Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 15, 2025

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/cache action major v4 -> v5 age confidence
actions/checkout action major v5 -> v6 age confidence
actions/download-artifact action major v6 -> v7 age confidence
actions/upload-artifact action major v5 -> v6 age confidence
apple_support bazel_dep major 1.24.5 -> 2.0.0 age confidence
bazel minor 8.4.2 -> 8.5.0 age confidence
bazel_jar_jar bazel_dep patch 0.1.11 -> 0.1.12 age confidence
bazel_skylib bazel_dep minor 1.8.2 -> 1.9.0 age confidence
buildifier_prebuilt bazel_dep patch 8.2.1 -> 8.2.1.1 age confidence
contrib_rules_jvm bazel_dep minor 0.27.0 -> 0.31.1 age confidence
protobuf bazel_dep minor 33.1 -> 33.2 age confidence
rules_cc bazel_dep patch 0.2.14 -> 0.2.16 age confidence
rules_java bazel_dep minor 9.1.0 -> 9.3.0 age confidence
rules_kotlin bazel_dep patch 2.2.0 -> 2.2.1 age confidence
rules_pkg (source) bazel_dep minor 1.1.0 -> 1.2.0 age confidence
softprops/action-gh-release action minor v2.4.1 -> v2.5.0 age confidence
toolchains_llvm bazel_dep minor 1.5.0 -> 1.6.0 age confidence
ubuntu github-runner major 22.04 -> 24.04 age confidence
org.jacoco:jacoco-maven-plugin (source) build patch 0.8.11 -> 0.8.14 age confidence
com.code-intelligence:cifuzz-maven-extension (source) build minor 1.7.0 -> 1.15.0 age confidence
com.google.protobuf:protobuf-java (source) compile major 3.25.5 -> 4.33.2 age confidence
com.google.truth:truth test patch 1.4.0 -> 1.4.5 age confidence
org.junit.platform:junit-platform-launcher (source) test major 1.10.2 -> 6.0.1 age confidence
org.junit.platform:junit-platform-commons (source) test major 1.10.2 -> 6.0.1 age confidence
org.junit.jupiter:junit-jupiter-params (source) test major 5.10.2 -> 6.0.1 age confidence
org.junit.jupiter:junit-jupiter-api (source) test major 5.10.2 -> 6.0.1 age confidence
org.junit.jupiter:junit-jupiter-engine (source) test major 5.10.2 -> 6.0.1 age confidence

Release Notes

actions/cache (actions/cache)

v5

Compare Source

actions/checkout (actions/checkout)

v6

Compare Source

actions/download-artifact (actions/download-artifact)

v7

Compare Source

actions/upload-artifact (actions/upload-artifact)

v6

Compare Source

bazelbuild/apple_support (apple_support)

v2.0.0

Compare Source

Breaking changes

As of this release, we've removed WORKSPACE support from the rules. Projects that still depend on WORKSPACE should not update beyond 1.24.5, or can look at #​487 to see what the dependencies are at any given time. WORKSPACE support is removed completely from Bazel starting in Bazel 9.

What's Changed

Full Changelog: bazelbuild/apple_support@1.24.5...2.0.0

This release is compatible with 7.x LTS, 8.x LTS, and rolling releases.

MODULE.bazel Snippet
bazel_dep(name = "apple_support", version = "2.0.0", repo_name = "build_bazel_apple_support")
bazelbuild/bazel (bazel)

v8.5.0

Compare Source


Release Notes:

bazeltools/bazel_jar_jar (bazel_jar_jar)

v0.1.12

Using Bzlmod

  1. Enable with common --enable_bzlmod in .bazelrc (default with Bazel 7).
  2. Add to your MODULE.bazel file:
bazel_dep(name = "bazel_jar_jar", version = "0.1.12")

Using WORKSPACE

Paste this snippet into your WORKSPACE.bazel file:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "bazel_jar_jar",
    sha256 = "6f153cc3eef225d4a2394f4cbad3935f578ef3aa268b578c7b179d895f1ae37d",
    strip_prefix = "bazel_jar_jar-0.1.12",
    url = "https://github.com/bazeltools/bazel_jar_jar/releases/download/v0.1.12/bazel_jar_jar-v0.1.12.tar.gz",
)

load(
    "@​com_github_johnynek_bazel_jar_jar//:jar_jar.bzl",
    "jar_jar_repositories",
)

jar_jar_repositories()

