Upgraded things on Friday, ran into this issue, and filed NixOS/nix#4705.
A recent comment said it was related to ca-derivations, I went and ripgrep'd devos and saw it was enabled now.
Thought it would be good to create an issue here in case others run into it.
Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.