Submodule src/3rdparty a1ad3cf8..7f01fd53: * [fixup][backport] CVE-2025-6021 * [sbom] Fix SBOM generation for non-git builds * [Backport] CVE-2025-12443: Out of bounds read in WebXR * [Backport] CVE-2025-11756: Use after free in Safe Browsing * [Backport] CVE-2025-11216: Inappropriate implementation in Storage * [Backport] Security bug 435068768 * [Backport] Security bug 440866282 * [Backport] CVE-2025-6965 / Security bug 434161973 * [Backport] Security bug 435225528 * [Backport] Security bug 439058241 * [Backport] Security bug 441427753 * [Backport] CVE-2025-11206: Heap buffer overflow in Video * [fixup][backport] CVE-2025-8582: Insufficient validation of ... * [Backport] CVE-2025-24928 * [Backport] CVE-2025-6021 * [Backport] IWYU modules/desktop_capture and modules/video_capture for PipeWire * [Backport] IWYU modules/video_capture * [Backport] Disable NSAutoFillHeuristicController on macOS 26 * [Backport] CVE-2025-10890: Side-channel information leakage in V8 (2/2) * [Backport] CVE-2025-10890: Side-channel information leakage in V8 (1/2) * [Backport] CVE-2025-10892: Integer overflow in V8 * [Backport] Dependency for CVE-2025-10892 * [Backport] CVE-2025-10891: Integer overflow in V8 * [Backport] Roll src/third_party/ffmpeg/ 01f23648c..dcdd0fa51 (552 commits) * [Backport] CVE-2025-10502: Heap buffer overflow in ANGLE * [Backport] CVE-2025-10501: Use after free in WebRTC * [Backport] CVE-2025-10500: Use after free in Dawn * [Backport] CVE-2025-54874 * [Backport] Security bug 445380761 * [Backport] perfetto: tp: prepend to path when generating tp table headers * ANGLE: Don't hard-code toolchain path for metallib tool Change-Id: Ie3e21c6d91e9238d0a8d144c9617830990cf3c34 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>