Sync S10: merge upstream PDFium up to 59ea54cce (Oct 11 2026).

DEPS

@@ -130,7 +130,7 @@ vars = {
   # Three lines of non-changing comments so that
   # the commit queue can handle CLs rolling depot_tools
   # and whatever else without interference from each other.
-  'depot_tools_revision': '36a8df4ad006eaa0572fb446edb8145fe5403592',
+  'depot_tools_revision': 'a03dfbf7f2d1cefa2795d81d59ca4f16c8616a8f',
   # Three lines of non-changing comments so that
   # the commit queue can handle CLs rolling dragonbox
   # and whatever else without interference from each other.
@@ -260,7 +260,7 @@ vars = {
   # Three lines of non-changing comments so that
   # the commit queue can handle CLs rolling tools_memory
   # and whatever else without interference from each other.
-  'tools_memory_revision': '0732f7097d066a81e673f90862994f76886fc638',
+  'tools_memory_revision': '3d4610fc0dd49053c0395bc2825dfc6ac72ab64e',
   # Three lines of non-changing comments so that
   # the commit queue can handle CLs rolling tools_rust
   # and whatever else without interference from each other.

docs/embedpdf/syncs/2026-10-13-59ea54cce.md

@@ -0,0 +1,56 @@
+# Sync 2026-10-13: upstream 06fbf69b3..59ea54cce (2 commits)
+
+## Summary
+
+Upstream from 2026-10-11 to 2026-10-11, merged into `2f0380385`.
+
+Two dependency rolls: `third_party/depot_tools` and `tools/memory`, neither of them compiled into
+the library. The first sync at the start of a release (upstream-sync plan §7.5): the target is the
+newest upstream commit at least a day old, which today leaves out the 10 code commits upstream
+landed on Oct 12 (they are under a day old). Nothing to resolve.
+
+## Likely security fixes
+
+None.
+
+## Conflicts (0 files, 0 blocks)
+
+None.
+
+## Write audit (0 lines)
+
+None.
+
+## Upstream appearance generator
+
+None.
+
+## Globals
+
+None by the heuristic. `check-globals.py` on the darwin-arm64 release build: ok.
+
+## Build and patches
+
+- `DEPS` changed in 2 commits: `depot_tools_revision` and `tools_memory_revision`; synced with
+  `gclient sync --no-history --shallow`.
+- `build/` is S9's, so every target's patches apply as in S9; darwin-arm64 applied and built.
+
+## API diff
+
+None. The darwin-arm64 exports are S9's.
+
+## Tests
+
+- [x] fork unit + embedder tests (darwin-arm64): 1270 unit tests pass; embedder 1610 tests, the
+  failures are S9's 80. Linux runs in the PR's CI.
+- [x] layer mode: exit 0; 203 layer-only failures, all expected, as S9. Writers unchanged.
+- [x] tag check (`--base 59ea54cce`): 964 blocks, 0 untagged.
+- [x] globals check: ok.
+- [ ] wasm build: in the PR's CI (no compiled source changed).
+- [ ] ThreadSanitizer soak: in the PR's CI.
+- [ ] engine tests and engine-conformance: not run; no compiled source changed since S9's run.
+- changed expectations: none.
+
+## Ledger changes proposed
+
+None.