Roll NSS from 136057:137477

DEPS

 vars = {
   # Use this googlecode_url variable only if there is an internal mirror for it.
   # If you do not know, use the full path while defining your new deps entry.
   "googlecode_url": "http://%s.googlecode.com/svn",
   "sourceforge_url": "http://%(repo)s.svn.sourceforge.net/svnroot/%(repo)s",
   "webkit_trunk": "http://svn.webkit.org/repository/webkit/trunk",
   "nacl_trunk": "http://src.chromium.org/native_client/trunk",
   "webkit_revision": "117232",
   "chromium_git": "http://git.chromium.org/git",
   "swig_revision": "69281",
@@ skipping 41 matching lines @@
   "ffmpeg_hash": "4ece657f9dad6a37e7b7e3584eb8887aad4dc499",
 
   "sfntly_revision": "128",
   "skia_revision": "3987",
   # Three lines of non-changing comments so that
   # the commit queue can handle CLs rolling Skia
   # and V8 without interference from each other.
   "v8_revision": "11582",
   "webrtc_revision": "2180",
   "jsoncpp_revision": "248",
-  "nss_revision": "136057",
+  "nss_revision": "137925",
   "rlz_revision": "128",
 }
 
 deps = {
   "src/breakpad/src":
     (Var("googlecode_url") % "google-breakpad") + "/trunk/src@939",
 
   "src/build/util/support":
     "/trunk/deps/support@20411",
 
@@ skipping 462 matching lines @@
     "pattern": ".",
     "action": ["python", "src/build/util/lastchange.py",
                "-o", "src/build/util/LASTCHANGE"],
   },
   {
     # A change to a .gyp, .gypi, or to GYP itself should run the generator.
     "pattern": ".",
     "action": ["python", "src/build/gyp_chromium"],
   },
 ]