build(deps): bump the bazel-packages group with 2 updates

[dependabot]

Bumps the bazel-packages group with 2 updates: bazel_skylib and rules_cc.

Updates bazel_skylib from 1.8.2 to 1.9.2

Release notes

Sourced from bazel_skylib's releases.

1.9.2

MODULE.bazel setup

bazel_dep(name = "bazel_skylib", version = "1.9.2")

And for the Gazelle plugin:

bazel_dep(name = "bazel_skylib_gazelle_plugin", version = "1.9.2", dev_dependency = True)

WORKSPACE setup

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
name = "bazel_skylib",
sha256 = "37cdfbc6faefea94f7b37760a305c98c08981116c2bc9e821e3b423221fad8c8",
urls = [
"https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-1.9.2.tar.gz",
"https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-1.9.2.tar.gz",
],
)
load("@​bazel_skylib//:workspace.bzl", "bazel_skylib_workspace")
bazel_skylib_workspace()

Additional WORKSPACE setup for the Gazelle plugin

http_archive(
    name = "bazel_skylib_gazelle_plugin",
    sha256 = "ebcbf7bc491b28332c40b2db524d0a37e2e8feebbf099ad51561531c1efbba47",
    urls = [
        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-gazelle-plugin-1.9.2.tar.gz",
        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.2/bazel-skylib-gazelle-plugin-1.9.2.tar.gz",
    ],
)
load("@​bazel_skylib_gazelle_plugin//:workspace.bzl", "bazel_skylib_gazelle_plugin_workspace")
bazel_skylib_gazelle_plugin_workspace()
load("@​bazel_skylib_gazelle_plugin//:setup.bzl", "bazel_skylib_gazelle_plugin_setup")
</tr></table>

... (truncated)

Changelog

Sourced from bazel_skylib's changelog.

Release 1.9.2

What's Changed

• Revert allow_symlink = True by default for non-executables
• Change from stamp to some other boolean flag
• Update Bazel versions in CI: drop Bazel 6, add Bazel 9
• Change Starlark flag default propagation from "universal" to "target"

Contributors: @​gzm0, @​kotlaja, @​susinmotion, @​justinhorvitz

Release 1.9.1

Skipped due to CI failure

Release 1.9.0

What's Changed

• Optimize copy_file and set allow_symlink by default to True if is_executable is False (#565)
• Give rules/private:is_windows an empty applicable_license (#600)
• Bump rules_go dependency for compatibility with Bazel 9 (#601)

Contributors: @​fdinoff, @​fmeum, @​fweikert, @​susinmotion

Full Changelog: bazelbuild/bazel-skylib@1.8.2...1.9.0

Commits

• 3de43ed Create release 1.9.2 (#630)
• bac104b Remove private visibility on "always_true" conditions (#629)
• 72291d1 Create release 1.9.1 (#620)
• 390ecf8 No-op: change written default scope from 'universal' to 'target' (#608)
• f7718b7 Change from stamp to some other boolean flag (#611)
• 7b2f6de Update Bazel versions in CI: drop Bazel 6, add Bazel 9 (#613)
• ea054fc Revert allow_symlink = True by default for non-executables (#605)
• 53f6d0d Prepare release 1.9.0 (#603)
• 33c19ce Bump rules_go from 0.52.0 to 0.59.0 (#601)
• 00de429 rules/private:is_windows should have empty applicable_licenses (#600)
• Additional commits viewable in compare view

Updates rules_cc from 0.2.14 to 0.2.22

Release notes

Sourced from rules_cc's releases.

0.2.22

Using bzlmod with Bazel 6 or later:

1. [Bazel 6] Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_cc", version = "0.2.22")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
name = "rules_cc",
sha256 = "81c10a95a5c22d838276ee90d712635d6042419fdfca5ef88328226b6321e53b",
strip_prefix = "rules_cc-0.2.22",
url = "https://github.com/bazelbuild/rules_cc/releases/download/0.2.22/rules_cc-0.2.22.tar.gz",
)
load("@​rules_cc//cc:extensions.bzl", "compatibility_proxy_repo")
compatibility_proxy_repo()

What's Changed

Other notable changes

• Propagate cc_shared_library GraphStructureAspect to toolchains. by @​lilygorsheneva in 840d5327f513f2cfa1bb13be70eaaf11b4556e4d
• Fix kwargs handling in c++20 modules functions. by @​lilygorsheneva in 0662ed273bffd3796f9493a9e02f0d65e0da0acf

Default toolchain changes

• Add -mmacosx-version-min back to default toolchain by @​keith in 21e14308c2afc7691f43295acc9852d9a6844f04

Rules based toolchain changes

• Add macOS ThinLTO arguments by @​dzbarsky in 9b321830c1a84415bc139d29e5864b3bb7f1b474

Full Changelog: bazelbuild/rules_cc@0.2.21...0.2.22

0.2.21

Using bzlmod with Bazel 6 or later:

... (truncated)

Commits

• 21e1430 Add -mmacosx-version-min back to default toolchain
• 0662ed2 Fix kwargs handling in c++20 modules functions.
• 840d532 Propagate cc_shared_library GraphStructureAspect to toolchains.
• cb55cca Use custom params file naming support for LTO indexing
• 56e38b4 Move C++ dwp/fission tests to rules_cc.
• 9b32183 Add macOS ThinLTO arguments
• 1a20833 Change default needs_include_validation to match createCppCompileAction's par...
• fad3ad3 Starlarkify compute_output_name_prefix_dir
• 593d6fc Remove unused variable
• 084155d Automatic code cleanup.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[pr-commenter]

Benchmarks

Benchmark execution time: 2026-08-01 19:31:44

Comparing candidate commit e5c3ea0 in PR branch dependabot/bazel/bazel-packages-6309e737a9 with baseline commit 95cf14e in branch main.

Found 0 performance improvements and 1 performance regressions! Performance is the same for 7 metrics, 0 unstable metrics.

Explanation

This is an A/B test comparing a candidate commit's performance against that of a baseline commit. Performance changes are noted in the tables below as:

• 🟩 = significantly better candidate vs. baseline
• 🟥 = significantly worse candidate vs. baseline

We compute a confidence interval (CI) over the relative difference of means between metrics from the candidate and baseline commits, considering the baseline as the reference.

If the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD), the change is considered significant.

Feel free to reach out to #apm-benchmarking-platform on Slack if you have any questions.

More details about the CI and significant changes

You can imagine this CI as a range of values that is likely to contain the true difference of means between the candidate and baseline commits.

CIs of the difference of means are often centered around 0%, because often changes are not that big:

---------------------------------(------|---^--------)-------------------------------->
                              -0.6%    0%  0.3%     +1.2%
                                 |          |        |
         lower bound of the CI --'          |        |
sample mean (center of the CI) -------------'        |
         upper bound of the CI ----------------------'

As described above, a change is considered significant if the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD).

For instance, for an execution time metric, this confidence interval indicates a significantly worse performance:

----------------------------------------|---------|---(---------^---------)---------->
                                       0%        1%  1.3%      2.2%      3.1%
                                                  |   |         |         |
       significant impact threshold --------------'   |         |         |
                      lower bound of CI --------------'         |         |
       sample mean (center of the CI) --------------------------'         |
                      upper bound of CI ----------------------------------'

scenario:BM_TraceTinyCCSource

• 🟥 execution_time [+1.535ms; +1.768ms] or [+2.077%; +2.392%]