chore(deps): update dependency rules_oci to v1.8.0 #72

renovate · 2024-05-29T22:50:44Z

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

This PR contains the following updates:

Package	Type	Update	Change
rules_oci	bazel_dep	minor	`1.7.4` -> `1.8.0`

Release Notes

bazel-contrib/rules_oci (rules_oci)

`v1.8.0`

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "1.8.0")

### For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@&#8203;rules_oci//oci:extensions.bzl", "oci")

### Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",

### 'latest' is not reproducible, but it's convenient.
### During the build we print a WARNING message that includes recommended 'digest' and 'platforms'

### values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

### For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "46ce9edcff4d3d7b3a550774b82396c0fa619cc9ce9da00c1b09a08b45ea5a14",
    strip_prefix = "rules_oci-1.8.0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v1.8.0/rules_oci-v1.8.0.tar.gz",
)

load("@&#8203;rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@&#8203;rules_oci//oci:repositories.bzl", "LATEST_CRANE_VERSION", "oci_register_toolchains")

oci_register_toolchains(
    name = "oci",
    crane_version = LATEST_CRANE_VERSION,

### Uncommenting the zot toolchain will cause it to be used instead of crane for some tasks.
### Note that it does not support docker-format images.

### zot_version = LATEST_ZOT_VERSION,
)

### You can pull your base images using oci_pull like this:
load("@&#8203;rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

--unwrapScalar for yq cmd by @kczulko in #594
Use a transition to resolve the correct versions of crane and yq by @EdSchouten in #590
Add import_tags attribute to oci_pull by @steve-261370 in #573
fix: Support global credsStore in docker config by @msiebuhr in #602
Document how to use rules_oci with scala by @lukaszwawrzyk in #630
feat(oci_pull): expose the digest as a file by @aignas in #542
feat: provide affordance for OCIImage actions to reserve more resources by @alexeagle in #650

New Contributors

@EdSchouten made their first contribution in #590
@steve-261370 made their first contribution in #573
@msiebuhr made their first contribution in #602
@lukaszwawrzyk made their first contribution in #630
@aignas made their first contribution in #542

Full Changelog: bazel-contrib/rules_oci@v1.7.6...v1.8.0

`v1.7.6`

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "1.7.6")

### For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@&#8203;rules_oci//oci:extensions.bzl", "oci")

### Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",

### 'latest' is not reproducible, but it's convenient.
### During the build we print a WARNING message that includes recommended 'digest' and 'platforms'

### values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

### For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "647f4c6fd092dc7a86a7f79892d4b1b7f1de288bdb4829ca38f74fd430fcd2fe",
    strip_prefix = "rules_oci-1.7.6",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v1.7.6/rules_oci-v1.7.6.tar.gz",
)

load("@&#8203;rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@&#8203;rules_oci//oci:repositories.bzl", "LATEST_CRANE_VERSION", "oci_register_toolchains")

oci_register_toolchains(
    name = "oci",
    crane_version = LATEST_CRANE_VERSION,

### Uncommenting the zot toolchain will cause it to be used instead of crane for some tasks.
### Note that it does not support docker-format images.

### zot_version = LATEST_ZOT_VERSION,
)

### You can pull your base images using oci_pull like this:
load("@&#8203;rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

docs: simplify use of expand_template by @alexeagle in #534
chore: upgrade rules_go and gazelle by @thesayyn in #541
ci: only test with bazel 6, 7 by @thesayyn in #533
Add a minimal c++ example in doc by @rygx in #516
[docs] Add missing name to push examples by @ptxmac in #513
feat: add nvcr.io to _WWW_AUTH by @nobu-k in #511
fix: Add quay back to authn config by @ankit-agarwal1999 in #543
docs: recommend rules_distroless by @thesayyn in #546
Fix #552 and update readme by @chokychou in #554
Reduce GHA caching by @alexeagle in #557
Fix oci_image failing with "%1 is not a valid Win32 application" by @bartoszpop in #556
chore: update aspect url by @gregmagolan in #561
chore: don't cancel concurrent main builds by @gregmagolan in #563
oci_push to support Windows builds by @bartoszpop in #565
Quotes removal from MEDIA_TYPE string. by @kczulko in #577
Return extension_metadata from oci.pull() by @mortenmj in #580
fix: don't include xattr by @alexeagle in #579
feat: Allow setting both tag and digest in oci_pull when reproducible is True by @mark-thm in #587
fix: fix race condition in oci_pull where bazel can write platform manifest contents to the cache entry for image index manifest by @gregmagolan in #596

