bazel: Use bazel run //sha:replace instead of direct script call

Co-authored-by: phlax <454682+phlax@users.noreply.github.com>

Author: Copilot

.github/workflows/_release.yml

@@ -146,7 +146,7 @@ jobs:
         SYSROOT_2_28_13_AMD64=$(compute_sha256 "sysroot-glibc2.28-libstdc++13-amd64.tar.xz")
         SYSROOT_2_28_13_ARM64=$(compute_sha256 "sysroot-glibc2.28-libstdc++13-arm64.tar.xz")
         
-        echo "Updating ${VERSIONS_FILE} using bazel/sha/replace.sh..."
+        echo "Updating ${VERSIONS_FILE} using bazel //sha:replace..."
         
         # Build replacement pairs: old_hash:new_hash
         # Extract current hashes from versions.bzl and create replacement pairs
@@ -176,37 +176,50 @@ jobs:
         fi
         
         # Get current sysroot hashes from the nested sysroot_hashes dict
-        # Extract the entire sysroot_hashes section and parse it
+        # Extract the entire sysroot_hashes section
         SYSROOT_SECTION=$(sed -n '/"sysroot_hashes":/,/^[[:space:]]*},$/p' "${VERSIONS_FILE}")
         
-        # Helper to extract hash from sysroot section for specific glibc/variant/arch
+        # Helper to extract hash from sysroot section
         get_sysroot_hash() {
             local glibc=$1
             local variant=$2
             local arch=$3
-            echo "$SYSROOT_SECTION" | sed -n "/${glibc}/,/^[[:space:]]*},/p" | \
-                sed -n "/${variant}/,/^[[:space:]]*},/p" | \
-                grep "\"${arch}\":" | sed -n 's/.*"\([a-f0-9]\{64\}\)".*/\1/p'
+            local glibc_section=$(echo "$SYSROOT_SECTION" | sed -n "/\"${glibc}\":/,/^[[:space:]]*},$/p")
+            local variant_section=$(echo "$glibc_section" | sed -n "/\"${variant}\":/,/^[[:space:]]*},$/p")
+            echo "$variant_section" | grep "\"${arch}\":" | sed -n 's/.*"\([a-f0-9]\{64\}\)".*/\1/p'
         }
         
         # Add sysroot hash replacements
+        declare -A SYSROOT_HASHES=(
+            ["2_31_BASE_AMD64"]="${SYSROOT_2_31_BASE_AMD64}"
+            ["2_31_BASE_ARM64"]="${SYSROOT_2_31_BASE_ARM64}"
+            ["2_31_13_AMD64"]="${SYSROOT_2_31_13_AMD64}"
+            ["2_31_13_ARM64"]="${SYSROOT_2_31_13_ARM64}"
+            ["2_28_BASE_AMD64"]="${SYSROOT_2_28_BASE_AMD64}"
+            ["2_28_BASE_ARM64"]="${SYSROOT_2_28_BASE_ARM64}"
+            ["2_28_13_AMD64"]="${SYSROOT_2_28_13_AMD64}"
+            ["2_28_13_ARM64"]="${SYSROOT_2_28_13_ARM64}"
+        )
+        
         for glibc in "2.31" "2.28"; do
             for variant in "base" "13"; do
                 for arch in "amd64" "arm64"; do
-                    VAR_NAME="SYSROOT_${glibc//./_}_${variant/base/BASE}_${arch^^}"
-                    NEW_HASH="${!VAR_NAME}"
-                    CURRENT_HASH=$(get_sysroot_hash "$glibc" "\"$variant\"" "$arch")
+                    # Build variable name
+                    VAR_NAME="${glibc//./_}_${variant^^}_${arch^^}"
+                    NEW_HASH="${SYSROOT_HASHES[$VAR_NAME]}"
+                    CURRENT_HASH=$(get_sysroot_hash "$glibc" "$variant" "$arch")
                     if [[ -n "${CURRENT_HASH}" && "${CURRENT_HASH}" != "${NEW_HASH}" ]]; then
                         REPLACEMENTS+=("${CURRENT_HASH}:${NEW_HASH}")
                     fi
                 done
             done
         done
         
-        # Use bazel/sha/replace.sh to perform all replacements
+        # Use bazel to run the sha replace tool
         if [[ ${#REPLACEMENTS[@]} -gt 0 ]]; then
             echo "Performing ${#REPLACEMENTS[@]} hash replacements..."
-            bash bazel/sha/replace.sh . "${REPLACEMENTS[@]}"
+            cd bazel
+            bazel run //sha:replace -- "$(pwd)/.." "${REPLACEMENTS[@]}"
         else
             echo "No hash updates needed - all hashes are already current"
         fi