Update dependency rules_python to v1.6.0 #514

renovate · 2025-06-26T22:35:52Z

This PR contains the following updates:

Package	Type	Update	Change
rules_python	bazel_dep	minor	`1.1.0` -> `1.6.0`
rules_python	http_archive	minor	`1.1.0` -> `1.6.0`

Release Notes

bazel-contrib/rules_python (rules_python)

`v1.6.0`

Compare Source

{#v1-6-0-changed}

Changed

(gazelle) update minimum gazelle version to 0.36.0 - may cause BUILD file changes
(gazelle) update minimum rules_go version to 0.55.1
(gazelle) remove custom go-tree-sitter module BUILD file
(gazelle) For package mode, resolve dependencies when imports are relative
to the package path. This is enabled via the
# gazelle:python_experimental_allow_relative_imports true directive ({gh-issue}2203).
(gazelle) Types for exposed members of python.ParserOutput are now all public.
(gazelle) Removed the requirement for __init__.py, __main__.py, or __test__.py files to be
present in a directory to generate a BUILD.bazel file.
(toolchain) Updated the following toolchains to build 20250808 to patch CVE-2025-47273:
- 3.9.23
- 3.10.18
- 3.11.13
- 3.12.11
- 3.14.0rc1
(toolchain) Python 3.13 now references 3.13.6
(gazelle) Switched back to smacker/go-tree-sitter, fixing
#2630
(pypi) From now on the list of default platforms only includes linux_x86_64, linux_aarch64,
osx_x86_64, osx_aarch64 and windows_x86_64. If you are on other platforms, you need to
use the pip.default to configure it yourself. If you are interested in graduating the
platform, consider helping set us up CI for them and update the documentation.
(ci) We are now testing on Ubuntu 22.04 for RBE and non-RBE configurations.
(core) #!/usr/bin/env bash is now used as a shebang in the stage1 bootstrap template.
(gazelle:docs) The Gazelle docs have been migrated from {gh-path}gazelle/README.md to
{gh-path}gazelle/docs and are now available on the primary documentation site
at https://rules-python.readthedocs.io/en/latest/gazelle/docs/index.html

{#v1-6-0-fixed}

Fixed

(toolchains) local_runtime_repo now respects changes to the DEVELOPER_DIR and XCODE_VERSION
repo env vars, fixing stale cache issues on macOS with system (i.e. Xcode-supplied) Python
(#3123).
(pypi) Fixes an issue where builds using a bazel vendor vendor directory
would fail if the constraints file contained environment markers. Fixes
#2996.
(pypi) Wheels with BUILD.bazel (or other special Bazel files) no longer
result in missing files at runtime
(#2782).
(runfiles) The pypi runfiles package now includes py.typed to indicate it
supports type checking
(#2503).
(pypi) The pipstar defaults configuration now supports any custom platform
name.
(pypi) The selection of the whls has been changed and should no longer result
in ambiguous select matches ({gh-issue}2759) and should be much more efficient
when running bazel query due to fewer repositories being included
({gh-issue}2849).
Multi-line python imports (e.g. with escaped newlines) are now correctly processed by Gazelle.
(toolchains) local_runtime_repo works with multiarch Debian with Python 3.8
(#3099).
(pypi) Expose pypi packages only common to all Python versions in all_requirements
(#2921).
(repl) Normalize the path for the REPL stub to make it possible to use the
default stub template from outside rules_python ({gh-issue}3101).
(gazelle) Fixes gazelle adding sibling module dependencies to resolve
absolute imports (Python 2's behavior without absolute_import). Previous
behavior can be restored using the directive
# gazelle:python_resolve_sibling_imports true
(pypi) Show overridden index URL of packages when downloading metadata have failed.
(#2985).
(toolchains) use "command -v" to find interpreter in $PATH
(#3150).
(pypi) bazel vendor now works in bzlmod ({gh-issue}3079).
(toolchains) local_runtime_repo now works on Windows
(#3055).
(toolchains) local_runtime_repo supports more types of Python
installations (Mac frameworks, missing dynamic libraries, and other
esoteric cases, see
#3148 for details).
(pypi) Support requirements.txt files that use different versions of the same
package targeting different target platforms.
(#2797).
(py_wheel) Add directories in deterministic order.

{#v1-6-0-added}

Added

(repl) Default stub now has tab completion, where readline support is available,
see (#3114).
(#3114).
(pypi) To configure the environment for requirements.txt evaluation, use the newly added
developer preview of the pip.default tag class. Only rules_python and root modules can use
this feature. You can also configure custom config_settings using pip.default. It
can also be used to set the global netrc or auth_patterns variables.
(pypi) PyPI dependencies now expose an :extracted_whl_files filegroup target
of all the files extracted from the wheel. This can be used in lieu of
{obj}whl_filegroup to avoid copying/extracting wheel multiple times to
get a subset of their files.
(gazelle) New directive gazelle:python_generate_pyi_deps; when true,
dependencies added to satisfy type-only imports (if TYPE_CHECKING) and type
stub packages are added to pyi_deps instead of deps.
(toolchain) Add toolchains for aarch64 windows for
- 3.11.13
- 3.12.11
- 3.13.6
- 3.14.0rc1
(gazelle): New annotation gazelle:include_pytest_conftest. When not set (the
default) or true, gazelle will inject any conftest.py file found in the same
directory as a {obj}py_test target to that {obj}py_test target's deps.
This behavior is unchanged from previous versions. When false, the :conftest
dep is not added to the {obj}py_test target.
(gazelle) New directive gazelle:python_generate_proto; when true,
Gazelle generates py_proto_library rules for proto_library. false by default.
- Note: Users must manually configure their Gazelle target to support the
  proto language.
(gazelle) New directive gazelle:python_proto_naming_convention; controls
naming of py_proto_library rules.

