deps: update bazel (modules)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aspect_bazel_lib	bazel_dep	minor	2.14.0 -> 2.16.0
buildifier_prebuilt	bazel_dep	patch	8.0.1 -> 8.0.3
rules_python	bazel_dep	minor	1.3.0 -> 1.4.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

keith/buildifier-prebuilt (buildifier_prebuilt)

v8.0.3

Compare Source

What's Changed

• Update README.md for 8.0.1 by @​buildifier-prebuilt-releases in https://github.com/keith/buildifier-prebuilt/pull/103
• Update CI to ubuntu-latest by @​keith in https://github.com/keith/buildifier-prebuilt/pull/108
• Add rules_shell, format some files by @​keith in https://github.com/keith/buildifier-prebuilt/pull/111
• Update to 8.0.3 by @​keith in https://github.com/keith/buildifier-prebuilt/pull/110

Full Changelog: keith/buildifier-prebuilt@8.0.1...8.0.3

Bazel Module Snippet

bazel_dep(
    name = "buildifier_prebuilt",
    version = "8.0.3",
    dev_dependency = True,
)

Workspace Snippet

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "buildifier_prebuilt",
    sha256 = "bf9101bd5d657046674167986a18d44c5612e417194dc55aff8ca174344de031",
    strip_prefix = "buildifier-prebuilt-8.0.3",
    urls = [
        "http://github.com/keith/buildifier-prebuilt/archive/8.0.3.tar.gz",
    ],
)

load("@​buildifier_prebuilt//:deps.bzl", "buildifier_prebuilt_deps")

buildifier_prebuilt_deps()

load("@​bazel_skylib//:workspace.bzl", "bazel_skylib_workspace")

bazel_skylib_workspace()

load("@​buildifier_prebuilt//:defs.bzl", "buildifier_prebuilt_register_toolchains")

buildifier_prebuilt_register_toolchains()

bazel-contrib/rules_python (rules_python)

v1.4.1

Compare Source

{#​1-4-1-fixed}

Fixed

• (pypi) Fix a typo not allowing users to benefit from using the downloader when the hashes in the
  requirements file are not present. Fixes
  #​2863.

{#​1-4-0}

v1.4.0

Compare Source

{#​1-4-0-changed}

Changed

• (toolchain) The exec configuration toolchain now has the forwarded
  exec_interpreter now also forwards the ToolchainInfo provider. This is
  for increased compatibility with the RBE setups where access to the exec
  configuration interpreter is needed.
• (toolchains) Use the latest astral-sh toolchain release 20250317 for Python versions:
  • 3.9.21
  • 3.10.16
  • 3.11.11
  • 3.12.9
  • 3.13.2
• (pypi) Use xcrun xcodebuild --showsdks to find XCode root.
• (toolchains) Remove all but 3.8.20 versions of the Python 3.8 interpreter who has
  reached EOL. If users still need other versions of the 3.8 interpreter, please supply
  the URLs manually {bzl:obj}python.toolchain or {bzl:obj}python_register_toolchains calls.
• (toolchains) Previously #​2636
  changed the semantics of ignore_root_user_error from "ignore" to "warning". This is now
  flipped back to ignoring the issue, and will only emit a warning when the attribute is set
  False.
• (pypi) The PyPI extension will no longer write the lock file entries as the
  extension has been marked reproducible.
  Fixes #​2434.
• (gazelle) Lazily load and parse manifest files when running Gazelle. This ensures no
  manifest files are loaded when Gazelle is run over a set of non-python directories
  PR #​2746.
• (rules) {attr}py_binary.srcs and {attr}py_test.srcs is no longer mandatory when
  main_module is specified (for --bootstrap_impl=script)

{#​1-4-0-fixed}

Fixed

• (pypi) Platform specific extras are now correctly handled when using
  universal lock files with environment markers. Fixes #​2690.
• (runfiles) ({obj}--bootstrap_impl=script) Follow symlinks when searching for runfiles.
• (toolchains) Do not try to run chmod when downloading non-windows hermetic toolchain
  repositories on Windows. Fixes
  #​2660.
• (logging) Allow repo rule logging level to be set to FAIL via the RULES_PYTHON_REPO_DEBUG_VERBOSITY environment variable.
• (toolchains) The toolchain matching is has been fixed when writing
  transitions transitioning on the python_version flag.
  Fixes #​2685.
• (toolchains) Run the check on the Python interpreter in isolated mode, to ensure it's not affected by userland environment variables, such as PYTHONPATH.
• (toolchains) Ensure temporary .pyc and .pyo files are also excluded from the interpreters repository files.
• (pypi) Run interpreter version call in isolated mode, to ensure it's not affected by userland environment variables, such as PYTHONPATH.
• (packaging) An empty requires_file is treated as if it were omitted, resulting in a valid METADATA file.
• (rules) py_wheel and sphinxdocs rules now propagate target_compatible_with to all targets they create.
  PR #​2788.
• (pypi) Correctly handle METADATA entries when python_full_version is used in
  the environment marker.
  Fixes #​2319.
• (pypi) Correctly handle python_version parameter and transition the requirement
  locking to the right interpreter version when using
  {obj}compile_pip_requirements rule.
  See #​2819.

{#​1-4-0-added}

Added

• (pypi) From now on sha256 values in the requirements.txt is no longer
  mandatory when enabling {attr}pip.parse.experimental_index_url feature.
  This means that rules_python will attempt to fetch metadata for all
  packages through SimpleAPI unless they are pulled through direct URL
  references. Fixes #​2023.
  In case you see issues with rules_python being too eager to fetch the SimpleAPI
  metadata, you can use the newly added {attr}pip.parse.experimental_skip_sources
  to skip metadata fetching for those packages.
• (uv) A {obj}lock rule that is the replacement for the
  {obj}compile_pip_requirements. This may still have rough corners
  so please report issues with it in the
  #​1975.
  Main highlights - the locking can be done within a build action or outside
  it, there is no more automatic test target (but it can be added on the user
  side by using native_test). For customizing the uv version that is used,
  please check the {obj}uv.configure tag class.
• Add support for riscv64 linux platform.
• (toolchains) Add python 3.13.2 and 3.12.9 toolchains
• (providers) (experimental) {obj}PyInfo.site_packages_symlinks field added to
  allow specifying links to create within the venv site packages (only
  applicable with {obj}--bootstrap_impl=script)
  (#​2156).
• (toolchains) Local Python installs can be used to create a toolchain
  equivalent to the standard toolchains. See [Local toolchains] docs for how to
  configure them.
• (toolchains) Expose $(PYTHON2_ROOTPATH) and $(PYTHON3_ROOTPATH) which are runfiles
  locations equivalents of $(PYTHON2) and `$(PYTHON3) respectively.

{#​1-4-0-removed}

Removed

• Nothing removed.

{#v1-3-0}

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for constellation-docs canceled.

Name	Link
🔨 Latest commit	641649a
🔍 Latest deploy log	https://app.netlify.com/projects/constellation-docs/deploys/682dcf2c7f760d00086d2e74

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.