Matthew Clarkson · Matthew Clarkson · Matthew Clarkson · Matthew Clarkson · Jonathan Watson · Bot
--- a/.bazelrc
+++ b/.bazelrc
-# `bzlmod` pre-release registries
-common --registry https://bcr.bazel.build
-common --registry=https://gitlab.arm.com/bazel/toolchain_utils/-/releases/v1.0.0-beta.18/downloads
-
 # Build cache
 build --experimental_guard_against_concurrent_changes


--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
 include:
-  - component: "${CI_SERVER_HOST}/ci/component/bazelisk/bazelisk@v1.0.0-beta.5"
-    inputs:
-      variables: |
-        CI_PROJECT_DIR
-        CI_PROJECT_ID
-        CI_REMOTE_EXECUTOR
-        CI_REMOTE_CACHE
-        CI_REMOTE_HEADER
-        CI_REMOTE_JOBS
-        CI_BES_RESULTS_URL
-        CI_BES_BACKEND
-        CI_PROJECT_URL
-        CI_COMMIT_REF_NAME
-        CI_COMMIT_SHA
-        CI_SERVER_HOST
-        CI_LOCKFILE_MODE
+  - component: "${CI_SERVER_HOST}/ci/component/bazelisk/ruleset@v1.0.0"

 default:
  tags:
    - arm64
-
-.test:
-  extends: .bazelisk
-  cache:
-    - !reference [.bazelisk, cache]
-    - key: "bazel-cache-${CI_PROJECT_ID}"
-      paths:
-        - ".cache/bazel/disk"
-        - ".cache/bazel/repo"
-  variables:
-    CI_LOCKFILE_MODE: error
-    CONFIG: local
-  script:
-    - cd "${ROOT}"; bazelisk test --config="${CONFIG}" //...
-
-config:
-  extends: .test
-  parallel:
-    matrix:
-      - ROOT:
-          - .
-          - e2e
-        CONFIG:
-          - local
-          - remote
-
-version:
-  extends: .test
-  variables:
-    CI_LOCKFILE_MODE: "off"
-  parallel:
-    matrix:
-      - ROOT:
-          - .
-          - e2e
-        USE_BAZEL_VERSION:
-          - 7.4.0
-          - 7.x
-          - last_rc
-
-# TODO: switch this out for `rules_semantic_release`
-semantic-release:
-  extends: .test
-  stage: .post
-  needs:
-    - config
-    - version
-  image: node:lts
-  cache:
-    key:
-      prefix: "node"
-      files:
-        - package-lock.json
-    paths:
-      - node_modules
-      - .cache/npm
-  before_script:
-    - npm config --location project set cache "${CI_PROJECT_DIR}/.cache/npm"
-    - npm ci --prefer-offline
-  script:
-    - !reference [.bazelisk-fragment, rc]
-    - npx semantic-release
-  rules:
-    - if: $CI_COMMIT_TAG
-      when: never
-    - if: $CI_COMMIT_REF_PROTECTED == "true"
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
+# [1.0.0-beta.17](https://git.gitlab.arm.com/bazel/ape/compare/v1.0.0-beta.16...v1.0.0-beta.17) (2025-01-06)
+
+### Bug Fixes
+
+- upgrade binaries to `cosmo.zip@3.9.2` ([000b768](https://git.gitlab.arm.com/bazel/ape/commit/000b76867773dad719517cca226ba165f6606cce))
+
 # [1.0.0-beta.16](https://git.gitlab.arm.com/bazel/ape/compare/v1.0.0-beta.15...v1.0.0-beta.16) (2024-11-27)

 ### Bug Fixes

--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -18,6 +18,25 @@ $ (cd e2e; bazelisk test //...)
 - Implement the change
 - [Create merge request] from fork

+# Upgrading Binaries
+
+The following script can be ran in a POSIX shell:
+
+```console
+# Clear out all integrities
+sed -i 's|"\([a-z0-9-]\+\)": "sha256.\+",|"\1": "",|g' MODULE.bazel
+# Run a fetch and update integrity
+for BINARY in $(rg --no-line-number '^ +"([a-z0-9-]+)": "",' -or '$1' MODULE.bazel); do
+  INTEGRITY="$(bazelisk fetch @${BINARY}//:entrypoint 2>&1 | rg -o 'sha256-[^"]+')"
+  echo "${BINARY}: ${INTEGRITY}"
+  sed -i "s|\"${BINARY}\": \"\",|\"${BINARY}\": \"${INTEGRITY}\",|" MODULE.bazel
+done
+# Upload all binaries
+for TARGET in $(bazelisk query 'upload:*' | tail -n +2); do
+    bazelisk run "${TARGET}"
+done
+```
+
 # Release

 `semantic-release` performs automatic releases of the project.

--- a/MODULE.bazel
+++ b/MODULE.bazel
--- a/MODULE.bazel.lock
+++ b/MODULE.bazel.lock
@@ -59,17 +59,15 @@
    "https://bcr.bazel.build/modules/rules_python/0.4.0/MODULE.bazel": "9208ee05fd48bf09ac60ed269791cf17fb343db56c8226a720fbb1cdf467166c",
    "https://bcr.bazel.build/modules/stardoc/0.5.1/MODULE.bazel": "1a05d92974d0c122f5ccf09291442580317cdd859f07a8655f1db9a60374f9f8",
    "https://bcr.bazel.build/modules/stardoc/0.5.1/source.json": "a96f95e02123320aa015b956f29c00cb818fa891ef823d55148e1a362caacf29",
-    "https://bcr.bazel.build/modules/toolchain_utils/1.0.0-beta.18/MODULE.bazel": "not found",
+    "https://bcr.bazel.build/modules/toolchain_utils/1.0.0-beta.18/MODULE.bazel": "b90d1ed54151985dd8ed72277885858540fa54d04ade39c9ba26e23c2086255d",
+    "https://bcr.bazel.build/modules/toolchain_utils/1.0.0-beta.18/source.json": "4aa5f1a92e2b36b0723c978713d9aeb54089f2bef25319d7e7b5162e2d1798d2",
    "https://bcr.bazel.build/modules/toolchain_utils/1.0.0-beta.9/MODULE.bazel": "9a8edfa6905229b899225489cbd6db36f073d9455c77238bd6ae6c52da5256d8",
    "https://bcr.bazel.build/modules/upb/0.0.0-20220923-a547704/MODULE.bazel": "7298990c00040a0e2f121f6c32544bab27d4452f80d9ce51349b1a28f3005c43",
    "https://bcr.bazel.build/modules/upb/0.0.0-20220923-a547704/source.json": "f1ef7d3f9e0e26d4b23d1c39b5f5de71f584dd7d1b4ef83d9bbba6ec7a6a6459",
    "https://bcr.bazel.build/modules/zlib/1.2.11/MODULE.bazel": "07b389abc85fdbca459b69e2ec656ae5622873af3f845e1c9d80fe179f3effa0",
    "https://bcr.bazel.build/modules/zlib/1.2.12/MODULE.bazel": "3b1a8834ada2a883674be8cbd36ede1b6ec481477ada359cd2d3ddc562340b27",
    "https://bcr.bazel.build/modules/zlib/1.3.1.bcr.3/MODULE.bazel": "af322bc08976524477c79d1e45e241b6efbeb918c497e8840b8ab116802dda79",
-    "https://bcr.bazel.build/modules/zlib/1.3.1.bcr.3/source.json": "2be409ac3c7601245958cd4fcdff4288be79ed23bd690b4b951f500d54ee6e7d",
-    "https://gitlab.arm.com/bazel/toolchain_utils/-/releases/v1.0.0-beta.18/downloads/bazel_registry.json": "not found",
-    "https://gitlab.arm.com/bazel/toolchain_utils/-/releases/v1.0.0-beta.18/downloads/modules/toolchain_utils/1.0.0-beta.18/MODULE.bazel": "b90d1ed54151985dd8ed72277885858540fa54d04ade39c9ba26e23c2086255d",
-    "https://gitlab.arm.com/bazel/toolchain_utils/-/releases/v1.0.0-beta.18/downloads/modules/toolchain_utils/1.0.0-beta.18/source.json": "29e8dca0c55ecfd911b7f39f0cc2bf5db8ab8d6f03d51eba9dfe9e466266f90f"
+    "https://bcr.bazel.build/modules/zlib/1.3.1.bcr.3/source.json": "2be409ac3c7601245958cd4fcdff4288be79ed23bd690b4b951f500d54ee6e7d"
  },
  "selectedYankedVersions": {},
  "moduleExtensions": {

--- a/e2e/.bazelrc
+++ b/e2e/.bazelrc
-# `bzlmod` pre-release registries
-common --registry https://bcr.bazel.build
-common --registry=https://gitlab.arm.com/bazel/toolchain_utils/-/releases/v1.0.0-beta.18/downloads
-
 # Build cache
 build --experimental_guard_against_concurrent_changes


--- a/e2e/MODULE.bazel.lock
+++ b/e2e/MODULE.bazel.lock
--- a/upload/BUILD.bazel
+++ b/upload/BUILD.bazel
@@ -7,7 +7,7 @@ load("//:binaries.bzl", "BINARIES")
        src = "@{}//:ape".format(ape),
        dst = ape,
        tags = ["manual"],
-        url = "https://gitlab.arm.com/api/v4/projects/bazel%2Fape/packages/generic/cosmos.zip/3.7.1",
+        url = "https://gitlab.arm.com/api/v4/projects/bazel%2Fape/packages/generic/cosmos.zip/3.9.2",
    )
    for ape in (
        "ape-arm64.elf",
@@ -22,7 +22,7 @@ load("//:binaries.bzl", "BINARIES")
        src = "@cosmos-{}//:{}".format(binary, binary),
        dst = binary,
        tags = ["manual"],
-        url = "https://gitlab.arm.com/api/v4/projects/bazel%2Fape/packages/generic/cosmos.zip/3.7.1",
+        url = "https://gitlab.arm.com/api/v4/projects/bazel%2Fape/packages/generic/cosmos.zip/3.9.2",
    )
    for binary in BINARIES
 ]
@@ -32,5 +32,5 @@ curl_upload_file(
    src = "@ape-m1.c",
    dst = "ape-m1.c",
    tags = ["manual"],
-    url = "https://gitlab.arm.com/api/v4/projects/bazel%2Fape/packages/generic/cosmos.zip/3.7.1",
+    url = "https://gitlab.arm.com/api/v4/projects/bazel%2Fape/packages/generic/cosmos.zip/3.9.2",
 )