tor-browser: 15.0.5 -> 15.0.6

Release announcement: https://blog.torproject.org/new-release-tor-browser-1506/
Changelog: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/raw/tbb-15.0.6-build2/projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt
Firefox ESR: https://www.firefox.com/en-US/firefox/140.7.1/releasenotes/
Firefox ESR security advisories: https://www.mozilla.org/en-US/security/advisories/mfsa2026-10/

This release contains one high severity security fix. This is *not*
resolved by the libvpx update in Nixpkgs, as we use upstream's binaries
for the browser.

(cherry picked from commit 2441b6b)

Author: whispersofthedawn

pkgs/by-name/to/tor-browser/package.nix

@@ -102,7 +102,7 @@ let
     ++ lib.optionals mediaSupport [ ffmpeg_7 ]
   );
 
-  version = "15.0.5";
+  version = "15.0.6";
 
   sources = {
     x86_64-linux = fetchurl {
@@ -112,7 +112,7 @@ let
         "https://tor.eff.org/dist/torbrowser/${version}/tor-browser-linux-x86_64-${version}.tar.xz"
         "https://tor.calyxinstitute.org/dist/torbrowser/${version}/tor-browser-linux-x86_64-${version}.tar.xz"
       ];
-      hash = "sha256-QD94RdxXl6P7sHPVx11TqpyOvIzq8Y3FMJC91PuyORY=";
+      hash = "sha256-ARHkr311mk4mIK+MruEiFLVa2tuJyrjl35moYDmROMo=";
     };
 
     i686-linux = fetchurl {
@@ -122,7 +122,7 @@ let
         "https://tor.eff.org/dist/torbrowser/${version}/tor-browser-linux-i686-${version}.tar.xz"
         "https://tor.calyxinstitute.org/dist/torbrowser/${version}/tor-browser-linux-i686-${version}.tar.xz"
       ];
-      hash = "sha256-D6umWK8Po+KPLJYfw3NHTX7K2p2Wu+9Jm4ywjMXHte8=";
+      hash = "sha256-yO+iALaU5dqdk0fWKqpcCProNIqi5ilnfZpcga3JTWI=";
     };
   };