New Contributors

@rygx made their first contribution in #516
@ptxmac made their first contribution in #513
@nobu-k made their first contribution in #511
@ankit-agarwal1999 made their first contribution in #543
@chokychou made their first contribution in #554
@bartoszpop made their first contribution in #556
@kczulko made their first contribution in #577
@mark-thm made their first contribution in #587

Full Changelog: bazel-contrib/rules_oci@v1.7.5...v1.7.6

`v1.7.5`

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "1.7.5")

### For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@&#8203;rules_oci//oci:extensions.bzl", "oci")

### Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",

### 'latest' is not reproducible, but it's convenient.
### During the build we print a WARNING message that includes recommended 'digest' and 'platforms'

### values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

### For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "56d5499025d67a6b86b2e6ebae5232c72104ae682b5a21287770bd3bf0661abf",
    strip_prefix = "rules_oci-1.7.5",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v1.7.5/rules_oci-v1.7.5.tar.gz",
)

load("@&#8203;rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@&#8203;rules_oci//oci:repositories.bzl", "LATEST_CRANE_VERSION", "oci_register_toolchains")

oci_register_toolchains(
    name = "oci",
    crane_version = LATEST_CRANE_VERSION,

### Uncommenting the zot toolchain will cause it to be used instead of crane for some tasks.
### Note that it does not support docker-format images.

### zot_version = LATEST_ZOT_VERSION,
)

### You can pull your base images using oci_pull like this:
load("@&#8203;rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

image: allow .tar.zst extension on layer tar by @alexeagle in #523
chore: remove examples/ from published artifact by @alexeagle in #524
chore: remove dead code due to duplication by @alexeagle in #522
Support inheriting environment variable that's value contains = by @sfc-gh-mhazy in #526
Revert "feat: use link instead of copy for blobs in oci_image_index" by @thesayyn in #525
Revert "image: allow .tar.zst extension on layer tar" by @alexeagle in #532
Add cosign v2.2.3 by @loosebazooka in #536

New Contributors

@sfc-gh-mhazy made their first contribution in #526
@loosebazooka made their first contribution in #536

Full Changelog: bazel-contrib/rules_oci@v1.7.4...v1.7.5

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot changed the title ~~chore(deps): update dependency rules_oci to v1.7.6~~ chore(deps): update dependency rules_oci to v1.8.0 Jul 12, 2024

renovate bot force-pushed the renovate/rules_oci-1.x branch from f344cba to 1f85669 Compare July 12, 2024 17:23

renovate bot changed the title ~~chore(deps): update dependency rules_oci to v1.8.0~~ chore(deps): update dependency rules_oci to v1.8.0 - autoclosed Aug 13, 2025

renovate bot closed this Aug 13, 2025

renovate bot deleted the renovate/rules_oci-1.x branch August 13, 2025 16:26

renovate bot changed the title ~~chore(deps): update dependency rules_oci to v1.8.0 - autoclosed~~ chore(deps): update dependency rules_oci to v1.8.0 Aug 14, 2025

renovate bot reopened this Aug 14, 2025

renovate bot force-pushed the renovate/rules_oci-1.x branch from 38808a9 to 1f85669 Compare August 14, 2025 11:55

chore(deps): update dependency rules_oci to v1.8.0

12348fa

renovate bot force-pushed the renovate/rules_oci-1.x branch from 1f85669 to 12348fa Compare August 19, 2025 19:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update dependency rules_oci to v1.8.0 #72

chore(deps): update dependency rules_oci to v1.8.0 #72

Uh oh!

renovate bot commented May 29, 2024 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

chore(deps): update dependency rules_oci to v1.8.0 #72

Are you sure you want to change the base?

chore(deps): update dependency rules_oci to v1.8.0 #72

Uh oh!

Conversation

renovate bot commented May 29, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.8.0

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

v1.7.6

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

v1.7.5

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

Configuration

Uh oh!

Uh oh!

renovate bot commented May 29, 2024 •

edited

Loading

`v1.8.0`

`v1.7.6`

`v1.7.5`