From 8f8ed4b35c9b0c03af9802631ea76be964c3e000 Mon Sep 17 00:00:00 2001 From: Ulrich Huber Date: Mon, 13 Jul 2026 09:19:32 +0200 Subject: [PATCH 1/5] Downgrade to rules_distroless 0.8.0 rules_distroless 0.9.0 was not yet released to BCR. Since we do not necessarily need one of its new features, downgrade to release 0.8.0 for the time being. --- MODULE.bazel | 34 ++++------------------------------ 1 file changed, 4 insertions(+), 30 deletions(-) diff --git a/MODULE.bazel b/MODULE.bazel index 0df7e564..310530ee 100644 --- a/MODULE.bazel +++ b/MODULE.bazel @@ -285,43 +285,17 @@ deb( # Distroless rootfs providing graphviz + fakechroot for hermetic dot execution # via //third_party/docs_runtime:dot (exec_in_sysroot). ############################################################################### -bazel_dep(name = "rules_distroless", version = "0.9.0") -git_override( - module_name = "rules_distroless", - commit = "dbf25be1c3a9a1698511a4817582efe61dc5ec15", - remote = "https://github.com/LittleHuba/rules_distroless.git", -) +bazel_dep(name = "rules_distroless", version = "0.8.0") # bsdtar (used by //bazel/rules/exec_in_sysroot to extract sysroot archives). bazel_dep(name = "tar.bzl", version = "0.6.0") apt = use_extension("@rules_distroless//apt:extensions.bzl", "apt") -apt.sources_list( - architectures = ["amd64"], - components = [ - "main", - "universe", - ], - suites = [ - "noble", - "noble-security", - "noble-updates", - ], - types = ["deb"], - uris = ["https://snapshot.ubuntu.com/ubuntu/20260401T000000Z"], -) apt.install( - dependency_set = "docs_runtime", + name = "docs_runtime", + lock = "//third_party/docs_runtime:docs_runtime.lock.json", + manifest = "//third_party/docs_runtime:docs_runtime.yaml", mergedusr = True, - packages = [ - "fakechroot", - "graphviz", - ], - suites = [ - "noble", - "noble-security", - "noble-updates", - ], ) use_repo(apt, "docs_runtime") From de5a3bf49cd45eabde57a9353de9c9127d98ec54 Mon Sep 17 00:00:00 2001 From: Ulrich Huber Date: Mon, 13 Jul 2026 09:34:34 +0200 Subject: [PATCH 2/5] Make tests hermetic --- bazel/rules/rules_score/test/MODULE.bazel | 1 + 1 file changed, 1 insertion(+) diff --git a/bazel/rules/rules_score/test/MODULE.bazel b/bazel/rules/rules_score/test/MODULE.bazel index a7f676d6..5dd93ab8 100644 --- a/bazel/rules/rules_score/test/MODULE.bazel +++ b/bazel/rules/rules_score/test/MODULE.bazel @@ -99,6 +99,7 @@ use_repo(llvm, "llvm_toolchain", "llvm_toolchain_llvm") register_toolchains( "//:test_libclang_toolchain", + "@llvm_toolchain//:all", ) bazel_dep(name = "trlc", version = "0.0.0") From 357f4dc2e5377edad63afff953c7ae33194001c9 Mon Sep 17 00:00:00 2001 From: Ulrich Huber Date: Mon, 13 Jul 2026 09:45:10 +0200 Subject: [PATCH 3/5] Drop unrequired TRLC and Lobster git_overrides These were missed when bumping to TRLC and Lobster releases. --- bazel/rules/rules_score/test/MODULE.bazel | 15 +-------------- cr_checker/tests/MODULE.bazel | 14 -------------- 2 files changed, 1 insertion(+), 28 deletions(-) diff --git a/bazel/rules/rules_score/test/MODULE.bazel b/bazel/rules/rules_score/test/MODULE.bazel index 5dd93ab8..c91e57eb 100644 --- a/bazel/rules/rules_score/test/MODULE.bazel +++ b/bazel/rules/rules_score/test/MODULE.bazel @@ -102,23 +102,10 @@ register_toolchains( "@llvm_toolchain//:all", ) -bazel_dep(name = "trlc", version = "0.0.0") -git_override( - module_name = "trlc", - commit = "8d25f639ff44976893d7866ba421a04db5698ebe", - remote = "https://github.com/bmw-software-engineering/trlc.git", -) - -bazel_dep(name = "lobster", version = "0.0.0") -git_override( - module_name = "lobster", - commit = "2792e2daee2cf524fdc7b1545fd3537791ebc36c", - remote = "https://github.com/bmw-software-engineering/lobster.git", -) - bazel_dep(name = "rules_distroless", version = "0.9.0") git_override( module_name = "rules_distroless", commit = "dbf25be1c3a9a1698511a4817582efe61dc5ec15", remote = "https://github.com/LittleHuba/rules_distroless.git", ) +bazel_dep(name = "trlc", version = "3.0.0") diff --git a/cr_checker/tests/MODULE.bazel b/cr_checker/tests/MODULE.bazel index 8076e1dc..748e0aa4 100644 --- a/cr_checker/tests/MODULE.bazel +++ b/cr_checker/tests/MODULE.bazel @@ -46,20 +46,6 @@ local_path_override( path = "../../", ) -bazel_dep(name = "trlc", version = "0.0.0") -git_override( - module_name = "trlc", - commit = "7f06d0396fd0e5f02b657d25700775af5113b7e0", - remote = "https://github.com/bmw-software-engineering/trlc.git", -) - -bazel_dep(name = "lobster", version = "0.0.0") -git_override( - module_name = "lobster", - commit = "94ed5961ca28ee1b840cd8a938138c17ae4da671", - remote = "https://github.com/bmw-software-engineering/lobster.git", -) - bazel_dep(name = "rules_distroless", version = "0.9.0") git_override( module_name = "rules_distroless", From e4415eabf75932c99d3b3df4987b1c0dac5522f6 Mon Sep 17 00:00:00 2001 From: Ulrich Huber Date: Mon, 13 Jul 2026 09:45:51 +0200 Subject: [PATCH 4/5] Drop rules_distroless git_overrides No longer required since we are on an official release now. --- bazel/rules/rules_score/test/MODULE.bazel | 6 ------ cr_checker/tests/MODULE.bazel | 7 ------- 2 files changed, 13 deletions(-) diff --git a/bazel/rules/rules_score/test/MODULE.bazel b/bazel/rules/rules_score/test/MODULE.bazel index c91e57eb..68e0c63b 100644 --- a/bazel/rules/rules_score/test/MODULE.bazel +++ b/bazel/rules/rules_score/test/MODULE.bazel @@ -102,10 +102,4 @@ register_toolchains( "@llvm_toolchain//:all", ) -bazel_dep(name = "rules_distroless", version = "0.9.0") -git_override( - module_name = "rules_distroless", - commit = "dbf25be1c3a9a1698511a4817582efe61dc5ec15", - remote = "https://github.com/LittleHuba/rules_distroless.git", -) bazel_dep(name = "trlc", version = "3.0.0") diff --git a/cr_checker/tests/MODULE.bazel b/cr_checker/tests/MODULE.bazel index 748e0aa4..5d3b4183 100644 --- a/cr_checker/tests/MODULE.bazel +++ b/cr_checker/tests/MODULE.bazel @@ -46,11 +46,4 @@ local_path_override( path = "../../", ) -bazel_dep(name = "rules_distroless", version = "0.9.0") -git_override( - module_name = "rules_distroless", - commit = "dbf25be1c3a9a1698511a4817582efe61dc5ec15", - remote = "https://github.com/LittleHuba/rules_distroless.git", -) - # end Tests From cf45614c653fb789df9b6cd1d579a5c3a27a69e5 Mon Sep 17 00:00:00 2001 From: Ulrich Huber Date: Mon, 13 Jul 2026 14:16:27 +0200 Subject: [PATCH 5/5] Bump to lobster version 1.0.4 in git_override This release is required for TRLC 3.0.0 We only bump in the local module. Users will have to do the same to use rules_score successfully. Since rules_score is in active development it is not in scope of the release. --- MODULE.bazel | 5 +++++ bazel/rules/rules_score/test/MODULE.bazel | 6 ++++++ 2 files changed, 11 insertions(+) diff --git a/MODULE.bazel b/MODULE.bazel index 310530ee..566d6a88 100644 --- a/MODULE.bazel +++ b/MODULE.bazel @@ -344,6 +344,11 @@ use_repo(pip, "manual_analysis_deps") bazel_dep(name = "trlc", version = "3.0.0") bazel_dep(name = "lobster", version = "1.0.3") +git_override( + module_name = "lobster", + commit = "07382c33f95e22992e0f8788c0537ec06877e51f", + remote = "https://github.com/bmw-software-engineering/lobster.git", +) ############################################################################### # Dependencies for AI Checker diff --git a/bazel/rules/rules_score/test/MODULE.bazel b/bazel/rules/rules_score/test/MODULE.bazel index 68e0c63b..6424372d 100644 --- a/bazel/rules/rules_score/test/MODULE.bazel +++ b/bazel/rules/rules_score/test/MODULE.bazel @@ -103,3 +103,9 @@ register_toolchains( ) bazel_dep(name = "trlc", version = "3.0.0") +bazel_dep(name = "lobster", version = "1.0.3") +git_override( + module_name = "lobster", + commit = "07382c33f95e22992e0f8788c0537ec06877e51f", + remote = "https://github.com/bmw-software-engineering/lobster.git", +)