diff --git a/tools/nix/openssl-matrix.nix b/tools/nix/openssl-matrix.nix
index 56cc7d506ad6..396c6d583808 100644
--- a/tools/nix/openssl-matrix.nix
+++ b/tools/nix/openssl-matrix.nix
@@ -1,6 +1,6 @@
 {
   pkgs ? import ./pkgs.nix {
-    config.permittedInsecurePackages = [ "openssl-1.1.1w" ];
+    config.permittedInsecurePackages = [  ];
   },
 }:
 
@@ -11,7 +11,6 @@
   # Other OpenSSL variants we want to test for:
   inherit (pkgs)
     boringssl
-    openssl_1_1
     openssl_3
     openssl_3_6
     openssl_4_0
diff --git a/tools/nix/pkgs-26.05.nix b/tools/nix/pkgs-26.05.nix
index 7a1167a798d1..bef3903bbd2c 100644
--- a/tools/nix/pkgs-26.05.nix
+++ b/tools/nix/pkgs-26.05.nix
@@ -1,10 +1,10 @@
 arg:
 let
   repo = "https://github.com/NixOS/nixpkgs";
-  rev = "329c3d2af6d1b618705150ea39f72c15eb4e613e";
+  rev = "4014d8bb312b04b49ec74adff5f9b32982bd0580";
   nixpkgs = import (builtins.fetchTarball {
     url = "${repo}/archive/${rev}.tar.gz";
-    sha256 = "0hkr1j8mm50gpxd55y85vq85bxxww8rhwf6mkvkrg0qw21dmvlmd";
+    sha256 = "0h2idwfmv684img0kjy3da9cm37378bbp0g1vpqd570rl665af1r";
   }) arg;
 in
 # Unstable channel no longer supports Intel architecture for macOS. We can use the 26.05 channel
diff --git a/tools/nix/pkgs.nix b/tools/nix/pkgs.nix
index 9b999f68c29c..de0eb963b037 100644
--- a/tools/nix/pkgs.nix
+++ b/tools/nix/pkgs.nix
@@ -1,10 +1,10 @@
 arg:
 let
   repo = "https://github.com/NixOS/nixpkgs";
-  rev = "bcdf747749ad31ab043d6341a18699a8b9b62ef0";
+  rev = "d482ef84049d9b7276b83a06e4e4d76983830097";
   nixpkgs = import (builtins.fetchTarball {
     url = "${repo}/archive/${rev}.tar.gz";
-    sha256 = "10vv47y0b3k3aq2l52rqd5qzk50a7jbdcamd8rwc0g02mm6blxn8";
+    sha256 = "0azzfznifj3kvgjl7638kxkr0dr2rjh8r2p5rphc97sz84677vn1";
   }) arg;
 in
 # Unstable channel no longer supports Intel architecture for macOS. We can use the 26.05 channel