[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aspect_gazelle_prebuilt	bazel_dep	patch	0.0.27 → 0.0.28
aspect_rules_py	bazel_dep	patch	2.0.0-alpha.8 → 2.0.0-alpha.10
llvm	bazel_dep	patch	0.8.25 → 0.8.26
rules_cc	bazel_dep	patch	0.2.26 → 0.2.27
rules_python	bazel_dep	patch	2.4.3 → 2.4.5

---

Release Notes

aspect-build/rules_py (aspect_rules_py)

v2.0.0-alpha.10

Add to your MODULE.bazel file:

bazel_dep(name = "aspect_rules_py", version = "2.0.0-alpha.10")

And also register a Python toolchain, see rules_python. For example:

python = use_extension("@rules_python//python/extensions:python.bzl", "python")
python.toolchain(
    python_version = "3.13",
)

What's Changed

Note: this release upgrades the default uv version to 0.13.4, which addresses the compromised eMudhra certificates.

• ci(e2e): fetch cosmos binaries and the ubuntu image from mirrors by @​xangcastle in #​1618

Full Changelog: aspect-build/rules_py@v2.0.0-alpha.9...v2.0.0-alpha.10

hermeticbuild/hermetic-llvm (llvm)

v0.8.26

Add to your MODULE.bazel file:

bazel_dep(name = "llvm", version = "0.8.26")

register_toolchains("@llvm//toolchain:all")

What's Changed

• Share sanitizer selectors across configurations by @​zbarsky-openai in #​841
• Avoid SDK case overlays on Windows execution hosts by @​cerisier in #​853
• libstdcxx: guard empty arrays in configure probes for bash 3.2 by @​sallustfire in #​792
• Add SoundCloud and Datadog to users by @​cerisier in #​859
• Support static libstdc++ runtimes by @​cerisier in #​854
• Support native Bazel FDO and CSFDO instrumentation flags by @​zifeitong in #​863
• Support native Bazel CSFDO optimization by @​cerisier in #​866
• Use llvm-lib for MSVC archive actions by @​cerisier in #​867
• Use GNU response-file quoting with compatible execution tools by @​fionera in #​861
• Fix CSFDO profile path under ThinLTO on macOS by @​zifeitong in #​873
• Expose legacy_stdio_definitions.lib to MSVC links by @​mkanat in #​864
• Expose common MSVC support libraries by @​cerisier in #​868
• Require both header directory labels by @​tamird in #​834
• Fix libstdc++ filesystem crashes with Clang and both string ABIs by @​dzbarsky in #​856
• Name MinGW DLLs lib.dll by @​fmeum in #​875
• Fix internal symbolizer builds with inherited ThinLTO by @​adamf-oai in #​872
• Enable shared cc_library outputs on hosted targets by @​dzbarsky in #​865
• Fix cc_shared_library with MinGW by @​fmeum in #​877
• Don't path map the toolchain module map by @​trevorc in #​880
• Generate DEF files for MinGW targets by @​fmeum in #​876
• Allow the toolchain extension as a dev_dependency by @​oharboe in #​855
• Pass external include paths to clang-cl with /external:I by @​fmeum in #​882
• Support glibc down to 2.17 by @​cerisier in #​885

New Contributors

• @​sallustfire made their first contribution in #​792
• @​zifeitong made their first contribution in #​863
• @​mkanat made their first contribution in #​864
• @​tamird made their first contribution in #​834
• @​adamf-oai made their first contribution in #​872
• @​trevorc made their first contribution in #​880
• @​oharboe made their first contribution in #​855

Full Changelog: hermeticbuild/hermetic-llvm@v0.8.25...v0.8.26

bazelbuild/rules_cc (rules_cc)

v0.2.27

Compare Source

Using bzlmod with Bazel 6 or later:

1. [Bazel 6] Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_cc", version = "0.2.27")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_cc",
    sha256 = "6bcf1b46d9e629cbe4c96d7bfc56f61034c2193b7b16001201282ea50bef5d91",
    strip_prefix = "rules_cc-0.2.27",
    url = "https://github.com/bazelbuild/rules_cc/releases/download/0.2.27/rules_cc-0.2.27.tar.gz",
)

load("@rules_cc//cc:extensions.bzl", "compatibility_proxy_repo")

compatibility_proxy_repo()

Full Changelog: bazelbuild/rules_cc@0.2.26...0.2.27

bazel-contrib/rules_python (rules_python)

v2.4.5

Compare Source

{#v2-4-5-changed}

Changed

• (uv) Updated the default uv version to 0.13.5 to address
  GHSA-hq85-5cpj-mr62
  (#​4299).

{#v2-4-4}

v2.4.4

Compare Source

{#v2-4-4-changed}

Changed

• (pypi) Updated pip to 26.2.2, pip-tools to 7.6.2, and other internal
  dependencies used for compile_pip_requirements, building sdists in
  whl_library, and fetching wheels using pip
  (#​4299).

{#v2-4-3}

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.