build: update remote execution environment

Updates the remote execution environment, hoping to fix some Firefox
issues.

Author: devversion

bazel/remote-execution/BUILD.bazel

@@ -15,7 +15,7 @@ platform(
         # from the image, the image doesn't need to be updated frequently. There are rare cases where
         # it needs to be updated. e.g. for a more recent Bash version, or new system settings that are
         # required for launching browsers.
-        "container-image": "docker://us-west2-docker.pkg.dev/internal-200822/remote-execution-images/angular-devinfra-rbe-image@sha256:3389d808edbcdf8999338fd617dda68cdbaa259b431f19e41e58941cdac900a3",
+        "container-image": "docker://us-west2-docker.pkg.dev/internal-200822/remote-execution-images/angular-devinfra-rbe-image@sha256:c853f16afdba9422f9e22548d32428a0b89e11987697c2aadd98dfa7977c7db1",
         # By default in Google Cloud Remote build execution, network access is disabled. We explicitly set the
         # property in the platform again in case the default ever changes. Network access is not desirable in
         # Bazel builds as it is potential source of flaky tests and therefore also breaks hermeticity.

bazel/remote-execution/Dockerfile

@@ -5,8 +5,8 @@ FROM ghcr.io/puppeteer/puppeteer:24.23.0@sha256:d7afe89d44cb5fc2d8a8ed16bf21817a
 # image- preventing us from preparing Firefox dependencies.
 USER root
 
-# Perform update/upgrade with Debian bullseye added. Puppeteer uses
-# `node:18` which does not have the repository added for installing Firefox.
+# Perform update/upgrade with Debian bullseye added.
+# This allows us to install Firefox for its dependencies.
 RUN echo 'deb http://deb.debian.org/debian bullseye main' >> /etc/apt/sources.list
 RUN apt-get -y update && apt-get -y upgrade
 

bazel/remote-execution/README.md

@@ -7,10 +7,10 @@ or from GitHub packages. Only `pkg.dev` or `gcr.io`.
 gcloud auth configure-docker \
     us-west2-docker.pkg.dev
 
-sudo docker build . --network=host -t angular-devinfra-rbe-image:latest
+docker build . --network=host -t angular-devinfra-rbe-image:latest
 
-sudo docker tag angular-devinfra-rbe-image:latest \
-  us-west2-docker.pkg.dev/internal-200822/remote-execution-images/angular-devinfra-rbe-image:202305
+docker tag angular-devinfra-rbe-image:latest \
+  us-west2-docker.pkg.dev/internal-200822/remote-execution-images/angular-devinfra-rbe-image:2025-10
 
-sudo docker push us-west2-docker.pkg.dev/internal-200822/remote-execution-images/angular-devinfra-rbe-image:202305
+docker push us-west2-docker.pkg.dev/internal-200822/remote-execution-images/angular-devinfra-rbe-image:2025-10
 ````