nix: migrate off deprecated crane stdenv arg to stdenvSelector

[amaanq]

Description

Crane deprecated passing stdenv into mkCargoDerivation, however, since the input of crane here is a bit behind, no warning is emitted yet. I use Nativelink between my own machines, but I set the crane input here to follow a more up-to-date crane, and as such, I get hit with the following warning:

evaluation warning: passing in an `stdenv` override into `mkCargoDerivation` is now deprecated.
                    Changing the default `stdenv` must be done at the `craneLib` level like so:

                      craneLib = (inputs.crane.mkLib pkgs).overrideScope (final: prev: {
                        # Set this to the chosen stdenv, e.g. `p.clangStdenv`
                        stdenvSelector = p: p.stdenv;

This PR's change is defensive in nature, but I went ahead and updated the crane input as well. If that's undesireable, please let me know and I can revert that, the fix works without bumping crane.

Thanks for the really cool project :)

Fixes # (issue)

(No issue, just something I ran into)

Type of change

A defensive future-bug fix.

• Bug fix (non-breaking change which fixes an issue)

How Has This Been Tested?

I ran this locally, overriding my input with the local path.

Checklist

• Updated documentation if needed
• Tests added/amended
• bazel test //... passes locally
• PR is contained in a single commit, using git amend see some docs

---

This change is 

[vercel]

@amaanq is attempting to deploy a commit to the native-link-web-assets Team on Vercel.

A member of the Team first needs to authorize it.

[CLAassistant]

All committers have signed the CLA.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
nativelink	Ready	Preview, Comment	May 30, 2026 2:09am
nativelink-aidm	Ready	Preview, Comment	May 30, 2026 2:09am

[MarcusSorealheis]

Very interesting pull request @amaanq! Thank you for the fix.

[amaanq]

Seems like the failing mac job may just be flaky

[MarcusSorealheis]

@amaanq This is a weird failure.

[amaanq]

@amaanq This is a weird failure.

Yeah it seems like a transient network failure from a glance, maybe re-running that job might fix it?

[MarcusSorealheis]

I like this but I'd like to explore giving people the option to run glibc at times when they need it. Musl is good default, though, for obvious reasons.

[amaanq]

Sure, that sounds reasonable. I could do that in a follow-up pr

[MarcusSorealheis]

I am going to cut a release with this fix soon.

[MarcusSorealheis]

@amaanq LGTM

[amaanq]

I am going to cut a release with this fix soon.

awesome!