build: update bazel dependencies (21.0.x) #32595

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

angular-robot wants to merge 1 commit into angular:21.0.x

from angular-robot:ng-renovate/21.0.x-bazel-dependencies

Open

build: update bazel dependencies (21.0.x) #32595

angular-robot wants to merge 1 commit into angular:21.0.x from angular-robot:ng-renovate/21.0.x-bazel-dependencies

+44 −46

Conversation

@angular-robot

Copy link

Contributor

@angular-robot angular-robot commented Dec 25, 2025 •

edited

Loading

This PR contains the following updates:

Package	Type	Update	Change
aspect_bazel_lib	bazel_dep	patch	`2.22.0` → `2.22.5`
aspect_rules_esbuild	bazel_dep	minor	`0.24.0` → `0.25.0`
aspect_rules_js	bazel_dep	minor	`2.8.3` → `2.9.1`
aspect_rules_ts	bazel_dep	patch	`3.8.0` → `3.8.1`
bazel_skylib	bazel_dep	minor	`1.8.2` → `1.9.0`
rules_browsers	git_override	digest	`8ef3e99` → `5f0e50d`
rules_pkg (source)	bazel_dep	minor	`1.1.0` → `1.2.0`
yq.bzl	bazel_dep	patch	`0.3.2` → `0.3.4`

Release Notes

aspect-build/rules_esbuild (aspect_rules_esbuild)

`v0.25.0`

Using Bzlmod with Bazel 6:

Add to your MODULE.bazel file:

bazel_dep(name = "aspect_rules_esbuild", version = "0.25.0")

Using WORKSPACE

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
 name = "aspect_rules_esbuild",
 sha256 = "fa87640cdf67470441309581983042c697f2e7279dafcfaa7bb719d7de887745",
 strip_prefix = "rules_esbuild-0.25.0",
 url = "https://github.com/aspect-build/rules_esbuild/releases/download/v0.25.0/rules_esbuild-v0.25.0.tar.gz",
)
######################
# rules_esbuild setup #
######################
# Fetches the rules_esbuild dependencies.
# If you want to have a different version of some dependency,
# you should fetch it *before* calling this.
# Alternatively, you can skip calling this function, so long as you've
# already fetched all the dependencies.
load("@&#8203;aspect_rules_esbuild//esbuild:dependencies.bzl", "rules_esbuild_dependencies")
rules_esbuild_dependencies()
load("@&#8203;aspect_rules_js//js:toolchains.bzl", "DEFAULT_NODE_VERSION", "rules_js_register_toolchains")
rules_js_register_toolchains(node_version = DEFAULT_NODE_VERSION)
# Register a toolchain containing esbuild npm package and native bindings
load("@&#8203;aspect_rules_esbuild//esbuild:repositories.bzl", "LATEST_ESBUILD_VERSION", "esbuild_register_toolchains")
esbuild_register_toolchains(
 name = "esbuild",
 esbuild_version = LATEST_ESBUILD_VERSION,
)

To use rules_esbuild with bazel-lib 2.0, you must additionally register the coreutils toolchain.

load("@&#8203;aspect_bazel_lib//lib:repositories.bzl", "register_coreutils_toolchains")
register_coreutils_toolchains()

What's Changed

Changes by create-pull-request action by @github-actions[bot] in #244
chore: update bazel_skylib version to 1.8.2 by @papshed in #249
fix: skip sandbox validation for external modules in bazel-sandbox plugin by @sallustfire in #246
fix: determine esbuild binary path at repository instantiation (#234) by @sallustfire in #248
feat: gather config dependencies when config is a js_library by @sallustfire in #247

New Contributors

@papshed made their first contribution in #249
@sallustfire made their first contribution in #246

Full Changelog: aspect-build/rules_esbuild@v0.24.0...v0.25.0

aspect-build/rules_js (aspect_rules_js)

`v2.9.1`

Many companies are successfully building with rules_js.
If you're getting value from the project, please let us know!
Just comment on our Adoption Discussion.

Using Bzlmod with Bazel 6:

Add to your MODULE.bazel file:

bazel_dep(name = "aspect_rules_js", version = "2.9.1")
####### Node.js version #########
# By default you get the node version from DEFAULT_NODE_VERSION in @&#8203;rules_nodejs//nodejs:repositories.bzl
# Optionally you can pin a different node version:
bazel_dep(name = "rules_nodejs", version = "6.3.0")
node = use_extension("@&#8203;rules_nodejs//nodejs:extensions.bzl", "node", dev_dependency = True)
node.toolchain(node_version = "18.14.2")
#################################
npm = use_extension("@&#8203;aspect_rules_js//npm:extensions.bzl", "npm", dev_dependency = True)
npm.npm_translate_lock(
 name = "npm",
 pnpm_lock = "//:pnpm-lock.yaml",
 verify_node_modules_ignored = "//:.bazelignore",
)
use_repo(npm, "npm")
pnpm = use_extension("@&#8203;aspect_rules_js//npm:extensions.bzl", "pnpm")
# Allows developers to use the matching pnpm version, for example:
# bazel run -- @&#8203;pnpm --dir /home/runner/work/rules_js/rules_js install
use_repo(pnpm, "pnpm")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
 name = "aspect_rules_js",
 sha256 = "b87afa2205b6fa4540e01d2c47b02a92ed67e24e24f738d46c4c8099836a769a",
 strip_prefix = "rules_js-2.9.1",
 url = "https://github.com/aspect-build/rules_js/releases/download/v2.9.1/rules_js-v2.9.1.tar.gz",
)
load("@&#8203;aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")
rules_js_dependencies()
load("@&#8203;aspect_rules_js//js:toolchains.bzl", "DEFAULT_NODE_VERSION", "rules_js_register_toolchains")
rules_js_register_toolchains(node_version = DEFAULT_NODE_VERSION)
load("@&#8203;aspect_rules_js//npm:repositories.bzl", "npm_translate_lock")
npm_translate_lock(
 name = "npm",
 npmrc = "//:.npmrc",
 pnpm_lock = "//:pnpm-lock.yaml",
 verify_node_modules_ignored = "//:.bazelignore",
)
load("@&#8203;npm//:repositories.bzl", "npm_repositories")
npm_repositories()

What's Changed

chore: update Next.js version to 15.2.6 by @scottshuffler in #2591
Fix fetching npm packages from git repositories by @thomasdraebing in #2403
fix: do not serialize Label() via "".join() when tar command fails by @jbedard in #2593
chore: add github_user_id to bcr metadata.template.json by @jbedard in #2588
fix(pnpm): Parse integrity hash from package.json packageManager if provided by @Geethree in #2596
fix: npm deps on git+https urls by @jbedard in #2592
chore(deps): update actions/checkout action to v6 by @renovate[bot] in #2523
chore(deps): update peter-evans/create-pull-request action to v8 by @renovate[bot] in #2572
chore(deps): update bazel-contrib/publish-to-bcr action to v1.1.0 by @renovate[bot] in #2599
test: move babel test deps into test/node-patches/package.json by @jbedard in #2598
chore(deps): update actions/cache action to v5 by @renovate[bot] in #2602

New Contributors

@scottshuffler made their first contribution in #2591
@thomasdraebing made their first contribution in #2403
@Geethree made their first contribution in #2596

Full Changelog: aspect-build/rules_js@v2.9.0...v2.9.1

aspect-build/rules_ts (aspect_rules_ts)

`v3.8.1`

Using Bzlmod:

Add to your MODULE.bazel file:

bazel_dep(name = "aspect_rules_ts", version = "3.8.1")
rules_ts_ext = use_extension("@&#8203;aspect_rules_ts//ts:extensions.bzl", "ext", dev_dependency = True)
rules_ts_ext.deps(
 ts_version_from = "//:package.json",
)
use_repo(rules_ts_ext, "npm_typescript")

Using legacy WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
 name = "aspect_rules_ts",
 sha256 = "dc3235a4e8cdb59518c42abdf1ba48f6bb47c5893abbc4c936ccded313234c6d",
 strip_prefix = "rules_ts-3.8.1",
 url = "https://github.com/aspect-build/rules_ts/releases/download/v3.8.1/rules_ts-v3.8.1.tar.gz",
)
##################
# rules_ts setup #
##################
# Fetches the rules_ts dependencies.
# If you want to have a different version of some dependency,
# you should fetch it *before* calling this.
# Alternatively, you can skip calling this function, so long as you've
# already fetched all the dependencies.
load("@&#8203;aspect_rules_ts//ts:repositories.bzl", "rules_ts_dependencies")
rules_ts_dependencies(
 # This keeps the TypeScript version in-sync with the editor, which is typically best.
 ts_version_from = "//:package.json",
 # Alternatively, you could pick a specific version, or use
 # load("@&#8203;aspect_rules_ts//ts:repositories.bzl", "LATEST_TYPESCRIPT_VERSION")
 # ts_version = LATEST_TYPESCRIPT_VERSION
)
load("@&#8203;aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")
rules_js_dependencies()
load("@&#8203;aspect_rules_js//js:toolchains.bzl", "DEFAULT_NODE_VERSION", "rules_js_register_toolchains")
rules_js_register_toolchains(node_version = DEFAULT_NODE_VERSION)
load("@&#8203;aspect_rules_js//npm:repositories.bzl", "npm_translate_lock")
npm_translate_lock(
 name = "npm",
 npmrc = "//:.npmrc",
 pnpm_lock = "//:pnpm-lock.yaml",
 verify_node_modules_ignored = "//:.bazelignore",
)
load("@&#8203;npm//:repositories.bzl", "npm_repositories")
npm_repositories()
# Register aspect_bazel_lib toolchains;
# If you use npm_translate_lock or npm_import from aspect_rules_js you can omit this block.
load("@&#8203;aspect_bazel_lib//lib:repositories.bzl", "aspect_bazel_lib_dependencies")
aspect_bazel_lib_dependencies()

To use rules_ts with bazel-lib 2.x, you must additionally register the coreutils toolchain.

load("@&#8203;aspect_bazel_lib//lib:repositories.bzl", "register_coreutils_toolchains")
register_coreutils_toolchains()

What's Changed

chore: explicitly --enable_bzlmod for bazel6 by @jbedard in #872

Full Changelog: aspect-build/rules_ts@v3.8.0...v3.8.1

bazelbuild/bazel-skylib (bazel_skylib)

`v1.9.0`

Compare Source

What's Changed

Optimize copy_file and set allow_symlink by default to True if is_executable is False (#565)
Give rules/private:is_windows an empty applicable_license (#600)
Bump rules_go dependency for compatibility with Bazel 9 (#601)

Contributors:
@fdinoff, @fmeum, @fweikert, @susinmotion

Full Changelog: bazelbuild/bazel-skylib@1.8.2...1.9.0

bazelbuild/rules_pkg (rules_pkg)

`v1.2.0`

Compare Source

New Features

pkg_deb: add support for md5sums control file
pkg_deb: Allow for variables in the package name
pkg_deb: Overridable debuginfo type
pkg_install: Add destdir_flag to pick up destdir from a bazel-skylib.string_flag().
pkg_install: support for symlinks
pkg_mklink: support raw symlinks from declare_symlink() (Bazel 8+ only)
pkg_rpm: "data" attribute to provide files for rpmbuild b
pkg_tar: Conditionally preserve file mtime
pkg_tar: Support compression_level when using xz
pkg_zip: support synlinks

Incompatible Changes

MODULE.bazel setup

bazel_dep(name = "rules_pkg", version = "1.2.0")

WORKSPACE setup

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
 name = "rules_pkg",
 urls = [
 "https://mirror.bazel.build/github.com/bazelbuild/rules_pkg/releases/download/1.2.0/rules_pkg-1.2.0.tar.gz",
 "https://github.com/bazelbuild/rules_pkg/releases/download/1.2.0/rules_pkg-1.2.0.tar.gz",
 ],
 sha256 = "b5c9184a23bb0bcff241981fd9d9e2a97638a1374c9953bb1808836ce711f990",
)
load("@&#8203;rules_pkg//:deps.bzl", "rules_pkg_dependencies")
rules_pkg_dependencies()

Using the rules

See the source.

