[compiler] fix typing of [[DateValue]]

Bug: chromium:1356308
Change-Id: I00be3495031b203b71cf924745dd2bad878ab3c2
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3868955Reviewed-by: Nico Hartmann <nicohartmann@chromium.org>
Auto-Submit: Tobias Tebbi <tebbi@chromium.org>
Commit-Queue: Nico Hartmann <nicohartmann@chromium.org>
Commit-Queue: Tobias Tebbi <tebbi@chromium.org>
Cr-Commit-Position: refs/heads/main@{#82918}

src/compiler/type-cache.h

@@ -130,9 +130,10 @@ class V8_EXPORT_PRIVATE TypeCache final {
   Type const kStringLengthType = CreateRange(0.0, String::kMaxLength);
 
   // A time value always contains a tagged number in the range
-  // [-kMaxTimeInMs, kMaxTimeInMs].
-  Type const kTimeValueType =
-      CreateRange(-DateCache::kMaxTimeInMs, DateCache::kMaxTimeInMs);
+  // [-kMaxTimeInMs, kMaxTimeInMs] or -0.
+  Type const kTimeValueType = Type::Union(
+      CreateRange(-DateCache::kMaxTimeInMs, DateCache::kMaxTimeInMs),
+      Type::MinusZero(), zone());
 
   // The JSDate::day property always contains a tagged number in the range
   // [1, 31] or NaN.