M108 merge issues:
  src/baseline/baseline-compiler.h:
    JumpIfRoot and JumpIfNotRoot aren't present in 108

  src/baseline/baseline-compiler.cc:
    UpdateInterruptBudgetAndJumpToLabel:
    - There's no DCHECK_LT weight check in 108.
    VisitJumpLoop:
    - The UpdateInterruptBudgetAndJumpToLabel call at the end of the block
    doesn't exist in 108

  src/interpreter/interpreter-assembler.h/cc:
    DecreaseInterruptBudget isn't present in 108

  test/mjsunit/mjsunit.status:
    wasm/simd-lane-memory64 and regress/regress-1320641 aren't skipped in
    108

.. since interrupts may trigger code deoptimization, which in turn
invalidates assumptions we've already checked at the beginning of
OnStackReplacement.

This CL disables the stack check as part of the bytecode budget
interrupt, i.e. we don't call stack_guard()->HandleInterrupts()
in Runtime_BytecodeBudgetInterrupt_{Ignition,Sparkplug}.

(cherry picked from commit c2eda65)

Fixed: chromium:1432470,chromium:1442603
Change-Id: I63dc51812741161cfb2f1cdb67c46e269d37f0f6
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4518604
Commit-Queue: Jakob Linke <jgruber@chromium.org>
Cr-Original-Commit-Position: refs/heads/main@{#87590}
No-Try: true
No-Presubmit: true
No-Tree-Checks: true
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/4577218
Reviewed-by: Toon Verwaest <verwaest@chromium.org>
Commit-Queue: Roger Felipe Zanoni da Silva <rzanoni@google.com>
Cr-Commit-Position: refs/branch-heads/10.8@{v8#72}
Cr-Branched-From: f1bc03f-refs/heads/10.8.168@{#1}
Cr-Branched-From: 237de89-refs/heads/main@{#83672}

Change-Id: Id58f21d9aabe406332af09dc6c4a1af2a620631a
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5200228
Bot-Commit: v8-ci-autoroll-builder <v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com>
Cr-Commit-Position: refs/branch-heads/11.4@{v8#72}
Cr-Branched-From: 8a8a1e7-refs/heads/11.4.183@{#1}
Cr-Branched-From: 5483d8e-refs/heads/main@{#87241}

Change-Id: Ib69ec11c358f7b4f509df9afaffa562cdaf371f6
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5892458
Bot-Commit: v8-ci-autoroll-builder <v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com>
Cr-Commit-Position: refs/branch-heads/12.8@{#72}
Cr-Branched-From: 70cbb39-refs/heads/12.8.374@{#1}
Cr-Branched-From: 451b63e-refs/heads/main@{#95151}

If Scavenger interleaves MarkCompact that performs compaction on EPT,
there may be some evacuation entries allocated in the young EPT that
would back-point to the Scavenger's from-space. Add a new phase that
updates all the evacuation entries in the young EPT up until
`start_of_evacation_area`.

(cherry picked from commit 1a2b08e)

Bug: 358485426
Change-Id: Ic23e57ff38279d4e93964cf21ee62eb01ebe8e61
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/5834610
Commit-Queue: Toon Verwaest <verwaest@chromium.org>
Reviewed-by: Igor Sheludko <ishell@chromium.org>
Reviewed-by: Anton Bikineev <bikineev@chromium.org>
Reviewed-by: Toon Verwaest <verwaest@chromium.org>
Cr-Commit-Position: refs/branch-heads/12.6@{#72}
Cr-Branched-From: 3c9fa12-refs/heads/12.6.228@{#2}
Cr-Branched-From: 981bb15-refs/heads/main@{#93835}

…n stability

Bug: 390465670
(cherry picked from commit f920b6b)

Change-Id: I0b430909275e583e5c0ecf2840e143fef461cbad
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/6218882
Reviewed-by: Darius Mercadier <dmercadier@chromium.org>
Commit-Queue: Darius Mercadier <dmercadier@chromium.org>
Auto-Submit: Olivier Flückiger <olivf@chromium.org>
Commit-Queue: Olivier Flückiger <olivf@chromium.org>
Cr-Commit-Position: refs/branch-heads/13.2@{#72}
Cr-Branched-From: 24068c5-refs/heads/13.2.152@{#1}
Cr-Branched-From: 6054ba9-refs/heads/main@{#97085}