chore: additional updates to prepare for v3.0.0 (#14999)

chore: update to protobuf v30 and remove cxx14 build (#15013)

* chore: update to protobuf v30 and remove cxx14 build
* update grpc to v1.71.0
* use new abseil repo name
* add repo_mapping for absl
* disable bzlmod for bazel-targets build
* combine zypper commands
chore: update abseil to 20250127.1 (#15039)
chore(ci): update api and abi for v3 (#15041)
chore(bazel): get bazel 8 working (#15042)

* chore(bazel): get bazel 8 working

* enable workspace where we disable bzlmod

* patch googleapis BUILD.bazel when using workspace

* check for null json

* determine generation proto paths dynamically

* bazel quickstart version has to be changed in two phases

* update quickstart bazelrc to use c++17

Author: scotthart

.bazelrc

@@ -18,14 +18,13 @@
 # Use host-OS-specific config lines from bazelrc files.
 build --enable_platform_specific_config=true
 
-# The project requires C++ >= 14. By default Bazel adds `-std=c++0x` which
-# disables C++14 features, even if the compilers defaults to C++ >= 14
-build:linux --cxxopt=-std=c++14
-build:macos --cxxopt=-std=c++14
-# Protobuf and gRPC require (or soon will require) C++14 to compile the "host"
+# The project requires C++ >= 17.
+build:linux --cxxopt=-std=c++17
+build:macos --cxxopt=-std=c++17
+# Protobuf and gRPC require C++17 to compile the "host"
 # targets, such as protoc and the grpc plugin.
-build:linux --host_cxxopt=-std=c++14
-build:macos --host_cxxopt=-std=c++14
+build:linux --host_cxxopt=-std=c++17
+build:macos --host_cxxopt=-std=c++17
 
 # Do not create the convenience links. They are inconvenient when the build
 # runs inside a docker image or if one builds a quickstart and then builds

.bazelversion

@@ -1 +1 @@
-7.5.0
+8.1.1

.clang-tidy

@@ -85,6 +85,7 @@ Checks: >
   performance-*,
   portability-*,
   readability-*,
+  -bugprone-exception-escape,
   -google-readability-braces-around-statements,
   -google-readability-namespace-comments,
   -google-runtime-references,

.github/workflows/macos-cmake.yml

@@ -175,7 +175,6 @@ jobs:
           rapidmigrationassessment
           recaptchaenterprise
           recommender
-          resourcesettings
           scheduler
           secretmanager
           securesourcemanager

MODULE.bazel

@@ -22,11 +22,10 @@ module(
 
 bazel_dep(name = "platforms", version = "0.0.11")
 bazel_dep(name = "bazel_skylib", version = "1.7.1")
-bazel_dep(name = "rules_cc", version = "0.0.17")
-bazel_dep(name = "abseil-cpp", version = "20240722.1", repo_name = "com_google_absl")
-bazel_dep(name = "protobuf", version = "30.0-rc1", repo_name = "com_google_protobuf")
+bazel_dep(name = "rules_cc", version = "0.1.1")
+bazel_dep(name = "abseil-cpp", version = "20250127.1", repo_name = "abseil-cpp")
+bazel_dep(name = "protobuf", version = "30.2", repo_name = "com_google_protobuf")
 bazel_dep(name = "boringssl", version = "0.0.0-20230215-5c22014")
-bazel_dep(name = "grpc", version = "1.70.1", repo_name = "com_github_grpc_grpc")
 bazel_dep(name = "nlohmann_json", version = "3.11.3", repo_name = "com_github_nlohmann_json")
 bazel_dep(name = "curl", version = "8.8.0.bcr.2", repo_name = "com_github_curl_curl")
 bazel_dep(name = "crc32c", version = "1.1.0", repo_name = "com_github_google_crc32c")
@@ -44,23 +43,24 @@ bazel_dep(name = "zlib", version = "1.3.1.bcr.4")
 bazel_dep(name = "c-ares", version = "1.19.1", repo_name = "com_github_cares_cares")
 
