Update dependency rules_python to v2 (#2286)

* Update dependency rules_python to v2

* Use local python version, not rules_python downloaded one

* Update dependency rules_python to v2

* Use local python version, not rules_python downloaded one

* Commit module.bazel.lock

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Tom Parker-Shemilt <tom@tracemachina.com>

Author: renovate[bot]

.gitignore

@@ -14,7 +14,6 @@ __pycache__
 .DS_Store
 .pre-commit-config.yaml
 result
-MODULE.bazel.lock
 trivy-results.sarif
 Pulumi.dev.yaml
 rust-project.json

MODULE.bazel

@@ -7,15 +7,39 @@ module(
 bazel_dep(name = "rules_cc", version = "0.2.8")
 bazel_dep(name = "platforms", version = "1.0.0")
 bazel_dep(name = "bazel_skylib", version = "1.8.2")
-bazel_dep(name = "rules_python", version = "1.3.0")  # TODO(palfrey): Bump.
+bazel_dep(name = "rules_python", version = "2.0.0")
 bazel_dep(name = "rules_shell", version = "0.6.1")
 
-python = use_extension("@rules_python//python/extensions:python.bzl", "python")
-python.toolchain(
-    configure_coverage_tool = True,
-    python_version = "3.13",
+# We use the Nix Python install, as per https://rules-python.readthedocs.io/en/latest/toolchains.html#local-toolchain
+# Can't use the rules_python download versions as it breaks with the genrule stuff in nativelink-proto
+# Also, this way around we get a Nix-locked Python binary
+local_runtime_repo = use_repo_rule(
+    "@rules_python//python/local_toolchains:repos.bzl",
+    "local_runtime_repo",
+)
+
+local_runtime_toolchains_repo = use_repo_rule(
+    "@rules_python//python/local_toolchains:repos.bzl",
+    "local_runtime_toolchains_repo",
+)
+
+local_runtime_repo(
+    name = "local_python3",
+    dev_dependency = True,
+    interpreter_path = "python3",
+    on_failure = "fail",
+)
+
+local_runtime_toolchains_repo(
+    name = "local_python_toolchains",
+    dev_dependency = True,
+    runtimes = ["local_python3"],
+)
+
+register_toolchains(
+    "@local_python_toolchains//:all",
+    dev_dependency = True,
 )
-use_repo(python, python = "python_versions")
 
 bazel_dep(name = "rules_rust", version = "0.68.1")
 archive_override(

MODULE.bazel.lock

@@ -482,6 +482,7 @@
               pkgs.git-cliff
               pkgs.buck2
               packages.update-module-hashes
+              pkgs.python3
 
               # Rust
               bazel

flake.nix

@@ -16,7 +16,7 @@ java = use_extension("//java:extensions.bzl", "toolchains")
 use_repo(java, "local_jdk")
 
 # Python
-bazel_dep(name = "rules_python", version = "1.2.0")
+bazel_dep(name = "rules_python", version = "2.0.0")
 
 pip = use_extension("@rules_python//python/extensions:pip.bzl", "pip")
 pip.parse(