MODULE.bazel

"""Bazel Modules used by the Skia Infra repository."""

module(
    name = "skia-infra",
    version = "0.0.0",
)

bazel_dep(name = "aspect_bazel_lib", version = "2.21.1")
bazel_dep(name = "aspect_rules_esbuild", version = "0.25.0")
bazel_dep(name = "aspect_rules_js", version = "2.5.0")
bazel_dep(name = "aspect_rules_ts", version = "3.7.0")
bazel_dep(name = "aspect_rules_swc", version = "2.0.0")
bazel_dep(name = "buildifier_prebuilt", version = "8.2.1")
bazel_dep(name = "rules_go", version = "0.59.0")  # Needs to go before Gazelle.
bazel_dep(name = "gazelle")

# This version of Gazelle has been patched with directives for
# go.chromium.org/luci and github.com/bazelbuild/remote-apis-sdks. We should be
# able to remove this git_override when the next version of gazelle is released
# to the Bazel Central Registry.
git_override(
    module_name = "gazelle",
    commit = "58be1038215b0cff6604a1d31f45ae3770a99a75",
    remote = "https://github.com/bazel-contrib/bazel-gazelle",
)

bazel_dep(name = "protobuf", version = "33.0", repo_name = "com_google_protobuf")
bazel_dep(name = "rules_browsers", version = "0.2.0")
bazel_dep(name = "rules_apko", version = "1.4.0")
bazel_dep(name = "rules_distroless", version = "0.6.1")
bazel_dep(name = "rules_nodejs", version = "6.5.0")
bazel_dep(name = "rules_pkg", version = "1.1.0")
bazel_dep(name = "rules_proto", version = "7.1.0")
bazel_dep(name = "rules_python", version = "1.6.3")
bazel_dep(name = "rules_shell", version = "0.6.1")
bazel_dep(name = "bazel_skylib", version = "1.8.2")
bazel_dep(name = "rules_oci", version = "2.2.7")
bazel_dep(name = "googleapis", version = "0.0.0-20251127-8cd3749f")
bazel_dep(name = "grpc", version = "1.76.0.bcr.1")
bazel_dep(name = "abseil-cpp", version = "20250814.1")
bazel_dep(name = "rules_cc", version = "0.2.15")
bazel_dep(name = "platforms", version = "1.0.0")
bazel_dep(name = "xds", version = "0.0.0-20251210-ee656c7")
bazel_dep(name = "protoc-gen-validate", version = "1.3.3")

http_archive = use_repo_rule("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_file = use_repo_rule("@bazel_tools//tools/build_defs/repo:http.bzl", "http_file")

git_repository = use_repo_rule("@bazel_tools//tools/build_defs/repo:git.bzl", "git_repository")

git_repository(
    name = "swiftshader",
    build_file_content = """
filegroup(
    name = "all_files",
    srcs = glob(["include/**/*"]),
    visibility = ["//visibility:public"]
)
""",
    commit = "3c4bdf66d81d01a215b88bfea3ac4cc8ca507779",
    remote = "https://swiftshader.googlesource.com/SwiftShader",
)

gcs_mirror = use_extension("//bazel:gcs_mirror.bzl", "gcs_mirror")

####################################################################################################
# rules_apko setup
####################################################################################################

apko = use_extension("@rules_apko//apko:extensions.bzl", "apko")
apko.toolchain(apko_version = "0.22.0")
apko.translate_lock(
    name = "basealpine-apk-install",
    lock = "@@//kube/basealpine:basealpine.lock.json",
)
use_repo(apko, "basealpine-apk-install")

####################################################################################################
# aspect_rules_ts setup
####################################################################################################

rules_ts_ext = use_extension(
    "@aspect_rules_ts//ts:extensions.bzl",
    "ext",
    dev_dependency = True,
)
rules_ts_ext.deps(
    ts_integrity = "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
    ts_version_from = "//:package.json",
)
use_repo(rules_ts_ext, "npm_typescript")

####################################################################################################
# Go setup
####################################################################################################

go_deps = use_extension("@gazelle//:extensions.bzl", "go_deps")

go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")

go_deps.from_file(go_mod = "//:go.mod")
use_repo(
    go_deps,
    "com_github_a8m_envsubst",
    "com_github_aclements_go_moremath",
    "com_github_bazelbuild_buildtools",
    "com_github_bazelbuild_remote_apis",
    "com_github_bazelbuild_remote_apis_sdks",
    "com_github_blakesmith_ar",
    "com_github_bradfitz_gomemcache",
    "com_github_ccoveille_go_safecast_v2",
    "com_github_cenkalti_backoff",
    "com_github_cenkalti_backoff_v4",
    "com_github_cockroachdb_cockroach_go_v2",
    "com_github_davecgh_go_spew",
    "com_github_dustin_go_humanize",
    "com_github_fatih_color",
    "com_github_fiorix_go_web",
    "com_github_flynn_json5",
    "com_github_go_chi_chi_v5",
    "com_github_go_python_gpython",
    "com_github_golang_groupcache",
    "com_github_golang_mock",
    "com_github_golang_protobuf",
    "com_github_google_go_cmp",
    "com_github_google_go_github_v29",
    "com_github_google_go_licenses_v2",
    "com_github_google_shlex",
    "com_github_google_uuid",
    "com_github_googleapis_gax_go_v2",
    "com_github_googlecloudplatform_opentelemetry_operations_go_exporter_trace",
    "com_github_gorilla_securecookie",
    "com_github_grpc_ecosystem_grpc_gateway_v2",
    "com_github_hako_durafmt",
    "com_github_hashicorp_go_multierror",
    "com_github_hashicorp_golang_lru",
    "com_github_invopop_jsonschema",
    "com_github_jackc_pgconn",
    "com_github_jackc_pgerrcode",
    "com_github_jackc_pgtype",
    "com_github_jackc_pgx_v4",
    "com_github_jcgregorio_logger",
    "com_github_jeffail_gabs_v2",
    "com_github_kballard_go_shellquote",
    "com_github_kisielk_errcheck",
    "com_github_mark3labs_mcp_go",
    "com_github_masterminds_semver",
    "com_github_masterminds_sprig",
    "com_github_miekg_dns",
    "com_github_mikefarah_yq_v4",
    "com_github_nfnt_resize",
    "com_github_nlpodyssey_gopickle",
    "com_github_olekukonko_tablewriter",
    "com_github_otiai10_copy",
    "com_github_patrickmn_go_cache",
    "com_github_pkg_errors",
    "com_github_pmezard_go_difflib",
    "com_github_prometheus_client_golang",
    "com_github_protocolbuffers_txtpbfmt",
    "com_github_r3labs_sse_v2",
    "com_github_redis_go_redis_v9",
    "com_github_rs_cors",
    "com_github_sbinet_npyio",
    "com_github_shirou_gopsutil",
    "com_github_skia_dev_google_api_go_client",
    "com_github_skia_dev_protoc_gen_twirp_typescript",
    "com_github_spf13_cobra",
    "com_github_stretchr_testify",
    "com_github_syndtr_goleveldb",
    "com_github_tarm_serial",
    "com_github_texttheater_golang_levenshtein",
    "com_github_twitchtv_twirp",
    "com_github_unrolled_secure",
    "com_github_urfave_cli_v2",
    "com_github_vektra_mockery_v2",
    "com_github_willf_bitset",
    "com_github_xeipuuv_gojsonschema",
    "com_github_yannh_kubeconform",
    "com_github_yusufpapurcu_wmi",
    "com_github_zeebo_bencode",
    "com_google_cloud_go",
    "com_google_cloud_go_auth",
    "com_google_cloud_go_bigquery",
    "com_google_cloud_go_bigtable",
    "com_google_cloud_go_binaryauthorization",
    "com_google_cloud_go_compute_metadata",
    "com_google_cloud_go_containeranalysis",
    "com_google_cloud_go_datastore",
    "com_google_cloud_go_firestore",
    "com_google_cloud_go_iam",
    "com_google_cloud_go_logging",
    "com_google_cloud_go_monitoring",
    "com_google_cloud_go_pubsub",
    "com_google_cloud_go_redis",
    "com_google_cloud_go_secretmanager",
    "com_google_cloud_go_spanner",
    "com_google_cloud_go_storage",
    "in_gopkg_fsnotify_v1",
    "in_gopkg_olivere_elastic_v5",
    "in_gopkg_yaml_v2",
    "in_gopkg_yaml_v3",
    "io_k8s_api",
    "io_k8s_apimachinery",
    "io_k8s_client_go",
    "io_k8s_kubectl",
    "io_k8s_sigs_yaml",
    "io_opencensus_go",
    "io_opencensus_go_contrib_exporter_stackdriver",
    "io_opentelemetry_go_otel",
    "io_opentelemetry_go_otel_bridge_opencensus",
    "io_opentelemetry_go_otel_sdk",
    "io_temporal_go_api",
    "io_temporal_go_sdk",
    "io_temporal_go_sdk_contrib_opentelemetry",
    "net_howett_plist",
    "org_chromium_go_luci",
    "org_golang_google_api",
    "org_golang_google_genai",
    "org_golang_google_genproto",
    "org_golang_google_genproto_googleapis_api",
    "org_golang_google_genproto_googleapis_rpc",
    "org_golang_google_grpc",
    "org_golang_google_grpc_cmd_protoc_gen_go_grpc",
    "org_golang_google_protobuf",
    "org_golang_x_exp",
    "org_golang_x_net",
    "org_golang_x_oauth2",
    "org_golang_x_sync",
    "org_golang_x_sys",
    "org_golang_x_term",
    "org_golang_x_text",
    "org_golang_x_time",
    "org_golang_x_tools",
)

inject_repo(
    go_deps,
    googleapis = "googleapis",
    grpc = "grpc",
    protobuf = "com_google_protobuf",
    rules_go = "rules_go",
)

go_sdk.from_file(
    go_mod = "//:go.mod",
)
use_repo(go_sdk, go_sdk = "go_default_sdk")

register_toolchains("@rules_go//go/toolchain:all")

####################################################################################################
# pnpm setup
####################################################################################################

node = use_extension("@rules_nodejs//nodejs:extensions.bzl", "node")
node.toolchain(node_version = "20.19.0")
use_repo(node, "nodejs_toolchains")
use_repo(node, "nodejs")

pnpm = use_extension("@aspect_rules_js//npm:extensions.bzl", "pnpm")
pnpm.pnpm(
    name = "pnpm",
    pnpm_version = "10.13.1",
)
use_repo(pnpm, "pnpm")

npm = use_extension("@aspect_rules_js//npm:extensions.bzl", "npm")
npm.npm_translate_lock(
    name = "npm",
    additional_file_contents = {},
    bins = {
        "ts-proto": [
            "protoc-gen-ts_proto=./protoc-gen-ts_proto",
        ],
    },
    custom_postinstalls = {},
    data = [
        "//:package.json",
    ],
    dev = False,
    external_repository_action_cache = ".aspect/rules/external_repository_action_cache",
    lifecycle_hooks = {
        "*": [
            "preinstall",
            "install",
            "postinstall",
        ],
    },
    lifecycle_hooks_envs = {},
    lifecycle_hooks_execution_requirements = {
        "*": [
            "no-sandbox",
        ],
    },
    no_optional = False,
    npm_package_lock = "//:package-lock.json",
    npm_package_target_name = "{dirname}",
    npmrc = "//:.npmrc",
    package_visibility = {},
    patch_args = {
        "*": [
            "-p0",
        ],
    },
    patches = {},
    pnpm_lock = "//:pnpm-lock.yaml",
    preupdate = [],
    prod = False,
    quiet = False,
    update_pnpm_lock = True,
    verify_node_modules_ignored = "//:.bazelignore",
)
use_repo(
    npm,
    "npm",
)

####################################################################################################
# rules_python setup
####################################################################################################

python_version = "3.11"

python = use_extension("@rules_python//python/extensions:python.bzl", "python")
python.toolchain(
    configure_coverage_tool = True,
    ignore_root_user_error = True,
    python_version = python_version,
)
use_repo(python, "python_3_11")

pip = use_extension("@rules_python//python/extensions:pip.bzl", "pip")
pip.parse(
    download_only = True,
    extra_pip_args = ["--index-url=https://pypi.org/simple"],
    hub_name = "pypi",
    python_version = python_version,
    requirements_lock = "//:requirements.txt",
)
use_repo(pip, "pypi")

