Add path-mappable rustc environment paths

.bazelci/presubmit.yml

@@ -10,7 +10,6 @@ min_rust_version_shell_commands: &min_rust_version_shell_commands
   - sed -i 's|^rust\.toolchain(|rust.toolchain(versions = ["1.85.0"],\n|' MODULE.bazel
 nightly_flags: &nightly_flags
   - "--//rust/toolchain/channel=nightly"
-  - "--//rust/settings:experimental_compile_rustdoc_tests=True"
 nightly_aspects_flags: &nightly_aspects_flags
   - "--//rust/toolchain/channel=nightly"
   - "--config=rustfmt"
@@ -385,6 +384,8 @@ tasks:
     coverage_targets: *default_linux_targets
     coverage_flags: *coverage_flags
     post_shell_commands: *coverage_validation_post_shell_commands
+    run_targets:
+      - //test:build_script_path_mapping_test_binary
   linux_docs:
     name: Docs
     platform: ubuntu2204

.bazelignore

@@ -4,5 +4,10 @@ crate_universe/private/bootstrap
 crate_universe/tests/integration
 docs
 examples
-extensions
+extensions/bindgen
+extensions/mdbook
+extensions/prost/private/tests
+extensions/pyo3/test
+extensions/pyo3/tools
+extensions/wasm_bindgen/test
 test/integration

.bazelrc

@@ -10,6 +10,8 @@ build --nobuild_runfile_links
 
 # https://bazel.build/reference/command-line-reference#flag--enable_platform_specific_config
 common --enable_platform_specific_config
+common:linux --host_platform=//platforms:local_gnu
+common:windows --host_platform=//platforms:local_windows_msvc
 
 # Enable the only currently supported report type
 # https://bazel.build/reference/command-line-reference#flag--combined_report
@@ -50,6 +52,22 @@ build:unpretty --output_groups=+rust_unpretty
 # https://github.com/rust-lang/rust/issues/43364
 build:unpretty --config=nightly
 
+# Use a shared repository cache location. GitHub Actions persists this path
+# between runs, and it is also a reasonable local default.
+common --repository_cache=~/.cache/bazel-repo
+common --repo_contents_cache=~/.cache/bazel-repo/contents
+
+# BuildBuddy remote cache / BES settings used by CI via `--config=remote`.
+common:remote --bes_backend=grpcs://remote.buildbuddy.io
+common:remote --bes_results_url=https://app.buildbuddy.io/invocation/
+common:remote --remote_cache=grpcs://remote.buildbuddy.io
+common:remote --remote_cache_compression
+common:remote --experimental_remote_downloader=grpcs://remote.buildbuddy.io
+common:remote --remote_download_outputs=minimal
+
+# Allows tests that shell out to Bazel/Bazelisk to find their cache directory.
+test --test_env=XDG_CACHE_HOME
+
 # Disable cc toolchains to test rust targets can be built without one.
 build:no_cc_toolchain --repo_env=BAZEL_DO_NOT_DETECT_CPP_TOOLCHAIN=1
 build:no_cc_toolchain --repo_env=BAZEL_NO_APPLE_CPP_TOOLCHAIN=1

.gitattributes

@@ -15,5 +15,6 @@ examples/sys/complex/3rdparty/crates/** linguist-generated
 extensions/bindgen/3rdparty/crates/** linguist-generated
 extensions/prost/private/3rdparty/crates/** linguist-generated
 extensions/wasm_bindgen/3rdparty/crates/** linguist-generated
+test/unpretty/*.unpretty.expanded.rs text eol=lf
 tools/rust_analyzer/3rdparty/crates/** linguist-generated
 util/import/3rdparty/crates/** linguist-generated

.github/workflows/bazel_test.yaml

@@ -0,0 +1,92 @@
+name: Bazel Test
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+  merge_group:
+  workflow_dispatch:
+  workflow_call:
+    secrets:
+      BUILDBUDDY_API_KEY:
+        required: false
+
+permissions:
+  contents: read
+
+concurrency:
+  group: bazel-test-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+jobs:
+  test:
+    name: bazel test //... (${{ matrix.platform }})
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 120
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - platform: linux
+            os: ubuntu-latest
+          - platform: macos
+            os: macos-latest
+          - platform: windows
+            os: windows-latest
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Mount Bazel repository cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/bazel-repo
+          key: bazel-repo-${{ matrix.platform }}-${{ hashFiles('MODULE.bazel', 'MODULE.bazel.lock', '.bazelrc', '**/*.bzl', '**/BUILD', '**/BUILD.bazel') }}
+          restore-keys: |
+            bazel-repo-${{ matrix.platform }}-
+
+      - name: Configure Windows Bazel
+        if: runner.os == 'Windows'
+        shell: pwsh
+        run: |
+          'startup --output_base=C:/b' | Out-File -FilePath user.bazelrc -Encoding utf8
+          'startup --windows_enable_symlinks' | Out-File -FilePath user.bazelrc -Append -Encoding utf8
+
+      - name: bazel test //...
+        shell: bash
+        env:
+          USE_BAZEL_VERSION: 9.1.0
+          BUILDBUDDY_API_KEY: ${{ secrets.BUILDBUDDY_API_KEY }}
+        run: |
+          REMOTE_ARGS=()
+          if [[ -n "${BUILDBUDDY_API_KEY:-}" ]]; then
+            REMOTE_ARGS+=(--remote_header="x-buildbuddy-api-key=${BUILDBUDDY_API_KEY}")
+          else
+            echo "BUILDBUDDY_API_KEY is not set; using BuildBuddy remote cache without an auth header."
+          fi
+
+          PLATFORM_ARGS=()
+          if [[ "${RUNNER_OS}" == "macOS" ]]; then
+            case "${RUNNER_ARCH}" in
+              ARM64) MACOS_PLATFORM="@llvm//platforms:macos_aarch64" ;;
+              X64) MACOS_PLATFORM="@llvm//platforms:macos_x86_64" ;;
+              *) echo "Unsupported macOS runner architecture: ${RUNNER_ARCH}"; exit 1 ;;
+            esac
+            PLATFORM_ARGS+=("--extra_toolchains=@llvm//toolchain:all")
+            PLATFORM_ARGS+=("--platforms=${MACOS_PLATFORM}")
+            PLATFORM_ARGS+=("--@rules_cc//cc/toolchains/args/archiver_flags:use_libtool_on_macos=False")
+          fi
+
+          bazel \
+            --bazelrc="$GITHUB_WORKSPACE/.github/github.bazelrc" \
+            test \
+            --config=remote \
+            "${REMOTE_ARGS[@]}" \
+            "${PLATFORM_ARGS[@]}" \
+            //...

.github/workflows/cargo_bazel_release.yaml

@@ -14,6 +14,7 @@ defaults:
 
 jobs:
   validation:
+    if: github.repository == 'bazelbuild/rules_rust'
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4

.github/workflows/publish.yaml

@@ -26,6 +26,7 @@ on:
         description: Override the ref to read .bcr templates from
 jobs:
   publish:
+    if: github.repository == 'bazelbuild/rules_rust'
     uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v1.4.1
     with:
       author_name: bazel-io

.github/workflows/release.yaml

@@ -25,6 +25,7 @@ env:
 
 jobs:
   validation:
+    if: github.repository == 'bazelbuild/rules_rust'
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4

.github/workflows/runfiles_release.yaml

@@ -14,6 +14,7 @@ defaults:
 
 jobs:
   validation:
+    if: github.repository == 'bazelbuild/rules_rust'
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4

.github/workflows/source_release.yaml

@@ -0,0 +1,43 @@
+name: Release source archive
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+concurrency:
+  group: source-release-${{ github.sha }}
+  cancel-in-progress: false
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Publish source archive
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+
+          commit="${GITHUB_SHA}"
+          tag="source-${commit}"
+          archive="rules_rust-${commit}.tar.gz"
+
+          git archive --format=tar --prefix="rules_rust-${commit}/" "${commit}" |
+            gzip -n > "${archive}"
+
+          if gh release view "${tag}" > /dev/null 2>&1; then
+            echo "Source release ${tag} already exists."
+            exit 0
+          fi
+
+          gh release create "${tag}" "${archive}" \
+            --target "${commit}" \
+            --latest=false \
+            --title "rules_rust source ${commit}" \
+            --notes "Source archive for rules_rust commit ${commit}."