Refactor/eliminate shell scripts

.bazelrc

@@ -38,6 +38,10 @@ build --jobs=auto
 build --local_resources=memory=HOST_RAM*.8
 build --local_resources=cpu=HOST_CPUS*.8
 
+# Environment isolation for hermetic builds
+build --action_env=WASI_SDK_PATH=
+build --incompatible_strict_action_env
+
 # Clippy configuration - only enable with --config=clippy
 build:clippy --aspects=@rules_rust//rust:defs.bzl%rust_clippy_aspect
 build:clippy --output_groups=+clippy_checks

.github/dependabot.yml

@@ -0,0 +1,253 @@
+version: 2
+updates:
+  # Rust dependencies for tools and components
+  - package-ecosystem: "cargo"
+    directory: "/tools/checksum_updater"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "pulseengine/maintainers"
+    assignees:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "rust/checksum"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "rust"
+      - "automated"
+      - "toolchain"
+
+  - package-ecosystem: "cargo"
+    directory: "/tools/checksum_updater_wasm"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "pulseengine/maintainers"
+    assignees:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "rust/wasm-checksum"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "rust"
+      - "automated"
+      - "wasm"
+
+  - package-ecosystem: "cargo"
+    directory: "/tools/ssh_keygen"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "pulseengine/maintainers"
+    assignees:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "rust/keygen"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "rust"
+      - "automated"
+      - "security"
+
+  - package-ecosystem: "cargo"
+    directory: "/tools/wizer_initializer"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "pulseengine/maintainers"
+    assignees:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "rust/wizer"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "rust"
+      - "automated"
+      - "performance"
+
+  - package-ecosystem: "cargo"
+    directory: "/tools/file_operations_component"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "pulseengine/maintainers"
+    assignees:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "rust/file-ops"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "rust"
+      - "automated"
+      - "wasm"
+
+  - package-ecosystem: "cargo"
+    directory: "/tools-builder/toolchains"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "pulseengine/maintainers"
+    assignees:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "rust/toolchains"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "rust"
+      - "automated"
+      - "toolchain"
+
+  # Go module dependencies
+  - package-ecosystem: "gomod"
+    directory: "/tools/file_ops"
+    schedule:
+      interval: "weekly"
+      day: "tuesday"
+      time: "06:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "pulseengine/maintainers"
+    assignees:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "go/file-ops"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "tinygo"
+      - "automated"
+
+  - package-ecosystem: "gomod"
+    directory: "/tools/http_downloader_go"
+    schedule:
+      interval: "weekly"
+      day: "tuesday"
+      time: "06:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "pulseengine/maintainers"
+    assignees:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "go/http-downloader"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "tinygo"
+      - "automated"
+
+  - package-ecosystem: "gomod"
+    directory: "/examples/olareg_wasm"
+    schedule:
+      interval: "weekly"
+      day: "tuesday"
+      time: "06:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "pulseengine/maintainers"
+    assignees:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "go/olareg"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "tinygo"
+      - "automated"
+      - "registry"
+
+  - package-ecosystem: "gomod"
+    directory: "/examples/go_component"
+    schedule:
+      interval: "weekly"
+      day: "tuesday"
+      time: "06:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "pulseengine/maintainers"
+    assignees:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "go/examples"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "tinygo"
+      - "automated"
+
+  # NPM dependencies for documentation site
+  - package-ecosystem: "npm"
+    directory: "/docs-site"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "06:00"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "docs"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "documentation"
+      - "automated"
+
+  - package-ecosystem: "npm"
+    directory: "/examples/js_component"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "06:00"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "js/examples"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "javascript"
+      - "automated"
+
+  # GitHub Actions workflow dependencies
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "thursday"
+      time: "06:00"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "pulseengine/maintainers"
+    commit-message:
+      prefix: "ci"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "ci-cd"
+      - "automated"

CONTRIBUTING.md

@@ -8,7 +8,6 @@ We welcome contributions to the rules_wasm_component project! This document prov
 
 - **Bazel 7.0+** with bzlmod support
 - **Rust 1.75+** with WASM targets
-- **WASM tools**: `wasm-tools`, `wac-cli`, `wit-bindgen-cli`
 
 ### Installation
 
@@ -20,14 +19,13 @@ cd rules_wasm_component
 # Install Rust and WASM targets
 rustup target add wasm32-wasip2 wasm32-wasip1 wasm32-unknown-unknown
 
-# Install WASM tools
-cargo install wasm-tools wac-cli wit-bindgen-cli
-
-# Verify setup
+# Verify setup - all tools downloaded automatically by Bazel
 bazel build //...
 bazel test //...
 ```
 
+> **Note**: All WASM tools (`wasm-tools`, `wac-cli`, `wit-bindgen-cli`, etc.) are now downloaded automatically by Bazel for truly hermetic builds. No manual installation required!
+
 ## Contributing Guidelines
 
 ### Code Style

MODULE.bazel

@@ -30,6 +30,16 @@ bazel_dep(name = "rules_oci", version = "1.8.0")
 bazel_dep(name = "buildifier_prebuilt", version = "6.4.0", dev_dependency = True)
 bazel_dep(name = "stardoc", version = "0.7.1", dev_dependency = True)
 
+# Test dependencies for cross-package C++ header examples
+bazel_dep(name = "fmt", version = "11.0.2")
+bazel_dep(name = "nlohmann_json", version = "3.11.3")
+
+# Real-world C++ library examples for comprehensive testing
+bazel_dep(name = "abseil-cpp", version = "20250814.0")
+
+# bazel_dep(name = "catch2", version = "3.8.1")  # Not available in current build setup
+bazel_dep(name = "spdlog", version = "1.12.0")
+
 # Note: SSH key generation now uses hermetic WebAssembly component (tools/ssh_keygen)
 
 # Rust toolchain setup
@@ -97,7 +107,11 @@ wasi_sdk.register(
 )
 use_repo(wasi_sdk, "wasi_sdk")
 
-# Register both WASI SDK and C++ toolchains
+# Enable C++ toolchain auto-configuration for cross-platform support
+cc_configure = use_extension("@rules_cc//cc:extensions.bzl", "cc_configure")
+use_repo(cc_configure, "local_config_cc")
+
+# Register both WASI SDK and C++ toolchains  
 register_toolchains(
     "@wasi_sdk//:wasi_sdk_toolchain",
     "@wasi_sdk//:cc_toolchain",
@@ -151,14 +165,14 @@ bazel_dep(name = "rules_nodejs", version = "6.5.0")
 
 # Configure Node.js version and tools
 node = use_extension("@rules_nodejs//nodejs:extensions.bzl", "node")
-node.toolchain(node_version = "18.20.8")
+node.toolchain(node_version = "20.18.0")
 use_repo(node, "nodejs_toolchains")
 
 # JavaScript/TypeScript WebAssembly components with JCO
 jco = use_extension("//wasm:extensions.bzl", "jco")
 jco.register(
     name = "jco",
-    node_version = "18.19.0",
+    node_version = "20.18.0",
     version = "1.4.0",
 )
 use_repo(jco, "jco_toolchain")