fix(deps): Update dependency rules_python to v2 by cloudquery-ci[bot] · Pull Request #179 · cloudquery/distribution

cloudquery-ci · 2026-07-01T03:21:45Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
rules_python	bazel_dep	major	`0.35.0` → `2.3.1`

Release Notes

bazel-contrib/rules_python (rules_python)

`v2.3.1`

Compare Source

For more detailed setup instructions, see https://rules-python.readthedocs.io/en/latest/getting-started.html

For the user-facing changelog see here

Using Bzlmod

Add to your MODULE.bazel file:

bazel_dep(name = "rules_python", version = "2.3.1")

python = use_extension("@&#8203;rules_python//python/extensions:python.bzl", "python")
python.toolchain(
    python_version = "3.13",
)

pip = use_extension("@&#8203;rules_python//python/extensions:pip.bzl", "pip")
pip.parse(
    hub_name = "pypi",
    python_version = "3.13",
    requirements_lock = "//:requirements_lock.txt",
)

use_repo(pip, "pypi")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_python",
    sha256 = "678358df0f4ae7f00a33ce33cced97c301f3c523bdd71cb2573d20a93efbf6c6",
    strip_prefix = "rules_python-2.3.1",
    url = "https://github.com/bazel-contrib/rules_python/releases/download/2.3.1/rules_python-2.3.1.tar.gz",
)

load("@&#8203;rules_python//python:repositories.bzl", "py_repositories")

py_repositories()

Gazelle plugin

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_python_gazelle_plugin",
    sha256 = "678358df0f4ae7f00a33ce33cced97c301f3c523bdd71cb2573d20a93efbf6c6",
    strip_prefix = "rules_python-2.3.1/gazelle",
    url = "https://github.com/bazel-contrib/rules_python/releases/download/2.3.1/rules_python-2.3.1.tar.gz",
)

# To compile the rules_python gazelle extension from source,

# we must fetch some third-party go dependencies that it uses.

load("@&#8203;rules_python_gazelle_plugin//:deps.bzl", _py_gazelle_deps = "gazelle_deps")

_py_gazelle_deps()

Full Changelog: bazel-contrib/rules_python@2.3.0...2.3.1

`v2.3.0`

Compare Source

{#v2-3-0-changed}

Changed

(gazelle) BREAKING rules_python 1.5.0 or higher is now required. The Python
extension selects its standard library list on is_python_3.14, which earlier
versions do not define.

{#v2-3-0-fixed}

Fixed

Fixed py_binary_rule_builder() / py_test_rule_builder() (from python/api/executables.bzl)
failing at analysis time with a visibility error when used to construct a custom rule from an
external module.
(compile_pip_requirements) Add the explicit data attribute and forward it
directly to the generated py_binary, so files passed via data can be
referenced from extra_args using $(location ...).
(coverage) The warning about a missing bundled coverage.py wheel is no longer
emitted as we are now falling back to a pure python wheel
(#3950).
(gazelle) The Python extension now uses the correct standard library module list for
python_version 3.13 and 3.14; previously both fell back to the 3.11 list, so modules
added or removed since then (e.g. compression.zstd, telnetlib) were misclassified. The
fallback list for unrecognized versions is now the newest available one rather than 3.11
(#3978).
(pypi) Allow uv_lock to be specified in pip.parse without requiring
requirements_lock (or other os-specific requirement file attributes) to be
set.
(pypi) Requirement --hash=<algo>:<digest> pins and Simple API
#<algo>=<digest> URL fragments are now parsed for all hash algorithms
instead of silently dropping everything except sha256. Non-sha256 pins are
matched against the digests advertised by the index and downloads are verified
using the corresponding Subresource Integrity value, and the pins are kept in
the requirement line when falling back to pip
(#3972).
As part of this, whl_library repos created by pip.parse now always pass
the digest via the integrity attribute (SRI format) instead of sha256,
and the lock file facts store digests as <algo>:<digest> values (the facts
version was bumped, so cached index information is refreshed once).
(pypi) pip.parse(uv_lock = ...) no longer exposes uv workspace/root members
that resolve to no wheel or sdist (e.g. source = { virtual = "." } or editable
installs). Previously these source-less packages were added to the hub's
all_requirements / all_whl_requirements with an alias to a subpackage that
does not exist, breaking analysis for anything enumerating the full set such as
modules_mapping(wheels = all_whl_requirements)
(#3934).
(pypi) correctly parse the index_url for each wheel so that the source registry is forwarded to
the {obj}whl_library. This is so that the purl for package_metadata can be correctly
constructed.
(pypi) fixed the URL normalization function to correctly handle local paths
enabling wheel sources files to point to an absolute path. Currently it supports
the file://<absolute_path> for linux and windows like paths. We also support
envsubst for the said paths from now on.

{#v2-3-0-added}

Added

(bzlmod) Added MODULE.bazel flag aliases for Starlark-defined flags:
build_python_zip, incompatible_default_to_explicit_init_py,
python_path, and experimental_python_import_all_repositories.
(cc) Added experimental {obj}py_extension macro for creating C/C++ Python
extension modules
(#3283).
(cc) Added libc, platform_machine, platform_tag, soabi, and
sys_platform attributes and info fields to {obj}py_cc_toolchain /
{obj}PyCcToolchainInfo.
(pip,python) Added pyproject_toml attribute to {obj}pip.default, {obj}pip.parse and {obj}python.defaults to read the default Python version from the requires-python field of pyproject.toml.
(py_test) Added an opt-in safeguard against py_test targets that silently
pass without running any tests. Set
{obj}--@rules_python//python/config_settings:validate_test_main=enabled to
fail the build when a test's main module only contains inert top-level
statements (definitions, imports, assignments) and never invokes a test
runner (#3824).

