feat(chromium): roll to Chromium 91.0.4469.0 (r869685)

[sadym-chromium]

• Roll to Chromium 91.0.4469.0 (r869685).
• Update CONTRIBUTING.md.

[lizhucheng]

why used Canary chromium version

[lostsource]

Doesn't look like this contains patch(s) for CVE-2021-21224 right?

• https://chromium-review.googlesource.com/c/v8/v8/+/2820971
• https://chromium-review.googlesource.com/c/v8/v8/+/2826114

http://crrev.com/869685 returns a commit from Apr 06 , while patches where submitted Apr 12 / 14

[sadym-chromium]

The release was cut a day before promoting 91 to Beta. It's still pointing to the latest build available for all 4 platforms (linux, mac, win32, win64).

You are right, the mentioned commits are not included in this version of Chrome.

Please justify the need of cutting another minor version including above commits.

[lostsource]

Well there are multiple use cases for Puppeteer, some of which might be running on public servers which are now susceptible to this attack.

Was trying to figure out which minor version from 91.x.x contains those fixes via omahaproxy but I got lost in the process.. 🤦‍♂️

[sadym-chromium]

Thanks for the heads-up! I will cut the new minor version once the corresponding build is available.

[sadym-chromium]

Heads-up: there is still no newer builds available. 869685 is the latest.