9.3.1rc1

Note

If you are looking for rolling releases, please visit this page.

Release 9.3.1rc1 (2026-10-20)

Bazel 9.3.1 is a patch LTS release. It is fully backward compatible with Bazel 9 releases starting from 9.0.1; see Bazel 9.0.1 release notes for a note on backward compatibility.

General

• Removed distrusted eMudhra and Sectigo AAA root CA certificates from the bundled JDK, to address the private key leakage (see https://emudhra.we-have-a-problem.com/; #31920)

Core

• Preserve packages in top-level alias chains across pre-execution cache discards. (#31912)

External Deps

• Close the channel of a lock file when acquiring a lock fails (#31896)

Performance

• Rewind an action whose output was lost before it could be downloaded (#31902)

Acknowledgments

This release contains contributions from many people at Google, as well as Fabian Meumertzheim.

Notice: Bazel installers contain binaries licensed under the GPLv2 with Classpath exception. Those installers should always be redistributed along with the source code.

Some versions of Bazel contain a bundled version of OpenJDK. The license of the bundled OpenJDK and other open-source components can be displayed by running the command bazel license. The vendor and version information of the bundled OpenJDK can be displayed by running the command bazel info java-runtime. The binaries and source-code of the bundled OpenJDK can be downloaded from our mirror server.

Security: All our binaries are signed with our public key 3D5919B448457EE0.