Skip to content

Bump the dependencies group with 2 updates - #275

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bazel/dependencies-7b78092f32
Closed

Bump the dependencies group with 2 updates#275
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bazel/dependencies-7b78092f32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 2 updates: bazel_skylib and rules_jvm_external.

Updates bazel_skylib from 1.9.0 to 1.9.2

Release notes

Sourced from bazel_skylib's releases.

1.9.2

MODULE.bazel setup

bazel_dep(name = "bazel_skylib", version = "1.9.2")

And for the Gazelle plugin:

bazel_dep(name = "bazel_skylib_gazelle_plugin", version = "1.9.2", dev_dependency = True)

WORKSPACE setup

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
name = "bazel_skylib",
sha256 = "37cdfbc6faefea94f7b37760a305c98c08981116c2bc9e821e3b423221fad8c8",
urls = [
"https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-1.9.2.tar.gz",
"https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-1.9.2.tar.gz",
],
)
load("@​bazel_skylib//:workspace.bzl", "bazel_skylib_workspace")
bazel_skylib_workspace()

Additional WORKSPACE setup for the Gazelle plugin

http_archive(
    name = "bazel_skylib_gazelle_plugin",
    sha256 = "ebcbf7bc491b28332c40b2db524d0a37e2e8feebbf099ad51561531c1efbba47",
    urls = [
        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-gazelle-plugin-1.9.2.tar.gz",
        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-gazelle-plugin-1.9.2.tar.gz",
    ],
)
load("@​bazel_skylib_gazelle_plugin//:workspace.bzl", "bazel_skylib_gazelle_plugin_workspace")
bazel_skylib_gazelle_plugin_workspace()
load("@​bazel_skylib_gazelle_plugin//:setup.bzl", "bazel_skylib_gazelle_plugin_setup")
</tr></table>

... (truncated)

Changelog

Sourced from bazel_skylib's changelog.

Release 1.9.2

What's Changed

  • Revert allow_symlink = True by default for non-executables
  • Change from stamp to some other boolean flag
  • Update Bazel versions in CI: drop Bazel 6, add Bazel 9
  • Change Starlark flag default propagation from "universal" to "target"

Contributors: @​gzm0, @​kotlaja, @​susinmotion, @​justinhorvitz

Release 1.9.1

Skipped due to CI failure

Commits
  • 3de43ed Create release 1.9.2 (#630)
  • bac104b Remove private visibility on "always_true" conditions (#629)
  • 72291d1 Create release 1.9.1 (#620)
  • 390ecf8 No-op: change written default scope from 'universal' to 'target' (#608)
  • f7718b7 Change from stamp to some other boolean flag (#611)
  • 7b2f6de Update Bazel versions in CI: drop Bazel 6, add Bazel 9 (#613)
  • ea054fc Revert allow_symlink = True by default for non-executables (#605)
  • See full diff in compare view

Updates rules_jvm_external from 7.0 to 7.1

Release notes

Sourced from rules_jvm_external's releases.

7.1

Please note The lock file format was changed in rules_jvm_external 5.1 and in 6.10. If you update and repin your dependencies, your lock file will use the new format.

Usage

This version of rules_jvm_external requires Bazel 7.7.1 or Bazel 8.7.0 or Bazel 9.

This release requires Java 11 or above to run, both as the host JDK and the build and tool JDK.

Bzlmod

In your MODULE.bazel file:

bazel_dep(name = "rules_jvm_external", version = "7.1")

To add dependencies, later in your MODULE.bazel file:

maven = use_extension("@rules_jvm_external//:extensions.bzl", "maven")
maven.install(
artifacts = [
"org.seleniumhq.selenium:selenium-java:4.46.0",
],
lock_file = "//:maven_install.json",
)
use_repo(maven, "maven")

Using dependencies

In your BUILD.bazel file, reference the targets directly:

java_library(
    name = "example",
    exports = [
        "@maven//:org_seleniumhq_selenium_selenium_java",
    ],
)

What's Changed

... (truncated)

Commits
  • b234733 Prepare for 7.1 release (#1593)
  • fd9185f fix: force a single version per Gradle module when pinning (#1608)
  • 30e29da Use a UTF-8 locale for jvm_import jar actions (#1610)
  • 5eb595d BOM/POM coordinates condition marked as skipped must not be turned into `ht...
  • c1b3e5e fix: honour pinned versions in external resolvers (#1606)
  • 60611a9 feat: Support pluggable dependency download and metadata caching SPIs (#1589)
  • 2c8e8ac Preserve Gradle variant identity in the lock graph (#1576)
  • 97d4d4f fix: make :outdated work when runfiles trees are disabled (#1602)
  • 06db7d7 Enable RJE_UNSAFE_CACHE by default (#1584)
  • b6dd5dc Don't deduplicate additional_coursier_options (#1596)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 2 updates: [bazel_skylib](https://github.com/bazelbuild/bazel-skylib) and [rules_jvm_external](https://github.com/bazel-contrib/rules_jvm_external).


Updates `bazel_skylib` from 1.9.0 to 1.9.2
- [Release notes](https://github.com/bazelbuild/bazel-skylib/releases)
- [Changelog](https://github.com/bazelbuild/bazel-skylib/blob/main/CHANGELOG.md)
- [Commits](bazelbuild/bazel-skylib@1.9.0...1.9.2)

Updates `rules_jvm_external` from 7.0 to 7.1
- [Release notes](https://github.com/bazel-contrib/rules_jvm_external/releases)
- [Commits](bazel-contrib/rules_jvm_external@7.0...7.1)

---
updated-dependencies:
- dependency-name: bazel_skylib
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: rules_jvm_external
  dependency-version: '7.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file labels Aug 4, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/bazel/dependencies-7b78092f32 branch August 4, 2026 18:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant