{
  "breakdown": {
    "byResolution": {
      "DUPLICATE": 1,
      "FIXED": 55,
      "WONTFIX": 1
    }
  },
  "commits": {
    "230540": {
      "author": "jbedard",
      "avatar": "https://www.gravatar.com/avatar/24548a6c84377efe7594acc92601e839?d=identicon\u0026s=64",
      "cl": "230540",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=230540",
      "description": "Status: RESOLVED\nResolution: DUPLICATE\nComponent: Tools / Tests\nPriority: P2\nSeverity: Normal\nAssignee: jbedard@apple.com\nReporter: cgarcia@igalia.com\nLast change: 2026-07-28T20:20:38Z",
      "email": "jbedard@apple.com",
      "hash": "230540",
      "subject": "[webkitcorepy] Not possible to autoinstall a package with micro version 0"
    },
    "299929": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "299929",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=299929",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: CSS\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: karlcow@apple.com\nLast change: 2026-07-28T18:45:37Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "299929",
      "subject": "Serialization of @page {size: letter portrait;} is incorrect. WPT failure"
    },
    "313620": {
      "author": "fred.wang",
      "avatar": "https://www.gravatar.com/avatar/4284ca30833543ee447237ab9a37c6c1?d=identicon\u0026s=64",
      "cl": "313620",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=313620",
      "description": "Status: RESOLVED\nResolution: WONTFIX\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: fred.wang@free.fr\nReporter: fred.wang@free.fr\nLast change: 2026-07-28T08:24:03Z",
      "email": "fred.wang@free.fr",
      "hash": "313620",
      "subject": "Improve comments referencing the fetch spec"
    },
    "314883": {
      "author": "cgarcia",
      "avatar": "https://www.gravatar.com/avatar/8393f7e76d83c8a147cb852d8fb1a959?d=identicon\u0026s=64",
      "cl": "314883",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=314883",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebKitGTK\nPriority: P2\nSeverity: Normal\nAssignee: cgarcia@igalia.com\nReporter: fujii@igalia.com\nLast change: 2026-07-28T14:56:08Z",
      "email": "cgarcia@igalia.com",
      "hash": "314883",
      "subject": "[GTK][WPE] SkiaCompositingLayer: incorrect z-ordering at Snow Stack"
    },
    "316241": {
      "author": "sabouhallawa",
      "avatar": "https://www.gravatar.com/avatar/d1692a5af8c7ff0bbed69f03e2a76d9c?d=identicon\u0026s=64",
      "cl": "316241",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=316241",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Canvas\nPriority: P2\nSeverity: Normal\nAssignee: sabouhallawa@apple.com\nReporter: sabouhallawa@apple.com\nLast change: 2026-07-28T19:06:32Z",
      "email": "sabouhallawa@apple.com",
      "hash": "316241",
      "subject": "[HTML-in-Canvas] Add a feature control flag to enable HTML-in-Canvas"
    },
    "316291": {
      "author": "yoav",
      "avatar": "https://www.gravatar.com/avatar/b32ba9e7b52a7318792e2c620bd430f0?d=identicon\u0026s=64",
      "cl": "316291",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=316291",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: yoav@yoav.ws\nReporter: yoav@yoav.ws\nLast change: 2026-07-28T10:36:35Z",
      "email": "yoav@yoav.ws",
      "hash": "316291",
      "subject": "Navigation Timing performance entries get skewed by BCG switches"
    },
    "318194": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "318194",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=318194",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: HTML Editing\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-28T09:41:26Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "318194",
      "subject": "Restore if/else-if chain in FrameSelection::respondToNodeModification"
    },
    "319695": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "319695",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=319695",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: sean_patterson@apple.com\nLast change: 2026-07-28T20:26:16Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "319695",
      "subject": "local files sometimes lead to NSURLErrorDomain:-3,001"
    },
    "319918": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "319918",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=319918",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Tools / Tests\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: iroy@apple.com\nLast change: 2026-07-28T20:29:43Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "319918",
      "subject": "The check for \"Reviewed by\" should check at the start of the line"
    },
    "320014": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "320014",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320014",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebAssembly\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: ccarley2@apple.com\nLast change: 2026-07-28T20:47:46Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "320014",
      "subject": "[Memory64] Implement Table64 in the OMG tier"
    },
    "320028": {
      "author": "beidson",
      "avatar": "https://www.gravatar.com/avatar/31bed81d6d8ef517f93b30add03f5651?d=identicon\u0026s=64",
      "cl": "320028",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320028",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Tools / Tests\nPriority: P2\nSeverity: Normal\nAssignee: beidson@apple.com\nReporter: beidson@apple.com\nLast change: 2026-07-28T16:16:13Z",
      "email": "beidson@apple.com",
      "hash": "320028",
      "subject": "Add tests verifying cross-origin iframe window.alert() behavior"
    },
    "320037": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "320037",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320037",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Media\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-28T08:18:27Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "320037",
