chore: additional updates to prepare for v3.0.0 (#14999)

chore: update to protobuf v30 and remove cxx14 build (#15013)

* chore: update to protobuf v30 and remove cxx14 build
* update grpc to v1.71.0
* use new abseil repo name
* add repo_mapping for absl
* disable bzlmod for bazel-targets build
* combine zypper commands
chore: update abseil to 20250127.1 (#15039)
chore(ci): update api and abi for v3 (#15041)
chore(bazel): get bazel 8 working (#15042)

* chore(bazel): get bazel 8 working

* enable workspace where we disable bzlmod

* patch googleapis BUILD.bazel when using workspace

* check for null json

* determine generation proto paths dynamically

* bazel quickstart version has to be changed in two phases

* update quickstart bazelrc to use c++17

Author: scotthart

.bazelrc

@@ -18,14 +18,13 @@
 # Use host-OS-specific config lines from bazelrc files.
 build --enable_platform_specific_config=true
 
-# The project requires C++ >= 14. By default Bazel adds `-std=c++0x` which
-# disables C++14 features, even if the compilers defaults to C++ >= 14
-build:linux --cxxopt=-std=c++14
-build:macos --cxxopt=-std=c++14
-# Protobuf and gRPC require (or soon will require) C++14 to compile the "host"
+# The project requires C++ >= 17.
+build:linux --cxxopt=-std=c++17
+build:macos --cxxopt=-std=c++17
+# Protobuf and gRPC require C++17 to compile the "host"
 # targets, such as protoc and the grpc plugin.
-build:linux --host_cxxopt=-std=c++14
-build:macos --host_cxxopt=-std=c++14
+build:linux --host_cxxopt=-std=c++17
+build:macos --host_cxxopt=-std=c++17
 
 # Do not create the convenience links. They are inconvenient when the build
 # runs inside a docker image or if one builds a quickstart and then builds

.bazelversion

@@ -1 +1 @@
-7.6.1
+8.1.1

.clang-tidy

@@ -85,6 +85,7 @@ Checks: >
   performance-*,
   portability-*,
   readability-*,
+  -bugprone-exception-escape,
   -google-readability-braces-around-statements,
   -google-readability-namespace-comments,
   -google-runtime-references,

MODULE.bazel

@@ -22,11 +22,10 @@ module(
 
 bazel_dep(name = "platforms", version = "0.0.11")
 bazel_dep(name = "bazel_skylib", version = "1.7.1")
-bazel_dep(name = "rules_cc", version = "0.0.17")
-bazel_dep(name = "abseil-cpp", version = "20240722.1", repo_name = "com_google_absl")
-bazel_dep(name = "protobuf", version = "30.0-rc1", repo_name = "com_google_protobuf")
+bazel_dep(name = "rules_cc", version = "0.1.1")
+bazel_dep(name = "abseil-cpp", version = "20250127.1", repo_name = "abseil-cpp")
+bazel_dep(name = "protobuf", version = "30.2", repo_name = "com_google_protobuf")
 bazel_dep(name = "boringssl", version = "0.0.0-20230215-5c22014")
-bazel_dep(name = "grpc", version = "1.70.1", repo_name = "com_github_grpc_grpc")
 bazel_dep(name = "nlohmann_json", version = "3.11.3", repo_name = "com_github_nlohmann_json")
 bazel_dep(name = "curl", version = "8.8.0.bcr.3", repo_name = "com_github_curl_curl")
 bazel_dep(name = "crc32c", version = "1.1.0", repo_name = "com_github_google_crc32c")
@@ -52,6 +51,7 @@ python.toolchain(
     python_version = "3.11",
 )
 
+bazel_dep(name = "grpc", version = "1.71.0", repo_name = "com_github_grpc_grpc")
 bazel_dep(name = "googleapis", version = "0.0.0", repo_name = "com_google_googleapis")
 archive_override(
     module_name = "googleapis",

bazel/gapic.bzl

@@ -38,23 +38,23 @@ def cc_gapic_library(name, service_dirs = [], googleapis_deps = [], additional_d
 
     native.filegroup(
         name = "srcs",
-        srcs = native.glob(sources_glob),
+        srcs = native.glob(sources_glob, allow_empty = True),
     )
 
     native.filegroup(
         name = "hdrs",
-        srcs = native.glob(include = code_glob, exclude = sources_glob),
+        srcs = native.glob(include = code_glob, exclude = sources_glob, allow_empty = True),
     )
 
     native.filegroup(
         name = "public_hdrs",
-        srcs = native.glob([d + "*.h" for d in service_dirs]),
+        srcs = native.glob([d + "*.h" for d in service_dirs], allow_empty = True),
         visibility = ["//:__pkg__"],
     )
 
     native.filegroup(
         name = "mocks",
-        srcs = native.glob([d + "mocks/*.h" for d in service_dirs]),
+        srcs = native.glob([d + "mocks/*.h" for d in service_dirs], allow_empty = True),
         visibility = ["//:__pkg__"],
     )
 
@@ -84,4 +84,4 @@ def cc_gapic_library(name, service_dirs = [], googleapis_deps = [], additional_d
             "//:" + name,
             "//google/cloud/testing_util:google_cloud_cpp_testing_private",
         ],
-    ) for sample in native.glob([d + "samples/*_samples.cc" for d in service_dirs])]
+    ) for sample in native.glob([d + "samples/*_samples.cc" for d in service_dirs], allow_empty = True)]

bazel/googleapis.workspace.patch

@@ -0,0 +1,13 @@
+diff --git a/BUILD.bazel b/BUILD.bazel
+index 95e4c12e5..83838d3f0 100644
+--- a/BUILD.bazel
++++ b/BUILD.bazel
+@@ -2,7 +2,7 @@ genrule(
+   name = "build_gen",
+   outs = ["build_gen.sh"],
+   executable = True,
+-  srcs = glob(["run_build_gen.sh"]),
++  srcs = glob(["run_build_gen.sh"], allow_empty=True),
+   cmd = """
+     if test -z \"$(SRCS)\"; then
+       cat <<EOD > $@

bazel/workspace0.bzl

@@ -71,10 +71,19 @@ def gl_cpp_workspace0(name = None):
         http_archive,
         name = "rules_cc",
         urls = [
-            "https://github.com/bazelbuild/rules_cc/releases/download/0.0.17/rules_cc-0.0.17.tar.gz",
+            "https://github.com/bazelbuild/rules_cc/releases/download/0.1.1/rules_cc-0.1.1.tar.gz",
         ],
-        sha256 = "abc605dd850f813bb37004b77db20106a19311a96b2da1c92b789da529d28fe1",
-        strip_prefix = "rules_cc-0.0.17",
+        sha256 = "712d77868b3152dd618c4d64faaddefcc5965f90f5de6e6dd1d5ddcd0be82d42",
+        strip_prefix = "rules_cc-0.1.1",
+    )
+
+    maybe(
+        http_archive,
+        name = "com_envoyproxy_protoc_gen_validate",
+        urls = [
+            "https://github.com/bufbuild/protoc-gen-validate/archive/v1.2.1.tar.gz",
+        ],
+        strip_prefix = "protoc-gen-validate-1.2.1",
     )
 
     # protobuf requires this
@@ -101,7 +110,7 @@ def gl_cpp_workspace0(name = None):
     # Load Abseil
     maybe(
         http_archive,
-        name = "com_google_absl",
+        name = "abseil-cpp",
         urls = [
             "https://github.com/abseil/abseil-cpp/archive/20250127.1.tar.gz",
         ],
@@ -137,7 +146,7 @@ def gl_cpp_workspace0(name = None):
         # protobuf message. No changes to `patches` should ever be
         # committed to the main branch.
         patch_tool = "patch",
-        patch_args = ["-p1"],
+        patch_args = ["-p1", "-l", "-n"],
         patches = [],
     )
 
@@ -146,10 +155,10 @@ def gl_cpp_workspace0(name = None):
         http_archive,
         name = "com_google_protobuf",
         urls = [
-            "https://github.com/protocolbuffers/protobuf/archive/v30.0-rc1.tar.gz",
+            "https://github.com/protocolbuffers/protobuf/archive/v30.2.tar.gz",
         ],
-        sha256 = "e787459d3d5be3bced7b2e1b17e6e83f8a66cb827ca1654e071f3bacb16f8605",
-        strip_prefix = "protobuf-30.0-rc1",
+        sha256 = "07a43d88fe5a38e434c7f94129cad56a4c43a51f99336074d0799c2f7d4e44c5",
+        strip_prefix = "protobuf-30.2",
     )
 
     # Load BoringSSL. This could be automatically loaded by gRPC. But as of
@@ -172,10 +181,13 @@ def gl_cpp_workspace0(name = None):
         http_archive,
         name = "com_github_grpc_grpc",
         urls = [
-            "https://github.com/grpc/grpc/archive/v1.70.1.tar.gz",
+            "https://github.com/grpc/grpc/archive/v1.71.0.tar.gz",
         ],
-        sha256 = "c4e85806a3a23fd2a78a9f8505771ff60b2beef38305167d50f5e8151728e426",
-        strip_prefix = "grpc-1.70.1",
+        repo_mapping = {
+            "@com_google_absl": "@abseil-cpp",
+        },
+        sha256 = "0d631419e54ec5b29def798623ee3bf5520dac77abeab3284ef7027ec2363f91",
+        strip_prefix = "grpc-1.71.0",
     )
 
     # We use the cc_proto_library() rule from @com_google_protobuf, which

ci/cloudbuild/builds/bazel-oldest.sh

@@ -16,21 +16,22 @@
 
 set -euo pipefail
 
-export USE_BAZEL_VERSION=6.4.0
+export USE_BAZEL_VERSION=7.5.0
 
 source "$(dirname "$0")/../../lib/init.sh"
 source module ci/cloudbuild/builds/lib/bazel.sh
 source module ci/cloudbuild/builds/lib/cloudcxxrc.sh
+source module ci/lib/io.sh
 
 export CC=clang
 export CXX=clang++
 
 mapfile -t args < <(bazel::common_args)
 args+=(
-  # For now, we continue to test Bazel 6.x without bzlmod. Once the minimum
-  # supported version of Bazel is 7.x we can decide how to test without bzlmod.
+  # Test without bzlmod as WORKSPACE is still supported in bazel 7 LTS.
   --noenable_bzlmod
+  --enable_workspace
   # Only run the unit tests, no need to waste time running everything.
   --test_tag_filters=-integration-test
 )
-bazel test "${args[@]}" -- "${BAZEL_TARGETS[@]}"
+io::run bazel test "${args[@]}" -- "${BAZEL_TARGETS[@]}"

ci/cloudbuild/builds/check-api.sh

@@ -45,6 +45,7 @@ fi
 # https://github.com/googleapis/google-cloud-cpp/issues/6313
 io::run cmake "${cmake_args[@]}" \
   -DCMAKE_INSTALL_PREFIX="${INSTALL_PREFIX}" \
+  -DCMAKE_CXX_STANDARD=17 \
   -DCMAKE_INSTALL_MESSAGE=NEVER \
   -DBUILD_SHARED_LIBS=ON \
   -DCMAKE_BUILD_TYPE=Debug \

ci/cloudbuild/builds/clang-7.0.sh

@@ -32,6 +32,7 @@ ENABLED_FEATURES="${ENABLED_FEATURES},compute"
 readonly ENABLED_FEATURES
 
 io::run cmake -GNinja -S . -B cmake-out \
+  -DCMAKE_CXX_STANDARD=17 \
   -DGOOGLE_CLOUD_CPP_ENABLE="${ENABLED_FEATURES}" \
   -DGOOGLE_CLOUD_CPP_ENABLE_CCACHE=ON \
   -DGOOGLE_CLOUD_CPP_ENABLE_WERROR=ON \