 # Pin this to fix a break in bazel/deps-cache.py
-bazel_dep(name = "protoc-gen-validate", version = "1.0.4.bcr.2", dev_dependency = True, repo_name = "com_envoyproxy_protoc_gen_validate")
+bazel_dep(name = "protoc-gen-validate", version = "1.2.1", dev_dependency = True, repo_name = "com_envoyproxy_protoc_gen_validate")
 
 python = use_extension("@rules_python//python/extensions:python.bzl", "python")
 python.toolchain(
     ignore_root_user_error = True,
     python_version = "3.11",
 )
 
+bazel_dep(name = "grpc", version = "1.71.0", repo_name = "com_github_grpc_grpc")
 bazel_dep(name = "googleapis", version = "0.0.0", repo_name = "com_google_googleapis")
 archive_override(
     module_name = "googleapis",
-    integrity = "sha256-WpRQzxrRGHyCorXN/1Pk1YS21FKStfcbUECDrLA619A=",
+    integrity = "sha256-KnunCHPK1T8u8SUxAAU122G6qmfxADIfA4ZU+fNWXjY=",
     patch_strip = 1,
     patches = ["//bazel:googleapis.modules.patch"],
-    strip_prefix = "googleapis-280725e991516d4a0f136268faf5aa6d32d21b54",
+    strip_prefix = "googleapis-53ca65d540dd1a7cb4746687daa87208dc9ea437",
     urls = [
-        "https://github.com/googleapis/googleapis/archive/280725e991516d4a0f136268faf5aa6d32d21b54.tar.gz",
+        "https://github.com/googleapis/googleapis/archive/53ca65d540dd1a7cb4746687daa87208dc9ea437.tar.gz",
     ],
 )
 

README.md

@@ -383,9 +383,6 @@ See each library's `README.md` file for more information about:
 - [Cloud Resource Manager API](google/cloud/resourcemanager/README.md)
   [[quickstart]](google/cloud/resourcemanager/quickstart/README.md)
   [[reference]](https://cloud.google.com/cpp/docs/reference/resourcemanager/latest)
-- [Resource Settings API](google/cloud/resourcesettings/README.md)
-  [[quickstart]](google/cloud/resourcesettings/quickstart/README.md)
-  [[reference]](https://cloud.google.com/cpp/docs/reference/resourcesettings/latest)
 - [Retail API](google/cloud/retail/README.md)
   [[quickstart]](google/cloud/retail/quickstart/README.md)
   [[reference]](https://cloud.google.com/cpp/docs/reference/retail/latest)

bazel/gapic.bzl

@@ -38,23 +38,23 @@ def cc_gapic_library(name, service_dirs = [], googleapis_deps = [], additional_d
 
     native.filegroup(
         name = "srcs",
-        srcs = native.glob(sources_glob),
+        srcs = native.glob(sources_glob, allow_empty = True),
     )
 
     native.filegroup(
         name = "hdrs",
-        srcs = native.glob(include = code_glob, exclude = sources_glob),
+        srcs = native.glob(include = code_glob, exclude = sources_glob, allow_empty = True),
     )
 
     native.filegroup(
         name = "public_hdrs",
-        srcs = native.glob([d + "*.h" for d in service_dirs]),
+        srcs = native.glob([d + "*.h" for d in service_dirs], allow_empty = True),
         visibility = ["//:__pkg__"],
     )
 
     native.filegroup(
         name = "mocks",
-        srcs = native.glob([d + "mocks/*.h" for d in service_dirs]),
+        srcs = native.glob([d + "mocks/*.h" for d in service_dirs], allow_empty = True),
         visibility = ["//:__pkg__"],
     )
 
