Update dependency rules_python to v1.6.1 #7

renovate · 2025-09-20T18:46:26Z

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Type	Update	Change
rules_python	bazel_dep	minor	`1.3.0` -> `1.6.1`

Release Notes

bazel-contrib/rules_python (rules_python)

`v1.6.1`

Compare Source

For more detailed setup instructions, see https://rules-python.readthedocs.io/en/latest/getting-started.html

For the user-facing changelog see here

Using Bzlmod

Add to your MODULE.bazel file:

bazel_dep(name = "rules_python", version = "1.6.1")

python = use_extension("@&#8203;rules_python//python/extensions:python.bzl", "python")
python.toolchain(
    python_version = "3.13",
)

pip = use_extension("@&#8203;rules_python//python/extensions:pip.bzl", "pip")
pip.parse(
    hub_name = "pypi",
    python_version = "3.13",
    requirements_lock = "//:requirements_lock.txt",
)

use_repo(pip, "pypi")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_python",
    sha256 = "f2e80f97f9c0b82e2489e61e725df1e6bdaf16c4dacf5e26b95668787164baff",
    strip_prefix = "rules_python-1.6.1",
    url = "https://github.com/bazel-contrib/rules_python/releases/download/1.6.1/rules_python-1.6.1.tar.gz",
)

load("@&#8203;rules_python//python:repositories.bzl", "py_repositories")

py_repositories()

Gazelle plugin

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_python_gazelle_plugin",
    sha256 = "f2e80f97f9c0b82e2489e61e725df1e6bdaf16c4dacf5e26b95668787164baff",
    strip_prefix = "rules_python-1.6.1/gazelle",
    url = "https://github.com/bazel-contrib/rules_python/releases/download/1.6.1/rules_python-1.6.1.tar.gz",
)

### To compile the rules_python gazelle extension from source,
### we must fetch some third-party go dependencies that it uses.

load("@&#8203;rules_python_gazelle_plugin//:deps.bzl", _py_gazelle_deps = "gazelle_deps")

_py_gazelle_deps()

Full Changelog: bazel-contrib/rules_python@1.6.0...1.6.1

`v1.6.0`

Compare Source

{#v1-6-0-changed}

Changed

(gazelle) update minimum gazelle version to 0.36.0 - may cause BUILD file changes
(gazelle) update minimum rules_go version to 0.55.1
(gazelle) remove custom go-tree-sitter module BUILD file
(gazelle) For package mode, resolve dependencies when imports are relative
to the package path. This is enabled via the
# gazelle:python_experimental_allow_relative_imports true directive ({gh-issue}2203).
(gazelle) Types for exposed members of python.ParserOutput are now all public.
(gazelle) Removed the requirement for __init__.py, __main__.py, or __test__.py files to be
present in a directory to generate a BUILD.bazel file.
(toolchain) Updated the following toolchains to build 20250808 to patch CVE-2025-47273:
- 3.9.23
- 3.10.18
- 3.11.13
- 3.12.11
- 3.14.0rc1
(toolchain) Python 3.13 now references 3.13.6
(gazelle) Switched back to smacker/go-tree-sitter, fixing
#2630
(pypi) From now on the list of default platforms only includes linux_x86_64, linux_aarch64,
osx_x86_64, osx_aarch64 and windows_x86_64. If you are on other platforms, you need to
use the pip.default to configure it yourself. If you are interested in graduating the
platform, consider helping set us up CI for them and update the documentation.
(ci) We are now testing on Ubuntu 22.04 for RBE and non-RBE configurations.
(core) #!/usr/bin/env bash is now used as a shebang in the stage1 bootstrap template.
(gazelle:docs) The Gazelle docs have been migrated from {gh-path}gazelle/README.md to
{gh-path}gazelle/docs and are now available on the primary documentation site
at https://rules-python.readthedocs.io/en/latest/gazelle/docs/index.html

