Update nixpkgs (2024-11-25)

Pull upstream NixOS changes, security fixes and package updates:

- Merge: matrix-synapse: 1.118.0 -> 1.119.0, (#355692)
- Merge: nodejs_18: 18.20.4 -> 18.20.5, (#355530)
- Merge: postgresql: improve passthru.tests (#352966)
- Merge: postgresql_17: fix build (#354571)
- Merge: strace: enable debug info (#354017)
- binutils: make patches unconditional
- binutils: make patches unconditional (#350297)
- bundler: 2.5.21 -> 2.5.22
- calibre: 7.20.0 -> 7.21.0
- ceph: patch to pick up upstream arrow 18 s3select fix
- chromium: fetch src from git instead of using release tarball
- chromium: remove "channel" argument
- chromium: use cached dependencies from other attributes in update script
- cmake: 3.30.4 -> 3.30.5
- cmake: 3.30.4 -> 3.30.5, (#349465)
- cmake: Fix the FindCURL module
- cmake: Fix the FindCURL module (#351573)
- curl: 8.10.1 -> 8.11.0
- curl: 8.10.1 -> 8.11.0, (#353968)
- docker-compose: 2.29.7 -> 2.30.0
- docker-compose: 2.29.7 -> 2.30.0, (#352342)
- docker: use lib.versionOlder in literalExpression
- element-web: passthru conf to allow extending it via modules without discarding already set config
- element-web: passthru conf to allow extending it via modules without discarding already set config (#355225)
- ffmpeg: add kvazaar option
- ffmpeg: add kvazaar option (#351176)
- ffmpeg: add lc3 option
- ffmpeg: add lcevcdec option
- ffmpeg: add librist
- ffmpeg: add librist (#353473)
- ffmpeg: add missing variant requirements for amf
- ffmpeg: add missing variant requirements for amf (#353118)
- ffmpeg: add new external libs added in 7.1 (#348798)
- ffmpeg: add vvenc option
- github-runner: 2.320.0 -> 2.321.0
- gitlab: 17.3.6 -> 17.3.7
- gitlab: update bundler version
- go_1_22: 1.22.8 -> 1.22.9
- go_1_22: 1.22.8 -> 1.22.9, (#354123)
- grafana: 11.3.0 -> 11.3.0+security-01, fix CVE-2024-9476
- grafana: 11.3.0 -> 11.3.1, fix CVE-2024-9476 (#355481)
- imagemagick: 7.1.1-39 -> 7.1.1-40
- imagemagick: 7.1.1-39 -> 7.1.1-40, (#354898)
- imagemagick: fix build on Darwin
- imagemagick: fix build on Darwin (#355536)
- kubernetes-helm: 3.16.2 -> 3.16.3
- libffi: move label before .cfi_starproc
- libjpeg: 3.0.3 -> 3.0.4
- libjpeg: 3.0.3 -> 3.0.4, (#341943)
- libjpeg: drop freeimage from passthru tests
- mariadb: 10.5.27, 10.6.20, 10.11.10, 11.4.4
- mariadb: 10.5.27, 10.6.20, 10.11.10, 11.4.4 (#353661)
- matrix-synapse: 1.118.0 -> 1.119.0
- memcached: 1.6.29 -> 1.6.31
- memcached: 1.6.29 -> 1.6.31, (#349258)
- mysql80: 8.0.39 -> 8.0.40
- mysql80: 8.0.39 -> 8.0.40, (#350248)
- nginx: upgrade pcre to pcre2
- nix: switch to darwinMinVersionHook
- nodejs_18: 18.20.4 -> 18.20.5
- nspr: 4.35 -> 4.36
- nspr: 4.35 -> 4.36, (#350454)
- nss_latest: 3.105 -> 3.106
- nss_latest: 3.105 -> 3.106, (#350999)
- postgresql: add passthru.tests.postgresql
- postgresql: add passthru.tests.postgresql-tls-client-cert
- postgresqlPackages.postgis: move nixosTests.postgis into package
- postgresql_13: 13.16 -> 13.17
- postgresql_14: 14.13 -> 14.14
- postgresql_15: 15.8 -> 15.9
- postgresql_17: 17.0 -> 17.1
- postgresql_17: fix build
- rclone: 1.68.1 -> 1.68.2
- ruby: fix cross build (#348566)
- strace: 6.11 -> 6.12
- strace: enable debug info
- sudo: 1.9.15p5 -> 1.9.16
- sudo: 1.9.15p5 -> 1.9.16, (#354374)
- sudo: fix cross-compilation linking error
- sudo: fix cross-compilation linking error (#354576)
- telegraf: 1.32.1 -> 1.32.2
- vim: 9.1.0765 -> 9.1.0787
- vim: 9.1.0765 -> 9.1.0787, (#349214)
- wget: 1.24.5 -> 1.25.0
- wget: enable parallel building
- wget: use nuke-refs to avoid runtime depeneds