chore: bump bazel-lib to pick up bazel 9 fix (#2432)

need
bazel-contrib/bazel-lib@772d605

Might green up Bazel 9 downstream tests - see
bazelbuild/bazel-central-registry#6402

However #2431 adds Bazel 9 testing to our own presubmit.

Author: alexeagle

MODULE.bazel

@@ -8,7 +8,7 @@ module(
 
 # Lower-bounds (minimum) versions for direct runtime dependencies.
 # Do not bump these unless rules_js requires a newer version to function.
-bazel_dep(name = "aspect_bazel_lib", version = "2.16.0")  # TODO(alexeagle): remove
+bazel_dep(name = "aspect_bazel_lib", version = "2.17.1")  # TODO(alexeagle): remove
 bazel_dep(name = "aspect_tools_telemetry", version = "0.2.8")
 bazel_dep(name = "bazel_features", version = "1.9.0")
 bazel_dep(name = "bazel_lib", version = "3.0.0")

e2e/bzlmod/MODULE.bazel

@@ -10,7 +10,7 @@ local_path_override(
     path = "other_module",
 )
 
-bazel_dep(name = "aspect_bazel_lib", version = "2.16.0", dev_dependency = True)
+bazel_dep(name = "aspect_bazel_lib", version = "2.17.1", dev_dependency = True)
 bazel_dep(name = "bazel_skylib", version = "1.5.0", dev_dependency = True)
 bazel_dep(name = "platforms", version = "0.0.10", dev_dependency = True)
 

e2e/js_image_oci/MODULE.bazel

@@ -5,7 +5,7 @@ local_path_override(
 )
 
 bazel_dep(name = "aspect_bazel_lib", version = "2.7.7", dev_dependency = True)
-bazel_dep(name = "container_structure_test", version = "1.16.0", dev_dependency = True)
+bazel_dep(name = "container_structure_test", version = "1.21.1", dev_dependency = True)
 bazel_dep(name = "platforms", version = "0.0.10", dev_dependency = True)
 bazel_dep(name = "rules_nodejs", version = "6.3.0", dev_dependency = True)
 bazel_dep(name = "rules_oci", version = "2.0.0-alpha2", dev_dependency = True)

e2e/js_image_oci/WORKSPACE

@@ -72,9 +72,9 @@ oci_pull(
 ###
 http_archive(
     name = "container_structure_test",
-    integrity = "sha256-LaE9pMT+ydRifUCEsSK+D00Ri9At+lKFf/EY/eiOT6o=",
-    strip_prefix = "container-structure-test-1.16.0",
-    urls = ["https://github.com/GoogleContainerTools/container-structure-test/archive/v1.16.0.zip"],
+    integrity = "sha256-OMqpuKY7sUCbrYDJu0X61plG1mJWTZ24JeDYPjmCFXc=",
+    strip_prefix = "container-structure-test-1.21.1",
+    urls = ["https://github.com/GoogleContainerTools/container-structure-test/archive/v1.21.1.zip"],
 )
 
 load("@container_structure_test//:repositories.bzl", "container_structure_test_register_toolchain")

e2e/stamped_package_json/WORKSPACE

@@ -3,6 +3,15 @@ local_repository(
     path = "../..",
 )
 
+load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
+
+http_archive(
+    name = "package_metadata",
+    sha256 = "7446b71263039c7a5e90c4a069fd4c090e12a1a6c69a20eb4cd76034d610beb6",
+    strip_prefix = "supply-chain-0.0.1/metadata",
+    url = "https://github.com/bazel-contrib/supply-chain/releases/download/v0.0.1/supply-chain-v0.0.1.tar.gz",
+)
+
 load("@aspect_rules_js//js:repositories.bzl", "rules_js_dependencies")
 
 rules_js_dependencies()

js/repositories.bzl

@@ -27,11 +27,34 @@ def rules_js_dependencies():
 
     http_archive(
         name = "aspect_bazel_lib",
-        sha256 = "fc8fe1be58ae39f84a8613d554534760c7f0819d407afcc98bbcbd990523bfed",
-        strip_prefix = "bazel-lib-2.16.0",
-        url = "https://github.com/bazel-contrib/bazel-lib/releases/download/v2.16.0/bazel-lib-v2.16.0.tar.gz",
+        sha256 = "e5131e44db23459bd1ed04635f2ae5436bc83f5e38629e07b75c0bf206f09245",
+        strip_prefix = "bazel-lib-2.17.1",
+        url = "https://github.com/bazel-contrib/bazel-lib/releases/download/v2.17.1/bazel-lib-v2.17.1.tar.gz",
     )
 
+    # Transitive dependencies of aspect_bazel_lib.
+    # Prior to upgrading bazel-lib past 2.16.0, users didn't need to call the bazel_lib_dependencies function.
+    # We include them here to avoid breakages for users who may have been relying on the implicit presence of these dependencies.
+    http_archive(
+        name = "tar.bzl",
+        sha256 = "8710443803496e1b9b5b66f56ae55aa586338cb09a4ddeb9bb3d6df4e6da44c7",
+        strip_prefix = "tar.bzl-0.2.0",
+        url = "https://github.com/alexeagle/tar.bzl/releases/download/v0.2.0/tar.bzl-v0.2.0.tar.gz",
+    )
+    http_archive(
+        name = "jq.bzl",
+        sha256 = "7b63435aa19cc6a0cfd1a82fbdf2c7a2f0a94db1a79ff7a4469ffa94286261ab",
+        strip_prefix = "jq.bzl-0.1.0",
+        url = "https://github.com/bazel-contrib/jq.bzl/releases/download/v0.1.0/jq.bzl-v0.1.0.tar.gz",
+    )
+    http_archive(
+        name = "rules_shell",
+        sha256 = "e6b87c89bd0b27039e3af2c5da01147452f240f75d505f5b6880874f31036307",
+        strip_prefix = "rules_shell-0.6.1",
+        url = "https://github.com/bazelbuild/rules_shell/releases/download/v0.6.1/rules_shell-v0.6.1.tar.gz",
+    )
+    # End aspect_bazel_lib transitive dependencies
+
     http_archive(
         name = "bazel_lib",
         sha256 = "6fd3b1e1a38ca744f9664be4627ced80895c7d2ee353891c172f1ab61309c933",