Implement Bazel module lockfile support

[rarkins]

Discussed in #25532

^{Originally posted by cgrindel November 1, 2023}

Tell us more.

Requirements

• Read the .bazelversion. Ensure that it is 6.4.0 or later.
• Read the bazelrc files looking for --lockfile_mode. If not found, it is assumed to be update.
• Lockfile Mode
  • update: update the lockfile.
  • error: do not update the lockfile. NOTE: It is unclear why one would configure Renovate to update Bazel and have their lockfile mode be error.
  • off: do not update the lockfile.
• If a lockfile update is warranted, execute bazel mod deps.
• Need to ensure that bazelisk is installed on the platforms that execute Renovate (e.g., Docker images).

Related Links

• Bazel module lockfile documentation
• Lockfile maintenance config
• Lockfile maintenance schedule