{#v1-6-0-fixed}

Fixed

(toolchains) local_runtime_repo now respects changes to the DEVELOPER_DIR and XCODE_VERSION
repo env vars, fixing stale cache issues on macOS with system (i.e. Xcode-supplied) Python
(#3123).
(pypi) Fixes an issue where builds using a bazel vendor vendor directory
would fail if the constraints file contained environment markers. Fixes
#2996.
(pypi) Wheels with BUILD.bazel (or other special Bazel files) no longer
result in missing files at runtime
(#2782).
(runfiles) The pypi runfiles package now includes py.typed to indicate it
supports type checking
(#2503).
(pypi) The pipstar defaults configuration now supports any custom platform
name.
(pypi) The selection of the whls has been changed and should no longer result
in ambiguous select matches ({gh-issue}2759) and should be much more efficient
when running bazel query due to fewer repositories being included
({gh-issue}2849).
Multi-line python imports (e.g. with escaped newlines) are now correctly processed by Gazelle.
(toolchains) local_runtime_repo works with multiarch Debian with Python 3.8
(#3099).
(pypi) Expose pypi packages only common to all Python versions in all_requirements
(#2921).
(repl) Normalize the path for the REPL stub to make it possible to use the
default stub template from outside rules_python ({gh-issue}3101).
(gazelle) Fixes gazelle adding sibling module dependencies to resolve
absolute imports (Python 2's behavior without absolute_import). Previous
behavior can be restored using the directive
# gazelle:python_resolve_sibling_imports true
(pypi) Show overridden index URL of packages when downloading metadata have failed.
(#2985).
(toolchains) use "command -v" to find interpreter in $PATH
(#3150).
(pypi) bazel vendor now works in bzlmod ({gh-issue}3079).
(toolchains) local_runtime_repo now works on Windows
(#3055).
(toolchains) local_runtime_repo supports more types of Python
installations (Mac frameworks, missing dynamic libraries, and other
esoteric cases, see
#3148 for details).
(pypi) Support requirements.txt files that use different versions of the same
package targeting different target platforms.
(#2797).
(py_wheel) Add directories in deterministic order.

{#v1-6-0-added}

Added

(repl) Default stub now has tab completion, where readline support is available,
see (#3114).
(#3114).
(pypi) To configure the environment for requirements.txt evaluation, use the newly added
developer preview of the pip.default tag class. Only rules_python and root modules can use
this feature. You can also configure custom config_settings using pip.default. It
can also be used to set the global netrc or auth_patterns variables.
(pypi) PyPI dependencies now expose an :extracted_whl_files filegroup target
of all the files extracted from the wheel. This can be used in lieu of
{obj}whl_filegroup to avoid copying/extracting wheel multiple times to
get a subset of their files.
(gazelle) New directive gazelle:python_generate_pyi_deps; when true,
dependencies added to satisfy type-only imports (if TYPE_CHECKING) and type
stub packages are added to pyi_deps instead of deps.
(toolchain) Add toolchains for aarch64 windows for
- 3.11.13
- 3.12.11
- 3.13.6
- 3.14.0rc1
(gazelle): New annotation gazelle:include_pytest_conftest. When not set (the
default) or true, gazelle will inject any conftest.py file found in the same
directory as a {obj}py_test target to that {obj}py_test target's deps.
This behavior is unchanged from previous versions. When false, the :conftest
dep is not added to the {obj}py_test target.
(gazelle) New directive gazelle:python_generate_proto; when true,
Gazelle generates py_proto_library rules for proto_library. false by default.
- Note: Users must manually configure their Gazelle target to support the
  proto language.
(gazelle) New directive gazelle:python_proto_naming_convention; controls
naming of py_proto_library rules.

{#v1-6-0-removed}

Removed

Nothing removed.

{#v1-5-4}

`v1.5.4`

Compare Source

{#v1-5-4-fixed}

Fixed

(toolchains) local_runtime_repo now checks if the include directory exists
before attempting to watch it, fixing issues on macOS with system Python
(#3043).

{#v1-5-3}

`v1.5.3`

Compare Source

Fixed

(toolchains) local_runtime_repo now checks if the include directory exists
before attempting to watch it, fixing issues on macOS with system Python
(#3043).

{#v1-5-2}

`v1.5.2`

Compare Source

{#v1-5-2-changed}

Changed

(deps) (bzlmod) Upgraded to bazel-skylib version
1.8.1
to remove deprecation warnings.

{#v1-5-2-fixed}

Fixed

(pypi) Correctly pull sdist distributions using pip
(#3131).
(core) builds work again on 7.x WORKSPACE configurations
(#3119).

{#v1-5-1}

`v1.5.1`

Compare Source

{#v1-5-1-fixed}

Fixed

(pypi) Namespace packages work by default (pkgutil shims are generated
by default again)
(#3038).

{#v1-5-0}

`v1.5.0`

Compare Source

{#v1-5-0-changed}

Changed

(toolchain) Bundled toolchain version updates:
- 3.9 now references 3.9.23
- 3.10 now references 3.10.18
- 3.11 now references 3.11.13
- 3.12 now references 3.12.11
- 3.13 now references 3.13.4
(rules) On Windows, {obj}--bootstrap_impl=system_python is forced. This
allows setting --bootstrap_impl=script in bazelrc for mixed-platform
environments.
(rules) {obj}compile_pip_requirements now generates a .test target. The
_test target is deprecated and will be removed in the next major release.
(#2794
(py_wheel) py_wheel always creates zip64-capable wheel zips
(providers) (experimental) {obj}PyInfo.venv_symlinks replaces
PyInfo.site_packages_symlinks
(deps) Updated setuptools to 78.1.1 to patch CVE-2025-47273. This effectively makes
Python 3.9 the minimum supported version for using pip_parse.

{#v1-5-0-fixed}

Fixed

(rules) PyInfo provider is now advertised by py_test, py_binary, and py_library;
this allows aspects using required_providers to function correctly.
(#2506).
Fixes when using {obj}--bootstrap_impl=script:
- compile_pip_requirements now works with it
- The sys._base_executable value will reflect the underlying interpreter,
  not venv interpreter.
- The {obj}//python/runtime_env_toolchains:all toolchain now works with it.
(rules) Better handle flakey platform.win32_ver() calls by calling them
multiple times.
(tools/wheelmaker.py) Extras are now preserved in Requires-Dist metadata when using requires_file
to specify the requirements.
(pypi) Use bazel downloader for direct URL references and correctly detect the filenames from
various URL formats - URL encoded version strings get correctly resolved, sha256 value can be
also retrieved from the URL as opposed to only the --hash parameter. Fixes
#2363.
(pypi) whl_library now infers file names from its urls attribute correctly.
(pypi) When running under bazel test, be sure that temporary requirements file
remains writable.
(py_test, py_binary) Allow external files to be used for main
(pypi) Correctly aggregate the sources when the hashes specified in the lockfile differ
by platform even though the same version is used. Fixes #2648.
(pypi) compile_pip_requirements test rule works behind the proxy
(toolchains) The hermetic toolchains now correctly statically advertise the
releaselevel and serial for pre-release hermetic toolchains ({gh-issue}2837).

{#v1-5-0-added}

Added

Repo utilities execute_unchecked, execute_checked, and execute_checked_stdout now
support log_stdout and log_stderr keyword arg booleans. When these are True
(the default), the subprocess's stdout/stderr will be logged.
(toolchains) Local toolchains can be activated with custom flags. See
[Conditionally using local toolchains] docs for how to configure.
(pypi) Starlark-based evaluation of environment markers (requirements.txt conditionals)
available (not enabled by default) for improved multi-platform build support.
Set the RULES_PYTHON_ENABLE_PIPSTAR=1 environment variable to enable it.
(utils) Add a way to run a REPL for any rules_python target that returns
a PyInfo provider.
(uv) Handle .netrc and auth_patterns auth when downloading uv. Work towards
#1975.
(toolchains) Arbitrary python-build-standalone runtimes can be registered
and activated with custom flags. See the [Registering custom runtimes]
docs and {obj}single_version_platform_override() API docs for more
information.
(rules) Added support for a using constraints files with compile_pip_requirements.
Useful when an intermediate dependency needs to be upgraded to pull in
security patches.
(toolchains): 3.14.0b2 has been added as a preview.

{#v1-5-0-removed}

Removed

Nothing removed.

{#v1-4-2}

`v1.4.2`

Compare Source

Fixed

(toolchains) local_runtime_repo now checks if the include directory exists
before attempting to watch it, fixing issues on macOS with system Python
(#3043).

{#v1-4-1}

`v1.4.1`

Compare Source

{#v1-4-1-fixed}

Fixed

(pypi) Fix a typo not allowing users to benefit from using the downloader when the hashes in the
requirements file are not present. Fixes
#2863.

{#v1-4-0}

`v1.4.0`

Compare Source

{#v1-4-0-changed}

Changed

(toolchain) The exec configuration toolchain now has the forwarded
exec_interpreter now also forwards the ToolchainInfo provider. This is
for increased compatibility with the RBE setups where access to the exec
configuration interpreter is needed.
(toolchains) Use the latest astral-sh toolchain release 20250317 for Python versions:
- 3.9.21
- 3.10.16
- 3.11.11
- 3.12.9
- 3.13.2
(pypi) Use xcrun xcodebuild --showsdks to find XCode root.
(toolchains) Remove all but 3.8.20 versions of the Python 3.8 interpreter who has
reached EOL. If users still need other versions of the 3.8 interpreter, please supply
the URLs manually {bzl:obj}python.toolchain or {bzl:obj}python_register_toolchains calls.
(toolchains) Previously #2636
changed the semantics of ignore_root_user_error from "ignore" to "warning". This is now
flipped back to ignoring the issue, and will only emit a warning when the attribute is set
False.
(pypi) The PyPI extension will no longer write the lock file entries as the
extension has been marked reproducible.
Fixes #2434.
(gazelle) Lazily load and parse manifest files when running Gazelle. This ensures no
manifest files are loaded when Gazelle is run over a set of non-python directories
PR #2746.
(rules) {attr}py_binary.srcs and {attr}py_test.srcs is no longer mandatory when
main_module is specified (for --bootstrap_impl=script)

{#v1-4-0-fixed}

Fixed

(pypi) Platform specific extras are now correctly handled when using
universal lock files with environment markers. Fixes #2690.
(runfiles) ({obj}--bootstrap_impl=script) Follow symlinks when searching for runfiles.
(toolchains) Do not try to run chmod when downloading non-windows hermetic toolchain
repositories on Windows. Fixes
#2660.
(logging) Allow repo rule logging level to be set to FAIL via the RULES_PYTHON_REPO_DEBUG_VERBOSITY environment variable.
(toolchains) The toolchain matching is has been fixed when writing
transitions transitioning on the python_version flag.
Fixes #2685.
(toolchains) Run the check on the Python interpreter in isolated mode, to ensure it's not affected by userland environment variables, such as PYTHONPATH.
(toolchains) Ensure temporary .pyc and .pyo files are also excluded from the interpreters repository files.
(pypi) Run interpreter version call in isolated mode, to ensure it's not affected by userland environment variables, such as PYTHONPATH.
(packaging) An empty requires_file is treated as if it were omitted, resulting in a valid METADATA file.
(rules) py_wheel and sphinxdocs rules now propagate target_compatible_with to all targets they create.
PR #2788.
(pypi) Correctly handle METADATA entries when python_full_version is used in
the environment marker.
Fixes #2319.
(pypi) Correctly handle python_version parameter and transition the requirement
locking to the right interpreter version when using
{obj}compile_pip_requirements rule.
See #2819.

{#v1-4-0-added}

Added

(pypi) From now on sha256 values in the requirements.txt is no longer
mandatory when enabling {attr}pip.parse.experimental_index_url feature.
This means that rules_python will attempt to fetch metadata for all
packages through SimpleAPI unless they are pulled through direct URL
references. Fixes #2023.
In case you see issues with rules_python being too eager to fetch the SimpleAPI
metadata, you can use the newly added {attr}pip.parse.simpleapi_skip
to skip metadata fetching for those packages.
(uv) A {obj}lock rule that is the replacement for the
{obj}compile_pip_requirements. This may still have rough corners
so please report issues with it in the
#1975.
Main highlights - the locking can be done within a build action or outside
it, there is no more automatic test target (but it can be added on the user
side by using native_test). For customizing the uv version that is used,
please check the {obj}uv.configure tag class.
Add support for riscv64 linux platform.
(toolchains) Add python 3.13.2 and 3.12.9 toolchains
(providers) (experimental) PyInfo.site_packages_symlinks field added to
allow specifying links to create within the venv site packages (only
applicable with {obj}--bootstrap_impl=script)
(#2156).
(toolchains) Local Python installs can be used to create a toolchain
equivalent to the standard toolchains. See [Local toolchains] docs for how to
configure them.
(toolchains) Expose $(PYTHON2_ROOTPATH) and $(PYTHON3_ROOTPATH) which are runfiles
locations equivalents of $(PYTHON2) and `$(PYTHON3) respectively.

{#v1-4-0-removed}

Removed

Nothing removed.

{#v1-3-0}

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Update dependency rules_python to v1.6.1

6b211f9

renovate bot requested a review from snape as a code owner September 20, 2025 18:46

snape merged commit 7a6997d into main Sep 20, 2025
19 checks passed

snape deleted the renovate/rules_python-1.x branch September 20, 2025 19:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update dependency rules_python to v1.6.1 #7

Update dependency rules_python to v1.6.1 #7

Uh oh!

renovate bot commented Sep 20, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Update dependency rules_python to v1.6.1 #7

Update dependency rules_python to v1.6.1 #7

Uh oh!

Conversation

renovate bot commented Sep 20, 2025

Release Notes

Using Bzlmod

Using WORKSPACE

Gazelle plugin

Changed

Fixed

Added

Removed

Fixed

Fixed

Changed

Fixed

Fixed

Changed

Fixed

Added

Removed

Fixed

Fixed

Changed

Fixed

Added

Removed

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants