Skip to content

build(deps): bump rules_python from 2.3.1 to 2.4.2 in /src - #697

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bazel/src/master/rules_python-2.4.2
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bazel/src/master/rules_python-2.4.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps rules_python from 2.3.1 to 2.4.2.

Release notes

Sourced from rules_python's releases.

2.4.2

For more detailed setup instructions, see https://rules-python.readthedocs.io/en/latest/getting-started.html

For the user-facing changelog see here

Using Bzlmod

Add to your MODULE.bazel file:

bazel_dep(name = "rules_python", version = "2.4.2")
python = use_extension("@​rules_python//python/extensions:python.bzl", "python")
python.toolchain(
python_version = "3.14",
)
pip = use_extension("@​rules_python//python/extensions:pip.bzl", "pip")
pip.parse(
hub_name = "pypi",
python_version = "3.14",
requirements_lock = "//:requirements_lock.txt",
)
use_repo(pip, "pypi")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
name = "rules_python",
sha256 = "14f8fc9adbf471c7c1258cbf0998de3f63d8d3c81f88e2b96cadff44d71adf71",
strip_prefix = "rules_python-2.4.2",
url = "https://github.com/bazel-contrib/rules_python/releases/download/2.4.2/rules_python-2.4.2.tar.gz",
)
load("@​rules_python//python:repositories.bzl", "py_repositories")
py_repositories()

Gazelle plugin

Paste this snippet into your WORKSPACE file:

... (truncated)

Changelog

Sourced from rules_python's changelog.

2.4.2 - 2026-10-10

{#v2-4-2-fixed}

Fixed

  • (zipapp) Shared libraries that a {obj}py_zipapp_binary reaches through Bazel's _solib symlinks are stored as files again, instead of as symlinks to absolute paths in the build machine's output base that dangle wherever the zipapp runs.

{#v2-4-1}

2.4.1 - 2026-10-06

{#v2-4-1-changed}

Changed

  • (toolchain) Updated default Python 3.15 runtime from 3.15.0rc2 to 3.15.0rc3.

{#v2-4-0}

2.4.0 - 2026-09-22

{#v2-4-0-changed}

Changed

  • (bootstrap) {obj}sys.path adds the Python runtime in runfiles instead of the underlying Bazel repository cache directory (#4104).
  • (gazelle) Deprecate the requirements argument of gazelle_python_manifest in favor of the format-agnostic lockfiles argument, which supports uv.lock.
  • (toolchain) Updated default Python 3.15 runtime from 3.15.0a8 to 3.15.0rc1 (#4122).
  • (toolchain) Updated default Python 3.15 runtime from 3.15.0rc1 to 3.15.0rc2.
  • (toolchain) Updated the default Python toolchain version from 3.11 to 3.14 in {obj}python.defaults, {obj}python_register_toolchains, and {obj}python_register_multi_toolchains (#4023).
  • (toolchains) Shared libpython*.so* files are now excluded by default from hermetic Python runtime files for recognized Astral python-build-standalone builds (20250517 and newer), which statically link libpython into the interpreter. Older, custom, or unrecognized runtimes retain them. Set libpython = "include" or "exclude" on {obj}python.override, {obj}python.single_version_override, {obj}python.single_version_platform_override, or

... (truncated)

Commits
  • d18e3eb fix(zipapp): store _solib shared libraries as files, not absolute symlinks (#...
  • 1117822 feat(toolchains): update CPython 3.15.0 from rc2 to rc3 (#4220)
  • 65114b1 feat(pypi): add py.typed files to pyi_srcs (#4202)
  • 46e3773 feat(toolchains): update CPython 3.15.0 from rc1 to rc2 (#4199)
  • 291e676 fix(zipapp): reduce bundled interpreter size (#4165)
  • 4204bfb build(release): exclude devguide.md from version marker checks (#4185)
  • 6f65150 Prepare release v2.4.0 (#4176)
  • 40ea02e build(release): fetch PR body in get_pr_info and grant PR read permissions (#...
  • 9cc620e fix(cc): include toolchain libraries in cc_shared_library (#4166)
  • ff35ee4 fix(stamping): skip build data spawn when --stamp=false (#4160)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rules_python](https://github.com/bazel-contrib/rules_python) from 2.3.1 to 2.4.2.
- [Release notes](https://github.com/bazel-contrib/rules_python/releases)
- [Changelog](https://github.com/bazel-contrib/rules_python/blob/main/CHANGELOG.md)
- [Commits](bazel-contrib/rules_python@2.3.1...2.4.2)

---
updated-dependencies:
- dependency-name: rules_python
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file labels Oct 14, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants