build: update bazel dependencies (main) #32300

angular-robot · 2026-01-15T06:08:21Z

This PR contains the following updates:

Package	Type	Update	Change
aspect_bazel_lib	bazel_dep	patch	`2.22.2` → `2.22.5`
aspect_rules_js	bazel_dep	minor	`2.8.3` → `2.9.1`
aspect_rules_ts	bazel_dep	patch	`3.8.1` → `3.8.3`
rules_nodejs	bazel_dep	minor	`6.6.2` → `6.7.3`

Release Notes

aspect-build/rules_js (aspect_rules_js)

`v2.9.1`

Many companies are successfully building with rules_js.
If you're getting value from the project, please let us know!
Just comment on our Adoption Discussion.

Using Bzlmod with Bazel 6:

Add to your MODULE.bazel file:

bazel_dep(name = "aspect_rules_js", version = "2.9.1")

####### Node.js version #########

# By default you get the node version from DEFAULT_NODE_VERSION in @&#8203;rules_nodejs//nodejs:repositories.bzl
# Optionally you can pin a different node version:
bazel_dep(name = "rules_nodejs", version = "6.3.0")
node = use_extension("@&#8203;rules_nodejs//nodejs:extensions.bzl", "node", dev_dependency = True)
node.toolchain(node_version = "18.14.2")

#################################

npm = use_extension("@&#8203;aspect_rules_js//npm:extensions.bzl", "npm", dev_dependency = True)

npm.npm_translate_lock(
    name = "npm",
    pnpm_lock = "//:pnpm-lock.yaml",
    verify_node_modules_ignored = "//:.bazelignore",
)

use_repo(npm, "npm")

pnpm = use_extension("@&#8203;aspect_rules_js//npm:extensions.bzl", "pnpm")

# Allows developers to use the matching pnpm version, for example:

# bazel run -- @&#8203;pnpm --dir /home/runner/work/rules_js/rules_js install
use_repo(pnpm, "pnpm")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "aspect_rules_js",
    sha256 = "b87afa2205b6fa4540e01d2c47b02a92ed67e24e24f738d46c4c8099836a769a",
    strip_prefix = "rules_js-2.9.1",
    url = "https://github.com/aspect-build/rules_js/releases/download/v2.9.1/rules_js-v2.9.1.tar.gz",
)

load("@&#8203;aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")

rules_js_dependencies()

load("@&#8203;aspect_rules_js//js:toolchains.bzl", "DEFAULT_NODE_VERSION", "rules_js_register_toolchains")

rules_js_register_toolchains(node_version = DEFAULT_NODE_VERSION)

load("@&#8203;aspect_rules_js//npm:repositories.bzl", "npm_translate_lock")

npm_translate_lock(
    name = "npm",
    npmrc = "//:.npmrc",
    pnpm_lock = "//:pnpm-lock.yaml",
    verify_node_modules_ignored = "//:.bazelignore",
)

load("@&#8203;npm//:repositories.bzl", "npm_repositories")

npm_repositories()

What's Changed

chore: update Next.js version to 15.2.6 by @scottshuffler in #2591
Fix fetching npm packages from git repositories by @thomasdraebing in #2403
fix: do not serialize Label() via "".join() when tar command fails by @jbedard in #2593
chore: add github_user_id to bcr metadata.template.json by @jbedard in #2588
fix(pnpm): Parse integrity hash from package.json packageManager if provided by @Geethree in #2596
fix: npm deps on git+https urls by @jbedard in #2592
chore(deps): update actions/checkout action to v6 by @renovate[bot] in #2523
chore(deps): update peter-evans/create-pull-request action to v8 by @renovate[bot] in #2572
chore(deps): update bazel-contrib/publish-to-bcr action to v1.1.0 by @renovate[bot] in #2599
test: move babel test deps into test/node-patches/package.json by @jbedard in #2598
chore(deps): update actions/cache action to v5 by @renovate[bot] in #2602

New Contributors

@scottshuffler made their first contribution in #2591
@thomasdraebing made their first contribution in #2403
@Geethree made their first contribution in #2596

