chore(deps): update dependency rules_python to v1.5.1 - abandoned

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
rules_python	bazel_dep	minor	1.1.0 -> 1.5.1

---

Release Notes

bazel-contrib/rules_python (rules_python)

v1.5.1

Compare Source

{#v1-5-1-fixed}

Fixed

• (pypi) Namespace packages work by default (pkgutil shims are generated
  by default again)
  (#​3038).

{#​1-5-0}

v1.5.0

Compare Source

{#​1-5-0-changed}

Changed

• (toolchain) Bundled toolchain version updates:
  • 3.9 now references 3.9.23
  • 3.10 now references 3.10.18
  • 3.11 now references 3.11.13
  • 3.12 now references 3.12.11
  • 3.13 now references 3.13.4
• (rules) On Windows, {obj}--bootstrap_impl=system_python is forced. This
  allows setting --bootstrap_impl=script in bazelrc for mixed-platform
  environments.
• (rules) {obj}compile_pip_requirements now generates a .test target. The
  _test target is deprecated and will be removed in the next major release.
  (#​2794
• (py_wheel) py_wheel always creates zip64-capable wheel zips
• (providers) (experimental) {obj}PyInfo.venv_symlinks replaces
  PyInfo.site_packages_symlinks
• (deps) Updated setuptools to 78.1.1 to patch CVE-2025-47273. This effectively makes
  Python 3.9 the minimum supported version for using pip_parse.

{#​1-5-0-fixed}

Fixed

• (rules) PyInfo provider is now advertised by py_test, py_binary, and py_library;
  this allows aspects using required_providers to function correctly.
  (#​2506).
• Fixes when using {obj}--bootstrap_impl=script:
  • compile_pip_requirements now works with it
  • The sys._base_executable value will reflect the underlying interpreter,
    not venv interpreter.
  • The {obj}//python/runtime_env_toolchains:all toolchain now works with it.
• (rules) Better handle flakey platform.win32_ver() calls by calling them
  multiple times.
• (tools/wheelmaker.py) Extras are now preserved in Requires-Dist metadata when using requires_file
  to specify the requirements.
• (pypi) Use bazel downloader for direct URL references and correctly detect the filenames from
  various URL formats - URL encoded version strings get correctly resolved, sha256 value can be
  also retrieved from the URL as opposed to only the --hash parameter. Fixes
  #​2363.
• (pypi) whl_library now infers file names from its urls attribute correctly.
• (pypi) When running under bazel test, be sure that temporary requirements file
  remains writable.
• (py_test, py_binary) Allow external files to be used for main
• (pypi) Correctly aggregate the sources when the hashes specified in the lockfile differ
  by platform even though the same version is used. Fixes #​2648.
• (pypi) compile_pip_requirements test rule works behind the proxy
• (toolchains) The hermetic toolchains now correctly statically advertise the
  releaselevel and serial for pre-release hermetic toolchains ({gh-issue}2837).

{#​1-5-0-added}

Added

• Repo utilities execute_unchecked, execute_checked, and execute_checked_stdout now
  support log_stdout and log_stderr keyword arg booleans. When these are True
  (the default), the subprocess's stdout/stderr will be logged.
• (toolchains) Local toolchains can be activated with custom flags. See
  [Conditionally using local toolchains] docs for how to configure.
• (pypi) Starlark-based evaluation of environment markers (requirements.txt conditionals)
  available (not enabled by default) for improved multi-platform build support.
  Set the RULES_PYTHON_ENABLE_PIPSTAR=1 environment variable to enable it.
• (utils) Add a way to run a REPL for any rules_python target that returns
  a PyInfo provider.
• (uv) Handle .netrc and auth_patterns auth when downloading uv. Work towards
  #​1975.
• (toolchains) Arbitrary python-build-standalone runtimes can be registered
  and activated with custom flags. See the [Registering custom runtimes]
  docs and {obj}single_version_platform_override() API docs for more
  information.
• (rules) Added support for a using constraints files with compile_pip_requirements.
  Useful when an intermediate dependency needs to be upgraded to pull in
  security patches.
• (toolchains): 3.14.0b2 has been added as a preview.

{#​1-5-0-removed}

Removed

• Nothing removed.

{#​1-4-1}

v1.4.1

Compare Source

{#​1-4-1-fixed}

Fixed

• (pypi) Fix a typo not allowing users to benefit from using the downloader when the hashes in the
  requirements file are not present. Fixes
  #​2863.

{#​1-4-0}

v1.4.0

Compare Source

{#​1-4-0-changed}

Changed

• (toolchain) The exec configuration toolchain now has the forwarded
  exec_interpreter now also forwards the ToolchainInfo provider. This is
  for increased compatibility with the RBE setups where access to the exec
  configuration interpreter is needed.
• (toolchains) Use the latest astral-sh toolchain release 20250317 for Python versions:
  • 3.9.21
  • 3.10.16
  • 3.11.11
  • 3.12.9
  • 3.13.2
• (pypi) Use xcrun xcodebuild --showsdks to find XCode root.
• (toolchains) Remove all but 3.8.20 versions of the Python 3.8 interpreter who has
  reached EOL. If users still need other versions of the 3.8 interpreter, please supply
  the URLs manually {bzl:obj}python.toolchain or {bzl:obj}python_register_toolchains calls.
• (toolchains) Previously #​2636
  changed the semantics of ignore_root_user_error from "ignore" to "warning". This is now
  flipped back to ignoring the issue, and will only emit a warning when the attribute is set
  False.
• (pypi) The PyPI extension will no longer write the lock file entries as the
  extension has been marked reproducible.
  Fixes #​2434.
• (gazelle) Lazily load and parse manifest files when running Gazelle. This ensures no
  manifest files are loaded when Gazelle is run over a set of non-python directories
  PR #​2746.
• (rules) {attr}py_binary.srcs and {attr}py_test.srcs is no longer mandatory when
  main_module is specified (for --bootstrap_impl=script)

{#​1-4-0-fixed}

Fixed

• (pypi) Platform specific extras are now correctly handled when using
  universal lock files with environment markers. Fixes #​2690.
• (runfiles) ({obj}--bootstrap_impl=script) Follow symlinks when searching for runfiles.
• (toolchains) Do not try to run chmod when downloading non-windows hermetic toolchain
  repositories on Windows. Fixes
  #​2660.
• (logging) Allow repo rule logging level to be set to FAIL via the RULES_PYTHON_REPO_DEBUG_VERBOSITY environment variable.
• (toolchains) The toolchain matching is has been fixed when writing
  transitions transitioning on the python_version flag.
  Fixes #​2685.
• (toolchains) Run the check on the Python interpreter in isolated mode, to ensure it's not affected by userland environment variables, such as PYTHONPATH.
• (toolchains) Ensure temporary .pyc and .pyo files are also excluded from the interpreters repository files.
• (pypi) Run interpreter version call in isolated mode, to ensure it's not affected by userland environment variables, such as PYTHONPATH.
• (packaging) An empty requires_file is treated as if it were omitted, resulting in a valid METADATA file.
• (rules) py_wheel and sphinxdocs rules now propagate target_compatible_with to all targets they create.
  PR #​2788.
• (pypi) Correctly handle METADATA entries when python_full_version is used in
  the environment marker.
  Fixes #​2319.
• (pypi) Correctly handle python_version parameter and transition the requirement
  locking to the right interpreter version when using
  {obj}compile_pip_requirements rule.
  See #​2819.

{#​1-4-0-added}

Added

• (pypi) From now on sha256 values in the requirements.txt is no longer
  mandatory when enabling {attr}pip.parse.experimental_index_url feature.
  This means that rules_python will attempt to fetch metadata for all
  packages through SimpleAPI unless they are pulled through direct URL
  references. Fixes #​2023.
  In case you see issues with rules_python being too eager to fetch the SimpleAPI
  metadata, you can use the newly added {attr}pip.parse.simpleapi_skip
  to skip metadata fetching for those packages.
• (uv) A {obj}lock rule that is the replacement for the
  {obj}compile_pip_requirements. This may still have rough corners
  so please report issues with it in the
  #​1975.
  Main highlights - the locking can be done within a build action or outside
  it, there is no more automatic test target (but it can be added on the user
  side by using native_test). For customizing the uv version that is used,
  please check the {obj}uv.configure tag class.
• Add support for riscv64 linux platform.
• (toolchains) Add python 3.13.2 and 3.12.9 toolchains
• (providers) (experimental) PyInfo.site_packages_symlinks field added to
  allow specifying links to create within the venv site packages (only
  applicable with {obj}--bootstrap_impl=script)
  (#​2156).
• (toolchains) Local Python installs can be used to create a toolchain
  equivalent to the standard toolchains. See [Local toolchains] docs for how to
  configure them.
• (toolchains) Expose $(PYTHON2_ROOTPATH) and $(PYTHON3_ROOTPATH) which are runfiles
  locations equivalents of $(PYTHON2) and `$(PYTHON3) respectively.

{#​1-4-0-removed}

Removed

• Nothing removed.

{#v1-3-0}

v1.3.0

Compare Source

{#v1-3-0-changed}

Changed

• (deps) platforms 0.0.4 -> 0.0.11
• (py_wheel) Package py_library.pyi_srcs (.pyi files) in the wheel.
• (py_package) Package py_library.pyi_srcs (.pyi files) in py_package.
• (gazelle) The generated manifest file (default: gazelle_python.yaml) will now include the
  YAML document start --- line. Implemented in
  #​2656.

{#v1-3-0-fixed}

Fixed

• (pypi) The ppc64le is now pointing to the right target in the platforms package.
• (gazelle) No longer incorrectly merge py_binary targets during partial updates in
  file generation mode. Fixed in #​2619.
• (bzlmod) Running as root is no longer an error. ignore_root_user_error=True
  is now the default. Note that running as root may still cause spurious
  Bazel cache invalidation
  (#​1169).
• (gazelle) Don't collapse depsets to a list or into args when generating the modules mapping file.
  Support spilling modules mapping args into a params file.
• (coverage) Fix missing files in the coverage report if they have no tests.
• (pypi) From now on python invocations in repository and module extension
  evaluation contexts will invoke Python interpreter with -B to avoid
  creating .pyc files.
• (deps) doublestar 4.7.1 (required for recent Gazelle versions)

{#v1-3-0-added}

Added

• (python) {obj}python.defaults has been added to allow users to
  set the default python version in the root module by reading the
  default version number from a file or an environment variable.
• {obj}//python/bin:python: convenience target for directly running an
  interpreter. {obj}--//python/bin:python_src can be used to specify a
  binary whose interpreter to use.
• (uv) Now the extension can be fully configured via bzlmod APIs without the
  need to patch rules_python. The documentation has been added to rules_python
  docs but usage of the extension may result in your setup breaking without any
  notice. What is more, the URLs and SHA256 values will be retrieved from the
  GitHub releases page metadata published by the uv project.
• (pypi) An extra argument to add the interpreter lib dir to LDFLAGS when
  building wheels from sdist.
• (pypi) Direct HTTP urls for wheels and sdists are now supported when using
  {obj}experimental_index_url (bazel downloader).
  Partially fixes #​2363.
• (rules) APIs for creating custom rules based on the core py_binary, py_test,
  and py_library rules
  (#​1647)
• (rules) Added env-var to allow additional interpreter args for stage1 bootstrap.
  See {any}RULES_PYTHON_ADDITIONAL_INTERPRETER_ARGS environment variable.
  Only applicable for {obj}--bootstrap_impl=script.
• (rules) Added {obj}interpreter_args attribute to py_binary and py_test,
  which allows pass arguments to the interpreter before the regular args.
• (rules) Added {obj}main_module attribute to py_binary and py_test,
  which allows specifying a module name to run (i.e. python -m <module>).

{#v1-3-0-removed}

Removed

• Nothing removed.

{#v1-2-0}

v1.2.0

Compare Source

{#v1-2-0-changed}

Changed

• (rules) py_proto_library is deprecated in favour of the
  implementation in https://github.com/protocolbuffers/protobuf. It will be
  removed in the future release.
• (pypi) {obj}pip.override will now be ignored instead of raising an error,
  fixes #​2550.
• (rules) deprecation warnings for deprecated symbols have been turned off by
  default for now and can be enabled with RULES_PYTHON_DEPRECATION_WARNINGS
  env var.
• (pypi) Downgraded versions of packages: pip from 24.3.2 to 24.0.0 and
  packaging from 24.2 to 24.0.

{#v1-2-0-fixed}

Fixed

• (rules) python_zip_file output with --bootstrap_impl=script works again
  (#​2596).
• (docs) Using python_version attribute for specifying python versions introduced in v1.1.0
• (gazelle) Providing multiple input requirements files to gazelle_python_manifest now works correctly.
• (pypi) Handle trailing slashes in pip index URLs in environment variables,
  fixes #​2554.
• (runfiles) Runfile manifest and repository mapping files are now interpreted
  as UTF-8 on all platforms.
• (coverage) Coverage with --bootstrap_impl=script is fixed
  (#​2572).
• (pypi) Non deterministic behaviour in requirement file usage has been fixed
  by reverting #​2514.
  The related issue is #​908.
• (sphinxdocs) Do not crash when tag_class does not have a populated doc value.
  Fixes (#​2579).
• (binaries/tests) Fix packaging when using --bootstrap_impl=script: set
  {obj}--venvs_use_declare_symlink=no to have it not create symlinks at
  build time (they will be created at runtime instead).
  (Fixes #​2489)

{#v1-2-0-added}

Added

• Nothing added.

{#v1-2-0-removed}

Removed

• Nothing removed.

{#v1-1-0}

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[renovate]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.