{#v2-2-0}

`v2.2.0`

Compare Source

{#v2-2-0-changed}

Changed

Renamed most public bzl_library targets from {foo}_bzl to {foo} to follow
gazelle naming conventions. Deprecated aliases are left for backwards
compatibility.
(binaries/tests) Added a deprecation warning for targets relying on implicit __init__.py creation.

{#v2-2-0-fixed}

Fixed

Fixed a flaky error on Windows 2022 when looking up the win32 version during
site initialization by retrying the lookup
(#3721).
(binaries) Fixed building of legacy zipapps on Windows execution platforms by
using a hermetic tool instead of host cat.
(bootstrap) Fixed stage 1 bootstrap imports when target outputs shadow
standard library modules.
(coverage) Skip lcov report when no data was collected.
(pypi) Fixed experimental_index_url checking truthiness before envsubst
expansion.
(rules) Fixed venv output paths for py_binary and py_test targets whose
names contain path separators so distinct targets with the same basename no
longer share the same venv output directory.
(windows) Fixed build data generation on localized Windows installations.

{#v2-2-0-added}

Added

Added {bzl:obj}features.loadable_symbols to allow detecting public symbols
exported by bzl files.
Exposed {bzl:obj}VenvSymlinkEntry and {bzl:obj}VenvSymlinkKind in
{bzl:target}//python:py_info.bzl.
(pypi) Added @pypi repo: a unified hub of pip.parse hubs.
(pypi) Added a dep tag class to the pip bzlmod extension. This allows
modules to declare abstract PyPI dependencies, ensuring target structures
exist in the unified hub, while allowing other modules to provide the
concrete implementation via pip.parse.
(uv) Support for basic uv.lock generation via the lock rule
and basic support for importing the uv.lock file itself. Since this
may have bugs, please report this by creating new tickets.
Work towards #2787
and #1975.

{#v2-1-0}

`v2.1.0`

Compare Source

{#v2-1-0-removed}

Removed

(build_data) Removed CONFIG_MODE from build data
(#3793).
(coverage) Support for python 3.8 has been dropped from the bundled
coverage.py wheel set, since coverage.py 7.6.2 dropped it.

{#v2-1-0-changed}

Changed

(bzlmod) How default runtimes are registered has changed to use a manifest
of SHAs and URLs. TOOL_VERSIONS in python/versions.bzl is now empty under
bzlmod.
(gazelle) WORKSPACE's bazel-gazelle dependency bumped from 0.36.0 to 0.47.0.
The go version was also bumped from 1.21.13 to 1.22.9.
(gazelle) python_generate_pyi_deps and python_generate_pyi_srcs now
default to true.
(pypi) The data files of a wheel (bin, includes, etc) are now always included
as a library's data dependencies.
(coverage) When configure_coverage_tool = True is set but the bundled
coverage.py wheel set has no entry for the requested python version and
platform, a warning is now printed instead of silently producing an empty
coverage report.

{#v2-1-0-fixed}

Fixed

(gazelle) py_library and py_test targets with missing source files can now be
removed by Gazelle (#3375).
However map_kind and alias_kind will not be removed unless people are running a
gazelle version that includes
bazel-gazelle#2362
(bootstrap) Fixed a potential race condition with symlink creation during
startup.
(gazelle) Fixed handling of auto-included __init__.py files when generating py_binary
targets (#3729).
(entry_point) From now on mypy type checking will be skipped on the generated
files (#3126).
(pypi) Support --experimental_isolated_extension_usages
(#3668).
(uv) use the astral.sh mirror as the preferred url for binary downloads,
with github.com as a fallback; for uv >= 0.11.0, read the checksums directly
from the dist-manifest contents.
(pypi) Fix importlib.metadata.files by ensuring RECORD is included in
installed wheel targets, except when built from sdist
(#3024).
(system_python) Fix AttributeError exception on Debian 10 Buster
python installations which may not set sys._base_executable
(#3774).
(windows) Fix py_test/py_binary failure when the target name contains
path separators; the bootstrap stub is now declared as a sibling of the
.exe launcher
(#3789).
Fix the forwarding of target_compatible_with from compile_pip_requirements
towards the underlying *.update target.
(#3787)
(uv) allow user overwrite the build environment using --action_env to allow
setting authentication for the index URL.
(#3405)
(uv) fix the execution of the uv pip compile in the sandbox. Work
towards better supporting uv out of the box on our platforms.
(#1975)
(uv) automatically pass the --project parameter based on the source files.
(#3087)
(coverage) handle nested coverage collection
(#3823)

{#v2-1-0-added}

Added

(toolchain) Added {obj}PyRuntimeInfo.interpreter_files_to_run so action
consumers can execute an in-build runtime interpreter with its runfiles.
(toolchains) Support dynamically fetching and registering Python runtimes
from a python-build-standalone manifest file using
python.override(add_runtime_manifest_urls = ..., runtime_manifest_sha = ...).
(toolchain) Added {obj}python.override.toolchain_target_settings to allow
adding config_setting labels to all registered toolchains.
(windows) Full venv support for Windows is available. Set
{obj}--venvs_site_packages=yes to enable.
(test/binaries) When {obj}--venv_site_packages=yes is enabled,
wheel data, bin, and include files are populated into the venv.
(runfiles) Added a pathlib-compatible API: {obj}Runfiles.root()
Fixes #3296.
(gazelle) Support alias_kind directive.
Fixes #3183.
(pypi) package_metadata support, fixes
#2054.
(coverage) Add support for python 3.14 and bump coverage.py to 7.10.7.

{#v2-0-3}

`v2.0.3`

Compare Source

{#v2-0-3-fixed}

Fixed

(pypi) Assume that all of the packages are available on a particular hub if
there is only a single PyPI compatible index to be used. This saves us an expensive
PyPI download and supports PyPI mirror implementations that do not support the root
index functionality. Fixes #3769.

{#v2-0-2}

`v2.0.2`

Compare Source

{#v2-0-2-added}

Added

(toolchains) 3.13.12, 3.14.3 Python toolchain from 20260325 release.
(toolchains) 3.10.20, 3.11.15, 3.12.13, 3.13.13 3.14.4, 3.15.0a8
Python toolchain from 20260414 release.

{#v2-0-1}

`v2.0.1`

Compare Source

{#v2-0-1-fixed}

Fixed

(pypi) Fix the versions of packages that we are recording to a MODULE.bazel.lock file
facts by passing all of the versions to the get_index function.
Fixes #3756.
(bzlmod) Reduce default verbosity of our loggers for non-root modules
(#3749).

{#v2-0-0}

`v2.0.0`

Compare Source

{#v2-0-0-removed}

Removed

Nothing removed.

{#v2-0-0-changed}

Changed

Breaking

{obj}--windows_enable_symlinks is required. Add startup --windows_enable_symlinks to your .bazelrc to enable Bazel using full
symlink support on Windows.
venv-based binaries are created by default ({obj}--bootstrap_impl=system_python)
on supported platforms (Linux/Mac with Bazel 8+, or Windows).
--build_python_zip on Windows is ignored. Use {obj}py_zipapp_binary to create
zips of Python programs.
(pypi) Previously experimental_index_url users would not need to specify
target platforms if cross-building is required. From now we will only pull
wheels for the host OS to better align with how the rules work with the legacy
pip implementation. Use {obj}pip.parse.target_platforms to customize the
behavior.
Related to #260.

Other changes:

(pypi) Update dependencies used for compile_pip_requirements, building
sdists in the whl_library rule and fetching wheels using pip.
(pypi) Before using the bazel downloader to fetch the PyPI package metadata
we will from now on fetch the lists of available packages on each index. The
used package mappings will be written as facts to the MODULE.bazel.lock file
on supported bazel versions and it should be done at most once. As a result,
per-package {obj}experimental_index_url_overrides is no longer needed, but
if specified, it needs to be provided for all packages not on the default index. What
is more, the flags for --index_url and --extra-index-url now behave in the
same way as in uv or pip, i.e. we default to --index-url if the package
is not found in --extra-index-url. Fixes
(#3260 and
#2632).
(uv) We will now use the download URL specified in the uv's
dist_manifest.json file. If you have redirects or blocking rules as part of
your downloader setup, you may need to adjust them. What is more, the default
uv version has been bumped 0.11.2.
(runfiles): Type annotations are no longer tested for Python 3.9.
Windows no longer defaults to creating a zip file and extracting it; a
symlink-based runfiles tree is created, as on unix-like platforms.

{#v2-0-0-fixed}

Fixed

(toolchain) Also set Make variables for local toolchains.
(zipapp) Resolve issue passing through compression settings in
py_zippapp_binary targets
(#3646).
(toolchains) The pyc created at runtime in the stdlib should no longer
cause the Python runtime repository to be invalidated. The stdlib pyc files
may be reused in between invocations, depending upon the sandboxing
configuration. See the {any}RULES_PYTHON_PYCACHE_DIR environment variable
for more information.
(#3643).
(bootstrap) Fixed incorrect runfiles path construction in bootstrap
scripts when binary is defined in another bazel module
(#3563).
(bootstrap) Resolve RUNFILES_DIR inheritance issues, which lead to a child
Python binary incorrectly using it's parent's Python binary environment
(#3518).
(uv) Downloads for versions >=0.10 work again. In order to fix this we had
drop support for powerpc64 platform. People interested in the platform can
bring it back via the uv.default API. Like:
```
uv.default(
    compatible_with = [
        "@&#8203;platforms//os:linux",
        "@&#8203;platforms//cpu:ppc",
    ],
    platform = "powerpc64-unknown-linux-gnu",
)
```
Fixes #3676.
(pypi) Fixes wheel extraction on hosts without python installed,
Fixes #3712.

{#v2-0-0-added}

Added

(pypi) Write SimpleAPI contents to the MODULE.bazel.lock file if using
{obj}experimental_index_url which should speed up consecutive
initializations and should no longer require the network access if the cache is
hydrated. Implements
#2731.
(pypi) The --index-url and --extra-index-url is now parsed from the lock
file and the {obj}pip.parse.experimental_index_url and
{obj}pip.parse.experimental_extra_index_urls is
no longer mandatory to leverage the bazel downloader.
Implements
#1357,
#2951.
(pypi) If cross-compilation is needed, use the {obj}pip.parse.target_platforms
to specify exactly which platforms should be supported.
Implements
#260.
(wheel) Specifying a path ending in / as a destination in data_files
will now install file(s) to a folder, preserving their basename.
Various attributes and fields added to support venvs on Windows:
- {obj}py_runtime.venv_bin_files and {obj}PyRuntime.venv_binfiles
  field added to specify additional Python runtime files Windows needs for
  venvs.
- {obj}PyExecutableInfo.venv_interpreter_runfiles, and
  {obj}PyExecutableInfo.venv_interpreter_symlinks adde
(wheel) Add support for add_path_prefix argument in py_wheel which can be
used to prepend a prefix to the files in the wheel.

{#v1-9-1}

`v1.9.2`

Compare Source

For more detailed setup instructions, see https://rules-python.readthedocs.io/en/latest/getting-started.html

For the user-facing changelog see here

Using Bzlmod

Add to your MODULE.bazel file:

bazel_dep(name = "rules_python", version = "1.9.2")

python = use_extension("@&#8203;rules_python//python/extensions:python.bzl", "python")
python.toolchain(
    python_version = "3.13",
)

pip = use_extension("@&#8203;rules_python//python/extensions:pip.bzl", "pip")
pip.parse(
    hub_name = "pypi",
    python_version = "3.13",
    requirements_lock = "//:requirements_lock.txt",
)

use_repo(pip, "pypi")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_python",
    sha256 = "98880e2942e66fbe23202bd4174c089a54a203c32fc1cbc1c6c86df9f97ad7e3",
    strip_prefix = "rules_python-1.9.2",
    url = "https://github.com/bazel-contrib/rules_python/releases/download/1.9.2/rules_python-1.9.2.tar.gz",
)

load("@&#8203;rules_python//python:repositories.bzl", "py_repositories")

py_repositories()

Gazelle plugin

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_python_gazelle_plugin",
    sha256 = "98880e2942e66fbe23202bd4174c089a54a203c32fc1cbc1c6c86df9f97ad7e3",
    strip_prefix = "rules_python-1.9.2/gazelle",
    url = "https://github.com/bazel-contrib/rules_python/releases/download/1.9.2/rules_python-1.9.2.tar.gz",
)

# To compile the rules_python gazelle extension from source,

# we must fetch some third-party go dependencies that it uses.

load("@&#8203;rules_python_gazelle_plugin//:deps.bzl", _py_gazelle_deps = "gazelle_deps")

_py_gazelle_deps()

What's Changed

fix: make executable implicit defaults public so other modules can use rule builders (#3919) by @13steinj in #3970

Full Changelog: bazel-contrib/rules_python@1.9.1...1.9.2

`v1.9.1`

Compare Source

{#v1-9-1-added}

Added

(toolchains) 3.13.12, 3.14.3 Python toolchain from [2026032] release.
(toolchains) 3.10.20, 3.11.15, 3.12.13, 3.13.13 3.14.4, 3.15.0a8
Python toolchain from [2026041] release.

{#v1-9-0}

`v1.9.0`

Compare Source

{#v1-9-0-removed}

Removed

Nothing removed.

{#v1-9-0-changed}

Changed

DEPRECATED: implicit zipapp support
- Implicit zipapp output of py_binary/py_test has been deprecated and
  replaced by separate {obj}py_zipapp_binary and {obj}py_zipapp_test
  rules. See
  #3567
  for a detailed migration guide.
(toolchains) stop exposing config settings in python toolchain alias repos.
Please consider depending on the flags defined in
//python/config_setting/... and the @platforms package instead.
(binaries/tests) The PYTHONBREAKPOINT environment variable is automatically inherited
(binaries/tests) The {obj}stamp attribute now transitions the Bazel builtin
{flag}--stamp flag.
(pypi) Now the RECORD file patches will follow the quoted or unquoted filenames convention
in order to make pytorch and friends easier to patch.
(wheel) py_wheel no longer expands the input depset during analysis,
improving analysis performance for targets with large dependency trees.
(binaries/tests) (Windows) --enable_runfiles=true is the default for
py_binary/py_test. Prior behavior can be restored by adding
@rules_python//command_line_option:enable_runfiles=false or
@rules_python//command_line_option:enable_runfiles=INHERIT to the
config_settings attribute. NOTE: enable_runfiles=true will
soon become required for Windows.

{#v1-9-0-fixed}

Fixed

(tests) No more coverage warnings are being printed if there are no sources.
(#2762)
(gazelle) Ancestor conftest.py files are added in addition to sibling conftest.py.
(#3497) Note
that this behavior can be reverted to the pre-1.9.0 behavior by setting the new
python_include_ancestor_conftest directive to false.
(binaries/tests) Stamped build data generated by Windows actions is readable