Full Changelog: aspect-build/rules_js@v2.9.0...v2.9.1

aspect-build/rules_ts (aspect_rules_ts)

`v3.8.3`

Using Bzlmod:

Add to your MODULE.bazel file:

bazel_dep(name = "aspect_rules_ts", version = "3.8.3")

rules_ts_ext = use_extension("@&#8203;aspect_rules_ts//ts:extensions.bzl", "ext", dev_dependency = True)

rules_ts_ext.deps(
    ts_version_from = "//:package.json",
)

use_repo(rules_ts_ext, "npm_typescript")

Using legacy WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "aspect_rules_ts",
    sha256 = "b3c7925b1409b7d941a566ae2828ddecdb22a90fbe6e8900acdbaae9b602180a",
    strip_prefix = "rules_ts-3.8.3",
    url = "https://github.com/aspect-build/rules_ts/releases/download/v3.8.3/rules_ts-v3.8.3.tar.gz",
)

##################

# rules_ts setup #
##################

# Fetches the rules_ts dependencies.
# If you want to have a different version of some dependency,

# you should fetch it *before* calling this.
# Alternatively, you can skip calling this function, so long as you've

# already fetched all the dependencies.
load("@&#8203;aspect_rules_ts//ts:repositories.bzl", "rules_ts_dependencies")

rules_ts_dependencies(
    # This keeps the TypeScript version in-sync with the editor, which is typically best.
    ts_version_from = "//:package.json",

    # Alternatively, you could pick a specific version, or use
    # load("@&#8203;aspect_rules_ts//ts:repositories.bzl", "LATEST_TYPESCRIPT_VERSION")
    # ts_version = LATEST_TYPESCRIPT_VERSION
)

load("@&#8203;aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")

rules_js_dependencies()

load("@&#8203;aspect_rules_js//js:toolchains.bzl", "DEFAULT_NODE_VERSION", "rules_js_register_toolchains")

rules_js_register_toolchains(node_version = DEFAULT_NODE_VERSION)

load("@&#8203;aspect_rules_js//npm:repositories.bzl", "npm_translate_lock")

npm_translate_lock(
    name = "npm",
    npmrc = "//:.npmrc",
    pnpm_lock = "//:pnpm-lock.yaml",
    verify_node_modules_ignored = "//:.bazelignore",
)

load("@&#8203;npm//:repositories.bzl", "npm_repositories")

npm_repositories()

# Register aspect_bazel_lib toolchains;

# If you use npm_translate_lock or npm_import from aspect_rules_js you can omit this block.
load("@&#8203;aspect_bazel_lib//lib:repositories.bzl", "aspect_bazel_lib_dependencies")

aspect_bazel_lib_dependencies()

To use rules_ts with bazel-lib 2.x, you must additionally register the coreutils toolchain.

load("@&#8203;aspect_bazel_lib//lib:repositories.bzl", "register_coreutils_toolchains")

register_coreutils_toolchains()

What's Changed

refactor: prepare support for rules_js v3 by @jbedard in #878
chore: remove unnecessary aspect_bazel_lib version override in tests by @jbedard in #879

Full Changelog: aspect-build/rules_ts@v3.8.2...v3.8.3

`v3.8.2`

Using Bzlmod:

Add to your MODULE.bazel file:

bazel_dep(name = "aspect_rules_ts", version = "3.8.2")

rules_ts_ext = use_extension("@&#8203;aspect_rules_ts//ts:extensions.bzl", "ext", dev_dependency = True)

rules_ts_ext.deps(
    ts_version_from = "//:package.json",
)

use_repo(rules_ts_ext, "npm_typescript")

Using legacy WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "aspect_rules_ts",
    sha256 = "a1b67bc493d68d8ebb72f38c57ade1294d8a7e435d2f352c6e7cc53c196e24fe",
    strip_prefix = "rules_ts-3.8.2",
    url = "https://github.com/aspect-build/rules_ts/releases/download/v3.8.2/rules_ts-v3.8.2.tar.gz",
)

##################

# rules_ts setup #
##################

# Fetches the rules_ts dependencies.
# If you want to have a different version of some dependency,

# you should fetch it *before* calling this.
# Alternatively, you can skip calling this function, so long as you've

# already fetched all the dependencies.
load("@&#8203;aspect_rules_ts//ts:repositories.bzl", "rules_ts_dependencies")

rules_ts_dependencies(
    # This keeps the TypeScript version in-sync with the editor, which is typically best.
    ts_version_from = "//:package.json",

    # Alternatively, you could pick a specific version, or use
    # load("@&#8203;aspect_rules_ts//ts:repositories.bzl", "LATEST_TYPESCRIPT_VERSION")
    # ts_version = LATEST_TYPESCRIPT_VERSION
)

load("@&#8203;aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")

rules_js_dependencies()

load("@&#8203;aspect_rules_js//js:toolchains.bzl", "DEFAULT_NODE_VERSION", "rules_js_register_toolchains")

rules_js_register_toolchains(node_version = DEFAULT_NODE_VERSION)

load("@&#8203;aspect_rules_js//npm:repositories.bzl", "npm_translate_lock")

npm_translate_lock(
    name = "npm",
    npmrc = "//:.npmrc",
    pnpm_lock = "//:pnpm-lock.yaml",
    verify_node_modules_ignored = "//:.bazelignore",
)

load("@&#8203;npm//:repositories.bzl", "npm_repositories")

npm_repositories()

# Register aspect_bazel_lib toolchains;

# If you use npm_translate_lock or npm_import from aspect_rules_js you can omit this block.
load("@&#8203;aspect_bazel_lib//lib:repositories.bzl", "aspect_bazel_lib_dependencies")

aspect_bazel_lib_dependencies()

To use rules_ts with bazel-lib 2.x, you must additionally register the coreutils toolchain.

load("@&#8203;aspect_bazel_lib//lib:repositories.bzl", "register_coreutils_toolchains")

register_coreutils_toolchains()

What's Changed

fix: trigger auto-release when updating typescript version by @alexeagle in #864

Full Changelog: aspect-build/rules_ts@v3.8.1...v3.8.2

bazel-contrib/rules_nodejs (rules_nodejs)

`v6.7.3`

Using Bzlmod with Bazel 6 or greater

(Bazel 6 only) Enable with common --enable_bzlmod in .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_nodejs", version = "6.7.3")

Using WORKSPACE

Paste this snippet into your WORKSPACE.bazel file:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
    name = "rules_nodejs",
    sha256 = "32894b914e4aed4245afdcece6fad94413f7f86eaefb863ff71e8ba6e5992b6b",
    strip_prefix = "rules_nodejs-6.7.3",
    url = "https://github.com/bazel-contrib/rules_nodejs/releases/download/v6.7.3/rules_nodejs-v6.7.3.tar.gz",
)

What's Changed

feat: change nodejs default to 22 by @jbedard in #3891
chore: test on bazel 9 by @alexeagle in #3880
chore: update gha deps by @jbedard in #3892

Full Changelog: bazel-contrib/rules_nodejs@v6.6.3...v6.7.3

If you want to rebase/retry this PR, check this box

See associated pull request for more information.

build: update bazel dependencies

c25b214

See associated pull request for more information.

angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Jan 15, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build: update bazel dependencies (main) #32300

build: update bazel dependencies (main) #32300

angular-robot commented Jan 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

build: update bazel dependencies (main) #32300

Are you sure you want to change the base?

build: update bazel dependencies (main) #32300

Conversation

angular-robot commented Jan 15, 2026

Release Notes

v2.9.1

Using Bzlmod with Bazel 6:

Using WORKSPACE

What's Changed

New Contributors

v3.8.3

Using Bzlmod:

Using legacy WORKSPACE

What's Changed

v3.8.2

Using Bzlmod:

Using legacy WORKSPACE

What's Changed

v6.7.3

Using Bzlmod with Bazel 6 or greater

Using WORKSPACE

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v2.9.1`

`v3.8.3`

`v3.8.2`

`v6.7.3`