deps: update V8 to 14.3

common.gypi

@@ -38,7 +38,7 @@
 
     # Reset this number to 0 on major V8 upgrades.
     # Increment by one for each non-official patch applied to deps/v8.
-    'v8_embedder_string': '-node.9',
+    'v8_embedder_string': '-node.6',
 
     ##### V8 defaults for Node.js #####
 

deps/v8/.clang-format

@@ -3,13 +3,15 @@
 BasedOnStyle: Google
 DerivePointerAlignment: false
 MaxEmptyLinesToKeep: 1
+SpaceBeforeCaseColon: false
 IfMacros:
   - IF
   - IF_NOT
 Macros:
   # Make clang-format think TurboShaft `ELSE` expands to just `else`, so that
   # it formats well alongside `if`
   - ELSE=else
+  - CASE_=case
   - FOR_WITH_HANDLE_SCOPE(isolate, init, loop_var, limit_check, increment)=for(init; loop_var; increment)
   - WHILE_WITH_HANDLE_SCOPE(isolate, limit_check)=while(limit_check)
 StatementMacros:

deps/v8/.gitignore

@@ -26,6 +26,7 @@
 .cache
 .ccls-cache
 .clangd
+.clang-format-cache
 .cpplint-cache
 .cproject
 .DS_Store
@@ -153,6 +154,7 @@ bazel-bin
 bazel-out
 bazel-testlogs
 bazel-v8
+launch.json
 !/third_party/jinja2
 !/third_party/markupsafe
 !/third_party/zlib

deps/v8/AUTHORS

@@ -188,7 +188,9 @@ Kang-Hao (Kenny) Lu <kennyluck@csail.mit.edu>
 Karl Skomski <karl@skomski.com>
 Kasper Lund <kasperl@rivosinc.com>
 Keith Smiley <keithbsmiley@gmail.com>
+Kenta Moriuchi <moriken@kimamass.com>
 Kevin Gibbons <bakkot@gmail.com>
+Kevin Wang <wangpengqiang@bytedance.com>
 Keyhan Vakil <kvakil@googlecontrib.kvakil.me>
 Kris Selden <kris.selden@gmail.com>
 Krishna Ravishankar <krishna.ravi732@gmail.com>
@@ -260,6 +262,7 @@ Refael Ackermann <refack@gmail.com>
 Rene Rebe <rene@exactcode.de>
 Reza Yazdani <ryazdani@futurewei.com>
 Rick Waldron <waldron.rick@gmail.com>
+Riya Amemiya <riyaamemiya@gmail.com>
 Rob Wu <rob@robwu.nl>
 Robert Meijer <robert.s.meijer@gmail.com>
 Robert Mustacchi <rm@fingolfin.org>
@@ -346,3 +349,8 @@ Ryuhei Shima <shimaryuhei@gmail.com>
 Domagoj Stolfa <domagoj.stolfa@gmail.com>
 Zhijin Zeng <zhijin.zeng@spacemit.com>
 王家睿 <wangjiarui79@gmail.com>
+Julian Gremminger <asdfju77@gmail.com>
+Liam Wachter <liam.g.wachter@gmail.com>
+Flavio Toffalini <flavio87@gmail.com>
+Mathias Payer <mathias.payer@gmail.com>
+Christian Wressnegger <intellisec.de@gmail.com>

