chromium,chromedriver: 135.0.7049.114 -> 136.0.7103.59

[emilylange]

https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_29.html

This update includes 8 security fixes.

CVEs:
CVE-2025-4096 CVE-2025-4050 CVE-2025-4051 CVE-2025-4052

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 25.05 Release Notes (or backporting 24.11 and 25.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

[emilylange]

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review pr 402947

---

x86_64-linux

⏩ 10 packages marked as broken and skipped:

• aider-chat-full
• aider-chat-full.dist
• archivebox
• archivebox.dist
• froide
• froide-govplan
• froide-govplan.dist
• froide.dist
• python312Packages.froide
• python312Packages.froide.dist

❌ 1 package failed to build:

• gotenberg

✅ 44 packages built:

• aider-chat-with-playwright
• aider-chat-with-playwright.dist
• authentik
• aws-azure-login
• chromedriver
• chromium
• chromium.sandbox
• decktape
• fast-cli
• flaresolverr
• google-lighthouse
• grafana-kiosk
• html2pdf
• mermaid-cli
• mermaid-filter
• percollate
• pinnwand
• pinnwand.dist
• playwright-test
• puppeteer-cli
• python312Packages.django-filingcabinet
• python312Packages.django-filingcabinet.dist
• python312Packages.great-tables
• python312Packages.great-tables.dist
• python312Packages.pytest-playwright
• python312Packages.pytest-playwright.dist
• python312Packages.shiny
• python312Packages.shiny.dist
• python313Packages.django-filingcabinet
• python313Packages.django-filingcabinet.dist
• python313Packages.great-tables
• python313Packages.great-tables.dist
• python313Packages.pytest-playwright
• python313Packages.pytest-playwright.dist
• python313Packages.shiny
• python313Packages.shiny.dist
• selendroid
• selenium-server-standalone
• sharedown
• single-file-cli
• sitespeed-io
• undetected-chromedriver
• vhs
• wayback

Note that gotenberg is already broken: https://hydra.nixos.org/build/295620789

# nix-build -A stable nixos/tests/chromium.nix --system x86_64-linux
/nix/store/328ms880f69gkw5pdkx2nrjlipn04s19-vm-test-run-chromium-stable

# nix-build -A stable nixos/tests/chromium.nix --system aarch64-linux
/nix/store/0c0cwlsbdnanf3bglqwc6yik974j1i9w-vm-test-run-chromium-stable

[emilylange]

nixfmt-check failure is unrelated and instead caused by merging #389028 and as such broken for all nixfmt-check runs since then.

Merging.