chore: disable build_python_zip by rickeylev · Pull Request #3612 · bazel-contrib/rules_python

rickeylev · 2026-02-18T01:34:55Z

.bazelrc changes that disable --build_python_zip

DO NOT MERGE: await #3611

gemini-code-assist · 2026-02-18T01:35:30Z

Summary of Changes

Hello @rickeylev, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request primarily focuses on refining Bazel build configurations for Python rules, with a significant emphasis on disabling implicit Python zip creation and improving Windows compatibility. It introduces a more robust mechanism for handling config_settings by recognizing and aliasing Bazel's internal command-line options, ensuring consistent behavior across different platforms and build scenarios. The changes also enhance the runfiles lookup process, making it more resilient to various build environments.

Highlights

Bazel Configuration Updates: The pull request disables the implicit Python zip creation (--build_python_zip) across the main .bazelrc file and numerous example/test .bazelrc files, addressing issue 3567.
Enhanced config_settings Handling: Introduced special handling for //command_line_option labels within config_settings to correctly map them to Bazel-builtin pseudo-targets. Default config_settings are now applied to py_binary and py_test rules, including enable_runfiles for Windows.
Improved Windows Compatibility: Several changes were made to enhance compatibility on Windows, including using .NET for file writing in PowerShell scripts, adjusting runfiles path handling, and adding error handling for file operations.
Runfiles Lookup Enhancements: The Python bootstrap template now includes logic to search for files within the runfiles manifest, improving the reliability of finding executables and main files, especially in complex runfiles environments.
New command_line_option Package: A new command_line_option package was added, defining aliases for Bazel's //command_line_option pseudo-targets, which are used in config_settings.

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Changelog

.bazelrc
- Added flags to disable implicit Python zip creation (--build_python_zip=false and --@rules_python//python/config_settings:build_python_zip=false).
BUILD.bazel
- Included //command_line_option:distribution in the distribution filegroup.
command_line_option/BUILD.bazel
- Added a new BUILD file defining aliases for Bazel's //command_line_option pseudo-targets, such as build_runfile_links and enable_runfiles.
docs/api/rules_python/command_line_option/index.md
- Added new documentation for the //command_line_option package.
examples/build_file_generation/.bazelrc
- Added flags to disable implicit Python zip creation.
examples/bzlmod/.bazelrc
- Added flags to disable implicit Python zip creation.
examples/multi_python_versions/.bazelrc
- Added flags to disable implicit Python zip creation.
examples/pip_parse/.bazelrc
- Added flags to disable implicit Python zip creation.
examples/pip_parse_vendored/.bazelrc
- Added flags to disable implicit Python zip creation.
examples/pip_repository_annotations/.bazelrc
- Added flags to disable implicit Python zip creation.
gazelle/.bazelrc
- Added flags to disable implicit Python zip creation.
gazelle/examples/bzlmod_build_file_generation/.bazelrc
- Added flags to disable implicit Python zip creation.
python/private/attributes.bzl
- Added an important note about special handling for command_line_option labels in config_settings.
- Modified apply_config_settings_attr to correctly process command_line_option package labels.
python/private/build_data_writer.ps1
- Refactored file writing to use .NET WriteAllLines for improved Windows compatibility and added ACL setting for the output file.
python/private/common_labels.bzl
- Added new labels for BUILD_RUNFILE_LINKS, ENABLE_RUNFILES, and PLATFORMS_OS_WINDOWS.
- Reordered the PIP_ENV_MARKER_CONFIG label.
python/private/py_binary_macro.bzl
- Replaced the direct call to convert_legacy_create_init_to_int with common_executable_macro_kwargs_setup.
python/private/py_executable.bzl
- Updated _create_stage1_bootstrap to use runfiles_root_path for stage2_bootstrap paths.
- Introduced add_config_setting_defaults to apply default config_settings, including enable_runfiles for Windows.
- Created common_executable_macro_kwargs_setup to consolidate common macro keyword argument setup.
- Updated _transition_executable_impl and create_executable_rule_builder to include build_runfile_links and enable_runfiles in transition inputs and outputs.
python/private/py_test_macro.bzl
- Replaced the direct call to convert_legacy_create_init_to_int with common_executable_macro_kwargs_setup.
python/private/python_bootstrap_template.txt
- Removed a comment about runfiles-relative path and added one for runfiles-root-relative path.
- Added maybe_find_in_manifest function to search for files in the runfiles manifest.
- Modified FindBinary to utilize maybe_find_in_manifest and improved error messages.
- Added find_main_file to centralize main file lookup, incorporating manifest search.
- Expanded verbose logging for bootstrap variables.
python/private/stage2_bootstrap_template.py
- Added a comment regarding BUILD_DATA_FILE path conversion for Windows.
- Modified get_build_data to handle Windows path separators, use utf-8-sig encoding, and include detailed error notes.
- Added a comment to find_runfiles_root about --enable_runfiles=false.
tests/bootstrap_impls/BUILD.bazel
- Loaded py_binary and py_test rules.
- Added a new py_test target named system_python_nodeps_test.
tests/bootstrap_impls/system_python_nodeps_test.py
- Added a simple Python script for testing purposes.
tests/build_data/BUILD.bazel
- Added tags = ["manual"] to the tool_build_data genrule.
tests/integration/compile_pip_requirements/.bazelrc
- Added flags to disable implicit Python zip creation.
tests/integration/compile_pip_requirements_test_from_external_repo/.bazelrc
- Added flags to disable implicit Python zip creation.
tests/integration/local_toolchains/.bazelrc
- Added flags to disable implicit Python zip creation.
tests/integration/pip_parse/.bazelrc
- Added flags to disable implicit Python zip creation.
tests/integration/py_cc_toolchain_registered/.bazelrc
- Added flags to disable implicit Python zip creation.
tests/pypi/whl_installer/wheel_installer_test.py
- Modified tearDown to ignore errors when removing the wheel directory, specifically addressing Windows issues.
tests/support/py_reconfig.bzl
- Removed direct iteration over config_settings in _perform_transition_impl.
- Added build_runfile_links, extra_toolchains, and stamp to _RECONFIG_INPUTS.

Activity

The pull request includes .bazelrc changes to disable --build_python_zip.
The author has marked this PR with 'DO NOT MERGE: await fix: better bootstrap manifest handling #3611', indicating it is dependent on another issue or PR.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	`/gemini review`	Performs a code review for the current pull request in its current state.
Pull Request Summary	`/gemini summary`	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	`/gemini help`	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

gemini-code-assist

Code Review

This pull request disables implicit Python zip creation by default across .bazelrc files and updates related configurations. A critical security concern was identified in a PowerShell script, where overly permissive file permissions granted to "Everyone" could lead to information leakage in shared build environments. Furthermore, while the supporting code changes are well-executed and improve robustness, especially for Windows, documentation for the new //command_line_option feature is suggested to enhance usability and maintainability.

gemini-code-assist · 2026-02-18T01:38:04Z

python/private/build_data_writer.ps1

+$Acl = Get-Acl $OutputPath
+$AccessRule = New-Object System.Security.AccessControl.FileSystemAccessRule("Everyone", "Read", "Allow")
+$Acl.SetAccessRule($AccessRule)
+Set-Acl $OutputPath $Acl


The script explicitly sets the Access Control List (ACL) of the output build data file to allow "Everyone" read access. This is overly permissive and violates the Principle of Least Privilege. In a shared environment, such as a multi-user CI server or a shared development machine, any user on the system can read the contents of this file.

While the file primarily contains build metadata (target name, config mode, etc.), it also includes the contents of the workspace status files (VERSION_FILE and INFO_FILE). These files can contain sensitive information depending on the user's workspace status script configuration.

Consider removing this ACL change or using a more restrictive group such as "Authenticated Users" if explicit permissions are necessary.

$Acl = Get-Acl $OutputPath $AccessRule = New-Object System.Security.AccessControl.FileSystemAccessRule("Authenticated Users", "Read", "Allow") $Acl.SetAccessRule($AccessRule) Set-Acl $OutputPath $Acl

gemini-code-assist · 2026-02-18T01:38:04Z

command_line_option/BUILD.bazel

+# todo: add docs, xref with config_settings
+# rules_python target, config_setting processing code converts it to the
+# Bazel-builtin //command_line_label:build_runfile_links psuedo-target
+alias(
+    name = "build_runfile_links",
+    actual = "//python:none",
+)
+
+# todo: add docs
+alias(
+    name = "enable_runfiles",
+    actual = "//python:none",
+)


The new aliases build_runfile_links and enable_runfiles have todo: add docs comments. It would be beneficial to add this documentation as part of this PR to make the new feature easier for users to understand. The documentation could explain what these aliases are for, how they relate to the Bazel built-in command line options, and include a cross-reference to config_settings as noted in the comment.

gemini-code-assist · 2026-02-18T01:38:04Z

docs/api/rules_python/command_line_option/index.md

+:::{default-domain} bzl
+:::
+:::{bzl:currentfile} //command_line_option:BUILD.bazel
+:::
+
+# //command_line_option


This documentation file is currently a stub. It would be beneficial to expand it to document the new //command_line_option feature, including the available aliases and how to define custom ones. This would make the feature more discoverable and usable.

…l-contrib#3008) Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.4.0 to 2.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p> <blockquote> <h2>2.5.0</h2> <h2>🚀 urllib3 is fundraising for HTTP/2 support</h2> <p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p> <p>Thank you for your support.</p> <h1>Security issues</h1> <p>urllib3 2.5.0 fixes two moderate security issues:</p> <ul> <li>Pool managers now properly control redirects when <code>retries</code> is passed — CVE-2025-50181 reported by <a href="https://github.com/sandumjacob"><code>@sandumjacob</code></a> (5.3 Medium, GHSA-pq67-6m6q-mj2v)</li> <li>Redirects are now controlled by urllib3 in the Node.js runtime — CVE-2025-50182 (5.3 Medium, GHSA-48p4-8xcf-vxj5)</li> </ul> <h1>Features</h1> <ul> <li>Added support for the <code>compression.zstd</code> module that is new in Python 3.14. See <a href="https://peps.python.org/pep-0784/">PEP 784</a> for more information. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3610">#3610</a>)</li> <li>Added support for version 0.5 of <code>hatch-vcs</code> (<a href="https://redirect.github.com/urllib3/urllib3/issues/3612">#3612</a>)</li> </ul> <h1>Bugfixes</h1> <ul> <li>Raised exception for <code>HTTPResponse.shutdown</code> on a connection already released to the pool. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3581">#3581</a>)</li> <li>Fixed incorrect <code>CONNECT</code> statement when using an IPv6 proxy with <code>connection_from_host</code>. Previously would not be wrapped in <code>[]</code>. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3615">#3615</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's changelog</a>.</em></p> <blockquote> <h1>2.5.0 (2025-06-18)</h1> <h2>Features</h2> <ul> <li>Added support for the <code>compression.zstd</code> module that is new in Python 3.14. See <code>PEP 784 <https://peps.python.org/pep-0784/></code>_ for more information. (<code>[bazel-contrib#3610](urllib3/urllib3#3610) <https://github.com/urllib3/urllib3/issues/3610></code>__)</li> <li>Added support for version 0.5 of <code>hatch-vcs</code> (<code>[bazel-contrib#3612](urllib3/urllib3#3612) <https://github.com/urllib3/urllib3/issues/3612></code>__)</li> </ul> <h2>Bugfixes</h2> <ul> <li>Fixed a security issue where restricting the maximum number of followed redirects at the <code>urllib3.PoolManager</code> level via the <code>retries</code> parameter did not work.</li> <li>Made the Node.js runtime respect redirect parameters such as <code>retries</code> and <code>redirects</code>.</li> <li>Raised exception for <code>HTTPResponse.shutdown</code> on a connection already released to the pool. (<code>[bazel-contrib#3581](urllib3/urllib3#3581) <https://github.com/urllib3/urllib3/issues/3581></code>__)</li> <li>Fixed incorrect <code>CONNECT</code> statement when using an IPv6 proxy with <code>connection_from_host</code>. Previously would not be wrapped in <code>[]</code>. (<code>[bazel-contrib#3615](urllib3/urllib3#3615) <https://github.com/urllib3/urllib3/issues/3615></code>__)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/urllib3/urllib3/commit/aaab4eccc10c965897540b21e15f11859d0b62e7"><code>aaab4ec</code></a> Release 2.5.0</li> <li><a href="https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f"><code>7eb4a2a</code></a> Merge commit from fork</li> <li><a href="https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857"><code>f05b132</code></a> Merge commit from fork</li> <li><a href="https://github.com/urllib3/urllib3/commit/d03fe327a71d09728512217149f269763671f296"><code>d03fe32</code></a> Fix HTTP tunneling with IPv6 in older Python versions</li> <li><a href="https://github.com/urllib3/urllib3/commit/11661e9bb4278e43d081f47a516e287a928c2206"><code>11661e9</code></a> Bump github/codeql-action from 3.28.0 to 3.29.0 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3624">#3624</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/6a0ecc6b16fe30f721021b44a81d19615098c71e"><code>6a0ecc6</code></a> Update v2 migration guide to 2.4.0 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3621">#3621</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/8e32e60d9024c05bc6f7adda08bdf6c539d0b0d4"><code>8e32e60</code></a> Raise exception for shutdown on a connection already released to the pool (<a href="https://redirect.github.com/urllib3/urllib3/issues/3">#3</a>...</li> <li><a href="https://github.com/urllib3/urllib3/commit/9996e0fbf90b77083ad3c73737a6c6395703faa9"><code>9996e0f</code></a> Fix emscripten CI for Chrome 137+ (<a href="https://redirect.github.com/urllib3/urllib3/issues/3599">#3599</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/4fd1a99a59725faf0efc946ce3b6bc9a194420af"><code>4fd1a99</code></a> Bump RECENT_DATE (<a href="https://redirect.github.com/urllib3/urllib3/issues/3617">#3617</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/c4b5917e911a90c8bf279448df8952a682294135"><code>c4b5917</code></a> Add support for the new <code>compression.zstd</code> module in Python 3.14 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3611">#3611</a>)</li> <li>Additional commits viewable in <a href="https://github.com/urllib3/urllib3/compare/2.4.0...2.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=urllib3&package-manager=pip&previous-version=2.4.0&new-version=2.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/bazel-contrib/rules_python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#3042) Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.4.0 to 2.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/releases">urllib3's releases</a>.</em></p> <blockquote> <h2>2.5.0</h2> <h2>🚀 urllib3 is fundraising for HTTP/2 support</h2> <p><a href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3 is raising ~$40,000 USD</a> to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects <a href="https://opencollective.com/urllib3">please consider contributing financially</a> to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.</p> <p>Thank you for your support.</p> <h1>Security issues</h1> <p>urllib3 2.5.0 fixes two moderate security issues:</p> <ul> <li>Pool managers now properly control redirects when <code>retries</code> is passed — CVE-2025-50181 reported by <a href="https://github.com/sandumjacob"><code>@sandumjacob</code></a> (5.3 Medium, GHSA-pq67-6m6q-mj2v)</li> <li>Redirects are now controlled by urllib3 in the Node.js runtime — CVE-2025-50182 (5.3 Medium, GHSA-48p4-8xcf-vxj5)</li> </ul> <h1>Features</h1> <ul> <li>Added support for the <code>compression.zstd</code> module that is new in Python 3.14. See <a href="https://peps.python.org/pep-0784/">PEP 784</a> for more information. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3610">#3610</a>)</li> <li>Added support for version 0.5 of <code>hatch-vcs</code> (<a href="https://redirect.github.com/urllib3/urllib3/issues/3612">#3612</a>)</li> </ul> <h1>Bugfixes</h1> <ul> <li>Raised exception for <code>HTTPResponse.shutdown</code> on a connection already released to the pool. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3581">#3581</a>)</li> <li>Fixed incorrect <code>CONNECT</code> statement when using an IPv6 proxy with <code>connection_from_host</code>. Previously would not be wrapped in <code>[]</code>. (<a href="https://redirect.github.com/urllib3/urllib3/issues/3615">#3615</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's changelog</a>.</em></p> <blockquote> <h1>2.5.0 (2025-06-18)</h1> <h2>Features</h2> <ul> <li>Added support for the <code>compression.zstd</code> module that is new in Python 3.14. See <code>PEP 784 <https://peps.python.org/pep-0784/></code>_ for more information. (<code>[bazel-contrib#3610](urllib3/urllib3#3610) <https://github.com/urllib3/urllib3/issues/3610></code>__)</li> <li>Added support for version 0.5 of <code>hatch-vcs</code> (<code>[bazel-contrib#3612](urllib3/urllib3#3612) <https://github.com/urllib3/urllib3/issues/3612></code>__)</li> </ul> <h2>Bugfixes</h2> <ul> <li>Fixed a security issue where restricting the maximum number of followed redirects at the <code>urllib3.PoolManager</code> level via the <code>retries</code> parameter did not work.</li> <li>Made the Node.js runtime respect redirect parameters such as <code>retries</code> and <code>redirects</code>.</li> <li>Raised exception for <code>HTTPResponse.shutdown</code> on a connection already released to the pool. (<code>[bazel-contrib#3581](urllib3/urllib3#3581) <https://github.com/urllib3/urllib3/issues/3581></code>__)</li> <li>Fixed incorrect <code>CONNECT</code> statement when using an IPv6 proxy with <code>connection_from_host</code>. Previously would not be wrapped in <code>[]</code>. (<code>[bazel-contrib#3615](urllib3/urllib3#3615) <https://github.com/urllib3/urllib3/issues/3615></code>__)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/urllib3/urllib3/commit/aaab4eccc10c965897540b21e15f11859d0b62e7"><code>aaab4ec</code></a> Release 2.5.0</li> <li><a href="https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f"><code>7eb4a2a</code></a> Merge commit from fork</li> <li><a href="https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857"><code>f05b132</code></a> Merge commit from fork</li> <li><a href="https://github.com/urllib3/urllib3/commit/d03fe327a71d09728512217149f269763671f296"><code>d03fe32</code></a> Fix HTTP tunneling with IPv6 in older Python versions</li> <li><a href="https://github.com/urllib3/urllib3/commit/11661e9bb4278e43d081f47a516e287a928c2206"><code>11661e9</code></a> Bump github/codeql-action from 3.28.0 to 3.29.0 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3624">#3624</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/6a0ecc6b16fe30f721021b44a81d19615098c71e"><code>6a0ecc6</code></a> Update v2 migration guide to 2.4.0 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3621">#3621</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/8e32e60d9024c05bc6f7adda08bdf6c539d0b0d4"><code>8e32e60</code></a> Raise exception for shutdown on a connection already released to the pool (<a href="https://redirect.github.com/urllib3/urllib3/issues/3">#3</a>...</li> <li><a href="https://github.com/urllib3/urllib3/commit/9996e0fbf90b77083ad3c73737a6c6395703faa9"><code>9996e0f</code></a> Fix emscripten CI for Chrome 137+ (<a href="https://redirect.github.com/urllib3/urllib3/issues/3599">#3599</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/4fd1a99a59725faf0efc946ce3b6bc9a194420af"><code>4fd1a99</code></a> Bump RECENT_DATE (<a href="https://redirect.github.com/urllib3/urllib3/issues/3617">#3617</a>)</li> <li><a href="https://github.com/urllib3/urllib3/commit/c4b5917e911a90c8bf279448df8952a682294135"><code>c4b5917</code></a> Add support for the new <code>compression.zstd</code> module in Python 3.14 (<a href="https://redirect.github.com/urllib3/urllib3/issues/3611">#3611</a>)</li> <li>Additional commits viewable in <a href="https://github.com/urllib3/urllib3/compare/2.4.0...2.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=urllib3&package-manager=pip&previous-version=2.4.0&new-version=2.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/bazel-contrib/rules_python/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