deps/v8/BUILD.bazel

@@ -2923,6 +2923,7 @@ filegroup(
             "src/maglev/maglev-pipeline-statistics.h",
             "src/maglev/maglev-post-hoc-optimizations-processors.h",
             "src/maglev/maglev-pre-regalloc-codegen-processors.h",
+            "src/maglev/maglev-range-analysis.h",
             "src/maglev/maglev-reducer-inl.h",
             "src/maglev/maglev-reducer.h",
             "src/maglev/maglev-regalloc-data.h",
@@ -3450,6 +3451,7 @@ filegroup(
         "src/compiler/turboshaft/build-graph-phase.h",
         "src/compiler/turboshaft/builtin-call-descriptors.h",
         "src/compiler/turboshaft/builtin-compiler.h",
+        "src/compiler/turboshaft/call-descriptors-util.h",
         "src/compiler/turboshaft/csa-branch-elimination-phase.cc",
         "src/compiler/turboshaft/csa-branch-elimination-phase.h",
         "src/compiler/turboshaft/csa-early-machine-optimization-phase.cc",
@@ -3513,6 +3515,8 @@ filegroup(
         "src/compiler/turboshaft/machine-lowering-phase.h",
         "src/compiler/turboshaft/machine-lowering-reducer-inl.h",
         "src/compiler/turboshaft/turbolev-early-lowering-reducer-inl.h",
+        "src/compiler/turboshaft/turbolev-frontend-pipeline.cc",
+        "src/compiler/turboshaft/turbolev-frontend-pipeline.h",
         "src/compiler/turboshaft/turbolev-graph-builder.cc",
         "src/compiler/turboshaft/turbolev-graph-builder.h",
         "src/compiler/turboshaft/machine-optimization-reducer.h",
@@ -3565,6 +3569,7 @@ filegroup(
         "src/compiler/turboshaft/typer.h",
         "src/compiler/turboshaft/types.cc",
         "src/compiler/turboshaft/types.h",
+        "src/compiler/turboshaft/typeswitch.h",
         "src/compiler/turboshaft/undef-assembler-macros.inc",
         "src/compiler/turboshaft/uniform-reducer-adapter.h",
         "src/compiler/turboshaft/use-map.cc",
@@ -3673,8 +3678,6 @@ filegroup(
             "src/compiler/turboshaft/wasm-shuffle-reducer.h",
             "src/compiler/turboshaft/wasm-simd-phase.cc",
             "src/compiler/turboshaft/wasm-simd-phase.h",
-            "src/compiler/turboshaft/wasm-type-cast-rtt-optimization-helpers.cc",
-            "src/compiler/turboshaft/wasm-type-cast-rtt-optimization-helpers.h",
             "src/compiler/wasm-address-reassociation.cc",
             "src/compiler/wasm-address-reassociation.h",
             "src/compiler/wasm-call-descriptors.cc",
@@ -3734,6 +3737,7 @@ filegroup(
             "src/maglev/maglev-ir.h",
             "src/maglev/maglev-ir-inl.h",
             "src/maglev/maglev-kna-processor.h",
+            "src/maglev/maglev-range-analysis.h",
             "src/maglev/maglev-reducer-inl.h",
             "src/maglev/maglev-reducer.h",
             "src/maglev/maglev-register-frame-array.h",

deps/v8/BUILD.gn

@@ -77,9 +77,6 @@ declare_args() {
   # Sets the number of internal fields on array buffer view objects.
   v8_array_buffer_view_internal_field_count = 0
 
-  # Sets -DENABLE_GDB_JIT_INTERFACE.
-  v8_enable_gdbjit = ""
-
   # Sets -DENABLE_VTUNE_JIT_INTERFACE.
   v8_enable_vtunejit = false
 
@@ -280,9 +277,11 @@ declare_args() {
   # Controls the threshold for on-heap/off-heap Typed Arrays.
   v8_typed_array_max_size_in_heap = 64
 
-  v8_enable_gdbjit = ((v8_current_cpu == "x86" || v8_current_cpu == "x64") &&
-                      (is_linux || is_chromeos || is_mac)) ||
-                     (v8_current_cpu == "ppc64" && (is_linux || is_chromeos))
+  # Sets -DENABLE_GDB_JIT_INTERFACE.
+  v8_enable_gdbjit =
+      is_debug && (((v8_current_cpu == "x86" || v8_current_cpu == "x64") &&
+                    (is_linux || is_chromeos || is_mac)) ||
+                   (v8_current_cpu == "ppc64" && (is_linux || is_chromeos)))
 
   # Check that each header can be included in isolation (requires also
   # setting the "check_v8_header_includes" gclient variable to run a
@@ -494,14 +493,15 @@ declare_args() {
 
 # Derived defaults.
 if (cppgc_enable_verify_heap == "") {
-  cppgc_enable_verify_heap = v8_enable_debugging_features || v8_dcheck_always_on
+  cppgc_enable_verify_heap =
+      v8_enable_verification_features || v8_dcheck_always_on
 }
 if (v8_enable_verify_heap == "") {
-  v8_enable_verify_heap = v8_enable_debugging_features
+  v8_enable_verify_heap = v8_enable_verification_features
 }
 if (v8_enable_verify_write_barriers == "") {
   v8_enable_verify_write_barriers =
-      (v8_enable_debugging_features || v8_dcheck_always_on) &&
+      (v8_enable_verification_features || v8_dcheck_always_on) &&
       !v8_disable_write_barriers
 }
 if (v8_enable_object_print == "") {
@@ -517,18 +517,19 @@ if (v8_enable_trace_maps == "") {
   v8_enable_trace_maps = v8_enable_debugging_features
 }
 if (v8_enable_test_features == "") {
-  v8_enable_test_features = v8_enable_debugging_features || v8_dcheck_always_on
+  v8_enable_test_features =
+      v8_enable_verification_features || v8_dcheck_always_on
 }
 if (v8_enable_v8_checks == "") {
-  v8_enable_v8_checks = v8_enable_debugging_features
+  v8_enable_v8_checks = v8_enable_verification_features
 }
 if (v8_enable_memory_accounting_checks == "") {
   v8_enable_memory_accounting_checks =
-      v8_enable_debugging_features || v8_dcheck_always_on
+      v8_enable_verification_features || v8_dcheck_always_on
 }
 if (v8_enable_heap_snapshot_verify == "") {
   v8_enable_heap_snapshot_verify =
-      v8_enable_debugging_features || v8_dcheck_always_on
+      v8_enable_verification_features || v8_dcheck_always_on
 }
 if (v8_enable_snapshot_code_comments) {
   assert(v8_code_comments == true || v8_code_comments == "",
@@ -538,7 +539,7 @@ if (v8_enable_snapshot_code_comments) {
   v8_code_comments = v8_enable_debugging_features
 }
 if (v8_enable_debug_code == "") {
-  v8_enable_debug_code = v8_enable_debugging_features || v8_dcheck_always_on
+  v8_enable_debug_code = v8_enable_verification_features || v8_dcheck_always_on
 }
 if (v8_enable_snapshot_native_code_counters == "") {
   v8_enable_snapshot_native_code_counters = v8_enable_debugging_features
@@ -651,9 +652,9 @@ assert(!v8_enable_trace_ignition || v8_enable_trace_unoptimized,
 assert(!v8_enable_trace_baseline_exec || v8_enable_trace_unoptimized,
        "Baseline tracing requires unoptimized tracing to be enabled.")
 assert(
-    v8_enable_debugging_features == true || v8_dcheck_always_on ||
+    v8_enable_verification_features == true || v8_dcheck_always_on ||
         !v8_enable_slow_dchecks,
-    "v8_enable_slow_dchecks requires v8_enable_debugging_features or dcheck_always_on.")
+    "v8_enable_slow_dchecks requires v8_enable_verification_features or dcheck_always_on.")
 
 if (v8_enable_short_builtin_calls &&
     (!v8_enable_pointer_compression && v8_current_cpu != "x64")) {
@@ -825,7 +826,7 @@ assert(
 v8_random_seed = "314159265"
 v8_toolset_for_shell = "host"
 
-is_DEBUG_defined = v8_enable_debugging_features || v8_dcheck_always_on
+is_DEBUG_defined = v8_enable_verification_features || v8_dcheck_always_on
 
 ###############################################################################
 # Configurations
@@ -1264,7 +1265,7 @@ config("features") {
   }
   if (v8_enable_debug_code) {
     defines += [ "V8_ENABLE_DEBUG_CODE" ]
-    if (v8_enable_debugging_features) {
+    if (v8_enable_verification_features) {
       defines += [ "V8_ENABLE_SLOW_DEBUG_CODE_BY_DEFAULT" ]
     }
   }
@@ -1646,7 +1647,7 @@ config("toolchain") {
   # TODO(infra): Support v8_enable_prof on Windows.
   # TODO(infra): Add support for compiling with simulators.
 
-  if (v8_enable_debugging_features || v8_dcheck_always_on) {
+  if (v8_enable_verification_features || v8_dcheck_always_on) {
     defines += [ "DEBUG" ]
     if (v8_enable_slow_dchecks) {
       defines += [ "ENABLE_SLOW_DCHECKS" ]
@@ -2696,7 +2697,7 @@ template("run_mksnapshot") {
         args += [ "--no-turbo-rewrite-far-jumps" ]
       }
 
