Merge pull request #30341 from redpanda-data/stephan/update-bazel-version

bazel: Update to v9

Author: StephanDollberg

.bazelrc

@@ -1,6 +1,20 @@
 common --registry=https://bcr.bazel.build
 common --extra_toolchains=@current_llvm_toolchain//:all
 
+# Store repositories also in the remote cache to speed up fetches and avoid
+# flakiness due to Github
+startup --experimental_remote_repo_contents_cache
+
+# Bazel 9 removes native C++ rule symbols. Autoload them for external rulesets
+# that have not migrated all generated BUILD/Starlark files to explicit loads.
+common --incompatible_autoload_externally=+@rules_cc
+
+# Bazel 9 no longer enables this rules_cc toolchain feature by default. Keep
+# external dependency headers on -isystem include paths so their warnings are
+# not promoted by Redpanda's -Werror settings.
+build --features=external_include_paths
+build --host_features=external_include_paths
+
 # Fail the build if MODULE.bazel declares a direct dependency on a version
 # that doesn't match what the resolved module graph actually uses.
 common --check_direct_dependencies=error

.bazelversion

@@ -1 +1 @@
-8.4.1
+9.1.0

MODULE.bazel

@@ -18,7 +18,7 @@ use_repo(
 )
 
 bazel_dep(name = "gazelle", version = "0.45.0")
-bazel_dep(name = "abseil-cpp", version = "20250814.0")
+bazel_dep(name = "abseil-cpp", version = "20250814.1")
 bazel_dep(name = "bazel_skylib", version = "1.8.2")
 bazel_dep(name = "crc32c", version = "1.1.0")
 bazel_dep(name = "fmt", version = "12.1.0")
@@ -47,15 +47,15 @@ single_version_override(
 
 bazel_dep(name = "re2", version = "2024-07-02.bcr.1")
 bazel_dep(name = "rules_cc", version = "0.2.17")
-bazel_dep(name = "rules_foreign_cc", version = "0.12.0")
+bazel_dep(name = "rules_foreign_cc", version = "0.15.1")
 bazel_dep(name = "rules_go", version = "0.59.0")
 bazel_dep(name = "rules_pkg", version = "1.0.1")
 bazel_dep(name = "rules_proto", version = "7.1.0")
-bazel_dep(name = "rules_python", version = "1.6.0")
-bazel_dep(name = "rules_rust", version = "0.60.0")
+bazel_dep(name = "rules_python", version = "1.7.0")
+bazel_dep(name = "rules_rust", version = "0.70.0")
 bazel_dep(name = "snappy", version = "1.2.1")
 bazel_dep(name = "yaml-cpp", version = "0.8.0")
-bazel_dep(name = "zlib", version = "1.3.1.bcr.6")
+bazel_dep(name = "zlib", version = "1.3.1.bcr.8")
 bazel_dep(name = "zstd", version = "1.5.7")
 bazel_dep(name = "patchelf", version = "0.18.0")
 bazel_dep(name = "bzip2", version = "1.0.8.bcr.2")
@@ -69,9 +69,9 @@ single_version_override(
     ],
 )
 
-bazel_dep(name = "rules_shell", version = "0.4.1", dev_dependency = True)
+bazel_dep(name = "rules_shell", version = "0.6.1", dev_dependency = True)
 
-bazel_dep(name = "protovalidate", version = "1.0.0")
+bazel_dep(name = "protovalidate", version = "1.2.0")
 
 python = use_extension("@rules_python//python/extensions:python.bzl", "python", dev_dependency = True)
 python.toolchain(
@@ -385,7 +385,7 @@ use_repo(crate, "crates")
 # ====================================
 # OCI Base Images
 # ====================================
-bazel_dep(name = "rules_oci", version = "2.0.1", dev_dependency = True)
+bazel_dep(name = "rules_oci", version = "2.3.0", dev_dependency = True)
 
 oci = use_extension("@rules_oci//oci:extensions.bzl", "oci", dev_dependency = True)
 

MODULE.bazel.lock

@@ -1,11 +1,23 @@
 load("@rules_cc//cc:cc_binary.bzl", "cc_binary")
 load("@rules_cc//cc:cc_library.bzl", "cc_library")
-load("//bazel:internal.bzl", "redpanda_copts")
+load("//bazel:internal.bzl", "filtered_filegroup", "redpanda_copts")
 
-# convenience wrapper around a filegroup to satisfy layering checks.
+filtered_filegroup(
+    name = "llvm_plugin_hdrs",
+    srcs = ["@current_llvm_toolchain_llvm//:all_includes"],
+    path_includes = [
+        "/include/clang/",
+        "/include/clang-c/",
+        "/include/clang-tidy/",
+        "/include/llvm/",
+        "/include/llvm-c/",
+    ],
+)
+
+# Convenience wrapper around a filegroup to satisfy layering checks.
 cc_library(
     name = "libclang_hdrs",
-    hdrs = ["@current_llvm_toolchain_llvm//:all_includes"],
+    hdrs = [":llvm_plugin_hdrs"],
     tags = ["no-clang-tidy-headers"],
     visibility = ["//visibility:public"],
 )

bazel/clang_tidy/plugins/BUILD

@@ -26,3 +26,19 @@ def antithesis_deps():
         "//bazel:antithesis_enabled": ["//bazel/antithesis:instrumentation"],
         "//conditions:default": [],
     })
+
+def _filtered_filegroup_impl(ctx):
+    return [DefaultInfo(files = depset([
+        f
+        for src in ctx.attr.srcs
+        for f in src[DefaultInfo].files.to_list()
+        if any([include in f.path for include in ctx.attr.path_includes])
+    ]))]
+
+filtered_filegroup = rule(
+    implementation = _filtered_filegroup_impl,
+    attrs = {
+        "path_includes": attr.string_list(mandatory = True),
+        "srcs": attr.label_list(allow_files = True, mandatory = True),
+    },
+)

bazel/internal.bzl

@@ -1184,7 +1184,11 @@ def main():
     workspace_root = find_workspace_root()
     if workspace_root:
         os.chdir(workspace_root)
-    toolchain_bin = find_toolchain_bin()
+    # When running inside a Bazel test action (sandboxed), calling `bazel`
+    # subprocesses can hang trying to connect back to the parent Bazel server.
+    # With --reuse we only need the demangler for real coverage data, not
+    # fixture tests, so skip the nested `bazel info` call entirely.
+    toolchain_bin = None if args.reuse else find_toolchain_bin()
 
     # Get LCOV data
     if not args.reuse: