Repository navigation
build(deps): bump rules_pkg from 1.2.0 to 1.3.0 - #22926
dependabot[bot] wants to merge 4 commits into
Conversation
ee96709 to
859f302
Compare
|
@dependabot rebase |
859f302 to
8add6cf
Compare
There was a problem hiding this comment.
🟡 Changes recommended
Approval is blocked because the build-rule update affects shipped extractor artifacts and the review lacks DCA results for the final change or an assessment of regressions.
1 open issue
What changed in this PR
Updates the Bazel rules_pkg dependency from version 1.2.0 to 1.3.0 for the repository’s packaging targets.
Changes:
- Bumps
rules_pkgto version1.3.0in the Bazel module definition. - Preserves existing packaging consumers and repository references to the dependency.
This pull request requires changes.
| File | Summary |
|---|---|
MODULE.bazel |
Updates the rules_pkg dependency to 1.3.0. Because this dependency is used by extractor packaging targets, include DCA results for the final change and assess any changed results or unexpected regressions. |
Review effort: Lite (auto)
| bazel_dep(name = "rules_go", version = "0.65.0") | ||
| bazel_dep(name = "rules_java", version = "9.9.0") | ||
| bazel_dep(name = "rules_pkg", version = "1.2.0") | ||
| bazel_dep(name = "rules_pkg", version = "1.3.0") |
|
@dependabot rebase |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
|
@dependabot rebase |
|
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry! If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request |
|
@dependabot recreate |
Bumps [rules_pkg](https://github.com/bazelbuild/rules_pkg) from 1.2.0 to 1.3.0. - [Release notes](https://github.com/bazelbuild/rules_pkg/releases) - [Changelog](https://github.com/bazelbuild/rules_pkg/blob/main/CHANGELOG.md) - [Commits](bazelbuild/rules_pkg@1.2.0...1.3) --- updated-dependencies: - dependency-name: rules_pkg dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
8b13e2e to
172d608
Compare
Define the variable as its literal pack-routing placeholder in both Bazel configurations so rules_pkg 1.3 leaves it for CodeQL's later expansion.
ee0a500 to
c578e1f
Compare
Moving the C++ library target only aligns solib ownership in standalone builds. When CodeQL is a dependency, the solib artifacts still live in the root repository's runfiles but are owned by the CodeQL repository, so rules_pkg 1.3 cannot resolve them. Overlay the extractor's runfiles with the original prebuilt shared libraries at the same installed destinations. This preserves package contents and permissions while using source paths that resolve correctly in both build layouts.
f10126c to
281f38c
Compare

Bumps rules_pkg from 1.2.0 to 1.3.0.
Commits
c62b199bump version.bzl to 1.3 (#1062)611412cbump version.bzl to 1.3f4a2502Honor compression level=0 in pkg_tar (#1059)1e0bb09typob9fc548fix #1048a82d058Add variable expansion to string valued attributes (#1056)401969drpm_pfg: allow multiple tree artifacts at the same destination (#1053)50a7304make the test a little more interstingd13d76eadd misitng test file2622cadAdd variable expansion to string valued attributes