@@ -84,4 +84,4 @@ def cc_gapic_library(name, service_dirs = [], googleapis_deps = [], additional_d
             "//:" + name,
             "//google/cloud/testing_util:google_cloud_cpp_testing_private",
         ],
-    ) for sample in native.glob([d + "samples/*_samples.cc" for d in service_dirs])]
+    ) for sample in native.glob([d + "samples/*_samples.cc" for d in service_dirs], allow_empty = True)]

bazel/googleapis.modules.patch

@@ -1,18 +1,33 @@
 diff --git a/BUILD.bazel b/BUILD.bazel
-index 95e4c12e5..a901fd573 100644
+index 026553f5c7..f3c6b6925c 100644
 --- a/BUILD.bazel
 +++ b/BUILD.bazel
-@@ -1,3 +1,7 @@
+@@ -1,11 +1,13 @@
 +package(default_visibility = ["//visibility:public"])
 +
 +licenses(["notice"])  # Apache 2.0
 +
  genrule(
-   name = "build_gen",
-   outs = ["build_gen.sh"],
-@@ -16,3 +20,15 @@ EOD
+-    name = "build_gen",
+-    srcs = glob(
+-        ["run_build_gen.sh"],
+-        allow_empty = True,
+-    ),
+-    outs = ["build_gen.sh"],
+-    cmd = """
++  name = "build_gen",
++  outs = ["build_gen.sh"],
++  executable = True,
++  srcs = glob(["run_build_gen.sh"], allow_empty=True),
++  cmd = """
+     if test -z \"$(SRCS)\"; then
+       cat <<EOD > $@
+ #!/bin/sh
+@@ -17,5 +19,17 @@ EOD
+       cp $(SRCS) $@
      fi
    """,
+-    executable = True,
  )
 +
 +# This build file overlays on top of the BUILD files for the googleapis repo,
@@ -26,6 +41,7 @@ index 95e4c12e5..a901fd573 100644
 +        ".",
 +    ],
 +)
++
 diff --git a/MODULE.bazel b/MODULE.bazel
 new file mode 100644
 index 000000000..169133e43

bazel/googleapis.workspace.patch

@@ -0,0 +1,13 @@
+diff --git a/BUILD.bazel b/BUILD.bazel
+index 95e4c12e5..83838d3f0 100644
+--- a/BUILD.bazel
++++ b/BUILD.bazel
+@@ -2,7 +2,7 @@ genrule(
+   name = "build_gen",
+   outs = ["build_gen.sh"],
+   executable = True,
+-  srcs = glob(["run_build_gen.sh"]),
++  srcs = glob(["run_build_gen.sh"], allow_empty=True),
+   cmd = """
+     if test -z \"$(SRCS)\"; then
+       cat <<EOD > $@

bazel/workspace0.bzl

@@ -71,10 +71,19 @@ def gl_cpp_workspace0(name = None):
         http_archive,
         name = "rules_cc",
         urls = [
-            "https://github.com/bazelbuild/rules_cc/releases/download/0.0.17/rules_cc-0.0.17.tar.gz",
+            "https://github.com/bazelbuild/rules_cc/releases/download/0.1.1/rules_cc-0.1.1.tar.gz",
         ],
-        sha256 = "abc605dd850f813bb37004b77db20106a19311a96b2da1c92b789da529d28fe1",
-        strip_prefix = "rules_cc-0.0.17",
+        sha256 = "712d77868b3152dd618c4d64faaddefcc5965f90f5de6e6dd1d5ddcd0be82d42",
+        strip_prefix = "rules_cc-0.1.1",
+    )
+
+    maybe(
+        http_archive,
+        name = "com_envoyproxy_protoc_gen_validate",
+        urls = [
+            "https://github.com/bufbuild/protoc-gen-validate/archive/v1.2.1.tar.gz",
+        ],
+        strip_prefix = "protoc-gen-validate-1.2.1",
     )
 
     # protobuf requires this
@@ -101,12 +110,12 @@ def gl_cpp_workspace0(name = None):
     # Load Abseil
     maybe(
         http_archive,
-        name = "com_google_absl",
+        name = "abseil-cpp",
         urls = [
-            "https://github.com/abseil/abseil-cpp/archive/20250127.0.tar.gz",
+            "https://github.com/abseil/abseil-cpp/archive/20250127.1.tar.gz",
         ],
-        sha256 = "16242f394245627e508ec6bb296b433c90f8d914f73b9c026fddb905e27276e8",
-        strip_prefix = "abseil-cpp-20250127.0",
+        sha256 = "b396401fd29e2e679cace77867481d388c807671dc2acc602a0259eeb79b7811",
+        strip_prefix = "abseil-cpp-20250127.1",
     )
 
     # Load a version of googletest that we know works. This is needed to create
@@ -126,18 +135,18 @@ def gl_cpp_workspace0(name = None):
         http_archive,
         name = "com_google_googleapis",
         urls = [
-            "https://github.com/googleapis/googleapis/archive/280725e991516d4a0f136268faf5aa6d32d21b54.tar.gz",
+            "https://github.com/googleapis/googleapis/archive/53ca65d540dd1a7cb4746687daa87208dc9ea437.tar.gz",
         ],
-        sha256 = "5a9450cf1ad1187c82a2b5cdff53e4d584b6d45292b5f71b504083acb03ad7d0",
-        strip_prefix = "googleapis-280725e991516d4a0f136268faf5aa6d32d21b54",
+        sha256 = "2a7ba70873cad53f2ef12531000535db61baaa67f100321f038654f9f3565e36",
+        strip_prefix = "googleapis-53ca65d540dd1a7cb4746687daa87208dc9ea437",
         build_file = Label("//bazel:googleapis.BUILD"),
         # Scaffolding for patching googleapis after download. For example:
         #   patches = ["googleapis.patch"]
         # NOTE: This should only be used while developing with a new
         # protobuf message. No changes to `patches` should ever be
         # committed to the main branch.
         patch_tool = "patch",
-        patch_args = ["-p1"],
+        patch_args = ["-p1", "-l", "-n"],
         patches = [],
     )
 
@@ -146,10 +155,10 @@ def gl_cpp_workspace0(name = None):
         http_archive,
         name = "com_google_protobuf",
         urls = [
-            "https://github.com/protocolbuffers/protobuf/archive/v30.0-rc1.tar.gz",
+            "https://github.com/protocolbuffers/protobuf/archive/v30.2.tar.gz",
         ],
-        sha256 = "e787459d3d5be3bced7b2e1b17e6e83f8a66cb827ca1654e071f3bacb16f8605",
-        strip_prefix = "protobuf-30.0-rc1",
+        sha256 = "07a43d88fe5a38e434c7f94129cad56a4c43a51f99336074d0799c2f7d4e44c5",
+        strip_prefix = "protobuf-30.2",
     )
 
     # Load BoringSSL. This could be automatically loaded by gRPC. But as of
@@ -172,10 +181,13 @@ def gl_cpp_workspace0(name = None):
         http_archive,
         name = "com_github_grpc_grpc",
         urls = [
-            "https://github.com/grpc/grpc/archive/v1.70.1.tar.gz",
+            "https://github.com/grpc/grpc/archive/v1.71.0.tar.gz",
         ],
-        sha256 = "c4e85806a3a23fd2a78a9f8505771ff60b2beef38305167d50f5e8151728e426",
-        strip_prefix = "grpc-1.70.1",
+        repo_mapping = {
+            "@com_google_absl": "@abseil-cpp",
+        },
+        sha256 = "0d631419e54ec5b29def798623ee3bf5520dac77abeab3284ef7027ec2363f91",
+        strip_prefix = "grpc-1.71.0",
     )
 
     # We use the cc_proto_library() rule from @com_google_protobuf, which