####################################################################################################
# rules_distroless setup
####################################################################################################

apt = use_extension("@rules_distroless//apt:extensions.bzl", "apt")

# These are sets of packages installed in various images.
apt.install(
    name = "autoroll-be-apt-install",
    lock = "@@//autoroll:autoroll-be.lock.json",
    manifest = "//autoroll:autoroll-be.yaml",
)
use_repo(apt, "autoroll-be-apt-install")

apt.install(
    name = "base-cipd-apt-install",
    lock = "@@//kube/base-cipd:base-cipd.lock.json",
    manifest = "//kube/base-cipd:base-cipd.yaml",
)
use_repo(apt, "base-cipd-apt-install")

apt.install(
    name = "fiddler-base-apt-install",
    lock = "@@//fiddlek:fiddler-base.lock.json",
    manifest = "//fiddlek:fiddler-base.yaml",
)
use_repo(apt, "fiddler-base-apt-install")

apt.install(
    name = "cd-apt-install",
    lock = "@@//cd:cd.lock.json",
    manifest = "//cd:cd.yaml",
)
use_repo(apt, "cd-apt-install")

apt.install(
    name = "docsyserver-apt-install",
    lock = "@@//docsyserver:docsyserver.lock.json",
    manifest = "//docsyserver:docsyserver.yaml",
)
use_repo(apt, "docsyserver-apt-install")

apt.install(
    name = "task-scheduler-jc-apt-install",
    lock = "@@//task_scheduler:task-scheduler-jc.lock.json",
    manifest = "//task_scheduler:task-scheduler-jc.yaml",
)
use_repo(apt, "task-scheduler-jc-apt-install")

####################################################################################################
# Bazelisk
####################################################################################################

# This is sort of a circular dependency, but some of our Docker images need a
# copy of Bazelisk to perform builds. It's convenient to define that here.
http_file(
    name = "bazelisk",
    downloaded_file_path = "bazelisk",
    executable = True,
    sha256 = "e1508323f347ad1465a887bc5d2bfb91cffc232d11e8e997b623227c6b32fb76",
    url = "https://github.com/bazelbuild/bazelisk/releases/download/v1.27.0/bazelisk-linux-amd64",
)

######################
# Docker containers. #
######################

oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# This is a pinned version of JS fiddle - we use the canvaskit.js/canvaskit.wasm inside it
# when running apps (e.g. skottie.skia.org) locally. All our apps (except debugger) use the stock
# version of CanvasKit, so they can share this. If there is an update to CanvasKit APIs and we want
# to test them out locally, we should update this to a newer version. See the k8s-config repo
# for a recent commit to use. You can also get the latest sha256 by either:
# 1. Running `docker pull gcr.io/skia-public/jsfiddle-final:latest` and looking for the sha256
# in the log. This requires docker to be installed and authenticated through gcloud.
# 2. Going to https://skia.googlesource.com/k8s-config/+/refs/heads/main/skia-infra-public/jsfiddle.yaml
# and looking for sha256 on the jsfiddle-final image.
oci.pull(
    name = "pinned_jsfiddle",
    digest = "sha256:7ab4c5e22d6f91e8302de7fe3c138d2206a64ecda5b839a0c6877c88351d1fd6",
    image = "gcr.io/skia-public/jsfiddle-final",
)
use_repo(oci, "pinned_jsfiddle")

# Debugger's version of CanvasKit is built with different flags
oci.pull(
    name = "pinned_debugger",
    digest = "sha256:741bdbf37a3d1d22ca863ccbeadaa7d2c03a6cb715ddbcd20a56ad64875da278",
    image = "gcr.io/skia-public/debugger-app-final",
)
use_repo(oci, "pinned_debugger")

# This is an arbitrary version of the public Alpine image. Given our current rules, we must pull
# a docker container and extract some files, even if we are just building local versions (e.g.
# of debugger or skottie), so this is the image for that.
oci.pull(
    name = "empty_container",
    digest = "sha256:1e014f84205d569a5cc3be4e108ca614055f7e21d11928946113ab3f36054801",
    image = "index.docker.io/alpine",
)
use_repo(oci, "empty_container")

# Pulls the gcr.io/skia-public/basealpine container, needed by the skia_app_container macro.
oci.pull(
    name = "basealpine",
    digest = "sha256:5474db9668fb91cbf71b160e41047ca48a7686a25b7e3d38da9f1c720683e2c7",
    image = "gcr.io/skia-public/basealpine",
)
use_repo(oci, "basealpine")

# Pulls a specific version of Alpine to be used as a base for basealpine.
oci.pull(
    name = "alpine",
    digest = "sha256:e0baf8c394150ac5a14925e179100519f5e37c53547f647acbd9f8eb3e5c4528",
    image = "alpine:3.22",
)
use_repo(oci, "alpine")

# Pulls the debian:testing-slim image, needed by the skia_app_container macro.
# Note: if using apt.install in conjunction with this or any other base image,
# the archive version in the YAML file must be compatible with this image.
oci.pull(
    name = "debian-testing-slim",
    digest = "sha256:fc00cc6049937150a6ae6403d0ab99db9583eafc9252b448ecec5011f62a3602",
    image = "debian:testing-slim",
    platforms = ["linux/amd64"],
)
use_repo(oci, "debian-testing-slim")

# Pulls the gcr.io/skia-public/docsyserver-base container, needed by docsyserver.
oci.pull(
    name = "docsyserver-base",
    digest = "sha256:c92739a43735be44a28135c9eac75753c64c2d3b9ba5c97efcaf57d5bd2ab12a",
    image = "gcr.io/skia-public/docsyserver-base",
)
use_repo(oci, "docsyserver-base")

# Pulls the envoyproxy/envoy-alpine:v1.16.1 container, needed by skfe.
oci.pull(
    name = "envoy_alpine",
    digest = "sha256:061559f887b6b7980ea1ebb5af636079858d8b0f51cd803b9fe16f87811ff7d3",
    image = "index.docker.io/envoyproxy/envoy-alpine",
)
use_repo(oci, "envoy_alpine")

# Pulls the node alpine container, needed by npm-audit-mirror.
oci.pull(
    name = "node_alpine",
    digest = "sha256:1e168eaa83acc4b002f7b91bd3584f6800c84737337fe665224c963ed6b5b1c0",  # index.docker.io/node:current-alpine3.21 as of Oct 2, 2025.
    image = "docker.io/library/node",
)
use_repo(oci, "node_alpine")

# Pulls the https://gcr.io/cloud-builders/kubectl container, needed by apps that use kubectl.
oci.pull(
    name = "kubectl",
    digest = "sha256:63553d791cbdd3aa9fc2bc0b3a6a6d33130c1b8927b2db368c756aa45c89a356",  # 25 Oct 2023
    image = "gcr.io/cloud-builders/kubectl",
)
use_repo(oci, "kubectl")

# Pulls the gcr.io/google.com/cloudsdktool/cloud-sdk:latest container needed by Perf backup.
oci.pull(
    name = "cloudsdk",
    digest = "sha256:2e480d7977829f1534665da1fffd98170f5345d0a6322b369b0fe08a932ce574",  # 1 Sept 2026
    image = "gcr.io/google.com/cloudsdktool/cloud-sdk",
)
use_repo(oci, "cloudsdk")

# Pulls the google-go.pkg.dev/golang image.
oci.pull(
    name = "golang",
    digest = "sha256:80ccdc8f8ac8d819cdbc15a33334125e0288c09ac030307dcd893d2b5c6179ae",
    image = "google-go.pkg.dev/golang",
)
use_repo(oci, "golang")

# docker.io/temporalio/server:1.29.2 as of 07/08/2026.
oci.pull(
    name = "temporal-server",
    digest = "sha256:846c6f50f53ac39ff7399ab9e20e583b993b14c1bca4c3d77dab87b8c2821055",
    image = "docker.io/temporalio/server",
    platforms = ["linux/amd64"],
)
use_repo(oci, "temporal-server")

# docker.io/temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0 as of 07/08/2026.
oci.pull(
    name = "temporal-admin-tools",
    digest = "sha256:67ee116b6442fd467168081509debecd61bafa506f56aa78e0ee6b6ad3c54691",
    image = "docker.io/temporalio/admin-tools",
    platforms = ["linux/amd64"],
)

# docker.io/temporalio/ui:2.44.0 (compatible with 1.29.2) as of 07/08/2026.
oci.pull(
    name = "temporal-ui",
    digest = "sha256:8c43757f169c94051398fa2abcf8fca05405ca492d0b44cff0ed059537cd33de",
    image = "docker.io/temporalio/ui",
    platforms = ["linux/amd64"],
)
use_repo(
    oci,
    "debian-testing-slim_linux_amd64",
    "temporal-admin-tools",
    "temporal-admin-tools_linux_amd64",
    "temporal-server_linux_amd64",
    "temporal-ui",
    "temporal-ui_linux_amd64",
)

####################################################################################################
# CA Certificates
####################################################################################################

gcs_mirror.http_archive(
    name = "ca-certificates",
    build_file_content = "exports_files([\"data.tar.xz\"])",
    sha256 = "0b5970c26e74d254bb2a59100d7b9d0612ea0b60bd78987cd71e0aebae5221d7",
    url = "https://snapshot-cloudflare.debian.org/archive/debian/20260421T143351Z/pool/main/c/ca-certificates/ca-certificates_20260223_all.deb",
)
use_repo(gcs_mirror, "ca-certificates")

####################################################################################################
# bazel_skylib
####################################################################################################

# These are used for unit tests.
register_toolchains(
    "@bazel_skylib//toolchains/unittest:cmd_toolchain",
)

####################################################################################################
# CIPD packages.
####################################################################################################

cipd = use_extension("//bazel/external:cipd_install.bzl", "cipd")
cipd.download_http(
    name = "git",
    cipd_package = "infra/3pp/tools/git/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "bcef73e72c940ceced565b18ea27ed1b9816b94fd094c479abd8731ed0364135",
        "linux-arm64": "d9eaa27b58d67d39726fa0aabbeb0abdbf65b5808563a0786d064b9b7bdffcf6",
        "mac-amd64": "7ab7bd23cea0960a7b6f10de366ac1427a692e0232cde427b0f5572a2b731da2",
        "mac-arm64": "775948f178868246078ad3ff097c2e6fa9fa6a6dbf61a2e99344d92bcee90790",
        "windows-amd64": "a54625cacb2486b78056a6c7f36cb8dde8dd123b535a4d1288c22f91efe4d4d4",
    },
    postinstall_cmds_posix = [
        "mkdir -p etc",
        "chmod -R u+w etc",
        "echo \"[user]\" >> etc/gitconfig",
        "echo \"\tname = Bazel Test User\" >> etc/gitconfig",
        "echo \"\temail = bazel-test-user@example.com\" >> etc/gitconfig",
    ],
    postinstall_cmds_win = [
        "mkdir -p etc",
        "echo \"[user]\" >> etc/gitconfig",
        "echo \"\tname = Bazel Test User\" >> etc/gitconfig",
        "echo \"\temail = bazel-test-user@example.com\" >> etc/gitconfig",
    ],
    tag = "version:3@2.56.0.chromium.11",
)
use_repo(cipd, "git_linux-amd64", "git_windows-amd64")

cipd.download_http(
    name = "git_wrapper",
    cipd_package = "infra/tools/git/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "a2cae943160994bc4cf133191b5c79b5769441038089a5e194c477c5f13fb3eb",
        "linux-arm64": "c45f6df9ca12bcfa23850dd085ecaf98d226672adc3d08d085f31017b30564ce",
        "mac-amd64": "bcad09539a75da97856f62fdaa8345c5283fa95b6b7dbd2c0122b8f46370e5ef",
        "mac-arm64": "c3ef4a266eb9b5e1b21064f49d278a9f5c1fcab12933f93da25726bdcc795a96",
        "windows-amd64": "d7b2f5e8815b5f6816082a67861a7608ca4b02a1a54404c91508ed76ddb29edc",
    },
    tag = "git_revision:3d1174859c0a5bb00d87c78506f8c031afad16aa",
)
use_repo(cipd, "git_wrapper_linux-amd64")

cipd.download_http(
    name = "luci-auth",
    cipd_package = "infra/tools/luci-auth/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "b7495914b56e74b2550126ddaafd386e391985fd93e7e5b08c034bd37f930d54",
        "linux-arm64": "30313e0bcd25a6f7b9f78b5b0902733dbf41081ddf7960781a11e8ae1e1e5e77",
        "mac-amd64": "6944d09d80ba81f24b53d90f853cd7d66770a5bbf9428c110be6c8edf145f5e1",
        "mac-arm64": "d1b4b2b4a72230acb0d353143d224a6c3ee95f1f20b67a4772cd55f4e99e9e71",
        "windows-amd64": "d759b87ee6ca84b2ebe529d4072eb254c796ac869c1aa909be5ffe46a13d3a6a",
    },
    tag = "git_revision:9119ead6d70953d1f9a7670979431344c2cc3f10",
)
use_repo(cipd, "luci-auth_linux-amd64")

cipd.download_http(
    name = "docker-credential-luci",
    cipd_package = "infra/tools/luci/docker-credential-luci/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "1ad5ccdfb711e7f468706aa2687da901723fcf2dc3faadead1546968475cf292",
        "linux-arm64": "07ccf65ca476e74d309bf39d23d2a13e9b94a9d357c30eb12146cb191c5eca40",
        "mac-amd64": "a68e51ccb5a3d5a5648b12c2cf944edf9522fe9c1bbf4b25c20a3a7b279dc811",
        "mac-arm64": "640022927e4c653c64bf7844e40c67fb6c566dd5a4f0a7df67384dfe98a25686",
        "windows-amd64": "3fe7b463e8c09c6b805c24296ef840cf0ff6a039c1915d87811d5c8ade6dc076",
    },
    tag = "git_revision:b2fad5ab18774b86d84aa867287bfb4f2394893b",
)
use_repo(cipd, "docker-credential-luci_linux-amd64")

cipd.download_http(
    name = "git-credential-luci",
    cipd_package = "infra/tools/luci/git-credential-luci/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "405991b7bf7dfd7cf5a32e1f7ed359e56ae9ae4ac3b1c765ccf42bb043f5be9b",
        "linux-arm64": "21822b43e1d002a2a2a12b4f520b4a0196e4316458d367e867f2ed94f0853579",
        "mac-amd64": "47c135a922adceb516da598f3f5d574ea549209e61b99a7b1a1de6685e313ae8",
        "mac-arm64": "21c5efde8f63e27abddef08f18f7d70fbda2c358f8f98111cb8ef2ba084b8a3a",
        "windows-amd64": "b8dd1019779d25bc1142ef0237ade0f4815d3b5e99e4b4e26adcaf777f564b9b",
    },
    tag = "git_revision:9119ead6d70953d1f9a7670979431344c2cc3f10",
)
use_repo(cipd, "git-credential-luci_linux-amd64")

cipd.download_http(
    name = "isolate",
    cipd_package = "infra/tools/luci/isolate/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "68dd3da25d446eb16892b27955f0dfc2de8bf4b254525f729feff001c1d55652",
        "linux-arm64": "b50ca55243f554acabfd31859e791ebd035f81438c1f80f1d3333e9e3d5e655f",
        "mac-amd64": "5eb221ccaf6bb70a6275c8a015b854c200740a7c0ffff456febd465fc9c30539",
        "mac-arm64": "278b43d6d64475a3f7998c946eaf32332dab2e8e4bd866b25c4815f38cd6888f",
        "windows-amd64": "a67f9b413a30c381ec149e7d821ee88893f019692e1fd8472e8b92f5ee3092e2",
    },
    tag = "git_revision:9119ead6d70953d1f9a7670979431344c2cc3f10",
)
use_repo(cipd, "isolate_linux-amd64")

cipd.download_http(
    name = "lucicfg",
    cipd_package = "infra/tools/luci/lucicfg/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "d263c03acf56f7421311fa304f86fbb5cb135deb67f4c33397bdfca88a702c7f",
        "linux-arm64": "169c02b16d7cb596af0de0a4a0e864d36341e380ada01f0f327be267c77f4796",
        "mac-amd64": "56d61a81ea4d4b6ea8e92d0377ea80670e5c834bed492f1ff5387606dee8ca5b",
        "mac-arm64": "e26826136830b8077f438118ce8d09c91a3cff6458a2e62b9f680590ceb8c0d8",
        "windows-amd64": "4d74a5ccbd858d32144fb9a969c5f56c3c7fa7c990e03c173e158baed7cbe5f1",
    },
    tag = "git_revision:1b249e92c5aa4afc46cf207293609ce8de14cde4",
)
use_repo(cipd, "lucicfg_linux-amd64")

cipd.download_http(
    name = "swarming",
    cipd_package = "infra/tools/luci/swarming/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "1e9569d6ee12057fb92a97b56bac2c69308f0e536501ccae448d83879c9d4dc0",
        "linux-arm64": "b4c8843b897b25efcc1381b224183de487000250c29d2f25f1d4a3dc8e2573bd",
        "mac-amd64": "6dcb65e919ca1aa14aed5d041c99f4e43cf7ae0b6f62100d171b6743067732d5",
        "mac-arm64": "d9f74e17265a28ce6833b5adcf7af0bb945c154e9512f5459e993ee0434bcbdc",
        "windows-amd64": "f07a23a3a49cfbdaa8bb9df9e15c9089513761ddc2efc8cc79307a38be71e6ef",
    },
    tag = "git_revision:9119ead6d70953d1f9a7670979431344c2cc3f10",
)
use_repo(cipd, "swarming_linux-amd64")

cipd.download_http(
    name = "vpython3",
    cipd_package = "infra/tools/luci/vpython3/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "a76ac5436ea7af667dfef6207e47ca1770e1bb769a8e0991d2da84ad33f3280d",
        "linux-arm64": "1f855ece6ad0d17b9614051b6a2f346ff4f5fd9f2b4a90c65d05a9dfaaed00be",
        "mac-amd64": "d1e635fcb7d9d4c9d99638137a995a0d2ef7238b5a4b7f0fed21290de508063e",
        "mac-arm64": "80dbe01aabb09168486269b036e0d553b0b159f87f0c70fcd4a457a32bbe6ce0",
        "windows-amd64": "883a9701b711dd54049680aee2879400e05bd370faeac4c199a34724f5559eff",
    },
    tag = "git_revision:23250daf04bf7eb0726c349075e67a7051cd172a",
)
use_repo(cipd, "vpython3_linux-amd64")

cipd.download_http(
    name = "gsutil",
    cipd_package = "skia/bots/gsutil",
    sha256 = "ce033513e57dae147ad2c87acb2c62e5766d8323e0f5b75de8c71cd64e390d9b",
    tag = "version:6",
)
use_repo(cipd, "gsutil")

cipd.download_http(
    name = "patch_linux_amd64",
    cipd_package = "skia/bots/patch_linux_amd64",
    sha256 = "757fd36db06f291f77a91aa314b855af449665a606d627ce16c36813464e1df6",
    tag = "version:0",
)
use_repo(cipd, "patch_linux_amd64")

cipd.download_http(
    name = "goldctl",
    cipd_package = "skia/tools/goldctl/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "1c85351a5462aff3a0b35a05ba948bea1f21f707417fed4baaf5c4bea7e30d97",
        "linux-arm64": "17595424fc75563bcd7223f8f994fcf9c9b06955ba8ac96f4629012a258a16b4",
        "mac-amd64": "5a918e47b94ff1dd4a5a9c0a2bc8aafde5381b630b4e911347e8fcd8dabccbb1",
        "mac-arm64": "145f01b3ba8b6235f9bef05fd107eaac2111e14b6dffe29da83dd88e48808c7b",
        "windows-amd64": "bc6e516143f073e838b01f732b1fb2bc05881c70d3476f098a74ced62e6dd49d",
    },
    tag = "git_revision:9119ead6d70953d1f9a7670979431344c2cc3f10",
)
use_repo(cipd, "goldctl_linux-amd64")

cipd.download_http(
    name = "cpython3",
    cipd_package = "infra/3pp/tools/cpython3/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "d8df47a40c65d03ddbbb9837df27f9f2ef9a7be3810ddaef8c4bccab54b18399",
        "linux-arm64": "ecbefc91a4145ae10b994303765bb6d872d8b7f24f0450a3a1109b7f1d57be49",
        "mac-amd64": "43b75e7679e7960b2cc8adf66b1db52b03fde188798821c198ea194d3bdeb737",
        "mac-arm64": "f47ec7e1af5b916f5ac5a4f05f2c956b8e9053d26e193a06bd15b6a0d8bce13a",
        "windows-amd64": "89ac92dfdf88d1df8fca79c1328fa0fc0c0a60a3204e29ea0c4a6c8ea4ebf19f",
    },
    tag = "version:3@3.14.8.chromium.1",
)
use_repo(cipd, "cpython3_linux-amd64")

cipd.download_http(
    name = "bazel_build_all",
    cipd_package = "skia/tools/bazel_build_all/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "a8a035138319b1236933df741cbb703b85bb92d62ab7b3bfbb1574ba8c899666",
        "linux-arm64": "cb374818917ac03baa55350ae60245ee2366dd32109b19b529dd3b3afa357d76",
        "mac-amd64": "1b1bc71866a3613a03c37c6be79c509908c1b7c31a714a029c575b56427564b9",
        "mac-arm64": "93271d433d8b13ca7a7e8b9be9f276841d88b49f1c7c4f7b24c6d38b3c46913d",
        "windows-amd64": "de4435912907a5f570e061c78fb1435731079ba40aa9c6c08a426887c0a4bd48",
    },
    tag = "git_revision:37cdde06bdc21cd5d9fa8e473a839cd67e082b05",
)
use_repo(cipd, "bazel_build_all_linux-amd64")

cipd.download_http(
    name = "bazel_test_all",
    cipd_package = "skia/tools/bazel_test_all/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "17225247c2f3a92d2cad34d31db33b1955c229c516674d9ee9f62830835ff0a6",
        "linux-arm64": "b1852b9c3496c2afa6d54ac1723d5e8f62a4c92da73c4ee1b32247d6f054a65a",
        "mac-amd64": "7ae5558a5d6ff2d693f2f506783909c5d345e977b737b061384bf28c3fc80889",
        "mac-arm64": "700be7d7943fed6ebc198368caea3cf1725e45b09a99d9b92ec227e7f7c122df",
        "windows-amd64": "8db074b15017e4a7ae1c60c226c2787044a696f2287af9088c1fec99fdb1155a",
    },
    tag = "git_revision:37cdde06bdc21cd5d9fa8e473a839cd67e082b05",
)
use_repo(cipd, "bazel_test_all_linux-amd64")

cipd.download_http(
    name = "command_wrapper",
    cipd_package = "skia/tools/command_wrapper/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "5e212baf5ba42850f76652523551f3ad766c4a1393624f9209268d4f7df58c98",
        "linux-arm64": "ef653d868bdda5c0346e0ff59a14e766174d8fc8df71256cb45e83c45fa976e9",
        "mac-amd64": "62cc9054b2a6d7075e4b9b7e1669b4175ac91d353aa1f9edfaf93bcb8dde505b",
        "mac-arm64": "6c879cca9dc297e358134bfb4761f8de4474942c4acb1f61deb1397b2d737e53",
        "windows-amd64": "07494cc9f1e98d9187841b8ba2d3c6eaad3f78e0b0baf548a2b556aec1cab606",
    },
    tag = "git_revision:37cdde06bdc21cd5d9fa8e473a839cd67e082b05",
)
use_repo(cipd, "command_wrapper_linux-amd64")

cipd.download_http(
    name = "presubmit",
    cipd_package = "skia/tools/presubmit/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "cb8eeac25daaac088b15cdaedc74fb1cd688086e86891268e75edc496f84403a",
        "linux-arm64": "5fe374a631e59affffadd61c0b3ababe0b5d44f6bed863580947f787455ba1fd",
        "mac-amd64": "812ac7ec900456cdfb27362b00e7df84d6cbb29a7578422d15703c9be98114ef",
        "mac-arm64": "27b3a26d9a5463c8950f2bc6c169052d56b981356c02cc1f355511caa6b8a78e",
        "windows-amd64": "822a00a64453f3013045b008b58ca4cac9267be2ab9354c207690f0117b14128",
    },
    tag = "git_revision:37cdde06bdc21cd5d9fa8e473a839cd67e082b05",
)
use_repo(cipd, "presubmit_linux-amd64")

cipd.download_http(
    name = "cipd",
    cipd_package = "infra/tools/cipd/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "fcf46aec411f0f4117d69883c9cac7a4cd9e23b698a4ceef4f8d0999226acdae",
        "linux-arm64": "53452d4e2f7e233cbf801e261b1642819e23735bebf588d4fe5d623fe9dbbb92",
        "mac-amd64": "499e91edc0362dd0648bf4157a7e38f1827f89c1c7a72722aff8ea39bf76812b",
        "mac-arm64": "eafb1ade78394890df4d3592ad6466033b648fe35608a20380e1652711ba10df",
        "windows-amd64": "b1344e8aea265630a304431b9b3425172efff90703475884546974acb166f60b",
    },
    tag = "git_revision:9119ead6d70953d1f9a7670979431344c2cc3f10",
)
use_repo(cipd, "cipd_linux-amd64")

cipd.download_http(
    name = "kitchen",
    cipd_package = "infra/tools/luci/kitchen/${platform}",
    platform_to_sha256 = {
        "linux-amd64": "50781e692593bf3e8568090670e693bf13f403cdb4930a51d333885ace1e13b5",
        "linux-arm64": "8d7009288d84aa6b09bc0c9e8cdd2c692684d3ae7bdd052b3df9eb1354d38136",
        "mac-amd64": "0b35bdd04039bedfc7fb61470137f6e3185933b918f4470c4c716f7e19496a04",
        "mac-arm64": "ad68de2bc87b5aaf6bf8bc7396970ce25e88cd726599d1b8d9ea78da6c280631",
        "windows-amd64": "e63a69948b411086e4f9a8873babeb4473fdfa14d9b715f43bbb0bc1539320c3",
    },
    tag = "git_revision:9119ead6d70953d1f9a7670979431344c2cc3f10",
)
use_repo(cipd, "bazel_build_all_linux-arm64", "bazel_build_all_mac-amd64", "bazel_build_all_mac-arm64", "bazel_build_all_windows-amd64", "bazel_test_all_linux-arm64", "bazel_test_all_mac-amd64", "bazel_test_all_mac-arm64", "bazel_test_all_windows-amd64", "cipd_linux-arm64", "cipd_mac-amd64", "cipd_mac-arm64", "cipd_windows-amd64", "command_wrapper_linux-arm64", "command_wrapper_mac-amd64", "command_wrapper_mac-arm64", "command_wrapper_windows-amd64", "cpython3_linux-arm64", "cpython3_mac-amd64", "cpython3_mac-arm64", "cpython3_windows-amd64", "docker-credential-luci_linux-arm64", "docker-credential-luci_mac-amd64", "docker-credential-luci_mac-arm64", "docker-credential-luci_windows-amd64", "git-credential-luci_linux-arm64", "git-credential-luci_mac-amd64", "git-credential-luci_mac-arm64", "git-credential-luci_windows-amd64", "git_linux-arm64", "git_mac-amd64", "git_mac-arm64", "git_wrapper_linux-arm64", "git_wrapper_mac-amd64", "git_wrapper_mac-arm64", "git_wrapper_windows-amd64", "goldctl_linux-arm64", "goldctl_mac-amd64", "goldctl_mac-arm64", "goldctl_windows-amd64", "isolate_linux-arm64", "isolate_mac-amd64", "isolate_mac-arm64", "isolate_windows-amd64", "kitchen_linux-amd64", "kitchen_linux-arm64", "kitchen_mac-amd64", "kitchen_mac-arm64", "kitchen_windows-amd64", "luci-auth_linux-arm64", "luci-auth_mac-amd64", "luci-auth_mac-arm64", "luci-auth_windows-amd64", "lucicfg_linux-arm64", "lucicfg_mac-amd64", "lucicfg_mac-arm64", "lucicfg_windows-amd64", "presubmit_linux-arm64", "presubmit_mac-amd64", "presubmit_mac-arm64", "presubmit_windows-amd64", "swarming_linux-arm64", "swarming_mac-amd64", "swarming_mac-arm64", "swarming_windows-amd64", "vpython3_linux-arm64", "vpython3_mac-amd64", "vpython3_mac-arm64", "vpython3_windows-amd64")

####################################################################################################
# GCloud SDK.
####################################################################################################

http_archive(
    name = "gcloud_linux",
    build_file_content = """
filegroup(
    name = "all_files",
    srcs = glob(["**/*"]),
    visibility = ["//visibility:public"]
)
""",
    sha256 = "2ab0f75435a9ada0b7400500adbfbdfeceab2a6330c4043f68c543fc5c5c14da",
    url = "https://storage.googleapis.com/cloud-sdk-release/google-cloud-cli-564.0.0-linux-x86_64.tar.gz",
)

####################################################################################################
# protoc.
####################################################################################################

# The following archives were taken from
# https://github.com/protocolbuffers/protobuf/releases/tag/v21.12.
PROTOC_BUILD_FILE_CONTENT = """
exports_files(["bin/protoc"], visibility = ["//visibility:public"])
"""

gcs_mirror.http_archive(
    name = "protoc_linux_x64",
    build_file_content = PROTOC_BUILD_FILE_CONTENT,
    sha256 = "3a4c1e5f2516c639d3079b1586e703fc7bcfa2136d58bda24d1d54f949c315e8",
    url = "https://github.com/protocolbuffers/protobuf/releases/download/v21.12/protoc-21.12-linux-x86_64.zip",
)
use_repo(gcs_mirror, "protoc_linux_x64")

gcs_mirror.http_archive(
    name = "protoc_mac_x64",
    build_file_content = PROTOC_BUILD_FILE_CONTENT,
    sha256 = "9448ff40278504a7ae5139bb70c962acc78c32d8fc54b4890a55c14c68b9d10a",
    url = "https://github.com/protocolbuffers/protobuf/releases/download/v21.12/protoc-21.12-osx-x86_64.zip",
)
use_repo(gcs_mirror, "protoc_mac_x64")

####################################################################################################
# pgadapter.
####################################################################################################
http_archive(
    name = "pgadapter",
    build_file_content = """
filegroup(
    name = "all_files",
    srcs = glob(["**/*"]),
    visibility = ["//visibility:public"]
)
""",
    sha256 = "2dbb655dddc113eb14659e121839a9d3a5de34544ce88a1dd4dd88c23d436ae3",
    urls = ["https://storage.googleapis.com/pgadapter-jar-releases/pgadapter-v0.47.1.tar.gz"],
)

####################################################################################################
# CockroachDB (used as an "emulator" for tests).
####################################################################################################

gcs_mirror.http_archive(
    name = "cockroachdb_linux",
    build_file_content = """
filegroup(
    name = "all_files",
    srcs = glob(["**/*"]),
    visibility = ["//visibility:public"]
)
""",
    sha256 = "05293e76dfb6443790117b6c6c05b1152038b49c83bd4345589e15ced8717be3",
    strip_prefix = "cockroach-v21.1.9.linux-amd64",
    url = "https://binaries.cockroachdb.com/cockroach-v21.1.9.linux-amd64.tgz",
)
use_repo(gcs_mirror, "cockroachdb_linux")

####################################################################################################
# bazel-toolchains rbe_configs_gen (prebuilt).
####################################################################################################

# Read the instructions in //bazel/rbe/generated/README.md before updating this repository.
http_archive(
    name = "bazel_toolchains",
    sha256 = "179ec02f809e86abf56356d8898c8bd74069f1bd7c56044050c2cd3d79d0e024",
    strip_prefix = "bazel-toolchains-4.1.0",
    urls = [
        "https://mirror.bazel.build/github.com/bazelbuild/bazel-toolchains/releases/download/4.1.0/bazel-toolchains-4.1.0.tar.gz",
        "https://github.com/bazelbuild/bazel-toolchains/releases/download/4.1.0/bazel-toolchains-4.1.0.tar.gz",
    ],
)

rbe_exec_properties = use_extension("//bazel/external:rbe_exec_properties.bzl", "rbe_exec_properties")
rbe_exec_properties.setup(name = "exec_properties")
use_repo(rbe_exec_properties, "exec_properties")

gcs_mirror.http_file(
    name = "rbe_configs_gen_linux_amd64",
    downloaded_file_path = "rbe_configs_gen",
    executable = True,
    no_extension = True,
    sha256 = "1206e8a79b41cb22524f73afa4f4ee648478f46ef6990d78e7cc953665a1db89",
    url = "https://github.com/bazelbuild/bazel-toolchains/releases/download/v5.1.2/rbe_configs_gen_linux_amd64",
)
use_repo(gcs_mirror, "rbe_configs_gen_linux_amd64")

####################################################################################################
# Google Cloud SDK (needed for the Google Cloud Emulators).
####################################################################################################

google_cloud_sdk = use_extension("//bazel/external:google_cloud_sdk.bzl", "google_cloud_sdk")
google_cloud_sdk.download(name = "google_cloud_sdk")
use_repo(google_cloud_sdk, "google_cloud_sdk")

####################################################################################################
# Google Chrome and Fonts (needed for Karma and Puppeteer tests, respectively).
####################################################################################################

# TODO(borenet): we should be able to use this from rules_browsers.
google_chrome = use_extension("//bazel/external:google_chrome.bzl", "google_chrome")
google_chrome.download(name = "google_chrome")
use_repo(google_chrome, "google_chrome")

####################################################################################################
# Temporal repo, used to package DB schemas into the temporal-server image.
####################################################################################################

gcs_mirror.http_archive(
    name = "com_github_temporal",
    build_file_content = """
load("@rules_pkg//:pkg.bzl", "pkg_tar")

pkg_tar(
    name = "schemas",
    srcs = glob([
        "schema/postgresql/v96/**/*.sql",
        "schema/postgresql/v96/**/*.json",
        "schema/postgresql/v12/**/*.sql",
        "schema/postgresql/v12/**/*.json",
    ], allow_empty = True),
    strip_prefix = "external/+gcs_mirror+com_github_temporal",
    package_dir = "/etc/temporal",
    visibility = ["//visibility:public"],
)
""",
    sha256 = "386b33f987bc930036d9e765dad5aa4fbd867ac2c132ce76795f071cd988215a",
    strip_prefix = "./temporal-1.29.2",
    url = "https://github.com/temporalio/temporal/archive/refs/tags/v1.29.2.tar.gz",
)
use_repo(gcs_mirror, "com_github_temporal")

gcs_mirror.http_file(
    name = "swiftshader_libglesv2",
    downloaded_file_path = "libGLESv2.so",
    no_extension = True,
    sha256 = "ad44026cb104b3283c738e7678b3dad5c834f551f47d855200ab3332e83e34a9",
    url = "https://cdn.skia.org/swiftshader/libGLESv2.so",
)
use_repo(gcs_mirror, "swiftshader_libglesv2")

gcs_mirror.http_file(
    name = "swiftshader_libegl",
    downloaded_file_path = "libEGL.so",
    no_extension = True,
    sha256 = "5e0a2b662e532c53a1bd87397704507dfa1d31a53ab9d8ae37de1b9a01498ea6",
    url = "https://cdn.skia.org/swiftshader/libEGL.so",
)
use_repo(gcs_mirror, "swiftshader_libegl")

#########
# docsy #
#########

docsy = use_extension("//bazel/external/docsy:docsy.bzl", "docsy")
use_repo(docsy, "docsy")

# Docsy is a Hugo module.
http_archive(
    name = "hugo",
    build_file_content = """
filegroup(
    name = "file",
    srcs = ["hugo"],
    visibility = ["//visibility:public"]
)
""",
    sha256 = "9f57338fc76f4ac363b0ac35f393294a26522bb179fb4c3f19855a68ab55476a",
    url = "https://github.com/gohugoio/hugo/releases/download/v0.91.0/hugo_extended_0.91.0_Linux-64bit.tar.gz",
)