What's Changed

feat: support raw symlinks from declare_symlink() by @rickeylev in #930
pkg_tar: Fix #948: Don't add duplicate directory members to tar file when a symlink with the same path exists by @nickguletskii in #949
Conditionally preserve file permissions when archiving through pkg_tar by @ronodnn in #951
Use rules_shell in tests by @keith in #957
Use DefaultInfo directly by @keith in #958
[CI Fix] Stop trying the rpm debuginfo tests by @aiuto in #961
Remove incompatible_use_toolchain_transition again, now that it has been removed from bazel by @mostynb in #963
Add pkg_rpm() "data" attribute to provide files for rpmbuild by @wade-arista in #964
Expose extension for Git toolchain by @guw in #967
pkg_deb: add support for md5sums control file by @adam-azarchs in #960
Add Alma 9 rpmbuild + bazel environment for examples by @wade-arista in #969
Overridable debuginfo type by @nicbadiu in #945
Convert the compression level to a string before calling Args.add() by @EdSchouten in #975
📦 Conditionally preserve file mtime when archiving through pkg_tar by @ronodnn in #974
update codeowners by @aiuto in #978
bump version to 1.2 by @aiuto in #977
Implement pkg_install(symlink) by @aiuto in #979
Fix Windows file locking issue in pkg_install by @rdesgroppes in #983
Make pkg_install work without "runfiles" (Windows default) by @rdesgroppes in #984
Implement pkg_install(symlink) also for pkg_zip by @adrianimboden in #982
Document pkg_tar.extension's compression options. by @dougthor42 in #973
Strip internal test fake repository for MODULE.bazel in distribution. by @aiuto in #976
test with latest instead of rolling by @aiuto in #986
Update pkg_deb to use ctx.action.args() for building the command line. by @aiuto in #714
Allow for variables in the package name of pkg_deb by @AtoZdevelopment in #985
Support compression_level when using xz by @mathukumillia in #988
Fix distro packaging test by @aiuto in #989
Add pkg_install.destdir_flag. by @aiuto in #990
Generate docs for pkg_install by @aiuto in #992
Create pre-release tests that run as a github workflow. by @aiuto in #991

New Contributors

@rickeylev made their first contribution in #930
@nickguletskii made their first contribution in #949
@ronodnn made their first contribution in #951
@keith made their first contribution in #957
@mostynb made their first contribution in #963
@rdesgroppes made their first contribution in #983
@adrianimboden made their first contribution in #982
@dougthor42 made their first contribution in #973
@AtoZdevelopment made their first contribution in #985
@mathukumillia made their first contribution in #988

Full Changelog: bazelbuild/rules_pkg@1.1.0...1.2.0

bazel-contrib/yq.bzl (yq.bzl)

`v0.3.4`

Using Bzlmod

Add to your MODULE.bazel file:

bazel_dep(name = "yq.bzl", version = "0.3.4")

What's Changed

chore(deps): update bazel-contrib/.github action to v7.2.4 by @renovate[bot] in #52
chore(deps): update dependency bazel_lib to v3.0.1 by @renovate[bot] in #51
chore(deps): update bazel-contrib/publish-to-bcr action to v1.1.0 by @renovate[bot] in #47
chore(deps): update bazel-contrib/setup-bazel action to v0.16.0 by @renovate[bot] in #50
chore(deps): update dependency bazel to v8.5.0 by @renovate[bot] in #45
chore(deps): update pre-commit hook commitizen-tools/commitizen to v4.10.1 by @renovate[bot] in #46
fix: correct cd dir issue when executed in an external module by @benjamin-fleischmann in #48

New Contributors

@benjamin-fleischmann made their first contribution in #48

Full Changelog: bazel-contrib/yq.bzl@v0.3.3...v0.3.4

If you want to rebase/retry this PR, check this box

@angular-robot angular-robot added action: merge area: build & ci target: automation labels

Dec 25, 2025

@pullapprove pullapprove bot requested review from mmalerba and wagnermaciel

December 25, 2025 06:08

mmalerba

mmalerba approved these changes

Jan 5, 2026

View reviewed changes

@angular-robot angular-robot force-pushed the ng-renovate/21.0.x-bazel-dependencies branch 5 times, most recently from 33b01db to ff3d409 Compare

January 13, 2026 09:09

@angular-robot


 build: update bazel dependencies

2678ff0

See associated pull request for more information.

@angular-robot angular-robot force-pushed the ng-renovate/21.0.x-bazel-dependencies branch from ff3d409 to 2678ff0 Compare

January 13, 2026 10:42

Labels

action: merge area: build & ci target: automation

2 participants

@angular-robot @mmalerba

build: update bazel dependencies (21.0.x) #32595

Are you sure you want to change the base?

build: update bazel dependencies (21.0.x) #32595

Conversation

@angular-robot angular-robot commented Dec 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.25.0

Using Bzlmod with Bazel 6:

Using WORKSPACE

What's Changed

New Contributors

v2.9.1

Using Bzlmod with Bazel 6:

Using WORKSPACE

What's Changed

New Contributors

v3.8.1

Using Bzlmod:

Using legacy WORKSPACE

What's Changed

v1.9.0

v1.2.0

What's Changed

New Contributors

v0.3.4

Using Bzlmod

What's Changed

New Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

@angular-robot angular-robot commented Dec 25, 2025 •

edited

Loading

`v0.25.0`

`v2.9.1`

`v3.8.1`

`v1.9.0`

`v1.2.0`

`v0.3.4`