build: update bazel dependencies by angular-robot · Pull Request #3506 · angular/dev-infra

angular-robot · 2026-03-11T20:59:41Z

This PR contains the following updates:

Package	Type	Update	Change
aspect_rules_esbuild	bazel_dep	patch	`0.25.0` → `0.25.1`
aspect_rules_js	bazel_dep	patch	`3.0.2` → `3.0.3`
aspect_rules_ts	bazel_dep	patch	`3.8.5` → `3.8.6`
bazel_skylib	bazel_dep	minor	`1.8.2` → `1.9.0`
jq.bzl	bazel_dep	minor	`0.4.0` → `0.6.1`

Release Notes

aspect-build/rules_ts (aspect_rules_ts)

`v3.8.6`

Using Bzlmod:

Add to your MODULE.bazel file:

bazel_dep(name = "aspect_rules_ts", version = "3.8.6")

rules_ts_ext = use_extension("@&#8203;aspect_rules_ts//ts:extensions.bzl", "ext", dev_dependency = True)

rules_ts_ext.deps(
    ts_version_from = "//:package.json",
)

use_repo(rules_ts_ext, "npm_typescript")

Using legacy WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "aspect_rules_ts",
    sha256 = "9a02f3a86f19d2550608a3d17bc9cc987d8da4b14083e98926cc2ab1b5c471b0",
    strip_prefix = "rules_ts-3.8.6",
    url = "https://github.com/aspect-build/rules_ts/releases/download/v3.8.6/rules_ts-v3.8.6.tar.gz",
)

##################

# rules_ts setup #
##################

# Fetches the rules_ts dependencies.
# If you want to have a different version of some dependency,

# you should fetch it *before* calling this.
# Alternatively, you can skip calling this function, so long as you've

# already fetched all the dependencies.
load("@&#8203;aspect_rules_ts//ts:repositories.bzl", "rules_ts_dependencies")

rules_ts_dependencies(
    # This keeps the TypeScript version in-sync with the editor, which is typically best.
    ts_version_from = "//:package.json",

    # Alternatively, you could pick a specific version, or use
    # load("@&#8203;aspect_rules_ts//ts:repositories.bzl", "LATEST_TYPESCRIPT_VERSION")
    # ts_version = LATEST_TYPESCRIPT_VERSION
)

load("@&#8203;aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")

rules_js_dependencies()

load("@&#8203;aspect_rules_js//js:toolchains.bzl", "DEFAULT_NODE_VERSION", "rules_js_register_toolchains")

rules_js_register_toolchains(node_version = DEFAULT_NODE_VERSION)

load("@&#8203;aspect_rules_js//npm:repositories.bzl", "npm_translate_lock")

npm_translate_lock(
    name = "npm",
    npmrc = "//:.npmrc",
    pnpm_lock = "//:pnpm-lock.yaml",
    verify_node_modules_ignored = "//:.bazelignore",
)

load("@&#8203;npm//:repositories.bzl", "npm_repositories")

npm_repositories()

# Register aspect_bazel_lib toolchains;

# If you use npm_translate_lock or npm_import from aspect_rules_js you can omit this block.
load("@&#8203;aspect_bazel_lib//lib:repositories.bzl", "aspect_bazel_lib_dependencies")

aspect_bazel_lib_dependencies()

To use rules_ts with bazel-lib 2.x, you must additionally register the coreutils toolchain.

load("@&#8203;aspect_bazel_lib//lib:repositories.bzl", "register_coreutils_toolchains")

register_coreutils_toolchains()

What's Changed

fix: Mark http_archive_version as reproducible by @mortenmj in #896
chore: upgrade rjs3 test to rules_js 3.0.0-rc6 by @jbedard in #899

New Contributors

@mortenmj made their first contribution in #896

Full Changelog: aspect-build/rules_ts@v3.8.5...v3.8.6

bazelbuild/bazel-skylib (bazel_skylib)

`v1.9.0`

Compare Source

What's Changed

Optimize copy_file and set allow_symlink by default to True if is_executable is False (#565)
Give rules/private:is_windows an empty applicable_license (#600)
Bump rules_go dependency for compatibility with Bazel 9 (#601)

Contributors:
@fdinoff, @fmeum, @fweikert, @susinmotion

Full Changelog: bazelbuild/bazel-skylib@1.8.2...1.9.0

bazel-contrib/jq.bzl (jq.bzl)

`v0.6.1`

Using Bzlmod with Bazel 6 or greater

(Bazel 6 only) Enable with common --enable_bzlmod in .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "jq.bzl", version = "0.6.1")

Using WORKSPACE

Paste this snippet into your WORKSPACE.bazel file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "jq.bzl",
    sha256 = "e2eab5410b2eecc72f01d73590c58aefeddbb696ddf9d9c34dcee02dd79625ab",
    strip_prefix = "jq.bzl-0.6.1",
    url = "https://github.com/bazel-contrib/jq.bzl/releases/download/v0.6.1/jq.bzl-v0.6.1.tar.gz",
)

What's Changed

fix: Mark toolchain as reproducible by @mortenmj in #70
chore(deps): update bazel-contrib/.github action to v7.3.0 by @renovate[bot] in #66
chore(deps): update pre-commit hook crate-ci/typos to v1.43.5 by @renovate[bot] in #61
chore(deps): update bazel-contrib/setup-bazel action to v0.18.0 by @renovate[bot] in #64
chore(deps): update pre-commit hook google/yamlfmt to v0.21.0 by @renovate[bot] in #62
chore(deps): update pre-commit hook commitizen-tools/commitizen to v4.13.8 by @renovate[bot] in #60

New Contributors

@mortenmj made their first contribution in #70

Full Changelog: bazel-contrib/jq.bzl@v0.6.0...v0.6.1

`v0.6.0`

Using Bzlmod with Bazel 6 or greater

(Bazel 6 only) Enable with common --enable_bzlmod in .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "jq.bzl", version = "0.6.0")

Using WORKSPACE

Paste this snippet into your WORKSPACE.bazel file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "jq.bzl",
    sha256 = "d12aafaf39224d9d0642d62add75ad65b98aa20de82bead2b4ae9498452d5020",
    strip_prefix = "jq.bzl-0.6.0",
    url = "https://github.com/bazel-contrib/jq.bzl/releases/download/v0.6.0/jq.bzl-v0.6.0.tar.gz",
)

What's Changed

chore(deps): upgrade to Bazel 9, drop testing of 6 (LTS ended) by @alexeagle in #68
refactor: extract a jq_action by @alexeagle in #69

Full Changelog: bazel-contrib/jq.bzl@v0.5.1...v0.6.0

`v0.5.1`

Using Bzlmod with Bazel 6 or greater

(Bazel 6 only) Enable with common --enable_bzlmod in .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "jq.bzl", version = "0.5.1")

Using WORKSPACE

Paste this snippet into your WORKSPACE.bazel file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "jq.bzl",
    sha256 = "ec80ea87132eada066fe6efe838b68feebc578626ba8fef7d620a8fc5a1279be",
    strip_prefix = "jq.bzl-0.5.1",
    url = "https://github.com/bazel-contrib/jq.bzl/releases/download/v0.5.1/jq.bzl-v0.5.1.tar.gz",
)

What's Changed

chore(deps): update bazel-contrib/.github action to v7.2.4 by @renovate[bot] in #59
chore(deps): update bazel-contrib/publish-to-bcr action to v1.1.0 by @renovate[bot] in #56
chore(deps): update pre-commit hook commitizen-tools/commitizen to v4.10.1 by @renovate[bot] in #54
chore(deps): update dependency bazel to v8.5.0 by @renovate[bot] in #55
build: Add host alias repo by @mering in #57
docs: change jq filter to greet with a dynamic name by @alexeagle in #63

New Contributors

@mering made their first contribution in #57

Full Changelog: bazel-contrib/jq.bzl@v0.5.0...v0.5.1

If you want to rebase/retry this PR, check this box

See associated pull request for more information.

gemini-code-assist

Code Review

This pull request updates several Bazel dependencies. The version bumps are appropriate. However, I've noticed that after updating jq.bzl, dangling entries for the old version remain in the lock files. I've left a specific comment on how to address this to ensure the lock files are clean and maintainable.

gemini-code-assist · 2026-03-11T21:09:38Z

 bazel_dep(name = "aspect_rules_ts", version = "3.8.6")
 bazel_dep(name = "bazel_skylib", version = "1.9.0")
-bazel_dep(name = "jq.bzl", version = "0.4.0")
+bazel_dep(name = "jq.bzl", version = "0.6.1")


While updating jq.bzl is correct, I've noticed that this change leaves dangling entries for the old version (0.4.0) in several MODULE.bazel.lock files across the repository. For example, in MODULE.bazel.lock and bazel/rules/rules_angular/MODULE.bazel.lock, the entry for jq.bzl/0.4.0/MODULE.bazel remains while the source.json entry is removed.

To ensure the lock files are clean and to prevent potential dependency resolution issues in the future, please remove these dangling entries. You might be able to fix this by running bazel mod tidy again, or by manually removing the leftover lines.

alan-agius4 · 2026-03-12T07:25:00Z

This PR was merged into the repository. The changes were merged into the following branches:

main: 1a59736

angular-automatic-lock-bot · 2026-04-12T00:24:08Z

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}

build: update bazel dependencies

d2b0aca

See associated pull request for more information.

angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Mar 11, 2026

alan-agius4 approved these changes Mar 11, 2026

View reviewed changes

gemini-code-assist Bot reviewed Mar 11, 2026

View reviewed changes

alan-agius4 merged commit 1a59736 into angular:main Mar 12, 2026
13 checks passed

angular-robot deleted the ng-renovate/bazel-dependencies branch March 12, 2026 07:50

angular-automatic-lock-bot Bot locked and limited conversation to collaborators Apr 12, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build: update bazel dependencies#3506

build: update bazel dependencies#3506
alan-agius4 merged 1 commit intoangular:mainfrom
angular-robot:ng-renovate/bazel-dependencies

angular-robot commented Mar 11, 2026

Uh oh!

gemini-code-assist Bot left a comment

Uh oh!

gemini-code-assist Bot Mar 11, 2026

Uh oh!

Uh oh!

alan-agius4 commented Mar 12, 2026

Uh oh!

angular-automatic-lock-bot Bot commented Apr 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

angular-robot commented Mar 11, 2026

Release Notes

v3.8.6

Using Bzlmod:

Using legacy WORKSPACE

What's Changed

New Contributors

v1.9.0

v0.6.1

Using Bzlmod with Bazel 6 or greater

Using WORKSPACE

What's Changed

New Contributors

v0.6.0

Using Bzlmod with Bazel 6 or greater

Using WORKSPACE

What's Changed

v0.5.1

Using Bzlmod with Bazel 6 or greater

Using WORKSPACE

What's Changed

New Contributors

Uh oh!

gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

gemini-code-assist Bot Mar 11, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

alan-agius4 commented Mar 12, 2026

Uh oh!

angular-automatic-lock-bot Bot commented Apr 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`v3.8.6`

`v1.9.0`

`v0.6.1`

`v0.6.0`

`v0.5.1`