[WebGPU] Upgrade Dawn to the latest

[May Mei (mei1127)]

Description
This patch updates Dawn to the latest version.

Motivation and Context
D3D12 XMX support for ORT-EP-WebGPU Python wheels will be added in another patch after the upgrade of Dawn.

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[May Mei (mei1127)]

/run bots

[May Mei (mei1127)]

PTAL, thanks! Jiajia Qin (@qjia7) Jie Chen (@jchen10)

[Copilot]

🟡 Changes recommended

Update the governance manifest, correct the malformed patch hunk, and resolve the Windows DXIL packaging dependency.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

Upgrades the bundled Dawn dependency for WebGPU and removes obsolete dxil.dll staging.

Changes:

• Pins Dawn to v20260916.214021.
• Refreshes the Dawn BinSkim patch.
• Removes DXIL packaging from Windows Python, Node.js, Java, and WebGPU builds.

File summaries

File	Summary
cmake/deps.txt	Updates the Dawn archive and hash; the governance manifest also requires updating.
cmake/patches/dawn/dawn_binskim.patch	Refreshes the BinSkim patch, but its hunk header is malformed.
cmake/onnxruntime_providers_webgpu.cmake	Removes DXIL staging while downstream Windows packaging still expects the DLL.
cmake/onnxruntime_python.cmake	Removes obsolete DXIL packaging.
cmake/onnxruntime_nodejs.cmake	Removes obsolete Node.js DXIL packaging.
cmake/onnxruntime_java.cmake	Removes obsolete Java DXIL packaging.

Review details

Suppressed comments (1)

cmake/deps.txt:62

• Rolling the Dawn archive without updating cgmanifests/webgpu/cgmanifest.webgpu.json leaves the WebGPU Component Governance manifest on the old Dawn commit and dependency graph. The manifest's maintenance instructions require its root and Dawn-derived registrations to match cmake/deps.txt; otherwise NOTICE/component scans can report the wrong source (and the stale-pin validator cannot pass once its Dawn extraction is corrected). Please update/regenerate that manifest for v20260916.214021 in this change.

dawn;https://github.com/google/dawn/archive/refs/tags/v20260916.214021.zip;514e914f23a0787213c89eed879f74b5e275690d

• Files reviewed: 6/6 changed files
• Comments generated: 2
• Review effort level: Lite (auto)

Note

Copilot is running an experiment and ran this review at Lite.

---

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Jiajia Qin (qjia7)]

The request was received. Approve workflow runs. Thanks.

[May Mei (mei1127)]

/run bots

[Jiajia Qin (qjia7)]

The request was received. Approve workflow runs. Thanks.

[Jie Chen (jchen10)]

1. The delay-load test still copies dxil.dll
   onnxruntime/test/webgpu/delay_load/main.cc:66

2. Component manifest not updated with the Dawn bump
   cgmanifests/webgpu/cgmanifest.webgpu.json:9 still pins ec7b457e5bb1fcec6f59733c4f3dd84d2f885a38
   The DXC entry at cgmanifests/webgpu/cgmanifest.webgpu.json#L29 still says the plugin redistributes dxil.dll

[May Mei (mei1127)]

/run bots

[Jiajia Qin (qjia7)]

The request was received. Approve workflow runs. Thanks.

[Edward Chen (edgchen1)]

I think there are a few other places which still copy or refer to dxil.dll. e.g.:

onnxruntime/tools/ci_build/github/azure-pipelines/stages/plugin-win-webgpu-stage.yml

Lines 144 to 145 in 6b3206e

	Write-Host "Copying dxil.dll and dxcompiler.dll from $sourcePath to $targetPath"
	Copy-Item -Path "$sourcePath\dxil.dll" -Destination $targetPath -Force

onnxruntime/tools/ci_build/github/azure-pipelines/stages/nodejs-win-packaging-stage.yml

Lines 152 to 153 in 6b3206e

	Write-Host "Copying dxil.dll and dxcompiler.dll from $sourcePath to $targetPath"
	Copy-Item -Path "$sourcePath\dxil.dll" -Destination $targetPath -Force

git grep -n "dxil\.dll" shows a few hits.

do those need to be updated too?

[Edward Chen (edgchen1)]

D3D12 XMX support for ORT-WebGPU Python wheels will be added in another patch after the upgrade of Dawn.

if this is referring to onnxruntime-webgpu, we have stopped publishing that wheel. we will just publish the onnxruntime-ep-webgpu plugin EP wheel going forward.

[May Mei (mei1127)]

/run bots

[Jiajia Qin (qjia7)]

The request was received. Approve workflow runs. Thanks.

[May Mei (mei1127)]

I think there are a few other places which still copy or refer to dxil.dll. e.g.:

onnxruntime/tools/ci_build/github/azure-pipelines/stages/plugin-win-webgpu-stage.yml

Lines 144 to 145 in 6b3206e

	Write-Host "Copying dxil.dll and dxcompiler.dll from $sourcePath to $targetPath"
	Copy-Item -Path "$sourcePath\dxil.dll" -Destination $targetPath -Force

onnxruntime/tools/ci_build/github/azure-pipelines/stages/nodejs-win-packaging-stage.yml

Lines 152 to 153 in 6b3206e

	Write-Host "Copying dxil.dll and dxcompiler.dll from $sourcePath to $targetPath"
	Copy-Item -Path "$sourcePath\dxil.dll" -Destination $targetPath -Force

git grep -n "dxil\.dll" shows a few hits.

do those need to be updated too?

Yes, I have updated them. Thanks.

[May Mei (mei1127)]

/run bots

[Jiajia Qin (qjia7)]

The request was received. Approve workflow runs. Thanks.

[May Mei (mei1127)]

/run bots

[Jiajia Qin (qjia7)]

The request was received. Approve workflow runs. Thanks.

[Edward Chen (edgchen1)]

could you please also update this SwiftShader commit to match the one pinned by the new Dawn version?

onnxruntime/tools/ci_build/github/linux/docker/inference/shared/python/webgpu/Dockerfile

Lines 16 to 22 in 536f161

	# This SHA is lifted from Dawn's DEPS (third_party/swiftshader entry) at the
	# Dawn commit pinned by ORT in cmake/deps.txt. To refresh on a Dawn bump:
	# https://dawn.googlesource.com/dawn/+/<dawn-commit>/DEPS
	# ---------------------------------------------------------------------------
	FROM $BASEIMAGE AS swiftshader_builder
	ARG SWIFTSHADER_COMMIT=b7b7fd22e5f28079b92412f47f6da4df43e4cd37

[May Mei (mei1127)]

/run bots

[Yang Gu (gyagp)]

Just curious, do we need to update these hashes manually now? I think we should maintain some script to make the upgrade easier.

[Jiajia Qin (qjia7)]

The request was received. Approve workflow runs. Thanks.

[May Mei (mei1127)]

Just curious, do we need to update these hashes manually now? I think we should maintain some script to make the upgrade easier

I agree, that would make things much easier.

[May Mei (mei1127)]

PTAL again, thanks! Jiajia Qin (@qjia7) Edward Chen (@edgchen1)

[Jiajia Qin (qjia7)]

PTAL again, thanks! Jiajia Qin (Jiajia Qin (@qjia7)) Edward Chen (Edward Chen (@edgchen1))

LGTM, please wait for Edward Chen (@edgchen1)'s review. Thanks.