Skip to content

Bump the dependencies group with 2 updates - #276

Merged
copybara-service[bot] merged 1 commit into
masterfrom
test_958705760
Aug 4, 2026
Merged

Bump the dependencies group with 2 updates#276
copybara-service[bot] merged 1 commit into
masterfrom
test_958705760

Conversation

@copybara-service

Copy link
Copy Markdown

Bump the dependencies group with 2 updates

Bumps the dependencies group with 2 updates: bazel_skylib and rules_jvm_external.

Updates bazel_skylib from 1.9.0 to 1.9.2

Release notes

Sourced from bazel_skylib's releases.

1.9.2

MODULE.bazel setup

bazel_dep(name = "bazel_skylib", version = "1.9.2")

And for the Gazelle plugin:

bazel_dep(name = "bazel_skylib_gazelle_plugin", version = "1.9.2", dev_dependency = True)

WORKSPACE setup

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
name = "bazel_skylib",
sha256 = "37cdfbc6faefea94f7b37760a305c98c08981116c2bc9e821e3b423221fad8c8",
urls = [
"https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-1.9.2.tar.gz",
"https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-1.9.2.tar.gz",
],
)
load("@​bazel_skylib//:workspace.bzl", "bazel_skylib_workspace")
bazel_skylib_workspace()

Additional WORKSPACE setup for the Gazelle plugin

http_archive(
    name = "bazel_skylib_gazelle_plugin",
    sha256 = "ebcbf7bc491b28332c40b2db524d0a37e2e8feebbf099ad51561531c1efbba47",
    urls = [
        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-gazelle-plugin-1.9.2.tar.gz",
        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-gazelle-plugin-1.9.2.tar.gz",
    ],
)
load("@​bazel_skylib_gazelle_plugin//:workspace.bzl", "bazel_skylib_gazelle_plugin_workspace")
bazel_skylib_gazelle_plugin_workspace()
load("@​bazel_skylib_gazelle_plugin//:setup.bzl", "bazel_skylib_gazelle_plugin_setup")
</tr></table>

... (truncated)

Changelog

Sourced from bazel_skylib's changelog.

Release 1.9.2

What's Changed

  • Revert allow_symlink = True by default for non-executables
  • Change from stamp to some other boolean flag
  • Update Bazel versions in CI: drop Bazel 6, add Bazel 9
  • Change Starlark flag default propagation from "universal" to "target"

Contributors: @​gzm0, @​kotlaja, @​susinmotion, @​justinhorvitz

Release 1.9.1

Skipped due to CI failure

Commits
  • 3de43ed Create release 1.9.2 (#630)
  • bac104b Remove private visibility on "always_true" conditions (#629)
  • 72291d1 Create release 1.9.1 (#620)
  • 390ecf8 No-op: change written default scope from 'universal' to 'target' (#608)
  • f7718b7 Change from stamp to some other boolean flag (#611)
  • 7b2f6de Update Bazel versions in CI: drop Bazel 6, add Bazel 9 (#613)
  • ea054fc Revert allow_symlink = True by default for non-executables (#605)
  • See full diff in compare view

Updates rules_jvm_external from 7.0 to 7.1

Release notes

Sourced from rules_jvm_external's releases.

7.1

Please note The lock file format was changed in rules_jvm_external 5.1 and in 6.10. If you update and repin your dependencies, your lock file will use the new format.

Usage

This version of rules_jvm_external requires Bazel 7.7.1 or Bazel 8.7.0 or Bazel 9.

This release requires Java 11 or above to run, both as the host JDK and the build and tool JDK.

Bzlmod

In your MODULE.bazel file:

bazel_dep(name = "rules_jvm_external", version = "7.1")

To add dependencies, later in your MODULE.bazel file:

maven = use_extension("@rules_jvm_external//:extensions.bzl", "maven")
maven.install(
artifacts = [
"org.seleniumhq.selenium:selenium-java:4.46.0",
],
lock_file = "//:maven_install.json",
)
use_repo(maven, "maven")

Using dependencies

In your BUILD.bazel file, reference the targets directly:

java_library(
    name = "example",
    exports = [
        "@maven//:org_seleniumhq_selenium_selenium_java",
    ],
)

What's Changed

... (truncated)

Commits
  • b234733 Prepare for 7.1 release (#1593)
  • fd9185f fix: force a single version per Gradle module when pinning (#1608)
  • 30e29da Use a UTF-8 locale for jvm_import jar actions (#1610)
  • 5eb595d BOM/POM coordinates condition marked as skipped must not be turned into `ht...
  • c1b3e5e fix: honour pinned versions in external resolvers (#1606)
  • 60611a9 feat: Support pluggable dependency download and metadata caching SPIs (#1589)
  • 2c8e8ac Preserve Gradle variant identity in the lock graph (#1576)
  • 97d4d4f fix: make :outdated work when runfiles trees are disabled (#1602)
  • 06db7d7 Enable RJE_UNSAFE_CACHE by default (#1584)
  • b6dd5dc Don't deduplicate additional_coursier_options (#1596)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Fixes #275

FUTURE_COPYBARA_INTEGRATE_REVIEW=#275 from google:dependabot/bazel/dependencies-7b78092f32 99ceb63

Bumps the dependencies group with 2 updates: [bazel_skylib](https://github.com/bazelbuild/bazel-skylib) and [rules_jvm_external](https://github.com/bazel-contrib/rules_jvm_external).

Updates `bazel_skylib` from 1.9.0 to 1.9.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/bazelbuild/bazel-skylib/releases">bazel_skylib's releases</a>.</em></p>
<blockquote>
<h2>1.9.2</h2>
<p><strong>MODULE.bazel setup</strong></p>
<pre lang="starlark"><code>bazel_dep(name = &quot;bazel_skylib&quot;, version = &quot;1.9.2&quot;)
</code></pre>
<p>And for the Gazelle plugin:</p>
<pre lang="starlark"><code>bazel_dep(name = &quot;bazel_skylib_gazelle_plugin&quot;, version = &quot;1.9.2&quot;, dev_dependency = True)
</code></pre>
<p><strong>WORKSPACE setup</strong></p>
<pre lang="starlark"><code>load(&quot;@bazel_tools//tools/build_defs/repo:http.bzl&quot;, &quot;http_archive&quot;)
<p>http_archive(<br />
name = &quot;bazel_skylib&quot;,<br />
sha256 = &quot;37cdfbc6faefea94f7b37760a305c98c08981116c2bc9e821e3b423221fad8c8&quot;,<br />
urls = [<br />
&quot;https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-1.9.2.tar.gz&quot;,<br />
&quot;https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-1.9.2.tar.gz&quot;,<br />
],<br />
)</p>
<p>load(&quot;<a href="https://github.com/bazel"><code>@​bazel</code></a>_skylib//:workspace.bzl&quot;, &quot;bazel_skylib_workspace&quot;)</p>
<p>bazel_skylib_workspace()<br />
</code></pre></p>
<p><em><strong>Additional WORKSPACE setup for the Gazelle plugin</strong></em></p>
<pre lang="starlark"><code>http_archive(
    name = &quot;bazel_skylib_gazelle_plugin&quot;,
    sha256 = &quot;ebcbf7bc491b28332c40b2db524d0a37e2e8feebbf099ad51561531c1efbba47&quot;,
    urls = [
        &quot;https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-gazelle-plugin-1.9.2.tar.gz&quot;,
        &quot;https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-gazelle-plugin-1.9.2.tar.gz&quot;,
    ],
)
<p>load(&quot;<a href="https://github.com/bazel"><code>@​bazel</code></a>_skylib_gazelle_plugin//:workspace.bzl&quot;, &quot;bazel_skylib_gazelle_plugin_workspace&quot;)</p>
<p>bazel_skylib_gazelle_plugin_workspace()</p>
