v1.5.0

Compare Source

{#​1-5-0-changed}

Changed

• (toolchain) Bundled toolchain version updates:
  • 3.9 now references 3.9.23
  • 3.10 now references 3.10.18
  • 3.11 now references 3.11.13
  • 3.12 now references 3.12.11
  • 3.13 now references 3.13.4
• (rules) On Windows, {obj}--bootstrap_impl=system_python is forced. This
  allows setting --bootstrap_impl=script in bazelrc for mixed-platform
  environments.
• (rules) {obj}compile_pip_requirements now generates a .test target. The
  _test target is deprecated and will be removed in the next major release.
  (#​2794
• (py_wheel) py_wheel always creates zip64-capable wheel zips
• (providers) (experimental) {obj}PyInfo.venv_symlinks replaces
  PyInfo.site_packages_symlinks
• (deps) Updating setuptools to patch CVE-2025-47273.

{#​1-5-0-fixed}

Fixed

• (rules) PyInfo provider is now advertised by py_test, py_binary, and py_library;
  this allows aspects using required_providers to function correctly.
  (#​2506).
• Fixes when using {obj}--bootstrap_impl=script:
  • compile_pip_requirements now works with it
  • The sys._base_executable value will reflect the underlying interpreter,
    not venv interpreter.
  • The {obj}//python/runtime_env_toolchains:all toolchain now works with it.
• (rules) Better handle flakey platform.win32_ver() calls by calling them
  multiple times.
• (tools/wheelmaker.py) Extras are now preserved in Requires-Dist metadata when using requires_file
  to specify the requirements.
• (pypi) Use bazel downloader for direct URL references and correctly detect the filenames from
  various URL formats - URL encoded version strings get correctly resolved, sha256 value can be
  also retrieved from the URL as opposed to only the --hash parameter. Fixes
  #​2363.
• (pypi) whl_library now infers file names from its urls attribute correctly.
• (pypi) When running under bazel test, be sure that temporary requirements file
  remains writable.
• (py_test, py_binary) Allow external files to be used for main
• (pypi) Correctly aggregate the sources when the hashes specified in the lockfile differ
  by platform even though the same version is used. Fixes #​2648.
• (pypi) compile_pip_requirements test rule works behind the proxy
• (toolchains) The hermetic toolchains now correctly statically advertise the
  releaselevel and serial for pre-release hermetic toolchains ({gh-issue}2837).

{#​1-5-0-added}

Added

• Repo utilities execute_unchecked, execute_checked, and execute_checked_stdout now
  support log_stdout and log_stderr keyword arg booleans. When these are True
  (the default), the subprocess's stdout/stderr will be logged.
• (toolchains) Local toolchains can be activated with custom flags. See
  [Conditionally using local toolchains] docs for how to configure.
• (pypi) Starlark-based evaluation of environment markers (requirements.txt conditionals)
  available (not enabled by default) for improved multi-platform build support.
  Set the RULES_PYTHON_ENABLE_PIPSTAR=1 environment variable to enable it.
• (utils) Add a way to run a REPL for any rules_python target that returns
  a PyInfo provider.
• (uv) Handle .netrc and auth_patterns auth when downloading uv. Work towards
  #​1975.
• (toolchains) Arbitrary python-build-standalone runtimes can be registered
  and activated with custom flags. See the [Registering custom runtimes]
  docs and {obj}single_version_platform_override() API docs for more
  information.
• (rules) Added support for a using constraints files with compile_pip_requirements.
  Useful when an intermediate dependency needs to be upgraded to pull in
  security patches.
• (toolchains): 3.14.0b2 has been added as a preview.

{#​1-5-0-removed}

Removed

• Nothing removed.

{#​1-4-1}