{#v1-9-0-added}

Added

(binaries/tests) {obj}--debugger: allows specifying an extra dependency
to add to binaries/tests for custom debuggers.
(binaries/tests) Build information is now included in binaries and tests.
Use the bazel_binary_info module to access it. The {flag}--stamp flag will
add {obj}--workspace_status_command information.
(gazelle) A new directive python_generate_pyi_srcs has been added. When
true, a py_* target's pyi_srcs attribute will be set if any .pyi files
that are associated with the target's srcs are present.
(#3354).
(zipapp) {obj}py_zipapp_binary and {obj}py_zipapp_test rules added. These
will replace --build_python_zip and the zip output group of
py_binary/py_test. The zipapp rules support more functionality, correctness,
and have better build performance.
(toolchains) Added {obj}PyExecToolsInfo.exec_runtime for more easily
getting an RBE-compatible runtime to use for build actions.
(providers) {obj}PyExecutableInfo has several new fields to aid packaging
of binaries: {obj}PyExecutableInfo.app_runfiles,
{obj}PyExecutableInfo.interpreter_args,
{obj}PyExecutableInfo.stage2_bootstrap, and
{obj}PyExecutableInfo.venv_python_exe.
(tools/wheelmaker.py) Added support for URL requirements according to PEP 508
in Requires-Dist metadata. (#3569)
(gazelle) A new directive python_include_ancestor_conftest has been added.
When false, ancestor conftest targets are not automatically added to
{bzl:obj}py_test target dependencies. This false behavior is how things
were in rules_python before 1.9.0. The default is true, as the prior behavior
was technically incorrect.
(#3596)

{#v1-8-5}

`v1.8.5`

Compare Source

{#v1-8-5-fixed}

Fixed

(runfiles) Fixed CurrentRepository() raising ValueError on Windows.
(#3579)
(pypi) pip_parse no longer silently drops PEP 508 URL-based requirements
(pkg @ https://...) when extract_url_srcs=False (the default for
pip_repository).
(pypi) Extras in requirement strings are now normalized per PEP 685,
fixing missing transitive dependencies when extras contain hyphens
(e.g., sqlalchemy[postgresql-psycopg2binary]).
(#3587)

{#v1-8-4}

`v1.8.4`

Compare Source

{#v1-8-4-fixed}

Fixed

(pipstar): A corner case of evaluation of version specifiers ("1.2" ~= "1.2.0")
has been fixed improving compatibility with the PEP440 standard.
Fixes #3580.
(pipstar): We now add read permissions after extracting wheels for the cases
where the whl file is missing them.
Fixes #3554.

{#v1-8-3}

`v1.8.3`

Compare Source

{#v1-8-3-fixed}

Fixed

(pipstar) Fix whl extraction on Windows when bazelrc has XX flags.
Fixes #3543.

{#v1-8-2}

`v1.8.2`

Compare Source

{#v1-8-2-fixed}

Fixed

(venvs) relax the C library filename check to make tensorflow work
Fixes #3524.

{#v1-8-1}

`v1.8.1`

Compare Source

{#v1-8-1-fixed}

Fixed

(pipstar) Extra resolution that refers back to the package being resolved works again.
Fixes #3524.

{#v1-8-0}

`v1.8.0`

Compare Source

{#v1-8-0-known-issues}

Known Issues

(gazelle) Windows support for the Gazelle plugin may be broken. See
#3416 for
details and possible workarounds.

{#v1-8-0-removed}

Removed

(toolchain) Remove all of the python 3.8 toolchain support out of the box. Users need
to pass the TOOL_VERSIONS that include 3.8 toolchains or use the bzlmod APIs to add
them back. This means any hub pip.parse calls that target 3.8 will be ignored from
now on. (#2704)
{bzl:obj}python.single_version_override, like:

python = use_extension("@&#8203;rules_python//python/extensions:python.bzl", "python")

python.single_version_override(
    python_version = "3.8.20",
    sha256 = {
        "aarch64-apple-darwin": "2ddfc04bdb3e240f30fb782fa1deec6323799d0e857e0b63fa299218658fd3d4",
        "aarch64-unknown-linux-gnu": "9d8798f9e79e0fc0f36fcb95bfa28a1023407d51a8ea5944b4da711f1f75f1ed",
        "x86_64-apple-darwin": "68d060cd373255d2ca5b8b3441363d5aa7cc45b0c11bbccf52b1717c2b5aa8bb",
        "x86_64-pc-windows-msvc": "41b6709fec9c56419b7de1940d1f87fa62045aff81734480672dcb807eedc47e",
        "x86_64-unknown-linux-gnu": "285e141c36f88b2e9357654c5f77d1f8fb29cc25132698fe35bb30d787f38e87",
    },
    urls = ["https://github.com/astral-sh/python-build-standalone/releases/download/20241002/cpython-{python_version}+20241002-{platform}-{build}.tar.gz"],
)

(toolchain) Remove all of the python 3.9 toolchain versions except for the 3.9.25.
This version has reached EOL and will no longer receive any security fixes, please update to
3.10 or above. (#2704)
(toolchain) ignore_root_user_error has now been flipped to be always enabled and
the chmod of the python toolchain directories have been removed. From now on rules_python
always adds the pyc files to the glob excludes and in order to avoid any problems when using
the toolchains in the repository phase, ensure that you pass -B to the python interpreter.
(#2016)

{#v1-8-0-changed}

Changed

(toolchains) Use toolchains from the 20251031 release.
(gazelle) Internally split modules mapping generation to be per-wheel for concurrency and caching.
(pip) pipstar has been enabled for all whl_library instances where the whl
is passed through a label or downloaded using the bazel downloader
(#2949).
(pypi) pipstar flag default has been flipped to be on by default.
It can be disabled through RULES_PYTHON_ENABLE_PIPSTAR=0 environment variable.
If you do need to disable it, please add a comment to
#2949.
(gazelle deps) rules_go bumped from 0.55.1 to 0.59.0
(gazelle deps) gazelle bumped from 0.36.0 to 0.47.0

{#v1-8-0-fixed}

Fixed

(gazelle) Remove {obj}py_binary targets with invalid srcs. This includes files
that are not generated or regular files.
#3046
(runfiles) Fix incorrect Python runfiles path assumption - the existing
implementation assumes that it is always four levels below the runfiles
directory, leading to incorrect path checks
(#3085).
(toolchains) local toolchains now tell the sys.abiflags value of the
underlying runtime.
(toolchains) various local toolchain fixes: add abi3 header targets,
fixes to linking, Windows DLL detection, and defines for free threaded
runtimes.
(toolchains) The python_headers target is now compatible with
layering_check.
(performance) 90% reduction in py_binary/py_test analysis phase cost.
(#3381).
(gazelle) Fix gazelle_python_manifest.test so that it accesses manifest files via runfile path handling rather than directly (#3397).
(core rules) For the system_python bootstrap, the runfiles root is added to
sys.path.
(sphinxdocs) The sphinxdocs .serve target is now compatible with Bazel's --symlink_prefix
flag (#3410).

{#v1-8-0-added}

Added

(toolchains) 3.9.25 Python toolchain from 20251031 release.
(toolchains) 3.13.10, 3.14.1 Python toolchain from 20251202 release.
(toolchains) 3.13.11, 3.14.2, 3.15.0a2 Python toolchains from 20251209 release.
(pypi) API to tell pip.parse which platforms users care about. This is very useful to ensure
that when users do bazel query for their deps, they don't have to download all of the
dependencies for all of the available wheels. Torch wheels can be up of 1GB and it takes a lot
of time to download those, which is unnecessary if only the host platform builds are necessary
to be performed. This is mainly for backwards/forwards compatibility whilst rolling out
RULES_PYTHON_ENABLE_PIPSTAR=1 by default. Users of experimental_index_url that perform
cross-builds should add {obj}target_platforms to their pip.parse invocations, which will
become mandatory if any cross-builds are required from the next release.
(py_library) Attribute {obj}namespace_package_files added. It is a hint for
optimizing venv creation.

{#v1-7-0}

`v1.7.0`

Compare Source

{#v1-7-0-removed}

Removed

(core rules) Support for Bazel's long deprecated "extra actions" has been
removed
(#3215).

{#v1-7-0-changed}

Changed

(deps) bumped rules_cc dependency to 0.1.5.
(bootstrap) For {obj}--bootstrap_impl=system_python, PYTHONPATH is no
longer used to add import paths. The sys.path order has changed from
[app paths, stdlib, runtime site-packages] to [stdlib, app paths, runtime site-packages].
(bootstrap) For {obj}--bootstrap_impl=system_python, the sys.path order has
changed from [app paths, stdlib, runtime site-packages] to [stdlib, app paths, runtime site-packages].
(pip) Publishing deps are no longer pulled via experimental_index_url.
(#2937).
(toolchains) py_runtime and PyRuntimeInfo reject Python 2 settings.
Setting py_runtime.python_version = "PY2" or non-None
PyRuntimeInfo.py2_runtime is an error.
(pypi) pipstar flag has been implemented for WORKSPACE and can be flipped to be enabled using RULES_PYTHON_ENABLE_PIPSTAR=1 environment variable. If you do, please
add a comment to
#2949 if you run into any
problems.
With this release we are deprecating {obj}pip.parse.experimental_target_platforms and
pip_repository.experimental_target_platforms. For users using WORKSPACE and
vendoring the requirements.bzl file, please re-vendor so that downstream is unaffected
when the APIs get removed. If you need to customize the way the dependencies get
evaluated, see our docs on customizing Requires-Dist resolution.
(toolchains) Added Python versions 3.15.0a1, 3.14.0, 3.13.9, 3.12.12, 3.11.14, 3.10.19, and 3.9.24
from the 20251014 release.
(deps) (bzlmod) Upgraded to bazel-skylib version
1.8.2

{#v1-7-0-fixed}

Fixed

(rules) The PyInfo constructor was setting the wrong value for
has_py3_only_sources - this is now fixed.
(bootstrap) The stage1 bootstrap script now correctly handles nested RUNFILES_DIR
environments, fixing issues where a py_binary calls another py_binary
(#3187).
(bootstrap) For Windows, having many dependencies no longer results in max
length errors due to too long environment variables.
(bootstrap) {obj}--bootstrap_impl=script now supports the -S interpreter
setting.
(venvs) {obj}--venvs_site_packages=yes no longer errors when packages with
overlapping files or directories are used together.
(#3204).
(venvs) {obj}--venvs_site_packages=yes works for packages that dynamically
link to shared libraries
(#3228).
(venvs) {obj}--venvs_site_packages=yes includes pth files at the root of the
site-packages folder
(#3339).
(uv) {obj}//python/uv:lock.bzl%lock now works with a local platform
runtime.
(pypi) linux_riscv64 is added to the platforms list in _pip_repository_impl,
which fixes a build issue for tensorflow on riscv64.
(toolchains) WORKSPACE builds now correctly register musl and freethreaded
variants. Setting {obj}--py_linux_libc=musl and --py_freethreaded=yes now
activate them, respectively.
(#3262).
(rules) {obj}py_console_script_binary is now compatible with symbolic macros
(#3195).

{#v1-7-0-added}

Added

(runfiles) The Python runfiles library now supports Bazel's
--incompatible_compact_repo_mapping_manifest flag.
(bootstrap) {obj}--bootstrap_impl=system_python now supports the
{obj}main_module attribute.
(bootstrap) {obj}--bootstrap_impl=system_python now supports the
{any}RULES_PYTHON_ADDITIONAL_INTERPRETER_ARGS environment variable.
(rules) The py_binary, py_test, and py_wheel rules now have a
{obj}config_settings attribute to control build flags within the build graph.
Custom settings can be added using {obj}config.add_transition_setting in
MODULE.bazel files, or {obj}py_repositories(transition_settings=...) in
WORKSPACE files. See the
{ref}common-deps-with-multiple-pypi-versions guide on using common
dependencies with multiple PyPI versions` for an example.
(toolchains) Stable ABI headers support added. To use, depend on
{obj}//python/cc:current_py_cc_headers_abi3. This allows Windows builds
a way to depend on headers without the potentially Python unstable ABI
objects from the regular {obj}//python/cc:current_py_cc_headers target
being included.
- Adds {obj}//python/cc:current_py_cc_headers_abi3,
  {obj}py_cc_toolchain.headers_abi3, and {obj}PyCcToolchainInfo.headers_abi3.
- {obj}//python:features.bzl%features.headers_abi3 can be used to
  feature-detect the presense of the above.
(toolchains) Local toolchains can use a label for the interpreter to use.
(pypi) Support for environment marker handling and experimental_index_url handling for
Windows ARM64 for Python 3.11 and later
(#2276).

{#v1-6-3}

`v1.6.3`

Compare Source

{#v1-6-3-fixed}

Fixed

(pypi) We now use the Minimal Version Selection (MVS) algorithm to select
the right wheel when there are multiple wheels for the target platform
(e.g. musllinux_1_1_x86_64 and musllinux_1_2_x86_64). If the user
wants to set the minimum version for the selection algorithm, use the
{obj}pip.default.whl_platform_tags attribute to configure that. If
musllinux_*_x86_64 is specified, we will choose the lowest available
wheel version. Fixes #3250.

{#v1-6-0}

`v1.6.1`

Compare Source

For more detailed setup instructions, see https://rules-python.readthedocs.io/en/latest/getting-started.html

For the user-facing changelog see here

Using Bzlmod

Add to your MODULE.bazel file:

bazel_dep(name = "rules_python", version = "1.6.1")

python = use_extension("@&#8203;rules_python//python/extensions:python.bzl", "python")
python.toolchain(
    python_version = "3.13",
)

pip = use_extension("@&#8203;rules_python//python/extensions:pip.bzl", "pip")
pip.parse(
    hub_name = "pypi",
    python_version = "3.13",
    requirements_lock = "//:requirements_lock.txt",
)

use_repo(pip, "pypi")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_python",
    sha256 = "f2e80f97f9c0b82e2489e61e725df1e6bdaf16c4dacf5e26b95668787164baff",
    strip_prefix = "rules_python-1.6.1",
    url = "https://github.com/bazel-contrib/rules_python/releases/download/1.6.1/rules_python-1.6.1.tar.gz",
)

load("@&#8203;rules_python//python:repositories.bzl", "py_repositories")

py_repositories()

Gazelle plugin

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_python_gazelle_plugin",
    sha256 = "f2e80f97f9c0b82e2489e61e725df1e6bdaf16c4dacf5e26b95668787164baff",
    strip_prefix = "rules_python-1.6.1/gazelle",
    url = "https://github.com/bazel-contrib/rules_python/releases/download/1.6.1/rules_python-1.6.1.tar.gz",
)

# To compile the rules_python gazelle extension from source,

# we must fetch some third-party go dependencies that it uses.

load("@&#8203;rules_python_gazelle_plugin//:deps.bzl", _py_gazelle_deps = "gazelle_deps")

_py_gazelle_deps()

Full Changelog: bazel-contrib/rules_python@1.6.0...1.6.1

`v1.6.0`

Compare Source

{#v1-6-0-changed}

Changed

(gazelle) update minimum gazelle version to 0.36.0 - may cause BUILD file changes
(gazelle) update minimum rules_go version to 0.55.1
(gazelle) remove custom go-tree-sitter module BUILD file
(gazelle) For package mode, resolve dependencies when imports are relative
to the package path. This is enabled via the
# gazelle:python_experimental_allow_relative_imports true directive ({gh-issue}2203).
(gazelle) Types for exposed members of python.ParserOutput are now all public.
(gazelle) Removed the requirement for __init__.py, __main__.py, or __test__.py files to be
present in a directory to generate a BUILD.bazel file.
(toolchain) Updated the following toolchains to build 20250808 to patch CVE-2025-47273:
- 3.9.23
- 3.10.18
- 3.11.13
- 3.12.11
- 3.14.0rc1
(toolchain) Python 3.13 now references 3.13.6
(gazelle) Switched back to smacker/go-tree-sitter, fixing
#2630
(pypi) From now on the list of default platforms only includes linux_x86_64, linux_aarch64,
osx_x86_64, osx_aarch64 and windows_x86_64. If you are on other platforms, you need to
use the pip.default to configure it yourself. If you are interested in graduating the
platform, consider helping set us up CI for them and update the documentation.
(ci) We are now testing on Ubuntu 22.04 for RBE and non-RBE configurations.
(core) #!/usr/bin/env bash is now used as a shebang in the stage1 bootstrap template.
(gazelle:docs) The Gazelle docs have been migrated from {gh-path}gazelle/README.md to
{gh-path}gazelle/docs and are now available on the primary documentation site
at https://rules-python.readthedocs.io/en/latest/gazelle/docs/index.html

{#v1-6-0-fixed}

Fixed

(toolchains) local_runtime_repo now respects changes to the DEVELOPER_DIR and XCODE_VERSION
repo env vars, fixing stale cache issues on macOS with system (i.e. Xcode-supplied) Python
(#3123).
(pypi) Fixes an issue where builds using a bazel vendor vendor directory
would fail if the constraints file contained environment markers. Fixes
#2996.
(pypi) Wheels with BUILD.bazel (or other special Bazel files) no longer
result in missing files at runtime
(#2782).
(runfiles) The pypi runfiles package now includes py.typed to indicate it
supports type checking
(#2503).
(pypi) The pipstar defaults configuration now supports any custom platform
name.
(pypi) The selection of the whls has been changed and should no longer result
in ambiguous select matches ({gh-issue}2759) and should be much more efficient
when running bazel query due to fewer repositories being included
({gh-issue}2849).
Multi-line python imports (e.g. with escaped newlines) are now correctly processed by Gazelle.
(toolchains) local_runtime_repo works with multiarch Debian with Python 3.8
(#3099).
(pypi) Expose pypi packages only common to all Python versions in all_requirements
(#2921).
(repl) Normalize the path for the REPL stub to make it possible to use the
default stub template from outside rules_python ({gh-issue}3101).
(gazelle) Fixes gazelle adding sibling module dependencies to resolve
absolute imports (Python 2's behavior without absolute_import). Previous
behavior can be restored using the directive
# gazelle:python_resolve_sibling_imports true
(pypi) Show overridden index URL of packages when downloading metadata have failed.
(#2985).
(toolchains) use "command -v" to find interpreter in $PATH
(#3150).
(pypi) bazel vendor now works in bzlmod ({gh-issue}3079).
(toolchains) local_runtime_repo now works on Windows
(#3055).
(toolchains) local_runtime_repo supports more types of Python
installations (Mac frameworks, missing dynamic libraries, and other
esoteric cases, see
#3148 for details).
(pypi) Support requirements.txt files that use different versions of the same
package targeting different target platforms.
(#2797).
(py_wheel) Add directories in deterministic order.

{#v1-6-0-added}

Added

(repl) Default stub now has tab completion, where readline support is available,
see (#3114).
(#3114).
(pypi) To configure the environment for requirements.txt evaluation, use the newly added
developer preview of the pip.default tag class. Only rules_python and root modules can use
this feature. You can also configure custom config_settings using pip.default. It
can also be used to set the global netrc or auth_patterns variables.
(pypi) PyPI dependencies now expose an :extracted_whl_files filegroup target
of all the files extracted from the wheel. This can be used in lieu of
{obj}whl_filegroup to avoid copying/extracting wheel multiple times to
get a subset of their files.
(gazelle) New directive gazelle:python_generate_pyi_deps; when true,
dependencies added to satisfy type-only imports (if TYPE_CHECKING) and type
stub packages are added to pyi_deps instead of deps.
(toolchain) Add toolchains for aarch64 windows for
- 3.11.13
- 3.12.11
- 3.13.6
- 3.14.0rc1
(gazelle): New annotation gazelle:include_pytest_conftest. When not set (the
default) or true, gazelle will inject any conftest.py file f

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

cloudquery-ci Bot force-pushed the renovate/rules_python-2.x branch from 8cd9f40 to 830083a Compare July 4, 2026 08:55

cloudquery-ci Bot force-pushed the renovate/rules_python-2.x branch from 830083a to fa5e3ff Compare August 14, 2026 06:32

fix(deps): Update dependency rules_python to v2

b7d757d

cloudquery-ci Bot force-pushed the renovate/rules_python-2.x branch from fa5e3ff to b7d757d Compare August 14, 2026 20:12

Navigation Menu

Uh oh!

fix(deps): Update dependency rules_python to v2 - #179

fix(deps): Update dependency rules_python to v2#179
cloudquery-ci[bot] wants to merge 1 commit into
mainfrom
renovate/rules_python-2.x

cloudquery-ci Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

cloudquery-ci Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Using Bzlmod

Using WORKSPACE

Gazelle plugin

Changed

Fixed

Added

Changed

Fixed

Added

Removed

Changed

Fixed

Added

Fixed

Added

Fixed

Removed

Changed

Fixed

Added

Using Bzlmod

Using WORKSPACE

Gazelle plugin

What's Changed

Added

Removed

Changed

Fixed

Added

Fixed

Fixed

Fixed

Fixed

Fixed

Known Issues

Removed

Changed

Fixed

Added

Removed

Changed

Fixed

Added

Fixed

Using Bzlmod

Using WORKSPACE

Gazelle plugin

Changed

Fixed

Added

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

cloudquery-ci Bot commented Jul 1, 2026 •

edited

Loading