feat. Bazel V2 Detector With Bzlmod Support

[bd-samratmuk]

This PR introduces the Bazel V2 detector, delivering mode-agnostic dependency extraction for both BZLMOD (MODULE.bazel) and WORKSPACE projects.

Code Deep Dive Wiki (Recommended because this is a huge change): Detect V2 Deep Dive

Key features

• Automatic mode detection (BZLMOD vs WORKSPACE) via bazel mod show_repo, with fallback and manual override.
• Pipeline selection (MAVEN_INSTALL, MAVEN_JAR, HASKELL_CABAL_LIBRARY, HTTP_ARCHIVE) based on graph probing.
• Enhanced HTTP-family detection (http_archive, git_repository, go_repository, http_file) with mode-aware strategies and configurable probe limits.
• Deterministic pipeline execution order and single code location output with project name generation from the Bazel target. The code location generation pattern is same as v1.

Properties introduced/changed

• detect.bazel.dependency.sources (renamed from detect.bazel.workspace.rules): consistent naming across modes; same behavior, supports manual pipeline selection to skip probing.
• detect.bazel.mode: optional override for BZLMOD or WORKSPACE when auto-detection isn’t suitable.
• detect.bazel.http.probe.limit: caps external repo probing for performance on large targets.
• detect.bazel.query.options: pass custom arguments in a bazel query (not bazel cquery - we already have a property for that)

[Copilot]

Pull request overview

This PR introduces the Bazel V2 detector, a comprehensive rewrite that delivers robust, mode-agnostic dependency extraction for both BZLMOD (MODULE.bazel) and WORKSPACE-based Bazel projects. The V2 detector replaces the legacy detector's hardcoded WORKSPACE-only approach with an intelligent pipeline selection system that automatically detects the Bazel environment mode and probes the dependency graph to determine which extraction pipelines to run.

Changes:

• Introduced automatic Bazel mode detection (BZLMOD vs WORKSPACE) with graceful fallback and manual override capability
• Implemented intelligent dependency graph probing to automatically select appropriate extraction pipelines
• Enhanced HTTP-family detection with mode-aware strategies and configurable probe limits
• Renamed detect.bazel.workspace.rules to detect.bazel.dependency.sources for consistent naming across modes

Reviewed changes

Copilot reviewed 43 out of 47 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
src/main/java/com/blackduck/integration/detect/lifecycle/run/operation/OperationRunner.java	Switches from legacy Bazel detector to new V2 detector
src/main/java/com/blackduck/integration/detect/configuration/DetectProperties.java	Renames property from DETECT_BAZEL_WORKSPACE_RULES to DETECT_BAZEL_DEPENDENCY_SOURCES and adds new properties for mode override and HTTP probe limit
detectable/src/main/java/com/blackduck/integration/detectable/detectables/bazel/DependencySource.java	Renames enum from WorkspaceRule to DependencySource for consistent terminology
detectable/src/main/java/com/blackduck/integration/detectable/detectables/bazel/v2/BazelV2Detectable.java	New V2 detectable implementation with mode detection and graph probing
detectable/src/main/java/com/blackduck/integration/detectable/detectables/bazel/v2/BazelEnvironmentAnalyzer.java	Detects Bazel mode (BZLMOD vs WORKSPACE) via bazel mod show_repo probe
detectable/src/main/java/com/blackduck/integration/detectable/detectables/bazel/v2/BazelGraphProber.java	Probes dependency graph to determine which pipelines to enable
detectable/src/main/java/com/blackduck/integration/detectable/detectables/bazel/v2/HttpFamilyProber.java	Mode-aware HTTP archive detection with configurable probe limits
detectable/src/main/java/com/blackduck/integration/detectable/detectables/bazel/pipeline/Pipelines.java	Adds mode-aware HTTP pipeline selection (bzlmod vs workspace variants)
documentation/src/main/markdown/packagemgrs/bazel.md	Comprehensive documentation update explaining V2 features, properties, and troubleshooting

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.