cran-packages: update all packages to their respecitve latest version
haskell: update imm to 0.6.0.3
Merge pull request #4764 from bergey/imm

haskell: update imm to 0.6.0.3
grsecurity: Update stable and test patches

stable: 3.0-3.14.22-201410250026 -> 3.0-3.14.23-201410312212
test:   3.0-3.17.1-201410281754  -> 3.0-3.17.2-201410312213
haskell-cabal2nix: update to version 1.71
nix-prefetch-git: fix determinism with leaveDotGit

Remove all remote branches, remove tags not reachable from the given
'rev', do a full repack and then garbage collect unreferenced objects.

According to my testing, the result is fully deterministic. As in "any
change done to the upstream repo, ahead of 'rev', will not affect the
output hash". But only time will tell.

A new version of git can of course change store format, but that's
unavoidable.

For big repositories, the repack operation may be a bit heavy. But as
far as I can see there is no cheaper way to determinism.