python3Packages.pynacl: 1.6.0 -> 1.6.2; libsodium: 1.0.20 -> 1.0.20-unstable-2025-12-31

[mdaniels5757]

pynacl changelog: https://github.com/pyca/pynacl/blob/1.6.1/CHANGELOG.rst; https://github.com/pyca/pynacl/blob/1.6.2/CHANGELOG.rst

libsodium diff: jedisct1/libsodium@1.0.20-RELEASE...stable
libsodium changelog: https://github.com/jedisct1/libsodium/blob/d44593f1a5b7d31b5122689605b489577356f7e8/ChangeLog
libsodium CVE: CVE-2025-69277

Switched libsodium to the stable branch per jedisct1/libsodium@98e0129 (and the security fix). We had to switch to GitHub for this: although they have a download for the stable branch, the URL stays the same even when the content changes.

Things done

• Built on platform:
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• Tested, as applicable:
  • NixOS tests in nixos/tests.
  • Package tests at passthru.tests.
  • Tests in lib/tests or pkgs/test for functions and "core" functionality.
• Ran nixpkgs-review on this PR. See nixpkgs-review usage.
• Tested basic functionality of all binary files, usually in ./result/bin/.
• Nixpkgs Release Notes
  • Package update: when the change is major or breaking.
• NixOS Release Notes
  • Module addition: when adding a new NixOS module.
  • Module update: when the change is significant.
• Fits CONTRIBUTING.md, pkgs/README.md, maintainers/README.md and other READMEs.

---

Add a 👍 reaction to pull requests you find important.

[nixpkgs-ci]

Successfully created backport PR for staging-25.11:

• [Backport staging-25.11] python3Packages.pynacl: 1.6.0 -> 1.6.2; libsodium: 1.0.20 -> 1.0.20-unstable-2025-12-31 #476645