What's Changed

New Contributors

Full Changelog: bazeltools/bazel_jar_jar@v0.1.11...v0.1.12

bazelbuild/bazel-skylib (bazel_skylib)

v1.9.0

Compare Source

What's Changed

  • Optimize copy_file and set allow_symlink by default to True if is_executable is False (#​565)
  • Give rules/private:is_windows an empty applicable_license (#​600)
  • Bump rules_go dependency for compatibility with Bazel 9 (#​601)

Contributors:
@​fdinoff, @​fmeum, @​fweikert, @​susinmotion

Full Changelog: bazelbuild/bazel-skylib@1.8.2...1.9.0

keith/buildifier-prebuilt (buildifier_prebuilt)

v8.2.1.1

Compare Source

What's Changed

New Contributors

Full Changelog: keith/buildifier-prebuilt@8.2.1...8.2.1.1

Bazel Module Snippet

bazel_dep(
    name = "buildifier_prebuilt",
    version = "8.2.1.1",
    dev_dependency = True,
)

Workspace Snippet

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "buildifier_prebuilt",
    sha256 = "0a9ea71b0fee1f85c0f7971a036521938aeb68b2e41bf2b5c079e8549fd91cb1",
    strip_prefix = "buildifier-prebuilt-8.2.1.1",
    urls = [
        "http://github.com/keith/buildifier-prebuilt/archive/8.2.1.1.tar.gz",
    ],
)

load("@​buildifier_prebuilt//:deps.bzl", "buildifier_prebuilt_deps")

buildifier_prebuilt_deps()

load("@​bazel_skylib//:workspace.bzl", "bazel_skylib_workspace")

bazel_skylib_workspace()

load("@​buildifier_prebuilt//:defs.bzl", "buildifier_prebuilt_register_toolchains")

buildifier_prebuilt_register_toolchains()
bazel-contrib/rules_jvm (contrib_rules_jvm)

v0.31.1

contrib_rules_jvm only supports bzlmod-enabled builds

Module setup

In your MODULE.bazel:

bazel_dep(name = "contrib_rules_jvm", version = "0.31.1")

What's Changed

  • Fix attribute merging issues on java_library and java_test_suite when using mapped kinds by @​jeffmace in #​386
  • chore: update aspect_bazel_lib to latest bazel_lib by @​sitaktif in #​388

New Contributors

Full Changelog: bazel-contrib/rules_jvm@v0.31.0...v0.31.1

v0.30.0

contrib_rules_jvm only supports bzlmod-enabled builds

Module Setup

In your MODULE.bazel:

bazel_dep(name = "contrib_rules_jvm", version = "0.30.0")

Important Changes

  • This release changes how the JUnit5 runner reports test names to better support parameterised and other custom tests.
  • The java gazelle plugin will now respect java_export targets. Targets will depend on these rather than individual constituent java_library targets to ensure that each java_library target is only included in one java_export

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_jvm@v0.29.0...v0.30.0

v0.29.0

WORKSPACE snippet:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "contrib_rules_jvm",
    sha256 = "44c4946567adb9f7218b1eea7ad512e0af7189f66673c3ebe94b484ac5c246a7",
    strip_prefix = "rules_jvm-0.29.0",
    url = "https://github.com/bazel-contrib/rules_jvm/releases/download/v0.29.0/rules_jvm-v0.29.0.tar.gz",
)

# Fetches the contrib_rules_jvm dependencies.

# If you want to have a different version of some dependency,
# you should fetch it *before* calling this.
load("@​contrib_rules_jvm//:repositories.bzl", "contrib_rules_jvm_deps")

contrib_rules_jvm_deps()

# Now ensure that the downloaded deps are properly configured
load("@​contrib_rules_jvm//:setup.bzl", "contrib_rules_jvm_setup")

contrib_rules_jvm_setup()

What's Changed

New Contributors

Full Changelog: bazel-contrib/rules_jvm@v0.28.0...v0.29.0

v0.28.0

contrib_rules_jvm only supports bzlmod-enabled builds

Module setup

In your MODULE.bazel

bazel_dep(name = "contrib_rules_jvm", version = "0.28.0")

What's Changed

  • Drop support for workspace-based builds (#​321)
  • Bump lowest supported Java version to 8 in our build files (#​307)
  • Allow passing empty 'package' to 'java_test_suite' (#​312)
  • Add support for @​AfterAll in XML report (#​300)
  • Bump pmd to 7.7.0 (#​309)
  • Add support for transforming Checkstyle XML output to JUnit XML (#​283)
  • Optimize junit dependencies for each test target (#​303)
  • Gazelle: detect any directory with /test in path as test package (#​297)
  • Add timestamp and hostname to testsuite xml (#​294)
  • Escape invalid XML chars in testCase and testSuite names (#​284)

Full Changelog: bazel-contrib/rules_jvm@v0.27.0...v0.28.0

protocolbuffers/protobuf (protobuf)

v33.2: Protocol Buffers v33.2

Announcements

  • Protobuf News may include additional announcements or pre-announcements for upcoming changes.

Compiler

  • Add EDITION_UNSTABLE for new edition development (9247790)
  • Fix a bug with custom features outside of the pb package. (483173d)
  • Reserving a declaration for the Impress proto plugin. (8a0b438)

C++

  • Remove unnecessary uses of future changes to descriptor.proto (50c9e62)
  • Fix a bug with custom features outside of the pb package. (483173d)

Java

  • Fix a bug with custom features outside of the pb package. (483173d)

Csharp

PHP

  • Add EDITION_UNSTABLE for new edition development (9247790)
PHP C-Extension
  • Regenerate staleness tests (e9f62c6)
  • Add EDITION_UNSTABLE for new edition development (9247790)
  • Regenerate stale files (058bffa)
  • See also UPB changes below, which may affect PHP C-Extension.

Ruby

Ruby C-Extension
  • Regenerate staleness tests (e9f62c6)
  • Regenerate stale files (058bffa)
  • See also UPB changes below, which may affect Ruby C-Extension.

UPB (Python/PHP/Ruby C-Extension)

  • Regenerate staleness tests (e9f62c6)
  • Add BTI to branch targets when branch protection is enabled. This resolves (72a48f9)
  • Extract arm64 asm check (13ee2ce)
bazelbuild/rules_cc (rules_cc)

v0.2.16

Compare Source

Using bzlmod with Bazel 6 or later:

  1. [Bazel 6] Add common --enable_bzlmod to .bazelrc.

  2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_cc", version = "0.2.16")

Using WORKSPACE:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_cc",
    sha256 = "458b658277ba51b4730ea7a2020efdf1c6dcadf7d30de72e37f4308277fa8c01",
    strip_prefix = "rules_cc-0.2.16",
    url = "https://github.com/bazelbuild/rules_cc/releases/download/0.2.16/rules_cc-0.2.16.tar.gz",
)

load("@​rules_cc//cc:extensions.bzl", "compatibility_proxy_repo")

compatibility_proxy_repo()

Full Changelog: bazelbuild/rules_cc@0.2.15...0.2.16

v0.2.15

Compare Source

Using bzlmod with Bazel 6 or later:

  1. [Bazel 6] Add common --enable_bzlmod to .bazelrc.

  2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_cc", version = "0.2.15")

Using WORKSPACE:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_cc",
    sha256 = "5e0077e2a5287e18873ae494a4d881d2e6df5f18d5edd3703c2724f9a36a0004",
    strip_prefix = "rules_cc-0.2.15",
    url = "https://github.com/bazelbuild/rules_cc/releases/download/0.2.15/rules_cc-0.2.15.tar.gz",
)

load("@​rules_cc//cc:extensions.bzl", "compatibility_proxy_repo")

compatibility_proxy_repo()

Full Changelog: bazelbuild/rules_cc@0.2.14...0.2.15

bazelbuild/rules_java (rules_java)

v9.3.0

Compare Source

Changes since 9.2.0
9d6184b Release rules_java 9.3.0
92f1486 Update to java_tools 18.1
14562f0 Support --library boolean flag for Android Lint in Java rules
2095190 Refer to the SingleJar "executable" instead of "deploy jar."

MODULE.bazel setup

bazel_dep(name = "rules_java", version = "9.3.0")

WORKSPACE setup

With Bazel 8.0.0 and before 8.3.0, add the following to your file:


### https://github.com/bazelbuild/bazel/pull/26119
common --repositories_without_autoloads=bazel_features_version,bazel_features_globals

In all cases, add the following to your file:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_java",
    urls = [
        "https://github.com/bazelbuild/rules_java/releases/download/9.3.0/rules_java-9.3.0.tar.gz",
    ],
    sha256 = "6ef26d4f978e8b4cf5ce1d47532d70cb62cd18431227a1c8007c8f7843243c06",
)

http_archive(
    name = "bazel_features",
    sha256 = "a660027f5a87f13224ab54b8dc6e191693c554f2692fcca46e8e29ee7dabc43b",
    strip_prefix = "bazel_features-1.30.0",
    url = "https://github.com/bazel-contrib/bazel_features/releases/download/v1.30.0/bazel_features-v1.30.0.tar.gz",
)

load("@​bazel_features//:deps.bzl", "bazel_features_deps")
bazel_features_deps()

load("@​rules_java//java:rules_java_deps.bzl", "rules_java_dependencies")
rules_java_dependencies()

