on top of the binding types `EncapsulatedKey` and `EncapsulatedBits` generated by script_bindings, respectively. When we convert them into js value, we used to convert from the proxy types to generated binding types, then to js value.
+    # 
+    # This patch changes the conversion to be from proxy types to js value directly. This reduces the one intermediate abstract layer to shorten the execution path.
+    # 
+    # Testing: Refactoring. Existing tests suffice.
+    # Part-of: #46948
+    # 
+https://github.com/servo/servo/pull/47427	(@yezhizhen, #47427)	script: Remove extra allocation for each face attribute parse (#47427)
+    ^ commit e1c7d7377bf069fbd97a2b304cab6e4419395cf4
+    # Testing: Existing tests cover this as it is only an optimization.
+https://github.com/servo/servo/pull/47403	(@AbdAlRahmanGad, #47403)	Parse the track url using `encoding_parse_a_url` in `htmltrackelement` (#47403)
+    ^ commit 5c649014daa1077228de38539776636a71345888
+    # Testing: tests run as expected but `track-default-load-timer-during-parser-block.html` now passes sometimes.
+    # Fixes: #47375
+    # 
+https://github.com/servo/servo/pull/47401	(@TimvdLippe, #47401)	script: Move some individual files into subfolders (#47401)
+    ^ commit b54baa327c83b40d5b4904b650c088541c7a4d38
+    # These are some files that were used in 1 folder. Additionally, create a new folder for public files. These files are only used in `lib.rs` and publicly exported. The only exception is `jsengine`, which was previously in
+    # `script_runtime`, but separated out, since that was also publicly exported.
+    # 
+    # Testing: it compiles
+https://github.com/servo/servo/pull/47430	(@jdm, #47430)	script: Clarify various error messages (#47430)
+    ^ commit bcee6be168ef23777e8684ebfc91d7d532f53257
+    # Testing: We don't test the contents of error messages.
+https://github.com/servo/servo/pull/47297	(@Narfinger, #47297)	script: Fix borrow hazard in stream and rtcp (#47297)
+    ^ commit f7cd7d88047342e9e2784bd7cb9bbfa72e9d1187
+    # This fixes some borrow hazards in rtcpeerconnection where the mutable borrow was unneeded.
+    # Additionally, we transform readablebytestreamcontroller to use safe_borrow_mut (wshen cx is available). We fix multiple borrow hazards in this file.
+    # 
+    # We include the fix for rtcp because it is very minor.
+    # 
+    # Testing: safe_borrow_mut prevents us ffrom introducing new borrow hazards and errors in refactoring should be caught by WPT tests.
+    # 
++https://github.com/servo/servo/pull/47429	(@TimvdLippe, #47429)	script: Fix computation of contained nodes in range (#47429)
+    wip dom; more conformant document.execCommand()
+    ^ commit 0d2b9345b0fd97c02238a7b4c6f696b604a3a555
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # `Range::contained_children` only iterates the direct children of range. Instead, we should iterate over all nodes within the range. This was spotted while working on `indent` and the same fix applies for `delete-the-selection`.
+    # 
+    # Part of #25005
+    # 
+    # Testing: new WPT passes
+https://github.com/servo/servo/pull/47434	(@jdm, #47434)	script: Restrict navigator.servo to about:memory. (#47434)
+    ^ commit 2d6dcc8e23f690e03502069f0175424036b60078
+    # The previous check was too lenient and allowed documents created from srcdoc iframes.
+    # 
+    # Testing: New WPT test added.
+>>> 2026-08-22T23:16:47Z
++https://github.com/servo/servo/pull/47437	(@mrobinson, #47437)	script: Pass `JSContext` to `Selection::active_range` (#47437)
+    dom; safety from ground up
+    ^ commit b2227ce41a7498745250ef44bab48badf057557f
+    # This is mechanical change which starts passing a `cx` argument to
+    # `Selection::active_range`. In order to properly support DOM selection,
+    # it needs to be a composed tree range, with the live range (the result of
+    # `Selection#getActiveRange` and `Selection::active_range` being a
+    # lazily-initialized live range cache cofined to a single tree's
+    # boundaries (not crossing shadow roots). This is a prepatory change and
+    # the argument will be used by PR to follow.
+    # 
+    # Testing: This does not change behavior, so is covered by existing tests.
+    # 
++https://github.com/servo/servo/pull/47388	(@simonwuelker, #47388)	script: Allow reading `@font-face` descriptors from CSSOM (#47388)
+    dom; impl CSSFontFaceDescriptors (style property on CSSFontFaceRule)
+    ^ commit c749c02ff8d4048e5f906092efda11b443e0be33
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # This change adds support for the `CSSFontFaceDescriptors` interface, which is used for a bunch of `@font-face`-related web platform tests. Modifying the descriptors is not supported yet.
+    # 
+    # Testing: New tests start to pass
+https://github.com/servo/servo/pull/47440	(@yezhizhen, #47440)	layout: Truncate in place for each accessibility label (#47440)
+    ^ commit ab8543bddbc88c271e73dd18ac93e294ffc738a6
+    # `trim` returns a slice. We truncate in place to avoid one owned String creation.
+    # 
+    # Testing: No behaviour change. Covered by existing tests.
+https://github.com/servo/servo/pull/47438	(@mrobinson, #47438)	script: Only call `Range::report_change` once per mutation (#47438)
+    ^ commit 537ae55eda03686564bca62c6478afb3c5b20d33
+    # This change reworks the code a little bit to ensure that
+    # `Range::report_change` is only called once per `Range` mutation. This
+    # doesn't change behavior now because `Range::report_change` is
+    # idempotent until events are actually dispatched, but in a future change
+    # it will be important to do this for syncing the live range back to a
+    # Selection's canonical boundaries (once they can be represented in the
+    # composed tree).
+    # 
+    # Testing: This does not change behavior, so should be covered by existing tests.
+    # 
+https://github.com/servo/servo/pull/47441	(@kkoyung, #47441)	script: Rename remaining dictionary structs in WebCrypto (#47441)
+    ^ commit bc401dd018eba64f1a9148bcbb480ddcd368d35a
+    # Rename the following structs:
+    # 
+    # `SubtleHkdfParams` to `HkdfParams`
+    # `SubtlePbkdf2Params` to `Pbkdf2Params`
+    # `SubtleContextParams` to `ContextParams`
+    # `SubtleAeadParams` to `AeadParams`
+    # `SubtleCShakeParams` to `CShakeParams`
+    # `SubtleTurboShakeParams` to `TurboShakeParams`
+    # `SubtleKangarooTwelveParams` to `KangarooTwelveParams`
+    # `SubtleArgon2Params` to `Argon2Params`
+    # `SubtleEncapsulatedKey` to `EncapsulatedKey`
+    # `SubtleEncapsulatedBits` to `EncapsulatedBits`
+    # 
+    # This is part of #46948 in order to replace the generated binding types with custom binding types for WebCrypto.
+    # 
+    # Testing: It compiles.
+    # Part-of: #46948
+https://github.com/servo/servo/pull/47443	(@TimvdLippe, #47443)	script: Remove last mentions of `_and_cx` (#47443)
+    ^ commit bd220a152bc059627531b386c9fcc86951eba856
+    # While all reflect versions of `_and_cx` were already removed, there were two remaining specific functions in two structs.
+    # 
+    # Testing: it compiles
++https://github.com/servo/servo/pull/47446	(@Gae24, #47446)	script: complete JSContextify of mozjs (#47446)
+    dom; safety from ground up
+    ^ commit dfaaf332aa56cb29be82e700659fe80efade6e8d
+    # Companion PR of https://github.com/servo/mozjs/pull/801
+    # 
+    # Testing: It compiles
+    # 
++https://github.com/servo/servo/pull/47442	(@mrobinson, #47442)	script: Update `JSPrincipals` in `Window` when `Origin` is replaced (#47442)
+    dom; fix bug where set domain() on document may not work
+    ^ commit e78ec33cd469f609d4d4bac6d3577a9a6716d6cb
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # The `JSPrincipals` stored in the `Window` object is used for same-origin
+    # checks in `is_platform_object_same_value`. When created it holds a
+    # shared mutable cell with the `Document`'s origin. Yet, there are two
+    # places in Servo where the `Origin` associated with a `Window` change
+    # entirely (meaning the shared cell underneath it changes):
+    # 
+    # 1. During Document replacement
+    # 2. When a Document is marked as internal
+    # 
+    # For same-origin checks to process properly, the shared cell stored in
+    # the `Window` needs to reflect the one in the `Document`. This change
+    # makes it so that the `JSPrincipals` is updated at those moments.
+    # 
+    # Testing: This change causes a bunch of WPT subtests to start passing.
+    # Fixes: #47436.
+    # 
+>>> 2026-08-23T23:20:48Z
+https://github.com/servo/servo/pull/47447	(@yezhizhen, #47447)	Revert "layout: Truncate in place for each accessibility label" (#47447)
+    ^ commit b70f159f68eb21b2f464b9a350636d50ab8dcfca
+    # Revert servo/servo#47440 as it wrongly keeps the leading whitespace.
+-https://github.com/servo/servo/pull/47451	(@servo-wpt-sync, #47451)	Sync WPT with upstream (23-08-2026) (#47451)
+    ^ commit 683eab21c0b640649d511f11f599a2efdd9f102f
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Automated downstream sync of changes from upstream as of 23-08-2026
+    # [no-wpt-sync]
+https://github.com/servo/servo/pull/47452	(@kkoyung, #47452)	script: Add [EnforceRange] to key length in WebCrypto (#47452)
+    ^ commit ac1b09ea4ca7c36f50f2dd89ebf6465cf99fef26
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # The WebCrypto API specifications have updated to add [EnforceRange] to key length parameters in WebIDL, instead of truncating lengths. We update our implementation accordingly.
+    # 
+    # Update in the Web Cryptography API spec:
+    # https://github.com/w3c/webcrypto/pull/555
+    # 
+    # Update in the Modern Algorithms in the Web Cryptography API spec:
+    # https://github.com/WICG/webcrypto-modern-algos/pull/65
+    # 
+    # Corresponding update in WPT:
+    # https://github.com/web-platform-tests/wpt/pull/62086
+    # 
+    # Testing: Pass recently added WPT tests.
+https://github.com/servo/servo/pull/47453	(@kkoyung, #47453)	script: Fix the conversion behavior of RsaKeyGenParams (#47453)
+    ^ commit 85852ad27f34317ef7207292047e2a18898ffbd2
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # In WebCrypto API specification, the modulusLength member of the RsaKeyGenParams dictionary has the [EnforceRange] extended attribute. We mistakenly set the conversion behavior as `ConversionBehavior::Default` in our code. We change it back to `ConversionBehavior::EnforceRange`.
+    # 
+    # Spec: https://w3c.github.io/webcrypto/#RsaKeyGenParams-dictionary
+    # Testing: Pass more WPT tests.
+    # 
+-https://github.com/servo/servo/pull/47435	(@TimvdLippe, #47435)	script: Finish moving all HTML elements to relevant subfolders (#47435)
+    ^ commit e8d3a4d1b25d665818faa102a945a59964b177d3
+    # This finishes off the remaining elements which didn't have a clear subfolder. Most of them are actually used as part of other elements, hence moving them adjacent. Others are textual and don't have any explicit semantics, other than with CSS.
+    # 
+    # Fixes #46329
+    # 
+    # Testing: it compiles
+https://github.com/servo/servo/pull/47444	(@TimvdLippe, #47444)	script: Move runtime files into `script/runtime` (#47444)
+    ^ commit a1c26a41807af9b21359f2b9c829b9bebf3b799c
+    # It also moves three files into `script/event_loop` since I initially thought they should be in runtime, but they are actually tied to the script_thread instead.
+    # 
+    # Testing: it compiles
++https://github.com/servo/servo/pull/47450	(@mrobinson, #47450)	script: Improve spec compliance of `Document::set_ready_state` (#47450)
+    web; more conformant navigation
+    ^ commit 19b9d21645c0e7ab75e80555096633ec47989cd3
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This changes makes some minor changes to `Document::set_ready_state` to
+    # make it match the specification steps for
+    # "update-the-current-document-readiness". Notably, because `Document`'s
+    # can start in the `Loaded` state, to match the specification that work
+    # has to be done by the caller. This should guard against times when
+    # `set_ready_state` is called more than once for the same state, which
+    # will be useful when implementing full support for `WebView::stop`.
+    # 
+    # One very minor behavioral improvement: `about:blank` documents now do
+    # not transition from `Complete` to `Loading`.
+    # 
+    # Testing: This causes one WPT subtest to start passing.
+    # 
+https://github.com/servo/servo/pull/47454	(@jschwe, #47454)	net: Shrink `completed_body` allocation when finishing HTTP load (#47454)
+    ^ commit 5b142580bc1973b6be4b9a747c8b60241ba1705a
+    # The responses are cached by our HTTP cache, so shrinking the allocation can save memory by discarding excess capacity. Not all responses are cached, but currently we don't have a way to determine if it is retained by the HTTP cache or not, and it's unclear if adding such a mechanic would save work compared to just always shrinking.  The network loading process already contains a series of potential re-allocations (by growing the `Vec`), so adding another potential reallocation to shrink should be fine.
+    # 
+    # Testing: No behavior change.
+    # 
+    # 
++https://github.com/servo/servo/pull/47445	(@Psychpsyo, #47445)	script: Implement insertLineBreak command (#47445)
+    wip dom; document.execCommand("insertLineBreak") <https://w3c.github.io/editing/docs/execCommand/#the-insertlinebreak-command> experimental --pref dom_exec_command_enabled
+    ^ commit f9b4d1e6094f5e28004c5e43cb7b7a2923a4b764
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Implement the `insertLineBreak` command for contenteditable stuff.
+    # 
+    # Testing: More WPT passes
+    # 
+    # PS: Yes, I do still plan to get to writing `is_collapsed_line_break` at some point.
+    # But for now, I want at least something implemented for every editing command. (at least all the ones that are relevant to keyboard input so that once regular DOM content becomes selectable, we can put in a thing that calls them upon user key presses. :) )
+https://github.com/servo/servo/pull/47460	(@TimvdLippe, #47460)	script: Move ElementInternals into `script/dom/html/internals/` (#47460)
+    ^ commit 89da31fa4b547610955a56542a472b564b4b4723
+    # I also wanted to remove the final usage from `Element`, but currently it is on `rare_data()`, which means that it is private to `Element`. Maybe we should in the future create a `HTMLElementRareData`?
+    # 
+    # Testing: it compiles
+>>> 2026-08-25T00:21:56Z
+-https://github.com/servo/servo/pull/47467	(@dependabot[bot], @dependabot[bot], #47467)	build: bump ohos-sys-opaque-types from 0.1.10 to 0.1.11 (#47467)
+    ^ commit 602e3bf519ac41fa1aa32023c231a05f4ccfd629
+    # Bumps [ohos-sys-opaque-types](https://github.com/openharmony-rs/ohos-sys) from 0.1.10 to 0.1.11.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li>See full diff in <a href="https://github.com/openharmony-rs/ohos-sys/commits">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ohos-sys-opaque-types&package-manager=cargo&previous-version=0.1.10&new-version=0.1.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47469	(@dependabot[bot], @dependabot[bot], #47469)	build: bump either from 1.17.0 to 1.18.0 (#47469)
+    ^ commit ad012d550e2c97b8dbdcf414d9c6bc0464cdf5cc
+    # Bumps [either](https://github.com/rayon-rs/either) from 1.17.0 to 1.18.0.
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rayon-rs/either/blob/main/RELEASES.md">either's changelog</a>.</em></p>
+    # <blockquote>
+    # <ul>
+    # <li>1.18.0 - 2026-08-20
+    # <ul>
+    # <li>Add trait impls akin to <code>Itertools::partition_map</code>, by <a href="https://github.com/cuviper"><code>@​cuviper</code></a> (<a href="https://redirect.github.com/rayon-rs/either/issues/144">#144</a>)
+    # <ul>
+    # <li><code>Extend&lt;Either&lt;L, R&gt;&gt; for (A, B)</code></li>
+    # <li><code>FromIterator&lt;Either&lt;L, R&gt;&gt; for (A, B)</code></li>
+    # </ul>
+    # </li>
+    # </ul>
+    # </li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rayon-rs/either/commit/ce6f07fc3d56d6a56ecfc32256d2c33bd0b4ad09"><code>ce6f07f</code></a> Merge pull request <a href="https://redirect.github.com/rayon-rs/either/issues/144">#144</a> from cuviper/partition_map</li>
+    # <li><a href="https://github.com/rayon-rs/either/commit/30f29a9c9d5ee0254c5f8aafbb6e31ce8eee6cc6"><code>30f29a9</code></a> Release 1.18.0</li>
+    # <li><a href="https://github.com/rayon-rs/either/commit/500b0fbb705db3eda60e338ea6b7649b0359568b"><code>500b0fb</code></a> Add trait impls akin to <code>partition_map</code></li>
+    # <li><a href="https://github.com/rayon-rs/either/commit/1b7187b43e937405df2fe40ef3847fab53c7b752"><code>1b7187b</code></a> Fix the RELEASES link</li>
+    # <li><a href="https://github.com/rayon-rs/either/commit/0f1b60b8bf9670a9c90185822513cfdbf3b38da3"><code>0f1b60b</code></a> Merge pull request <a href="https://redirect.github.com/rayon-rs/either/issues/142">#142</a> from cuviper/readme</li>
+    # <li><a href="https://github.com/rayon-rs/either/commit/4a7f162826a079002b9c62824e876110fd11ee58"><code>4a7f162</code></a> Update badges</li>
+    # <li><a href="https://github.com/rayon-rs/either/commit/0adab0ad73a4122585ee5b76159f69dbefa034fe"><code>0adab0a</code></a> Backfill <code>pubtime</code> dates in <code>RELEASES.md</code></li>
+    # <li><a href="https://github.com/rayon-rs/either/commit/e9e5497890ef01d3a7780d67855d19689b5e6acb"><code>e9e5497</code></a> Move changes to <code>RELEASES.md</code></li>
+    # <li><a href="https://github.com/rayon-rs/either/commit/a1f4a7e7615f83c5e63c862684560eb946138bb2"><code>a1f4a7e</code></a> Consolidate to one README</li>
+    # <li><a href="https://github.com/rayon-rs/either/commit/5928a2bb1211e89d1eb34e4607e4ff7c0a29c3b4"><code>5928a2b</code></a> Convert <code>README.rst</code> to <code>README.md</code></li>
+    # <li>See full diff in <a href="https://github.com/rayon-rs/either/compare/1.17.0...1.18.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=either&package-manager=cargo&previous-version=1.17.0&new-version=1.18.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47462	(@sagudev, #47462)	media-examples should not depend on servo (#47462)
+    ^ commit e695643184cfccdca55768cd07d90035afe6a212
+    # If they do then we need to also compile mozjs in that job and we do not want that. This was done as a hacky way to buble down proper features on deps per https://github.com/servo/servo/pull/46233#discussion_r3839098127, but proper solution is to just enable bundled on freetype-sys.
+    # 
+    # Testing: CI
+    # 
+https://github.com/servo/servo/pull/47470	(@mrobinson, #47470)	media: Stop publishing `servo-media-examples` (#47470)
+    ^ commit 4830f9f68a9989dab8cf41856c524f33e843a983
+    # This crate isn't meant to be published and is pretty much useless to end
+    # users.
