Software Updates, Platform Support, and Development Enhancements

- The `hadoop` package has added support for `aarch64-linux` and `aarch64-darwin` as of 3.3.1 ([#158613](https://github.com/NixOS/nixpkgs/pull/158613)). - The `R` package now builds again on `aarch64-darwin` ([#158992](https://github.com/NixOS/nixpkgs/pull/158992)). - The `nss` package was split into `nss_esr` and `nss_latest`, with `nss` being an alias for `nss_esr`. This was done to ease maintenance of `nss` and dependent high-profile packages like `firefox`. - The default `scribus` version is now 1.5, while version 1.4 is still available as `scribus_1_4` ([#172700](https://github.com/NixOS/nixpkgs/pull/172700)). - The Nextcloud module now supports to create a Mysql database automatically with `services.nextcloud.database.createLocally` enabled. - The Nextcloud module now allows setting the value of the `max-age` directive of the `Strict-Transport-Security` HTTP header, which is now controlled by the `services.nextcloud.https` option, rather than `services.nginx.recommendedHttpHeaders`. - The `spark3` package has been updated from 3.1.2 to 3.2.1 ([#160075](https://github.com/NixOS/nixpkgs/pull/160075)): - Testing has been enabled for `aarch64-linux` in addition to `x86_64-linux`. - The `spark3` package is now usable on `aarch64-darwin` as a result of [#158613](https://github.com/NixOS/nixpkgs/pull/158613) and [#158992](https://github.com/NixOS/nixpkgs/pull/158992). - The option `services.snapserver.openFirewall` will no longer default to `true` starting with NixOS 22.11. Enable it explicitly if you need to control Snapserver remotely or connect streamig clients from other hosts. - The option [networking.useDHCP](options.html#opt-networking.useDHCP) isn't deprecated anymore. When using [`systemd-networkd`](options.html#opt-networking.useNetworkd), a generic `.network`-unit is added which enables DHCP for each interface matching `en*`, `eth*` or `wl*` with priority 99 (which means that it doesn't have any effect if such an interface is matched by a `.network-`unit with a lower priority). In case of scripted networking, no behavior was changed. - The new [`postgresqlTestHook`](https://nixos.org/manual/nixpkgs/stable/#sec-postgresqlTestHook) runs a PostgreSQL server for the duration of package checks. - `zfs` was updated from 2.1.4 to 2.1.5, enabling it to be used with Linux kernel 5.18. - `stdenv.mkDerivation` now supports a self-referencing `finalAttrs:` parameter containing the final `mkDerivation` arguments including overrides. `drv.overrideAttrs` now supports two parameters `finalAttrs: previousAttrs:`. This allows packaging configuration to be overridden in a consistent manner by providing an alternative to `rec {}` syntax. Additionally, `passthru` can now reference `finalAttrs.finalPackage` containing the final package, including attributes such as the output paths and `overrideAttrs`. New language integrations can be simplified by overriding a "prototype" package containing the language-specific logic. This removes the need for a extra layer of overriding for the "generic builder" arguments, thus removing a usability problem and source of error.

This chunk details software updates, platform support, and development enhancements. Key software updates include `spark3` to 3.2.1, `zfs` to 2.1.5 (for Linux kernel 5.18), and `scribus` defaulting to 1.5. `hadoop`, `R`, and `spark3` gain `aarch64-darwin` support, with `hadoop` also supporting `aarch64-linux`. The `nss` package was split into `nss_esr` and `nss_latest`. Nextcloud module now supports automatic MySQL database creation and better `Strict-Transport-Security` header control. `services.snapserver.openFirewall` no longer defaults to `true`. `networking.useDHCP` is undeprecated, with `systemd-networkd` behavior clarified. Development enhancements include a new `postgresqlTestHook` for package checks and `stdenv.mkDerivation`/`drv.overrideAttrs` improvements with `finalAttrs` for flexible configuration.