QuickJS features and fixes: closure optimization, iterators, UAF

 * Closure optimization quadratic -> linear on number of vars
 bellard/quickjs@ae7219b

 * Add error checking in `JS_InstantiateFunctionListItem()`
 bellard/quickjs@125b012

 * Optimize add/sub int32 overflow
 bellard/quickjs@3d0cc29

 * Add `Iterator.concat`
 bellard/quickjs@4bd485d

 * Fix BJSON array serialization (fixes use-after-free in
 bellard/quickjs#457)
 bellard/quickjs@fcbf5ea

Author: nickva

src/couch_quickjs/patches/01-spidermonkey-185-mode.patch

@@ -1,6 +1,6 @@
---- quickjs-master/quickjs.c	2025-11-05 05:46:20
-+++ quickjs/quickjs.c	2025-11-05 09:54:50
-@@ -31286,10 +31286,24 @@
+--- quickjs-master/quickjs.c	2025-11-15 08:52:50
++++ quickjs/quickjs.c	2025-11-17 17:35:22
+@@ -31337,10 +31337,24 @@
      if (s->token.val == TOK_FUNCTION ||
          (token_is_pseudo_keyword(s, JS_ATOM_async) &&
           peek_token(s, TRUE) == TOK_FUNCTION)) {

src/couch_quickjs/patches/02-test262-errors.patch

@@ -1,5 +1,5 @@
---- quickjs-master/test262_errors.txt	2025-11-05 05:46:20
-+++ quickjs/test262_errors.txt	2025-11-05 09:54:50
+--- quickjs-master/test262_errors.txt	2025-11-15 08:52:50
++++ quickjs/test262_errors.txt	2025-11-17 17:35:22
 @@ -19,6 +19,8 @@
  test262/test/language/expressions/compound-assignment/S11.13.2_A6.10_T1.js:24: Test262Error: #1: innerX === 2. Actual: 5
  test262/test/language/expressions/compound-assignment/S11.13.2_A6.11_T1.js:24: Test262Error: #1: innerX === 2. Actual: 5

src/couch_quickjs/quickjs/quickjs-atom.h

@@ -233,6 +233,7 @@ DEF(WeakMap, "WeakMap") /* Map + 2 */
 DEF(WeakSet, "WeakSet") /* Map + 3 */
 DEF(Iterator, "Iterator")
 DEF(IteratorHelper, "Iterator Helper")
+DEF(IteratorConcat, "Iterator Concat")
 DEF(IteratorWrap, "Iterator Wrap")
 DEF(Map_Iterator, "Map Iterator")
 DEF(Set_Iterator, "Set Iterator")