[dependabot]

Bumps rules_python from 2.3.1 to 2.4.5.

Release notes

Sourced from rules_python's releases.

2.4.5

For more detailed setup instructions, see https://rules-python.readthedocs.io/en/latest/getting-started.html

For the user-facing changelog see here

Using Bzlmod

Add to your MODULE.bazel file:

bazel_dep(name = "rules_python", version = "2.4.5")
python = use_extension("@​rules_python//python/extensions:python.bzl", "python")
python.toolchain(
python_version = "3.14",
)
pip = use_extension("@​rules_python//python/extensions:pip.bzl", "pip")
pip.parse(
hub_name = "pypi",
python_version = "3.14",
requirements_lock = "//:requirements_lock.txt",
)
use_repo(pip, "pypi")

Using WORKSPACE

Paste this snippet into your WORKSPACE file:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
http_archive(
name = "rules_python",
sha256 = "05088402fa356af097064dbccd7082a061171ef39fbd748fab946e9775f46a16",
strip_prefix = "rules_python-2.4.5",
url = "https://github.com/bazel-contrib/rules_python/releases/download/2.4.5/rules_python-2.4.5.tar.gz",
)
load("@​rules_python//python:repositories.bzl", "py_repositories")
py_repositories()

Gazelle plugin

Paste this snippet into your WORKSPACE file:

... (truncated)

Changelog

Sourced from rules_python's changelog.

2.4.5 - 2026-10-23

{#v2-4-5-changed}

Changed

• (uv) Updated the default uv version to 0.13.5 to address GHSA-hq85-5cpj-mr62 (#4299).

{#v2-4-4}

2.4.4 - 2026-10-23

{#v2-4-4-changed}

Changed

• (pypi) Updated pip to 26.2.2, pip-tools to 7.6.2, and other internal dependencies used for compile_pip_requirements, building sdists in whl_library, and fetching wheels using pip (#4299).

{#v2-4-3}

2.4.3 - 2026-10-21

{#v2-4-3-changed}

Changed

• Updated certifi to 2026.10.19 (#4299).

{#v2-4-2}

2.4.2 - 2026-10-10

{#v2-4-2-fixed}

Fixed

• (zipapp) Shared libraries that a {obj}py_zipapp_binary reaches through Bazel's _solib symlinks are stored as files again, instead of as symlinks to absolute paths in the build machine's output base that dangle wherever the zipapp runs.

{#v2-4-1}

[2.4.1] - 2026-10-06

... (truncated)

Commits

• 1a96d81 fix(uv): upgrade default uv to 0.13.5 (#4329)
• 94a42ca fix(pypi): upgrade pip to 26.2.2 and pip-tools to 7.6.2 (#4310)
• 11e215f build(deps): bump the uv group across 10 directories with 1 update (#4297)
• d18e3eb fix(zipapp): store _solib shared libraries as files, not absolute symlinks (#...
• 1117822 feat(toolchains): update CPython 3.15.0 from rc2 to rc3 (#4220)
• 65114b1 feat(pypi): add py.typed files to pyi_srcs (#4202)
• 46e3773 feat(toolchains): update CPython 3.15.0 from rc1 to rc2 (#4199)
• 291e676 fix(zipapp): reduce bundled interpreter size (#4165)
• 4204bfb build(release): exclude devguide.md from version marker checks (#4185)
• 6f65150 Prepare release v2.4.0 (#4176)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)