Merge branch 'angular:master' into fix-accessibility-table-examples

.bazelignore

@@ -1,5 +1,8 @@
 node_modules
 
+integration/harness-e2e-cli/.angular
+integration/harness-e2e-cli/node_modules
+
 integration/ng-update-v13/.angular
 integration/ng-update-v13/node_modules
 

.bazelrc

@@ -86,9 +86,18 @@ build:remote --auth_enabled=true
 # is provided by the shared dev-infra package and targets k8 remote containers.
 build:remote --crosstool_top=@npm//@angular/dev-infra-private/bazel/remote-execution/cpp:cc_toolchain_suite
 build:remote --extra_toolchains=@npm//@angular/dev-infra-private/bazel/remote-execution/cpp:cc_toolchain
-build:remote --extra_execution_platforms=@npm//@angular/dev-infra-private/bazel/remote-execution:platform
-build:remote --host_platform=@npm//@angular/dev-infra-private/bazel/remote-execution:platform
-build:remote --platforms=@npm//@angular/dev-infra-private/bazel/remote-execution:platform
+build:remote --extra_execution_platforms=@npm//@angular/dev-infra-private/bazel/remote-execution:platform_with_network
+build:remote --host_platform=@npm//@angular/dev-infra-private/bazel/remote-execution:platform_with_network
+build:remote --platforms=@npm//@angular/dev-infra-private/bazel/remote-execution:platform_with_network
+
+################################
+#  Sandbox settings            #
+################################
+
+# By default, network access should be disabled unless explicitly granted for certain targets
+# using the `requires-network` tag. https://docs.bazel.build/versions/main/be/common-definitions.html
+build --sandbox_default_allow_network=false
+test --sandbox_default_allow_network=false
 
 ################################
 # --config=build-results       #

.bazelversion

@@ -1 +1 @@
-4.0.0
+5.0.0

.circleci/config.yml

@@ -67,8 +67,9 @@ var_11: &yarn_install_loose_lockfile
 var_12: &setup_bazel_ci_config
   run:
     name: "Setting up Bazel configuration for CI"
-    command: |
-      echo "import %workspace%/.circleci/bazel.rc" >> ./.bazelrc
+    # Note: We add the remote config flag to the user bazelrc file that is not tracked
+    # by Git. This is necessary to avoid stamping builds with `.with-local-changes`.
+    command: echo "import %workspace%/.circleci/bazel.rc" >> ./.bazelrc.user
 
 # Attaches the release output which has been stored in the workspace to the current job.
 # https://circleci.com/docs/2.0/workflows/#using-workspaces-to-share-data-among-jobs
@@ -103,7 +104,7 @@ var_15: &ignore_presubmit_branch_filter
 var_16: &setup_bazel_remote_execution
   run:
     name: "Setup bazel RBE remote execution"
-    command: ./scripts/circleci/bazel/setup-remote-execution.sh
+    command: ./scripts/bazel/setup-remote-execution.sh
 
 # Sets up the bazel binary globally. We don't want to access bazel through Yarn and NodeJS
 # because it could mean that the Bazel child process only has access to limited memory.
@@ -472,7 +473,6 @@ jobs:
       - *yarn_install
       - *setup_bazel_binary
 
-      - run: yarn integration-tests:partial-ivy
       - run: yarn integration-tests
       - run:
           name: Running size integration tests (failures are reported in Slack only).
@@ -482,9 +482,47 @@ jobs:
       - *slack_notify_on_failure
 
   # ----------------------------------------------------------------------------
-  # Job that runs all integration tests against Angular snapshot builds.
+  # Job that runs the AOT linker tests.
   # ----------------------------------------------------------------------------
-  integration_tests_snapshot:
+  linker_aot_test:
+    <<: *job_defaults
+    resource_class: xlarge
+    environment:
+      GCP_DECRYPT_TOKEN: *gcp_decrypt_token
+    steps:
+      - checkout_and_rebase
+      - *restore_cache
+      - *setup_bazel_ci_config
+      - *setup_bazel_remote_execution
+      - *yarn_install
+      - *setup_bazel_binary
+
+      - run: yarn test-linker-aot
+      - *slack_notify_on_failure
+
+  # ----------------------------------------------------------------------------
+  # Job that runs the JIT linker tests.
+  # ----------------------------------------------------------------------------
+  linker_jit_test:
+    <<: *job_defaults
+    resource_class: xlarge
+    environment:
+      GCP_DECRYPT_TOKEN: *gcp_decrypt_token
+    steps:
+      - checkout_and_rebase
+      - *restore_cache
+      - *setup_bazel_ci_config
+      - *setup_bazel_remote_execution
+      - *yarn_install
+      - *setup_bazel_binary
+
+      - run: yarn test-linker-jit
+      - *slack_notify_on_failure
+
+  # ----------------------------------------------------------------------------
+  # Job that runs both AOT and JIT linker tests against Angular snapshot builds.
+  # ----------------------------------------------------------------------------
+  snapshot_linker_tests:
     <<: *job_defaults
     resource_class: xlarge
     environment:
@@ -498,7 +536,8 @@ jobs:
       - *yarn_install_loose_lockfile
       - *setup_bazel_binary
 
-      - run: yarn integration-tests:partial-ivy
+      - run: yarn test-linker-aot
+      - run: yarn test-linker-jit
       - *slack_notify_on_failure
 
   # ----------------------------------------------------------------------------
@@ -544,6 +583,10 @@ workflows:
           filters: *ignore_presubmit_branch_filter
       - integration_tests:
           filters: *ignore_presubmit_branch_filter
+      - linker_aot_test:
+          filters: *ignore_presubmit_branch_filter
+      - linker_jit_test:
+          filters: *ignore_presubmit_branch_filter
       - tests_local_browsers:
           filters: *ignore_presubmit_branch_filter
       - tests_browserstack:
@@ -578,7 +621,7 @@ workflows:
           filters: *only_main_branch_filter
       - mdc_snapshot_test_cronjob:
           filters: *only_main_branch_filter
-      - integration_tests_snapshot:
+      - snapshot_linker_tests:
           filters: *only_main_branch_filter
 
     triggers: