diff --git a/baselines/dom.generated.d.ts b/baselines/dom.generated.d.ts
index 0fda81c5b..5ed5290ae 100644
--- a/baselines/dom.generated.d.ts
+++ b/baselines/dom.generated.d.ts
@@ -20921,6 +20921,12 @@ interface HTMLScriptElement extends HTMLElement {
     fetchPriority: "high" | "low" | "auto";
     /** @deprecated */
     htmlFor: string;
+    /**
+     * The **`innerText`** property of the HTMLScriptElement interface represents the text content of the <script> element. It behaves in the same way as the textContent and text properties.
+     *
+     * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/innerText)
+     */
+    innerText: string;
     /**
      * The **`integrity`** property of the HTMLScriptElement interface is a string that contains inline metadata that a browser can use to verify that a fetched resource has been delivered without unexpected manipulation.
      *
@@ -20951,6 +20957,12 @@ interface HTMLScriptElement extends HTMLElement {
      * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/text)
      */
     text: string;
+    /**
+     * The **`textContent`** property of the HTMLScriptElement interface represents the inline text content of the <script> element. It behaves in the same way as the text and innerText properties.
+     *
+     * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/textContent)
+     */
+    textContent: string;
     /**
      * The **`type`** property of the HTMLScriptElement interface is a string that reflects the type of the script.
      *
@@ -34962,6 +34974,9 @@ interface SVGTextPathElement extends SVGTextContentElement, SVGURIReference {
     readonly TEXTPATH_SPACINGTYPE_UNKNOWN: 0;
     readonly TEXTPATH_SPACINGTYPE_AUTO: 1;
     readonly TEXTPATH_SPACINGTYPE_EXACT: 2;
+    readonly TEXTPATH_SIDETYPE_UNKNOWN: 0;
+    readonly TEXTPATH_SIDETYPE_LEFT: 1;
+    readonly TEXTPATH_SIDETYPE_RIGHT: 2;
     addEventListener<K extends keyof SVGElementEventMap>(type: K, listener: (this: SVGTextPathElement, ev: SVGElementEventMap[K]) => any, options?: boolean | AddEventListenerOptions): void;
     addEventListener(type: string, listener: EventListenerOrEventListenerObject, options?: boolean | AddEventListenerOptions): void;
     removeEventListener<K extends keyof SVGElementEventMap>(type: K, listener: (this: SVGTextPathElement, ev: SVGElementEventMap[K]) => any, options?: boolean | EventListenerOptions): void;
@@ -34977,6 +34992,9 @@ declare var SVGTextPathElement: {
     readonly TEXTPATH_SPACINGTYPE_UNKNOWN: 0;
     readonly TEXTPATH_SPACINGTYPE_AUTO: 1;
     readonly TEXTPATH_SPACINGTYPE_EXACT: 2;
+    readonly TEXTPATH_SIDETYPE_UNKNOWN: 0;
+    readonly TEXTPATH_SIDETYPE_LEFT: 1;
+    readonly TEXTPATH_SIDETYPE_RIGHT: 2;
 };
 
 /**
diff --git a/baselines/ts5.5/dom.generated.d.ts b/baselines/ts5.5/dom.generated.d.ts
index 477da8c5f..99110cad4 100644
--- a/baselines/ts5.5/dom.generated.d.ts
+++ b/baselines/ts5.5/dom.generated.d.ts
@@ -20898,6 +20898,12 @@ interface HTMLScriptElement extends HTMLElement {
     fetchPriority: "high" | "low" | "auto";
     /** @deprecated */
     htmlFor: string;
+    /**
+     * The **`innerText`** property of the HTMLScriptElement interface represents the text content of the <script> element. It behaves in the same way as the textContent and text properties.
+     *
+     * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/innerText)
+     */
+    innerText: string;
     /**
      * The **`integrity`** property of the HTMLScriptElement interface is a string that contains inline metadata that a browser can use to verify that a fetched resource has been delivered without unexpected manipulation.
      *
@@ -20928,6 +20934,12 @@ interface HTMLScriptElement extends HTMLElement {
      * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/text)
      */
     text: string;
+    /**
+     * The **`textContent`** property of the HTMLScriptElement interface represents the inline text content of the <script> element. It behaves in the same way as the text and innerText properties.
+     *
+     * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/textContent)
+     */
+    textContent: string;
     /**
      * The **`type`** property of the HTMLScriptElement interface is a string that reflects the type of the script.
