Bump rules_cc, boringssl, zlib, rules_jvm_external, spotless, Gradle

.github/workflows/ci.yml

@@ -232,7 +232,7 @@ jobs:
           java-version: "25"
       - uses: gradle/actions/setup-gradle@v6
         with:
-          gradle-version: "9.8.0"
+          gradle-version: "9.8.1"
       - name: gradle build
         run: gradle build spotlessCheck
         working-directory: codegen

MODULE.bazel

@@ -9,7 +9,7 @@ module(
 )
 
 bazel_dep(name = "platforms", version = "1.1.0")
-bazel_dep(name = "rules_cc", version = "0.2.25")
+bazel_dep(name = "rules_cc", version = "0.2.26")
 bazel_dep(name = "googletest", version = "1.18.0.bcr.1")
 bazel_dep(name = "google_benchmark", version = "1.9.5")
 bazel_dep(name = "boost.asio", version = "1.90.0.bcr.1")
@@ -19,10 +19,10 @@ bazel_dep(name = "boost.asio", version = "1.90.0.bcr.1")
 # consumers need no @boost.asio//:ssl flag. boringssl tracks what boost.asio
 # 1.90 requires — pinned explicitly so the security-sensitive dependency
 # bumps deliberately, never as an MVS side effect.
-bazel_dep(name = "boringssl", version = "0.20260813.0")
+bazel_dep(name = "boringssl", version = "0.20260929.0")
 bazel_dep(name = "boost.beast", version = "1.90.0.bcr.1")
 bazel_dep(name = "nlohmann_json", version = "3.12.0.bcr.2")
-bazel_dep(name = "zlib", version = "1.3.2")
+bazel_dep(name = "zlib", version = "1.3.2.bcr.2")
 
 bazel_dep(name = "rules_shell", version = "0.8.0", dev_dependency = True)
 bazel_dep(name = "rules_testing", version = "0.9.0", dev_dependency = True)
@@ -46,7 +46,7 @@ bazel_dep(name = "llvm", version = "0.8.24", dev_dependency = True)
 # resolved graph — a lower pin here only buys the check_direct_dependencies
 # warning on every invocation.
 bazel_dep(name = "rules_java", version = "9.9.0")
-bazel_dep(name = "rules_jvm_external", version = "7.1")
+bazel_dep(name = "rules_jvm_external", version = "7.2")
 
 maven = use_extension("@rules_jvm_external//:extensions.bzl", "maven")
 maven.install(

codegen/build.gradle.kts

@@ -1,7 +1,7 @@
 plugins {
     // 7.2.x is the first Spotless line that documents Gradle 9 support;
     // pinned alongside CI's gradle-version bump.
-    id("com.diffplug.spotless") version "8.10.3" apply false
+    id("com.diffplug.spotless") version "8.10.4" apply false
 }
 
 subprojects {

docs/quickstart.md

@@ -59,7 +59,7 @@ git_override(
 )
 
 bazel_dep(name = "googletest", version = "1.18.0.bcr.1")
-bazel_dep(name = "rules_cc", version = "0.2.25")
+bazel_dep(name = "rules_cc", version = "0.2.26")
 bazel_dep(name = "rules_shell", version = "0.8.0")  # only for shell-driven tests (sh_test)
 ```
 

examples/bazel-consumer/MODULE.bazel

@@ -15,5 +15,5 @@ local_path_override(
 )
 
 bazel_dep(name = "googletest", version = "1.18.0.bcr.1")
-bazel_dep(name = "rules_cc", version = "0.2.25")
+bazel_dep(name = "rules_cc", version = "0.2.26")
 bazel_dep(name = "rules_shell", version = "0.8.0")