style: release whole repository

[alexeagle]

Today, developers must take care to include sources in the filegroup(name = "standard_package") targets which are sprinkled around the repository. In the best case, omitting one will be caught by automated testing in the repo. However,

• it's a lot of effort to add sufficient test coverage for this
• we still won't catch everything.

I also claim there is no benefit to having Bazel build the release artifact. git archive is completely sufficient for this task (including pruning directories that are unnecessary in the release artifact and which make it large)

Making this change would simplify the repository so that it's more feasible for us to maintain it with a very small effort.

[aiuto]

I don't agree. We have been moving towards having both the core rules and the baseline set of tools in this same repository. That will require distinct MODULE.bazel files for the core vs. the others, as core can't depend on anything, while the tools will obviously require language rules.

We could create a second project for the tools. That may have other developer costs, since we'll normally want to test in both at once.

[alexeagle]

Are the "baseline set of tools" things that are only needed by Bazel users?

From my understanding of the tools you have in mind, they would be applicable to developers outside of Bazel who are working with sboms, and therefore I propose that they should not live in rules_license at all.

I'd be happy to do the research to find who else is working on tools that accomplish those use cases and make a connection so that we can make sure those tools are easily adoptable by Bazel users as well, or create the tools if they truly don't exist anywhere.