This updates some dependencies, notably nix.

Signed-off-by: Andrew Walbran <qwandor@google.com>