Motivation for this change

New major stable release is out and contains 42 security fixes as well as ton of new features.

Things done

• Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
• Built on platform(s)
  • NixOS
  • macOS
  • other Linux distributions
• Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
• Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
• Tested execution of all binary files (usually in ./result/bin/)
• Determined the impact on package closure size (by running nix path-info -S before and after)
• Fits CONTRIBUTING.md.

I've checked that stable branch builds, didn't check beta branch as it lags behind stable at this moment. Dev is broken due to work done to extract gn code out of Chromium (we could get another build speedup by building it separately, yay!), we'll need to figure it out separately.

CC @bendlas @7c6f434c