Release 2.27.0 (2025-02-26)

Set FD_CLOEXEC on sockets created by curl #12439

Curl creates sockets without setting FD_CLOEXEC/SOCK_CLOEXEC, this can cause connections to remain open forever when using commands like nix shell

This change sets the FD_CLOEXEC flag using a CURLOPT_SOCKOPTFUNCTION callback.
Git LFS support #10153 #12468

The Git fetcher now supports Large File Storage (LFS). This can be enabled by passing the attribute lfs = true to the fetcher, e.g.
```
nix flake prefetch 'git+ssh://git@github.com/Apress/repo-with-large-file-storage.git?lfs=1'
```
A flake can also declare that it requires lfs to be enabled:
```
{
  inputs.self.lfs = true;
}
```
Author: @b-camacho, @kip93
inputs.self.submodules flake attribute #12421

Flakes in Git repositories can now declare that they need Git submodules to be enabled:
```
{
  inputs.self.submodules = true;
}
```
Thus, it's no longer needed for the caller of the flake to pass submodules = true.

Contributors

Querying GitHub API for 5cf9e18167, to get handle for fabianm88@gmail.com