[SashaMIT]

Moves the Browser guest bookworm-security snapshot to 20261021T125632Z and pins Chromium 155.0.8059.79-1~deb12u1 by size and SHA-256.
Checked locally: lock validation, browser-vm-debian tests, and verify-cache on the downloaded packages. Guest image rebuild still needs the Linux builder.

Made with Cursor

[andersalm]

@SashaMIT On 21 Oct Anders decided to include this update and #473 (Node 24.22.1) in 0.8.0. OMP took both commits unchanged into the 0.8.0 release work (same patches as the PR heads ec8b126ab and 07150f96e) and is building the arm64 Browser image from them. The image cutoff is Thu 22 Oct 18:00 UTC.

OMP checked the pins against their upstream indexes. The three Chromium package hashes and sizes match the Debian security snapshot 20261021T125632Z index, whose hash is the one in the lock. The two Node archive hashes match SHASUMS256.txt for v24.22.1 on nodejs.org (fetched over HTTPS; its release signature was not checked). Codex reviews both diffs independently.

As Browser owner, please review and approve both PRs. A source smoke on the new image is welcome on Thursday if it is ready.