Update dependency rules_oci to v2.3.3 by zemnmez-renovate-bot · Pull Request #14430 · zemn-me/monorepo

zemnmez-renovate-bot · 2026-09-30T22:47:50Z

This PR contains the following updates:

Package	Type	Update	Change
rules_oci	bazel_dep	minor	`2.2.7` → `2.3.3`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

bazel-contrib/rules_oci (rules_oci)

`v2.3.3`

Compare Source

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.3.3")

# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "243eac87ec41d68d1d9e6d21884a50ec28e031f702b0b9fcdc7f97c3f3d5389a",
    strip_prefix = "rules_oci-2.3.3",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.3.3/rules_oci-v2.3.3.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

fix(pull): preserve artifactType in index.json for OCI 1.1 images by @loosebazooka in #904

Full Changelog: bazel-contrib/rules_oci@v2.3.2...v2.3.3

`v2.3.2`

Compare Source

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.3.2")

# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "bd269f985e5dd5004295f859a0dc72bf1d5215052dabc5ea7d321f9a178882ab",
    strip_prefix = "rules_oci-2.3.2",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.3.2/rules_oci-v2.3.2.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

fix(authn): run credential helper from the workspace root by @ashi009 in #896
chore: upgrade cosign toolchain to v3.0.6 by @suhalvemu in #893
feat(oci_image_index): support annotations attribute by @yeji-poolside in #897
refactor: drop uncommon tags by @thesayyn in #898
chore: update docs by @thesayyn in #899

New Contributors

@suhalvemu made their first contribution in #893
@yeji-poolside made their first contribution in #897

Full Changelog: bazel-contrib/rules_oci@v2.3.1...v2.3.2

`v2.3.1`

Compare Source

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.3.1")

# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "6d47e0bb9d3c269695cbb35abb603d1db08434376a1210867da8f6f4a9c630ba",
    strip_prefix = "rules_oci-2.3.1",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.3.1/rules_oci-v2.3.1.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

fix: Propagate non-zero tar exit in load.sh by @Silic0nS0ldier in #881
fix: Fix bzlmod repo resolution in oci_pull by @UebelAndre in #891

New Contributors

@Silic0nS0ldier made their first contribution in #881
@UebelAndre made their first contribution in #891

Full Changelog: bazel-contrib/rules_oci@v2.3.0...v2.3.1

`v2.3.0`

Compare Source

Using bzlmod with Bazel 6 or later:

Add common --enable_bzlmod to .bazelrc.
Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.3.0")

# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "e987cab7a35475cb9c9060fc3f338a1fc8896c240295a3272968b217acefd0cb",
    strip_prefix = "rules_oci-2.3.0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.3.0/rules_oci-v2.3.0.tar.gz",
)

load("@rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

Fix muitlarch image builds by using host architecture for jq and crane by @brianmcarey in #869
Allow manifests without explicit mediaType by @ouillie in #868
Update CI to test bazel 8.4.2 and 7.6.2, and build with 8.4.2 by default by @mostynb in #854
fix: Use target tar toolchain for cross-platform execution by @sfc-gh-dbieliaiev in #844
Update platform versions in presubmit.yml by @hofbi in #875
Add Bazel version '8.x' to BCR matrix by @hofbi in #876
ci: fix presubmit by @thesayyn in #873
ci: Add conventional commits check by @hofbi in #877
fix: mark oci extension as reproducible if all pulls are reproducible by @ashi009 in #882
feat: add package metadata with PURL to oci_pull by @stevebarrau in #883
fix: select when exec is windows by @thesayyn in #886
build: Rebased from #842 — original work by @mostynb - Upgrade aspect_bazel_lib 2.7.2 -> 2.21.1 by @GenFlogi in #888

New Contributors

@brianmcarey made their first contribution in #869
@ouillie made their first contribution in #868
@mostynb made their first contribution in #854
@hofbi made their first contribution in #875
@ashi009 made their first contribution in #882
@stevebarrau made their first contribution in #883
@GenFlogi made their first contribution in #888

Full Changelog: bazel-contrib/rules_oci@v2.2.7...v2.3.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

zemnmez-renovate-bot · 2026-09-30T22:47:54Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: MODULE.bazel.lock

Command failed: bazel mod deps --lockfile_mode=update
ERROR: in module dependency chain <root> -> rules_oci@2.3.3: module rules_oci@2.3.3 not found in registries:
* https://bcr.bazel.build/modules/rules_oci/2.3.3/MODULE.bazel: not found

File name: undefined

Command failed: ./sh/postUpgrade.sh
INFO: Invocation ID: 7674a3b8-af0c-4bf3-b756-00c1825acc02
Computing main repo mapping: 
ERROR: Error computing the main repository mapping: in module dependency chain <root> -> rules_oci@2.3.3: module rules_oci@2.3.3 not found in registries:
* https://bcr.bazel.build/modules/rules_oci/2.3.3/MODULE.bazel: not found

zemnmez-renovate-bot requested a review from Zemnmez as a code owner September 30, 2026 22:47

zemnmez-renovate-bot enabled auto-merge September 30, 2026 22:47

zemnmez-renovate-bot force-pushed the renovate/rules_oci-2.x branch 27 times, most recently from 21ab06b to 1f40a49 Compare October 6, 2026 19:55

zemnmez-renovate-bot force-pushed the renovate/rules_oci-2.x branch 20 times, most recently from 3dbf76a to 8c9a1a6 Compare October 11, 2026 20:55

Update dependency rules_oci to v2.3.3

be06cc9

zemnmez-renovate-bot force-pushed the renovate/rules_oci-2.x branch from 8c9a1a6 to be06cc9 Compare October 12, 2026 00:16

Navigation Menu

Repository navigation

Update dependency rules_oci to v2.3.3 - #14430

Update dependency rules_oci to v2.3.3#14430
zemnmez-renovate-bot wants to merge 1 commit into
mainfrom
renovate/rules_oci-2.x

zemnmez-renovate-bot commented Sep 30, 2026 •

edited

Loading

Uh oh!

zemnmez-renovate-bot commented Sep 30, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

zemnmez-renovate-bot commented Sep 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.3.3

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

v2.3.2

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

v2.3.1

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

v2.3.0

Using bzlmod with Bazel 6 or later:

Using WORKSPACE:

What's Changed

New Contributors

Configuration

Uh oh!

zemnmez-renovate-bot commented Sep 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: MODULE.bazel.lock

File name: undefined

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

zemnmez-renovate-bot commented Sep 30, 2026 •

edited

Loading

`v2.3.3`

`v2.3.2`

`v2.3.1`

`v2.3.0`

zemnmez-renovate-bot commented Sep 30, 2026 •

edited

Loading