{#v1-6-0-removed}

Removed

Nothing removed.

{#v1-5-4}

`v1.5.4`

Compare Source

{#v1-5-4-fixed}

Fixed

(toolchains) local_runtime_repo now checks if the include directory exists
before attempting to watch it, fixing issues on macOS with system Python
(#3043).

{#v1-5-3}

`v1.5.3`

Compare Source

Fixed

(toolchains) local_runtime_repo now checks if the include directory exists
before attempting to watch it, fixing issues on macOS with system Python
(#3043).

{#v1-5-2}

`v1.5.2`

Compare Source

{#v1-5-2-changed}

Changed

(deps) (bzlmod) Upgraded to bazel-skylib version
1.8.1
to remove deprecation warnings.

{#v1-5-2-fixed}

Fixed

(pypi) Correctly pull sdist distributions using pip
(#3131).
(core) builds work again on 7.x WORKSPACE configurations
(#3119).

{#v1-5-1}

`v1.5.1`

Compare Source

{#v1-5-1-fixed}

Fixed

(pypi) Namespace packages work by default (pkgutil shims are generated
by default again)
(#3038).

{#v1-5-0}

`v1.5.0`

Compare Source

{#v1-5-0-changed}

Changed

(toolchain) Bundled toolchain version updates:
- 3.9 now references 3.9.23
- 3.10 now references 3.10.18
- 3.11 now references 3.11.13
- 3.12 now references 3.12.11
- 3.13 now references 3.13.4
(rules) On Windows, {obj}--bootstrap_impl=system_python is forced. This
allows setting --bootstrap_impl=script in bazelrc for mixed-platform
environments.
(rules) {obj}compile_pip_requirements now generates a .test target. The
_test target is deprecated and will be removed in the next major release.
(#2794
(py_wheel) py_wheel always creates zip64-capable wheel zips
(providers) (experimental) {obj}PyInfo.venv_symlinks replaces
PyInfo.site_packages_symlinks
(deps) Updated setuptools to 78.1.1 to patch CVE-2025-47273. This effectively makes
Python 3.9 the minimum supported version for using pip_parse.

{#v1-5-0-fixed}

Fixed

(rules) PyInfo provider is now advertised by py_test, py_binary, and py_library;
this allows aspects using required_providers to function correctly.
(#2506).
Fixes when using {obj}--bootstrap_impl=script:
- compile_pip_requirements now works with it
- The sys._base_executable value will reflect the underlying interpreter,
  not venv interpreter.
- The {obj}//python/runtime_env_toolchains:all toolchain now works with it.
(rules) Better handle flakey platform.win32_ver() calls by calling them
multiple times.
(tools/wheelmaker.py) Extras are now preserved in Requires-Dist metadata when using requires_file
to specify the requirements.
(pypi) Use bazel downloader for direct URL references and correctly detect the filenames from
various URL formats - URL encoded version strings get correctly resolved, sha256 value can be
also retrieved from the URL as opposed to only the --hash parameter. Fixes
#2363.
(pypi) whl_library now infers file names from its urls attribute correctly.
(pypi) When running under bazel test, be sure that temporary requirements file
remains writable.
(py_test, py_binary) Allow external files to be used for main
(pypi) Correctly aggregate the sources when the hashes specified in the lockfile differ
by platform even though the same version is used. Fixes #2648.
(pypi) compile_pip_requirements test rule works behind the proxy
(toolchains) The hermetic toolchains now correctly statically advertise the
releaselevel and serial for pre-release hermetic toolchains ({gh-issue}2837).

{#v1-5-0-added}

Added

Repo utilities execute_unchecked, execute_checked, and execute_checked_stdout now
support log_stdout and log_stderr keyword arg booleans. When these are True
(the default), the subprocess's stdout/stderr will be logged.
(toolchains) Local toolchains can be activated with custom flags. See
[Conditionally using local toolchains] docs for how to configure.
(pypi) Starlark-based evaluation of environment markers (requirements.txt conditionals)
available (not enabled by default) for improved multi-platform build support.
Set the RULES_PYTHON_ENABLE_PIPSTAR=1 environment variable to enable it.
(utils) Add a way to run a REPL for any rules_python target that returns
a PyInfo provider.
(uv) Handle .netrc and auth_patterns auth when downloading uv. Work towards
#1975.
(toolchains) Arbitrary python-build-standalone runtimes can be registered
and activated with custom flags. See the [Registering custom runtimes]
docs and {obj}single_version_platform_override() API docs for more
information.
(rules) Added support for a using constraints files with compile_pip_requirements.
Useful when an intermediate dependency needs to be upgraded to pull in
security patches.
(toolchains): 3.14.0b2 has been added as a preview.

{#v1-5-0-removed}

Removed

Nothing removed.

{#v1-4-2}

`v1.4.2`

Compare Source

Fixed

(toolchains) local_runtime_repo now checks if the include directory exists
before attempting to watch it, fixing issues on macOS with system Python
(#3043).