      *
@@ -34937,6 +34949,9 @@ interface SVGTextPathElement extends SVGTextContentElement, SVGURIReference {
     readonly TEXTPATH_SPACINGTYPE_UNKNOWN: 0;
     readonly TEXTPATH_SPACINGTYPE_AUTO: 1;
     readonly TEXTPATH_SPACINGTYPE_EXACT: 2;
+    readonly TEXTPATH_SIDETYPE_UNKNOWN: 0;
+    readonly TEXTPATH_SIDETYPE_LEFT: 1;
+    readonly TEXTPATH_SIDETYPE_RIGHT: 2;
     addEventListener<K extends keyof SVGElementEventMap>(type: K, listener: (this: SVGTextPathElement, ev: SVGElementEventMap[K]) => any, options?: boolean | AddEventListenerOptions): void;
     addEventListener(type: string, listener: EventListenerOrEventListenerObject, options?: boolean | AddEventListenerOptions): void;
     removeEventListener<K extends keyof SVGElementEventMap>(type: K, listener: (this: SVGTextPathElement, ev: SVGElementEventMap[K]) => any, options?: boolean | EventListenerOptions): void;
@@ -34952,6 +34967,9 @@ declare var SVGTextPathElement: {
     readonly TEXTPATH_SPACINGTYPE_UNKNOWN: 0;
     readonly TEXTPATH_SPACINGTYPE_AUTO: 1;
     readonly TEXTPATH_SPACINGTYPE_EXACT: 2;
+    readonly TEXTPATH_SIDETYPE_UNKNOWN: 0;
+    readonly TEXTPATH_SIDETYPE_LEFT: 1;
+    readonly TEXTPATH_SIDETYPE_RIGHT: 2;
 };
 
 /**
diff --git a/baselines/ts5.6/dom.generated.d.ts b/baselines/ts5.6/dom.generated.d.ts
index a2f8b1776..765c585d7 100644
--- a/baselines/ts5.6/dom.generated.d.ts
+++ b/baselines/ts5.6/dom.generated.d.ts
@@ -20918,6 +20918,12 @@ interface HTMLScriptElement extends HTMLElement {
     fetchPriority: "high" | "low" | "auto";
     /** @deprecated */
     htmlFor: string;
+    /**
+     * The **`innerText`** property of the HTMLScriptElement interface represents the text content of the <script> element. It behaves in the same way as the textContent and text properties.
+     *
+     * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/innerText)
+     */
+    innerText: string;
     /**
      * The **`integrity`** property of the HTMLScriptElement interface is a string that contains inline metadata that a browser can use to verify that a fetched resource has been delivered without unexpected manipulation.
      *
@@ -20948,6 +20954,12 @@ interface HTMLScriptElement extends HTMLElement {
      * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/text)
      */
     text: string;
+    /**
+     * The **`textContent`** property of the HTMLScriptElement interface represents the inline text content of the <script> element. It behaves in the same way as the text and innerText properties.
+     *
+     * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/textContent)
+     */
+    textContent: string;
     /**
      * The **`type`** property of the HTMLScriptElement interface is a string that reflects the type of the script.
      *
@@ -34959,6 +34971,9 @@ interface SVGTextPathElement extends SVGTextContentElement, SVGURIReference {
     readonly TEXTPATH_SPACINGTYPE_UNKNOWN: 0;
     readonly TEXTPATH_SPACINGTYPE_AUTO: 1;
     readonly TEXTPATH_SPACINGTYPE_EXACT: 2;
+    readonly TEXTPATH_SIDETYPE_UNKNOWN: 0;
+    readonly TEXTPATH_SIDETYPE_LEFT: 1;
+    readonly TEXTPATH_SIDETYPE_RIGHT: 2;
     addEventListener<K extends keyof SVGElementEventMap>(type: K, listener: (this: SVGTextPathElement, ev: SVGElementEventMap[K]) => any, options?: boolean | AddEventListenerOptions): void;
     addEventListener(type: string, listener: EventListenerOrEventListenerObject, options?: boolean | AddEventListenerOptions): void;
     removeEventListener<K extends keyof SVGElementEventMap>(type: K, listener: (this: SVGTextPathElement, ev: SVGElementEventMap[K]) => any, options?: boolean | EventListenerOptions): void;
@@ -34974,6 +34989,9 @@ declare var SVGTextPathElement: {
     readonly TEXTPATH_SPACINGTYPE_UNKNOWN: 0;
     readonly TEXTPATH_SPACINGTYPE_AUTO: 1;
     readonly TEXTPATH_SPACINGTYPE_EXACT: 2;
+    readonly TEXTPATH_SIDETYPE_UNKNOWN: 0;
+    readonly TEXTPATH_SIDETYPE_LEFT: 1;
+    readonly TEXTPATH_SIDETYPE_RIGHT: 2;
 };
 
 /**
diff --git a/baselines/ts5.9/dom.generated.d.ts b/baselines/ts5.9/dom.generated.d.ts
index d54217582..0a060b9b8 100644
--- a/baselines/ts5.9/dom.generated.d.ts
+++ b/baselines/ts5.9/dom.generated.d.ts
@@ -20918,6 +20918,12 @@ interface HTMLScriptElement extends HTMLElement {
     fetchPriority: "high" | "low" | "auto";
     /** @deprecated */
     htmlFor: string;
+    /**
+     * The **`innerText`** property of the HTMLScriptElement interface represents the text content of the <script> element. It behaves in the same way as the textContent and text properties.