      "subject": "NumericConstraint::valueForCapabilityRange() ignores a valid current value when both min and max constraints are set"
    },
    "320038": {
      "author": "pascoe",
      "avatar": "https://www.gravatar.com/avatar/7a6e50b09dba6a185f45250268683d71?d=identicon\u0026s=64",
      "cl": "320038",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320038",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: pascoe@apple.com\nReporter: pascoe@apple.com\nLast change: 2026-07-28T16:35:53Z",
      "email": "pascoe@apple.com",
      "hash": "320038",
      "subject": "[Digital Credentials] Start to parsing OpenID4VP signed and multisigned requests in the web content process"
    },
    "320049": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "320049",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320049",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebRTC\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-28T08:30:23Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "320049",
      "subject": "RealtimeIncomingAudioSourceCocoa::OnData rescales the frame counter against the already-updated sample rate, making it a no-op"
    },
    "320094": {
      "author": "fred.wang",
      "avatar": "https://www.gravatar.com/avatar/4284ca30833543ee447237ab9a37c6c1?d=identicon\u0026s=64",
      "cl": "320094",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320094",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: fred.wang@free.fr\nReporter: fred.wang@free.fr\nLast change: 2026-07-28T15:01:12Z",
      "email": "fred.wang@free.fr",
      "hash": "320094",
      "subject": "Update fetch/compression-dictionary from WPT"
    },
    "320096": {
      "author": "lwarlow",
      "avatar": "https://www.gravatar.com/avatar/262b456ff1e93842b93f9694d1e01a9e?d=identicon\u0026s=64",
      "cl": "320096",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320096",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: DOM\nPriority: P2\nSeverity: Normal\nAssignee: lwarlow@igalia.com\nReporter: lwarlow@igalia.com\nLast change: 2026-07-28T21:21:12Z",
      "email": "lwarlow@igalia.com",
      "hash": "320096",
      "subject": "moveBefore needs to iterate through shadow roots too"
    },
    "320113": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "320113",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320113",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebRTC\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-28T08:19:20Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "320113",
      "subject": "LibWebRTCAudioModule has a data race on m_isPlaying and m_audioTransport"
    },
    "320155": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "320155",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320155",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Web Template Framework\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-28T09:30:00Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "320155",
      "subject": "makeStringByReplacingAll() uses a scalar scan instead of SIMD-accelerated find()"
    },
    "320163": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "320163",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320163",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebCore Misc.\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-28T08:29:36Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "320163",
      "subject": "DisplayCaptureSourceCocoa::generateFrame() first switchOn takes Variant alternatives by value"
    },
    "320166": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "320166",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320166",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebCore Misc.\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-28T08:25:06Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "320166",
      "subject": "MediaStreamPrivate constructor copies the tracks vector instead of moving it"
    },
    "320177": {
      "author": "sosuke",
      "avatar": "https://www.gravatar.com/avatar/cf9d615e1e00176d99cc4a21d33c3bbb?d=identicon\u0026s=64",
      "cl": "320177",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320177",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: JavaScriptCore\nPriority: P2\nSeverity: Normal\nAssignee: sosuke@bun.com\nReporter: sosuke@bun.com\nLast change: 2026-07-28T12:45:12Z",
      "email": "sosuke@bun.com",
      "hash": "320177",
      "subject": "[JSC] Allocate DFG `BasicBlock::intersectionOfPastValuesAtHead` only for OSR entry targets"
    },
    "320183": {
      "author": "youennf",
      "avatar": "https://www.gravatar.com/avatar/3ec628f92c50daa5247fcfcb355472db?d=identicon\u0026s=64",
      "cl": "320183",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320183",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Service Workers\nPriority: P2\nSeverity: Normal\nAssignee: youennf@gmail.com\nReporter: youennf@gmail.com\nLast change: 2026-07-28T07:21:07Z",
      "email": "youennf@gmail.com",
      "hash": "320183",
      "subject": "Do not allow network fallback in case of a disturbed fetch event request body"
    },
    "320223": {
      "author": "jlee53",
      "avatar": "https://www.gravatar.com/avatar/fc717c99321d09f31fb9187418a8ffc5?d=identicon\u0026s=64",
      "cl": "320223",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320223",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebKit Misc.\nPriority: P2\nSeverity: Normal\nAssignee: jlee53@apple.com\nReporter: jlee53@apple.com\nLast change: 2026-07-28T18:52:52Z",
      "email": "jlee53@apple.com",
      "hash": "320223",
      "subject": "Check willContinueLoading for iframes when provisional loads fail."
    },
    "320242": {
      "author": "k_monsen",
      "avatar": "https://www.gravatar.com/avatar/d9b02ca94d143b7dd6118be4dbc4aa06?d=identicon\u0026s=64",
      "cl": "320242",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320242",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebKit Misc.\nPriority: P2\nSeverity: Normal\nAssignee: k_monsen@apple.com\nReporter: k_monsen@apple.com\nLast change: 2026-07-28T07:18:19Z",
      "email": "k_monsen@apple.com",
      "hash": "320242",
      "subject": "Crash in NavigateEvent::finish when document element is removed inside navigate handler"
    },
    "320312": {
      "author": "sosuke",
      "avatar": "https://www.gravatar.com/avatar/cf9d615e1e00176d99cc4a21d33c3bbb?d=identicon\u0026s=64",
      "cl": "320312",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320312",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: JavaScriptCore\nPriority: P2\nSeverity: Normal\nAssignee: sosuke@bun.com\nReporter: sosuke@bun.com\nLast change: 2026-07-28T12:54:12Z",
      "email": "sosuke@bun.com",
      "hash": "320312",
      "subject": "[JSC] `Iterator.zip` should use null-prototype objects for `GetOptionsObject` and the synthetic underlying iterator"
    },
    "320313": {
      "author": "sosuke",
      "avatar": "https://www.gravatar.com/avatar/cf9d615e1e00176d99cc4a21d33c3bbb?d=identicon\u0026s=64",
      "cl": "320313",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320313",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: JavaScriptCore\nPriority: P2\nSeverity: Normal\nAssignee: sosuke@bun.com\nReporter: sosuke@bun.com\nLast change: 2026-07-28T12:57:10Z",
      "email": "sosuke@bun.com",
      "hash": "320313",
      "subject": "[JSC] Add missing `U_FAILURE(status)` for `actualLunisolarMonthLength`"
    },
    "320327": {
      "author": "philn",
      "avatar": "https://www.gravatar.com/avatar/eef27203750af3510263cc29af21a16e?d=identicon\u0026s=64",
      "cl": "320327",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320327",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Media\nPriority: P2\nSeverity: Normal\nAssignee: philn@igalia.com\nReporter: charlesbrandt@gmail.com\nLast change: 2026-07-28T20:33:22Z",
      "email": "philn@igalia.com",
      "hash": "320327",
      "subject": "[GStreamer] Any WebCodecs VideoEncoder use crashes WebKitWebProcess (SIGABRT) during webkitvideoencoder element registration"
    },
    "320331": {
      "author": "ddkilzer",
      "avatar": "https://www.gravatar.com/avatar/88cf4d5149f4e19200f08d611f1818c9?d=identicon\u0026s=64",
      "cl": "320331",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320331",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Tools / Tests\nPriority: P2\nSeverity: Normal\nAssignee: ddkilzer@webkit.org\nReporter: ddkilzer@webkit.org\nLast change: 2026-07-28T11:08:39Z",
      "email": "ddkilzer@webkit.org",
      "hash": "320331",
      "subject": "Install TestWebKitAPI and API-test executables on tools builds"
    },
    "320332": {
      "author": "charliew",
      "avatar": "https://www.gravatar.com/avatar/857b3b5ff3394c31fa2689310a93dbab?d=identicon\u0026s=64",
      "cl": "320332",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320332",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebCore Misc.\nPriority: P2\nSeverity: Normal\nAssignee: charliew@apple.com\nReporter: charliew@apple.com\nLast change: 2026-07-28T19:11:50Z",
      "email": "charliew@apple.com",
      "hash": "320332",
      "subject": "[Cookie Store] Preserve cookie change subscription list order"
    },
    "320340": {
      "author": "cdumez",
      "avatar": "https://www.gravatar.com/avatar/a9f21fe3a8baf79b45f3c91572187bdc?d=identicon\u0026s=64",
      "cl": "320340",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320340",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebKit2\nPriority: P2\nSeverity: Normal\nAssignee: cdumez@apple.com\nReporter: cdumez@apple.com\nLast change: 2026-07-28T08:09:53Z",
      "email": "cdumez@apple.com",
      "hash": "320340",
      "subject": "Limit URL size at the IPC boundary"
    },
    "320350": {
      "author": "cdumez",
      "avatar": "https://www.gravatar.com/avatar/a9f21fe3a8baf79b45f3c91572187bdc?d=identicon\u0026s=64",
      "cl": "320350",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320350",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebKit2\nPriority: P2\nSeverity: Normal\nAssignee: cdumez@apple.com\nReporter: cdumez@apple.com\nLast change: 2026-07-28T10:21:13Z",
      "email": "cdumez@apple.com",
      "hash": "320350",
      "subject": "Cancel the in-flight SpeculativeLoad when a stale-while-revalidate revalidation times out"
    },
    "320358": {
      "author": "a_protyasha",