{#v1-4-1}

`v1.4.1`

Compare Source

{#v1-4-1-fixed}

Fixed

(pypi) Fix a typo not allowing users to benefit from using the downloader when the hashes in the
requirements file are not present. Fixes
#2863.

{#v1-4-0}

`v1.4.0`

Compare Source

{#v1-4-0-changed}

Changed

(toolchain) The exec configuration toolchain now has the forwarded
exec_interpreter now also forwards the ToolchainInfo provider. This is
for increased compatibility with the RBE setups where access to the exec
configuration interpreter is needed.
(toolchains) Use the latest astral-sh toolchain release 20250317 for Python versions:
- 3.9.21
- 3.10.16
- 3.11.11
- 3.12.9
- 3.13.2
(pypi) Use xcrun xcodebuild --showsdks to find XCode root.
(toolchains) Remove all but 3.8.20 versions of the Python 3.8 interpreter who has
reached EOL. If users still need other versions of the 3.8 interpreter, please supply
the URLs manually {bzl:obj}python.toolchain or {bzl:obj}python_register_toolchains calls.
(toolchains) Previously #2636
changed the semantics of ignore_root_user_error from "ignore" to "warning". This is now
flipped back to ignoring the issue, and will only emit a warning when the attribute is set
False.
(pypi) The PyPI extension will no longer write the lock file entries as the
extension has been marked reproducible.
Fixes #2434.
(gazelle) Lazily load and parse manifest files when running Gazelle. This ensures no
manifest files are loaded when Gazelle is run over a set of non-python directories
PR #2746.
(rules) {attr}py_binary.srcs and {attr}py_test.srcs is no longer mandatory when
main_module is specified (for --bootstrap_impl=script)

{#v1-4-0-fixed}

Fixed

(pypi) Platform specific extras are now correctly handled when using
universal lock files with environment markers. Fixes #2690.
(runfiles) ({obj}--bootstrap_impl=script) Follow symlinks when searching for runfiles.
(toolchains) Do not try to run chmod when downloading non-windows hermetic toolchain
repositories on Windows. Fixes
#2660.
(logging) Allow repo rule logging level to be set to FAIL via the RULES_PYTHON_REPO_DEBUG_VERBOSITY environment variable.
(toolchains) The toolchain matching is has been fixed when writing
transitions transitioning on the python_version flag.
Fixes #2685.
(toolchains) Run the check on the Python interpreter in isolated mode, to ensure it's not affected by userland environment variables, such as PYTHONPATH.
(toolchains) Ensure temporary .pyc and .pyo files are also excluded from the interpreters repository files.
(pypi) Run interpreter version call in isolated mode, to ensure it's not affected by userland environment variables, such as PYTHONPATH.
(packaging) An empty requires_file is treated as if it were omitted, resulting in a valid METADATA file.
(rules) py_wheel and sphinxdocs rules now propagate target_compatible_with to all targets they create.
PR #2788.
(pypi) Correctly handle METADATA entries when python_full_version is used in
the environment marker.
Fixes #2319.
(pypi) Correctly handle python_version parameter and transition the requirement
locking to the right interpreter version when using
{obj}compile_pip_requirements rule.
See #2819.

{#v1-4-0-added}

Added

(pypi) From now on sha256 values in the requirements.txt is no longer
mandatory when enabling {attr}pip.parse.experimental_index_url feature.
This means that rules_python will attempt to fetch metadata for all
packages through SimpleAPI unless they are pulled through direct URL
references. Fixes #2023.
In case you see issues with rules_python being too eager to fetch the SimpleAPI
metadata, you can use the newly added {attr}pip.parse.simpleapi_skip
to skip metadata fetching for those packages.
(uv) A {obj}lock rule that is the replacement for the
{obj}compile_pip_requirements. This may still have rough corners
so please report issues with it in the
#1975.
Main highlights - the locking can be done within a build action or outside
it, there is no more automatic test target (but it can be added on the user
side by using native_test). For customizing the uv version that is used,
please check the {obj}uv.configure tag class.
Add support for riscv64 linux platform.
(toolchains) Add python 3.13.2 and 3.12.9 toolchains
(providers) (experimental) PyInfo.site_packages_symlinks field added to
allow specifying links to create within the venv site packages (only
applicable with {obj}--bootstrap_impl=script)
(#2156).
(toolchains) Local Python installs can be used to create a toolchain
equivalent to the standard toolchains. See [Local toolchains] docs for how to
configure them.
(toolchains) Expose $(PYTHON2_ROOTPATH) and $(PYTHON3_ROOTPATH) which are runfiles
locations equivalents of $(PYTHON2) and `$(PYTHON3) respectively.

{#v1-4-0-removed}

Removed

Nothing removed.

{#v1-3-0}

`v1.3.0`

Compare Source

{#v1-3-0-changed}

Changed

(deps) platforms 0.0.4 -> 0.0.11
(py_wheel) Package py_library.pyi_srcs (.pyi files) in the wheel.
(py_package) Package py_library.pyi_srcs (.pyi files) in py_package.
(gazelle) The generated manifest file (default: gazelle_python.yaml) will now include the
YAML document start --- line. Implemented in
#2656.

