chore: update nixpkgs

* `apple_sdk` is now `apple-sdk`
  * separate packages (Security, CoreFoundation) are no longer
    explicitly named, but included as part of `apple-sdk`

Author: jkachmar

flake.lock

@@ -1,7 +1,12 @@
 {
   description = "Haskell bindings to the Temporal Core library as well as an SDK built on top of it.";
   inputs = {
-    nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
+    # 2025-06-10: Pinned to the last commit before #411741, from 2025-05-30.
+    #
+    # PR that broke `ghcWithPackages`: https://github.com/NixOS/nixpkgs/pull/411741
+    # Upstream issue: https://github.com/NixOS/nixpkgs/issues/415436
+    # Proposed fix: https://github.com/NixOS/nixpkgs/pull/415434
+    nixpkgs.url = "github:NixOS/nixpkgs/81da63bafe32b705c40deb62a1ce1ae73836ff8b";
     devenv.url = "github:cachix/devenv/v1.0.5";
     fenix = {
       url = "github:nix-community/fenix";

flake.nix

@@ -4,13 +4,9 @@
       pkgs.crate2nix
       pkgs.protobuf
       pkgs.rust-cbindgen
-    ]
-    ++ (with pkgs;
-      lib.optionals stdenv.isDarwin (with darwin.apple_sdk.frameworks; [
-        Security
-        CoreFoundation
-        SystemConfiguration
-      ]));
+    ] ++ pkgs.lib.optionals pkgs.stdenv.hostPlatform.isDarwin [
+      pkgs.apple-sdk
+    ];
 
   languages.rust = {
     enable = true;

nix/devenv/temporal-bridge.nix

@@ -17,14 +17,7 @@ let
           PROTOC_INCLUDE = "${pkgs.protobuf}/include";
         };
         temporal_bridge = attrs: {
-          buildInputs = pkgs.lib.optionals pkgs.stdenv.isDarwin (
-            with pkgs.darwin.apple_sdk.frameworks;
-            [
-              Security
-              CoreFoundation
-              SystemConfiguration
-            ]
-          );
+          buildInputs = pkgs.lib.optionals pkgs.stdenv.hostPlatform.isDarwin [ pkgs.apple-sdk ];
           postInstall = ''
             ${attrs.postInstall or ""}
             ${pkgs.lib.optionalString pkgs.stdenv.isDarwin ''