[v10.x] deps: cherry-pick 88f8fe1 from upstream V8

[addaleax]

Original commit message:

Fix collection iterator preview with deleted entries

We used to assume that we know the remaining entries returned by the
iterator based on the current index. However, that is not accurate,
since entries skipped by the current index could be deleted.

In the new approach, we allocate conservatively and shrink the result.

R=neis@chromium.org

Bug: v8:8433
Change-Id: I38a3004dc3af292daabb454bb76f38d65ef437e8
Reviewed-on: https://chromium-review.googlesource.com/c/1325966
Commit-Queue: Yang Guo <yangguo@chromium.org>
Reviewed-by: Georg Neis <neis@chromium.org>
Cr-Commit-Position: refs/heads/master@{#57360}

[The backport to v10.x resolves merge conflicts due to a different way
of accessing the “hole” value in V8, different signatures of the
Handle constructor and the Shrink() method, and neighbouring-line
conflicts in the test file.]

Refs: v8/v8@88f8fe1
Fixes: #27882
PR-URL: #24514
Refs: #24053

Checklist

• make -j4 test (UNIX), or vcbuild test (Windows) passes
• tests and/or benchmarks are included
• documentation is changed or added
• commit message follows commit guidelines

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/23339/
V8 CI: https://ci.nodejs.org/job/node-test-commit-v8-linux/2309/

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/23358/

[addaleax]

I’m fairly certain the V8 CI failure is unrelated, but just in case, here’s another try: https://ci.nodejs.org/job/node-test-commit-v8-linux/2322/

/cc @nodejs/v8

[addaleax]

V8 CI for v10.x-staging, to make sure it really was broken before: https://ci.nodejs.org/job/node-test-commit-v8-linux/2323/

[addaleax]

The V8 CI for v10.x-staging failed the same way, so I think this is ready for merging.

[BethGriggs]

Landed on v10.x-staging