ExternalDeps:

• In environment variable values set via --repo_env, the substring %bazel_workspace% is now replaced with the absolute path of the current Bazel workspace. This can, for example, be used to make tools checked into the repository available on the PATH for repository rules. (#27562)
• --override_repository now supports apparent repository names from the point of view of the main repository. An unknown apparent repo name will result in an error. (#27898)
• The values of keyword arguments passed to use_repo can now contain the special substrings {name} and {version}, which are treated as equivalent to the corresponding attributes of the current module. (#28016)

General:

• The Python six library is no longer part of @external_tools.
• The "blaze --quiet" command line option can now be used to make Blaze emit much less output.
• The stripPrefix parameter of repository_ctx.download_and_extract() and repository_ctx.extract() has been renamed to strip_prefix; the deprecated stripPrefix name remains usable for compatibility.
• A no-config transition is now available as config.no_config().
• Actions that create runfiles trees are now considered regular actions. This means that they are now reported in statistics, critical paths and the like.
• External repositories that are managed by Bzlmod can now contain a top-level external directory or package.
• [Incompatible] On Windows, a change to the output base locking protocol might cause an older Bazel invoked immediately after a newer Bazel (on the same output base) to error out instead of blocking for the lock, even if --block_for_lock is enabled.
• REPO.bazel now allows another directive, "ignore_directories()". It takes a list of directories to ignore just like .bazelignore does, but with glob semantics.
• [Incompatible] The --watchfs startup option is now a no-op and will be removed in April 2025. Use the --watchfs command option instead.
• repository_ctx.execute can now remove an environment variable when executing a process by associating it with the value None in the environment argument.
• Add inherit_attrs param to macro() to allow symbolic macros to inherit attributes from rules or other symbolic macros.
• [Incompatible] The mnemonic passed to --worker_extra_flag is now matched against the worker key mnemonic when one is available, instead of the action mnemonic. This makes it consistent with other worker flags taking a mnemonic.
• bazel mod now tries to evaluate all module extensions, even when some have failed to evaluate.
• Commands executed by "bazel run" now have two extra environment variables: $BUILD_ID indicates the id of the Bazel command and $BUILD_EXECROOT indicates the execroot of the Bazel server.
• The new --inject_repository flag can be used to add new repositories via the CLI with --enable_bzlmod. Such repositories behave as if they were declared by local_repository via use_repo_rule in the root module.
• Add a set data type to Starlark, guarded by the --experimental_enable_starlark_set flag.
• symbolic macro attribute inheritance is now marked experimental; set --experimental_enable_macro_inherit_attrs flag to enable it.
• Changing any part of --run_under that isn't the label (such as the shell command) no longer invalidates the analysis cache.
• [Incompatible] Changing --test_env no longer invalidates the analysis cache. ctx.configuration.test_env may be empty for non-test rules and should not be used by such rules.
• The progress of completed configured aspects is now shown in the UI, next to the number of completed targets. Example: "(100 packages loaded, 10000 targets and 500 aspects configured)".
• archive_override now accepts all attributes usable with http_archive; similar for git_override and git_repository.
• Fixed an issue where genquery in external repos would evaluate labels as if they were in the main repo.
• Re-enable symbolic macro attribute inheritance.
• [Incompatible] The legacy @bazel_tools//tools/build_defs/repo:maven_rules.bzl rule for downloading Maven artifacts has been deleted. Consider migrating to rules_jvm_external if you are using this rule.
• Fix starlark_doc_extract proto output for symbolic macro visibility, attribute inheritance, and rule finalizers; and remove non-existent "name" attribute from starlark_doc_extract output for aspects.
• Java tests are no longer run with a SecurityManager that prevents System.exit, since SecurityManager functionality is being removed from the JDK.
• Baseline coverage files are no longer ignored.
• select() on cpu, host_cpu, or `crosstool_top now emits a "deprecated flag" warning
• --max_idle_secs now takes system sleep time into account when deciding when to shutdown the blaze server.
• Flip --experimental_enable_starlark_set and enable the Starlark set data type by default.
• Materializer functions now have access to the label of the rule they are running on as ctx.label .
• Extra targets provided to ctx.expand_location now expand to their executable (if any) instead of resulting in an error if they provide a number of files different from one. [Incompatible] The --incompatible_locations_prefers_executable flag has been added and enabled, which makes it so that ctx.expand_location expands $(locations :x) to the executable of an extra target :x if it provides one and the number of files provided by it is not one.
• On Linux, the default limit on the number of --watchfs file events per directory has been raised to 10,000 (from 500). If needed, it can be increased further via --host_jvm_args=-Djdk.nio.file.WatchService.maxEventsPerPoll=<limit>.
• Add a definition of the pacakge_metadata attribute.
• [Incompatible] The --incompatible_locations_prefers_executable flag has been added and enabled, which makes it so that ctx.expand_location expands $(locations :x) to the executable of an extra target :x if it provides one and the number of files provided by it is not one.
• [Incompatible] The --enable_bzlmod and --enable_workspace flags are now no-ops. Bzlmod is now always enabled, and WORKSPACE is always disabled.
• The new exec_group_compatible_with attribute on all rules accepts a dictionary mapping exec group names to lists of additional constraints to request from the exec group's execution platform.
• Removes the --incompatible_enable_cc_test_feature flag. The functionality this was intended for was never completed, and is no longer needed.
• [Incompatible] Constraints and toolchain requirements added to the default exec group, for example via the toolchains parameter of the rule function or the exec_compatible_with attribute on all rules, no longer apply to the test exec group, which contains the test action on test rules. Instead, use exec_group_compatible_with to apply constraints and/or define an explicit test exec group with toolchain requirements on test rules that require it.
• Added repository_ctx.original_name, which contains the original value of the name attribute as specified at the repo rule call site.
• The new no_match_error attribute on toolchain_type can be used to show a custom message when no matching toolchain is found for that type, but one is required.
• Adds ctx.rule.var to allow aspects to get rule-specific variables, and removes rule-specific variables from an aspect's ctx.var dict.
• LCOV parsing does not break on FN lines including an end line number.
• [Incompatible] The canonical names of repos created with use_repo_rule have changed, which may require updating command-line flags such as --override_repository.
• Add no_toolchain_error to the platform rule, to customize error messages when a required toolchain type cannot be found for that platform.
• Flag --incompatible_remote_use_new_exit_code_for_lost_inputs is deleted.
• None:
• The new --@bazel_tools//tools/test:incompatible_use_default_test_toolchain flag can be used to have test actions select an execution platform that has all the constraints provided by the target platform instead of always selecting the first available execution platform. This supersedes the --use_target_platform_for_tests flag.
• --experimental_downloader_config is now no longer experimental, and has been renamed to --downloader_config. The old flag name can still be used.
• The config command now reports which configurations have had the test configuration trimmed.
• Stop documenting the vestigial distribs attribute.
• Turn the distribs common attribute into a no-op. See #19369
• Set generator_name, generator_function, generator_location, and the full Starlark stack for rule targets instantiated in a symbolic macro.
• Soft deprecate bazel startup option --write_command_log. User should switch to use command option with the same name or look at the build event messages.
• Add better defaults for mobile-install flags
• [Incompatible] struct providers are not supported in aspects
• The (deprecated) output_licenses attribute is now a string list rather than an internal data type. The only visible change may be that some query output may change from printing capitalized values of inputs will now show lower case.
• [Incompatible] When remote execution fails and an action is executed locally, modifications of its inputs during execution are now checked according to the value of the --guard_against_concurrent_changes flag rather than as if that flag was set to full.
• [Incompatible] accessing struct providers is not supported anymore
• [Incompatible] The --verbose_explanations flag is now a no-op: the additional information it produced wasn't useful enough to justify the memory cost of the additional bookkeeping.
• User-provided repo names may now start with a number.
