Bazel: Modernize build, fix minor issues

- Remove deprecated `WORKSPACE.bzlmod`
- Adjust BUILD dependencies for Bazel, particularly for protobuf and python rules

PiperOrigin-RevId: 903223054
Change-Id: I5f7a85d7d93f6638a15e6cecd38b31a9936bb14a

Author: cblichmann

MODULE.bazel

@@ -14,7 +14,7 @@
 
 module(
     name = "sandboxed_api",
-    version = "20260109.0",
+    version = "20260421.0",
     bazel_compatibility = [">=8.5.0"],
 )
 

WORKSPACE.bzlmod

@@ -46,7 +46,8 @@ bzl_library(
     srcs = ["proto.bzl"],
     visibility = ["//visibility:private"],
     deps = [
-        "@rules_proto//proto:defs",
+        "@com_google_protobuf//bazel:cc_proto_library_bzl",
+        "@com_google_protobuf//bazel:proto_library_bzl",
     ],
 )
 

sandboxed_api/bazel/BUILD

@@ -14,6 +14,7 @@
 
 load("@rules_cc//cc:cc_binary.bzl", "cc_binary")
 load("@rules_cc//cc:cc_library.bzl", "cc_library")
+load("@rules_shell//shell:sh_test.bzl", "sh_test")
 load("//sandboxed_api/bazel:build_defs.bzl", "sapi_platform_copts")
 load("//sandboxed_api/bazel:proto.bzl", "sapi_proto_library")
 load("//sandboxed_api/bazel:sapi.bzl", "sapi_library")

sandboxed_api/examples/sum/BUILD

@@ -15,6 +15,7 @@
 # Description: Sandboxed API reimplementation of zlib's zpipe.c example.
 
 load("@rules_cc//cc:cc_binary.bzl", "cc_binary")
+load("@rules_shell//shell:sh_test.bzl", "sh_test")
 load("//sandboxed_api/bazel:build_defs.bzl", "sapi_platform_copts")
 load("//sandboxed_api/bazel:sapi.bzl", "sapi_library")
 

sandboxed_api/examples/zlib/BUILD

@@ -17,6 +17,7 @@
 #   from the current process
 
 load("@rules_cc//cc:cc_binary.bzl", "cc_binary")
+load("@rules_shell//shell:sh_test.bzl", "sh_test")
 load("//sandboxed_api/bazel:build_defs.bzl", "sapi_platform_copts")
 
 licenses(["notice"])

sandboxed_api/sandbox2/examples/custom_fork/BUILD

@@ -19,6 +19,7 @@
 # - sandbox2::Comms for data exchange (IPC)
 
 load("@rules_cc//cc:cc_binary.bzl", "cc_binary")
+load("@rules_shell//shell:sh_test.bzl", "sh_test")
 load("//sandboxed_api/bazel:build_defs.bzl", "sapi_platform_copts")
 
 licenses(["notice"])

sandboxed_api/sandbox2/examples/network/BUILD

@@ -15,6 +15,7 @@
 # The 'network proxy' example demonstrates how to use network proxy server.
 
 load("@rules_cc//cc:cc_binary.bzl", "cc_binary")
+load("@rules_shell//shell:sh_test.bzl", "sh_test")
 load("//sandboxed_api/bazel:build_defs.bzl", "sapi_platform_copts")
 
 licenses(["notice"])

sandboxed_api/sandbox2/examples/network_proxy/BUILD

@@ -20,6 +20,7 @@
 # - test to ensure sandbox executor runs sandboxee without issue
 
 load("@rules_cc//cc:cc_binary.bzl", "cc_binary")
+load("@rules_shell//shell:sh_test.bzl", "sh_test")
 load("//sandboxed_api/bazel:build_defs.bzl", "sapi_platform_copts")
 
 licenses(["notice"])

sandboxed_api/sandbox2/examples/static/BUILD

@@ -21,6 +21,7 @@
 # - test to ensure sandbox executor runs sandboxee without issue
 
 load("@rules_cc//cc:cc_binary.bzl", "cc_binary")
+load("@rules_shell//shell:sh_test.bzl", "sh_test")
 load("//sandboxed_api/bazel:build_defs.bzl", "sapi_platform_copts")
 
 licenses(["notice"])