-      if (v8_enable_debugging_features && v8_enable_slow_dchecks) {
+      if (v8_enable_verification_features && v8_enable_slow_dchecks) {
         # mksnapshot only accepts this flag if ENABLE_SLOW_DCHECKS is defined.
         args += [ "--no-enable-slow-asserts" ]
       }
@@ -2830,7 +2831,7 @@ if (v8_verify_builtins_compatibility) {
 action("v8_dump_build_config") {
   script = "tools/testrunner/utils/dump_build_config.py"
   outputs = [ "$root_out_dir/v8_build_config.json" ]
-  is_full_debug = v8_enable_debugging_features && !v8_optimized_debug
+  is_full_debug = v8_enable_verification_features && !v8_optimized_debug
 
   arch = v8_target_cpu
   if (v8_target_cpu == "x86") {
@@ -2915,6 +2916,7 @@ action("v8_dump_build_config") {
     "v8_cfi=$v8_control_flow_integrity",
     "v8_current_cpu=\"$v8_current_cpu\"",
     "v8_target_cpu=\"$v8_target_cpu\"",
+    "verification_features=$v8_enable_verification_features",
     "verify_csa=$v8_enable_verify_csa",
     "verify_heap=$v8_enable_verify_heap",
     "verify_predictable=$v8_enable_verify_predictable",
@@ -3663,6 +3665,7 @@ v8_header_set("v8_internal_headers") {
     "src/compiler/turboshaft/branch-elimination-reducer.h",
     "src/compiler/turboshaft/build-graph-phase.h",
     "src/compiler/turboshaft/builtin-call-descriptors.h",
+    "src/compiler/turboshaft/call-descriptors-util.h",
     "src/compiler/turboshaft/code-elimination-and-simplification-phase.h",
     "src/compiler/turboshaft/copying-phase.h",
     "src/compiler/turboshaft/csa-branch-elimination-phase.h",
@@ -3730,6 +3733,7 @@ v8_header_set("v8_internal_headers") {
     "src/compiler/turboshaft/string-view.h",
     "src/compiler/turboshaft/tracing.h",
     "src/compiler/turboshaft/turbolev-early-lowering-reducer-inl.h",
+    "src/compiler/turboshaft/turbolev-frontend-pipeline.h",
     "src/compiler/turboshaft/turbolev-graph-builder.h",
     "src/compiler/turboshaft/type-assertions-phase.h",
     "src/compiler/turboshaft/type-inference-analysis.h",
@@ -3739,6 +3743,7 @@ v8_header_set("v8_internal_headers") {
     "src/compiler/turboshaft/typed-optimizations-reducer.h",
     "src/compiler/turboshaft/typer.h",
     "src/compiler/turboshaft/types.h",
+    "src/compiler/turboshaft/typeswitch.h",
     "src/compiler/turboshaft/undef-assembler-macros.inc",
     "src/compiler/turboshaft/uniform-reducer-adapter.h",
     "src/compiler/turboshaft/use-map.h",
@@ -4562,7 +4567,6 @@ v8_header_set("v8_internal_headers") {
       "src/compiler/turboshaft/wasm-shuffle-reducer.h",
       "src/compiler/turboshaft/wasm-simd-phase.h",
       "src/compiler/turboshaft/wasm-turboshaft-compiler.h",
-      "src/compiler/turboshaft/wasm-type-cast-rtt-optimization-helpers.h",
       "src/compiler/wasm-address-reassociation.h",
       "src/compiler/wasm-call-descriptors.h",
       "src/compiler/wasm-compiler-definitions.h",
@@ -5259,6 +5263,7 @@ v8_compiler_sources = [
   "src/compiler/turboshaft/simplify-tf-loops.cc",
   "src/compiler/turboshaft/store-store-elimination-phase.cc",
   "src/compiler/turboshaft/string-escape-analysis-reducer.cc",
+  "src/compiler/turboshaft/turbolev-frontend-pipeline.cc",
   "src/compiler/turboshaft/turbolev-graph-builder.cc",
   "src/compiler/turboshaft/type-assertions-phase.cc",
   "src/compiler/turboshaft/type-parser.cc",
@@ -5385,7 +5390,6 @@ if (v8_enable_webassembly) {
     "src/compiler/turboshaft/wasm-shuffle-reducer.cc",
     "src/compiler/turboshaft/wasm-simd-phase.cc",
     "src/compiler/turboshaft/wasm-turboshaft-compiler.cc",
-    "src/compiler/turboshaft/wasm-type-cast-rtt-optimization-helpers.cc",
     "src/compiler/wasm-address-reassociation.cc",
     "src/compiler/wasm-call-descriptors.cc",
     "src/compiler/wasm-compiler.cc",