Nix: Bump s2n-bignum and hol_light

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>

Author: mkannwischer

nix/hol_light/default.nix

@@ -7,23 +7,21 @@ hol_light.overrideAttrs (old: {
     export HOLLIGHT_DIR="$1/lib/hol_light"
     export PATH="$1/lib/hol_light:$PATH"
   '';
-  version = "unstable-2026-02-27";
+  version = "unstable-2026-04-17";
   src = fetchFromGitHub {
     owner = "jrh13";
     repo = "hol-light";
-    rev = "d9a37c8a3e82196280ce27089b9af8b9ea2710b9";
-    hash = "sha256-XQz/lso/0evfspCmSXm/Z4c8hEZE18JsMPHP0GDdiBQ=";
+    rev = "af5d20e033025a9f30a490d9c39edace632405a3";
+    hash = "sha256-R5hSHguVu7YPP7bnFJQ1Prc8Yy3L41LAB20LfEr/RUw=";
   };
   patches = [
     ./0005-Configure-hol-sh-for-mlkem-native.patch
     ./0006-Add-findlib-to-ocaml-hol.patch
   ];
   propagatedBuildInputs = old.propagatedBuildInputs ++ old.nativeBuildInputs ++ [ ocamlPackages.pcre2 ledit ];
   buildPhase = ''
-    patchShebangs pa_j/chooser.sh
-    patchShebangs update_database/chooser.sh
+    patchShebangs .
     HOLLIGHT_USE_MODULE=1 make hol.sh
-    patchShebangs hol.sh
     HOLLIGHT_USE_MODULE=1 make
   '';
   installPhase = ''

nix/s2n_bignum/default.nix

@@ -2,12 +2,12 @@
 { stdenv, fetchFromGitHub, writeText, ... }:
 stdenv.mkDerivation rec {
   pname = "s2n_bignum";
-  version = "628a9cc892c53d112a4b592180b1f3f8d17b156a";
+  version = "b70f1349bdc930769dbe5fee070044c27395e70a";
   src = fetchFromGitHub {
     owner = "awslabs";
     repo = "s2n-bignum";
     rev = "${version}";
-    hash = "sha256-UpC0pvrXHNUyDY1lhji1OQfHZK755VvSQFtODFX3VQ8=";
+    hash = "sha256-zZYIOp3bL/Asr4RdDYDFH804EJoRB4CKFmjKZepKEvA=";
   };
   setupHook = writeText "setup-hook.sh" ''
     export S2N_BIGNUM_DIR="$1"