Bump WebKit to autobuild-preview-pr-185-309b1951

[Jarred-Sumner]

Tests oven-sh/WebKit#185 — libpas on Windows now releases the TLC commit charge during scavenge and hardens VirtualQuery.

[robobun]

^{Updated 11:05 PM PT - Apr 17th, 2026}

❌ @Jarred-Sumner, your commit 9e106cf has 84 failures in Build #46145 (All Failures):

• test/js/node/worker_threads/worker_destruction.test.ts - core dumped on 🐧 3.23 x64
• test/regression/issue/26298.test.ts - pid 1592 segmentation fault on 🪟 11 aarch64
• test/v8/v8.test.ts - pid 5696 segmentation fault on 🪟 2019 x64
• test/v8/v8.test.ts - pid 5452 segmentation fault on 🪟 2019 x64-baseline
• test/v8/v8.test.ts - pid 6928 segmentation fault on 🪟 11 aarch64
• test/regression/issue/compile-outfile-subdirs.test.ts - pid 588 segmentation fault on 🪟 2019 x64
• test/regression/issue/compile-outfile-subdirs.test.ts - pid 5248 segmentation fault on 🪟 2019 x64-baseline
• test/napi/napi-value-ffi.test.ts - pid 2828 segmentation fault on 🪟 2019 x64-baseline
• test/napi/napi-value-ffi.test.ts - pid 2528 segmentation fault on 🪟 2019 x64
• test/napi/node-napi-tests/test/js-native-api/test_instance_data/do.test.ts - pid 2384 segmentation fault on 🪟 2019 x64-baseline
• test/napi/node-napi-tests/test/js-native-api/test_dataview/do.test.ts - pid 3952 segmentation fault on 🪟 2019 x64-baseline
• test/napi/node-napi-tests/test/js-native-api/test_handle_scope/do.test.ts - pid 5412 segmentation fault on 🪟 2019 x64
• test/napi/node-napi-tests/test/js-native-api/test_handle_scope/do.test.ts - pid 2720 segmentation fault on 🪟 2019 x64-baseline
• test/napi/node-napi-tests/test/js-native-api/test_error/do.test.ts - pid 2112 segmentation fault on 🪟 11 aarch64
• test/napi/node-napi-tests/test/js-native-api/3_callbacks/do.test.ts - pid 8004 segmentation fault on 🪟 11 aarch64
• test/napi/node-napi-tests/test/js-native-api/test_conversions/do.test.ts - pid 3660 segmentation fault on 🪟 2019 x64
• test/napi/node-napi-tests/test/js-native-api/test_conversions/do.test.ts - pid 5436 segmentation fault on 🪟 2019 x64-baseline
• test/napi/node-napi-tests/test/js-native-api/8_passing_wrapped/do.test.ts - pid 3048 segmentation fault on 🪟 11 aarch64
• test/napi/node-napi-tests/test/js-native-api/5_function_factory/do.test.ts - pid 6140 segmentation fault on 🪟 2019 x64
• test/napi/node-napi-tests/test/js-native-api/5_function_factory/do.test.ts - pid 6092 segmentation fault on 🪟 2019 x64-baseline
• test/js/web/fetch/fetch.test.ts - pid 1416 segmentation fault on 🪟 11 aarch64
• test/js/web/fetch/fetch.test.ts - pid 4736 segmentation fault on 🪟 2019 x64
• test/regression/issue/8254.test.ts - pid 2692 segmentation fault on 🪟 2019 x64
• test/regression/issue/8254.test.ts - pid 1364 segmentation fault on 🪟 2019 x64-baseline
• test/js/third_party/grpc-js/test-tonic.test.ts - pid 4892 segmentation fault on 🪟 2019 x64-baseline
• test/js/third_party/grpc-js/test-tonic.test.ts - pid 2316 segmentation fault on 🪟 2019 x64
• test/js/web/timers/setInterval.test.js - pid 2272 segmentation fault on 🪟 2019 x64
• test/js/web/timers/setInterval.test.js - pid 4064 segmentation fault on 🪟 11 aarch64
• test/js/web/timers/setInterval.test.js - pid 2860 segmentation fault on 🪟 2019 x64-baseline
• test/js/web/request/request-clone-leak.test.ts - pid 5108 segmentation fault on 🪟 2019 x64
• test/js/web/request/request-clone-leak.test.ts - pid 5348 segmentation fault on 🪟 11 aarch64
• test/js/web/request/request-clone-leak.test.ts - pid 808 segmentation fault on 🪟 2019 x64-baseline
• test/napi/node-napi-tests/test/js-native-api/test_new_target/do.test.ts - pid 5452 segmentation fault on 🪟 2019 x64
• test/napi/node-napi-tests/test/js-native-api/test_new_target/do.test.ts - pid 5512 segmentation fault on 🪟 2019 x64-baseline
• test/js/node/fs/abort-signal-leak-read-write-file.test.ts - pid 3136 segmentation fault on 🪟 11 aarch64
• test/napi/node-napi-tests/test/js-native-api/test_date/do.test.ts - pid 4328 segmentation fault on 🪟 2019 x64
• test/napi/node-napi-tests/test/js-native-api/test_date/do.test.ts - pid 1056 segmentation fault on 🪟 2019 x64-baseline
• test/napi/node-napi-tests/test/js-native-api/7_factory_wrap/do.test.ts - pid 5924 segmentation fault on 🪟 2019 x64
• test/napi/node-napi-tests/test/js-native-api/7_factory_wrap/do.test.ts - pid 4596 segmentation fault on 🪟 2019 x64-baseline
• test/napi/node-napi-tests/test/js-native-api/7_factory_wrap/do.test.ts - pid 6252 segmentation fault on 🪟 11 aarch64
• test/js/third_party/prisma/prisma.test.ts - pid 5872 segmentation fault on 🪟 2019 x64-baseline
• test/js/third_party/prisma/prisma.test.ts - pid 1296 segmentation fault on 🪟 11 aarch64
• test/js/node/http2/node-http2.test.js - pid 4996 segmentation fault on 🪟 2019 x64-baseline
• test/js/node/http2/node-http2.test.js - pid 2880 segmentation fault on 🪟 11 aarch64
• test/js/node/fs/fs.test.ts - pid 4340 segmentation fault on 🪟 2019 x64-baseline
• test/js/node/fs/fs.test.ts - pid 4544 segmentation fault on 🪟 2019 x64
• test/js/node/fs/fs.test.ts - pid 3632 segmentation fault on 🪟 11 aarch64
• test/napi/node-napi-tests/test/js-native-api/6_object_wrap/do.test.ts - pid 3692 segmentation fault on 🪟 2019 x64
• test/napi/node-napi-tests/test/js-native-api/6_object_wrap/do.test.ts - pid 5116 segmentation fault on 🪟 2019 x64-baseline
• test/napi/node-napi-tests/test/js-native-api/6_object_wrap/do.test.ts - pid 3464 segmentation fault on 🪟 11 aarch64
• test/js/web/fetch/body-stream.test.ts - pid 5728 segmentation fault on 🪟 2019 x64
• test/js/web/fetch/body-stream.test.ts - pid 2416 segmentation fault on 🪟 2019 x64-baseline
• test/js/web/fetch/body-stream.test.ts - pid 7036 segmentation fault on 🪟 11 aarch64
• test/napi/node-napi-tests/test/js-native-api/test_bigint/do.test.ts - pid 2600 segmentation fault on 🪟 2019 x64
• test/js/bun/s3/s3.leak.test.ts - pid 7440 segmentation fault on 🪟 11 aarch64
• test/js/web/fetch/fetch-tcp-stress.test.ts - pid 7028 segmentation fault on 🪟 2019 x64
• test/js/web/fetch/fetch-tcp-stress.test.ts - pid 1168 segmentation fault on 🪟 2019 x64-baseline
• test/js/web/fetch/fetch-tcp-stress.test.ts - pid 6428 segmentation fault on 🪟 11 aarch64
• test/js/web/fetch/fetch-leak.test.ts - pid 5832 segmentation fault on 🪟 2019 x64
• test/js/web/fetch/fetch-leak.test.ts - pid 6204 segmentation fault on 🪟 2019 x64-baseline
• test/js/web/fetch/fetch-leak.test.ts - pid 2452 segmentation fault on 🪟 11 aarch64
• test/napi/node-napi-tests/test/js-native-api/2_function_arguments/do.test.ts - pid 2080 segmentation fault on 🪟 2019 x64
• test/napi/node-napi-tests/test/js-native-api/2_function_arguments/do.test.ts - pid 688 segmentation fault on 🪟 2019 x64-baseline
• test/napi/napi.test.ts - pid 3636 segmentation fault on 🪟 2019 x64
• test/napi/napi.test.ts - pid 5268 segmentation fault on 🪟 2019 x64-baseline
• test/napi/napi.test.ts - pid 6184 segmentation fault on 🪟 11 aarch64
• test/js/bun/http/tls-keepalive.test.ts - pid 5628 segmentation fault on 🪟 11 aarch64
• test/js/third_party/body-parser/express-memory-leak.test.ts - pid 5704 segmentation fault on 🪟 2019 x64
• test/js/third_party/body-parser/express-memory-leak.test.ts - pid 5232 segmentation fault on 🪟 2019 x64-baseline
• test/js/third_party/body-parser/express-memory-leak.test.ts - pid 1168 segmentation fault on 🪟 11 aarch64
• test/js/bun/util/bun-cryptohasher.test.ts - pid 616 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/util/bun-cryptohasher.test.ts - pid 1816 segmentation fault on 🪟 2019 x64
• test/js/bun/util/bun-cryptohasher.test.ts - pid 4208 segmentation fault on 🪟 11 aarch64
• test/js/bun/glob/leak.test.ts - pid 4144 segmentation fault on 🪟 11 aarch64
• test/js/node/zlib/leak.test.ts - pid 2444 segmentation fault on 🪟 2019 x64
• test/js/node/zlib/leak.test.ts - pid 3464 segmentation fault on 🪟 2019 x64-baseline
• test/js/node/zlib/leak.test.ts - pid 6332 segmentation fault on 🪟 11 aarch64
• test/js/bun/spawn/spawn-noread-leak.test.ts - pid 3968 segmentation fault on 🪟 11 aarch64
• test/js/bun/import-attributes/import-attributes.test.ts - pid 1348 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/http/fetch-abort-ssl-context-eviction.test.ts - pid 5304 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/http/fetch-abort-ssl-context-eviction.test.ts - pid 2020 segmentation fault on 🪟 2019 x64
• test/js/bun/http/fetch-abort-ssl-context-eviction.test.ts - pid 4200 segmentation fault on 🪟 11 aarch64
• test/cli/install/overrides.test.ts - pid 4736 segmentation fault on 🪟 11 aarch64
• test/js/bun/cron/in-process-cron.test.ts - pid 5928 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/cron/in-process-cron.test.ts - pid 6648 segmentation fault on 🪟 11 aarch64
• test/js/node/process/dlopen-duplicate-load.test.ts - pid 3680 segmentation fault on 🪟 2019 x64
• test/js/node/process/dlopen-duplicate-load.test.ts - pid 600 segmentation fault on 🪟 2019 x64-baseline
• test/js/node/process/dlopen-duplicate-load.test.ts - pid 6280 segmentation fault on 🪟 11 aarch64
• test/cli/install/bun-upgrade.test.ts - pid 5720 segmentation fault on 🪟 11 aarch64
• test/js/bun/crypto/wpt-webcrypto.generateKey.test.ts - pid 3952 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/crypto/wpt-webcrypto.generateKey.test.ts - pid 904 segmentation fault on 🪟 2019 x64
• test/js/bun/crypto/wpt-webcrypto.generateKey.test.ts - pid 6660 segmentation fault on 🪟 11 aarch64
• test/cli/install/bun-pm-scan.test.ts - pid 5400 segmentation fault on 🪟 11 aarch64
• test/integration/vite-build/vite-build.test.ts - pid 1224 segmentation fault on 🪟 2019 x64-baseline
• test/integration/vite-build/vite-build.test.ts - pid 3916 segmentation fault on 🪟 2019 x64
• test/integration/vite-build/vite-build.test.ts - pid 7828 segmentation fault on 🪟 11 aarch64
• test/cli/install/bun-patch.test.ts - pid 4124 segmentation fault on 🪟 11 aarch64
• test/cli/install/migration/complex-workspace.test.ts - pid 3120 segmentation fault on 🪟 11 aarch64
• test/js/node/process/dlopen-non-object-exports.test.ts - pid 3308 segmentation fault on 🪟 2019 x64
• test/js/node/process/dlopen-non-object-exports.test.ts - pid 5132 segmentation fault on 🪟 2019 x64-baseline
• test/js/node/process/dlopen-non-object-exports.test.ts - pid 8432 segmentation fault on 🪟 11 aarch64
• test/js/bun/util/v8-heap-snapshot.test.ts - pid 460 segmentation fault on 🪟 2019 x64
• test/js/bun/util/v8-heap-snapshot.test.ts - pid 3576 segmentation fault on 🪟 2019 x64-baseline
• test/integration/bun-types/bun-types.test.ts - pid 4724 segmentation fault on 🪟 2019 x64
• test/integration/bun-types/bun-types.test.ts - pid 1452 segmentation fault on 🪟 2019 x64-baseline
• test/integration/bun-types/bun-types.test.ts - pid 6680 segmentation fault on 🪟 11 aarch64
• test/integration/next-pages/test/next-build.test.ts - pid 3984 segmentation fault on 🪟 2019 x64-baseline
• test/integration/next-pages/test/next-build.test.ts - pid 3608 segmentation fault on 🪟 2019 x64
• test/integration/next-pages/test/next-build.test.ts - pid 3172 segmentation fault on 🪟 11 aarch64
• test/js/bun/util/fuzzy-wuzzy.test.ts - pid 2212 segmentation fault on 🪟 2019 x64
• test/js/bun/util/fuzzy-wuzzy.test.ts - pid 1264 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/util/fuzzy-wuzzy.test.ts - pid 1592 segmentation fault on 🪟 11 aarch64
• test/js/bun/typescript/type-export.test.ts - pid 5480 segmentation fault on 🪟 2019 x64
• test/js/bun/typescript/type-export.test.ts - pid 3188 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/typescript/type-export.test.ts - pid 6576 segmentation fault on 🪟 11 aarch64
• test/integration/next-pages/test/dev-server.test.ts - pid 2192 segmentation fault on 🪟 2019 x64-baseline
• test/integration/next-pages/test/dev-server.test.ts - pid 7392 segmentation fault on 🪟 11 aarch64
• test/js/bun/spawn/spawn.test.ts - pid 6624 segmentation fault on 🪟 2019 x64
• test/js/bun/spawn/spawn.test.ts - pid 6980 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/spawn/spawn.test.ts - pid 4580 segmentation fault on 🪟 11 aarch64
• test/cli/run/require-cache.test.ts - pid 5648 segmentation fault on 🪟 2019 x64
• test/cli/run/require-cache.test.ts - pid 2108 segmentation fault at address 0x2190fef811a on 🪟 2019 x64-baseline
• test/cli/run/require-cache.test.ts - pid 7892 segmentation fault on 🪟 11 aarch64
• test/js/bun/s3/s3.test.ts - pid 3148 segmentation fault on 🪟 2019 x64
• test/js/node/net/handle-leak.test.ts - pid 6172 segmentation fault on 🪟 2019 x64
• test/js/node/net/handle-leak.test.ts - pid 5620 segmentation fault on 🪟 2019 x64-baseline
• test/js/node/net/handle-leak.test.ts - pid 3336 segmentation fault on 🪟 11 aarch64
• test/js/bun/shell/leak.test.ts - pid 5796 segmentation fault on 🪟 2019 x64
• test/js/bun/shell/leak.test.ts - pid 5852 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/shell/leak.test.ts - pid 3160 segmentation fault on 🪟 11 aarch64
• test/cli/install/bunx.test.ts - pid 5036 segmentation fault on 🪟 2019 x64-baseline
• test/cli/install/bunx.test.ts - pid 1836 segmentation fault on 🪟 2019 x64
• test/cli/install/bunx.test.ts - pid 2632 segmentation fault on 🪟 11 aarch64
• test/js/bun/http/serve.test.ts - pid 708 segmentation fault on 🪟 2019 x64
• test/js/bun/http/serve.test.ts - pid 4616 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/http/serve.test.ts - pid 4692 segmentation fault on 🪟 11 aarch64
• test/cli/install/bun-install-lifecycle-scripts.test.ts - pid 1220 segmentation fault on 🪟 2019 x64
• test/cli/install/bun-install-lifecycle-scripts.test.ts - pid 5440 segmentation fault on 🪟 2019 x64-baseline
• test/cli/install/bun-install-lifecycle-scripts.test.ts - pid 3520 segmentation fault on 🪟 11 aarch64
• test/bundler/bun-build-compile-sourcemap.test.ts - pid 7584 segmentation fault on 🪟 11 aarch64
• test/js/bun/http/proxy.test.ts - pid 2236 segmentation fault on 🪟 2019 x64
• test/js/bun/http/proxy.test.ts - pid 5920 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/http/proxy.test.ts - pid 5360 segmentation fault on 🪟 11 aarch64
• test/integration/expo-app/expo.test.ts - pid 932 segmentation fault on 🪟 2019 x64
• test/integration/expo-app/expo.test.ts - pid 5640 segmentation fault on 🪟 2019 x64-baseline
• test/integration/expo-app/expo.test.ts - pid 2032 segmentation fault on 🪟 11 aarch64
• test/cli/init/init.test.ts - pid 4000 segmentation fault on 🪟 2019 x64
• test/js/bun/glob/scan.test.ts - pid 4908 segmentation fault on 🪟 2019 x64
• test/js/bun/glob/scan.test.ts - pid 3172 segmentation fault on 🪟 2019 x64-baseline
• test/js/bun/glob/scan.test.ts - pid 8060 segmentation fault on 🪟 11 aarch64
• test/integration/next-pages/test/dev-server-ssr-100.test.ts - pid 4336 segmentation fault on 🪟 2019 x64
• test/integration/next-pages/test/dev-server-ssr-100.test.ts - pid 6308 segmentation fault on 🪟 2019 x64-baseline
• test/integration/next-pages/test/dev-server-ssr-100.test.ts - pid 6508 segmentation fault on 🪟 11 aarch64
• test/bake/dev/react-spa.test.ts - pid 6060 segmentation fault on 🪟 2019 x64-baseline
• test/bake/dev/react-spa.test.ts - pid 2824 segmentation fault on 🪟 2019 x64
• test/bake/dev/react-spa.test.ts - pid 2044 segmentation fault on 🪟 11 aarch64
• test/bake/dev/ssg-pages-router.test.ts - pid 6112 segmentation fault on 🪟 2019 x64
• test/bake/dev/ssg-pages-router.test.ts - pid 4516 segmentation fault on 🪟 2019 x64-baseline
• test/bake/dev/ssg-pages-router.test.ts - pid 8044 segmentation fault on 🪟 11 aarch64
• test/bake/dev/hot.test.ts - pid 3160 segmentation fault on 🪟 2019 x64-baseline
• test/bake/dev/hot.test.ts - pid 4764 segmentation fault on 🪟 2019 x64
• test/bake/dev/hot.test.ts - pid 5660 segmentation fault on 🪟 11 aarch64
• test/cli/install/bun-install-registry.test.ts - pid 5932 segmentation fault on 🪟 2019 x64
• test/cli/install/bun-install-registry.test.ts - pid 4904 segmentation fault on 🪟 2019 x64-baseline
• test/cli/install/bun-install-registry.test.ts - pid 5308 segmentation fault on 🪟 11 aarch64
• test/cli/run/multi-run.test.ts - pid 692 segmentation fault on 🪟 2019 x64
• test/cli/run/multi-run.test.ts - pid 3608 segmentation fault on 🪟 2019 x64-baseline
• test/cli/run/multi-run.test.ts - pid 5340 segmentation fault on 🪟 11 aarch64
• test/bake/dev/css.test.ts - pid 4148 segmentation fault on 🪟 2019 x64
• test/bake/dev/css.test.ts - pid 4600 segmentation fault on 🪟 2019 x64-baseline
• test/bake/dev/css.test.ts - pid 4048 segmentation fault on 🪟 11 aarch64
• test/cli/install/bun-install-security-provider.test.ts - pid 3836 segmentation fault on 🪟 2019 x64
• test/cli/install/bun-install-security-provider.test.ts - pid 4864 segmentation fault on 🪟 2019 x64-baseline
• test/cli/install/bun-install-security-provider.test.ts - pid 7272 segmentation fault on 🪟 11 aarch64

---

🧪   To try this PR locally:

bunx bun-pr 29421

That installs a local version of the PR into your bun-29421 executable, so you can run:

bun-29421 --bun

[github-actions]

Found 6 issues this PR may fix:

1. Blob allocations cause excessive memory, and GC does not release all memory / Windows 10 / Blob,Uint8Array,ArrayBuffer #20544 - GC does not release all memory on Windows 10 with Blob/Uint8Array/ArrayBuffer — directly matches libpas TLC commit charge not being released during scavenge
2. It takes up a lot of memory resources on Windows 10. #14852 - Excessive memory resource usage on Windows 10 — consistent with libpas thread-local caches not returning committed memory to the OS
3. Bun 1.3.11 (integrated in Claude Code) on Windows x64 OOM crash #28174 - OOM crash on Windows x64 (Bun 1.3.11 in Claude Code) — could result from libpas failing to reclaim memory during scavenging
4. Segfault after ~24h idle on Windows 11 with sleep/wake cycles #28175 - Segfault after ~24h idle on Windows 11 with sleep/wake cycles — idle periods are exactly when scavenging should reclaim TLC memory
5. Segfault (null pointer at 0x0) in long-running standalone executable on Windows after sustained memory pressure #26862 - Segfault in long-running standalone executable on Windows after sustained memory pressure — consistent with libpas VirtualQuery or TLC memory mismanagement
6. Bun v1.3.10 crashes with segmentation fault on Windows 10 x64 #27414 - Segmentation fault on Windows 10 x64 (Bun v1.3.10) — plausibly caused by VirtualQuery hardening issue or libpas memory mismanagement

If this is helpful, copy the block below into the PR description to auto-close these issues on merge.

Fixes #20544
Fixes #14852
Fixes #28174
Fixes #28175
Fixes #26862
Fixes #27414

🤖 Generated with Claude Code

[Jarred-Sumner]

All Windows targets segfault in bake/dev/html.test.ts and bake/dev-and-prod.test.ts (x64, x64-baseline, aarch64). Crash happens during bake dev server HMR after a few reloads — consistent with the libpas TLC scavenge change in oven-sh/WebKit#185 freeing or decommitting memory the dev server still references.

panic(thread 1768): Segmentation fault at address 0x1D61B803032
https://bun.report/1.3.13/wt29e106cfiGykogigDos/8wC2i28wC26q4xCmk9g2DCYKERNEL32.DLLos9FCSntdll.dllis0WA2sdkj4gwb

Non-Windows targets unaffected.

[robobun]

Closing as superseded. This draft existed to run CI on the oven-sh/WebKit#185 preview build, and that run segfaulted on every Windows target (comment above). The fork's main line has since resolved each of the three parts of oven-sh/WebKit#185 another way, and all of it is in main's current pin, 7b763944 (#37525):

• TLC commit charge: oven-sh/WebKit@9dc26d0df953 (2026-04-29) deliberately keeps the TLC allocator pages on asymmetric decommit, because the allocation fast path writes into them before checking whether they are committed; a real MEM_DECOMMIT is the fault the preview build hit.
• VirtualQuery hardening: upstream's libpas Windows cleanup (oven-sh/WebKit@0e74ad95db8e, merged into the fork on 2026-04-28) routes those calls through a checked virtual_query_checked() helper.
• StructureAlignedMemoryAllocator commit on Windows: removed upstream in https://bugs.webkit.org/show_bug.cgi?id=314272 (oven-sh/WebKit@b88796d4c16f).

oven-sh/WebKit#185 itself is still open on the fork side.