Skip to content

modules: test non-dev bazel_deps have a public loader (part of #10067) - #10137

Merged
TrapsterDK merged 2 commits into
mainfrom
modules-audit-10067
Nov 9, 2026
Merged

TrapsterDK merged 2 commits into
mainfrom
modules-audit-10067

Conversation

@TrapsterDK

@TrapsterDK TrapsterDK commented Nov 9, 2026 •

Copy link
Copy Markdown
Collaborator

Closes #10067.

Adds //modules:loaders_test: it fails when a non-dev bazel_dep in the root MODULE.bazel is loaded by no public .bzl.

The 15 former exceptions are version floors, patched pins, or deps used by root extensions that consumers run, so none can be dev_dependency. modules/pins.bzl is their public loader; ROOT_ONLY is gone. MODULE.bazel and the lockfile are unchanged.

Tested: bazel test //modules:loaders_test passes. Nested-Bazel and consumer tests were not run.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Xut2hwESun1HL2eSVd1d5B

@TrapsterDK
TrapsterDK marked this pull request as ready for review November 9, 2026 16:26
@TrapsterDK
TrapsterDK merged commit b96490a into main Nov 9, 2026
1 check failed
@TrapsterDK
TrapsterDK deleted the modules-audit-10067 branch November 9, 2026 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

modules: audit non-dev bazel_deps and move packaging-only deps off the consumer graph

1 participant