Merge branch 'main' into vaish/restart-from-step

Author: vaishnav-mk

.github/workflows/bigbonk.yml

@@ -39,7 +39,7 @@ jobs:
           mentions: '/bigbonk'
           variant: 'max'
           permissions: write
-          opencode_version: '1.4.3'
+          opencode_version: '1.14.19'
           # token_permissions defaults to WRITE (i.e. Bonk can push commits).
           # We intentionally leave it that way here because users may ask Bonk
           # to update their PR via /bigbonk.

.github/workflows/bonk.yml

@@ -38,7 +38,7 @@ jobs:
           model: 'cloudflare-ai-gateway/anthropic/claude-opus-4-6'
           mentions: '/bonk,@ask-bonk'
           permissions: write
-          opencode_version: '1.4.3'
+          opencode_version: '1.14.19'
           # token_permissions defaults to WRITE (i.e. Bonk can push commits).
           # We intentionally leave it that way here because users may ask Bonk
           # to update their PR via /bonk.

.github/workflows/coverage.yml

@@ -36,6 +36,7 @@ jobs:
       build_container_images: false
       run_coverage: true
       run_tests: false
+      test_target: "//src/workerd/..."
     secrets:
       BAZEL_CACHE_KEY: ${{ secrets.BAZEL_CACHE_KEY }}
       WORKERS_MIRROR_URL: ${{ secrets.WORKERS_MIRROR_URL }}

.github/workflows/new-pr-review.yml

@@ -44,7 +44,7 @@ jobs:
           model: 'cloudflare-ai-gateway/anthropic/claude-opus-4-6'
           forks: 'false'
           permissions: write
-          opencode_version: '1.4.3'
+          opencode_version: '1.14.19'
           # The auto-reviewer must never push to PR branches. Its prompt
           # (bonk_reviewer.md) already forbids git write ops, but NO_PUSH
           # enforces that at the token level so it holds even if the model

build/deps/build_deps.jsonc

@@ -69,6 +69,10 @@
       "type": "bazel_dep"
     },
     // rust
+    {
+      "name": "rules_rust",
+      "type": "bazel_dep"
+    },
     {
       "name": "cargo_bazel_linux_x64",
       "type": "github_release",

build/deps/gen/build_deps.MODULE.bazel

@@ -116,60 +116,63 @@ bazel_dep(name = "rules_oci", version = "2.3.0")
 # rules_python
 bazel_dep(name = "rules_python", version = "1.9.0")
 
+# rules_rust
+bazel_dep(name = "rules_rust", version = "0.69.0")
+
 # rules_shell
-bazel_dep(name = "rules_shell", version = "0.7.1")
+bazel_dep(name = "rules_shell", version = "0.8.0")
 
 # wasm_tools_linux_arm64
 http.archive(
     name = "wasm_tools_linux_arm64",
     build_file_content = "exports_files([\"wasm-tools\"])",
-    sha256 = "cd28f8086297b491d857a5a8118d0de3b910f785d0b465defb4ca4d3826937dc",
-    strip_prefix = "wasm-tools-1.246.2-aarch64-linux",
+    sha256 = "df4343257da88340461ba9ad6886701d846721c21b5a65c05700ccd1e49104b7",
+    strip_prefix = "wasm-tools-1.247.0-aarch64-linux",
     type = "tgz",
-    url = "https://github.com/bytecodealliance/wasm-tools/releases/download/v1.246.2/wasm-tools-1.246.2-aarch64-linux.tar.gz",
+    url = "https://github.com/bytecodealliance/wasm-tools/releases/download/v1.247.0/wasm-tools-1.247.0-aarch64-linux.tar.gz",
 )
 use_repo(http, "wasm_tools_linux_arm64")
 
 # wasm_tools_linux_x64
 http.archive(
     name = "wasm_tools_linux_x64",
     build_file_content = "exports_files([\"wasm-tools\"])",
-    sha256 = "f0df9428792225322e9b4344ca581f03b1740d509d6bdad33d14a810009be9ec",
-    strip_prefix = "wasm-tools-1.246.2-x86_64-linux",
+    sha256 = "66a182ad1fc991f4f537d912e1f88f15f1e0bd734de46f2c60b11b884a44cab9",
+    strip_prefix = "wasm-tools-1.247.0-x86_64-linux",
     type = "tgz",
-    url = "https://github.com/bytecodealliance/wasm-tools/releases/download/v1.246.2/wasm-tools-1.246.2-x86_64-linux.tar.gz",
+    url = "https://github.com/bytecodealliance/wasm-tools/releases/download/v1.247.0/wasm-tools-1.247.0-x86_64-linux.tar.gz",
 )
 use_repo(http, "wasm_tools_linux_x64")
 
 # wasm_tools_macos_arm64
 http.archive(
     name = "wasm_tools_macos_arm64",
     build_file_content = "exports_files([\"wasm-tools\"])",
-    sha256 = "0ff7b4594d6ef643df282f8672ee2af6cec85d006bb83fa9d69c805b8cc6eabf",
-    strip_prefix = "wasm-tools-1.246.2-aarch64-macos",
+    sha256 = "593bdb6e396da19164dd3032c5d1441f263f16e8273e5b124a6322ff940bdf56",
+    strip_prefix = "wasm-tools-1.247.0-aarch64-macos",
     type = "tgz",
-    url = "https://github.com/bytecodealliance/wasm-tools/releases/download/v1.246.2/wasm-tools-1.246.2-aarch64-macos.tar.gz",
+    url = "https://github.com/bytecodealliance/wasm-tools/releases/download/v1.247.0/wasm-tools-1.247.0-aarch64-macos.tar.gz",
 )
 use_repo(http, "wasm_tools_macos_arm64")
 
 # wasm_tools_macos_x64
 http.archive(
     name = "wasm_tools_macos_x64",
     build_file_content = "exports_files([\"wasm-tools\"])",
-    sha256 = "fd89fb34457e7d2f7e221f3971b023674fa1ca5ac650b9685320a3324082ddb6",
-    strip_prefix = "wasm-tools-1.246.2-x86_64-macos",
+    sha256 = "8ef61c8206f3bd29b0031b0fff7c3118c4d0b6b2f11bf87ff25ad6592bd42e32",
+    strip_prefix = "wasm-tools-1.247.0-x86_64-macos",
     type = "tgz",
-    url = "https://github.com/bytecodealliance/wasm-tools/releases/download/v1.246.2/wasm-tools-1.246.2-x86_64-macos.tar.gz",
+    url = "https://github.com/bytecodealliance/wasm-tools/releases/download/v1.247.0/wasm-tools-1.247.0-x86_64-macos.tar.gz",
 )
 use_repo(http, "wasm_tools_macos_x64")
 
 # wasm_tools_windows_x64
 http.archive(
     name = "wasm_tools_windows_x64",
     build_file_content = "exports_files([\"wasm-tools.exe\"])",
-    sha256 = "1be1934e9a630ff95ab869eba85bba30d652b61b0e6bfb88aac76d0ee3892035",
-    strip_prefix = "wasm-tools-1.246.2-x86_64-windows/",
+    sha256 = "33b11836688c3c134089e1f8cc1408288e0e0578a342fccc55b23c89e8440dd8",
+    strip_prefix = "wasm-tools-1.247.0-x86_64-windows/",
     type = "zip",
-    url = "https://github.com/bytecodealliance/wasm-tools/releases/download/v1.246.2/wasm-tools-1.246.2-x86_64-windows.zip",
+    url = "https://github.com/bytecodealliance/wasm-tools/releases/download/v1.247.0/wasm-tools-1.247.0-x86_64-windows.zip",
 )
 use_repo(http, "wasm_tools_windows_x64")

build/deps/gen/deps.MODULE.bazel

@@ -27,10 +27,10 @@ bazel_dep(name = "brotli", version = "1.2.0.bcr.1")
 # capnp-cpp
 http.archive(
     name = "capnp-cpp",
-    sha256 = "3b0cb96441f2d72dab755e87b2ab8969fdfa096d62b5eb6f4bedd271d391967a",
-    strip_prefix = "capnproto-capnproto-59a195f/c++",
+    sha256 = "c2cc1e4f9190d5ddf534b8fc99f872a155af77c3c678f3086f014bdbf7e7ca57",
+    strip_prefix = "capnproto-capnproto-8868854/c++",
     type = "tgz",
-    url = "https://github.com/capnproto/capnproto/tarball/59a195f011f259484acc71255bab8e1b67ef54d3",
+    url = "https://github.com/capnproto/capnproto/tarball/88688546269fd3d542b82cd253a08847810da095",
 )
 use_repo(http, "capnp-cpp")
 
@@ -136,10 +136,10 @@ bazel_dep(name = "tcmalloc", version = "0.0.0-20250927-12f2552")
 # workerd-cxx
 http.archive(
     name = "workerd-cxx",
-    sha256 = "ee0867e96d70a37e2bb596f60051665ba828ad5f9237fe752811bb18f4f9fe07",
-    strip_prefix = "cloudflare-workerd-cxx-acbc654",
+    sha256 = "81e21ec4318e31bf33101bbda567b891c7643b604675121726f1ecdcb76b9e20",
+    strip_prefix = "cloudflare-workerd-cxx-8467078",
     type = "tgz",
-    url = "https://github.com/cloudflare/workerd-cxx/tarball/acbc6548b09d50f20ac8fdcf252e802b8cbfc054",
+    url = "https://github.com/cloudflare/workerd-cxx/tarball/8467078a6607ff93fe0b26cc92aa17ffa57bf83a",
 )
 use_repo(http, "workerd-cxx")
 
@@ -148,7 +148,7 @@ bazel_dep(name = "zlib")
 git_override(
     module_name = "zlib",
     build_file = "//:build/BUILD.zlib",
-    commit = "b80f1d1e5256ac25f6aea3f31f13d458981cb1f9",
+    commit = "89921383f1f51331f48a2dc843403779770ea3a9",
     patch_strip = 1,
     patches = [
         "//:patches/zlib/0001-Add-dummy-MODULE.bazel.patch",

build/deps/rust.MODULE.bazel

@@ -10,20 +10,6 @@ RUST_TARGET_TRIPLES = [
     "aarch64-unknown-linux-gnu",
 ]
 
-# rules_rust
-bazel_dep(name = "rules_rust", version = "0.68.1")
-
-# Under Bazel 9, Rust coverage is broken when using experimental_split_coverage_postprocessing.
-# TODO(cleanup): https://github.com/bazelbuild/rules_rust/pull/3812 should fix this, we're using
-# that commit for now. Switch back to regular release once resolved.
-archive_override(
-    module_name = "rules_rust",
-    integrity = "sha256-dtn87CNPspDl5xEfAGEl0eQ4HBf07vpxIdMNPRHqMqM=",
-    strip_prefix = "bazelbuild-rules_rust-cb9d412",
-    type = "tgz",
-    url = "https://github.com/bazelbuild/rules_rust/tarball/cb9d412afdb95578bd533b60483eecb373119c36",
-)
-
 rust = use_extension("@rules_rust//rust:extensions.bzl", "rust")
 rust.toolchain(
     allocator_library = "@rules_rust//ffi/rs:empty",

build/wd_rust_binary.bzl

@@ -75,4 +75,5 @@ def wd_rust_binary(
             "//conditions:default": [],
         }),
         size = test_size,
+        tags = ["no-coverage"],
     )

build/wd_rust_crate.bzl

@@ -144,7 +144,7 @@ def wd_rust_crate(
             # our tests are usually very heavy and do not support concurrent invocation
             "RUST_TEST_THREADS": "1",
         } | test_env,
-        tags = test_tags,
+        tags = test_tags + ["no-coverage"],
         crate_features = crate_features,
         deps = test_deps,
         proc_macro_deps = test_proc_macro_deps,