chore: migrate to Aspect CLI AXL tasks on ephemeral GHA runners

.aspect/config.axl

@@ -0,0 +1,32 @@
+"""Aspect CLI configuration."""
+
+load("@aspect//feature/artifacts.axl", "ArtifactUpload")
+load("@aspect//format.axl", "format")
+load("@aspect//traits.axl", "BazelTrait")
+
+# `aspect buildifier` — alias of `aspect format` preset to the Starlark-only
+# formatter target. CI and local users can run `aspect buildifier` instead
+# of `aspect format --formatter-target=//tools/format:buildifier`.
+buildifier = format.alias(
+    defaults = {
+        "formatter_target": "//tools/format:buildifier",
+    },
+    summary = "Format Starlark files using buildifier.",
+)
+
+def config(ctx: ConfigContext):
+    is_ci = bool(ctx.std.env.var("CI"))
+
+    if is_ci:
+        ctx.traits[BazelTrait].extra_flags.extend([
+            "--config=ci",
+        ])
+
+    # Register the buildifier alias as a real CLI command.
+    ctx.tasks.add(buildifier)
+
+    # Enable artifact uploads for testlogs, profile, and BEP.
+    # upload_test_logs="failed" — only the logs from failing tests are useful.
+    ctx.features[ArtifactUpload].args.upload_test_logs = "failed"
+    ctx.features[ArtifactUpload].args.upload_profile = True
+    ctx.features[ArtifactUpload].args.upload_bep = True

.aspect/version.axl

@@ -0,0 +1 @@
+version("2026.21.44")

.bazelrc

@@ -1,7 +1,5 @@
 import %workspace%/tools/preset.bazelrc
 
-### YOUR PROJECT SPECIFIC OPTIONS GO HERE ###
-
 common --noenable_workspace
 
 # We have some empty globs in rules_js
@@ -22,14 +20,15 @@ build --workspace_status_command="echo BUILD_SCM_VERSION 1.2.3"
 # https://bazelbuild.slack.com/archives/C014RARENH0/p1691158021917459?thread_ts=1691156601.420349&cid=C014RARENH0
 common --check_direct_dependencies=off
 
-
 # Ignore this test as it breaks the runfiles tree generation in coverage mode. 
 # Also see: .aspect/bazelrc/performance.bazelrc where runfiles trees are eagerly 
 # generated due to `coverage --build_runfile_links`
 coverage --deleted_packages=js/private/test/image/non_ascii
 
-# Load any settings & overrides specific to the current user from `.aspect/bazelrc/user.bazelrc`.
-# This file should appear in `.gitignore` so that settings are not shared with team members. This
-# should be last statement in this config so the user configuration is able to overwrite flags from
-# this file. See https://bazel.build/configure/best-practices#bazelrc-file.
-try-import %workspace%/.aspect/bazelrc/user.bazelrc
+# Build without the bytes
+common:ci --remote_download_outputs=minimal
+common:ci --nobuild_runfile_links
+
+# Override the preset's `--lockfile_mode=error` on CI since we don't
+# yet commit MODULE.bazel.lock — see .gitignore.
+common:ci --lockfile_mode=off

.github/workflows/ci.yaml → .github/workflows/ci-vanilla-bazel.yaml

@@ -1,4 +1,4 @@
-name: CI
+name: CI - Vanilla Bazel
 
 # Controls when the action will run
 on:
@@ -12,10 +12,8 @@ on:
     workflow_dispatch:
 
 concurrency:
-    # Cancel previous actions from the same PR or branch except 'main' branch.
-    # See https://docs.github.com/en/actions/using-jobs/using-concurrency and https://docs.github.com/en/actions/learn-github-actions/contexts for more info.
-    group: concurrency-group::${{ github.workflow }}::${{ github.event.pull_request.number > 0 && format('pr-{0}', github.event.pull_request.number) || github.ref_name }}${{ github.ref_name == 'main' && format('::{0}', github.run_id) || ''}}
-    cancel-in-progress: ${{ github.ref_name != 'main' }}
+    group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+    cancel-in-progress: true
 
 jobs:
     semantic-pull-request: