Make static (preloaded) security state generation part of the build process.

net/net.gypi

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # This file is shared between the regular GYP build, the NaCl GYP build, and
 # the GN build. For GN support, it must have no conditionals or anything like
 # that beyond the simple one-level-deep dictionary of values.
 {
   'variables': {
     # Subset of net source files that are compiled for NaCl (net_nacl target).
@@ skipping 761 matching lines @@
       'http/md4.cc',
       'http/md4.h',
       'http/partial_data.cc',
       'http/partial_data.h',
       'http/proxy_client_socket.cc',
       'http/proxy_client_socket.h',
       'http/proxy_connect_redirect_http_stream.cc',
       'http/proxy_connect_redirect_http_stream.h',
       'http/transport_security_persister.cc',
       'http/transport_security_persister.h',
-      'http/transport_security_state_static.h',
       'http/url_security_manager.cc',
       'http/url_security_manager.h',
       'http/url_security_manager_posix.cc',
       'http/url_security_manager_win.cc',
       'http2/decoder/decode_buffer.cc',
       'http2/decoder/decode_buffer.h',
       'http2/decoder/decode_http2_structures.cc',
       'http2/decoder/decode_http2_structures.h',
       'http2/decoder/decode_status.cc',
       'http2/decoder/decode_status.h',
@@ skipping 1753 matching lines @@
       'data/ssl/certificates/weak_digest_sha1_ee.pem',
       'data/ssl/certificates/weak_digest_sha1_intermediate.pem',
       'data/ssl/certificates/weak_digest_sha1_root.pem',
       'data/ssl/certificates/websocket_cacert.pem',
       'data/ssl/certificates/websocket_client_cert.p12',
       'data/ssl/certificates/wildcard.pem',
       'data/ssl/certificates/wosign_after_oct_21.pem',
       'data/ssl/certificates/wosign_before_oct_21.pem',
       'data/ssl/certificates/www_us_army_mil_cert.der',
       'data/ssl/certificates/x509_verify_results.chain.pem',
+      'http/transport_security_state_static.json',
     ],
     # List of test data files for //net:net_unittests. Can be regenerated by
     # running net/data/update_net_gypi.py.
     'net_unittests_data_sources': [
       'data/cert_issuer_source_aia_unittest/i.pem',
       'data/cert_issuer_source_aia_unittest/i2.pem',
       'data/cert_issuer_source_aia_unittest/i3.pem',
       'data/cert_issuer_source_aia_unittest/target_file_aia.pem',
       'data/cert_issuer_source_aia_unittest/target_file_and_http_aia.pem',
       'data/cert_issuer_source_aia_unittest/target_invalid_and_http_aia.pem',
@@ skipping 990 matching lines @@
       'tools/domain_security_preload_generator/preloaded_state_generator.h',
       'tools/domain_security_preload_generator/spki_hash.cc',
       'tools/domain_security_preload_generator/spki_hash.h',
       'tools/domain_security_preload_generator/trie/trie_bit_buffer.cc',
       'tools/domain_security_preload_generator/trie/trie_bit_buffer.h',
       'tools/domain_security_preload_generator/trie/trie_writer.cc',
       'tools/domain_security_preload_generator/trie/trie_writer.h',
     ],
   }
 }