+    # 
+    # Testing: This just changes the build configuration, so no tests are necessary.
+    # 
++https://github.com/servo/servo/pull/46996	(@philocalyst, @alice, @mrobinson, @alice, #46996)	layout: Compute and report accessibility node bounds (#46996)
+    wip a11y; report correct positions and sizes of accessibility nodes. AT can use this to determine what precisely is under the cursor, or magnify the area around the focused element, and macOS voiceover requires this to function at all. non-experimental --pref accessibility_enabled
+    ^ commit 1728d63f4886e701f3e8236a0384461ed8880b13
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Added bounds (pos + size) to the nodes in Servo's accessibilty tree. Assistive tech relies on these to do things like:
+    # 
+    # - determine what precisely is under the cursor
+    # - magnify the area around the focused element
+    # 
+    # Before this no node had bounds, so the above (and more, i'm sure) wasn't possible. This PR adds those bounds, and syncs them with existing damage tracking, plus adds tests to ensure this behavior is maintained.
+    # 
+    # Testing: This change adds new testing information in `ServoTestUtils` and starts using it in Servos-specific accessibility tests.
+    # Fixes #46245 
+https://github.com/servo/servo/pull/47474	(@yezhizhen, #47474)	script: Reduce allocation in cross origin/referrer policy reflection getters (#47474)
+    ^ commit edf7b5c1c002cda164cacefa6c673f8ef5a4d013
+    # Similar to https://github.com/servo/servo/pull/47285
+    # 
+    # Testing: Covered by existing tests.
+https://github.com/servo/servo/pull/47439	(@veyndan, #47439)	android: Add basic Compose UI abstraction for library (#47439)
+    ^ commit 2c09487545df5d5ad033dae782f234f61561f78f
+    # `Servo` acts as the starting point for the introduction of a native Compose UI library component. It is currently a simple abstraction over `ServoView`, but with time, it will absorb everything `ServoView` does.
+    # 
+    # It's named `Servo` due to that being the convention in Compose UI, for example, in Android Views it was called `TextView` whereas in Compose UI the equivalent component is called `Text`.
+    # 
+    # Testing: There are no automated tests for Android.
+    # Fixes: Part of https://github.com/servo/servo/issues/33742.
+https://github.com/servo/servo/pull/47421	(@jschwe, #47421)	ohos: Use clang-19 instead of the SDK clang-15 (#47421)
+    ^ commit b780274a1648b77d8e3e4992184374b1eb85c9dd
+    # Spidermonkey 153 will require clang-19 or newer, and there happens to be a prebuilt (preview) version available for ohos.  This PR updates servo (and mozjs via the companion PR) to use clang-19 in advance, so we update independently of the mozjs ESR update. `cargo ohos --download-prebuilt=19` (currenlty only 19 is supported) will download the prebuilt llvm toolchain the first time (by default cached in XDG_CACHE_HOME) and handle setting all the required environment variables to use the custom LLMV together with the SDK sysroot.  Servo will not be using the SDKs `libc++_shared.so`, since SM uses some C++ features which the clang-15 SDK version does not support yet. This has a slightly negative effect on the binary size, since we need to bundle the custom LLVM libc++ (different namespace, so symbols won't conflict). 
+    # 
+    # As of now this does break ASAN / TSAN on ohos, since the `compiler_rt` in the prebuilt clang version that was available seems to be defective. This can be fixed in a follow-up by switching from a prebuilt to compiling a newer version from source (which can then be hosted via the same mirror mechanism cargo ohos already uses to download the prebuilt).
+    # 
+    # Testing: We run servoshell on HarmonyOS devices in CI, so this is covered by existing tests
+    # Fixes: #47332
+https://github.com/servo/servo/pull/47477	(@alice, @mukilan, #47477)	layout: Rename `needs_accessibility_update` to `force_…` (#47477)
+    ^ commit 6441459dae925d1a29c4a5d42fccccbfde74bdd4
+    # Also:
+    # - Skip setting `force_accessibility_update` when adding accessibility damage to DOM nodes. Instead, always update the tree if any accessibility damage is passed in via the reflow request.
+    # - Set `force_accessibility_update` whenever layout is run, to ensure bounds are updated after layout.
+    #    - This is a temporary hack; a planned change will make it unnecessary by detecting when bounds may have changed.
+    # 
+    # Testing: Covered by existing tests.
+    # Fixes: Part of #47159.
+https://github.com/servo/servo/pull/46910	(@mrobinson, #46910)	layout: Only apply `text-transform: capitalize` to lowercase typographical letter units (#46910)
+    ^ commit 1b33709aeea9d6cbad5039138d5c2a1c0b5f13f3
+    # The specification is pretty clear that the first lowercase typographical
+    # letter unit of a word, if lowercase,  should be capitalized, so this
+    # change implements that.
+    # 
+    # Testing: This causes text-transform-capitalize-026.html to pass locally for me.
+    # I think it's passing on CI, because CI is missing certain fonts that would otherwise
+    # make this test fail.
+    # 
+https://github.com/servo/servo/pull/47405	(@nicoburns, #47405)	Upgrade to Stylo with `animation-composition` support (#47405)
+    ^ commit c3bc20759d19b9c6a951a3cf4c906eaf4d9d400f
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Stylo PR:
+    # - https://github.com/servo/stylo/pull/445
+    # 
+    # Implements `animation-composition` support. Implementation is entirely within Stylo.
+    # 
+    # Testing: WPT tests (this fixes over 1000 subtests!)
+https://github.com/servo/servo/pull/47491	(@veyndan, #47491)	android: Remove constructor for XML layouts (#47491)
+    ^ commit 201c46059b2b91439dcf41a731302c9b43a65a89
+    # The constructor with the `AttributeSet` argument is needed for XML layouts. Since we're moving towards a Compose UI layout per #33742, we don't need this constructor any more, and removing it makes it explicit that this is no longer supported.
+    # 
+    # Testing: There are no automated tests for Android.
+    # Fixes: Part of #33742.
++https://github.com/servo/servo/pull/47485	(@mrobinson, #47485)	script: Do not consider `Document`s without browsing contexts to be active (#47485)
+    crash web; fix crash in navigation. more conformant navigation
+    ^ commit a8f6753e1f06097599e1c1fe13cd746038b1f5b0
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Through the active session history entry, the specification indicates
+    # that when a `Document` does not have a `BrowsingContext` it cannot be
+    # considered active or fully active. This change adds that check and
+    # increases specification compliance around active and fully active
+    # browsing contexts in general.
+    # 
+    # Testing: Several new WPT subtest passes and a new crash due to #47331.
+    # Fixes: Potentially #37920.
+    # 
++https://github.com/servo/servo/pull/47487	(@mrobinson, #47487)	script: Take form submission initiator, referrer, and referrer-policy from owning `Document` (#47487)
+    web; more conformant <form rel> when using <base target>, <button formtarget>, <form target>, or <input formtarget>
+    ^ commit 81787035b25526754afe7b0a192e853c6ff849cb
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Requests created during form submission should reflect the policy of the
+    # `Document` that the form belongs to, not the target `Document`. This
+    # change addresses that issue.
+    # 
+    # Testing: This change causes several WPT tests to start passing.
+    # 
+>>> 2026-08-25T23:27:07Z
+https://github.com/servo/servo/pull/47449	(@simonwuelker, #47449)	fonts: Resolve ties during web font matching by cascade order of `@font-face` rules (#47449)
+    ^ commit 316924ea01fe232e9b67130bbe46016fae24739e
+    # Currently when multiple web fonts tie during font matching then whichever one loaded first wins. This causes obvious intermittent behaviour, and we should instead prefer the one that comes first in the CSS cascade.
+    # 
+    # This change also stores `@font-face` related info in a single `FontFaceRuleInfo` struct that is shared between the DOM `FontFace` objects, the font templates and everything that wants to know about the rule. Doing this cleans up the code significantly and makes removing `@font-face` rules easier, as they now can compare the `@font-face` pointer in `O(1)` instead of comparing each individual descriptor.
+    # 
+    # This PR does not yet update the cascade index of a web font as stylesheets are inserted or removed. I intend to do that in a followup.
+    # 
+    # Fixes https://github.com/servo/servo/issues/46029
+    # Fixes https://github.com/servo/servo/issues/20684
+    # Part of https://github.com/servo/servo/issues/46859
+    # 
+-https://github.com/servo/servo/pull/47500	(@dependabot[bot], @dependabot[bot], #47500)	build: bump aes-gcm from 0.11.0 to 0.11.1 (#47500)
+    ^ commit b76319e5be269cf1667adb5c3dab9db7ca47ac8d
+    # Bumps [aes-gcm](https://github.com/RustCrypto/AEADs) from 0.11.0 to 0.11.1.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/RustCrypto/AEADs/commit/2eff6ccb137850202ad581afb6e947f302ccbbcf"><code>2eff6cc</code></a> Cut releases that replace <code>subtle</code> with <code>ctutils</code> (<a href="https://redirect.github.com/RustCrypto/AEADs/issues/880">#880</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/AEADs/commit/c90047f5766f82ff31090dbad8e8e6ffb48a8824"><code>c90047f</code></a> Replace <code>subtle</code> with <code>ctutils</code> (<a href="https://redirect.github.com/RustCrypto/AEADs/issues/879">#879</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/AEADs/commit/da2169e3e56eb426113e8a0d3ff38aa90ffbe92f"><code>da2169e</code></a> ocb3: remove unused <code>ctr</code> and <code>zeroize</code> dependencies (<a href="https://redirect.github.com/RustCrypto/AEADs/issues/876">#876</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/AEADs/commit/f5374f3420eac3de905fb74f3b57aa1a1e0eea1c"><code>f5374f3</code></a> Add missing crates to the root readme table (<a href="https://redirect.github.com/RustCrypto/AEADs/issues/877">#877</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/AEADs/commit/e946770c449afdd41b8122abd96909703413bc95"><code>e946770</code></a> eax v0.6.0 (<a href="https://redirect.github.com/RustCrypto/AEADs/issues/875">#875</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/AEADs/commit/88ceb7d0d177d646c51a77e17d7d452586d3ec87"><code>88ceb7d</code></a> deoxys v0.2.0 (<a href="https://redirect.github.com/RustCrypto/AEADs/issues/874">#874</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/AEADs/commit/7d22c81dc63929e0a284bc2530b49e5b28b23a0c"><code>7d22c81</code></a> belt-dwp v0.1.0 (<a href="https://redirect.github.com/RustCrypto/AEADs/issues/873">#873</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/AEADs/commit/09308ef932e9359c0e3fe0e750531f13a43a9de2"><code>09308ef</code></a> ascon-aead128 v0.1.0 (<a href="https://redirect.github.com/RustCrypto/AEADs/issues/872">#872</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/AEADs/commit/e1b1e6e312b00f2ce7a2fc02d208681fb5d25f64"><code>e1b1e6e</code></a> aes-siv v0.8.0 (<a href="https://redirect.github.com/RustCrypto/AEADs/issues/871">#871</a>)</li>
+    # <li><a href="https://github.com/RustCrypto/AEADs/commit/303c27f5614f6dbb6870fa373f088067a583d1f5"><code>303c27f</code></a> ccm v0.6.0 (<a href="https://redirect.github.com/RustCrypto/AEADs/issues/869">#869</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/RustCrypto/AEADs/compare/aes-gcm-v0.11.0...aes-gcm-v0.11.1">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aes-gcm&package-manager=cargo&previous-version=0.11.0&new-version=0.11.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47502	(@dependabot[bot], @dependabot[bot], #47502)	build: bump h2 from 0.4.16 to 0.4.18 (#47502)
+    ^ commit 2bf2665d2801471972bd925ee0bf56e298bed47f
+    # Bumps [h2](https://github.com/hyperium/h2) from 0.4.16 to 0.4.18.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/hyperium/h2/releases">h2's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v0.4.18</h2>
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>feat: allow configuring the DATA frame budget by <a href="https://github.com/muhamadazmy"><code>@​muhamadazmy</code></a> in <a href="https://redirect.github.com/hyperium/h2/pull/942">hyperium/h2#942</a></li>
+    # <li>docs: tighten wording on data_frame_budget() by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/h2/pull/943">hyperium/h2#943</a></li>
+    # </ul>
+    # <h2>New Contributors</h2>
+    # <ul>
+    # <li><a href="https://github.com/muhamadazmy"><code>@​muhamadazmy</code></a> made their first contribution in <a href="https://redirect.github.com/hyperium/h2/pull/942">hyperium/h2#942</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/hyperium/h2/compare/v0.4.17...v0.4.18">https://github.com/hyperium/h2/compare/v0.4.17...v0.4.18</a></p>
+    # <h2>v0.4.17</h2>
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>fix: dont budget DATA frames that are EOS by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/h2/pull/940">hyperium/h2#940</a></li>
+    # <li>fix: cap max allowed encoder table size by <a href="https://github.com/seanmonstar"><code>@​seanmonstar</code></a> in <a href="https://redirect.github.com/hyperium/h2/pull/941">hyperium/h2#941</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/hyperium/h2/compare/v0.4.16...v0.4.17">https://github.com/hyperium/h2/compare/v0.4.16...v0.4.17</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/hyperium/h2/blob/master/CHANGELOG.md">h2's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.4.18 (August 20, 2026)</h1>
+    # <ul>
+    # <li>Add <code>data_frame_budget(n)</code> methods to client and server builders.</li>
+    # </ul>
+    # <h1>0.4.17 (August 19, 2026)</h1>
+    # <ul>
+    # <li>Fix limiting of excessive small DATA frames to ignore EOS frames.</li>
+    # <li>Fix HPACK encoding table to cap the max size to 4kb.</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/hyperium/h2/commit/73f39d49f4b0bc284b57fc52c303a05a5301de6a"><code>73f39d4</code></a> v0.4.18</li>
+    # <li><a href="https://github.com/hyperium/h2/commit/978ebb8ba771a9143c44ff8ba513805139e2312e"><code>978ebb8</code></a> docs: tighten wording on data_frame_budget() (<a href="https://redirect.github.com/hyperium/h2/issues/943">#943</a>)</li>
+    # <li><a href="https://github.com/hyperium/h2/commit/813bf06495e3e7b0a96258d842c926c174ac2941"><code>813bf06</code></a> feat: allow configuring the DATA frame budget (<a href="https://redirect.github.com/hyperium/h2/issues/942">#942</a>)</li>
+    # <li><a href="https://github.com/hyperium/h2/commit/1adb037a341ec05b0407e7c627a06cc507cc78f7"><code>1adb037</code></a> v0.4.17</li>
+    # <li><a href="https://github.com/hyperium/h2/commit/67734f8c6943362a06417c0368fe91dfe8745b4d"><code>67734f8</code></a> fix: cap max allowed encoder table size (<a href="https://redirect.github.com/hyperium/h2/issues/941">#941</a>)</li>
+    # <li><a href="https://github.com/hyperium/h2/commit/c12d7820ad53f0db5b8bac12288399d0fe123638"><code>c12d782</code></a> fix: dont budget DATA frames that are EOS (<a href="https://redirect.github.com/hyperium/h2/issues/940">#940</a>)</li>
+    # <li>See full diff in <a href="https://github.com/hyperium/h2/compare/v0.4.16...v0.4.18">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=h2&package-manager=cargo&previous-version=0.4.16&new-version=0.4.18)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47503	(@dependabot[bot], @dependabot[bot], #47503)	build: bump cc from 1.4.3 to 1.4.4 (#47503)
+    ^ commit b878129bde0463b750da2de082a9ea9ee93d52c0
+    # Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.4.3 to 1.4.4.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/releases">cc's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>cc-v1.4.4</h2>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>honour <code>Build::env</code> overrides in Android llvm-ar probe (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1868">#1868</a>)</li>
+    # <li>honour <code>Build::env</code> overrides in flag support and compiler family detection probes (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1866">#1866</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md">cc's changelog</a>.</em></p>
+    # <blockquote>
+    # <h2><a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.4.3...cc-v1.4.4">1.4.4</a> - 2026-08-21</h2>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>honour <code>Build::env</code> overrides in Android llvm-ar probe (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1868">#1868</a>)</li>
+    # <li>honour <code>Build::env</code> overrides in flag support and compiler family detection probes (<a href="https://redirect.github.com/rust-lang/cc-rs/pull/1866">#1866</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/82ee29e4e18ef60fdc4483c4ab0835835c8ef63d"><code>82ee29e</code></a> chore(cc): release v1.4.4 (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1869">#1869</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/130107831bfb8d711b6434b6c080e45c6109fcf9"><code>1301078</code></a> fix: run the Android llvm-ar probe in the caller's environment (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1868">#1868</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/c5cc913bda3893c022d05788b80f635789fcf45b"><code>c5cc913</code></a> fix: honor Build::env overrides in flag support probes (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1866">#1866</a>)</li>
+    # <li><a href="https://github.com/rust-lang/cc-rs/commit/caf76091dd23ee985bc36b5fba2c520bf08c0df2"><code>caf7609</code></a> chore(deps): bump dtolnay/rust-toolchain (<a href="https://redirect.github.com/rust-lang/cc-rs/issues/1862">#1862</a>)</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/cc-rs/compare/cc-v1.4.3...cc-v1.4.4">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cc&package-manager=cargo&previous-version=1.4.3&new-version=1.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47504	(@dependabot[bot], @dependabot[bot], #47504)	build: bump ordered-float from 5.3.0 to 5.5.0 (#47504)
+    ^ commit fa741bb9d7ed6ff3a0f93fe946aff194893cccd1
+    # Bumps [ordered-float](https://github.com/reem/rust-ordered-float) from 5.3.0 to 5.5.0.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/reem/rust-ordered-float/releases">ordered-float's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v5.5.0</h2>
+    # <ul>
+    # <li>Minimum supported Rust version increased from 1.63 to 1.90.</li>
+    # <li>feat: derive <code>Facet</code> if <code>facet</code> feature is active by <a href="https://github.com/Erik1000"><code>@​Erik1000</code></a> in <a href="https://redirect.github.com/reem/rust-ordered-float/issues/179">#179</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/reem/rust-ordered-float/compare/v5.4.0...v5.5.0">https://github.com/reem/rust-ordered-float/compare/v5.4.0...v5.5.0</a></p>
+    # <h2>v5.4.0</h2>
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>Add <code>From&lt;OrderedFloat&lt;f32&gt;&gt;</code> for <code>OrderedFloat&lt;f64&gt;</code> by <a href="https://github.com/gechelberger"><code>@​gechelberger</code></a> in <a href="https://redirect.github.com/reem/rust-ordered-float/pull/183">reem/rust-ordered-float#183</a></li>
+    # <li>impl_proptest: use <code>core</code> instead of <code>std</code> by <a href="https://github.com/tsionyx"><code>@​tsionyx</code></a> in <a href="https://redirect.github.com/reem/rust-ordered-float/pull/180">reem/rust-ordered-float#180</a></li>
+    # <li>bump schemars to 1.2 by <a href="https://github.com/mdepta42"><code>@​mdepta42</code></a> in <a href="https://redirect.github.com/reem/rust-ordered-float/pull/174">reem/rust-ordered-float#174</a></li>
+    # </ul>
+    # <h2>New Contributors</h2>
+    # <ul>
+    # <li><a href="https://github.com/tsionyx"><code>@​tsionyx</code></a> made their first contribution in <a href="https://redirect.github.com/reem/rust-ordered-float/pull/180">reem/rust-ordered-float#180</a></li>
+    # <li><a href="https://github.com/mdepta42"><code>@​mdepta42</code></a> made their first contribution in <a href="https://redirect.github.com/reem/rust-ordered-float/pull/174">reem/rust-ordered-float#174</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/reem/rust-ordered-float/compare/v5.3.0...v5.4.0">https://github.com/reem/rust-ordered-float/compare/v5.3.0...v5.4.0</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/reem/rust-ordered-float/commit/2d56f3e8ab8bfea8d67df7d7295791ccad102f66"><code>2d56f3e</code></a> v5.5.0</li>
+    # <li><a href="https://github.com/reem/rust-ordered-float/commit/4496ef7ea0dea3b4592902b208de67cbcea5c468"><code>4496ef7</code></a> feat: derive Facet if facet feature is active</li>
+    # <li><a href="https://github.com/reem/rust-ordered-float/commit/2409c9f6bb3c6d8ebaa7678d07629cd56bf7f0b7"><code>2409c9f</code></a> v5.4.0</li>
+    # <li><a href="https://github.com/reem/rust-ordered-float/commit/2730f184fb52d2489b7c22a8e2b32c691b85f09d"><code>2730f18</code></a> cargo update</li>
+    # <li><a href="https://github.com/reem/rust-ordered-float/commit/015fc4190e1253aaebd950c858d1f8c901f38ca6"><code>015fc41</code></a> add schemars 1.2 support</li>
+    # <li><a href="https://github.com/reem/rust-ordered-float/commit/4b03969a03c81e3a7e07cd88e2c68266904b6de3"><code>4b03969</code></a> refactor schemars related tests</li>
+    # <li><a href="https://github.com/reem/rust-ordered-float/commit/424f9acfd13e36c677a82ddd6ba083c000459679"><code>424f9ac</code></a> rustfmt</li>
+    # <li><a href="https://github.com/reem/rust-ordered-float/commit/51764f167a326e78862f61e53514b90b1ea604c9"><code>51764f1</code></a> impl_proptest: use <code>core</code> instead of <code>std</code> (<a href="https://redirect.github.com/reem/rust-ordered-float/issues/180">#180</a>)</li>
+    # <li><a href="https://github.com/reem/rust-ordered-float/commit/ccf51f5c9dc768f6dca15a018a8004fa6dc191a7"><code>ccf51f5</code></a> Add From&lt;OrderedFloat<!-- raw HTML omitted -->&gt; for OrderedFloat&lt;f64&gt; (<a href="https://redirect.github.com/reem/rust-ordered-float/issues/183">#183</a>)</li>
+    # <li>See full diff in <a href="https://github.com/reem/rust-ordered-float/compare/v5.3.0...v5.5.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ordered-float&package-manager=cargo&previous-version=5.3.0&new-version=5.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47497	(@dependabot[bot], @dependabot[bot], #47497)	build: bump rustls-webpki from 0.103.14 to 0.103.15 in the rustls-webpki-related group (#47497)
+    ^ commit f4866bae77d0a221ff2fcc268c37c80d17ad76cb
+    # Bumps the rustls-webpki-related group with 1 update: [rustls-webpki](https://github.com/rustls/webpki).
+    # 
+    # Updates `rustls-webpki` from 0.103.14 to 0.103.15
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rustls/webpki/releases">rustls-webpki's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v/0.103.15</h2>
+    # <p>Fixes <code>docs.rs</code> build errors.</p>
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>Cargo: avoid all-features in docs.rs  by <a href="https://github.com/cpu"><code>@​cpu</code></a> in <a href="https://redirect.github.com/rustls/webpki/pull/530">rustls/webpki#530</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/rustls/webpki/compare/v/0.103.14..v/0.103.15">https://github.com/rustls/webpki/compare/v/0.103.14..v/0.103.15</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rustls/webpki/commit/c14836d8de33c0ad0ac7dcb28fe9aade20831a4d"><code>c14836d</code></a> Cargo: version 0.103.14 -&gt; 0.103.15</li>
+    # <li><a href="https://github.com/rustls/webpki/commit/5c9230825b933f84221936064cb12465b95b193c"><code>5c92308</code></a> Cargo: avoid all-features in docs.rs</li>
+    # <li>See full diff in <a href="https://github.com/rustls/webpki/compare/v/0.103.14...v/0.103.15">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustls-webpki&package-manager=cargo&previous-version=0.103.14&new-version=0.103.15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
+    # - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
+    # - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47389	(@shubhamg13, #47389)	layout/script: Let layout own LCP halting logic to preempt unnecessary compute (#47389)
+    ^ commit 73a3781482db5a0e710423d8cd44e3912a3cf1d3
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # This PR spans over following changes
+    # - Store the dispatched events in `window`
+    # - Add `report_largest_contentful_paint`.
+    # - Remove tracking via`disabled_webviews` container from paint.
+    # - Implement halting according to specs
+    # 
+    # Testing: 
+    # - Existing WPT Status Unchanged
+    # - Updated unit tests
+    #   - `test_largest_contentful_paint_js_api`
+    #   - `test_largest_contentful_paint_js_api_with_mouse_move`
+    #   - `test_largest_contentful_paint_js_api_with_mouse_click_and_reload`
+    # 
+    # Fixes: Part of #42000
+https://github.com/servo/servo/pull/47475	(@shubhamg13, #47475)	script: Return `0` as`loadTime` value for all LCP Entries (#47475)
+    ^ commit 1ed4640e9f39feeb8a14ad05295c6e0aaa09394a
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # As per the spec loadTime for Text is 0. 
+    # > [Step 5.8.6](https://www.w3.org/TR/largest-contentful-paint/#compute-a-new-largest-contentful-paint-candidate). [loadTime](https://www.w3.org/TR/largest-contentful-paint/#largest-contentful-paint-candidate-loadtime) set to 0.
+    # 
+    # Hence, returning `None` will pass Text releated WPTs.
+    # 
+    # Testing: Additional WPT Passed 
+    # Fixes: Part of #47315
+    # 
+    # 
+https://github.com/servo/servo/pull/47508	(@mrobinson, #47508)	ci: Disable `thejerrybao/setup-swap-space` (#47508)
+    ^ commit 47d885615fb767913aa11435aa51690003d62d52
+    # This action doesn't exist any longer which has broken CI.
+    # 
+    # Testing: This changes fixes CI, which is the test.
+    # 
+https://github.com/servo/servo/pull/47480	(@alice, #47480)	layout: Refactor how DOM damage is handled during accessibility updates. (#47480)
+    ^ commit ad7cc470e03976e4ecbb1f8d357a679196be66fc
+    # - Rather than passing in a `VecDeque` of pairs, pass in a map of `OpaqueNode` to a pair of (`ServoLayoutNode`, `AccessibilityDamage`).
+    # - Hand the damage off to the `AccessibilityUpdate`, which processes it into two separate maps keyed on `NodeId`:
+    #   - `NodeId` to `AccessibilityDamage`,
+    #   - `NodeId` to `ServoLayoutNode`.
+    # - When figuring out the damage root, make sure we have the DOM node which corresponds to it even if it doesn't have DOM damage itself.
+    # - Consistently use `'update` as the lifetime name for methods in `AccessibilityTree`, since the lifetime for anything with a lifetime is going to correspond to the tree update process.
+    # - Remove some lifetimes which were unnecessary.
+    # 
+    # Testing: Just a refactor, covered by existing tests.
+    # Fixes: Part of #47159.
++https://github.com/servo/servo/pull/47358	(@mrobinson, @SimonSapin, #47358)	script: Add initial support for updating Document selection with the mouse (#47358)
+    input; very basic interactive selection! note many caveats: no context menu, no double/triple clicking, no scrolling, no crossing shadow root boundaries, no selecting images, etc
+    ^ commit c93f007d0aeb672571b7227f0f23e219d972902c
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This change adds initial support for selecting text on the page with the
+    # mouse. While this works there are quite a few caveats tracked by #36460.
+    # Major missing bits:
+    # 
+    # - Selections do not currently work across shadow roots and selection
+    #   won't update when moving through a different shadow root's contents.
+    # - Performance is bad, because every selection update requires a relayout.
+    #   A followup change will add support for display-list only updates when
+    #   the selection boundaries stay within the same node.
+    # - We do not support `user-select` yet which is why some tests fail.
+    # - Selection never updates when the cursor moves outside of the viewport
+    #   rect and scrolling by dragging past the end of the selection isn't
+    #   supported.
+    # - The selection rectangle is often wrong within a single line.
+    # - Double and triple clicking to select word and paragraph is not
+    #   supported.
+    # - The context menu does not respond to selection presence yet.
+    # - Currently only text can be selected, but eventually `HitTest` will be
+    #   extended to support selecting images as well.
+    # 
+    # Testing: This change includes unit tests and updates WPT results.
+    # Fixes: #4409.
+    # 
+https://github.com/servo/servo/pull/47510	(@TimvdLippe, #47510)	script: Use UnrootedDom for node variant of NodeOrString in execcommand (#47510)
+    ^ commit f8dfb29a568cf00489993df74b3a626ba1f1f1be
+    # This removes the requirement for the Node to be `DomRoot`. That's possible because `NodeOrString` is used in `is_allowed_child` which does not perform any GC. Hence we can construct the `NoGC` and ensure the node stays unrooted.
+    # 
+    # In a future PR, this allows us to use an unrooted variant of `range.contained_nodes()`, for additional speedup.
+    # 
+    # Part of #25005
+    # 
+    # Testing: it compiles
++https://github.com/servo/servo/pull/47486	(@mrobinson, #47486)	script: More faithfully implement "evaluate a JavaScript URL" (#47486)
+    web; more conformant ‘javascript:’ URL navigation
+    ^ commit d52e1382825b53b97ec2c04862abf00fa4124ece
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This change makes it so that the "evaluate a JavaScript URL" procedure
+    # from the specification is more faithfully implemented. In particular, it
+    # builds and executes a classic script, which nows grows the ability to
+    # return a value, as specified. More specification steps are filled out in
+    # general.
+    #     
+    # Testing: This results in a progression on a decent number of WPT subtests.
+    # 
+https://github.com/servo/servo/pull/47494	(@veyndan, #47494)	android: Make `ServoView.client` non-null (#47494)
+    ^ commit ca49e5943a62a22c300b36c35e8dd2980057962c
+    # This suppresses the `ViewConstructor` lint since, as mentioned in 201c46059b2b91439dcf41a731302c9b43a65a89, we no longer want to promote the usage of `ServoView` via the XML Views.
+    # 
+    # Testing: There are no automated tests for Android.
+https://github.com/servo/servo/pull/47484	(@Narfinger, #47484)	net: Cleanup variable names in http_network_fetch (#47484)
+    ^ commit 38eacf004f7e8e861a520ac129c7cd9cdbc05d1c
+    # There are multiple res, res_body and so forth in http_network_fetch. This cleans up at least some of it and gives more descriptive names (according to my understanding).
+    # 
+    # Testing: This should be just renames.
+    # 
++https://github.com/servo/servo/pull/46056	(@TimvdLippe, @mrobinson, #46056)	script: Implement ancestorOrigins for Location (#46056)
+    dom; ancestorOrigins on Location (location.ancestorOrigins)
+    ^ commit ac50f9f3f1330de32147c6a77e56c52c1d506499
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Implements the new feature based on recent changes in HTML in
+    # https://github.com/whatwg/html/pull/12071/ and https://github.com/whatwg/html/pull/11560
+    # 
+    # Testing: newly passing WPT tests
+    # 
+https://github.com/servo/servo/pull/47506	(@yezhizhen, #47506)	script: Reduce allocation for "choosing a navigable", execcommand, querycommand* (#47506)
+    ^ commit c4ff6cb0afdae8e0af6687e47f6bd129a1e92e3b
+    # Similar to #47285.
+    # 
+    # Testing: Covered by existing tests.
+https://github.com/servo/servo/pull/47505	(@kkoyung, #47505)	deps: Bump ocb3 to 0.2 (#47505)
+    ^ commit 9ec9e425a188755cb457653dee3a3cb43c88c5fd
+    # Bump ocb3 from 0.2.0-rc.3 to 0.2.0.
+    # 
+    # The new version ocb3 no longer have the `zeroize` feature. Since the code for handling AES key is shared with other AES algorithms, and the key is already protected by the `zeroize` feature of `hybrid-array` crate. It is safe to remove the `zeroize` feature from the ocb3 crate.
+    # 
+    # Testing: No code change.
+    # Part-of: #45823
+https://github.com/servo/servo/pull/47513	(@TimvdLippe, @mrobinson, #47513)	script: Make `Range::contained_nodes` take a `&NoGC` (#47513)
+    ^ commit 2ef5b9bb9a646a2b0c897753f9e81a20d0ce11b5
+    # Part of #25005
+    # 
+    # Testing: it compiles
+    # 
+https://github.com/servo/servo/pull/47514	(@Lfan-ke, #47514)	webdriver: use IsArgumentsObject instead of a hand-rolled arguments check (#47514)
+    ^ commit 5b05da3087cce59dc69b12e660a8ac91ec214213
+    # Replaces the hand-rolled `[object Arguments]` string comparison in `is_arguments_object` with the `IsArgumentsObject` wrapper from mozjs, as suggested in the issue.
+    # 
+    # No behaviour change is expected, so the existing `tests/wpt tests/webdriver/classic` tests should be unaffected and no new tests are added.
+    # 
+    # Fixes #47448
+https://github.com/servo/servo/pull/46931	(@pylbrecht, #46931)	More granular script thread memory reporting (#46931)
+    ^ commit b4b6d8c6ae73415717fb39e6db610109ea105ff0
+    # So far, all Rust memory for DOM objects ended up in a single category (MallocHeap).
+    # 
+    # To get a more fine-grained view into memory usage, we are now counting DOM object sizes:
+    # 
+    # ```rust
+    # struct DocumentSizes {
+    #     element_nodes_size: usize,
+    #     text_nodes_size: usize,
+    #     attribute_nodes_size: usize,
+    #     other_nodes_size: usize,
+    # }
+    # ```
+    # 
+    # For flexibility reasons, we do the counting within Servo instead of within SpiderMonkey.
+    # 
+    # When collecting memory reports from the script thread, we traverse each document and accumulate node sizes into `DocumentSizes`. We remember, which nodes we already visited (`ALREADY_COMPUTED_OBJECTS`), and ignore these in `get_size()` to avoid counting them twice.
+    # 
+    # <img width="1354" height="1568" alt="image" src="https://github.com/user-attachments/assets/fc217398-fd99-4665-b9bf-9ea0f6ed140b" />
+    # 
+    # ---
+    # 
+    # Testing: manual
+    # Fixes: #44995 
+    # 
+https://github.com/servo/servo/pull/47493	(@nicoburns, #47493)	Upgrade to Taffy v0.14.0 (#47493)
+    ^ commit 94d656caa875d7cec56979692777dc36606c6b5a
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Upgrade to Taffy v0.14.0:
+    # 
+    # - Adapt to Taffy baselines now being `Baselines { first, last }` instead of `Point { x, y }` (previous x was unused and y was the first baseline)
+    # - Adapt to `DetailedGridInfo` changes:
+    #    - Taffy now exposes (start, end) position for every track instead of separate vecs of track widths and gutter widths.
+    #    - Rather than adapting our own to Taffy's new format, we use Taffy's built-in spec-compliant serialization support `grid-template-rows`/`-columns`. This supports serializing grid names which we didn't previously support.
+    # - Adapt to `Dimension`/`LengthPercentageAuto` changes:
+    #    - `Dimension` gained support for intrinsic sizing keywords. We now map those from Stylo to Taffy for both `width`/`height`/`flex-basis`
+    #    - `min-`/`max-` width/height are now `LengthPercentageAuto` in Taffy as they don't support the new keywords yet. So we update the type conversion function to reflect that.
+    # 
+    # Testing: WPT tests
+    # 
+>>> 2026-08-27T01:57:13Z
+-https://github.com/servo/servo/pull/47526	(@dependabot[bot], @dependabot[bot], #47526)	build: bump redox_syscall from 0.9.2 to 0.9.3 (#47526)
+    ^ commit e83f3117045171e59f230c3b36ebd721826d3754
+    # Bumps redox_syscall from 0.9.2 to 0.9.3.
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=redox_syscall&package-manager=cargo&previous-version=0.9.2&new-version=0.9.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47490	(@veyndan, #47490)	android: Stop double-trimming URI before loading (#47490)
+    ^ commit c4d8c0f7faa80f54932824a190f38ec35d680181
+    # We already trim the URI before loading in Rust, so there's no need to pre-do it in Kotlin.
+    # 
+    # https://github.com/servo/servo/blob/c3bc20759d19b9c6a951a3cf4c906eaf4d9d400f/ports/servoshell/parser.rs#L73
+    # 
+    # With this, the `loadUrl` function has been inlined as it is now just a simple proxy to `servoView`.
+    # 
+    # Testing: There are no automated tests for Android.
+    # 
+https://github.com/servo/servo/pull/47301	(@niyabits, @mukilan, #47301)	script: use a trait for the WorkletThreadPool (#47301)
+    ^ commit 8a42026eacc2bee9ba2e5c66d0758dba79dbfe25
+    # This PR is a part of refactoring Worklet for implementing AudioWorklet
+    # 
+    # - Create a WorkletThreadPool trait, which allows for a stateful and a stateless WorkletThreadPool.
+    # - Change the existing mechanism of executing tasks on the WorkletThreadPool
+    #   - Use a boxed closure to send the Worklet tasks to the Primary Worklet Thread
+    # 
+    # Testing: existing worklet WPT covers the changes
+    # 
+    # 
+-https://github.com/servo/servo/pull/47528	(@dependabot[bot], @dependabot[bot], #47528)	build: bump content-security-policy from 0.8.1 to 0.8.2 (#47528)
+    ^ commit 0743a7cdd2b43440a0e556676bdef7018ce15197
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Bumps [content-security-policy](https://github.com/rust-ammonia/rust-content-security-policy) from 0.8.1 to 0.8.2.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-ammonia/rust-content-security-policy/releases">content-security-policy's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>0.8.2</h2>
+    # <ul>
+    # <li>Fix handling of non-ASCII</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-ammonia/rust-content-security-policy/blob/master/CHANGELOG.md">content-security-policy's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.8.2</h1>
+    # <ul>
+    # <li>Fix handling of non-ASCII</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-ammonia/rust-content-security-policy/commit/05528760da749602f26bfc1a916df07727cc9ea7"><code>0552876</code></a> Merge pull request <a href="https://redirect.github.com/rust-ammonia/rust-content-security-policy/issues/75">#75</a> from rust-ammonia/release-0.8.2</li>
+    # <li><a href="https://github.com/rust-ammonia/rust-content-security-policy/commit/d5ff121aeab766663435182a7869b36835724d6b"><code>d5ff121</code></a> Release 0.8.2</li>
+    # <li><a href="https://github.com/rust-ammonia/rust-content-security-policy/commit/73ffc8ce9ae2ed51f96ab99ab8515190dff22c39"><code>73ffc8c</code></a> Merge pull request <a href="https://redirect.github.com/rust-ammonia/rust-content-security-policy/issues/74">#74</a> from TimvdLippe/whitespace-characters</li>
+    # <li><a href="https://github.com/rust-ammonia/rust-content-security-policy/commit/cdaef9b931a18843bbf778d0214314a6a307da1e"><code>cdaef9b</code></a> Support all whitespace characters in header values</li>
+    # <li><a href="https://github.com/rust-ammonia/rust-content-security-policy/commit/408517b150881810c148f2c6007950decb7361ce"><code>408517b</code></a> Fix version number in readme</li>
+    # <li>See full diff in <a href="https://github.com/rust-ammonia/rust-content-security-policy/compare/v0.8.1...v0.8.2">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=content-security-policy&package-manager=cargo&previous-version=0.8.1&new-version=0.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47532	(@jdm, #47532)	script: Only measure memory for Attr nodes once. (#47532)
+    ^ commit 7d060b53dc67c708c51575962b1e58f2ee38240d
+    # Any Attr node measured while traversing the DOM tree should be ignored later when we are scanning the full GC graph.
+    # 
+    # Testing: No automated tests for about:memory.
+https://github.com/servo/servo/pull/47534	(@jschwe, #47534)	ohos: Set GITHUB_TOKEN for build to avoid rate limits (#47534)
+    ^ commit 13cd7dcdf316a1b2ee68e8a0059c34292666b9ec
+    # We now use `clang-19`, which is download from github releases. To find the release `cargo-ohos` uses the github API, which is rate-limited for anonymous access, which causes spurious errors.
+    # Hence we set GITHUB_TOKEN for the build, to allow authenticated API access.
+    # At the same time we reduce the token permissions for these steps to the minimum necessary.
+    # 
+    # Testing: Since the rate-limiting issue is intermittent, this fix is speculative. [try-run](https://github.com/servo/servo/actions/runs/32944880475/job/98103463411) works.
+    # 
+    # 
+https://github.com/servo/servo/pull/47157	(@Narfinger, #47157)	script: Move GPU, GPUBindGroup, GPUBindGrouplayout, GPUBuffer, GPUColorWrite and GPUConvert into script_webgpu (#47157)
+    ^ commit 8b3cef87b8c2d6c3860c91299c810284ceba919a
+    # This moves GPU, GPUBuffer, GPUBindGroup, GPUBindGrouplayout, GPUColorWrite, GPUConvert to script_webgpu.
+    # This is similar to previous PRs. Of note are a couple of changes:
+    # - Convert and TryConvert was split into WebGPUConvert and WebGPUTryConvert (in script_webgpu) to disentangle the various versions of convert.
+    # - WebGPUPromiseTrait got two more callback_promise_* for GPUBuffer and GPU.
+    # - GPUDevice (which still resides in script) was abstracted with GPUDeviceTrait.
+    # - Many values used for gpuconvert.rs are similarly abstracted over by traits. These traits will be removed when the files are moved.
+    # - promimse.rs was renamed to traits.rs.
+    # - We also add error messages in GPU and GPUBuffer.
+    # 
+    # Part of https://github.com/servo/servo/issues/46658
+    # 
+    # Testing: Compilation is the test as no functionality was changed.
+    # 
+https://github.com/servo/servo/pull/47425	(@mrobinson, #47425)	script: Align live range update steps with specification (#47425)
+    ^ commit 73d0917616a2f200bcf0045241db4292a4d7d899
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This change reworks the live range update steps that show up in various
+    # places in the specification so that they match what the specification
+    # says. Now updates to live ranges use the existing `set_start` and
+    # `set_end` APIs which simplify the code greatly as they already handle
+    # updating the `Node`'s live range list. This is preparation work for
+    # adding a new live-ish range type for selections (which will have a few
+    # different requirements than a real DOM live range).
+    # 
+    # Improvements to spec compliance of `Node#normalize()`:
+    #  - Instead of issuing one mutation record per merged node only issue a
+    #    single one.
+    #  - The change to the preserved node's data happens before the merged
+    #    nodes' removal.
+    #  - Indices for live range updates would be stale when merging more
+    #    than two nodes.
+    # 
+    # Notes on performance:
+    #  - This switches to accessing a rooted `SmallVec` of live ranges
+    #    per-node. In cases where a node has 4 or fewer live ranges, this will
+    #    not allocate, otherwise this adds a new vector allocation for an
+    #    edge case.
+    #  - The amount of rooting should be unchanged as the old code had to
+    #    root all accessed `Range`'s anyway.
+    #  - In some cases we avoid calculating node indices where they were
+    #    before using `LazyCell`.
+    # 
+    # Testing: This change adds a new WPT test.
+    # 
++https://github.com/servo/servo/pull/47516	(@mrobinson, #47516)	script: Make "choose a navigable" more specification compliant (#47516)
+    web; more conformant navigation
+    ^ commit 7bec306af301843807df89fa8288540adc1c319b
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This aligns the pre-existing "choose_browsing_context" and
+    # "find_window_proxy_by_name" with the current specification and
+    # implements as well as we can with our current architecture. Notable
+    # changes:
+    # 
+    # 1. Priority now follows the order specified in "find navigable by target
+    #    name".
+    # 2. If a `WindowProxy` has a discarded browsing context, it is never
+    #    chosen. These `WindowProxy`s are not meant to be considered by the
+    #    algorithm as they are not really in the tree.
+    # 3. A minor spec issue with "_parent" when there is no parent is
+    #    corrected.
+    # 
+    # This still does allow selecting navigables that are in different
+    # `ScriptThread`s. That requires a lot more work.
+    # 
+    # Finally, a small, related issue where `WindowProxy`s were leaking is
+    # fixed as well.
+    # 
+    # Testing: This change causes two new subtests to pass. In addition, I think it should help with trusted-types flakiness.
+    # Closes: #44580.
+    # Fixes: #42343.
+    # 
+https://github.com/servo/servo/pull/47479	(@Narfinger, #47479)	script: Allow DOMString to convert efficiently from static strings (#47479)
+    ^ commit 36cc4ea5e4879e87fc76b0dcc7541cb74d5c1609
+    # We allow DOMStrings to efficiently convert from static strings by introducing the DOMString::from_static method.
+    # We achieve this by having another entry in our enum that holds the static string. This will safe on memory for DOMStrings that never change.
+    # 
+    # 
+    # The rest of the changes are mechanical and the static lifetime guarantees that the string will never go out of scope.
+    # 
+    # Adapted the original idea from in house fork.
+    # 
+    # Testing: WPT tests should find anything that breaks.
+    # 
+https://github.com/servo/servo/pull/47472	(@Narfinger, #47472)	script: Update chardetng (#47472)
+    ^ commit dc1693f28851f5bb2f3dc3c60fbcb95028d7debc
+    # This updates the chardetng dependency with some changes to the API.
+    # I followed the documentation on which flags to set.
+    # 
+    # Testing: WPT run here: https://github.com/Narfinger/servo/actions/runs/32948944638
+    # 
+https://github.com/servo/servo/pull/47530	(@yezhizhen, #47530)	script: Reduce String allocation of JS API of fetch `Headers` (#47530)
+    ^ commit 91eb2b0599c3e67b8506f81aca17059406946071
+    # We modify validated name in-place instead.
+    # Testing: Covered by existing tests. Tho I have not tested as it's trivial.
+    # 
++https://github.com/servo/servo/pull/47518	(@nicoburns, #47518)	Grid: container baselines + use child baselines + coordinate conversion (#47518)
+    layout; fix grid container baselines
+    ^ commit 1e373f15cccc627fd6b69c5ecb3b4fde58be5f70
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # A couple of fixes around baselines for Grid/Taffy:
+    # 
+    # - Return baselines for container itself.
+    # - border-box (Taffy) <-> content-box (Servo) baseline coordinate space fixup (in both directions, in a few places)
+    # - Grid containers were using their own baselines for each of their children instead of passing through their children's baseline. This is now fixed.
+    # 
+    # Testing: WPT tests
+    # 
+    # The failing tentative test cases were never truly passing: the ref now actually applies grid baselines.
+https://github.com/servo/servo/pull/47511	(@alice, #47511)	layout: Fold accessibility bounds update into regular tree update. (#47511)
+    ^ commit dc43f81f9950542aa88476a9f5c12e61f9c7d583
+    # - Ensure we always walk from the document root by inserting "damage" for the root node.
+    # - When walking the tree in `update_subtree()`,  always call into `update_children_from_dom_node()`, which now adds the DOM nodes for all child nodes into the `AccessibilityUpdate`'s `dom_node_map`.
+    # - Also always call into `update_bounds_from_dom_node()`, of course.
+    # - In `update_children_from_dom_node()`, don't immediately walk into the subtree for new nodes. Instead, for newly created nodes, set the damage to `Rebuild` in `get_or_create_node`.
+    # 
+    # Testing: Refactor, covered by existing tests.
+    # Fixes: Part of #47159.
++https://github.com/servo/servo/pull/47322	(@Narfinger, #47322)	script: Fix borrow hazard in PaintWorkletGlobalScope (#47322)
+    crash; fix borrow hazard
+    ^ commit 9f15757dd55f47bf42d6cddb6d93e0e11daae67f
+    # This handles a borrow hazard in PaintWorkletGlobalScope. Previously we kept a borrow_mut() (lives as long as entry()) open for the duration which contained a usage of &mut JSContext.
+    # 
+    # This code splits the querying of self.paint_class_instances into a separate function (with early returns) and switches to safe_borrow_mut to statically guarantee the abscence of borrow hazards.
+    # 
+    # Testing: safe_borrow_mut enforces the abscence of borrow hazards and WPT should find if there are other problems with the refactor.
+    # 
+https://github.com/servo/servo/pull/47541	(@Narfinger, #47541)	net: Instead of Duration use ApproxDuration (#47541)
+    ^ commit b5624984e487ab8bf6049eb6c02444b318d0a8c5
+    # This changes the Duration in CachedResources to ApproxDuration.
+    # This saves us a couple of bytes per CachedResources as ApproxDuration only stores the seconds (and Duration has nanosecond precision).
+    # 
+    # This adds up and on a simple load of thomann.de we go from 13.95MiB for the cache to 13.93MiB. For more browsing this gap will only get better.
+    # The spec only cares about second precision.
+    # 
+    # Testing: As the spec only cares about seconds precision and we never used nanosecond precision, the nanosecond Duration part was always zero. Hence, this should not have any effects.
+    # 
+https://github.com/servo/servo/pull/47540	(@Narfinger, #47540)	script_bindings: Add docs for make_ascii_lowercase (#47540)
+    ^ commit e8b5b8aa1de4c31e9b9cd1dc376a723601fcccbf
+    # This just documents the current behavior (which might be unexpected).
+    # 
+    # Testing: This just changes the documentation.
+    # 
+https://github.com/servo/servo/pull/47552	(@mrobinson, #47552)	script_bindings: Add a fast path to `is_platform_object_same_origin` (#47552)
+    ^ commit df644dde3a9ad98788578dd2b9481167c09a0ca6
+    # If this function will be used more commonly for `WindowProxy`, it should
+    # be fast. If two `Realm` objects have pointer equality, they obviously
+    # have same origin. I haven't done any performance testing of this change,
+    # but I think it's a trivial improvement here.
+    # 
+    # Testing: This should not change behavior so is covered by existing tests.
+    # 
+https://github.com/servo/servo/pull/47542	(@mrobinson, #47542)	script: Handle WebDriver script execution via a native promise handler (#47542)
+    ^ commit 17f555b0201632614ad240c72d4c242cb36583ac
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Instead of handling WebDriver script execution via `Window` callbacks,
+    # have the script return a `Promise` to which we attach a native handler.
+    # This greatly simplifies the way that script execution happens and
+    # additionally prevents the native callbacks from being visible. Their
+    # visibility was causing intermittent failures in some tests.
+    # 
+    # Testing: This causes a WPT test that previously timed out to fail properly.
+    # 
+-https://github.com/servo/servo/pull/47533	(@TimvdLippe, #47533)	clippy: Enable `manual_string_new` linter for some components (#47533)
+    ^ commit 41b8b1fea28bf931b720621003d2f40e7177c057
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # To prepare for a DOMString-specific variant of this Clippy lint, enable it in a couple of components. Unfortunately specifying the `workspace.lints.clippy` in `/Cargo.toml` isn't sufficient, as all relevant Cargo.toml in each component also need to specify the `[lints]` section to inherit from the workspace. Therefore, to allow for a gradual rollout, enable these in a couple of places.
+    # 
+    # This removes the overall need to specify all clippy rules as arguments on the command line.
+    # 
+    # Part of #47512
+    # 
+    # Testing: it compiles with Clippy
+https://github.com/servo/servo/pull/47476	(@mrobinson, #47476)	constellation: Move `screenshot_readiness_requests` to `ConstellationWebView` (#47476)
+    ^ commit e9724266796cbbab38f9bea8c4b77fff70577b6d
+    # This change is part of a series of changes moving various members of
+    # `Constellation` to `ConstellationWebView` in order to avoid so much
+    # `HashMap` access and to simplify the design of the `Constellation`.
+    # 
+    # This change tightens up screenshot completion by scoping all updates
+    # to a single `WebView`. Before any update could trigger screenshot
+    # advance in any `WebView`. This is a behavior change, but shouldn't
+    # really change much in practice.
+    # 
+    # Testing: The changes here are covered by existing tests, which ensure that any
+    # minor behavior changes still properly cause screenshots to appear.
+    # 
+>>> 2026-08-28T01:56:43Z
+https://github.com/servo/servo/pull/47433	(@Narfinger, #47433)	deps: Update quick_cache (#47433)
+    ^ commit b88193272420cf1afdb5c16f4884c817120178bd
+    # Updating quick_cache with slight changes in api. This changes the hash function in quick_cache to foldhash.
+    # 
+    # Testing: Dependency upgrade, only pipeline as test needed.
+    # 
+https://github.com/servo/servo/pull/47535	(@TimvdLippe, #47535)	script: Move more files from `script/dom/` (#47535)
+    ^ commit 9624ccd28c8f6e3ae0ddd8f601728720ec38be51
+    # It's increasingly difficult to figure out naming and locations for these last few remaining files. These moves are my best effort to find a reasonable place.
+    # 
+    # Part of #38901
+    # 
+    # Testing: it compiles
+-https://github.com/servo/servo/pull/47561	(@dependabot[bot], @dependabot[bot], #47561)	build: bump crc32fast from 1.5.0 to 1.5.1 (#47561)
+    ^ commit 2d375e41a180fb82bfa86c3268ee619332b26760
+    # Bumps [crc32fast](https://github.com/srijs/rust-crc32fast) from 1.5.0 to 1.5.1.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/srijs/rust-crc32fast/commit/a150f65ce810793293d5c9dd815f4510eb6d8e4c"><code>a150f65</code></a> release 1.5.1</li>
+    # <li><a href="https://github.com/srijs/rust-crc32fast/commit/f066e8d618506d12b92cc46286b07929d4dd704e"><code>f066e8d</code></a> perf(simd): widen x86 folds, add ARM 3-way, and speed up small inputs (<a href="https://redirect.github.com/srijs/rust-crc32fast/issues/56">#56</a>)</li>
+    # <li><a href="https://github.com/srijs/rust-crc32fast/commit/d5c123d00d5a0236b92acc56f984a5a8a5c7baf5"><code>d5c123d</code></a> consolidate dword load in baseline implementation (<a href="https://redirect.github.com/srijs/rust-crc32fast/issues/55">#55</a>)</li>
+    # <li><a href="https://github.com/srijs/rust-crc32fast/commit/50e2046cbb5d4f1844931302b9cd9636694d88ec"><code>50e2046</code></a> downgrade msrv ci run to just cargo build</li>
+    # <li>See full diff in <a href="https://github.com/srijs/rust-crc32fast/compare/v1.5.0...v1.5.1">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=crc32fast&package-manager=cargo&previous-version=1.5.0&new-version=1.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47419	(@shubhamg13, #47419)	paint: Delete `largest_contentful_paint_calculator` (#47419)
+    ^ commit c038a19febfd7ab687de71caf04cfe180462b70f
+    # - Delete `largest_contentful_paint_calculator` as all size calculation is done in layout
+    #   - as per spec guidelines
+    #   - Saves form double polling of winner from already winner candidates
+    # - Now we store pending `lcp_candidates` with/by epoch.
+    # 
+    # Follow-Up of: https://github.com/servo/servo/pull/47389
+    # 
+    # > Sorry for this mess, when I picked up the LCP implementation. I wasn't that aware of W3C specs and Servo components.
+    # 
+    # Testing: Existing WPT Status Unchanged
+    # - `largest-contentful-paint/performance-entry-sequence.html` race also fixed in here.
+    # 
+    # Fixes: Part of #42000
+    # Fixes: #47373
+    # 
+https://github.com/servo/servo/pull/47566	(@yezhizhen, #47566)	script: Reduce allocation for `Headers` iterator ops (#47566)
+    ^ commit b5181acd5291964b5cfa260a745aa84df40f2509
+    # 
+    # Testing: Covered by existing tests.
+https://github.com/servo/servo/pull/47473	(@mrobinson, #47473)	constellation: Move `pending_viewport_changes` to `ConstellationWebView` (#47473)
+    ^ commit 0a48e298482659817eb50097df23841f2b8e3044
+    # This is another change in a series of work to try to reduce the amount
+    # of `HashMap` access in `Constellation`. This moves
+    # `pending_viewport_changes` to `ConstellationWebView` and renames it to
+    # `pending_viewport_details`.
+    # 
+    # 
+    # Testing: This shouldn't change behavior so is covered by existing tests.
+    # Fixes: This is part of #47294.
+    # 
++https://github.com/servo/servo/pull/47549	(@mrobinson, #47549)	script: Continue implementation of `WindowProxy` `ProxyTraps` (#47549)
+    dom; more conformant Window (WindowProxy)
+    ^ commit 3e79a991614b788573b4471f165907153a294e30
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # The `ProxyTraps` allow implementation of JavaScript object behaviors
+    # such as `getPrototype` on the "exotic" `WindowProxy` object. Several of
+    # these traps were not implemented so this change implements more of them.
+    # Luckly, much of the logic is duplicated with the `Location` object so
+    # this change reuses a good deal of that code from `script_bindings`.
+    # The only remaining traps are for cross origin `ownPropertyKeys` which is
+    # more complex and to finish other behavior for `set`, etc that rely on
+    # the cross-origin property list.
+    # 
+    # Testing: This causes a number of WPT tests to start passing.
+https://github.com/servo/servo/pull/47043	(@yezhizhen, #47043)	css: Implement `touch-action` (Except for pan-{up,down,left,right} that Stylo does not support) (#47043)
+    ^ commit 435dda2ac41e9adc5c8e82430d5ae098ff106c4d
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Motivated by #46983 to get this to the end.
+    # 
+    # This has 44.1736% usage percentage as listed in Chrome report, and controls the most basic interaction rule with touch.
+    # 
+    # Stylo PR: https://github.com/servo/stylo/pull/439
+    # 
+    # Testing: Only new passing. No new failure. All of them are pointerevents tests so demonstrate quite the value.