<p>load(&quot;<a href="https://github.com/bazel"><code>@​bazel</code></a>_skylib_gazelle_plugin//:setup.bzl&quot;, &quot;bazel_skylib_gazelle_plugin_setup&quot;)</p>
<p>&lt;/tr&gt;&lt;/table&gt;<br />
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/bazelbuild/bazel-skylib/blob/main/CHANGELOG.md">bazel_skylib's changelog</a>.</em></p>
<blockquote>
<h1>Release 1.9.2</h1>
<p><strong>What's Changed</strong></p>
<ul>
<li>Revert allow_symlink = True by default for non-executables</li>
<li>Change from stamp to some other boolean flag</li>
<li>Update Bazel versions in CI: drop Bazel 6, add Bazel 9</li>
<li>Change Starlark flag default propagation from &quot;universal&quot; to &quot;target&quot;</li>
</ul>
<p><strong>Contributors</strong>:
<a href="https://github.com/gzm0"><code>@​gzm0</code></a>, <a href="https://github.com/kotlaja"><code>@​kotlaja</code></a>, <a href="https://github.com/susinmotion"><code>@​susinmotion</code></a>, <a href="https://github.com/justinhorvitz"><code>@​justinhorvitz</code></a></p>
<h1>Release 1.9.1</h1>
<p>Skipped due to <a href="https://github.com/bazelbuild/bazel-skylib/actions/runs/25128976486">CI failure</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/bazelbuild/bazel-skylib/commit/3de43ed45e1c7923d53c4db56ca3de3e46601580"><code>3de43ed</code></a> Create release 1.9.2 (<a href="https://redirect.github.com/bazelbuild/bazel-skylib/issues/630">#630</a>)</li>
<li><a href="https://github.com/bazelbuild/bazel-skylib/commit/bac104bc6065308a043489757f2a7ffd159c7fd1"><code>bac104b</code></a> Remove private visibility on &quot;always_true&quot; conditions (<a href="https://redirect.github.com/bazelbuild/bazel-skylib/issues/629">#629</a>)</li>
<li><a href="https://github.com/bazelbuild/bazel-skylib/commit/72291d1e2a6d92b4a2e0cf112982d1f6722a3485"><code>72291d1</code></a> Create release 1.9.1 (<a href="https://redirect.github.com/bazelbuild/bazel-skylib/issues/620">#620</a>)</li>
<li><a href="https://github.com/bazelbuild/bazel-skylib/commit/390ecf872568a9fc1752cbade56be52cd4263758"><code>390ecf8</code></a> No-op: change written default scope from 'universal' to 'target' (<a href="https://redirect.github.com/bazelbuild/bazel-skylib/issues/608">#608</a>)</li>
<li><a href="https://github.com/bazelbuild/bazel-skylib/commit/f7718b7b8e2003b9359248e9632c875cb48a6e48"><code>f7718b7</code></a> Change from stamp to some other boolean flag (<a href="https://redirect.github.com/bazelbuild/bazel-skylib/issues/611">#611</a>)</li>
<li><a href="https://github.com/bazelbuild/bazel-skylib/commit/7b2f6de44bb2def9131975b1cf5bc3bd53392680"><code>7b2f6de</code></a> Update Bazel versions in CI: drop Bazel 6, add Bazel 9 (<a href="https://redirect.github.com/bazelbuild/bazel-skylib/issues/613">#613</a>)</li>
<li><a href="https://github.com/bazelbuild/bazel-skylib/commit/ea054fcaf08c3b014e34212451d8cb45f01d8331"><code>ea054fc</code></a> Revert allow_symlink = True by default for non-executables (<a href="https://redirect.github.com/bazelbuild/bazel-skylib/issues/605">#605</a>)</li>
<li>See full diff in <a href="https://github.com/bazelbuild/bazel-skylib/compare/1.9.0...1.9.2">compare view</a></li>
</ul>
</details>
<br />

Updates `rules_jvm_external` from 7.0 to 7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/bazel-contrib/rules_jvm_external/releases">rules_jvm_external's releases</a>.</em></p>
<blockquote>
<h2>7.1</h2>
<p><strong>Please note</strong> The lock file format was changed in <code>rules_jvm_external</code> 5.1 and in 6.10. If you update and repin your dependencies, your lock file will use the new format.</p>
<h2>Usage</h2>
<p>This version of <code>rules_jvm_external</code> requires <strong>Bazel 7.7.1</strong> or <strong>Bazel 8.7.0</strong> or <strong>Bazel 9</strong>.</p>
<p>This release requires Java 11 or above to run, both as the host JDK and the build and tool JDK.</p>
<h3>Bzlmod</h3>
<p>In your <code>MODULE.bazel</code> file:</p>
<pre lang="starlark"><code>bazel_dep(name = &quot;rules_jvm_external&quot;, version = &quot;7.1&quot;)
</code></pre>
<p>To add dependencies, later in your <code>MODULE.bazel</code> file:</p>
<pre lang="starlark"><code>maven = use_extension(&quot;@rules_jvm_external//:extensions.bzl&quot;, &quot;maven&quot;)
<p>maven.install(<br />
artifacts = [<br />
&quot;org.seleniumhq.selenium:selenium-java:4.46.0&quot;,<br />
],<br />
lock_file = &quot;//:maven_install.json&quot;,<br />
)</p>
<p>use_repo(maven, &quot;maven&quot;)<br />
</code></pre></p>
<h3>Using dependencies</h3>
<p>In your <code>BUILD.bazel</code> file, reference the targets directly:</p>
<pre lang="starlark"><code>java_library(
    name = &quot;example&quot;,
    exports = [
        &quot;@maven//:org_seleniumhq_selenium_selenium_java&quot;,
    ],
)
</code></pre>
<h2>What's Changed</h2>
<ul>
<li>Prefer getenv to env.get by <a href="https://github.com/Andrius-B"><code>@​Andrius-B</code></a> in <a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/pull/1568">bazel-contrib/rules_jvm_external#1568</a></li>
<li>update environment variable handling for pinning by <a href="https://github.com/titusfortner"><code>@​titusfortner</code></a> in <a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/pull/1573">bazel-contrib/rules_jvm_external#1573</a></li>
<li>Fix MavenPublisher to support POM-only publications by <a href="https://github.com/titusfortner"><code>@​titusfortner</code></a> in <a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/pull/1574">bazel-contrib/rules_jvm_external#1574</a></li>
<li>Update Gradle to 9.5.0 by <a href="https://github.com/shs96c"><code>@​shs96c</code></a> in <a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/pull/1569">bazel-contrib/rules_jvm_external#1569</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/bazel-contrib/rules_jvm_external/commit/b234733f7ce1ffc73ddc1be840893fb61bdae3b5"><code>b234733</code></a> Prepare for 7.1 release (<a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/issues/1593">#1593</a>)</li>
<li><a href="https://github.com/bazel-contrib/rules_jvm_external/commit/fd9185f5e6ed7b004b3ef6acac8fd3577ca72f4a"><code>fd9185f</code></a> fix: force a single version per Gradle module when pinning (<a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/issues/1608">#1608</a>)</li>
<li><a href="https://github.com/bazel-contrib/rules_jvm_external/commit/30e29da81fef13d0c55948bb8001be8e8d65521e"><code>30e29da</code></a> Use a UTF-8 locale for jvm_import jar actions (<a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/issues/1610">#1610</a>)</li>
<li><a href="https://github.com/bazel-contrib/rules_jvm_external/commit/5eb595d7372a9a510a8c4a6ccdef7d4851d94eac"><code>5eb595d</code></a> BOM/POM coordinates condition marked as <code>skipped</code> must not be turned into `ht...</li>
<li><a href="https://github.com/bazel-contrib/rules_jvm_external/commit/c1b3e5ea49d1504af2499a6bc5a0639cb9d5963b"><code>c1b3e5e</code></a> fix: honour pinned versions in external resolvers (<a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/issues/1606">#1606</a>)</li>
<li><a href="https://github.com/bazel-contrib/rules_jvm_external/commit/60611a91a941dd79ab08c66d706b1a44610dfe1e"><code>60611a9</code></a> feat: Support pluggable dependency download and metadata caching SPIs (<a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/issues/1589">#1589</a>)</li>
<li><a href="https://github.com/bazel-contrib/rules_jvm_external/commit/2c8e8ac3d0d23294cd666c6eeaea7770a721768f"><code>2c8e8ac</code></a> Preserve Gradle variant identity in the lock graph (<a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/issues/1576">#1576</a>)</li>
<li><a href="https://github.com/bazel-contrib/rules_jvm_external/commit/97d4d4f79022fcc82a926227a19e32146b63e43e"><code>97d4d4f</code></a> fix: make :outdated work when runfiles trees are disabled (<a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/issues/1602">#1602</a>)</li>
<li><a href="https://github.com/bazel-contrib/rules_jvm_external/commit/06db7d7d6f695a0b1df3a75e88773709bb10f031"><code>06db7d7</code></a> Enable RJE_UNSAFE_CACHE by default (<a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/issues/1584">#1584</a>)</li>
<li><a href="https://github.com/bazel-contrib/rules_jvm_external/commit/b6dd5dca253055505fbd2b78ae4db9035f3e8882"><code>b6dd5dc</code></a> Don't deduplicate additional_coursier_options (<a href="https://redirect.github.com/bazel-contrib/rules_jvm_external/issues/1596">#1596</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/bazel-contrib/rules_jvm_external/compare/7.0...7.1">compare view</a></li>
</ul>
</details>
<br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions

</details>

Fixes #275

COPYBARA_INTEGRATE_REVIEW=#275 from google:dependabot/bazel/dependencies-7b78092f32 99ceb63
PiperOrigin-RevId: 959124876
@copybara-service
copybara-service Bot merged commit 768dbe0 into master Aug 4, 2026
@copybara-service
copybara-service Bot deleted the test_958705760 branch August 4, 2026 18:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants