Changes in version 128.0.6613.99.0:

• update to Chromium 128.0.6613.99
• backport upstream implementation of enforcing blob URL partitioning
• enforce dynamic code execution restrictions with seccomp-bpf when JIT is disabled (prevent creating executable anonymous mappings, writable and executable file mappings or marking a non-executable mapping executable)
• explicitly declare queries to Vanadium Config package for both the WebView and browser

A full list of changes from the previous release (version 128.0.6613.88.1) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn’t yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won’t be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.