- Rebase to webkitgtk 2.52.4. CVE-2025-46299 (uninitialized-memory disclosure via maliciously crafted web content; WebKit bug 299518, fixed upstream in 2.52.0 / WSA-2026-0001) has no isolatable backport -- the bug is security-restricted and the fix ships only within the 2.52.x series. Move webkit2gtk3 onto the 2.52.x security baseline, matching RHEL 9.6 (RHSA-2026:11329) and the almalinux9.2esu sibling. - CVEs still open on this branch that are resolved by this rebase: CVE-2025-46299, CVE-2026-20664, CVE-2026-28857, CVE-2026-28859. - Drop the CVE-2026-* backport patches (Patch100..Patch117); all are fixed upstream in 2.52.x and now provided by the 2.52.4 tarball. - Adopt the 2.52.x packaging/compat patch set (libsoup2, glib-2-68, icu-67, g-ir-scanner-nonfatal, fix-system-malloc-llint-extractor, and the compiler-neutral fix-* source fixes). Build natively with the AlmaLinux 9.6 clang + cmake 3.26.5 toolchain; no gcc-toolset-12 or linked cmake required. - Exclude i686: WebKit 2.52 fails CMake atomic-variable detection on 32-bit x86 (matches almalinux9.2esu).