      "avatar": "https://www.gravatar.com/avatar/fce5b3c4e9f3c59a4873e08c9f03c3b1?d=identicon\u0026s=64",
      "cl": "320358",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320358",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: PDF\nPriority: P2\nSeverity: Normal\nAssignee: a_protyasha@apple.com\nReporter: a_protyasha@apple.com\nLast change: 2026-07-28T15:20:01Z",
      "email": "a_protyasha@apple.com",
      "hash": "320358",
      "subject": "[Site Isolation] [macOS] PDF HUD in cross origin \u003ciframe src=pdf\u003e is unexpectedly offset"
    },
    "320359": {
      "author": "youennf",
      "avatar": "https://www.gravatar.com/avatar/3ec628f92c50daa5247fcfcb355472db?d=identicon\u0026s=64",
      "cl": "320359",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320359",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Service Workers\nPriority: P2\nSeverity: Normal\nAssignee: youennf@gmail.com\nReporter: youennf@gmail.com\nLast change: 2026-07-28T07:35:57Z",
      "email": "youennf@gmail.com",
      "hash": "320359",
      "subject": "Service worker fetch event request body cancellation should be propagated to the original ReadableStream"
    },
    "320364": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "320364",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320364",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: jonbutler@apple.com\nLast change: 2026-07-28T12:03:12Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "320364",
      "subject": "Add missing braces in the WGSL alias analysis pass"
    },
    "320371": {
      "author": "lmoura",
      "avatar": "https://www.gravatar.com/avatar/6157f52d61e04c2c63fe7ff668ba69b3?d=identicon\u0026s=64",
      "cl": "320371",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320371",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WPE WebKit\nPriority: P2\nSeverity: Normal\nAssignee: lmoura@igalia.com\nReporter: lmoura@igalia.com\nLast change: 2026-07-28T20:21:11Z",
      "email": "lmoura@igalia.com",
      "hash": "320371",
      "subject": "[GLIB] Add log fallback when journald is not reachable"
    },
    "320375": {
      "author": "ahmad.saleem792",
      "avatar": "https://www.gravatar.com/avatar/3d43be18ce5ee6b92ba9151b63591125?d=identicon\u0026s=64",
      "cl": "320375",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320375",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Web Audio\nPriority: P2\nSeverity: Normal\nAssignee: ahmad.saleem792@gmail.com\nReporter: ahmad.saleem792@gmail.com\nLast change: 2026-07-28T09:39:02Z",
      "email": "ahmad.saleem792@gmail.com",
      "hash": "320375",
      "subject": "AudioParam::finalValue() returns an uninitialized float when calculateFinalValues() bails out"
    },
    "320382": {
      "author": "sgill26",
      "avatar": "https://www.gravatar.com/avatar/da06ac7be04c41c1a52a4222d80024f5?d=identicon\u0026s=64",
      "cl": "320382",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320382",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Layout and Rendering\nPriority: P2\nSeverity: Normal\nAssignee: sgill26@apple.com\nReporter: sgill26@apple.com\nLast change: 2026-07-28T16:06:53Z",
      "email": "sgill26@apple.com",
      "hash": "320382",
      "subject": "[GFC] Apply a grid item's negative line offset when constructing UnplacedGridItem"
    },
    "320388": {
      "author": "zalan",
      "avatar": "https://www.gravatar.com/avatar/788d66417db806c567552cfa1ae89f77?d=identicon\u0026s=64",
      "cl": "320388",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320388",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: zalan@apple.com\nReporter: zalan@apple.com\nLast change: 2026-07-28T14:52:13Z",
      "email": "zalan@apple.com",
      "hash": "320388",
      "subject": "[cleanup] Have the flex algorithm place items in flow-relative coordinates"
    },
    "320394": {
      "author": "zalan",
      "avatar": "https://www.gravatar.com/avatar/788d66417db806c567552cfa1ae89f77?d=identicon\u0026s=64",
      "cl": "320394",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320394",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: zalan@apple.com\nReporter: zalan@apple.com\nLast change: 2026-07-28T17:16:13Z",
      "email": "zalan@apple.com",
      "hash": "320394",
      "subject": "[cleanup] Remove the column-reverse placement pass from the flex algorithm"
    },
    "320405": {
      "author": "simon.fraser",
      "avatar": "https://www.gravatar.com/avatar/3763324aa0cdfa93be751c6081b8006a?d=identicon\u0026s=64",
      "cl": "320405",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320405",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Tools / Tests\nPriority: P2\nSeverity: Normal\nAssignee: simon.fraser@apple.com\nReporter: simon.fraser@apple.com\nLast change: 2026-07-28T18:32:28Z",
      "email": "simon.fraser@apple.com",
      "hash": "320405",
      "subject": "[Scroll snap] css/css-scroll-snap/overscroll-snap.html fails in Safari"
    },
    "320413": {
      "author": "a_protyasha",
      "avatar": "https://www.gravatar.com/avatar/fce5b3c4e9f3c59a4873e08c9f03c3b1?d=identicon\u0026s=64",
      "cl": "320413",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320413",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: PDF\nPriority: P2\nSeverity: Normal\nAssignee: a_protyasha@apple.com\nReporter: a_protyasha@apple.com\nLast change: 2026-07-28T15:20:42Z",
      "email": "a_protyasha@apple.com",
      "hash": "320413",
      "subject": "Add a debug UI for the PDF HUD"
    },
    "320417": {
      "author": "com.webkit.iidmsa",
      "avatar": "https://www.gravatar.com/avatar/0ac5127c69f90d0c57054173ae4c3108?d=identicon\u0026s=64",
      "cl": "320417",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320417",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: CSS\nPriority: P2\nSeverity: Normal\nAssignee: com.webkit.iidmsa@gmail.com\nReporter: com.webkit.iidmsa@gmail.com\nLast change: 2026-07-28T09:54:01Z",
      "email": "com.webkit.iidmsa@gmail.com",
      "hash": "320417",
      "subject": "Remove incorrect `NODELETE` annotation from `PropertySetCSSDescriptors::reattach()`"
    },
    "320419": {
      "author": "yijia_huang",
      "avatar": "https://www.gravatar.com/avatar/5bc95a5f0a5fdfc107bbdec6979dae89?d=identicon\u0026s=64",
      "cl": "320419",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320419",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: yijia_huang@apple.com\nReporter: yijia_huang@apple.com\nLast change: 2026-07-28T16:54:31Z",
      "email": "yijia_huang@apple.com",
      "hash": "320419",
      "subject": "[JSC] Add an 8-byte SWAR fast path to JSON.stringify's stringCopyUpconvert for short strings"
    },
    "320421": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "320421",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320421",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Media\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: phinehas133@gmail.com\nLast change: 2026-07-28T18:49:40Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "320421",
      "subject": "[ iOS ] http/tests/site-isolation/fullscreen.html is a constant text failure"
    },
    "320423": {
      "author": "yulun_wu",
      "avatar": "https://www.gravatar.com/avatar/9e34d6632f4d926cdf6fe8dce07f9cb7?d=identicon\u0026s=64",
      "cl": "320423",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320423",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Layout and Rendering\nPriority: P2\nSeverity: Normal\nAssignee: yulun_wu@apple.com\nReporter: yulun_wu@apple.com\nLast change: 2026-07-28T19:39:35Z",
      "email": "yulun_wu@apple.com",
      "hash": "320423",
      "subject": "[GFC] Consolidate the min/max-content constraint test and per-track content contributions"
    },
    "320426": {
      "author": "cdumez",
      "avatar": "https://www.gravatar.com/avatar/a9f21fe3a8baf79b45f3c91572187bdc?d=identicon\u0026s=64",
      "cl": "320426",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320426",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Tools / Tests\nPriority: P2\nSeverity: Normal\nAssignee: cdumez@apple.com\nReporter: cdumez@apple.com\nLast change: 2026-07-28T07:56:12Z",
      "email": "cdumez@apple.com",
      "hash": "320426",
      "subject": "Unreviewed, address unexpected safer cpp issue on the bot"
    },
    "320430": {
      "author": "charliew",
      "avatar": "https://www.gravatar.com/avatar/857b3b5ff3394c31fa2689310a93dbab?d=identicon\u0026s=64",
      "cl": "320430",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320430",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: History\nPriority: P2\nSeverity: Normal\nAssignee: charliew@apple.com\nReporter: charliew@apple.com\nLast change: 2026-07-28T16:42:12Z",
      "email": "charliew@apple.com",
      "hash": "320430",
      "subject": "Make `BackForwardGoToItem` asynchronous"
    },
    "320437": {
      "author": "ysuzuki",
      "avatar": "https://www.gravatar.com/avatar/3455d9081295e3e740c1ffa901217d9b?d=identicon\u0026s=64",
      "cl": "320437",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320437",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: JavaScriptCore\nPriority: P2\nSeverity: Normal\nAssignee: ysuzuki@apple.com\nReporter: ysuzuki@apple.com\nLast change: 2026-07-28T16:08:25Z",
      "email": "ysuzuki@apple.com",
      "hash": "320437",
      "subject": "[JSC] Fix JSON stringify regression due to toJSON check"
    },
    "320450": {
      "author": "lmoura",
      "avatar": "https://www.gravatar.com/avatar/6157f52d61e04c2c63fe7ff668ba69b3?d=identicon\u0026s=64",
      "cl": "320450",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320450",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Layout and Rendering\nPriority: P2\nSeverity: Normal\nAssignee: lmoura@igalia.com\nReporter: lmoura@igalia.com\nLast change: 2026-07-28T14:18:12Z",
      "email": "lmoura@igalia.com",
      "hash": "320450",
      "subject": "REGRESSION(318033@main) Crash in Layout::sizeTracksToFitNonSpanningItems due to ASSERT_NOT_IMPLEMENTED_YET"
    },
    "320459": {
      "author": "keith_miller",
      "avatar": "https://www.gravatar.com/avatar/bddc1595b29098429a6ce7c8bf4aced2?d=identicon\u0026s=64",
      "cl": "320459",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320459",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Tools / Tests\nPriority: P2\nSeverity: Normal\nAssignee: keith_miller@apple.com\nReporter: keith_miller@apple.com\nLast change: 2026-07-28T17:36:08Z",
      "email": "keith_miller@apple.com",
      "hash": "320459",
      "subject": "[Wasm] Remove stale spec tests"
    },
    "320465": {
      "author": "a_protyasha",
      "avatar": "https://www.gravatar.com/avatar/fce5b3c4e9f3c59a4873e08c9f03c3b1?d=identicon\u0026s=64",
      "cl": "320465",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320465",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: a_protyasha@apple.com\nReporter: a_protyasha@apple.com\nLast change: 2026-07-28T16:45:54Z",
      "email": "a_protyasha@apple.com",
      "hash": "320465",
      "subject": "REGRESSION(318040@main): Broke internal watchOS and tvOS builds"
    },
    "320467": {
      "author": "a_protyasha",
      "avatar": "https://www.gravatar.com/avatar/fce5b3c4e9f3c59a4873e08c9f03c3b1?d=identicon\u0026s=64",
      "cl": "320467",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320467",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebKit Misc.\nPriority: P2\nSeverity: Normal\nAssignee: a_protyasha@apple.com\nReporter: a_protyasha@apple.com\nLast change: 2026-07-28T16:52:48Z",
      "email": "a_protyasha@apple.com",
      "hash": "320467",
      "subject": "Broke internal watchOS and tvOS builds"
    },
    "320469": {
      "author": "zalan",
      "avatar": "https://www.gravatar.com/avatar/788d66417db806c567552cfa1ae89f77?d=identicon\u0026s=64",
      "cl": "320469",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320469",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: zalan@apple.com\nReporter: zalan@apple.com\nLast change: 2026-07-28T19:59:14Z",
      "email": "zalan@apple.com",
      "hash": "320469",
      "subject": "Fix safer C++ failures in Source/WebCore/layout/flex"
    },
    "320470": {
      "author": "dan.hecht",
      "avatar": "https://www.gravatar.com/avatar/080f47d912b1b34d0be8293f825d132d?d=identicon\u0026s=64",
      "cl": "320470",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320470",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: bmalloc\nPriority: P2\nSeverity: Normal\nAssignee: dan.hecht@apple.com\nReporter: dan.hecht@apple.com\nLast change: 2026-07-28T21:14:40Z",
      "email": "dan.hecht@apple.com",
      "hash": "320470",
      "subject": "[libpas] Add evicted, read-faulted backing coverage to AllocationZeroingTests"
    },
    "320472": {
      "author": "webkit-unassigned",
      "avatar": "https://www.gravatar.com/avatar/80334dc799c6463fc3ad56a385ca3ffd?d=identicon\u0026s=64",
      "cl": "320472",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320472",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: WebKit Misc.\nPriority: P2\nSeverity: Normal\nAssignee: webkit-unassigned@lists.webkit.org\nReporter: richard_robinson2@apple.com\nLast change: 2026-07-28T18:43:57Z",
      "email": "webkit-unassigned@lists.webkit.org",
      "hash": "320472",
      "subject": "Re-land [SwiftUI WebKit API] Expose WebPage and related types as SPI on watchOS and tvOS"
    },
    "320473": {
      "author": "sgill26",
      "avatar": "https://www.gravatar.com/avatar/da06ac7be04c41c1a52a4222d80024f5?d=identicon\u0026s=64",
      "cl": "320473",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320473",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: Layout and Rendering\nPriority: P2\nSeverity: Normal\nAssignee: sgill26@apple.com\nReporter: sgill26@apple.com\nLast change: 2026-07-28T21:37:33Z",
      "email": "sgill26@apple.com",
      "hash": "320473",
      "subject": "REGRESSION(314501@main): On flights.google.com, can't use backspace to delete airport from box"
    },
    "320480": {
      "author": "jlee53",
      "avatar": "https://www.gravatar.com/avatar/fc717c99321d09f31fb9187418a8ffc5?d=identicon\u0026s=64",
      "cl": "320480",
      "clUrl": "https://bugs.webkit.org/show_bug.cgi?id=320480",
      "description": "Status: RESOLVED\nResolution: FIXED\nComponent: New Bugs\nPriority: P2\nSeverity: Normal\nAssignee: jlee53@apple.com\nReporter: jlee53@apple.com\nLast change: 2026-07-28T21:48:45Z",
      "email": "jlee53@apple.com",
      "hash": "320480",
      "subject": "NetworkProcess::allowEvaluatedURL may not call its completionHandler"
    }
  },
  "date": "2026-07-28",
  "days": 1,
  "generatedAt": "2026-07-28T22:05:41Z",
  "kind": "issues",
  "markdown": "## Highlights\n- **Layout** Fixed a regression that prevented backspace from deleting airport text fields on flights.google.com. [bug 320473](https://bugs.webkit.org/show_bug.cgi?id=320473)\n- **Networking** Fixed local file loads that could intermittently fail with NSURLErrorDomain -3001. [bug 319695](https://bugs.webkit.org/show_bug.cgi?id=319695)\n- **Media** Fixed a crash when using WebCodecs VideoEncoder with GStreamer builds. [bug 320327](https://bugs.webkit.org/show_bug.cgi?id=320327)\n- **Security** Added an IPC boundary limit for URL size, hardening WebKit against oversized URL messages. [bug 320340](https://bugs.webkit.org/show_bug.cgi?id=320340)\n- **DOM** Fixed moveBefore so it also traverses shadow roots, improving correctness for DOM reordering. [bug 320096](https://bugs.webkit.org/show_bug.cgi?id=320096)\n- **Performance** Fixed Navigation Timing entries being skewed when browsing context group switches occurred. [bug 316291](https://bugs.webkit.org/show_bug.cgi?id=316291)\n- **UI** Fixed incorrect z-ordering in GTK/WPE compositing layers that caused visible stacking issues. [bug 314883](https://bugs.webkit.org/show_bug.cgi?id=314883)\n- **PDF** Fixed the PDF HUD being incorrectly offset inside cross-origin PDF iframes on macOS site-isolated pages. [bug 320358](https://bugs.webkit.org/show_bug.cgi?id=320358)\n- **Service Workers** Fixed disturbed fetch event request bodies from incorrectly falling back to network loading. [bug 320183](https://bugs.webkit.org/show_bug.cgi?id=320183)\n- **Layout** Fixed a crash in grid track sizing introduced by a recent regression. [bug 320450](https://bugs.webkit.org/show_bug.cgi?id=320450)\n\n## By component\n\n### CSS\n- Fixed incorrect serialization of `@page { size: letter portrait; }` that caused a WPT failure. [bug 299929](https://bugs.webkit.org/show_bug.cgi?id=299929)\n- Removed an incorrect `NODELETE` annotation from CSS descriptor reattachment code. [bug 320417](https://bugs.webkit.org/show_bug.cgi?id=320417)\n\n### Canvas\n- Added a feature control flag for HTML-in-Canvas. [bug 316241](https://bugs.webkit.org/show_bug.cgi?id=316241)\n\n### Performance APIs\n- Fixed Navigation Timing performance entries being skewed by browsing context group switches. [bug 316291](https://bugs.webkit.org/show_bug.cgi?id=316291)\n\n### HTML Editing\n- Restored the intended if/else-if chain in selection response to node modifications. [bug 318194](https://bugs.webkit.org/show_bug.cgi?id=318194)\n\n### Networking\n- Fixed intermittent local file loading failures returning NSURLErrorDomain -3001. [bug 319695](https://bugs.webkit.org/show_bug.cgi?id=319695)\n- Fixed speculative loads so stale-while-revalidate timeouts cancel the in-flight load correctly. [bug 320350](https://bugs.webkit.org/show_bug.cgi?id=320350)\n- Fixed a case where `NetworkProcess::allowEvaluatedURL` might never invoke its completion handler. [bug 320480](https://bugs.webkit.org/show_bug.cgi?id=320480)\n\n### WebAssembly\n- Implemented Table64 in the OMG tier for Memory64 support. [bug 320014](https://bugs.webkit.org/show_bug.cgi?id=320014)\n\n### Media\n- Fixed media capability constraint handling so a valid current value is not ignored when both min and max are set. [bug 320037](https://bugs.webkit.org/show_bug.cgi?id=320037)\n- Fixed a crash in GStreamer builds when WebCodecs VideoEncoder registered its encoder element. [bug 320327](https://bugs.webkit.org/show_bug.cgi?id=320327)\n\n### Digital Credentials\n- Started parsing OpenID4VP signed and multisigned requests in the web content process. [bug 320038](https://bugs.webkit.org/show_bug.cgi?id=320038)\n\n### WebRTC\n- Fixed audio frame counter rescaling that had become a no-op after sample rate updates. [bug 320049](https://bugs.webkit.org/show_bug.cgi?id=320049)\n- Fixed a data race on audio playback state and transport pointers in LibWebRTCAudioModule. [bug 320113](https://bugs.webkit.org/show_bug.cgi?id=320113)\n\n### DOM\n- Fixed `moveBefore` so it iterates through shadow roots as well. [bug 320096](https://bugs.webkit.org/show_bug.cgi?id=320096)\n\n### WebCore Misc.\n- Fixed display capture frame generation to avoid taking variant alternatives by value in the first `switchOn`. [bug 320163](https://bugs.webkit.org/show_bug.cgi?id=320163)\n- Fixed `MediaStreamPrivate` to move the tracks vector instead of copying it. [bug 320166](https://bugs.webkit.org/show_bug.cgi?id=320166)\n- Fixed Cookie Store subscription handling to preserve cookie change subscription order. [bug 320332](https://bugs.webkit.org/show_bug.cgi?id=320332)\n\n### JavaScriptCore\n- Reduced DFG allocation overhead by only allocating `BasicBlock::intersectionOfPastValuesAtHead` for OSR entry targets. [bug 320177](https://bugs.webkit.org/show_bug.cgi?id=320177)\n- Fixed `Iterator.zip` so `GetOptionsObject` and the synthetic underlying iterator use null-prototype objects. [bug 320312](https://bugs.webkit.org/show_bug.cgi?id=320312)\n- Added a missing `U_FAILURE(status)` check for `actualLunisolarMonthLength`. [bug 320313](https://bugs.webkit.org/show_bug.cgi?id=320313)\n- Fixed a JSON stringify regression related to `toJSON` checks. [bug 320437](https://bugs.webkit.org/show_bug.cgi?id=320437)\n\n### Service Workers\n- Fixed disturbed fetch event request bodies so they do not incorrectly fall back to network. [bug 320183](https://bugs.webkit.org/show_bug.cgi?id=320183)\n- Fixed fetch event request body cancellation so it propagates back to the original `ReadableStream`. [bug 320359](https://bugs.webkit.org/show_bug.cgi?id=320359)\n\n### WebKit Misc.\n- Fixed iframe provisional load failure handling to check `willContinueLoading`. [bug 320223](https://bugs.webkit.org/show_bug.cgi?id=320223)\n- Fixed a crash in `NavigateEvent::finish` when the document element is removed inside a navigate handler. [bug 320242](https://bugs.webkit.org/show_bug.cgi?id=320242)\n- Fixed internal watchOS and tvOS build breakage. [bug 320467](https://bugs.webkit.org/show_bug.cgi?id=320467)\n- Re-landed SwiftUI WebKit API SPI exposure for `WebPage` and related types on watchOS and tvOS. [bug 320472](https://bugs.webkit.org/show_bug.cgi?id=320472)\n\n### WebKitGTK\n- Fixed incorrect compositing layer z-ordering in GTK/WPE that caused visible stacking problems. [bug 314883](https://bugs.webkit.org/show_bug.cgi?id=314883)\n\n### WPE WebKit\n- Added a logging fallback for systems where journald is not reachable. [bug 320371](https://bugs.webkit.org/show_bug.cgi?id=320371)\n\n### Web Audio\n- Fixed `AudioParam::finalValue()` returning an uninitialized float when final value calculation bails out. [bug 320375](https://bugs.webkit.org/show_bug.cgi?id=320375)\n\n### Layout and Rendering\n- Fixed grid placement so negative line offsets are applied when constructing unplaced grid items. [bug 320382](https://bugs.webkit.org/show_bug.cgi?id=320382)\n- Consolidated grid min/max-content constraint testing and per-track content contribution handling. [bug 320423](https://bugs.webkit.org/show_bug.cgi?id=320423)\n- Fixed a regression crash in `Layout::sizeTracksToFitNonSpanningItems`. [bug 320450](https://bugs.webkit.org/show_bug.cgi?id=320450)\n- Fixed a regression that prevented backspace from deleting airport text on flights.google.com. [bug 320473](https://bugs.webkit.org/show_bug.cgi?id=320473)\n\n### PDF\n- Fixed the PDF HUD being offset in cross-origin PDF iframes on macOS with site isolation. [bug 320358](https://bugs.webkit.org/show_bug.cgi?id=320358)\n- Added a debug UI for the PDF HUD. [bug 320413](https://bugs.webkit.org/show_bug.cgi?id=320413)\n\n### History\n- Made `BackForwardGoToItem` asynchronous. [bug 320430](https://bugs.webkit.org/show_bug.cgi?id=320430)\n\n### WebKit2\n- Added a URL size limit at the IPC boundary. [bug 320340](https://bugs.webkit.org/show_bug.cgi?id=320340)\n- Fixed speculative load cancellation during stale-while-revalidate timeout handling. [bug 320350](https://bugs.webkit.org/show_bug.cgi?id=320350)\n\n### Web Template Framework\n- Improved string replacement performance by using SIMD-accelerated `find()` rather than a scalar scan. [bug 320155](https://bugs.webkit.org/show_bug.cgi?id=320155)\n\n### bmalloc\n- Added allocation zeroing coverage for evicted and read-faulted backing in libpas tests. [bug 320470](https://bugs.webkit.org/show_bug.cgi?id=320470)\n\n## Resolution other than FIXED\n- WONTFIX: Left fetch spec comment improvements as not worth pursuing. [bug 313620](https://bugs.webkit.org/show_bug.cgi?id=313620)\n- DUPLICATE: Package autoinstall failure for micro version 0 was closed as a duplicate in webkitcorepy. [bug 230540](https://bugs.webkit.org/show_bug.cgi?id=230540)",
  "repo": "webkit",
  "repoDisplay": "WebKit",
  "since": "2026-07-28",
  "totals": {
    "components": 22,
    "contributors": 29,
    "issues": 57
  },
  "until": "2026-07-28"
}