Sandboxlib

Baseline: 792a9d6

Cherry picks:
+ 25e5995: Rollback of commit
a2770334ea3f3111026eb3e1368586921468710c.
+ 2479405: Fix NPE with unset maven_jar sha1
+ 3cf2126: Rewrite the extra action info files if the data within
them changes.
+ 5a9c6b4: JavaBuilder: Reintroduce the -extra_checks flag.


Incompatible changes:

- Removed predefined Python variable "generic_cpu".
- Skylark rules: if you set "outputs" or an attribute to a
function, this function must now list its required attributes as
parameters (instead of an attribute map).
- The host_platform and target_platform entries are not written to
the master log anymore.
- Bazel requires Hazelcast 3.6 or higher now for remote execution
support, because we upgraded our client library and the protocol
it uses is incompatible with older versions.

New features:

- LIPO context (--lipo_context) can now also be a cc_test (in
addition to cc_binary)

Important changes:

- If --android_crosstool_top is set, native code compiled for
android will always use --android_compiler and not --compiler in
choosing the crosstool toolchain, and will use --android_cpu if
--fat_apk_cpu is not set.
- Add --instrument_test_targets option.
- apple_binary supports a new platform_type attribute, which, if
set to "watchos", will build dependencies for Apple's watchOS2.
- objc_binary now supports late-loaded dynamic frameworks.
- Native Swift rules no longer pull in module maps unconditionally.
Use --experimental_objc_enable_module_maps for that.
- Merged manifests are guaranteed to have the application element
as the last child of the manifest element as required by Android
N.
- The Android manifest merger is now available as an option for
android_binary rules. The merger will honor tools annotations in
AndroidManifest.xml and will perform placeholder substitutions
using the values specified in android_binary.manifest_values. The
merger may be selected by setting the manifest_merger attribute
on android_binary.
- The progress message would not clear packages that need to be
loaded twice.
- Remove warning for high value of --jobs.
- Use the correct build configuration for shared native deps during
Android split transitions.
- When building ObjectiveC++, pass the flag -std=gnu++11.
- use xcrun simctl instead of iossim to launch the app for "blaze
run".
- Glob arguments 'exclude' and 'exclude_directories' must be named
- Bazel no longer regards an empty file as changed if its mtime has
changed.

Baseline: a9301fa

Cherry picks:
+ ff30a73: Turn --legacy_external_runfiles back on by default
+ aeee3b8: Fix delete[] warning on fsevents.cc


Incompatible changes:

- The --cwarn command line option is not supported anymore. Use
--copt instead.

New features:

- On OSX, --watchfs now uses FsEvents to be notified of changes
from the filesystem (previously, this flag had no effect on OS X).
- add support for the '-=', '*=', '/=', and'%=' operators to
skylark. Notably, we do not support '|=' because the semantics
of skylark sets are sufficiently different from python sets.

Important changes:

- Use singular form when appropriate in blaze's test result summary
message.
- Added supported for Android NDK revision 11
- --objc_generate_debug_symbols is now deprecated.
- swift_library now generates an Objective-C header for its objc
interfaces.
- new_objc_provider can now set the USES_SWIFT flag.
- objc_framework now supports dynamic frameworks.
- Symlinks in zip files are now unzipped correctly by http_archive,
download_and_extract, etc.
- swift_library is now able to import framework rules such as
objc_framework.
- Adds "jre_deps" attribute to j2objc_library.
- Release apple_binary rule, for creating multi-architecture
("fat") objc/cc binaries and libraries, targeting ios platforms.
- Aspects documentation added.
- The --ues_isystem_for_includes command line option is not
supported anymore.
- global function 'provider' is removed from .bzl files. Providers
can only be accessed through fields in a 'target' object.

Baseline: 5a2dd7a


Incompatible changes:

- All repositories are now directly under the x.runfiles directory
in the runfiles tree (previously, external repositories were at
x.runfiles/main-repo/external/other-repo. This simplifies
handling remote repository runfiles considerably, but will break
existing references to external repository runfiles.
Furthermore, if a Bazel project does not provide a workspace name
in the WORKSPACE file, Bazel will now default to using __main__
as the workspace name (instead of "", as previously). The
repository's runfiles will appear under x.runfiles/__main__/.
- Bazel does not embed protocol buffer-related rules anymore.
- It is now an error for a cc rule's includes attribute to point to
the workspace root.
- Bazel warns if a cc rule's includes attribute points out of
third_party.
- Removed cc_* attributes: abi / abi_deps. Use select() instead.

New features:

- select({"//some:condition": None }) is now possible (this "unsets"
the attribute).

Important changes:

- java_import now allows its 'jars' attribute to be empty.
- adds crunch_png attribute to android_binary
- Replace --java_langtools, --javabuilder_top, --singlejar_top,
--genclass_top, and --ijar_top with
java_toolchain.{javac,javabuilder,singlejar,genclass,ijar}
- External repository correctness fix: adding a new file/directory
as a child of a new_local_repository is now noticed.
- iOS apps are signed with get-task-allow=1 unless building with -c
opt.
- Generate debug symbols (-g) is enabled for all dbg builds of
objc_ rules.
- Bazel's workspace name is now io_bazel. If you are using Bazel's
source as an external repository, then you may want to update the
name you're referring to it as or you'll begin seeing warnings
about name mismatches in your code.
- Fixes integer overflow in J2ObjC sources to be Java-compatible.
- A FlagPolicy specified via the --invocation_policy flag will now
match the current command if any of its commands matches any of
the commands the current command inherits from, as opposed to
just the current command.
- The key for the map to cc_toolchain_suite.toolchains is now a
string of the form "cpu|compiler" (previously, it was just "cpu").
- Fix interaction between LIPO builds and C++ header modules.
- Ctrl-C will now interrupt a download, instead of waiting for it to
finish.
- Proxy settings can now be specified in http_proxy and https_proxy
environment variables (not just HTTP_PROXY and HTTPS_PROXY).
- Skylark targets can now read include directories from
ObjcProvider.
- Expose parameterized aspects to Skylark.
- Support alwayslink cc_library dependencies in objc binaries.
- Import cc_library dependencies in generated Xcode project.

Baseline: 759bbfe

Cherry picks:
+ 1250fda: Rollback of commit
351475627b9e94e5afdf472cbf465f49c433a25e.
+ ba8700e: Correctly set up build variables for the correct pic
mode for fake_binary rules.
+ 386f242: Automated [] rollback of commit
525fa71b0d6f096e9bfb180f688a4418c4974eb4.
+ 97e5ab0: Fix cc_configure include path for Frameworks on OS X.
+ a20352e: cc_configure: always add -B/usr/bin to the list of gcc
option
+ 0b26f44: cc_configure: Add piii to the list of supported
cpu_value
+ 3e4e416: cc_configure: uses which on the CC environment variable
+ aa3dbd3: cc_configure.bzl: strip end of line when looking for
the cpu
+ 810d60a: cc_configure: Add -B to compiler flag too


Patch release, only includes fixes to C++ auto-configuration.

Baseline: 19b5675


Incompatible changes:

- Skylark rules that are available from their own repository will
now issue a warning when accessed through bazel_tools.
- Set --legacy_bazel_java_test to off by default. java_test will
now have a slightly different behaviour, correctly emitting XML
file but, as a downside, it needs correct declaration of the
test suite (see https://github.com/bazelbuild/bazel/issues/1017).
- Labels in .bzl files in remote repositories will be resolved
relative to their repository (instead of the repository the
Skylark rule is used in).
- Renamed proto_java_library to java_proto_library. The former
is now deprecated and will print out a warning when used.
- android_sdk now compiles android_jack on the fly from
android_jar, which means android_jar must be a jar and
android_jack is now deprecated. The Jack tools (jack, jill,
resource_extractor) must be specified.
- Any project that depended on the objc_options rule will be
broken. Can be fixed by adding attrs (infoplists,copts) directly
to rules depending on the options.
- .aidl files correctly require import statements for types
defined in the same package and the same android_library.

New features:

- Experimental Windows support is available.
- Experimental support for writing remote repository rules in
Skylark is available.
- iOS ipa_post_processor attribute allows for user-defined IPA
edits.
- Adds a to_json method to Skylark structs, providing conversion to
JSON format.
- Native python rule can depend on skylark rule as long as skylark
rule provides 'py' provider.
- When using both --verbose_failures and --sandbox_debug, Bazel
prints instructions how to spawn a debugging shell inside the
sandbox.
- add flag --sandbox_add_path, which takes a list of additional
paths as argument and mount these paths to sandbox.

Important changes:

- androidsdk//:org_apache_http_legacy added for the legacy Apache
classes for android sdk version 23 and above.
- Genrules correctly work when used with bazel run.
- When namespace-sandbox is run with the -D (debug) flag and
inside a terminal, it spawns a shell inside the sandbox to aid in
debugging when the sandboxed command fails.
- Added --artifact to workspace generator for generating workspace
and build file rules from artifact coodrinates.
- Specifying --experimental_android_resource_shrinking on the
command line will enable a resource shrinking pass on
android_binary targets that already use Proguard.
- J2ObjC updated to 1.0.1 release.
- Added "root_symlinks" and "symlinks" parameters to Skylark
runfiles() method.
- You can no longer use objc_binary targets for the xctest_app
attribute of an ios_test rule.
- Enable overriding jsonnet binaries and stdlib for Jsonnet rules.
- mount target of /etc/resolv.conf if it is a symlink.
- Tests that failed to build because execution was halted no longer
print their status.
- Bazel warns if a cc rule's includes attribute contains up-level
references that escape its package.
- Add repository_ctx.download and repository_ctx.download_and_extract
function.

Baseline: 9e100ac


Incompatible changes:

- ObjC compile actions for J2ObjC-translated code now only has
access to headers from the java deps of the associated original
java rule.
These compile actions no longer takes the compiler options
specified in "copts" attribute on objc_binary/ios_test rules.
J2ObjC dead code removal (enabled through flag
"--j2objc_dead_code_removal") now happens *after* ObjC
compilation.
- maven_jar no longer supports separate artifact_id, group_id, and
verison fields. This information should be provided in the
artifact field,
instead.

New features:

- Better support for toolchains that don't have a dynamic linker.
- build_file_content attribute added to new_git_repository,
new_http_archive, and new_local_repository.
- Add support for .tar.bz2 archives to http_archive rules.

Important changes:

- The --skyframe flag is no longer available for the build command.
- The --artifacts flag was removed from the dump command.
- The sha256 attribute is now optional (although recommended!) for
remote repository rules.
- Add instrumented file provider support to Skylark rules.
- Add imports attribute to native Python rules.
- Allow overriding -gsplit-dwarf from copts.
- Improved sandbox performance on XFS filesystems.