{#v1-3-0-fixed}

Fixed

(pypi) The ppc64le is now pointing to the right target in the platforms package.
(gazelle) No longer incorrectly merge py_binary targets during partial updates in
file generation mode. Fixed in #2619.
(bzlmod) Running as root is no longer an error. ignore_root_user_error=True
is now the default. Note that running as root may still cause spurious
Bazel cache invalidation
(#1169).
(gazelle) Don't collapse depsets to a list or into args when generating the modules mapping file.
Support spilling modules mapping args into a params file.
(coverage) Fix missing files in the coverage report if they have no tests.
(pypi) From now on python invocations in repository and module extension
evaluation contexts will invoke Python interpreter with -B to avoid
creating .pyc files.
(deps) doublestar 4.7.1 (required for recent Gazelle versions)

{#v1-3-0-added}

Added

(python) {obj}python.defaults has been added to allow users to
set the default python version in the root module by reading the
default version number from a file or an environment variable.
{obj}//python/bin:python: convenience target for directly running an
interpreter. {obj}--//python/bin:python_src can be used to specify a
binary whose interpreter to use.
(uv) Now the extension can be fully configured via bzlmod APIs without the
need to patch rules_python. The documentation has been added to rules_python
docs but usage of the extension may result in your setup breaking without any
notice. What is more, the URLs and SHA256 values will be retrieved from the
GitHub releases page metadata published by the uv project.
(pypi) An extra argument to add the interpreter lib dir to LDFLAGS when
building wheels from sdist.
(pypi) Direct HTTP urls for wheels and sdists are now supported when using
{obj}experimental_index_url (bazel downloader).
Partially fixes #2363.
(rules) APIs for creating custom rules based on the core py_binary, py_test,
and py_library rules
(#1647)
(rules) Added env-var to allow additional interpreter args for stage1 bootstrap.
See {any}RULES_PYTHON_ADDITIONAL_INTERPRETER_ARGS environment variable.
Only applicable for {obj}--bootstrap_impl=script.
(rules) Added {obj}interpreter_args attribute to py_binary and py_test,
which allows pass arguments to the interpreter before the regular args.
(rules) Added {obj}main_module attribute to py_binary and py_test,
which allows specifying a module name to run (i.e. python -m <module>).

{#v1-3-0-removed}

Removed

Nothing removed.

{#v1-2-0}

`v1.2.0`

Compare Source

{#v1-2-0-changed}

Changed

(rules) py_proto_library is deprecated in favour of the
implementation in https://github.com/protocolbuffers/protobuf. It will be
removed in the future release.
(pypi) {obj}pip.override will now be ignored instead of raising an error,
fixes #2550.
(rules) deprecation warnings for deprecated symbols have been turned off by
default for now and can be enabled with RULES_PYTHON_DEPRECATION_WARNINGS
env var.
(pypi) Downgraded versions of packages: pip from 24.3.2 to 24.0.0 and
packaging from 24.2 to 24.0.

{#v1-2-0-fixed}

Fixed

(rules) python_zip_file output with --bootstrap_impl=script works again
(#2596).
(docs) Using python_version attribute for specifying python versions introduced in v1.1.0
(gazelle) Providing multiple input requirements files to gazelle_python_manifest now works correctly.
(pypi) Handle trailing slashes in pip index URLs in environment variables,
fixes #2554.
(runfiles) Runfile manifest and repository mapping files are now interpreted
as UTF-8 on all platforms.
(coverage) Coverage with --bootstrap_impl=script is fixed
(#2572).
(pypi) Non deterministic behaviour in requirement file usage has been fixed
by reverting #2514.
The related issue is #908.
(sphinxdocs) Do not crash when tag_class does not have a populated doc value.
Fixes (#2579).
(binaries/tests) Fix packaging when using --bootstrap_impl=script: set
{obj}--venvs_use_declare_symlink=no to have it not create symlinks at
build time (they will be created at runtime instead).
(Fixes #2489)

{#v1-2-0-added}

Added

Nothing added.

{#v1-2-0-removed}

Removed

Nothing removed.

{#v1-1-0}

bazelbuild/rules_python (rules_python)

`v1.6.0`

Compare Source

{#v1-6-0-changed}

Changed

(gazelle) update minimum gazelle version to 0.36.0 - may cause BUILD file changes
(gazelle) update minimum rules_go version to 0.55.1
(gazelle) remove custom go-tree-sitter module BUILD file
(gazelle) For package mode, resolve dependencies when imports are relative
to the package path. This is enabled via the
# gazelle:python_experimental_allow_relative_imports true directive ({gh-issue}2203).
(gazelle) Types for exposed members of python.ParserOutput are now all public.
(gazelle) Removed the requirement for __init__.py, __main__.py, or __test__.py files to be
present in a directory to generate a BUILD.bazel file.
(toolchain) Updated the following toolchains to build 20250808 to patch CVE-2025-47273:
- 3.9.23
- 3.10.18
- 3.11.13
- 3.12.11
- 3.14.0rc1
(toolchain) Python 3.13 now references 3.13.6
(gazelle) Switched back to smacker/go-tree-sitter, fixing
#2630
(pypi) From now on the list of default platforms only includes linux_x86_64, linux_aarch64,
osx_x86_64, osx_aarch64 and windows_x86_64. If you are on other platforms, you need to
use the pip.default to configure it yourself. If you are interested in graduating the
platform, consider helping set us up CI for them and update the documentation.
(ci) We are now testing on Ubuntu 22.04 for RBE and non-RBE configurations.
(core) #!/usr/bin/env bash is now used as a shebang in the stage1 bootstrap template.
(gazelle:docs) The Gazelle docs have been migrated from {gh-path}gazelle/README.md to
{gh-path}gazelle/docs and are now available on the primary documentation site
at https://rules-python.readthedocs.io/en/latest/gazelle/docs/index.html