+    # 
+    # 
++https://github.com/servo/servo/pull/47426	(@TimvdLippe, @mrobinson, #47426)	script: Reland loading state machine for documents (#47426)
+    web; more reliable navigation
+    ^ commit 3143decb37c77aa5a9f7445c73e7a2410a066a97
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # This is a reland of #46059 which now reliably works thanks to the changes in #46975. The tests that I updated I all verified locally that they run correct with `--repeat-until-unexpected` for at least 20 runs.
+    # 
+    # Testing: new WPT passes
+    # Fixes: Part of #46859
+https://github.com/servo/servo/pull/47570	(@SimonSapin, #47570)	script: Don’t mark nodes as dirty if they were and remain selected (#47570)
+    ^ commit 670ae8a70801b162e186f81cbb5bdd2d59c39108
+    # Part of https://github.com/servo/servo/issues/47392
+    # 
+    # Testing: expecting no change to existing WPT
+    # 
+>>> 2026-08-29T23:11:15Z
+https://github.com/servo/servo/pull/47593	(@jschwe, #47593)	cargo-deny: Allow yanked crates. (#47593)
+    ^ commit a8268cd1e5cedc121627d37230c7e48e2cb9e228
+    # It's unfortunate that we can't `warn` instead,
+    # but that would require more changes in mach which I currently don't have
+    #  the time for.
+    # 
+    # Testing: Works if CI passes
+    # Fixes: #45890
+    # 
+-https://github.com/servo/servo/pull/47591	(@dependabot[bot], @dependabot[bot], #47591)	build: bump blocking from 1.6.2 to 1.7.0 (#47591)
+    ^ commit 6d9ee9e482791020b88e69d8a725e6d3d6b63a38
+    # Bumps [blocking](https://github.com/smol-rs/blocking) from 1.6.2 to 1.7.0.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/smol-rs/blocking/releases">blocking's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v1.7.0</h2>
+    # <ul>
+    # <li>Bump MSRV to v1.68.</li>
+    # <li>Avoid Option&lt;&gt; indirection via VecDeque. (<a href="https://redirect.github.com/smol-rs/blocking/issues/74">#74</a>)</li>
+    # <li>Support setting the number of threads without an env var. (<a href="https://redirect.github.com/smol-rs/blocking/issues/75">#75</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/smol-rs/blocking/blob/master/CHANGELOG.md">blocking's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>Version 1.7.0</h1>
+    # <ul>
+    # <li>Bump MSRV to v1.68.</li>
+    # <li>Avoid Option&lt;&gt; indirection via VecDeque. (<a href="https://redirect.github.com/smol-rs/blocking/issues/74">#74</a>)</li>
+    # <li>Support setting the number of threads without an env var. (<a href="https://redirect.github.com/smol-rs/blocking/issues/75">#75</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/smol-rs/blocking/commit/e29a5e6979f56c7537b04ab17ca7bdceee66ef5f"><code>e29a5e6</code></a> Release 1.6.3</li>
+    # <li><a href="https://github.com/smol-rs/blocking/commit/6f41360437fa49b2879d0b795d0a0c10251bf7f1"><code>6f41360</code></a> Support setting the number of threads without an env var (<a href="https://redirect.github.com/smol-rs/blocking/issues/75">#75</a>)</li>
+    # <li><a href="https://github.com/smol-rs/blocking/commit/60d526b9fcad3878d3897614eb7076f7493f2ca3"><code>60d526b</code></a> m: Avoid Option&lt;&gt; indirection via VecDeque</li>
+    # <li><a href="https://github.com/smol-rs/blocking/commit/53dbc2e99c298c8a8e2b847f33eef1bbe0fa3ff7"><code>53dbc2e</code></a> Update Readme (<a href="https://redirect.github.com/smol-rs/blocking/issues/73">#73</a>)</li>
+    # <li>See full diff in <a href="https://github.com/smol-rs/blocking/compare/v1.6.2...v1.7.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+-https://github.com/servo/servo/pull/47590	(@dependabot[bot], @dependabot[bot], #47590)	build: bump font-types from 0.12.3 to 0.12.4 (#47590)
+    ^ commit 9349b8262b464ec87cfc37c8feb64396596b0477
+    # Bumps [font-types](https://github.com/googlefonts/fontations) from 0.12.3 to 0.12.4.
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/f886c9069b08eaddcb1caced3a44b0d8291a159a"><code>f886c90</code></a> Release types 0.12.4, read 0.43.2, skrifa 0.46.2 (<a href="https://redirect.github.com/googlefonts/fontations/issues/2067">#2067</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/fa2749cd6249730265041b08325bedfedae36cc7"><code>fa2749c</code></a> [font-types] derive bytemuck::NoUninit for glyph ids (<a href="https://redirect.github.com/googlefonts/fontations/issues/2066">#2066</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/22679c058a8e09fd0a48c29b187f5e4029d58d10"><code>22679c0</code></a> Release read-fonts 0.43.1, skrifa 0.46.1 (<a href="https://redirect.github.com/googlefonts/fontations/issues/2064">#2064</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/f74e224db882c9c495e87bd927a9b33f104deee9"><code>f74e224</code></a> Add lifetime-free parts capture for morx subtables (<a href="https://redirect.github.com/googlefonts/fontations/issues/2063">#2063</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/b1c38b999814e3d7d59fa8786bfea46d4f3c4ecb"><code>b1c38b9</code></a> Convert legacy state offsets without a hardware divide (<a href="https://redirect.github.com/googlefonts/fontations/issues/2062">#2062</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/4db936cca7e995719e1f579b34d099b4fca9cce4"><code>4db936c</code></a> Inline hot AAT lookup and state table accessors (<a href="https://redirect.github.com/googlefonts/fontations/issues/2061">#2061</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/5ac65ae19e626e60a68abddb2d638e0d2e33c3da"><code>5ac65ae</code></a> [read-fonts] add Cmap14::iter_with_limits (<a href="https://redirect.github.com/googlefonts/fontations/issues/2056">#2056</a>)</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/ed8294ec750b6a7e047cb674139b39aeaf4c8903"><code>ed8294e</code></a> Merge pull request <a href="https://redirect.github.com/googlefonts/fontations/issues/2057">#2057</a> from googlefonts/bug_fix</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/36f2bd95a164a525da1a24e74f0dc900b714f7b1"><code>36f2bd9</code></a> [skera] simplify code</li>
+    # <li><a href="https://github.com/googlefonts/fontations/commit/8f0786275dd84d6b006327d01d1f6071bf5c3247"><code>8f07862</code></a> [skrifa] raise COLRv1 paint node budget for complex flags (<a href="https://redirect.github.com/googlefonts/fontations/issues/2059">#2059</a>)</li>
+    # <li>Additional commits viewable in <a href="https://github.com/googlefonts/fontations/compare/font-types-v0.12.3...font-types-v0.12.4">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+https://github.com/servo/servo/pull/47598	(@kkoyung, #47598)	deps: Bump argon2 to 0.6 (#47598)
+    ^ commit af4b1f4f875aca47c5db2f5168b2ec9ed3d2d02c
+    # Bump argon2 from 0.6.0-rc.8 to 0.6.0.
+    # 
+    # Testing: No code change.
+    # Part-of: #45823
+https://github.com/servo/servo/pull/47596	(@mukilan, #47596)	config: Disable SpiderMonkey's compacting GC by default. (#47596)
+    ^ commit 8067519db8c52e6eaabf6a17536e32a634742a53
+    ^ /!\ may contain changes to feature flags
+    # Based on the issue discovered in #47577, it seem like a compacting GC will break Servo's layout system.
+    # 
+    # This patch sets the default value of preference that controls if compacting GC is enabled in SM to 'false', as it seems misleading to have it enabled by default when it can't work.
+    # 
+    # Testing: There are no tests as this shouldn't change existing behaviour - SM doesn't shrink the heap unless we explicitly call the GC API with the relevant option. We don't do that in servo/mozjs, as noted in #47577 .
+    # 
+https://github.com/servo/servo/pull/47592	(@atouchet, #47592)	Update chacha20 to 0.10.2 (#47592)
+    ^ commit 0e3f912e45dda5a355f14b7f3419b6a78cf3214c
+    # Update chacha20 to 0.10.2 to unblock CI.
+    # 
+    # Testing: No tests for dependency update.
+    # 
+    # Fixes: #47583
+    # 
+https://github.com/servo/servo/pull/47574	(@xbwwj, #47574)	paint: Remove interior mutability from `PipelineDetails` (#47574)
+    ^ commit 9a80a353a823aecfe81404ecd7e5160c5ef81874
+    # Remove Cells and RefCells in `PipelineDetails`.
+    # 
+    # Testing: `tests/wpt/tests/paint-timing`. The test passed but is flaky both before and after this PR.
+    # Fixes: #47550 
+    # 
+    # 
++https://github.com/servo/servo/pull/47581	(@mrobinson, #47581)	script: Do not cache the active range during editing (#47581)
+    wip dom; more conformant document.execCommand()
+    ^ commit 54d471bcf8aa91528131c1fc64f3cd6a06d48f33
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # `Selection`'s have an attached live range. The specification (and other
+    # browsers) suggests that modifications to the `Selection` should
+    # disconnect any existing live ranges from it. The editing code was
+    # previously assuming that this didn't happen, which is a just a
+    # side-effect of how `Selection` is implemented in Servo and will change
+    # in the near future.
+    # 
+    # In addition, this avoids clearing command overrides event when the
+    # actual boundary points of a the `Selection` do not change.
+    # 
+    # Testing: This changes causes a decent number of editing subtests to
+    # start passing and a single subtest to start failing.
+    # 
+https://github.com/servo/servo/pull/47461	(@eachra-bawn, #47461)	script: Supply equivalant `keyCode` values as in Chrome/FF (#47461)
+    ^ commit cb9b0804bda615fdd7a679325dfc73b4604889f6
+    # Previously, Servo only implemented the [fixed virtual keycodes](https://w3c.github.io/uievents/#fixed-virtual-key-codes) and [optionally fixed virtual keycodes](https://w3c.github.io/uievents/#optionally-fixed-virtual-key-codes). This meant that any other key that was not covered by either of these two, including function keys and numpad keys, returned a '0' for the `keyCode` value.
+    # 
+    # This change manually implements these missing `keyCode`s by following Chrome/FF's behavior and [MDN docs](https://developer.mozilla.org/en-US/docs/W.eb/API/KeyboardEvent/keyCode#constants_for_keycode_value).
+    # 
+    # Testing: This changes behavior interpreting the output of `winit` events. It's difficult to write tests for this as `winit` is responsible for creating those events.
+    # Fixes: Fixes #46935 except for the context menu key, which I am unable to test properly on macOS.
+    # 
++https://github.com/servo/servo/pull/47604	(@mrobinson, #47604)	script: Use `Selection` and `Range` JavaScript API in editing code (#47604)
+    wip dom; more conformant document.execCommand()
+    ^ commit 64336dec81ccca2d119cb0ee13f29dc24952ff62
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Instead of using internal setters for `Selection` and `Range`, which do
+    # not adhere to the specification, use the JavaScript API methods. This
+    # prevents `Selection`s and `Range`s from going into invalid states.
+    # 
+    # Testing: This gets a good number of editing subtests passing.
+    # Three start failing, but I believe they were falsely passing
+    # before.
+    # 
+https://github.com/servo/servo/pull/47509	(@Narfinger, #47509)	script/net: Use Bytes/BytesMut instead of Vec<u8> to avoid copying (#47509)
+    ^ commit d72fe5a3bd74a49c72b2557e3bd9810b29361517
+    # This switches our usage of Vec<u8> to bytes::Bytes (which we already use partially in the net code).
+    # The main change is that ProcessResponseChunk now gives a Bytes instead of Vec<u8>.
+    # 
+    # - This reduces at least one copy for every chunk in http_loader.
+    # - We probably also save a copy from process_response_chunk (as the FetchResponseMsg was already a bytes::Bytes.
+    # - We use generic in some part of servoparser (impl AsRef<[u8]>).
+    # - We remove DebugVec.
+    # - Some implementations of "process_response_chunk" now use "extend_from_slice" which should for u8 be the same as the previous append.
+    # - We use a new feature flag for bytes to allow serialization/deserialization.
+    # - Because BytesMut has trouble freeing its space, we only use it in short lived structs.
+    # 
+    # Testing: This should just be a refactor as bytes dereferences to [u8]. WPT test should cover anything that is missed.
+    # 
+https://github.com/servo/servo/pull/47555	(@veyndan, #47555)	android: Move handling of `ServoView` suspension to library (#47555)
+    ^ commit 215f907ad205c0f4eac5d2997bc38fd3f2119477
+    # Previously, if implementing a custom Servo chrome using the Servo library, one would need to remember to implement pausing and resuming the web view when the surrounding Activity pauses and resumes. Instead, we can just move that logic to the library so library consumers don't need to worry about it.
+    # 
+    # Testing: There are no automated tests for Android.
+    # Part of: https://github.com/servo/servo/issues/33742
+    # 
+https://github.com/servo/servo/pull/47612	(@jdm, #47612)	gstreamer: Filter factories by any matching caps. (#47612)
+    ^ commit 3ce8a7203978bdd722e3d65b49e3175b08639d15
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Ensuring that all caps match is too strict and means that mp4 is never reported as playable. Webkit has similar checks that look for intersection: https://searchfox.org/wubkat/rev/4bf9d2cf94e5a07bdcb977203ddc27f3752ecaf7/Source/WebCore/platform/graphics/gstreamer/GStreamerRegistryScanner.cpp#322
+    # 
+    # Testing: Many new passing tests.
+https://github.com/servo/servo/pull/47531	(@jdm, #47531)	script: Automatically classify memory usage for webidl interfaces. (#47531)
+    ^ commit 6aa8bf85eaed1f09123e681088bf2d0f6b74b5e0
+    # Building on top of #46931, this adds a new `out-of-tree` entry to the DOM memory report which automatically groups all memory for each previously-unmeasured WebIDL interface that is encountered when measuring the objects in the GC graph. Any object measured when traversing the tree is excluded from this, so we won't count any objects twice even if we add new grouping categories.
+    # 
+    # Testing: No automated tests for about:memory at this time.
++https://github.com/servo/servo/pull/47576	(@mrobinson, #47576)	script: Run "abort_a_document_and_its_descendants" during navigation (#47576)
+    web; more reliable navigation
+    ^ commit bc6153bb1bbec83dd2f38e46dad75230afe3a877
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # The specification says to run this run "abort a document and its
+    # descendants given navigable's active document" during navigation. This
+    # prevents loads that happen quickly from causing flakes.
+    # 
+    # This requires implementing more of the specification around fetch
+    # records and integrating the `FetchCanceller` concept into it. This has
+    # the effect of letting `DocumentLoader` take care of blocking loads and
+    # the `FetchGroup` take care of fetch records and cancellation, a much
+    # better alignment with the specification.
+    # 
+    # One issue addressed by this change (by necessity) is that before any
+    # canceller remaining in the `DocumentLoader` made the `Document` be
+    # considered unsalvageable. Now we follow the specification more closely
+    # and only fetch records that are not already marked done and are not for
+    # keep-alive requests move the `Document` to an unsalvageable state.
+    # 
+    # Testing: This change causes one subtest to start passing and a variety of other
+    # to hit PRECONDITION_FAILED. The previous passing result for those tests was a
+    # false positive, so this is a progression that matches Firefox's behavior. We
+    # also are lacking the special code to ensure that unsalvageable pages can live
+    # in the BFCache.
+    # 
+https://github.com/servo/servo/pull/47220	(@gterzian, #47220)	serviceworker: start implementing cache interface with in-mem only backend (#47220)
+    ^ commit 1462d866b8c47f2904389e59e38be74b125d94a3
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Implement the the basics of a service worker in-mem only cache with the ability to open and delete caches and read their keys (which are always empty for now).
+    # 
+    # Testing: SW suite is not turned on, but locally I can confirm that the "Cache.keys() called on an empty cache" passes. I have also ran and updated expectations for the entire cache-storage sub suite. 
+    # Fixes: N/A
+    # 
+    # Part of: https://github.com/servo/servo/issues/36538
+    # 
+https://github.com/servo/servo/pull/47622	(@yezhizhen, #47622)	script: Avoid manual lowercasing in `XMLHttpRequest::GetResponseHeader` (#47622)
+    ^ commit 648f9f31a20a9ceb66cac846848357a3904a0c79
+    # This is done manually in [from_str](https://docs.rs/http/latest/http/header/struct.HeaderName.html#method.from_str).
+    # What's more, we are allocating a new string here.
+    # 
+    # > All custom header names are lower cased upon conversion to a HeaderName value. This avoids the overhead of dynamically doing lower case conversion during the hash code computation and the comparison operation.
+    # 
+    # Testing: No behaviour change. Covered by existing tests.
+-https://github.com/servo/servo/pull/47624	(@TimvdLippe, #47624)	clippy: Enable linter configuration for most crates (#47624)
+    ^ commit 167b52d3d4b46be6386aa4e1b0178a067faeb9f6
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # The first commit enables the lint configuration to inherit from the workspace in most crates. The second commit fixes the violations.
+    # 
+    # Not all crates are covered yet, since some have custom lints configuration that I need to figure out how to work with (currently Cargo doesn't allow overriding with inheritance).
+    # 
+    # Part of #47512
+    # 
+    # Testing: it compiles
+https://github.com/servo/servo/pull/47610	(@TimvdLippe, #47610)	tidy: Add check that lints are configured in Cargo.toml files (#47610)
+    ^ commit cb42ac01c8afcf84d918ee138bcf3f35d9e3209d
+    # This adds a tidy check that detects whether lints are correctly inherited in `Cargo.toml` files. This check will eventually be turned on once all `Cargo.toml` inside of `components/` are ported. For now, it only runs for the actual tests, which are also added for this Tidy check.
+    # 
+    # Part of #47512
+    # 
+    # Testing: `./mach test-scripts` succeeds
+https://github.com/servo/servo/pull/47626	(@vaibhav8a, #47626)	docs: fix typo implmentation -> implementation (#47626)
+    ^ commit 7dc7c82d6c7ff8b3f7b3bfe77974c7e6d3357cbd
+    # Corrects the misspelling `implmentation` -> `implementation` in `components/webdriver_server/lib.rs`.
+    # 
+    # Documentation only, no behaviour change.
+https://github.com/servo/servo/pull/47489	(@sagudev, @Gae24, #47489)	Update mozjs to include SpiderMonkey to 153_0esr_RELEASE (#47489)
+    ^ commit a7b65192d48bd89a16caa63ba82df37c0457f6ad
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ may contain changes to feature flags
+    # Companion PR to https://github.com/servo/mozjs/pull/803
+    # 
+    # So this has been in the baking for a month at https://github.com/servo/mozjs/issues/687.
+    # 
+    # As in mozjs we need to update clang, NDK.
+    # 
+    # The most interesting changes are microtask as jobqueue now lives in SM which greatly simplifies our logic, but running the queue is somehow harder. There is no need for enqueue promise job hook and we now have special hook to define incubemnt global of task (we do things more correctly now which brings two more passes).
+    # 
+    # The second big change is moduleloading which is now mainly implemented in SM. Moduleloading commit was mainly written by @Gae24.
+    # 
+    # Reviewable per commit.
+    # 
+    # Testing: Covered by WPT.
+    # 
+https://github.com/servo/servo/pull/47625	(@TimvdLippe, #47625)	clippy: Enable linter configuration for all media and shared crates (#47625)
+    ^ commit af6fb8a40b164d5d88a20684180e0e8ce2df098f
+    # Part of #47512
+    # 
+    # Testing: it compiles with Clippy
+https://github.com/servo/servo/pull/47564	(@simonwuelker, #47564)	script: Return list of matching fonts from `FontFaceSet.load` (#47564)
+    ^ commit a8d5fdaa915d3ac2ad7800ea3d46bad5b343a198
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # `FontFaceSet.load` receives a CSS `font` shorthand and is supposed to query matching faces in the set, wait for all of them to load and then return a list of the corresponding `FontFace` objects. Currently we instead wait for `document.fonts.ready` and return an empty list. This change begins implementing the font query. Font matching is done in a naive manner for now, we simply return all fonts with a matching `font-family`. Its unclear to me how proper matching should be done, as this needs to happen before the font data is available. Still, this is progress.
+    # 
+    # Testing: New tests start to pass
+    # Part of https://github.com/servo/servo/issues/21565
+>>> 2026-08-30T23:10:31Z
+https://github.com/servo/servo/pull/46870	(@amittenak47, @jdm, #46870)	script: Invoke decodeAudioData error callback for detached buffers (#46870)
+    ^ commit ba2b2be241fa795fa511ea4be8ce6e8a35f8aaeb
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # Previously, the detached ArrayBuffer branch only rejected the promise and the `decodeErrorCallback` was never invoked.
+    # 
+    # Now, we detect if the ArrayBuffer is detached with `IsDetachedArrayBufferObject`, and synchronously reject the promise with `DataCloneError` before enqueuing a media element task to invoke the callback. We use a uuid clone to insert the callback in `decode_resolvers` and use the uuid in the task to find the callback. Because `decode_error_callback` is Rc and not Send, which Task expects, it cannot be moved into the queued closure (so we store the callback in the map and enqueue the Task).
+    # 
+    # Added Step 1 from the spec to reject with `InvalidStateError` when the document is not fully active.
+    # 
+    # Updated the `decodeAudioData` success callback and error callback to be optional nullable to match the Web Audio IDL, so we can pass null for an unused callback.
+    # 
+    # Testing:
+    # 
+    # - WebIDL and code changes compiles in release build: `.\mach build -r`
+    # 
+    # - Call `decodeAudioData` after detaching `AudioContext` iframe: `.\mach test-wpt -r tests/wpt/tests/webaudio/the-audio-api/the-audiocontext-interface/audiocontext-detached-execution-context.html`
+    # - Call `decodeAudioData` after detaching `OfflineAudioContext` iframe: `.\mach test-wpt -r tests/wpt/tests/webaudio/the-audio-api/the-offlineaudiocontext-interface/offlineaudiocontext-detached-execution-context.html`
+    # 
+    # - Call `decodeAudioData`on a closed context: `.\mach test-wpt -r tests/wpt/tests/webaudio/the-audio-api/the-audiocontext-interface/audiocontext-suspend-resume-close.html`
+    # 
+    # - Manually detach buffer with null success callback:
+    # 
+    # Using console in FireFox Dev Tools:
+    # `.\mach run -r --devtools=6080`
+    # 
+    # ```js
+    #   var ctx = new AudioContext();
+    #   var ab = new ArrayBuffer(4);
+    #   structuredClone({}, { transfer: [ab] });
+    #   var called = false;
+    #   ctx.decodeAudioData(ab, null, function () { called = true; })
+    #     .catch(function (e) { console.log("reject", e.name, e.message); });
+    #   setTimeout(function () { console.log("callback called?", called); }, 500);
+    # ```
+    # 
+    # Fixes #46602.
+-https://github.com/servo/servo/pull/47636	(@veyndan, #47636)	android: Inline `enableLogs` as always true (#47636)
+    ^ commit dabc93d1226ff282115a0ff94068e0440ccb239c
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # Testing: There are no automated tests for Android.
+-https://github.com/servo/servo/pull/47639	(@servo-wpt-sync, #47639)	Sync WPT with upstream (30-08-2026) (#47639)
+    ^ commit f9b43a6f0b9f70b42e2b5dfdaa8b829dd996f51b
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # Automated downstream sync of changes from upstream as of 30-08-2026
+    # [no-wpt-sync]
+https://github.com/servo/servo/pull/47634	(@veyndan, #47634)	android: Remove needless tint from drawables (#47634)
+    ^ commit ef52646d73d83bd1ede5b847461ac79be1b714d1
+    # These tints don't seemingly do anything, as setting them to a value like red (`#ff0000`) doesn't change the colour of the drawables at all.
+    # 
+    # The motivation for removing these is that it's part of the legacy (non-Compose UI) layout system. This only currently works because the codebase depends on AndroidX Preferences (to also be replaced) which transitively pulls in parts of the legacy layout still.
+    # 
+    # Testing: There are no automated tests for Android.
+https://github.com/servo/servo/pull/47600	(@yezhizhen, #47600)	net: Allow * in Access-Control-Allow-Headers to cover authorization (#47600)
+    ^ commit 3ed5883cf2fad8f1cd43af4b69d323e8a744e3da
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # [Zulip chat](https://servo.zulipchat.com/#narrow/channel/263398-general/topic/.22authorization.22.20should.20not.20be.20covered.20by.20the.20wildcard.20symbol/with/619720785).
+    # 
+    # According to MDN/Spec/WPT tests, this should not be allowed. 
+    # However, all browsers allow it, and fail these WPT tests.
+    # This is discovered when visiting some websites but failed with "CORS Authorization check".
+    # 
+    # Testing: Updated WPT. All other browsers fail these specific tests.
+    # [Test1](https://wpt.fyi/results/fetch/api/cors/cors-preflight.any.html?q=%2Ffetch%2Fapi%2Fcors%2Fcors-preflight.any.html&run_id=5120815879421952&run_id=6266127830482944&run_id=4925178911129600&run_id=6310660769316864)
+    # [Test2](https://wpt.fyi/results/fetch/api/cors/cors-preflight-star.any.html?q=%2Ffetch%2Fapi%2Fcors%2Fcors-preflight-star.any.html&run_id=5120815879421952&run_id=6266127830482944&run_id=4925178911129600&run_id=6310660769316864)
+    # [Test3](https://wpt.fyi/results/fetch/api/cors/cors-preflight-cache.any.html?q=%2Ffetch%2Fapi%2Fcors%2Fcors-preflight-cache.any.html&run_id=5120815879421952&run_id=6266127830482944&run_id=4925178911129600&run_id=6310660769316864)
+    # 
+    # ---
+    # 
+    # Spec issue: https://github.com/whatwg/fetch/issues/1919
+https://github.com/servo/servo/pull/47641	(@jdm, #47641)	gstreamer: Use more lenient MIME type parser for canPlayType. (#47641)
+    ^ commit eabc6c50882ab1105b8a07de09ef2a4dc273fbfe
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # The tests that now pass were using a MIME type like "audio/mp4;codecs", for which the mime crate returns an error because it expects a = following each MIME type parameter name. The data-url crate's MIME type parser handles this the same way as other browsers; there's a parameter named `codecs` with an empty value.
+    # 
+    # Testing: New passing tests.
+https://github.com/servo/servo/pull/47627	(@mrobinson, #47627)	script_bindings: Put unsafe code in `proxyhandler.rs` into `unsafe` blocks (#47627)
+    ^ commit 896010a33eb4a92bc98af190d025cf118253df0e
+    # This incremental work on making all of Servo pass this compiler lint.
+    # 
+    # Testing: Compilation is enough to test this change.
+    # Fixes: This is part of #35955.
+    # 
+https://github.com/servo/servo/pull/47644	(@veyndan, #47644)	android: Move `servo[Args][Log]` to constructor (#47644)
+    ^ commit 5eeb7bff6fef43bc8ecf45e5096a993ffc248a2b
+    # `setServoArgs` currently gives the false impression that it can be invoked after the surface has been created and update the engine with it's arguments. This isn't the case though, since calling `setServoArgs` is a no-op after the surface has been created.
+    # 
+    # It's not possible yet to move `experimentalMode` to the constructor yet, since the argument is calculated assuming an instance of `ServoView` is present, getting us into the chicken and the egg problem.
+    # 
+    # The method has been renamed to `setExperimentalModeInit` for now to make clear that this is only useful to set during the initialisation phase of the surface. Moving `experimentalMode` to the constructor will be addressed in a follow-up PR though, so this clarity is in the type system instead of a function name.
+    # 
+    # Testing: There are no automated tests for Android.
+    # 
++https://github.com/servo/servo/pull/47492	(@kevlu93, #47492)	media-audio: Implement PeriodicWave interface and handle custom waveforms for OscillatorNode (#47492)
+    dom; createPeriodicWave() on BaseAudioContext, and setPeriodicWave() on OscillatorNode
+    ^ commit acbfcae6ed00792747cae680328138e9b5b2e220
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    ^ /!\ contains WebIDL changes! did we ship a new API?
+    # This pull request implements the PeriodicWave interface of the Web Audio API. It also implements the `createPeriodicWave` method of `BaseAudioContext` as well as the `setPeriodicWave` method of `OscillatorNode`. Additionally, it calculates the basic waveforms through generating the periodic wave, which fixes some errors from the previous oscillator node implementation:
+    # 1. Implements anti-aliasing, which was not handled before
+    # 2. Handles detuning, which appeard to be ignored
+    # 3. Handles the case where the phase moves in negative direction
+    # 
+    # The bulk of this pull request is spent on implementing wavetable synthesis in order to generate the custom waveforms. I reviewed the design used by Blink for their PeriodicWave implementation and based my implementation on theirs. On a high level:
+    # 
+    # ## Wavetable Implementation
+    # A wavetable consists of a vector of waves. You can think of each vector as representing a range of frequencies (1/3 of an octave). The vector representing the lowest frequencies can keep the most partials (Fourier coefficients), while the vectors for the highest frequencies have the least. This is because for the highest frequencies, the higher order partials will exceed the Nyquist frequency. Each wave is calculated by the inverse FFT of the real and imag coefficients, truncated to how many partials we want to keep based on the frequency. 
+    # 
+    # So given a frequency, we look up the two vectors in the wavetable that represent the bounds of this frequency. For each vector, we convert the phase from [0, 2pi) radians to a position [0, N), where N is the size of the periodic wave, and calculate the linear interpolation of the two Fourier coefficients surrounding this index. We then calculate the linear interpolation between the results from the two vectors.
+    # 
+    # Testing: I enabled all the wpt tests for `the-oscillator-node-interface` and `the-periodicwave-interface`
+    # Fixes: #22364 #23282 
+    # 
+https://github.com/servo/servo/pull/47652	(@veyndan, #47652)	android: Merge `setExperimentalMode` methods (#47652)
+    ^ commit b095c0feaeacf3139568041dde2d12211165f65a
+    # Currently, calling `setExperimentalModeInit` only works if `ServoView` **has not** initialised `Servo` yet, and calling `setExperimentalMode` only works if `ServoView` **has** already initialised `Servo`.  Calling these functions outside their allowed lifecycles just produces no-ops.
+    # 
+    # As a library consumer, this requires knowledge of the  `ServoView` class internals, and can be confusing when no-ops occur. The need for this knowledge can be removed by just having a single `setExperimentalMode` that internally knows how to set the experimental mode given whichever state the class is in.
+    # 
+    # Since `MainActivity#onCreate` has always been erroneously calling both `setExperimentalModeInit` _and_ `setExperimentalMode` (via `updateSettingsIfNecessary(true)`, the deletion of the `setExperimentalModeInit` invocation is enough for this to work.
+    # 
+    # Testing: There are no automated tests for Android.
+    # 
+https://github.com/servo/servo/pull/47650	(@Gae24, #47650)	script: Introduce unrooted variant of `GPUCanvasConfiguration` (#47650)
+    ^ commit 6cef732e281fc13bfc06a0d06b16222421d88ab8
+    # 
+    # Testing: It compiles
+    # Part of #39139 
+    # 
+-https://github.com/servo/servo/pull/47654	(@veyndan, #47654)	android: Deduplicate experimental mode enablement (#47654)
+    ^ commit 1e7f05d735ebe2fab9ccb56883001d8080614c2f
+    ^ /!\ contains servoshell changes! does it affect the user experience?
+    # Testing: There are no automated tests for Android.
+>>> 2026-08-31T23:23:39Z
+-https://github.com/servo/servo/pull/47658	(@dependabot[bot], @dependabot[bot], #47658)	build: bump the futures-rs-related group with 9 updates (#47658)
+    ^ commit 1f5015e31d4a65b9bbe770bd9192e63063a4afb0
+    # Bumps the futures-rs-related group with 9 updates:
+    # 
+    # | Package | From | To |
+    # | --- | --- | --- |
+    # | [futures](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
+    # | [futures-core](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
+    # | [futures-util](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
+    # | [futures-channel](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
+    # | [futures-executor](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
+    # | [futures-io](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
+    # | [futures-macro](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
+    # | [futures-sink](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
+    # | [futures-task](https://github.com/rust-lang/futures-rs) | `0.3.33` | `0.3.34` |
+    # 
+    # Updates `futures` from 0.3.33 to 0.3.34
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/releases">futures's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>0.3.34</h2>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md">futures's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.3.34 - 2026-08-11</h1>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/705e6b5c0f06535b1aac1cb1989a172b3d45be8c"><code>705e6b5</code></a> Release 0.3.34</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/616dac7bf944ff9876b7f8b77b37c6224cbbb506"><code>616dac7</code></a> compat: Inline RawWaker clone function</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/41763693ee6400e2a7931530790af6e1746eb1c6"><code>4176369</code></a> Inline remaining RawWaker clone functions</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f17a8957d9a25a2dd3c95b43f1c6caa108df6bcc"><code>f17a895</code></a> Fix cloned FuturesUnordered waker identity</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/51d62ada9bb8eab06339475e0f1b19cfa41fb2d7"><code>51d62ad</code></a> macro: bump <code>syn</code> to v3 (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/9e26177cf01155d57917ee943246d0c97843deed"><code>9e26177</code></a> ci: Reduce timeout-minutes</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/b2d098331763fca9b0665f80bb31a66e3112a2cf"><code>b2d0983</code></a> tsan: Enable Adaptive Delay</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f733d0ea9fed49263203ae0a7cb6beb5fe1a04c4"><code>f733d0e</code></a> Miri: Ignore compat tests</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/e5def2f60c7eb1e8e6b76da540e148cc7638b115"><code>e5def2f</code></a> Rename default branch to main</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/futures-rs/compare/0.3.33...0.3.34">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `futures-core` from 0.3.33 to 0.3.34
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/releases">futures-core's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>0.3.34</h2>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md">futures-core's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.3.34 - 2026-08-11</h1>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/705e6b5c0f06535b1aac1cb1989a172b3d45be8c"><code>705e6b5</code></a> Release 0.3.34</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/616dac7bf944ff9876b7f8b77b37c6224cbbb506"><code>616dac7</code></a> compat: Inline RawWaker clone function</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/41763693ee6400e2a7931530790af6e1746eb1c6"><code>4176369</code></a> Inline remaining RawWaker clone functions</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f17a8957d9a25a2dd3c95b43f1c6caa108df6bcc"><code>f17a895</code></a> Fix cloned FuturesUnordered waker identity</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/51d62ada9bb8eab06339475e0f1b19cfa41fb2d7"><code>51d62ad</code></a> macro: bump <code>syn</code> to v3 (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/9e26177cf01155d57917ee943246d0c97843deed"><code>9e26177</code></a> ci: Reduce timeout-minutes</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/b2d098331763fca9b0665f80bb31a66e3112a2cf"><code>b2d0983</code></a> tsan: Enable Adaptive Delay</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f733d0ea9fed49263203ae0a7cb6beb5fe1a04c4"><code>f733d0e</code></a> Miri: Ignore compat tests</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/e5def2f60c7eb1e8e6b76da540e148cc7638b115"><code>e5def2f</code></a> Rename default branch to main</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/futures-rs/compare/0.3.33...0.3.34">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `futures-util` from 0.3.33 to 0.3.34
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/releases">futures-util's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>0.3.34</h2>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md">futures-util's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.3.34 - 2026-08-11</h1>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/705e6b5c0f06535b1aac1cb1989a172b3d45be8c"><code>705e6b5</code></a> Release 0.3.34</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/616dac7bf944ff9876b7f8b77b37c6224cbbb506"><code>616dac7</code></a> compat: Inline RawWaker clone function</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/41763693ee6400e2a7931530790af6e1746eb1c6"><code>4176369</code></a> Inline remaining RawWaker clone functions</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f17a8957d9a25a2dd3c95b43f1c6caa108df6bcc"><code>f17a895</code></a> Fix cloned FuturesUnordered waker identity</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/51d62ada9bb8eab06339475e0f1b19cfa41fb2d7"><code>51d62ad</code></a> macro: bump <code>syn</code> to v3 (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/9e26177cf01155d57917ee943246d0c97843deed"><code>9e26177</code></a> ci: Reduce timeout-minutes</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/b2d098331763fca9b0665f80bb31a66e3112a2cf"><code>b2d0983</code></a> tsan: Enable Adaptive Delay</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f733d0ea9fed49263203ae0a7cb6beb5fe1a04c4"><code>f733d0e</code></a> Miri: Ignore compat tests</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/e5def2f60c7eb1e8e6b76da540e148cc7638b115"><code>e5def2f</code></a> Rename default branch to main</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/futures-rs/compare/0.3.33...0.3.34">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `futures-channel` from 0.3.33 to 0.3.34
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/releases">futures-channel's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>0.3.34</h2>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md">futures-channel's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.3.34 - 2026-08-11</h1>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/705e6b5c0f06535b1aac1cb1989a172b3d45be8c"><code>705e6b5</code></a> Release 0.3.34</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/616dac7bf944ff9876b7f8b77b37c6224cbbb506"><code>616dac7</code></a> compat: Inline RawWaker clone function</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/41763693ee6400e2a7931530790af6e1746eb1c6"><code>4176369</code></a> Inline remaining RawWaker clone functions</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f17a8957d9a25a2dd3c95b43f1c6caa108df6bcc"><code>f17a895</code></a> Fix cloned FuturesUnordered waker identity</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/51d62ada9bb8eab06339475e0f1b19cfa41fb2d7"><code>51d62ad</code></a> macro: bump <code>syn</code> to v3 (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/9e26177cf01155d57917ee943246d0c97843deed"><code>9e26177</code></a> ci: Reduce timeout-minutes</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/b2d098331763fca9b0665f80bb31a66e3112a2cf"><code>b2d0983</code></a> tsan: Enable Adaptive Delay</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f733d0ea9fed49263203ae0a7cb6beb5fe1a04c4"><code>f733d0e</code></a> Miri: Ignore compat tests</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/e5def2f60c7eb1e8e6b76da540e148cc7638b115"><code>e5def2f</code></a> Rename default branch to main</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/futures-rs/compare/0.3.33...0.3.34">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `futures-executor` from 0.3.33 to 0.3.34
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/releases">futures-executor's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>0.3.34</h2>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md">futures-executor's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.3.34 - 2026-08-11</h1>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/705e6b5c0f06535b1aac1cb1989a172b3d45be8c"><code>705e6b5</code></a> Release 0.3.34</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/616dac7bf944ff9876b7f8b77b37c6224cbbb506"><code>616dac7</code></a> compat: Inline RawWaker clone function</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/41763693ee6400e2a7931530790af6e1746eb1c6"><code>4176369</code></a> Inline remaining RawWaker clone functions</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f17a8957d9a25a2dd3c95b43f1c6caa108df6bcc"><code>f17a895</code></a> Fix cloned FuturesUnordered waker identity</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/51d62ada9bb8eab06339475e0f1b19cfa41fb2d7"><code>51d62ad</code></a> macro: bump <code>syn</code> to v3 (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/9e26177cf01155d57917ee943246d0c97843deed"><code>9e26177</code></a> ci: Reduce timeout-minutes</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/b2d098331763fca9b0665f80bb31a66e3112a2cf"><code>b2d0983</code></a> tsan: Enable Adaptive Delay</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f733d0ea9fed49263203ae0a7cb6beb5fe1a04c4"><code>f733d0e</code></a> Miri: Ignore compat tests</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/e5def2f60c7eb1e8e6b76da540e148cc7638b115"><code>e5def2f</code></a> Rename default branch to main</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/futures-rs/compare/0.3.33...0.3.34">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `futures-io` from 0.3.33 to 0.3.34
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/releases">futures-io's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>0.3.34</h2>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md">futures-io's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.3.34 - 2026-08-11</h1>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/705e6b5c0f06535b1aac1cb1989a172b3d45be8c"><code>705e6b5</code></a> Release 0.3.34</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/616dac7bf944ff9876b7f8b77b37c6224cbbb506"><code>616dac7</code></a> compat: Inline RawWaker clone function</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/41763693ee6400e2a7931530790af6e1746eb1c6"><code>4176369</code></a> Inline remaining RawWaker clone functions</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f17a8957d9a25a2dd3c95b43f1c6caa108df6bcc"><code>f17a895</code></a> Fix cloned FuturesUnordered waker identity</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/51d62ada9bb8eab06339475e0f1b19cfa41fb2d7"><code>51d62ad</code></a> macro: bump <code>syn</code> to v3 (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/9e26177cf01155d57917ee943246d0c97843deed"><code>9e26177</code></a> ci: Reduce timeout-minutes</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/b2d098331763fca9b0665f80bb31a66e3112a2cf"><code>b2d0983</code></a> tsan: Enable Adaptive Delay</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f733d0ea9fed49263203ae0a7cb6beb5fe1a04c4"><code>f733d0e</code></a> Miri: Ignore compat tests</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/e5def2f60c7eb1e8e6b76da540e148cc7638b115"><code>e5def2f</code></a> Rename default branch to main</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/futures-rs/compare/0.3.33...0.3.34">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `futures-macro` from 0.3.33 to 0.3.34
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/releases">futures-macro's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>0.3.34</h2>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md">futures-macro's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.3.34 - 2026-08-11</h1>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/705e6b5c0f06535b1aac1cb1989a172b3d45be8c"><code>705e6b5</code></a> Release 0.3.34</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/616dac7bf944ff9876b7f8b77b37c6224cbbb506"><code>616dac7</code></a> compat: Inline RawWaker clone function</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/41763693ee6400e2a7931530790af6e1746eb1c6"><code>4176369</code></a> Inline remaining RawWaker clone functions</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f17a8957d9a25a2dd3c95b43f1c6caa108df6bcc"><code>f17a895</code></a> Fix cloned FuturesUnordered waker identity</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/51d62ada9bb8eab06339475e0f1b19cfa41fb2d7"><code>51d62ad</code></a> macro: bump <code>syn</code> to v3 (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/9e26177cf01155d57917ee943246d0c97843deed"><code>9e26177</code></a> ci: Reduce timeout-minutes</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/b2d098331763fca9b0665f80bb31a66e3112a2cf"><code>b2d0983</code></a> tsan: Enable Adaptive Delay</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f733d0ea9fed49263203ae0a7cb6beb5fe1a04c4"><code>f733d0e</code></a> Miri: Ignore compat tests</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/e5def2f60c7eb1e8e6b76da540e148cc7638b115"><code>e5def2f</code></a> Rename default branch to main</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/futures-rs/compare/0.3.33...0.3.34">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `futures-sink` from 0.3.33 to 0.3.34
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/releases">futures-sink's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>0.3.34</h2>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md">futures-sink's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.3.34 - 2026-08-11</h1>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/705e6b5c0f06535b1aac1cb1989a172b3d45be8c"><code>705e6b5</code></a> Release 0.3.34</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/616dac7bf944ff9876b7f8b77b37c6224cbbb506"><code>616dac7</code></a> compat: Inline RawWaker clone function</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/41763693ee6400e2a7931530790af6e1746eb1c6"><code>4176369</code></a> Inline remaining RawWaker clone functions</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f17a8957d9a25a2dd3c95b43f1c6caa108df6bcc"><code>f17a895</code></a> Fix cloned FuturesUnordered waker identity</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/51d62ada9bb8eab06339475e0f1b19cfa41fb2d7"><code>51d62ad</code></a> macro: bump <code>syn</code> to v3 (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/9e26177cf01155d57917ee943246d0c97843deed"><code>9e26177</code></a> ci: Reduce timeout-minutes</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/b2d098331763fca9b0665f80bb31a66e3112a2cf"><code>b2d0983</code></a> tsan: Enable Adaptive Delay</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f733d0ea9fed49263203ae0a7cb6beb5fe1a04c4"><code>f733d0e</code></a> Miri: Ignore compat tests</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/e5def2f60c7eb1e8e6b76da540e148cc7638b115"><code>e5def2f</code></a> Rename default branch to main</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/futures-rs/compare/0.3.33...0.3.34">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `futures-task` from 0.3.33 to 0.3.34
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/releases">futures-task's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>0.3.34</h2>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Changelog</summary>
+    # <p><em>Sourced from <a href="https://github.com/rust-lang/futures-rs/blob/main/CHANGELOG.md">futures-task's changelog</a>.</em></p>
+    # <blockquote>
+    # <h1>0.3.34 - 2026-08-11</h1>
+    # <ul>
+    # <li>Preserve cloned waker identity. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3032">#3032</a>)</li>
+    # <li>Updato <code>syn</code> to 3. (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/705e6b5c0f06535b1aac1cb1989a172b3d45be8c"><code>705e6b5</code></a> Release 0.3.34</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/616dac7bf944ff9876b7f8b77b37c6224cbbb506"><code>616dac7</code></a> compat: Inline RawWaker clone function</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/41763693ee6400e2a7931530790af6e1746eb1c6"><code>4176369</code></a> Inline remaining RawWaker clone functions</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f17a8957d9a25a2dd3c95b43f1c6caa108df6bcc"><code>f17a895</code></a> Fix cloned FuturesUnordered waker identity</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/51d62ada9bb8eab06339475e0f1b19cfa41fb2d7"><code>51d62ad</code></a> macro: bump <code>syn</code> to v3 (<a href="https://redirect.github.com/rust-lang/futures-rs/issues/3028">#3028</a>)</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/9e26177cf01155d57917ee943246d0c97843deed"><code>9e26177</code></a> ci: Reduce timeout-minutes</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/b2d098331763fca9b0665f80bb31a66e3112a2cf"><code>b2d0983</code></a> tsan: Enable Adaptive Delay</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/f733d0ea9fed49263203ae0a7cb6beb5fe1a04c4"><code>f733d0e</code></a> Miri: Ignore compat tests</li>
+    # <li><a href="https://github.com/rust-lang/futures-rs/commit/e5def2f60c7eb1e8e6b76da540e148cc7638b115"><code>e5def2f</code></a> Rename default branch to main</li>
+    # <li>See full diff in <a href="https://github.com/rust-lang/futures-rs/compare/0.3.33...0.3.34">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
+    # - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
+    # - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47659	(@dependabot[bot], @dependabot[bot], #47659)	build: bump the serde-related group with 2 updates (#47659)
+    ^ commit f62228b1c02078e58acc813b3685bb22a7cb7ce4
+    # Bumps the serde-related group with 2 updates: [serde](https://github.com/serde-rs/serde) and [serde_core](https://github.com/serde-rs/serde).
+    # 
+    # Updates `serde` from 1.0.228 to 1.0.229
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/serde-rs/serde/releases">serde's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v1.0.229</h2>
+    # <ul>
+    # <li>Update to syn 3</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/serde-rs/serde/commit/7fc3b4c30c94f73a96ebd1553f2b090d928fc3a8"><code>7fc3b4c</code></a> Release 1.0.229</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/6d6e9a11101354ce769a3438a088b6b9305c1863"><code>6d6e9a1</code></a> Merge pull request <a href="https://redirect.github.com/serde-rs/serde/issues/3085">#3085</a> from dtolnay/syn3</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/6dec3b751126c8338cac0fe8085612d695e4ecf3"><code>6dec3b7</code></a> Update to syn 3</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/cfe669241065984177ff63af8b45058e6e9b499d"><code>cfe6692</code></a> Resolve mut_mut pedantic clippy lint</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/1023d077510b4aef36a41ef56fdb7798568a2654"><code>1023d07</code></a> Update actions/upload-artifact@v6 -&gt; v7</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/dd682c2c86aa7629e77c1ccd93212d3729f4c66d"><code>dd682c2</code></a> Update actions/checkout@v6 -&gt; v7</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/5f0f18b9211732f2d82f73b5a43e4f5ff3701251"><code>5f0f18b</code></a> Update ui test suite to nightly-2026-06-01</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/63a1498f0e7be991ffac5939bdd202ca16e9a23f"><code>63a1498</code></a> Regenerate stderr with trybuild normalization fixes</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/fa7da4a93567ed347ad0735c28e439fca688ef26"><code>fa7da4a</code></a> Fix unused_features warning</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/6b1a17851ea3d86a56aa116ca1cbf428f8d5f22d"><code>6b1a178</code></a> Unpin CI miri toolchain</li>
+    # <li>Additional commits viewable in <a href="https://github.com/serde-rs/serde/compare/v1.0.228...v1.0.229">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `serde_core` from 1.0.228 to 1.0.229
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/serde-rs/serde/releases">serde_core's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v1.0.229</h2>
+    # <ul>
+    # <li>Update to syn 3</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/serde-rs/serde/commit/7fc3b4c30c94f73a96ebd1553f2b090d928fc3a8"><code>7fc3b4c</code></a> Release 1.0.229</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/6d6e9a11101354ce769a3438a088b6b9305c1863"><code>6d6e9a1</code></a> Merge pull request <a href="https://redirect.github.com/serde-rs/serde/issues/3085">#3085</a> from dtolnay/syn3</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/6dec3b751126c8338cac0fe8085612d695e4ecf3"><code>6dec3b7</code></a> Update to syn 3</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/cfe669241065984177ff63af8b45058e6e9b499d"><code>cfe6692</code></a> Resolve mut_mut pedantic clippy lint</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/1023d077510b4aef36a41ef56fdb7798568a2654"><code>1023d07</code></a> Update actions/upload-artifact@v6 -&gt; v7</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/dd682c2c86aa7629e77c1ccd93212d3729f4c66d"><code>dd682c2</code></a> Update actions/checkout@v6 -&gt; v7</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/5f0f18b9211732f2d82f73b5a43e4f5ff3701251"><code>5f0f18b</code></a> Update ui test suite to nightly-2026-06-01</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/63a1498f0e7be991ffac5939bdd202ca16e9a23f"><code>63a1498</code></a> Regenerate stderr with trybuild normalization fixes</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/fa7da4a93567ed347ad0735c28e439fca688ef26"><code>fa7da4a</code></a> Fix unused_features warning</li>
+    # <li><a href="https://github.com/serde-rs/serde/commit/6b1a17851ea3d86a56aa116ca1cbf428f8d5f22d"><code>6b1a178</code></a> Unpin CI miri toolchain</li>
+    # <li>Additional commits viewable in <a href="https://github.com/serde-rs/serde/compare/v1.0.228...v1.0.229">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
+    # - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
+    # - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47656	(@veyndan, #47656)	android: Inline `updateSettingsIfNecessary` (#47656)
+    ^ commit 2614afed150226276e77dc674da3c7e3fbc5eb33
+    # Inlining the function unblocks the setting of `experimentalMode` during `ServoView` instantiation since the `updateSettingsIfNecessary` function assumed that `ServoView` was already instantiated. This was described in 5eeb7bff6fef43bc8ecf45e5096a993ffc248a2b in more detail. The actual moving of `experimentalMode` into the `ServoView` constructor will be done in a follow-up PR.
+    # 
+    # As a self-standing change though, this removes a boolean parameter which is is difficult to understand without looking at the implementation.
+    # 
+    # Testing: There are no automated tests for Android.
+https://github.com/servo/servo/pull/47664	(@RichardTjokroutomo, #47664)	fonts: handle more CJK special characters (#47664)
+    ^ commit b907327420c40bf5bade712a0d5cadced1c3981d
+    # Follow up from [#47116](https://github.com/servo/servo/pull/47116), now more CJK blocks are covered by `HarmonyOS Sans SC` & `HarmonyOS Sans TC`.
+    # 
+    # Testing: Manual testing.
+    # 
+https://github.com/servo/servo/pull/47580	(@eachra-bawn, #47580)	script: Add error messages for `webgpu` and `script_webgpu` (#47580)
+    ^ commit d5fab0cc7a5176c8b5de6998c62f38605508956f
+    # This covers all remaining `None`s in `webgpu` and `script_webgpu`.
+    # 
+    # Testing: Not necessary
+    # Fixes: Part of #40756
+    # 
+https://github.com/servo/servo/pull/47665	(@jschwe, #47665)	ci: Reduce permissions and exposure in wpt-export workflow (#47665)
+    ^ commit c0d00358569159aad74e3f4051e14a06b5c134a6
+    # Reduce the github token permissions to the minimum required (we use a secret for the actual operations).
+    # By default the token has all permissions, by specifying permissions explicitly, everything unspecified becomes `None`. Additionally also only pass the required github event to the export.py script, since it doesn't need access to other information (specifically `github.token`).
+    # 
+    # This reduces the impact of a supply-chain attack of our python dependencies to only being able to leak our wpt sync key, but not being able to do arbitrary things with the privileged github token.
+    # 
+    # Testing: Not tested, but the changes are minimal
+    # 
+    # 
+https://github.com/servo/servo/pull/47678	(@sagudev, #47678)	Update wgpu 30.0.0 -> 30.0.1 (#47678)
+    ^ commit 2c0de779037301028e162d8ee3c2b3ab3289871a
+    # Fixes: #47668
+    # 
+-https://github.com/servo/servo/pull/47660	(@dependabot[bot], @dependabot[bot], #47660)	build: bump the zbus-related group with 4 updates (#47660)
+    ^ commit 89d66ae69519c98d8b61f2309da4478f1d6706c1
+    # Bumps the zbus-related group with 4 updates: [zbus_macros](https://github.com/z-galaxy/zbus), [zvariant](https://github.com/z-galaxy/zbus), [zvariant_derive](https://github.com/z-galaxy/zbus) and [zvariant_utils](https://github.com/z-galaxy/zbus).
+    # 
+    # Updates `zbus_macros` from 5.18.0 to 5.19.0
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/z-galaxy/zbus/releases">zbus_macros's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>zbus_macros-5.19.0</h2>
+    # <h3>Dependencies</h3>
+    # <ul>
+    # <li>⬆️ Bump syn to 3.0.</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/7518d73db4dbf830ec1c9c43865bf8aeae9a8ffd"><code>7518d73</code></a> Merge pull request <a href="https://redirect.github.com/z-galaxy/zbus/issues/1894">#1894</a> from zeenix/claude/split-str-zstr-crate-j76d2p</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/c1450141ffe4b381169a61bdb76cd63cd6333bc6"><code>c145014</code></a> 💥 zu: Bump version to 4.0.0</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/d8117ca58f4621668ce86565373dd130390e18a2"><code>d8117ca</code></a> Merge pull request <a href="https://redirect.github.com/z-galaxy/zbus/issues/1893">#1893</a> from zeenix/releases</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/09be35e6d8163e6dacc7ce1f7cf1966612760e04"><code>09be35e</code></a> 🔖 zb: Release 5.19</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/2031d24a7475d6b712fa568e572f46ad3c6bff32"><code>2031d24</code></a> 🔖 zv: Release 5.14</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/c19cf0d4236e65620d04e2a53aeed9e78769bef8"><code>c19cf0d</code></a> Merge pull request <a href="https://redirect.github.com/z-galaxy/zbus/issues/1891">#1891</a> from zeenix/claude/split-str-zstr-crate-j76d2p</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/97781745d39812056153a250402ef83e001449d1"><code>9778174</code></a> ♻️ zv: Use zcheapstr for the Str type</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/f71c49d338590e5cca41e85a61809fa714d4ce5d"><code>f71c49d</code></a> ➕ zv: Add zcheapstr dependency</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/22c278f7563e34f20393386dc567dba10373db19"><code>22c278f</code></a> Merge pull request <a href="https://redirect.github.com/z-galaxy/zbus/issues/1890">#1890</a> from z-galaxy/renovate/jamesives-github-pages-deploy...</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/cb40643db75238c99a69e9fa3b5a0a48f8ce51c7"><code>cb40643</code></a> ⬆️ Update JamesIves/github-pages-deploy-action action to v4.9.0</li>
+    # <li>Additional commits viewable in <a href="https://github.com/z-galaxy/zbus/compare/zbus_macros-5.18.0...zbus_macros-5.19.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `zvariant` from 5.13.1 to 5.15.0
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/z-galaxy/zbus/releases">zvariant's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>zvariant-5.15.0</h2>
+    # <h3>CI</h3>
+    # <ul>
+    # <li>💚 Work around nightly rustfmt macro mangling.</li>
+    # </ul>
+    # <h3>Deprecated</h3>
+    # <ul>
+    # <li>🗑️ Deprecate GVariant support in zvariant.</li>
+    # </ul>
+    # <h3>Documentation</h3>
+    # <ul>
+    # <li>📝 Point GVariant users to the zgvariant crate.</li>
+    # </ul>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>🐛 Support zvariant_utils/gvariant being enabled externally. <a href="https://redirect.github.com/z-galaxy/zbus/issues/1910">#1910</a></li>
+    # </ul>
+    # <h3>Removed</h3>
+    # <ul>
+    # <li>🔥 Remove the gvariant fuzz target.</li>
+    # <li>🔥 Remove gvariant benches, ostree tests and test data.</li>
+    # </ul>
+    # <h2>zvariant_derive-5.15.0</h2>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>♻️ Move Value &amp; Dict derive codegen to zvariant_utils.</li>
+    # <li>♻️ Move Type derive &amp; signature! codegen to zvariant_utils.</li>
+    # </ul>
+    # <h2>zvariant-5.14.0</h2>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>♻️ Use zcheapstr for the Str type.</li>
+    # <li>♻️ Remove unnecessary clones.</li>
+    # </ul>
+    # <h3>Dependencies</h3>
+    # <ul>
+    # <li>➕ Add zcheapstr dependency. It's actually just a split.</li>
+    # </ul>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>🐛 insert tail padding to fixed-sized dictionary entry.</li>
+    # <li>🐛 insert tail padding to fixed-sized struct.</li>
+    # </ul>
+    # <h3>Testing</h3>
+    # <ul>
+    # <li>✅ Add test case for <code>a{uy}</code> encoding.</li>
+    # <li>✅ Add test case for <code>(uy)</code> encoding.</li>
+    # </ul>
+    # <h2>zvariant_derive-5.14.0</h2>
+    # <h3>Other</h3>
+    # <ul>
+    # <li>Update Cargo.toml dependencies.</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/0f4db6980bc1566278618a46c9ffa7f5f025c18a"><code>0f4db69</code></a> Merge pull request <a href="https://redirect.github.com/z-galaxy/zbus/issues/1911">#1911</a> from zeenix/releases</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/ce010acb9f4c1ab344fe9c6a54510a0118ad50fe"><code>ce010ac</code></a> 🔖 zv,zd,zu: New releases to deprecate GVariant API</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/683fc6a43afec95d7f95deb51d5fdcb6d1a0d43f"><code>683fc6a</code></a> ⬆️  zb,zm,zx: Bump zvariant to 5.15</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/121b399eb75dc088425134f7e59a93ed488455bf"><code>121b399</code></a> Merge pull request <a href="https://redirect.github.com/z-galaxy/zbus/issues/1905">#1905</a> from zeenix/deprecate-gvariant</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/51d213261d23f438b52e8153cc533eed722095c3"><code>51d2132</code></a> 🔖 zv,zd,zu: Bump versions</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/e7146cafdc53c8aed26b408cf1e91627d38df6dd"><code>e7146ca</code></a> 🐛 zv,zu: Support zvariant_utils/gvariant being enabled externally</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/d798734f77c4400a1c3b223a23a8423f86e2122e"><code>d798734</code></a> 📝 zv,zm: Point GVariant users to the zgvariant crate</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/4d1e6b7d894df415dd302096ef18fe75c0be3caf"><code>4d1e6b7</code></a> 🗑️ zv,zu: Deprecate GVariant support in zvariant</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/19410a8555af5d3d6b97fefd5ed008755b35b49d"><code>19410a8</code></a> 🔥 zv: Remove the gvariant fuzz target</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/bb8c3ce9c4c982e1b8be4dab604f240cbc7425d5"><code>bb8c3ce</code></a> 🔥 zv: Remove gvariant benches, ostree tests and test data</li>
+    # <li>Additional commits viewable in <a href="https://github.com/z-galaxy/zbus/compare/zvariant-5.13.1...zvariant-5.15.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `zvariant_derive` from 5.13.1 to 5.15.0
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/z-galaxy/zbus/releases">zvariant_derive's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>zvariant_derive-5.15.0</h2>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>♻️ Move Value &amp; Dict derive codegen to zvariant_utils.</li>
+    # <li>♻️ Move Type derive &amp; signature! codegen to zvariant_utils.</li>
+    # </ul>
+    # <h2>zvariant_derive-5.14.0</h2>
+    # <h3>Other</h3>
+    # <ul>
+    # <li>Update Cargo.toml dependencies.</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/0f4db6980bc1566278618a46c9ffa7f5f025c18a"><code>0f4db69</code></a> Merge pull request <a href="https://redirect.github.com/z-galaxy/zbus/issues/1911">#1911</a> from zeenix/releases</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/ce010acb9f4c1ab344fe9c6a54510a0118ad50fe"><code>ce010ac</code></a> 🔖 zv,zd,zu: New releases to deprecate GVariant API</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/683fc6a43afec95d7f95deb51d5fdcb6d1a0d43f"><code>683fc6a</code></a> ⬆️  zb,zm,zx: Bump zvariant to 5.15</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/121b399eb75dc088425134f7e59a93ed488455bf"><code>121b399</code></a> Merge pull request <a href="https://redirect.github.com/z-galaxy/zbus/issues/1905">#1905</a> from zeenix/deprecate-gvariant</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/51d213261d23f438b52e8153cc533eed722095c3"><code>51d2132</code></a> 🔖 zv,zd,zu: Bump versions</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/e7146cafdc53c8aed26b408cf1e91627d38df6dd"><code>e7146ca</code></a> 🐛 zv,zu: Support zvariant_utils/gvariant being enabled externally</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/d798734f77c4400a1c3b223a23a8423f86e2122e"><code>d798734</code></a> 📝 zv,zm: Point GVariant users to the zgvariant crate</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/4d1e6b7d894df415dd302096ef18fe75c0be3caf"><code>4d1e6b7</code></a> 🗑️ zv,zu: Deprecate GVariant support in zvariant</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/19410a8555af5d3d6b97fefd5ed008755b35b49d"><code>19410a8</code></a> 🔥 zv: Remove the gvariant fuzz target</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/bb8c3ce9c4c982e1b8be4dab604f240cbc7425d5"><code>bb8c3ce</code></a> 🔥 zv: Remove gvariant benches, ostree tests and test data</li>
+    # <li>Additional commits viewable in <a href="https://github.com/z-galaxy/zbus/compare/zvariant_derive-5.13.1...zvariant_derive-5.15.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # Updates `zvariant_utils` from 3.5.0 to 4.2.0
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/z-galaxy/zbus/releases">zvariant_utils's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>zvariant_utils-4.2.0</h2>
+    # <h3>Deprecated</h3>
+    # <ul>
+    # <li>🗑️ Deprecate GVariant support in zvariant.</li>
+    # </ul>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>🐛 Support zvariant_utils/gvariant being enabled externally. <a href="https://redirect.github.com/z-galaxy/zbus/issues/1910">#1910</a></li>
+    # </ul>
+    # <h2>zvariant_utils-4.1.0</h2>
+    # <h3>Added</h3>
+    # <ul>
+    # <li>✨ Parameterize attribute parsing by list names.</li>
+    # </ul>
+    # <h3>Changed</h3>
+    # <ul>
+    # <li>♻️ Move Value &amp; Dict derive codegen to zvariant_utils.</li>
+    # <li>♻️ Move Type derive &amp; signature! codegen to zvariant_utils.</li>
+    # </ul>
+    # <h3>Fixed</h3>
+    # <ul>
+    # <li>🥅 Propagate field-attribute errors in dict Value codegen.</li>
+    # </ul>
+    # <h2>zvariant_utils-4.0.0</h2>
+    # <h3>Breaking</h3>
+    # <ul>
+    # <li>⬆️ Update syn to v3. Syn types appear in this crate's public API, hence the major
+    # version bump.</li>
+    # </ul>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/0f4db6980bc1566278618a46c9ffa7f5f025c18a"><code>0f4db69</code></a> Merge pull request <a href="https://redirect.github.com/z-galaxy/zbus/issues/1911">#1911</a> from zeenix/releases</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/ce010acb9f4c1ab344fe9c6a54510a0118ad50fe"><code>ce010ac</code></a> 🔖 zv,zd,zu: New releases to deprecate GVariant API</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/683fc6a43afec95d7f95deb51d5fdcb6d1a0d43f"><code>683fc6a</code></a> ⬆️  zb,zm,zx: Bump zvariant to 5.15</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/121b399eb75dc088425134f7e59a93ed488455bf"><code>121b399</code></a> Merge pull request <a href="https://redirect.github.com/z-galaxy/zbus/issues/1905">#1905</a> from zeenix/deprecate-gvariant</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/51d213261d23f438b52e8153cc533eed722095c3"><code>51d2132</code></a> 🔖 zv,zd,zu: Bump versions</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/e7146cafdc53c8aed26b408cf1e91627d38df6dd"><code>e7146ca</code></a> 🐛 zv,zu: Support zvariant_utils/gvariant being enabled externally</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/d798734f77c4400a1c3b223a23a8423f86e2122e"><code>d798734</code></a> 📝 zv,zm: Point GVariant users to the zgvariant crate</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/4d1e6b7d894df415dd302096ef18fe75c0be3caf"><code>4d1e6b7</code></a> 🗑️ zv,zu: Deprecate GVariant support in zvariant</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/19410a8555af5d3d6b97fefd5ed008755b35b49d"><code>19410a8</code></a> 🔥 zv: Remove the gvariant fuzz target</li>
+    # <li><a href="https://github.com/z-galaxy/zbus/commit/bb8c3ce9c4c982e1b8be4dab604f240cbc7425d5"><code>bb8c3ce</code></a> 🔥 zv: Remove gvariant benches, ostree tests and test data</li>
+    # <li>Additional commits viewable in <a href="https://github.com/z-galaxy/zbus/compare/zvariant_utils-3.5.0...zvariant_utils-4.2.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
+    # - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
+    # - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
+    # - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
+    # 
+    # 
+    # </details>
+-https://github.com/servo/servo/pull/47663	(@dependabot[bot], @dependabot[bot], #47663)	build: bump libredox from 0.1.20 to 0.1.21 (#47663)
+    ^ commit 35ac9ffb0285ad65521a7bfe4d102b0fe1b52336
+    # Bumps libredox from 0.1.20 to 0.1.21.
+    # 
+    # 
+    # [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=libredox&package-manager=cargo&previous-version=0.1.20&new-version=0.1.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
+    # 
+    # Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
+    # 
+    # [//]: # (dependabot-automerge-start)
+    # [//]: # (dependabot-automerge-end)
+    # 
+    # ---
+    # 
+    # <details>
+    # <summary>Dependabot commands and options</summary>
+    # <br />
+    # 
+    # You can trigger Dependabot actions by commenting on this PR:
+    # - `@dependabot rebase` will rebase this PR
+    # - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
+    # - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
+    # - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
+    # - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
+    # 
+    # 
+    # </details>
+https://github.com/servo/servo/pull/47667	(@shubhamg13, #47667)	layout: Add tracing for `Mark Paint Timing` and `Compute New LCP Candidate` (#47667)
+    ^ commit 08fe62b3a22277bac5ac0621ca95796bec92498f
+    # Add tracing for `Mark Paint Timing` and `Compute New LCP Candidate
+    # 
+    # Testing: Attached Screenshot for the Trace
+    # <img width="2541" height="1308" alt="image" src="https://github.com/user-attachments/assets/02bf204b-fb42-481f-97cf-26276a468722" />
+    # 
+    # 
+    # Fixes: Part of #42000 
+    # Fixes: Part of #42623
+    # 
+https://github.com/servo/servo/pull/47670	(@jdm, #47670)	gstreamer: Prefix-match any generic supported codec against the requested codec. (#47670)
+    ^ commit 09625ede55e7ad8cafe9d23e6df9bcc89f4de54d
+    ^ /!\ contains changes to WPT expectations! it probably affects the web platform
+    # We store values like "mp4*" and perform an exact match against it, but the actual codec values are different (`mp4v.20.8`). This change matches the behaviour of WebKit's codec lookup as well: https://searchfox.org/wubkat/rev/4bf9d2cf94e5a07bdcb977203ddc27f3752ecaf7/Source/WebCore/platform/graphics/gstreamer/GStreamerRegistryScanner.cpp#844
+    # 
+    # Testing: New passing tests.
+    # Fixes: #46259
+    # 
+https://github.com/servo/servo/pull/47680	(@jschwe, #47680)	ci: Minimize try-label permissions to currently required set (#47680)
+    ^ commit 764f247d23c725c67caa57b244184b5c45ca077b
+    # We should try to get rid of `actions: write` in a follow-up, this PR focuses on encoding the currently required permissions, so everything else is dropped. The `issues: write` permission is apparently not sufficient to remove labels on PRs, despite us using the issues REST API. 
+    # 
+    # The job overview page shows that cache-writes fail (due to lack of permissions) with a warning, but that seems fine to me and I don't see a need to add more permissions for this.
+    # 
+    # Testing: Tested by merginng to main on my fork, opening a [dummy PR](https://github.com/jschwe/servo/pull/5) and adding a label which triggered [this try-label run](https://github.com/jschwe/servo/actions/runs/33360630400/job/99394311468). Removing the label and posting the PR comment worked.
+    # 
+    # 
+-https://github.com/servo/servo/pull/47662	(@dependabot[bot], @dependabot[bot], #47662)	build: bump uuid from 1.24.1 to 1.26.0 (#47662)
+    ^ commit ef288a62dd7aafd38327f6cb1b79353325f746fc
+    # Bumps [uuid](https://github.com/uuid-rs/uuid) from 1.24.1 to 1.26.0.
+    # <details>
+    # <summary>Release notes</summary>
+    # <p><em>Sourced from <a href="https://github.com/uuid-rs/uuid/releases">uuid's releases</a>.</em></p>
+    # <blockquote>
+    # <h2>v1.26.0</h2>
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>Add ContextV7::with_additional_precision_bits by <a href="https://github.com/ChrisJr404"><code>@​ChrisJr404</code></a> in <a href="https://redirect.github.com/uuid-rs/uuid/pull/904">uuid-rs/uuid#904</a></li>
+    # <li>Prepare for 1.26.0 release by <a href="https://github.com/KodrAus"><code>@​KodrAus</code></a> in <a href="https://redirect.github.com/uuid-rs/uuid/pull/905">uuid-rs/uuid#905</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/uuid-rs/uuid/compare/1.25.0...v1.26.0">https://github.com/uuid-rs/uuid/compare/1.25.0...v1.26.0</a></p>
+    # <h2>1.25.0</h2>
+    # <h2>What's Changed</h2>
+    # <ul>
+    # <li>Add a serde::bytes module that encodes a Uuid as a byte string by <a href="https://github.com/ChrisJr404"><code>@​ChrisJr404</code></a> in <a href="https://redirect.github.com/uuid-rs/uuid/pull/902">uuid-rs/uuid#902</a></li>
+    # <li>Prepare for 1.25.0 release by <a href="https://github.com/KodrAus"><code>@​KodrAus</code></a> in <a href="https://redirect.github.com/uuid-rs/uuid/pull/903">uuid-rs/uuid#903</a></li>
+    # </ul>
+    # <h2>New Contributors</h2>
+    # <ul>
+    # <li><a href="https://github.com/ChrisJr404"><code>@​ChrisJr404</code></a> made their first contribution in <a href="https://redirect.github.com/uuid-rs/uuid/pull/902">uuid-rs/uuid#902</a></li>
+    # </ul>
+    # <p><strong>Full Changelog</strong>: <a href="https://github.com/uuid-rs/uuid/compare/v1.24.1...1.25.0">https://github.com/uuid-rs/uuid/compare/v1.24.1...1.25.0</a></p>
+    # </blockquote>
+    # </details>
+    # <details>
+    # <summary>Commits</summary>
+    # <ul>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/cdc96a87bddc38d0eb8f894c764e151d2299b4b3"><code>cdc96a8</code></a> Merge pull request <a href="https://redirect.github.com/uuid-rs/uuid/issues/905">#905</a> from uuid-rs/cargo/v1.26.0</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/34e4f49c0d50c12f1b3021baf98b8fb91f6407bb"><code>34e4f49</code></a> don't test macros under miri</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/d9e7242b37755d844d19fa74559a88e1c46c5206"><code>d9e7242</code></a> update nightly used for miri</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/ec16819865b89aa3c52456c8afd0ce9a90f0fcdb"><code>ec16819</code></a> prepare for 1.26.0 release</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/162cd208a4521138f1d8ce05b63342ba7ba5c4e6"><code>162cd20</code></a> Merge pull request <a href="https://redirect.github.com/uuid-rs/uuid/issues/904">#904</a> from ChrisJr404/v7-additional-precision-bits</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/97eceffa708f87969792af604291d3e4984dfc90"><code>97eceff</code></a> Add ContextV7::with_additional_precision_bits for microsecond clocks</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/302e0bf6dc5abf949c06973a37f1f3a093cc2699"><code>302e0bf</code></a> Merge pull request <a href="https://redirect.github.com/uuid-rs/uuid/issues/903">#903</a> from uuid-rs/cargo/1.25.0</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/b7ccde885d770d013f413a2685ebe7f38932e1d0"><code>b7ccde8</code></a> prepare for 1.25.0 release</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/c62dffbc038034ff045f3009f2536362e313bf34"><code>c62dffb</code></a> Merge pull request <a href="https://redirect.github.com/uuid-rs/uuid/issues/902">#902</a> from ChrisJr404/serde-bytes-module</li>
+    # <li><a href="https://github.com/uuid-rs/uuid/commit/8c198b24b1aa55948c0fa4b3433c1954be19c8c8"><code>8c198b2</code></a> Add a serde::bytes module that encodes as a byte string</li>
+    # <li>See full diff in <a href="https://github.com/uuid-rs/uuid/compare/v1.24.1...v1.26.0">compare view</a></li>
+    # </ul>
+    # </details>
+    # <br />
+    # 
+https://github.com/servo/servo/pull/47482	(@Gae24, #47482)	script: Drop `safe` naming from mozjs APIs (#47482)
+    ^ commit 0358810805a503bddffb948a2e23f1d96068bc3f
+    # Companion PR of https://github.com/servo/mozjs/pull/802, which drops deprecated code and the legacy wrappers.
+    # Now that the `safe` variants are the only ones left, some methods have been renamed back to the original names.
+    # 
+    # Testing: It compiles
+    # 
+https://github.com/servo/servo/pull/47669	(@shubhamg13, #47669)	paint: Add tracing for various `cumulative transform` methods (#47669)
+    ^ commit 4031c921f8f93930dd76690befa9c5bde5fd3c18
+    # Add tracing for various cumulative transform methods
+    # 
+    # Testing: Attached Screenshot for Perfetto UI
+    # <img width="2569" height="1411" alt="image" src="https://github.com/user-attachments/assets/7dc7ed82-3cb1-4206-adf3-3b5e3c69ec59" />
+    # 
+-https://github.com/servo/servo/pull/47551	(@alice, #47551)	layout: Send scroll updates to the accessibility tree. (#47551)
+    ^ commit e5eca614372382d014c7badb81a50d35c588012b
+    ^ /!\ contains libservo or embedder_traits changes! does it affect our public API?
+    # Handle scroll updates from script and renderer by sending the scroll offsets to the accessibility tree, and applying them as transforms on the child nodes of the scroll container during the tree update process.
+    # 
+    # Testing: This passes the existing tests for bounds computation (with modifications to test the relevant computed properties), which don't test situations where transforms other than scrolling are applied. It also adds one extra test for the case where scrolling occurs before the accessibility tree is built. #47166 tracks the need to handle CSS transforms, but there may be other situations which are also untested and unhandled. Advice from reviewers on these cases would be very helpful. 
+    # Fixes: #47161
+https://github.com/servo/servo/pull/47685	(@leowatts, #47685)	profile_traits: Remove unused IPC bytes channel (#47685)
+    ^ commit fdbc3df427ec8fc02298cb97300c262d49fb95af
+    # Remove unused IPC bytes channel from `profile_traits`. It is dead code only used by tests.
+    # 
+    # Testing: No tests required - only removing code
+    # Fixes: #47673 
+    # 
+https://github.com/servo/servo/pull/47697	(@veyndan, #47697)	android: Require `experimentalMode` in constructor (#47697)
+    ^ commit 7baa487403e830f3f28f3c7ebc0daff4f4678079
+    # Makes it self-evident that passing `experimentalMode` during construction is part of the initialisation phase of the JNI.
+    # 
+    # `setExperimentalMode` now contains a non-null assertion, but that will be removed as `servo` becomes non-null in a future PR.
+    # 
+    # Testing: There are no automated tests for Android.