chore: request #47667 Update dev/build environment [W24 2026]

Main changes:
* Node: 24.14.1 -> 24.15.0
* UV: 0.11.8 -> 0.11.15
* Zizmor: 1.24.1 -> 1.25.2

Author: LeSuisse

build-support/pinned-nixpkgs.nix

@@ -2,18 +2,18 @@
 
 let
   pinnedNixpkgs = import (fetchTarball {
-    url = "https://github.com/NixOS/nixpkgs/archive/73c703c22422b8951895a960959dbbaca7296492.tar.gz";
-    sha256 = "sha256-wQ/iN5Zp5VIa3ebBibijPnLyKhor+xEbDy4d0goa9Zs=";
+    url = "https://github.com/NixOS/nixpkgs/archive/8c3cede7ddc26bd659d2d383b5610efbd2c7a16e.tar.gz";
+    sha256 = "sha256-rppURzHviaQN131F+nLiLdGfcb0uCd9gGP0E5+iw9MI=";
   }) { };
   pyproject-nix = import (builtins.fetchTarball {
-    url = "https://github.com/pyproject-nix/pyproject.nix/archive/69f57f27e52a87c54e28138a75ec741cd46663c9.tar.gz";
-    sha256 = "sha256-Gs1VnEkCkkRZxJQAC/Dhz0Jbfi22mFXChbtNg9w/Ybg=";
+    url = "https://github.com/pyproject-nix/pyproject.nix/archive/ad83f1ead0e78e57b188f35cb57298affb06fc5f.tar.gz";
+    sha256 = "sha256-rRK3IFixgsrK6S3e14Xz9HAZm7+kMAIl3oi5zZlcwYI=";
   }) { lib = pinnedNixpkgs.lib; };
   uv2nix =
     import
       (builtins.fetchTarball {
-        url = "https://github.com/pyproject-nix/uv2nix/archive/5ad90d48b80ecc920ca2247d53f46beba302e186.tar.gz";
-        sha256 = "sha256-KebDsQd+A7pm++Tp0744EjULttHvz1wbKqNKkMA/088=";
+        url = "https://github.com/pyproject-nix/uv2nix/archive/0497ccef038da091002be7c05263a7f27820974f.tar.gz";
+        sha256 = "sha256-yZVQNvmDx1SFjvlwevywsXWJnieSRqmQr7/fCTMyyd0=";
       })
       {
         lib = pinnedNixpkgs.lib;
@@ -22,8 +22,8 @@ let
   pyproject-build-systems =
     import
       (builtins.fetchTarball {
-        url = "https://github.com/pyproject-nix/build-system-pkgs/archive/ffaa2161dd5d63e0e94591f86b54fc239660fb2e.tar.gz";
-        sha256 = "sha256-qapCOQmR++yZSY43dzrp3wCrkOTLpod+ONtJWBk6iKU=";
+        url = "https://github.com/pyproject-nix/build-system-pkgs/archive/7bff980f37fc24e09dbc986643719900c139bf12.tar.gz";
+        sha256 = "sha256-MbXylBTkWqVm8/VYjoULtMoVRgWBN1gSHbeRKsOsPlU=";
       })
       {
         lib = pinnedNixpkgs.lib;

build-support/pinned-treefmt-nix.nix

@@ -1,6 +1,6 @@
 { }:
 
 import (fetchTarball {
-  url = "https://github.com/numtide/treefmt-nix/archive/790751ff7fd3801feeaf96d7dc416a8d581265ba.tar.gz";
-  sha256 = "sha256-pc20NRoMdiar8oPQceQT47UUZMBTiMdUuWrYu2obUP0=";
+  url = "https://github.com/numtide/treefmt-nix/archive/db947814a175b7ca6ded66e21383d938df01c227.tar.gz";
+  sha256 = "sha256-eynAfOmbmxJnkp7YewvCEbShNnnYJ9gLLqkzsYtBPeM=";
 })

shell.nix

@@ -7,8 +7,7 @@ pkgs.mkShellNoCC {
   UV_PYTHON_DOWNLOADS = "never";
   UV_PYTHON = pkgs.lib.getExe pkgs.python3;
 
-  buildInputs = [
+  nativeBuildInputs =
     (import ./build-support/build-tools.nix { inherit pkgs; })
-    (import ./build-support/dev-tools.nix { inherit pkgs; })
-  ];
+    ++ (import ./build-support/dev-tools.nix { inherit pkgs; });
 }