gnu: ghc-mattermost-api: Update to 90000.1.1.

* gnu/packages/haskell-web.scm (ghc-mattermost-api): Update to 90000.1.1.
[source]: Add reference to patch.
[inputs]: Drop ghc-connection.
* gnu/packages/patches/ghc-matterhorn-crypton-connection.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add reference to it.

Signed-off-by: Andreas Enge <andreas@enge.fr>

3 files changed, 66 insertions, 4 deletions

diff --git a/gnu/local.mk b/gnu/local.mk
index 64c215fc31d..bcb4f93fe3f 100644
--- a/gnu/local.mk
+++ b/gnu/local.mk
@@ -1460,6 +1460,7 @@ dist_patch_DATA =						\
   %D%/packages/patches/ghc-memory-fix-32bit.patch               \
   %D%/packages/patches/ghc-persistent-fix-32bit.patch           \
   %D%/packages/patches/ghc-openssl-streams-regenerate-test-certificate.patch \
+  %D%/packages/patches/ghc-matterhorn-crypton-connection.patch  \
   %D%/packages/patches/ghostscript-CVE-2023-36664.patch         \
   %D%/packages/patches/ghostscript-CVE-2023-36664-fixup.patch   \
   %D%/packages/patches/ghostscript-leptonica-hurd.patch         \
diff --git a/gnu/packages/haskell-web.scm b/gnu/packages/haskell-web.scm
index dd501f93629..3227a1e784a 100644
--- a/gnu/packages/haskell-web.scm
+++ b/gnu/packages/haskell-web.scm
@@ -14,6 +14,7 @@
 ;;; Copyright © 2020 Giacomo Leidi <therewasa@fishinthecalculator.me>
 ;;; Copyright © 2022 Alice Brenon <alice.brenon@ens-lyon.fr>
 ;;; Copyright © 2026 Maxim Cournoyer <maxim@guixotic.coop>
+;;; Copyright © 2026 Konstantin Suntsov <protvin@disroot.org>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -845,13 +846,14 @@ Haskell.")
 (define-public ghc-mattermost-api
   (package
     (name "ghc-mattermost-api")
-    (version "90000.0.0")
+    (version "90000.1.1")
     (source
      (origin
        (method url-fetch)
        (uri (hackage-uri "mattermost-api" version))
        (sha256
-        (base32 "1ka3r4bnfwlbjnkws8vkg8i9gj8wzsyss137p7hxrx4sr75s6iyv"))))
+        (base32 "0l6nqrn3sdikpi1h2hrx0p7c51qvq89ibqd3z9dzzg1riz4rirfr"))
+       (patches (search-patches "ghc-matterhorn-crypton-connection.patch"))))
     (build-system haskell-build-system)
     (properties '((upstream-name . "mattermost-api")))
     (inputs (list ghc-websockets
@@ -869,8 +871,7 @@ Haskell.")
                   ghc-microlens
                   ghc-microlens-th
                   ghc-pretty-show
-                  ghc-split
-                  ghc-connection))
+                  ghc-split))
     (native-inputs (list ghc-tasty ghc-tasty-hunit ghc-hunit))
     (arguments
      (list #:tests? #f)) ;tests require networking and Mattermost Docker image
diff --git a/gnu/packages/patches/ghc-matterhorn-crypton-connection.patch b/gnu/packages/patches/ghc-matterhorn-crypton-connection.patch
new file mode 100644
index 00000000000..5ae4d85c4d5
--- /dev/null
+++ b/gnu/packages/patches/ghc-matterhorn-crypton-connection.patch
@@ -0,0 +1,60 @@
+https://github.com/matterhorn-chat/mattermost-api/pull/65.patch
+
+From 2eb3aba58baeed5208a83deeb885a7ed100562ac Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Geoffrey=20=E2=80=9CFrogeye=E2=80=9D=20Preud=27homme?=
+ <geoffrey@frogeye.fr>
+Date: Sun, 30 Nov 2025 10:02:49 +0100
+Subject: [PATCH] Support crypton-connection >= 0.4.0
+
+crypton-connection added a non-optional argument to TLSSettingSimple in
+0.4.0: https://github.com/kazu-yamamoto/crypton-connection/pull/3 .
+
+This adds this argument, and limit crypton-connection to < 0.5.0 as they
+consider minor versions as breaking.
+---
+ mattermost-api.cabal           | 3 ++-
+ src/Network/Mattermost/Util.hs | 3 ++-
+ 2 files changed, 4 insertions(+), 2 deletions(-)
+
+diff --git a/mattermost-api.cabal b/mattermost-api.cabal
+index 08b6884..028f052 100644
+--- a/mattermost-api.cabal
++++ b/mattermost-api.cabal
+@@ -45,7 +45,7 @@ library
+                      , websockets >= 0.11.0.0
+                      , stm
+                      , aeson >= 2.0.1.0 && < 2.3.0.0
+-                     , crypton-connection
++                     , crypton-connection >= 0.4.0 && < 0.5.0
+                      , memory
+                      , resource-pool >= 0.2.3
+                      -- To prevent broken websockets versions from using
+@@ -69,6 +69,7 @@ library
+                      , template-haskell
+                      , microlens
+                      , microlens-th
++                     , tls
+                      -- Only here to make debugging easier
+                      , pretty-show
+                      , split
+diff --git a/src/Network/Mattermost/Util.hs b/src/Network/Mattermost/Util.hs
+index 0a5b070..aba2f8f 100644
+--- a/src/Network/Mattermost/Util.hs
++++ b/src/Network/Mattermost/Util.hs
+@@ -23,6 +23,7 @@ import           Data.Monoid ((<>))
+ import           Control.Exception ( Exception
+                                    , throwIO )
+ import           Data.Pool (takeResource, putResource, destroyResource)
++import           Network.TLS (defaultSupported)
+ import           Network.Connection ( Connection
+                                     , ConnectionContext
+                                     , ConnectionParams(..)
+@@ -95,7 +96,7 @@ mkConnection ctx host port connTy = do
+             -- The first argument to TLSSettingsSimple is whether to
+             -- /disable/ cert validation. If requireTrustedCert is True,
+             -- we want that argument to be False to force validation.
+-            Just (TLSSettingsSimple (not requireTrustedCert) False False)
++            Just (TLSSettingsSimple (not requireTrustedCert) False False defaultSupported)
+     , connectionUseSocks  = do
+         (ty, cHost, cPort) <- proxy
+         case ty of