Allowlist subrule usage in Starlark aspects. Previously, Starlark rules could use subrules when `--experimental_rule_extension_api` was disabled if their defining `.bzl` file was included in `//tools/allowlists/subrules_allowlist`, whereas Starlark aspects still enforced the hardcoded load-time `BuiltinRestriction` allowlist. Replace the load-time `BuiltinRestriction` check in `StarlarkRuleClassFunctions.aspect()` with an implicit `$allowlist_subrules` attribute when `--experimental_rule_extension_api` is disabled and the defining `.bzl` file is outside `@_builtins`. Validate the aspect's defining `.bzl` label against the `subrules` allowlist during aspect analysis in `StarlarkAspectFactory`, and remove the now-unused `ALLOWLIST_RULE_EXTENSION_API` allowlist. PiperOrigin-RevId: 1000014706 Change-Id: I3d33b6f08a2b83f9f96931a3145ea423f2c687d8
{Fast, Correct} - Choose two
Build and test software of any size, quickly and reliably.
Speed up your builds and tests: Bazel rebuilds only what is necessary. With advanced local and distributed caching, optimized dependency analysis and parallel execution, you get fast and incremental builds.
One tool, multiple languages: Build and test Java, C++, Android, iOS, Go, and a wide variety of other language platforms. Bazel runs on Windows, macOS, and Linux.
Scalable: Bazel helps you scale your organization, codebase, and continuous integration solution. It handles codebases of any size, in multiple repositories or a huge monorepo.
Extensible to your needs: Easily add support for new languages and platforms with Bazel's familiar extension language. Share and re-use language rules written by the growing Bazel community.
To report a security issue, please email security@bazel.build with a description of the issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the issue. Our vulnerability management team will respond within 3 working days of your email. If the issue is confirmed as a vulnerability, we will open a Security Advisory. This project follows a 90 day disclosure timeline.
See CONTRIBUTING.md