allow http-client-tls-0.4, crypton-x509*-1.9, tls-2.2+, jose-1.3

[juhp]

Closes: #7929 #7966 #8033

Addresses https://haskell.github.io/security-advisories/advisory/HSEC-2026-0008.html (crypton-x509-validation, crypton-x509)

[ysangkok]

@juhp You should not need to disable dhall, as it has a flag use-http-client-tls that we could disable.

BTW I have fixed servant and smtp-mail

[jappeace]

mysql-haskell has a flag too which is enabled by default.

[woffs]

just released amqp-utils-0.6.8.0 to manage this

[juhp]

I updated the PR; although it sounds like Kazu doesn't feel the HSEC issue is really exploitable: so not very serious perhaps? Though I suppose for Stackage LTS users in an enterprise setting there may be compliance requirements, etc.

One can see the full list of packages that will be disable in the changes.
I did open upstream issues for all the remaining top level packages today that didn't have them.

[juhp]

I am thinking to merge this soon probably - hopefully hoauth2 gets fixed soon (there is a PR or 3 now;)

[juhp]

Alright I am going to merge this shortly: hackage is flaking out in CI

(bit tedious to keep it updated with master)

[juhp]

Okay it built now, though quite a bit of additional collateral alas: 18f59db...57a2734

or overall including here: 487d99f...57a2734