{#v1-6-0-fixed}

Fixed

(toolchains) local_runtime_repo now respects changes to the DEVELOPER_DIR and XCODE_VERSION
repo env vars, fixing stale cache issues on macOS with system (i.e. Xcode-supplied) Python
(#3123).
(pypi) Fixes an issue where builds using a bazel vendor vendor directory
would fail if the constraints file contained environment markers. Fixes
#2996.
(pypi) Wheels with BUILD.bazel (or other special Bazel files) no longer
result in missing files at runtime
(#2782).
(runfiles) The pypi runfiles package now includes py.typed to indicate it
supports type checking
(#2503).
(pypi) The pipstar defaults configuration now supports any custom platform
name.
(pypi) The selection of the whls has been changed and should no longer result
in ambiguous select matches ({gh-issue}2759) and should be much more efficient
when running bazel query due to fewer repositories being included
({gh-issue}2849).
Multi-line python imports (e.g. with escaped newlines) are now correctly processed by Gazelle.
(toolchains) local_runtime_repo works with multiarch Debian with Python 3.8
(#3099).
(pypi) Expose pypi packages only common to all Python versions in all_requirements
(#2921).
(repl) Normalize the path for the REPL stub to make it possible to use the
default stub template from outside rules_python ({gh-issue}3101).
(gazelle) Fixes gazelle adding sibling module dependencies to resolve
absolute imports (Python 2's behavior without absolute_import). Previous
behavior can be restored using the directive
# gazelle:python_resolve_sibling_imports true
(pypi) Show overridden index URL of packages when downloading metadata have failed.
(#2985).
(toolchains) use "command -v" to find interpreter in $PATH
(#3150).
(pypi) bazel vendor now works in bzlmod ({gh-issue}3079).
(toolchains) local_runtime_repo now works on Windows
(#3055).
(toolchains) local_runtime_repo supports more types of Python
installations (Mac frameworks, missing dynamic libraries, and other
esoteric cases, see
#3148 for details).
(pypi) Support requirements.txt files that use different versions of the same
package targeting different target platforms.
(#2797).
(py_wheel) Add directories in deterministic order.

{#v1-6-0-added}

Added

(repl) Default stub now has tab completion, where readline support is available,
see (#3114).
(#3114).
(pypi) To configure the environment for requirements.txt evaluation, use the newly added
developer preview of the pip.default tag class. Only rules_python and root modules can use
this feature. You can also configure custom config_settings using pip.default. It
can also be used to set the global netrc or auth_patterns variables.
(pypi) PyPI dependencies now expose an :extracted_whl_files filegroup target
of all the files extracted from the wheel. This can be used in lieu of
{obj}whl_filegroup to avoid copying/extracting wheel multiple times to
get a subset of their files.
(gazelle) New directive gazelle:python_generate_pyi_deps; when true,
dependencies added to satisfy type-only imports (if TYPE_CHECKING) and type
stub packages are added to pyi_deps instead of deps.
(toolchain) Add toolchains for aarch64 windows for
- 3.11.13
- 3.12.11
- 3.13.6
- 3.14.0rc1
(gazelle): New annotation gazelle:include_pytest_conftest. When not set (the
default) or true, gazelle will inject any conftest.py file found in the same
directory as a {obj}py_test target to that {obj}py_test target's deps.
This behavior is unchanged from previous versions. When false, the :conftest
dep is not added to the {obj}py_test target.
(gazelle) New directive gazelle:python_generate_proto; when true,
Gazelle generates py_proto_library rules for proto_library. false by default.
- Note: Users must manually configure their Gazelle target to support the
  proto language.
(gazelle) New directive gazelle:python_proto_naming_convention; controls
naming of py_proto_library rules.

{#v1-6-0-removed}

Removed

Nothing removed.

{#v1-5-4}

`v1.5.4`

Compare Source

{#v1-5-4-fixed}

Fixed

(toolchains) local_runtime_repo now checks if the include directory exists
before attempting to watch it, fixing issues on macOS with system Python
(#3043).

{#v1-5-3}

`v1.5.3`

Compare Source

Fixed

(toolchains) local_runtime_repo now checks if the include directory exists
before attempting to watch it, fixing issues on macOS with system Python
(#3043).

{#v1-5-2}

`v1.5.2`

Compare Source

{#v1-5-2-changed}

Changed

(deps) (bzlmod) Upgraded to bazel-skylib version
1.8.1
to remove deprecation warnings.

{#v1-5-2-fixed}

Fixed

(pypi) Correctly pull sdist distributions using pip
(#3131).
(core) builds work again on 7.x WORKSPACE configurations
(#3119).

{#v1-5-1}

`v1.5.1`

Compare Source

{#v1-5-1-fixed}

Fixed

(pypi) Namespace packages work by default (pkgutil shims are generated
by default again)
(#3038).

{#v1-5-0}

`v1.5.0`

Compare Source

{#v1-5-0-changed}

Changed

(toolchain) Bundled toolchain version updates:
- 3.9 now references 3.9.23
- 3.10 now references 3.10.18
- 3.11 now references 3.11.13
- 3.12 now references 3.12.11
- 3.13 now references 3.13.4
(rules) On Windows, {obj}--bootstrap_impl=system_python is forced. This
allows setting --bootstrap_impl=script in bazelrc for mixed-platform
environments.
(rules) {obj}compile_pip_requirements now generates a .test target. The
_test target is deprecated and will be removed in the next major release.
(#2794
(py_wheel) py_wheel always creates zip64-capable wheel zips
(providers) (experimental) {obj}PyInfo.venv_symlinks replaces
PyInfo.site_packages_symlinks
(deps) Updated setuptools to 78.1.1 to patch CVE-2025-47273. This effectively makes
Python 3.9 the minimum supported version for using pip_parse.

{#v1-5-0-fixed}

Fixed

(rules) PyInfo provider is now advertised by py_test, py_binary, and py_library;
this allows aspects using required_providers to function correctly.
(#2506).
Fixes when using {obj}--bootstrap_impl=script:
- compile_pip_requirements now works with it
- The sys._base_executable value will reflect the underlying interpreter,
  not venv interpreter.
- The {obj}//python/runtime_env_toolchains:all toolchain now works with it.
(rules) Better handle flakey platform.win32_ver() calls by calling them
multiple times.
(tools/wheelmaker.py) Extras are now preserved in Requires-Dist metadata when using requires_file
to specify the requirements.
(pypi) Use bazel downloader for direct URL references and correctly detect the filenames from
various URL formats - URL encoded version strings get correctly resolved, sha256 value can be
also retrieved from the URL as opposed to only the --hash parameter. Fixes
#2363.
(pypi) whl_library now infers file names from its urls attribute correctly.
(pypi) When running under bazel test, be sure that temporary requirements file
remains writable.
(py_test, py_binary) Allow external files to be used for main
(pypi) Correctly aggregate the sources when the hashes specified in the lockfile differ
by platform even though the same version is used. Fixes #2648.
(pypi) compile_pip_requirements test rule works behind the proxy
(toolchains) The hermetic toolchains now correctly statically advertise the
releaselevel and serial for pre-release hermetic toolchains ({gh-issue}2837).

{#v1-5-0-added}

Added

Repo utilities execute_unchecked, execute_checked, and execute_checked_stdout now
support log_stdout and log_stderr keyword arg booleans. When these are True
(the default), the subprocess's stdout/stderr will be logged.
(toolchains) Local toolchains can be activated with custom flags. See
[Conditionally using local toolchains] docs for how to configure.
(pypi) Starlark-based evaluation of environment markers (requirements.txt conditionals)
available (not enabled by default) for improved multi-platform build support.
Set the RULES_PYTHON_ENABLE_PIPSTAR=1 environment variable to enable it.
(utils) Add a way to run a REPL for any rules_python target that returns
a PyInfo provider.
(uv) Handle .netrc and auth_patterns auth when downloading uv. Work towards
#1975.
(toolchains) Arbitrary python-build-standalone runtimes can be registered
and activated with custom flags. See the [Registering custom runtimes]
docs and {obj}single_version_platform_override() API docs for more
information.
(rules) Added support for a using constraints files with compile_pip_requirements.
Useful when an intermediate dependency needs to be upgraded to pull in
security patches.
(toolchains): 3.14.0b2 has been added as a preview.

{#v1-5-0-removed}

Removed

Nothing removed.

{#v1-4-2}

`v1.4.2`

Compare Source

Fixed

(toolchains) local_runtime_repo now checks if the include directory exists
before attempting to watch it, fixing issues on macOS with system Python
(#3043).

{#v1-4-1}

`v1.4.1`

Compare Source

{#v1-4-1-fixed}

Fixed

(pypi) Fix a typo not allowing users to benefit from using the downloader when the hashes in the
requirements file are not present. Fixes
#2863.

{#v1-4-0}

`v1.4.0`

Compare Source

{#v1-4-0-changed}

Changed

(toolchain) The exec configuration toolchain now has the forwarded
exec_interpreter now also forwards the ToolchainInfo provider. This is
for increased compatibility with the RBE setups where access to the exec
configuration interpreter is needed.
(toolchains) Use the latest astral-sh toolchain release 20250317 for Python versions:
- 3.9.21
- 3.10.16
- 3.11.11
- 3.12.9
- 3.13.2
(pypi) Use xcrun xcodebuild --showsdks to find XCode root.
(toolchains) Remove all but 3.8.20 versions of the Python 3.8 interpreter who has
reached EOL. If users still need other versions of the 3.8 interpreter, please supply
the URLs manually {bzl:obj}python.toolchain or {bzl:obj}python_register_toolchains calls.
(toolchains) Previously #2636
changed the semantics of ignore_root_user_error from "ignore" to "warning". This is now
flipped back to ignoring the issue, and will only emit a warning when the attribute is set
False.
(pypi) The PyPI extension will no longer write the lock file entries as the
extension has been marked reproducible.
Fixes #2434.
(gazelle) Lazily load and parse manifest files when running Gazelle. This ensures no
manifest files are loaded when Gazelle is run over a set of non-python directories
PR #2746.
(rules) {attr}py_binary.srcs and {attr}py_test.srcs is no longer mandatory when
main_module is specified (for --bootstrap_impl=script)

{#v1-4-0-fixed}

Fixed

(pypi) Platform specific extras are now correctly handled when using
universal lock files with environment markers. Fixes #2690.
(runfiles) ({obj}--bootstrap_impl=script) Follow symlinks when searching for runfiles.
(toolchains) Do not try to run chmod when downloading non-windows hermetic toolchain
repositories on Windows. Fixes
#2660.
(logging) Allow repo rule logging level to be set to FAIL via the RULES_PYTHON_REPO_DEBUG_VERBOSITY environment variable.
(toolchains) The toolchain matching is has been fixed when writing
transitions transitioning on the python_version flag.
Fixes #2685.
(toolchains) Run the check on the Python interpreter in isolated mode, to ensure it's not affected by userland environment variables, such as PYTHONPATH.
(toolchains) Ensure temporary .pyc and .pyo files are also excluded from the interpreters repository files.
(pypi) Run interpreter version call in isolated mode, to ensure it's not affected by userland environment variables, such as PYTHONPATH.
(packaging) An empty requires_file is treated as if it were omitted, resulting in a valid METADATA file.
(rules) py_wheel and sphinxdocs rules now propagate target_compatible_with to all targets they create.
PR #2788.
(pypi) Correctly handle METADATA entries when python_full_version is used in
the environment marker.
Fixes #2319.
(pypi) Correctly handle python_version parameter and transition the requirement
locking to the right interpreter version when using
{obj}compile_pip_requirements rule.
See #2819.

{#v1-4-0-added}

Added

(pypi) From now on sha256 values in the requirements.txt is no longer
mandatory when enabling {attr}pip.parse.experimental_index_url feature.
This means that rules_python will attempt to fetch metadata for all
packages through SimpleAPI unless they are pulled through direct URL
references. Fixes #2023.
In case you see issues with rules_python being too eager to fetch the SimpleAPI
metadata, you can use the newly added {attr}pip.parse.simpleapi_skip
to skip metadata fetching for those packages.
(uv) A {obj}lock rule that is the replacement for the
{obj}compile_pip_requirements. This may still have rough corners
so please report issues with it in the
#1975.
Main highlights - the locking can be done within a build action or outside
it, there is no more automatic test target (but it can be added on the user
side by using native_test). For customizing the uv version that is used,
please check the {obj}uv.configure tag class.
Add support for riscv64 linux platform.
(toolchains) Add python 3.13.2 and 3.12.9 toolchains
(providers) (experimental) PyInfo.site_packages_symlinks field added to
allow specifying links to create within the venv site packages (only
applicable with {obj}--bootstrap_impl=script)
(#2156).
(toolchains) Local Python installs can be used to create a toolchain
equivalent to the standard toolchains. See [Local toolchains] docs for how to
configure them.
(toolchains) Expose $(PYTHON2_ROOTPATH) and $(PYTHON3_ROOTPATH) which are runfiles
locations equivalents of $(PYTHON2) and `$(PYTHON3) respectively.

{#v1-4-0-removed}

Removed

Nothing removed.

{#v1-3-0}

`v1.3.0`

Compare Source

{#v1-3-0-changed}

Changed

(deps) platforms 0.0.4 -> 0.0.11
(py_wheel) Package py_library.pyi_srcs (.pyi files) in the wheel.
(py_package) Package py_library.pyi_srcs (.pyi files) in py_package.
(gazelle) The generated manifest file (default: gazelle_python.yaml) will now include the
YAML document start --- line. Implemented in
#2656.

{#v1-3-0-fixed}

Fixed

(pypi) The ppc64le is now pointing to the right target in the platforms package.
(gazelle) No longer incorrectly merge py_binary targets during partial updates in
file generation mode. Fixed in #2619.
(bzlmod) Running as root is no longer an error. ignore_root_user_error=True
is now the default. Note that running as root may still cause spurious
Bazel cache invalidation
(#1169).
(gazelle) Don't collapse depsets to a list or into args when generating the modules mapping file.
Support spilling modules mapping args into a params file.
(coverage) Fix missing files in the coverage report if they have no tests.
(pypi) From now on python invocations in repository and module extension
evaluation contexts will invoke Python interpreter with -B to avoid
creating .pyc files.
(deps) doublestar 4.7.1 (required for recent Gazelle versions)

{#v1-3-0-added}

Added

(python) {obj}python.defaults has been added to allow users to
set the default python version in the root module by reading the
default version number from a file or an environment variable.
{obj}//python/bin:python: convenience target for directly running an
interpreter. {obj}--//python/bin:python_src can be used to specify a
binary whose interpreter to use.
(uv) Now the extension can be fully configured via bzlmod APIs without the
need to patch rules_python. The documentation has been added to rules_python
docs but usage of the extension may result in your setup breaking without any
notice. What is more, the URLs and SHA256 values will be retrieved from the
GitHub releases page metadata published by the uv project.
(pypi) An extra argument to add the interpreter lib dir to LDFLAGS when
building wheels from sdist.
(pypi) Direct HTTP urls for wheels and sdists are now supported when using
{obj}experimental_index_url (bazel downloader).
Partially fixes #2363.
(rules) APIs for creating custom rules based on the core py_binary, py_test,
and py_library rules
(#1647)
(rules) Added env-var to allow additional interpreter args for stage1 bootstrap.
See {any}RULES_PYTHON_ADDITIONAL_INTERPRETER_ARGS environment variable.
Only applicable for {obj}--bootstrap_impl=script.
(rules) Added {obj}interpreter_args attribute to py_binary and py_test,
which allows pass arguments to the interpreter before the regular args.
(rules) Added {obj}main_module attribute to py_binary and py_test,
which allows specifying a module name to run (i.e. python -m <module>).

{#v1-3-0-removed}

Removed

Nothing removed.

{#v1-2-0}

`v1.2.0`

Compare Source

{#v1-2-0-changed}

Changed

(rules) py_proto_library is deprecated in favour of the
implementation in https://github.com/protocolbuffers/protobuf. It will be
removed in the future release.
(pypi) {obj}pip.override will now be ignored instead of raising an error,
fixes #2550.
(rules) deprecation warnings for deprecated symbols have been turned off by
default for now and can be enabled with RULES_PYTHON_DEPRECATION_WARNINGS
env var.
(pypi) Downgraded versions of packages: pip from 24.3.2 to 24.0.0 and
packaging from 24.2 to 24.0.

{#v1-2-0-fixed}

Fixed

(rules) python_zip_file output with --bootstrap_impl=script works again
(#2596).
(docs) Using python_version attribute for specifying python versions introduced in v1.1.0
(gazelle) Providing multiple input requirements files to gazelle_python_manifest now works correctly.
(pypi) Handle trailing slashes in pip index URLs in environment variables,
fixes #2554.
(runfiles) Runfile manifest and repository mapping files are now interpreted
as UTF-8 on all platforms.
(coverage) Coverage with --bootstrap_impl=script is fixed
(#2572).
(pypi) Non deterministic behaviour in requirement file usage has been fixed
by reverting #2514.
The related issue is #908.
(sphinxdocs) Do not crash when tag_class does not have a populated doc value.
Fixes (#2579).
(binaries/tests) Fix packaging when using --bootstrap_impl=script: set
{obj}--venvs_use_declare_symlink=no to have it not create symlinks at
build time (they will be created at runtime instead).
(Fixes #2489)

{#v1-2-0-added}

Added

Nothing added.

{#v1-2-0-removed}

Removed

Nothing removed.

{#v1-1-0}

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot requested review from rrbutani, jsharpe and fmeum as code owners June 26, 2025 22:35

renovate bot force-pushed the renovate/rules_python-1.x branch 3 times, most recently from b4653f9 to 6cb4907 Compare June 30, 2025 22:46

renovate bot changed the title ~~Update dependency rules_python to v1.4.1~~ Update dependency rules_python to v1.5.0 Jun 30, 2025

renovate bot force-pushed the renovate/rules_python-1.x branch 2 times, most recently from 6f1cdc5 to e03218f Compare July 6, 2025 06:40

renovate bot changed the title ~~Update dependency rules_python to v1.5.0~~ Update dependency rules_python to v1.5.1 Jul 6, 2025

renovate bot force-pushed the renovate/rules_python-1.x branch 3 times, most recently from 30a5d68 to 8a2f8f0 Compare July 21, 2025 11:19

renovate bot force-pushed the renovate/rules_python-1.x branch 2 times, most recently from 99ec82d to 236ae10 Compare August 7, 2025 08:38

renovate bot force-pushed the renovate/rules_python-1.x branch from 236ae10 to 8481aa9 Compare August 11, 2025 08:37

renovate bot changed the title ~~Update dependency rules_python to v1.5.1~~ Update dependency rules_python Aug 11, 2025

renovate bot force-pushed the renovate/rules_python-1.x branch from 8481aa9 to 8d970e4 Compare August 11, 2025 14:49

renovate bot changed the title ~~Update dependency rules_python~~ Update dependency rules_python to v1.5.2 Aug 11, 2025

renovate bot force-pushed the renovate/rules_python-1.x branch from 8d970e4 to 05a0b6e Compare August 12, 2025 06:33

renovate bot changed the title ~~Update dependency rules_python to v1.5.2~~ Update dependency rules_python to v1.5.3 Aug 12, 2025

renovate bot force-pushed the renovate/rules_python-1.x branch 2 times, most recently from d1e07b8 to fa47a9d Compare August 14, 2025 11:32

renovate bot force-pushed the renovate/rules_python-1.x branch 3 times, most recently from c2f9d01 to 8577460 Compare August 28, 2025 06:52

renovate bot changed the title ~~Update dependency rules_python to v1.5.3~~ Update dependency rules_python to v1.5.4 Aug 28, 2025

renovate bot force-pushed the renovate/rules_python-1.x branch 2 times, most recently from b98f84e to 44d2ff4 Compare September 3, 2025 20:51

renovate bot changed the title ~~Update dependency rules_python to v1.5.4~~ Update dependency rules_python to v1.6.0 Sep 3, 2025

Update dependency rules_python to v1.6.0

568d733

renovate bot force-pushed the renovate/rules_python-1.x branch from 44d2ff4 to 568d733 Compare September 4, 2025 05:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Update dependency rules_python to v1.6.0 #514

Update dependency rules_python to v1.6.0 #514

Uh oh!

renovate bot commented Jun 26, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Update dependency rules_python to v1.6.0 #514

Are you sure you want to change the base?

Update dependency rules_python to v1.6.0 #514

Uh oh!

Conversation

renovate bot commented Jun 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changed

Fixed

Added

Removed

Fixed

Fixed

Changed

Fixed

Fixed

Changed

Fixed

Added

Removed

Fixed

Fixed

Changed

Fixed

Added

Removed

Changed

Fixed

Added

Removed

Changed

Fixed

Added

Removed

Changed

Fixed

Added

Removed

Fixed

Fixed

Changed

Fixed

Fixed

Changed

Fixed

Added

Removed

Fixed

Fixed

Changed

Fixed

Added

Removed

Changed

Fixed

Added

Removed

Changed

Fixed

Added

Removed

Configuration

Uh oh!

Uh oh!

renovate bot commented Jun 26, 2025 •

edited

Loading