{
  "breakdown": {
    "byResolution": {
      "CONFIGURATION CHANGED": 1,
      "FIXED": 30,
      "WORKSFORME": 1
    }
  },
  "commits": {
    "220190": {
      "author": "bfulgham",
      "avatar": "https://www.gravatar.com/avatar/a3a4e875e921558eb235709385a1c9a7?d=identicon\u0026s=64",
      "cl": "220190",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=220190",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebKit2\nPriority: P2\nSeverity: Major\nAssignee: bfulgham@webkit.org\nReporter: dsaunders45459@gmail.com\nLast change: 2026-07-03T11:18:31Z",
      "email": "bfulgham@webkit.org",
      "hash": "220190",
      "subject": "NSCrossWebsiteTrackingUsageDescription is not working on Mac, ITP is always enabled"
    },
    "250207": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "250207",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=250207",
      "description": "Status: RESOLVED\nResolution: CONFIGURATION CHANGED\nComponent: Scrolling\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-03T18:49:33Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "250207",
      "subject": "Fix scrollbar thumb drag cancellation in RTL mode"
    },
    "291825": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "291825",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=291825",
      "description": "Status: RESOLVED\nResolution: WORKSFORME\nComponent: Scrolling\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-03T18:47:32Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "291825",
      "subject": "Extra `scrollbar thumb` while being scrolling with Always-on Scrollbar"
    },
    "305897": {
      "author": "csaavedra",
      "avatar": "https://www.gravatar.com/avatar/376a6edb56b8e52de407ea171c869bcf?d=identicon\u0026s=64",
      "cl": "305897",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=305897",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: csaavedra@igalia.com\nReporter: zalan@apple.com\nLast change: 2026-07-03T19:48:22Z",
      "email": "csaavedra@igalia.com",
      "hash": "305897",
      "subject": "[IFC] Crash in EllipsisBoxPainter::paint when inline content had partial layout"
    },
    "314984": {
      "author": "ysuzuki",
      "avatar": "https://www.gravatar.com/avatar/3455d9081295e3e740c1ffa901217d9b?d=identicon\u0026s=64",
      "cl": "314984",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=314984",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: JavaScriptCore\nPriority: P2\nSeverity: Normal\nAssignee: ysuzuki@apple.com\nReporter: ysuzuki@apple.com\nLast change: 2026-07-03T20:41:20Z",
      "email": "ysuzuki@apple.com",
      "hash": "314984",
      "subject": "[JSC] Make CodeBlock::updateAllNonLazyValueProfilePredictionsAndCountLiveness tight"
    },
    "315904": {
      "author": "annevk",
      "avatar": "https://www.gravatar.com/avatar/09bb44ac3625a121017cd98d0a7dc52c?d=identicon\u0026s=64",
      "cl": "315904",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=315904",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: CSS\nPriority: P2\nSeverity: Normal\nAssignee: annevk@annevk.nl\nReporter: annevk@annevk.nl\nLast change: 2026-07-03T20:32:43Z",
      "email": "annevk@annevk.nl",
      "hash": "315904",
      "subject": ":last-child and friends should not gate on parser state outside style resolution"
    },
    "316416": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "316416",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=316416",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Web Inspector\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: a_panta@apple.com\nLast change: 2026-07-03T16:46:11Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "316416",
      "subject": "Web Inspector: FrameDOMAgent inline style invalidation issues one DOM.getAttributes command per node instead of batching per tick"
    },
    "316738": {
      "author": "kiet.ho",
      "avatar": "https://www.gravatar.com/avatar/d9058b37006dce1f55f91b8ccc82f9a3?d=identicon\u0026s=64",
      "cl": "316738",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=316738",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Layout and Rendering\nPriority: P2\nSeverity: Normal\nAssignee: kiet.ho@apple.com\nReporter: kiet.ho@apple.com\nLast change: 2026-07-03T07:45:24Z",
      "email": "kiet.ho@apple.com",
      "hash": "316738",
      "subject": "Changing color-scheme of iframe does not invalidate appearance of embedded document"
    },
    "316799": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "316799",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=316799",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Web Inspector\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: a_panta@apple.com\nLast change: 2026-07-03T18:21:09Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "316799",
      "subject": "Web Inspector: add FrameDOMStorageAgent with enable/disable for cross-origin iframes"
    },
    "317652": {
      "author": "jean-yves.avenard",
      "avatar": "https://www.gravatar.com/avatar/29892bff749533b3b9dce5dfb9b119e6?d=identicon\u0026s=64",
      "cl": "317652",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=317652",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Media\nPriority: P2\nSeverity: Normal\nAssignee: jean-yves.avenard@apple.com\nReporter: jean-yves.avenard@apple.com\nLast change: 2026-07-03T07:37:15Z",
      "email": "jean-yves.avenard@apple.com",
      "hash": "317652",
      "subject": "com.apple.WebKit.WebContent at com.apple.WebCore:  WebCore::createVideoInfoFromFormatDescription"
    },
    "317876": {
      "author": "emw",
      "avatar": "https://www.gravatar.com/avatar/4086acbe078d65242df929cb51298130?d=identicon\u0026s=64",
      "cl": "317876",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=317876",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Tools / Tests\nPriority: P2\nSeverity: Normal\nAssignee: emw@apple.com\nReporter: emw@apple.com\nLast change: 2026-07-03T19:26:19Z",
      "email": "emw@apple.com",
      "hash": "317876",
      "subject": "[Build] Reenable JSC and WebCore module verifier on public SDK builds"
    },
    "318013": {
      "author": "marcosc",
      "avatar": "https://www.gravatar.com/avatar/d31c9c6a3b0af558a2945682020e5b90?d=identicon\u0026s=64",
      "cl": "318013",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318013",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebKit API\nPriority: P2\nSeverity: Normal\nAssignee: marcosc@apple.com\nReporter: marcosc@apple.com\nLast change: 2026-07-03T19:49:27Z",
      "email": "marcosc@apple.com",
      "hash": "318013",
      "subject": "Digital Credentials: aborting navigator.credentials.get() can leave the document picker stuck on screen"
    },
    "318066": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "318066",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318066",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: SVG\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-03T07:57:52Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "318066",
      "subject": "SVG SMIL number, integer-optional-integer, number-optional-number and path animations should not apply when from/to/by values fail to parse"
    },
    "318406": {
      "author": "sgill26",
      "avatar": "https://www.gravatar.com/avatar/da06ac7be04c41c1a52a4222d80024f5?d=identicon\u0026s=64",
      "cl": "318406",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318406",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Layout and Rendering\nPriority: P2\nSeverity: Normal\nAssignee: sgill26@apple.com\nReporter: sgill26@apple.com\nLast change: 2026-07-03T07:56:10Z",
      "email": "sgill26@apple.com",
      "hash": "318406",
      "subject": "[GFC] Incorrect block sizes during sizing of intrinsic rows"
    },
    "318421": {
      "author": "ysuzuki",
      "avatar": "https://www.gravatar.com/avatar/3455d9081295e3e740c1ffa901217d9b?d=identicon\u0026s=64",
      "cl": "318421",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318421",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: JavaScriptCore\nPriority: P2\nSeverity: Normal\nAssignee: ysuzuki@apple.com\nReporter: ysuzuki@apple.com\nLast change: 2026-07-03T20:39:08Z",
      "email": "ysuzuki@apple.com",
      "hash": "318421",
      "subject": "[JSC] IntlLegacyConstructedSymbol should be per-realm"
    },
    "318438": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "318438",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318438",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebCore Misc.\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: adrian_taylor@apple.com\nLast change: 2026-07-03T12:25:04Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "318438",
      "subject": "Make StrictMemorySafety fatal for cmake PAL"
    },
    "318454": {
      "author": "yijia_huang",
      "avatar": "https://www.gravatar.com/avatar/5bc95a5f0a5fdfc107bbdec6979dae89?d=identicon\u0026s=64",
      "cl": "318454",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318454",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: yijia_huang@apple.com\nReporter: yijia_huang@apple.com\nLast change: 2026-07-03T21:44:17Z",
      "email": "yijia_huang@apple.com",
      "hash": "318454",
      "subject": "[JSC][Temporal] Polish Temporal.PlainDateTime: spec alignment, constructor and round() fixes"
    },
    "318463": {
      "author": "lmoura",
      "avatar": "https://www.gravatar.com/avatar/6157f52d61e04c2c63fe7ff668ba69b3?d=identicon\u0026s=64",
      "cl": "318463",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318463",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WPE WebKit\nPriority: P2\nSeverity: Normal\nAssignee: lmoura@igalia.com\nReporter: lmoura@igalia.com\nLast change: 2026-07-03T18:30:56Z",
      "email": "lmoura@igalia.com",
      "hash": "318463",
      "subject": "[Soup] Null deref in NetworkStorageSession::stopListeningForCookieChangeNotifications when a host is absent from m_cookieChangeObservers"
    },
    "318495": {
      "author": "achristensen",
      "avatar": "https://www.gravatar.com/avatar/b087c5dfcb1233e80cad9105fd5a1ac6?d=identicon\u0026s=64",
      "cl": "318495",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318495",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: JavaScriptCore\nPriority: P2\nSeverity: Normal\nAssignee: achristensen@apple.com\nReporter: achristensen@apple.com\nLast change: 2026-07-03T16:38:06Z",
      "email": "achristensen@apple.com",
      "hash": "318495",
      "subject": "Include vector header for its use in RefTrackerMixin.cpp"
    },
    "318498": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "318498",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318498",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebKit Misc.\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: richard_robinson2@apple.com\nLast change: 2026-07-03T09:01:25Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "318498",
      "subject": "[SwiftBrowser] Allow opening .webarchive documents in SwiftBrowser"
    },
    "318501": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "318501",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318501",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Web Inspector\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-03T07:57:06Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "318501",
      "subject": "Out-of-bounds read in InspectorAnimationAgent when parsedKeyframes is shorter than blendingKeyframes"
    },
    "318505": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "318505",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318505",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: JavaScriptCore\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: jmichaud@igalia.com\nLast change: 2026-07-03T14:59:14Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "318505",
      "subject": "Update arch detection in run-jsc-stress-tests"
    },
    "318510": {
      "author": "sosuke",
      "avatar": "https://www.gravatar.com/avatar/cf9d615e1e00176d99cc4a21d33c3bbb?d=identicon\u0026s=64",
      "cl": "318510",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318510",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: JavaScriptCore\nPriority: P2\nSeverity: Normal\nAssignee: sosuke@bun.com\nReporter: sosuke@bun.com\nLast change: 2026-07-03T07:41:12Z",
      "email": "sosuke@bun.com",
      "hash": "318510",
      "subject": "[JSC] Skip Latin-1 single-character atomization in `s.split('')`"
    },
    "318515": {
      "author": "sosuke",
      "avatar": "https://www.gravatar.com/avatar/cf9d615e1e00176d99cc4a21d33c3bbb?d=identicon\u0026s=64",
      "cl": "318515",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318515",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: JavaScriptCore\nPriority: P2\nSeverity: Normal\nAssignee: sosuke@bun.com\nReporter: sosuke@bun.com\nLast change: 2026-07-03T07:44:11Z",
      "email": "sosuke@bun.com",
      "hash": "318515",
      "subject": "[JSC] Prove resolved values non-thenable for `NewResolvedPromise` in DFG constant folding"
    },
    "318530": {
      "author": "csaavedra",
      "avatar": "https://www.gravatar.com/avatar/376a6edb56b8e52de407ea171c869bcf?d=identicon\u0026s=64",
      "cl": "318530",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318530",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WPE WebKit\nPriority: P2\nSeverity: Normal\nAssignee: csaavedra@igalia.com\nReporter: csaavedra@igalia.com\nLast change: 2026-07-03T15:08:34Z",
      "email": "csaavedra@igalia.com",
      "hash": "318530",
      "subject": "[GLIB/2.52] Reentrant client removal during CSSFontFace::iterateClients triggers hasFace() assertion"
    },
    "318531": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "318531",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318531",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: SVG\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-03T15:08:13Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "318531",
      "subject": "Optimize SVGURIReference::fragmentIdentifierFromIRIString to avoid redundant URL parsing and string allocations"
    },
    "318537": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "318537",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318537",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Web Inspector\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-03T17:45:34Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "318537",
      "subject": "[Web Inspector] Null InspectorStyleSheet dereference in InspectorCSSAgent::setActiveStyleSheetsForDocument when removing a stylesheet"
    },
    "318540": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "318540",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318540",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Web Inspector\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-03T17:12:39Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "318540",
      "subject": "PageRuntimeAgent::didClearWindowObjectInWorld should check m_ignoreDidClearWindowObject before minting a frame identifier"
    },
    "318542": {
      "author": "clopez",
      "avatar": "https://www.gravatar.com/avatar/05326c1dbe06f486e884975e73f25179?d=identicon\u0026s=64",
      "cl": "318542",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318542",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Tools / Tests\nPriority: P2\nSeverity: Normal\nAssignee: clopez@igalia.com\nReporter: clopez@igalia.com\nLast change: 2026-07-03T10:14:12Z",
      "email": "clopez@igalia.com",
      "hash": "318542",
      "subject": "REGRESSION(315890@main): [Tools] rapidfuzz 3.14.5 is not available as wheel for Linux ARM32"
    },
    "318545": {
      "author": "jean-yves.avenard",
      "avatar": "https://www.gravatar.com/avatar/29892bff749533b3b9dce5dfb9b119e6?d=identicon\u0026s=64",
      "cl": "318545",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318545",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Media\nPriority: P2\nSeverity: Normal\nAssignee: jean-yves.avenard@apple.com\nReporter: jean-yves.avenard@apple.com\nLast change: 2026-07-03T11:40:39Z",
      "email": "jean-yves.avenard@apple.com",
      "hash": "318545",
      "subject": "(315963@main) DumpRenderTree at com.apple.WebCore:  WebCore::AudioVideoRendererAVFObjC::updateSharedTimebase"
    },
    "318548": {
      "author": "koivisto",
      "avatar": "https://www.gravatar.com/avatar/b4fa938e48b3a16e74365e6fa19ac173?d=identicon\u0026s=64",
      "cl": "318548",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318548",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: CSS\nPriority: P2\nSeverity: Normal\nAssignee: koivisto@iki.fi\nReporter: koivisto@iki.fi\nLast change: 2026-07-03T14:29:08Z",
      "email": "koivisto@iki.fi",
      "hash": "318548",
      "subject": "[css-mixins-1] Fix minor @function issues"
    },
    "318559": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "318559",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318559",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Web Inspector\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-03T17:13:22Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "318559",
      "subject": "[Web Inspector] didChangeCanvasSize/didChangeCanvasMemory have a vestigial always-true null check on inspectorCanvas"
    }
  },
  "date": "2026-07-03",
  "days": 1,
  "generatedAt": "2026-07-03T22:05:29Z",
  "kind": "issues",
  "markdown": "## Highlights\n- **Privacy** Fixed a macOS regression where Intelligent Tracking Prevention stayed enabled even when NSCrossWebsiteTrackingUsageDescription should have controlled it. [bug 220190](https://bugs.webkit.org/show_bug.cgi?id=220190)\n- **Layout** Fixed iframe color-scheme changes not updating the embedded document's appearance. [bug 316738](https://bugs.webkit.org/show_bug.cgi?id=316738)\n- **UI** Fixed a Digital Credentials flow where aborting navigator.credentials.get() could leave the document picker stuck on screen. [bug 318013](https://bugs.webkit.org/show_bug.cgi?id=318013)\n- **Media** Fixed a WebContent crash while creating video format metadata. [bug 317652](https://bugs.webkit.org/show_bug.cgi?id=317652)\n- **Layout** Fixed incorrect intrinsic row sizing in grid layout calculations. [bug 318406](https://bugs.webkit.org/show_bug.cgi?id=318406)\n- **CSS** Fixed :last-child and related selectors depending on parser state outside style resolution. [bug 315904](https://bugs.webkit.org/show_bug.cgi?id=315904)\n- **SVG** Fixed SMIL animations so invalid from/to/by values no longer apply broken number and path animations. [bug 318066](https://bugs.webkit.org/show_bug.cgi?id=318066)\n- **DevTools** Fixed multiple Web Inspector crashes and invalidation issues affecting stylesheets, animations, DOM updates, and frame lifecycle handling. [bug 316416](https://bugs.webkit.org/show_bug.cgi?id=316416)\n- **Media** Fixed a media renderer crash in AudioVideoRendererAVFObjC::updateSharedTimebase. [bug 318545](https://bugs.webkit.org/show_bug.cgi?id=318545)\n\n## By component\n\n### CSS\n- Fixed :last-child and related selectors relying on parser state outside normal style resolution. [bug 315904](https://bugs.webkit.org/show_bug.cgi?id=315904)\n- Fixed minor issues in css-mixins-1 @function handling. [bug 318548](https://bugs.webkit.org/show_bug.cgi?id=318548)\n\n### JavaScriptCore\n- Tightened CodeBlock value profile prediction and liveness update work. [bug 314984](https://bugs.webkit.org/show_bug.cgi?id=314984)\n- Fixed IntlLegacyConstructedSymbol to be scoped per realm. [bug 318421](https://bugs.webkit.org/show_bug.cgi?id=318421)\n- Fixed a missing vector include in RefTrackerMixin.cpp. [bug 318495](https://bugs.webkit.org/show_bug.cgi?id=318495)\n- Updated architecture detection in run-jsc-stress-tests. [bug 318505](https://bugs.webkit.org/show_bug.cgi?id=318505)\n- Optimized s.split('') by skipping Latin-1 single-character atomization. [bug 318510](https://bugs.webkit.org/show_bug.cgi?id=318510)\n- Fixed DFG constant folding so NewResolvedPromise only assumes non-thenable resolved values when proven safe. [bug 318515](https://bugs.webkit.org/show_bug.cgi?id=318515)\n\n### Layout and rendering\n- Fixed iframe color-scheme changes not invalidating the embedded document's appearance. [bug 316738](https://bugs.webkit.org/show_bug.cgi?id=316738)\n- Fixed incorrect block sizes while sizing intrinsic grid rows. [bug 318406](https://bugs.webkit.org/show_bug.cgi?id=318406)\n\n### Media playback\n- Fixed a crash while creating video information from a format description. [bug 317652](https://bugs.webkit.org/show_bug.cgi?id=317652)\n- Fixed a media renderer crash in AudioVideoRendererAVFObjC::updateSharedTimebase. [bug 318545](https://bugs.webkit.org/show_bug.cgi?id=318545)\n\n### Privacy and tracking\n- Fixed NSCrossWebsiteTrackingUsageDescription not working on macOS, which caused ITP to remain enabled. [bug 220190](https://bugs.webkit.org/show_bug.cgi?id=220190)\n\n### SVG\n- Fixed SMIL animations so invalid number and path inputs do not get applied. [bug 318066](https://bugs.webkit.org/show_bug.cgi?id=318066)\n- Optimized SVGURIReference fragment extraction to avoid redundant URL parsing and allocations. [bug 318531](https://bugs.webkit.org/show_bug.cgi?id=318531)\n\n### Web Inspector\n- Fixed inline style invalidation to batch DOM.getAttributes work instead of issuing one command per node. [bug 316416](https://bugs.webkit.org/show_bug.cgi?id=316416)\n- Added FrameDOMStorageAgent enable/disable support for cross-origin iframes. [bug 316799](https://bugs.webkit.org/show_bug.cgi?id=316799)\n- Fixed an out-of-bounds read in InspectorAnimationAgent when keyframe arrays had mismatched lengths. [bug 318501](https://bugs.webkit.org/show_bug.cgi?id=318501)\n- Fixed a null InspectorStyleSheet dereference when removing a stylesheet. [bug 318537](https://bugs.webkit.org/show_bug.cgi?id=318537)\n- Fixed PageRuntimeAgent so it checks m_ignoreDidClearWindowObject before minting a frame identifier. [bug 318540](https://bugs.webkit.org/show_bug.cgi?id=318540)\n- Removed a vestigial always-true null check in canvas size and memory change handling. [bug 318559](https://bugs.webkit.org/show_bug.cgi?id=318559)\n\n### Web platform and APIs\n- Fixed a crash in EllipsisBoxPainter::paint when inline content had only partial layout. [bug 305897](https://bugs.webkit.org/show_bug.cgi?id=305897)\n- Fixed Temporal.PlainDateTime constructor and round() behavior for closer spec alignment. [bug 318454](https://bugs.webkit.org/show_bug.cgi?id=318454)\n- Fixed the Digital Credentials abort path so the document picker does not remain stuck onscreen. [bug 318013](https://bugs.webkit.org/show_bug.cgi?id=318013)\n\n### WebKit and embedding\n- Enabled opening .webarchive documents in SwiftBrowser. [bug 318498](https://bugs.webkit.org/show_bug.cgi?id=318498)\n\n### WPE and GLib\n- Fixed a null dereference when stopping cookie change notifications for a host with no observer entry. [bug 318463](https://bugs.webkit.org/show_bug.cgi?id=318463)\n- Fixed a GLib 2.52 assertion triggered by reentrant client removal during CSS font face client iteration. [bug 318530](https://bugs.webkit.org/show_bug.cgi?id=318530)\n\n### WebCore internals\n- Made StrictMemorySafety fatal for cmake PAL builds. [bug 318438](https://bugs.webkit.org/show_bug.cgi?id=318438)\n\n## Resolution other than FIXED\n- Scrollbar thumb drag cancellation in RTL mode moved to CONFIGURATION CHANGED rather than a direct code fix. [bug 250207](https://bugs.webkit.org/show_bug.cgi?id=250207)\n- An extra scrollbar thumb seen with always-on scrollbars was closed as WORKSFORME. [bug 291825](https://bugs.webkit.org/show_bug.cgi?id=291825)",
  "repo": "webkit",
  "repoDisplay": "WebKit",
  "since": "2026-07-03",
  "totals": {
    "components": 14,
    "contributors": 17,
    "issues": 32
  },
  "until": "2026-07-03"
}