From bae8a12ac41cbc5b397c9ce0f64b3b1c60f74991 Mon Sep 17 00:00:00 2001 From: Alexander Lanin Date: Mon, 2 Nov 2026 10:26:26 +0100 Subject: [PATCH] chore(repo-policy-sync): require Bazel 8.8.2 or newer --- repo_policy_sync/docs/reference/policy-format.md | 2 +- repo_policy_sync/policies/README.md | 2 +- .../minimum-bazel-version/minimum/after/.bazelversion | 2 +- .../minimum-bazel-version/minimum/before/.bazelversion | 2 +- .../minimum-bazel-version/newer-minor/after/.bazelversion | 2 +- .../newer-minor/before/.bazelversion | 2 +- .../minimum-bazel-version/newer-patch/after/.bazelversion | 2 +- .../newer-patch/before/.bazelversion | 2 +- .../minimum-bazel-version/older-major/after/.bazelversion | 2 +- .../minimum-bazel-version/older-minor/after/.bazelversion | 2 +- .../older-minor/before/.bazelversion | 2 +- .../minimum-bazel-version/older-patch/after/.bazelversion | 1 + .../older-patch/before/.bazelversion | 1 + .../policies/minimum-bazel-version/policy.yml | 8 ++++---- 14 files changed, 17 insertions(+), 15 deletions(-) create mode 100644 repo_policy_sync/policies/minimum-bazel-version/older-patch/after/.bazelversion create mode 100644 repo_policy_sync/policies/minimum-bazel-version/older-patch/before/.bazelversion diff --git a/repo_policy_sync/docs/reference/policy-format.md b/repo_policy_sync/docs/reference/policy-format.md index 2492bad..6f05cac 100644 --- a/repo_policy_sync/docs/reference/policy-format.md +++ b/repo_policy_sync/docs/reference/policy-format.md @@ -300,7 +300,7 @@ layout with an executable example. ```yaml - type: ensure_minimum_version path: .bazelversion - minimum_version: 8.6.0 + minimum_version: 8.8.2 ``` Ensures an existing `major.minor.patch` version is at least the specified diff --git a/repo_policy_sync/policies/README.md b/repo_policy_sync/policies/README.md index ca664dc..6b39188 100644 --- a/repo_policy_sync/policies/README.md +++ b/repo_policy_sync/policies/README.md @@ -31,7 +31,7 @@ use the [documentation index](../docs/README.md). | `dev-dependency-alignment` | Keep selected Bazel toolchain and validation dependencies development-only while keeping `score_docs_as_code` in the normal dependency graph. | Baseline maintenance | | `docs-as-code-gitignore` | Maintain a marked `score_docs_as_code` Git ignore block and remove legacy configuration files. | Baseline maintenance and one-time cleanup | | `minimal-bazel-module-declaration` | Keep `MODULE.bazel` limited to the repository-owned module name by removing version metadata. | One-time cleanup | -| `minimum-bazel-version` | Upgrade repositories to at least Bazel `8.6.0` and regenerate the lockfile when required. | Baseline maintenance | +| `minimum-bazel-version` | Upgrade repositories to at least Bazel `8.8.2` and regenerate the lockfile when required. | Baseline maintenance | | `minimum-github-action-versions` | Keep `actions/checkout` at semantic version `v6` or newer in GitHub workflows. | Baseline maintenance | | `score-devcontainer-dependency-alignment` | Declare the direct SCORE devcontainer Bazel dependency using the Dockerfile image version. | One-time integration | | `score-devcontainer-run-tool` | Keep the executable SCORE devcontainer tool launcher synchronized with its policy-owned asset. | Baseline maintenance | diff --git a/repo_policy_sync/policies/minimum-bazel-version/minimum/after/.bazelversion b/repo_policy_sync/policies/minimum-bazel-version/minimum/after/.bazelversion index acd405b..11f1d47 100644 --- a/repo_policy_sync/policies/minimum-bazel-version/minimum/after/.bazelversion +++ b/repo_policy_sync/policies/minimum-bazel-version/minimum/after/.bazelversion @@ -1 +1 @@ -8.6.0 +8.8.2 diff --git a/repo_policy_sync/policies/minimum-bazel-version/minimum/before/.bazelversion b/repo_policy_sync/policies/minimum-bazel-version/minimum/before/.bazelversion index acd405b..11f1d47 100644 --- a/repo_policy_sync/policies/minimum-bazel-version/minimum/before/.bazelversion +++ b/repo_policy_sync/policies/minimum-bazel-version/minimum/before/.bazelversion @@ -1 +1 @@ -8.6.0 +8.8.2 diff --git a/repo_policy_sync/policies/minimum-bazel-version/newer-minor/after/.bazelversion b/repo_policy_sync/policies/minimum-bazel-version/newer-minor/after/.bazelversion index df5119e..e5c1510 100644 --- a/repo_policy_sync/policies/minimum-bazel-version/newer-minor/after/.bazelversion +++ b/repo_policy_sync/policies/minimum-bazel-version/newer-minor/after/.bazelversion @@ -1 +1 @@ -8.7.0 +8.9.0 diff --git a/repo_policy_sync/policies/minimum-bazel-version/newer-minor/before/.bazelversion b/repo_policy_sync/policies/minimum-bazel-version/newer-minor/before/.bazelversion index df5119e..e5c1510 100644 --- a/repo_policy_sync/policies/minimum-bazel-version/newer-minor/before/.bazelversion +++ b/repo_policy_sync/policies/minimum-bazel-version/newer-minor/before/.bazelversion @@ -1 +1 @@ -8.7.0 +8.9.0 diff --git a/repo_policy_sync/policies/minimum-bazel-version/newer-patch/after/.bazelversion b/repo_policy_sync/policies/minimum-bazel-version/newer-patch/after/.bazelversion index f6f89a8..ce7520b 100644 --- a/repo_policy_sync/policies/minimum-bazel-version/newer-patch/after/.bazelversion +++ b/repo_policy_sync/policies/minimum-bazel-version/newer-patch/after/.bazelversion @@ -1 +1 @@ -8.6.1 +8.8.3 diff --git a/repo_policy_sync/policies/minimum-bazel-version/newer-patch/before/.bazelversion b/repo_policy_sync/policies/minimum-bazel-version/newer-patch/before/.bazelversion index f6f89a8..ce7520b 100644 --- a/repo_policy_sync/policies/minimum-bazel-version/newer-patch/before/.bazelversion +++ b/repo_policy_sync/policies/minimum-bazel-version/newer-patch/before/.bazelversion @@ -1 +1 @@ -8.6.1 +8.8.3 diff --git a/repo_policy_sync/policies/minimum-bazel-version/older-major/after/.bazelversion b/repo_policy_sync/policies/minimum-bazel-version/older-major/after/.bazelversion index acd405b..11f1d47 100644 --- a/repo_policy_sync/policies/minimum-bazel-version/older-major/after/.bazelversion +++ b/repo_policy_sync/policies/minimum-bazel-version/older-major/after/.bazelversion @@ -1 +1 @@ -8.6.0 +8.8.2 diff --git a/repo_policy_sync/policies/minimum-bazel-version/older-minor/after/.bazelversion b/repo_policy_sync/policies/minimum-bazel-version/older-minor/after/.bazelversion index acd405b..11f1d47 100644 --- a/repo_policy_sync/policies/minimum-bazel-version/older-minor/after/.bazelversion +++ b/repo_policy_sync/policies/minimum-bazel-version/older-minor/after/.bazelversion @@ -1 +1 @@ -8.6.0 +8.8.2 diff --git a/repo_policy_sync/policies/minimum-bazel-version/older-minor/before/.bazelversion b/repo_policy_sync/policies/minimum-bazel-version/older-minor/before/.bazelversion index 85e2cd5..df5119e 100644 --- a/repo_policy_sync/policies/minimum-bazel-version/older-minor/before/.bazelversion +++ b/repo_policy_sync/policies/minimum-bazel-version/older-minor/before/.bazelversion @@ -1 +1 @@ -8.5.2 +8.7.0 diff --git a/repo_policy_sync/policies/minimum-bazel-version/older-patch/after/.bazelversion b/repo_policy_sync/policies/minimum-bazel-version/older-patch/after/.bazelversion new file mode 100644 index 0000000..11f1d47 --- /dev/null +++ b/repo_policy_sync/policies/minimum-bazel-version/older-patch/after/.bazelversion @@ -0,0 +1 @@ +8.8.2 diff --git a/repo_policy_sync/policies/minimum-bazel-version/older-patch/before/.bazelversion b/repo_policy_sync/policies/minimum-bazel-version/older-patch/before/.bazelversion new file mode 100644 index 0000000..eec6dac --- /dev/null +++ b/repo_policy_sync/policies/minimum-bazel-version/older-patch/before/.bazelversion @@ -0,0 +1 @@ +8.8.1 diff --git a/repo_policy_sync/policies/minimum-bazel-version/policy.yml b/repo_policy_sync/policies/minimum-bazel-version/policy.yml index ad1f23b..83332e9 100644 --- a/repo_policy_sync/policies/minimum-bazel-version/policy.yml +++ b/repo_policy_sync/policies/minimum-bazel-version/policy.yml @@ -10,11 +10,11 @@ # # SPDX-License-Identifier: Apache-2.0 # ******************************************************************************* -title: "chore(bazel): keep the declared version at 8.6.0 or newer" +title: "chore(bazel): keep the declared version at 8.8.2 or newer" legacy_names: [bazel.minimum-version] description: | - Bazel versions older than `8.6.0` are no longer supported, due to a breaking - change in how they handle `compatibility_level`. + Require Bazel `8.8.2` or newer to address the eMudhra CA security issue + across repositories. when: file_exists: .bazelversion @@ -22,7 +22,7 @@ when: ensure: - type: ensure_minimum_version path: .bazelversion - minimum_version: 8.6.0 + minimum_version: 8.8.2 after_apply: - command: [bazel, mod, deps]