• java_import.jars attributes can no longer be empty, and --noincompatible_disallow_java_import_empty_jars is no longer supported
• Added --verbose_visibility_errors for printing more information when a visibility violation occurs.
• [Incompatible] Starlark computation step limits are now enforced for symbolic macros.
• Added a new flag --repo_contents_cache (defaults to the contents directory under the --repository_cache) where Bazel stores fetched contents of repos that can be safely cached across workspaces. A repo rule can indicate cacheability by returning repository_ctx.repo_metadata(reproducible=True) from its implementation function.
• [Incompatible] Baseline coverage files for individual tests are no longer announced in the BES. Instead, a new baseline_report.lcov file containing the merged baseline coverage information for the entire invocation is now announced in the BES. It is also still merged into the combined report.
• [Incompatible] The watchfs startup option has been removed.
• File change checks for non-output, non-repo external files can now be disabled with the --experimental_check_external_other_files flag.
• [Incompatible] The bazel sync command has been removed. Use bazel fetch --all instead.
• java_import.jars attributes can no longer be empty, and --noincompatible_disallow_java_import_empty_jars is no longer supported
• The --incompatible_disable_native_repo_rules flag is flipped and graveyarded. The local_config_platform builtin module has been removed.
• The --experimental_split_xml_postprocessing flag no longer exists.
• [Incompatible] strings in attribute's "provides" parameters are no longer supported
• Added the load_wasm and execute_wasm methods to repository_ctx and module_ctx that allow repo rules and module extensions to run a WebAssembly binary. These methods are only available if --experimental_repository_ctx_execute_wasm is set.
• Singlejar can exclude certain entries
• Rules can now register their own baseline coverage files in LCOV format via the new baseline_coverage_files parameter of ctx.instrumented_files_info. If the target matches the instrumentation filter, Bazel will merge the data into the combined coverage report generated with --combined_report.
• repository_ctx.download_and_extract now supports the .whl file extension for Python wheel files, treating them as ZIP archives under PEP 427.
• [Incompatible] --combined_report now defaults to lcov (was: none).
• Added --incompatible_compact_repo_mapping_manifest, which causes the repo mapping manifest file for runfiles to use a more compat format when necessary.
• Branches will always be merged as best as possible based on branch and block numbers during coverage report generation.
• --experimental_worker_for_repo_fetching is removed.
• Modules backed by http_archive or git_repository no longer require a MODULE.bazel file to be contained in the source archive.
• The mnemonic of a file write action can now be set via the mnemonic parameter of ctx.actions.write.
• Symbolic macros which use inherit_attrs now correctly inherit the aspect_hints attribute.
• [Incompatible] linking_context.linkstamps has been removed.
• If a cc toolchain feature named shorten_virtual_includes is enabled, virtual include header files are linked under bin/_virtual_includes/<hash of target path> instead of bin/<target package path>/_virtual_includes/<target name>. This shortens the virtual include paths which is critical for mitigating long path issue with MSVC on Windows.
• ctx.actions.write now supports path mapping when passed an Args object. Use the mnemonics attribute to assign it a dedicated mnemonic, which can then be used with --modify_execution_info to opt in to path mapping (see https://github.com/bazelbuild/bazel/discussions/22658 for details on path mapping).
• The new --*_env==NAME syntax can be used with any of --action_env, --host_action_env, --repo_env, --run_env, and --test_env to undo any previous occurrences of the respective flags for that environment variable name. For --repo_env and --run_env, this also results in the variable being unset if it is set in the environment of the Bazel client.
• Tool paths specified in cc_toolchain action configs are now normalized based on the current execution platform's OS rather than the host OS. In particular, Windows-style absolute paths are now treated as absolute paths when building on a Windows executor from a non-Windows host.
• The --experimental_cancel_concurrent_tests option now accepts the values on_passed, on_failed and never and cancels concurrent test runs on the first matching result. If enabled, it's now effective by default and no longer requires --test_strategy=standalone to be passed explicitly.
• Added flag --experimental_thread_dump_interval to allow Bazel dump threads periodically.
• [Incompatible] --incompatible_filegroup_runfiles_for_data is now enabled by default. See https://github.com/bazelbuild/bazel/issues/26330 for details.
• [Incompatible] Use -I instead of -isystem for cc_library / cc_binary includes attr. To use -isystem for only external repositories, you can pass --features=external_include_paths --host_features=external_include_paths. To use -isystem for a single cc_library / cc_binary includes, you can set features = ["system_include_paths"], on the target
• Flip --incompatible_target_cpu_from_platform to enable setting TARGET_CPU make variable based on the target platform.
• The new --module_mirrors flag accepts a comma-separated list of mirrors to use for source URLs provided by modules obtained from Bazel registries.
• "blaze info install_md5" is now available to tell the logical checksum of the Blaze server. This is mostly intended as a debugging aid.
• The contents of source directories are now tracked for invalidation. Using glob or explicit lists of files to consume source directories is still strongly preferred, but there may be cases in which this isn't feasible (e.g. file names that aren't valid labels).
• [Incompatible] range doesn't accept None as second argument
• [Incompatible] Starlark string.split, string.rsplit don't accept None as argument
• [Incompatible] autoloads are disabled, issue https://github.com/bazelbuild/bazel/issues/23043
• [Incompatible] A single_version_override that pins a module to a lower version than requested in a bazel_dep for that module now results in an error instead of silently ignoring the bazel_dep version requirement. This is meant to catch a common source of bugs when updating a bazel_dep without noticing that it is overridden.
• The following rules have been removed from Bazel and must be loaded from @rules_cc: cc_binary, cc_import, cc_library, cc_shared_library, cc_shared_library, cc_static_library, cc_test, cc_toolchain, cc_toolchain_alias, objc_import, objc_library, fdo_prefetch_hints, fdo_profile, memprof_profile, propeller_optimize
• [Incompatible] Starlark list methods don't accept Nones.
• --incompatible_use_python_toolchains=false no longer works. Python rules can no longer set runtimes with --python_top. See https://rules-python.readthedocs.io/en/latest/toolchains.html for toolchain & runtime configuration guidance.
• With the new --incompatible_eagerly_resolve_select_keys flag, the label string keys of select dicts in .bzl files are resolved relative to the containing file instead of relative to the BUILD file that ends up using the select. Use native.package_relative_label if this is not desired.
• The new ctx.configuration.short_id field provides a short identifier for the current configuration that is understood by bazel config.
• native.existing_rule() and native.existing_rules() now correctly handle labels pointing to a different repo.
• Starlark string.split(), string.rsplit() now allow sep and maxsplit to be provided as keyword arguments.
• With --experimental_check_external_repository_files enabled (the default), Bazel will now refetch the respective repositories when it encounters external modifications. This is necessary to ensure correct incrementality. If you rely on external modifications to these repositories, either disable or the flag or use a supported mechanism such as --override_repository, local_path_override or override_repo.
• Module extensions can store a JSON-like Starlark object in module_ctx.extension_metadata(facts = ...) and retrieve it back in future evaluations of the extension via module_ctx.facts without any invalidation taking place.
• ctx.actions.symlink now accepts a target_type argument.
• OSS Bazel permits but ignores type annotations in .bzl files. Type annotations are experimental, and code that uses them may fail in future versions of Bazel.
• Add support for setting the .bazelrc path via a BAZELRC environment variable.
• If a java_import target's srcjar attribute refers to a source file, the file should exist.
• The --module_mirrors flag now supports specifying mirrors for individual registries via the syntax --module_mirrors=<registry>=<mirror1>[,<mirror2>,...].
• The results of reproducible repository rules without dependencies added at runtime (e.g., via repository_ctx.watch or .getenv) can now be cached in a regular HTTP or gRPC remote cache if the new --experimental_remote_repo_contents_cache startup option is provided.
• [Incompatible] --incompatible_compact_repo_mapping_manifest is now enabled by default. If you encounter issues with runfile lookups failing at runtime, make sure that the language rulesets you use are up-to-date and runfiles libraries support the new format. Further details are available in the tracking issue https://github.com/bazelbuild/bazel/issues/26262.