### note that the following line is what is minimally required from protobuf for the java rules
### consider using the protobuf_deps() public API from @​com_google_protobuf//:protobuf_deps.bzl
load("@​com_google_protobuf//bazel/private:proto_bazel_features.bzl", "proto_bazel_features")  # buildifier: disable=bzl-visibility
proto_bazel_features(name = "proto_bazel_features")

### register toolchains
load("@​rules_java//java:repositories.bzl", "rules_java_toolchains")
rules_java_toolchains()

Using the rules
See the source.

v9.2.0

Compare Source

Changes since 9.1.0
dbd8cb4 Release rules_java v9.2.0
686ed85 Update to java_tools v18.0
8bf8bca Extract utility methods used in the loading phase from impl/java_helper.bzl into a separate bzl file

MODULE.bazel setup

bazel_dep(name = "rules_java", version = "9.2.0")

WORKSPACE setup

With Bazel 8.0.0 and before 8.3.0, add the following to your file:


### https://github.com/bazelbuild/bazel/pull/26119
common --repositories_without_autoloads=bazel_features_version,bazel_features_globals

In all cases, add the following to your file:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_java",
    urls = [
        "https://github.com/bazelbuild/rules_java/releases/download/9.2.0/rules_java-9.2.0.tar.gz",
    ],
    sha256 = "2f822fbc33b99de5bbeaceada4be2bd3bb5c8da80e2f7462a9d300c8fc312f11",
)

http_archive(
    name = "bazel_features",
    sha256 = "a660027f5a87f13224ab54b8dc6e191693c554f2692fcca46e8e29ee7dabc43b",
    strip_prefix = "bazel_features-1.30.0",
    url = "https://github.com/bazel-contrib/bazel_features/releases/download/v1.30.0/bazel_features-v1.30.0.tar.gz",
)

load("@​bazel_features//:deps.bzl", "bazel_features_deps")
bazel_features_deps()

load("@​rules_java//java:rules_java_deps.bzl", "rules_java_dependencies")
rules_java_dependencies()

### note that the following line is what is minimally required from protobuf for the java rules
### consider using the protobuf_deps() public API from @​com_google_protobuf//:protobuf_deps.bzl
load("@​com_google_protobuf//bazel/private:proto_bazel_features.bzl", "proto_bazel_features")  # buildifier: disable=bzl-visibility
proto_bazel_features(name = "proto_bazel_features")

### register toolchains
load("@​rules_java//java:repositories.bzl", "rules_java_toolchains")
rules_java_toolchains()

Using the rules
See the source.

bazelbuild/rules_kotlin (rules_kotlin)

v2.2.1

Release notes for v2.2.1

Using Bzlmod with Bazel 7

  1. Enable with common --enable_bzlmod in .bazelrc.
  2. Add to your MODULE.bazel file:
bazel_dep(name = "rules_kotlin", version = "2.2.1")

Using WORKSPACE

Paste this snippet into your WORKSPACE.bazel file:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_kotlin",
    sha256 = "50c9b7294b73a1f50fcb3b349ca0edfd852ee1016e284b9d569ef0bffe0eb105",
    url = "https://github.com/bazelbuild/rules_kotlin/releases/download/v2.2.1/rules_kotlin-v2.2.1.tar.gz",
)

load("@​rules_kotlin//kotlin:repositories.bzl", "kotlin_repositories")
kotlin_repositories() # if you want the default. Otherwise see custom kotlinc distribution below

load("@​rules_kotlin//kotlin:core.bzl", "kt_register_toolchains")
kt_register_toolchains() # to use the default toolchain, otherwise see toolchains below

What's Changed

New Contributors

Full Changelog: bazelbuild/rules_kotlin@v2.2.0...v2.2.1

bazelbuild/rules_pkg (rules_pkg)

v1.2.0

Compare Source

New Features

  • pkg_deb: add support for md5sums control file
  • pkg_deb: Allow for variables in the package name
  • pkg_deb: Overridable debuginfo type
  • pkg_install: Add destdir_flag to pick up destdir from a bazel-skylib.string_flag().
  • pkg_install: support for symlinks
  • pkg_mklink: support raw symlinks from declare_symlink() (Bazel 8+ only)
  • pkg_rpm: "data" attribute to provide files for rpmbuild b
  • pkg_tar: Conditionally preserve file mtime
  • pkg_tar: Support compression_level when using xz
  • pkg_zip: support synlinks

Incompatible Changes

MODULE.bazel setup

bazel_dep(name = "rules_pkg", version = "1.2.0")

WORKSPACE setup

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_pkg",
    urls = [
        "https://mirror.bazel.build/github.com/bazelbuild/rules_pkg/releases/download/1.2.0/rules_pkg-1.2.0.tar.gz",
        "https://github.com/bazelbuild/rules_pkg/releases/download/1.2.0/rules_pkg-1.2.0.tar.gz",
    ],
    sha256 = "b5c9184a23bb0bcff241981fd9d9e2a97638a1374c9953bb1808836ce711f990",
)
load("@​rules_pkg//:deps.bzl", "rules_pkg_dependencies")
rules_pkg_dependencies()

Using the rules

See the source.

What's Changed

New Contributors

Full Changelog: bazelbuild/rules_pkg@1.1.0...1.2.0

softprops/action-gh-release (softprops/action-gh-release)

v2.5.0

Compare Source

What's Changed

Exciting New Features 🎉
Other Changes 🔄
  • chore(deps): bump the npm group across 1 directory with 5 updates by @​dependabot[bot] in #​697
  • chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 in the github-actions group by @​dependabot[bot] in #​689

New Contributors

Full Changelog: softprops/action-gh-release@v2.4.2...v2.5.0

v2.4.2

Compare Source

What's Changed

Exciting New Features 🎉
  • feat: Ensure generated release notes cannot be over 125000 characters by @​BeryJu in #​684
Other Changes 🔄
  • dependency updates

New Contributors

Full Changelog: softprops/action-gh-release@v2.4.1...v2.4.2

bazel-contrib/toolchains_llvm (toolchains_llvm)

v1.6.0

Minimum bazel version: 7.0.0

If you're using bzlmod, add the following to MODULE.bazel:

bazel_dep(name = "toolchains_llvm", version = "1.6.0")

# Configure and register the toolchain.
llvm = use_extension("@​toolchains_llvm//toolchain/extensions:llvm.bzl", "llvm")
llvm.toolchain(
   llvm_version = "16.0.0",
)

use_repo(llvm, "llvm_toolchain")

# use_repo(llvm, "llvm_toolchain_llvm") # if you depend on specific tools in scripts

register_toolchains("@​llvm_toolchain//:all")

To directly use a commit from GitHub, add this block and replace commit with the commit you want.

git_override(
  module_name = "toolchains_llvm",
  commit = "ace6215bbfe8a76884646b2458b42380e2201607",
  remote = "https://github.com/bazel-contrib/toolchains_llvm",
)

If not using bzlmod, include this section in your WORKSPACE:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "toolchains_llvm",
    sha256 = "2b298a1d7ea99679f5edf8af09367363e64cb9fbc46e0b7c1b1ba2b1b1b51058",
    strip_prefix = "toolchains_llvm-v1.6.0",
    canonical_id = "v1.6.0",
    url = "https://github.com/bazel-contrib/toolchains_llvm/releases/download/v1.6.0/toolchains_llvm-v1.6.0.tar.gz",
)

load("@​toolchains_llvm//toolchain:deps.bzl", "bazel_toolchain_dependencies")

bazel_toolchain_dependencies()

load("@​bazel_features//:deps.bzl", "bazel_features_deps")

bazel_features_deps()

load("@​rules_cc//cc:extensions.bzl", "compatibility_proxy_repo")

# If you see an error:

#   ERROR: Cycle caused by autoloads, failed to load .bzl file '@​@​cc_compatibility_proxy//:symbols.bzl'.
# then you might need to add the following to your .bzelrc:

#   common --repositories_without_autoloads=cc_compatibility_proxy
compatibility_proxy_repo()

load("@​toolchains_llvm//toolchain:rules.bzl", "llvm_toolchain")

llvm_toolchain(
    name = "llvm_toolchain",
    llvm_version = "16.0.0",
)

load("@​llvm_toolchain//:toolchains.bzl", "llvm_register_toolchains")

llvm_register_toolchains()

What's Changed


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all branch 11 times, most recently from d3e5dc1 to cdfb453 Compare October 20, 2025 09:58
@renovate renovate bot force-pushed the renovate/all branch 13 times, most recently from e573657 to 0965f21 Compare October 29, 2025 13:08
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from 019e199 to 094c16e Compare October 31, 2025 11:22
@renovate renovate bot force-pushed the renovate/all branch 7 times, most recently from c01747b to ce110ae Compare December 2, 2025 10:37
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from 2767005 to 1ac8522 Compare December 9, 2025 10:08
@renovate renovate bot force-pushed the renovate/all branch 9 times, most recently from 47e5bd8 to c343abe Compare December 16, 2025 17:34
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from a0f04e5 to e548661 Compare December 20, 2025 22:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant