firefox-bin-unwrapped: 134.0.2 -> 135.0

https://www.mozilla.org/en-US/firefox/135.0/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2025-07/

Fixes: CVE-2025-1009, CVE-2025-1010, CVE-2025-1018, CVE-2025-1011,
       CVE-2025-1012, CVE-2025-1019, CVE-2025-1013, CVE-2025-1014,
       CVE-2025-1016, CVE-2025-1017, CVE-2025-1020

pkgs/applications/networking/browsers/firefox-bin/update.nix

@@ -60,7 +60,7 @@ writeScript "update-${pname}" ''
 
   # this is a list of sha256 and tarballs for both arches
   # Upstream files contains python repr strings like b'somehash', hence the sed dance
-  shasums=`cat $HOME/shasums | sed -E s/"b'([a-f0-9]{64})'?(.*)"/'\1\2'/ | grep tar.bz2`
+  shasums=`cat $HOME/shasums | sed -E s/"b'([a-f0-9]{64})'?(.*)"/'\1\2'/ | grep tar.xz`
 
   cat > $tmpfile <<EOF
   {
@@ -75,7 +75,7 @@ writeScript "update-${pname}" ''
     #  - inteprets sha and path as 2 lines
     for line in `echo "$shasums" | \
                  grep $arch | \
-                 grep "${baseName}-$version.tar.bz2$" | \
+                 grep "${baseName}-$version.tar.xz$" | \
                  tr " " ":"`; do
       # create an entry for every locale
       cat >> $tmpfile <<EOF