+     *
+     * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/innerText)
+     */
+    innerText: string;
     /**
      * The **`integrity`** property of the HTMLScriptElement interface is a string that contains inline metadata that a browser can use to verify that a fetched resource has been delivered without unexpected manipulation.
      *
@@ -20948,6 +20954,12 @@ interface HTMLScriptElement extends HTMLElement {
      * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/text)
      */
     text: string;
+    /**
+     * The **`textContent`** property of the HTMLScriptElement interface represents the inline text content of the <script> element. It behaves in the same way as the text and innerText properties.
+     *
+     * [MDN Reference](https://developer.mozilla.org/docs/Web/API/HTMLScriptElement/textContent)
+     */
+    textContent: string;
     /**
      * The **`type`** property of the HTMLScriptElement interface is a string that reflects the type of the script.
      *
@@ -34959,6 +34971,9 @@ interface SVGTextPathElement extends SVGTextContentElement, SVGURIReference {
     readonly TEXTPATH_SPACINGTYPE_UNKNOWN: 0;
     readonly TEXTPATH_SPACINGTYPE_AUTO: 1;
     readonly TEXTPATH_SPACINGTYPE_EXACT: 2;
+    readonly TEXTPATH_SIDETYPE_UNKNOWN: 0;
+    readonly TEXTPATH_SIDETYPE_LEFT: 1;
+    readonly TEXTPATH_SIDETYPE_RIGHT: 2;
     addEventListener<K extends keyof SVGElementEventMap>(type: K, listener: (this: SVGTextPathElement, ev: SVGElementEventMap[K]) => any, options?: boolean | AddEventListenerOptions): void;
     addEventListener(type: string, listener: EventListenerOrEventListenerObject, options?: boolean | AddEventListenerOptions): void;
     removeEventListener<K extends keyof SVGElementEventMap>(type: K, listener: (this: SVGTextPathElement, ev: SVGElementEventMap[K]) => any, options?: boolean | EventListenerOptions): void;
@@ -34974,6 +34989,9 @@ declare var SVGTextPathElement: {
     readonly TEXTPATH_SPACINGTYPE_UNKNOWN: 0;
     readonly TEXTPATH_SPACINGTYPE_AUTO: 1;
     readonly TEXTPATH_SPACINGTYPE_EXACT: 2;
+    readonly TEXTPATH_SIDETYPE_UNKNOWN: 0;
+    readonly TEXTPATH_SIDETYPE_LEFT: 1;
+    readonly TEXTPATH_SIDETYPE_RIGHT: 2;
 };
 
 /**
diff --git a/inputfiles/patches/html.kdl b/inputfiles/patches/html.kdl
index d5eb5769d..34d197367 100644
--- a/inputfiles/patches/html.kdl
+++ b/inputfiles/patches/html.kdl
@@ -220,3 +220,12 @@ removals {
     member javascriptURLs // Gecko-only as of 2026-11
   }
 }
+
+interface HTMLScriptElement {
+  property textContent {
+    // Spec says nullable, but that is incompatible with HTMLElement definition.
+    // Decide what to do with this when we actually add Trusted Types.
+    // See also: https://github.com/whatwg/html/pull/12195
+    type nullable=#false
+  }
+}
diff --git a/inputfiles/removedTypes.jsonc b/inputfiles/removedTypes.jsonc
index 291459ed9..e9595cc9a 100644
--- a/inputfiles/removedTypes.jsonc
+++ b/inputfiles/removedTypes.jsonc
@@ -148,8 +148,7 @@
                         "image": null,
                         "navigate": null, // WebKit only as of 2025-08
                         "renotify": null,
-                        "timestamp": null,
-                        "vibrate": null
+                        "timestamp": null
                     }
                 }
             },
diff --git a/package-lock.json b/package-lock.json
index e7db6b9e7..8c7de7e74 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1167,9 +1167,9 @@
       "license": "MIT"
     },
     "node_modules/@webref/idl": {
-      "version": "3.85.1",
-      "resolved": "https://registry.npmjs.org/@webref/idl/-/idl-3.85.1.tgz",
-      "integrity": "sha512-wVV+ZSzLYOY8tGNplkwiLA527kZhO4350tM3VKe8jeVPHT9wjhm3ds+Sx72USdPBY4/TP11ccYClSXxxelE36A==",
+      "version": "3.86.0",
+      "resolved": "https://registry.npmjs.org/@webref/idl/-/idl-3.86.0.tgz",
+      "integrity": "sha512-cfBKahe5RlvgVnOII8XxoPJ/rZ8B9bYaVaewOt9L9IwbDmJOQ7dSNAA5AXM7BQaiQ+/FbqqrE1bGVUm3HBUFYw==",
       "dev": true,
       "license": "MIT",
       "peerDependencies": {