Performance:

• bazel query/cquery/aquery now supports an executables() function to find only the executable targets in a given expression (#27558)

Remote-Exec:

• The new --remote_max_concurrency_per_connection can be used to specify the maximum number of concurrent gRPC requests Bazel will issue on a single connection to the server. The default value of 100 matches the previous behavior. (#27553)

Acknowledgements:

This release contains contributions from many people at Google, as well as Aaron Sky, Adin Cebic, Adrian Vogelsgesang, Agustin Mista, Alan Mond, Alberto Cavalcante, Alessandro Patti, Alex Eagle, Alex Fax, Alex Novak, Alexander Golovlev, Amit Keren, Ankush Chudiwal, Austin Schuh, bazel.build machine account, Benjamin Peterson, Benji Vos, Benson Muite, Bo Zhang, Boleyn Su, Bradley Bridges, Chi Wang, Chris Sauer, Christian Scott, Christopher Rydell, Chuck Grindel, Cornelius Riemenschneider, Damian Banki, Dan Katz, David Sanderson, David Zbarsky, DeeperMind, dependabot[bot], Dimi Shahbaz, Dmitry Ivankov, Dmitry Ryabkov, Ed Schouten, Eric Riff, Fabian Brandstetter, Fabian Meumertzheim, Farid Zakaria, Fredrik Medley, George Gensure, google-labs-jules[bot], Greg, Grzegorz Lukasik, Han-Wen Nienhuys, helly25, Honnix, hvadehra, hvd, Ian Stapleton Cordasco, jacqueline.lee, Jaden Peterson, James Jenkins, James Judd, Javier Maestro, Jay Conrod, Jim Carroll, jjudd, John Millikin, Jon Shea, Jonathan Schear, Jonathan Woodbury, Jordan, Jordan Mele, kalvdans, Keith Lea, Keith Smiley, Kevin Bernal, Kiron, kxxt, Lev Leontev, Lszl Csomor, Lucas Loffel, Luis Padron, Malte Poll, Marcus Eagan, Mark Reuter, Markus Hofbauer, Matt Brown, Matt Smith, Mike Lundy, Mislav Mandaric, Nathan Naze, nialdaly, Pareesh Madan, Pelikan.B, Peter Li, Peter Lukacs, Philipp Stephani, Pieter Agten, PikachuHy, Rgis Desgroppes, Ricard Sol, Richard Woodbury, Roman Salvador, Rostislav Rumenov, Ruoyu Zhong, Ryan Matthews, Salma Samy, Sara Adams, sarad, Simon Thornington, Siva Mahadevan, Son Luong Ngoc, Spencer Putt, Stephan Pleines, Steve Barrau, Taylor Barrella, tfrench, Thi Don, Timothy Gu, Tobias Werth, Tomasz Pasternak, Torgil Svensson, Ulrik Falklof, Valentin Grigorev, Vy Hong, Wade Carpenter, Will Stranton, Wojciech Mazur, Xdng Yng, xndcn, Xudong Yang, Xùdōng Yáng, Yannic, Yannic Bonenberger, Zachary Kipping, Zhongpeng Lin.

Notice: Bazel installers contain binaries licensed under the GPLv2 with Classpath exception. Those installers should always be redistributed along with the source code.

Some versions of Bazel contain a bundled version of OpenJDK. The license of the bundled OpenJDK and other open-source components can be displayed by running the command bazel license. The vendor and version information of the bundled OpenJDK can be displayed by running the command bazel info java-runtime. The binaries and source-code of the bundled OpenJDK can be downloaded from our mirror server.

Security: All our binaries are signed with our public key 3D5919B448457EE0.