rickeylev requested review from aignas, dougthor42 and groodt as code owners February 18, 2026 01:34

rickeylev marked this pull request as draft February 18, 2026 01:35

gemini-code-assist bot reviewed Feb 18, 2026

View reviewed changes

rickeylev added 9 commits February 17, 2026 18:21

fix: use runfiles_root_path in stage2 bootstrap

ea0b4ed

chore: better build data error handling

661fb45

chore: fix rmtree in wheel_installer_test

9d19f30

chore: better bootstrap logging

e364945

test: add system_python_nodeps_test

e1f2c24

feat: command_line_option transition support

06a38b1

update changelog

e774f28

update docs

4187c31

fix: better bootstrap manifest handling

43706c4

rickeylev force-pushed the chore.disable.build.python.zip branch from b806a1d to 9a93f27 Compare February 18, 2026 02:33

chore: disable build_python_zip

cf5e26c

rickeylev force-pushed the chore.disable.build.python.zip branch 2 times, most recently from 8b335c5 to cf5e26c Compare February 18, 2026 02:34

rickeylev closed this Feb 22, 2026

rickeylev deleted the chore.disable.build.python.zip branch February 22, 2026 02:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: disable build_python_zip#3612

chore: disable build_python_zip#3612
rickeylev wants to merge 10 commits intobazel-contrib:mainfrom
rickeylev:chore.disable.build.python.zip

rickeylev commented Feb 18, 2026

Uh oh!

gemini-code-assist bot commented Feb 18, 2026

Uh oh!

gemini-code-assist bot left a comment

Uh oh!

gemini-code-assist bot Feb 18, 2026

Uh oh!

gemini-code-assist bot Feb 18, 2026

Uh oh!

gemini-code-assist bot Feb 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

rickeylev commented Feb 18, 2026

Uh oh!

gemini-code-assist bot commented Feb 18, 2026

Summary of Changes

Highlights

Footnotes

Uh oh!

gemini-code-assist bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

gemini-code-assist bot Feb 18, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist bot Feb 18, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist bot Feb 18, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant