introduce proper postupgrade script for renovate.

BUILD.bazel

@@ -253,6 +253,7 @@ py_venv(
         "//bzl/versioning",
         "//ini/git/merge_drivers/bazel_lockfile",
         "//project/cultist/gen/testing",
+        "//py/ci/postUpgrade:postUpgrade_bin",
         "//py/hello_world:hello_world_bin",
         "//py/ibazel:ibazel_bin",
         "//py/ipynb:ipynb_bin",

ci/BUILD.bazel

@@ -19,6 +19,11 @@ ts_project(
     ],
 )
 
+alias(
+    name = "postupgrade",
+    actual = "@@//py/ci/postUpgrade:postUpgrade_bin",
+)
+
 jest_test(
     name = "tests",
     srcs = ["bazel_test.js"],

py/ci/postUpgrade/BUILD.bazel

@@ -0,0 +1,14 @@
+load("//bzl:rules.bzl", "bazel_lint")
+load("//py:rules.bzl", "py_binary")
+
+py_binary(
+    name = "postUpgrade_bin",
+    srcs = ["__main__.py"],
+    main = "__main__.py",
+    visibility = ["//:__subpackages__"],
+)
+
+bazel_lint(
+    name = "bazel_lint",
+    srcs = ["BUILD.bazel"],
+)

py/ci/postUpgrade/__main__.py

@@ -0,0 +1,65 @@
+"Runs after Renovate updates some dep"
+from subprocess import run as _run
+from os import getenv
+
+if __name__ != "__main__":
+	raise Exception("don’t import this!")
+
+wd = getenv("BUILD_WORKSPACE_DIRECTORY")
+
+if wd is None:
+	raise Exception("Please run from bazel.")
+
+
+def run(*args, **kwargs):
+	return _run(*args, cwd=wd, **kwargs)
+
+def bazel(args: list[str] = [],  **kwargs):
+	return run(
+		["npx", "--yes", "@bazel/bazelisk"] + args,
+		check=True, **kwargs,
+	)
+
+def bazel_run(args: list[str] = [], env: dict[str, str] = {}, **kwargs):
+	return bazel(
+		["run"] + args,
+		**kwargs,
+	)
+
+def cargo_repin():
+	return bazel(["sync", "--only=cargo"])
+
+def go_mod_tidy():
+	return bazel_run(["@@/sh/bin:go", "--", "mod", "tidy"])
+
+def bazel_update_lockfile():
+	return bazel(["mod", "deps", "--lockfile_mode=update"])
+
+def autofix_tags(tags: list[str]):
+	return bazel_run(["@@//:fix"] + tags)
+
+def autofix_all():
+	return autofix_tags(["//..."])
+
+def bazel_update_modfile():
+	return bazel(["mod", "tidy"])
+
+def modify_non_bazel_lockfiles():
+	go_mod_tidy()
+	autofix_all()
+
+def modify_bazel_lockfiles():
+	bazel_update_modfile()
+	cargo_repin()
+	bazel_update_lockfile()
+	# and one for luck
+	autofix_all()
+
+modify_non_bazel_lockfiles()
+modify_bazel_lockfiles()
+run(["rm", "-rf", "dist/"])
+
+
+
+
+

renovate.json

@@ -26,11 +26,7 @@
 		"zemn-me/monorepo"
 	],
 	"allowedPostUpgradeCommands": [
-		"CARGO_BAZEL_REPIN=1 npx --yes @bazel/bazelisk sync --only=cargo",
-		"npx --yes @bazel/bazelisk run @@//sh/bin:go -- mod tidy",
-		"npx --yes @bazel/bazelisk run //bzl/fix_api:fix_all //...",
-		"rm -rf dist",
-		"npx --yes @bazel/bazelisk mod deps --lockfile_mode=update"
+		"npx --yes @bazel/bazelisk run //ci:postupgrade"
 	],
 	"packageRules": [
 		{
@@ -55,12 +51,7 @@
 			],
 			"postUpgradeTasks": {
 				"commands": [
-					"CARGO_BAZEL_REPIN=1 npx --yes @bazel/bazelisk sync --only=cargo",
-					"npx --yes @bazel/bazelisk run @@//sh/bin:go -- mod tidy",
-					"npx --yes @bazel/bazelisk mod deps --lockfile_mode=update",
-					"npx --yes @bazel/bazelisk run //bzl/fix_api:fix_all //...",
-					"npx --yes @bazel/bazelisk run //bzl/fix_api:fix_all //...",
-					"rm -rf dist"
+					"npx --yes @bazel/bazelisk run //ci:postupgrade"
 				],
 				"executionMode": "branch",
 				"fileFilters": [