Repository navigation
Conversation
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
Active findings remain, including a moderate Windows build-regression risk from removing the prior MSVC workaround and a typo in a new comment.
2 open issues
What changed in this PR
Updates CodeQL’s Bazel dependencies to patched releases of fmt 12.2.0 and rules_dotnet 0.22.2, while retaining the .NET SDK pin at 10.0.100.
Changes:
- Upgrades root dependencies to
fmt 12.2.0-codeql.1andrules_dotnet 0.22.2-codeql.1. - Adds registry metadata, source definitions, overlays, and integrity information for both modules.
- Adds
rules_dotnetpatches for module versioning and NuGet archive behavior. - Validation confirmed metadata hashes, patch application, and buildifier formatting; Bazel resolution remains blocked by TLS certificate validation.
| File | Description |
|---|---|
MODULE.bazel |
Selects the updated fmt and rules_dotnet modules. |
misc/bazel/registry/modules/rules_dotnet/metadata.json |
Registers the new rules_dotnet version. |
misc/bazel/registry/modules/rules_dotnet/0.22.2-codeql.1/source.json |
Defines the release archive, integrity hash, and patches. |
misc/bazel/registry/modules/rules_dotnet/0.22.2-codeql.1/patches/revert_additional_files_in_nuget_archive.patch |
Restores the desired NuGet archive behavior. |
misc/bazel/registry/modules/rules_dotnet/0.22.2-codeql.1/patches/module_dot_bazel_version.patch |
Sets the patched module version. |
misc/bazel/registry/modules/rules_dotnet/0.22.2-codeql.1/MODULE.bazel |
Configures the pinned .NET SDK and module dependencies. Review note: the comment contains the typo buit, which should be built. |
misc/bazel/registry/modules/fmt/metadata.json |
Registers the new fmt version. |
misc/bazel/registry/modules/fmt/12.2.0-codeql.1/source.json |
Defines the fmt archive, overlays, and integrity hashes. |
misc/bazel/registry/modules/fmt/12.2.0-codeql.1/overlay/MODULE.bazel |
Provides patched module metadata and dependencies. |
misc/bazel/registry/modules/fmt/12.2.0-codeql.1/overlay/BUILD.bazel |
Defines the fmt Bazel target, licensing, and package metadata. Review note: preserve the MSVC FMT_UNICODE=0 define from the prior overlay unless the upgrade has a verified fix for the known Windows UTF-8 build failure. |
misc/bazel/registry/modules/fmt/12.2.0-codeql.1/MODULE.bazel |
Provides the versioned fmt module definition. |
This pull request requires changes.
Review effort: Lite (auto)
jketema
marked this pull request as draft
October 30, 2026 10:35
Add and use patched registry versions for fmt 12.2.0 and rules_dotnet 0.22.2, preserving the Windows Unicode workaround, NuGet archive patch, and rules_shell declaration. Update the root and module .NET SDK toolchains to 10.0.201. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
jketema
force-pushed
the
copilot/patch-latest-bazel-deps
branch
from
October 30, 2026 13:17
bf55260 to
d048fc9
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.


Summary
FMT_UNICODE=0workaround, the rules_dotnet NuGet archive patch, and the existing rules_shell 0.6.1 dependency declaration.Validation
misc/bazel/registry/fix.py; overlay and patch hashes verified.