chore(deps): update dependency rules_oci to v2.3.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
rules_oci	bazel_dep	minor	2.2.6 → 2.3.0

---

Release Notes

bazel-contrib/rules_oci (rules_oci)

v2.3.0

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.3.0")

# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@​rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "e987cab7a35475cb9c9060fc3f338a1fc8896c240295a3272968b217acefd0cb",
    strip_prefix = "rules_oci-2.3.0",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.3.0/rules_oci-v2.3.0.tar.gz",
)

load("@​rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@​rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@​rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

• Fix muitlarch image builds by using host architecture for jq and crane by @​brianmcarey in #​869
• Allow manifests without explicit mediaType by @​ouillie in #​868
• Update CI to test bazel 8.4.2 and 7.6.2, and build with 8.4.2 by default by @​mostynb in #​854
• fix: Use target tar toolchain for cross-platform execution by @​sfc-gh-dbieliaiev in #​844
• Update platform versions in presubmit.yml by @​hofbi in #​875
• Add Bazel version '8.x' to BCR matrix by @​hofbi in #​876
• ci: fix presubmit by @​thesayyn in #​873
• ci: Add conventional commits check by @​hofbi in #​877
• fix: mark oci extension as reproducible if all pulls are reproducible by @​ashi009 in #​882
• feat: add package metadata with PURL to oci_pull by @​stevebarrau in #​883
• fix: select when exec is windows by @​thesayyn in #​886
• build: Rebased from #​842 — original work by @​mostynb - Upgrade aspect_bazel_lib 2.7.2 -> 2.21.1 by @​GenFlogi in #​888

New Contributors

• @​brianmcarey made their first contribution in #​869
• @​ouillie made their first contribution in #​868
• @​mostynb made their first contribution in #​854
• @​hofbi made their first contribution in #​875
• @​ashi009 made their first contribution in #​882
• @​stevebarrau made their first contribution in #​883
• @​GenFlogi made their first contribution in #​888

Full Changelog: bazel-contrib/rules_oci@v2.2.7...v2.3.0

v2.2.7

Using bzlmod with Bazel 6 or later:

1. Add common --enable_bzlmod to .bazelrc.

2. Add to your MODULE.bazel file:

bazel_dep(name = "rules_oci", version = "2.2.7")

# For testing, we also recommend https://registry.bazel.build/modules/container_structure_test

oci = use_extension("@​rules_oci//oci:extensions.bzl", "oci")

# Declare external images you need to pull, for example: 
oci.pull(
    name = "distroless_base",
    # 'latest' is not reproducible, but it's convenient.
    # During the build we print a WARNING message that includes recommended 'digest' and 'platforms'
    # values which you can use here in place of 'tag' to pin for reproducibility.
    tag = "latest",
    image = "gcr.io/distroless/base",
    platforms = ["linux/amd64"],
)

# For each oci.pull call, repeat the "name" here to expose them as dependencies.
use_repo(oci, "distroless_base")

Using WORKSPACE:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "rules_oci",
    sha256 = "b8db7ab889d501db33313620b2c8040dbb07e95c26a0fefe06004b35baf80e08",
    strip_prefix = "rules_oci-2.2.7",
    url = "https://github.com/bazel-contrib/rules_oci/releases/download/v2.2.7/rules_oci-v2.2.7.tar.gz",
)

load("@​rules_oci//oci:dependencies.bzl", "rules_oci_dependencies")

rules_oci_dependencies()

load("@​rules_oci//oci:repositories.bzl", "oci_register_toolchains")

oci_register_toolchains(name = "oci")

# You can pull your base images using oci_pull like this:
load("@​rules_oci//oci:pull.bzl", "oci_pull")

oci_pull(
    name = "distroless_base",
    digest = "sha256:ccaef5ee2f1850270d453fdf700a5392534f8d1a8ca2acda391fbb6a06b81c86",
    image = "gcr.io/distroless/base",
    platforms = [
        "linux/amd64",
        "linux/arm64",
    ],
)

What's Changed

• fix(publish): pick up secret when passed from caller workflow by @​alexeagle in #​793
• refactor: upgrade tools pattern to direnv by @​alexeagle in #​807
• Add missing dependency to //cosign:defs by @​smertnik3sh in #​810
• chore(docs): stop recommending pkg_tar by @​alexeagle in #​808
• docs(multiarch): add README to multiarch example by @​calmette54 in #​806
• chore: move migration guide from aspect docsite. by @​alexeagle in #​813
• chore(ci): setup aspect workflows by @​alexeagle in #​814
• fix: correct bzl_library targets by @​alexeagle in #​812
• Fix static content example by @​fwalch in #​818
• feat(oci.pull): support registry and repository attributes by @​abhinav in #​828
• feat(oci): make repository attribute optional in oci_push (#​822) by @​arubegonsan in #​823
• feat(cosign): make repository attribute optional in cosign rules by @​arubegonsan in #​824
• oci_load: allow loader to be a target label by @​dmivankov in #​820
• style: fix typo in authn.bzl www_authh -> www_auth by @​zachburg in #​830
• fix: Allow credsStore and credHelpers to fail in some cases by @​srdo-humio in #​817
• fix: don't use version 0.0.0 by @​alexeagle in #​834
• fix: don't use version 0.0.0 by @​alexeagle in #​833
• fix: Handle non-legacy external runfiles layout in oci_load by @​sfc-gh-dbieliaiev in #​838
• docs: mention rules_buildx by @​thesayyn in #​843
• chore: Upgrade cosign to latest 2.x version by @​honnix in #​848
• build: Update bazel_skylib dependency by @​jaqx0r in #​829
• fix: update the complete example to use oci_load instead of oci_tarball by @​oxmo456 in #​849
• fix: Use rlocation for runfiles in push script by @​contagnas in #​804
• docs: Update README.md for rules_img by @​alexeagle in #​862
• Suppress regctl stderr in image.sh by @​cjm-dd in #​863
• Remove check for repository attribute to allow passing it as flag by @​mering in #​859
• Fix token overwritten by empty access_token field (fixes #​801) by @​WnP in #​856
• support nerdctl (containerd) by @​peakschris in #​851
• fix: deduplicate blobs when downloading by @​thesayyn in #​871

New Contributors

• @​smertnik3sh made their first contribution in #​810
• @​calmette54 made their first contribution in #​806
• @​fwalch made their first contribution in #​818
• @​abhinav made their first contribution in #​828
• @​arubegonsan made their first contribution in #​823
• @​zachburg made their first contribution in #​830
• @​srdo-humio made their first contribution in #​817
• @​sfc-gh-dbieliaiev made their first contribution in #​838
• @​jaqx0r made their first contribution in #​829
• @​oxmo456 made their first contribution in #​849
• @​contagnas made their first contribution in #​804
• @​cjm-dd made their first contribution in #​863
• @​WnP made their first contribution in #​856
• @​peakschris made their first contribution in #​851

Full Changelog: bazel-contrib/rules_oci@v2.2.6...v2.2.7

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.