bazel: 7.0.0 -> 7.0.2

[Strum355]

Description of changes

Changelog for 7.0.2: https://github.com/bazelbuild/bazel/releases/tag/7.0.2
List of commits between 7.0.0 and 7.0.2: bazelbuild/bazel@7.0.0...7.0.2

Most importantly perhaps, this bump fixes bazelbuild/bazel#20527.

This PR also includes provisions to enable overriding the version. Previously this wasnt trivial to do due to version being a locally scoped variable, so while the src could be updated, version was used in a few attributes via string interpolation that are more awkward to patch than it could be

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

---

Add a 👍 reaction to pull requests you find important.

[flurie]

I ran nixpkgs-review and tested the Bazel binary on a few targets in large Bazel 7 project on x86_64-linux. I did not test the hermetic /tmp fix specifically, but I have had some users verify that 7.0.2 fixes the issue for them, so I am satisfied.

I can also run nixpkgs-review on aarch64-darwin, but I'm not sure how functional this is on darwin in general? The meta info indicates it is.

[malt3]

Do you think it makes sense to add this patch back? https://github.com/sourcegraph/sourcegraph/pull/59359

I also ran into it for multiple Bazel projects.

[Strum355]

Do you think it makes sense to add this patch back? sourcegraph/sourcegraph#59359

I also ran into it for multiple Bazel projects.

I would be tempted to put in a separate PR, although theres some unfinished discussion on the topic here: #262152

[Strum355]

@layus @wegank sorry for the ping, would we be able to merge this?

[layus]

Yes, sure :-).
@Strum355 Thanks for the PR
@malt3, @flurie Thanks for testing this toroughly
@malt3 I did investigate the PATH issues quite a lot. Let's move the discussion to #289505