Skip to content

Conversation

@bstoll
Copy link
Contributor

@bstoll bstoll commented Oct 15, 2025

Add openconfig_attestz@0.6.0

@bstoll
Copy link
Contributor Author

bstoll commented Oct 15, 2025

@bazel-io skip_check unstable_url

@bazel-io
Copy link
Member

Hello @marcushines, modules you maintain (openconfig_attestz) have been updated in this PR.
Please review the changes. You can view a diff against the previous version in the "Generate module diff" check.

@bazel-io bazel-io added the skip-url-stability-check Skip the URL stability check for the PR label Oct 15, 2025
Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This PR adds version 0.6.0 of openconfig_attestz. My review found a critical issue with the provided patch file, which attempts to modify a MODULE.bazel file that does not exist in the source archive, which would cause presubmit to fail. I have provided a corrected patch that creates the file instead. Additionally, I've identified an unused grpc dependency in the MODULE.bazel file that should be removed to simplify the dependency graph for consumers.

Comment on lines +1 to +10
--- MODULE.bazel
+++ MODULE.bazel
@@ -1,6 +1,6 @@
module(
name = "openconfig_attestz",
- version = "0.0.0",
+ version = "0.6.0",
)

bazel_dep(name = "gazelle", version = "0.45.0", repo_name = "bazel_gazelle")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

This patch attempts to modify a MODULE.bazel file, but this file does not exist in the upstream source archive for tag v0.6.0. This will cause the patch to fail during presubmit checks. The patch should instead be written to create the MODULE.bazel file.

I have also taken the liberty of removing the seemingly unused bazel_dep on grpc from the suggested patch content below.

--- /dev/null
+++ MODULE.bazel
@@ -0,0 +1,16 @@
+module(
+    name = "openconfig_attestz",
+    version = "0.6.0",
+)
+
+bazel_dep(name = "gazelle", version = "0.45.0", repo_name = "bazel_gazelle")
+bazel_dep(name = "protobuf", version = "32.1", repo_name = "com_google_protobuf")
+bazel_dep(name = "rules_go", version = "0.57.0", repo_name = "io_bazel_rules_go")
+bazel_dep(name = "rules_proto", version = "7.1.0")
+
+go_sdk = use_extension("@io_bazel_rules_go//go:extensions.bzl", "go_sdk")
+go_sdk.download(version = "1.25.1")
+
+go_deps = use_extension("@bazel_gazelle//:extensions.bzl", "go_deps")
+go_deps.from_file(go_mod = "//:go.mod")
+use_repo(go_deps, "com_github_golang_glog", "com_github_google_go_cmp", "org_golang_google_grpc", "org_golang_google_grpc_cmd_protoc_gen_go_grpc", "org_golang_google_protobuf", "com_github_google_go_tpm")

)

bazel_dep(name = "gazelle", version = "0.45.0", repo_name = "bazel_gazelle")
bazel_dep(name = "grpc", version = "1.74.1", repo_name = "com_github_grpc_grpc")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

This bazel_dep on grpc (the C++ library) appears to be unused for this Go module. The necessary Go gRPC dependencies are fetched via go_deps from go.mod, and rules_go utilizes the Go gRPC protoc plugin from those dependencies. Removing this unused dependency will simplify the dependency graph for consumers of this module.

bazel-io
bazel-io previously approved these changes Oct 15, 2025
Copy link
Member

@bazel-io bazel-io left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All modules in this PR have been approved by their maintainers. This PR will be merged if all presubmit checks pass.

@bazel-io bazel-io dismissed their stale review October 16, 2025 19:33

Require module maintainers' approval for newly pushed changes.

bazel-io
bazel-io previously approved these changes Oct 16, 2025
Copy link
Member

@bazel-io bazel-io left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All modules in this PR have been approved by their maintainers. This PR will be merged if all presubmit checks pass.

@bstoll
Copy link
Contributor Author

bstoll commented Oct 20, 2025

@bazel-io skip_check incompatible_flags

@bazel-io bazel-io added the skip-incompatible-flags-test Bypass the incompatible flags test in BCR presubmit label Oct 20, 2025
@bstoll
Copy link
Contributor Author

bstoll commented Oct 20, 2025

I am not sure why the earlier CI run failed: the presubmit.yml contains the incompatible_flags --incompatible_autoload_externally= in the commit and the CI logs seem to mention it seeing this flag, but it still checked the flag and failed. Is it always required to have skip-incompatible-flags-test if you have any incompatible flags?

@bazel-io bazel-io dismissed their stale review October 21, 2025 16:45

Require module maintainers' approval for newly pushed changes.

Copy link
Member

@bazel-io bazel-io left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All modules in this PR have been approved by their maintainers. This PR will be merged if all presubmit checks pass.

@bstoll
Copy link
Contributor Author

bstoll commented Oct 21, 2025

@bazelbuild/bcr-maintainers can the presubmit.yml change be approved to run CI?

@Wyverald Wyverald added the presubmit-auto-run Presubmit jobs will be triggered for new changes automatically without reviewer's approval label Oct 21, 2025
@bazel-io bazel-io merged commit f1cb691 into bazelbuild:main Oct 21, 2025
14 checks passed
@bazel-io bazel-io added the auto-merged This PR is automatically merged by the BCR reviewer bot. label Oct 21, 2025
@bstoll bstoll deleted the attestz-release branch October 22, 2025 02:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merged This PR is automatically merged by the BCR reviewer bot. presubmit-auto-run Presubmit jobs will be triggered for new changes automatically without reviewer's approval skip-incompatible-flags-test Bypass the incompatible flags test in BCR presubmit skip-url-stability-check Skip the URL stability check for the PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants