Support updating oci artifacts in bzlmod (rules_oci oci.pull)

[punsoong-canva]

Tell us more.

Renovate already supports updating dependencies pulled in with rules_oci and oci_pull in legacy WORKSPACE files (https://docs.renovatebot.com/bazel/#legacy-workspace-files)

Similar to #27467, I would like Renovate to support updating oci artifacts when oci_pull is being called from a module extension in a MODULE.bazel file.
From: https://github.com/bazel-contrib/rules_oci/blob/main/docs/pull.md

 oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")

# A multi-arch base image with variants, note that it won't work with just "linux/arm64"
oci.pull(
    name = "distroless_base_nossl_debian12",
    digest = "sha256:73c3d3f3030516665c916ebc9baa80f89c1a90e438dc02f1fed525ed246c0c2a",
    image = "gcr.io/distroless/base-nossl-debian12",
    platforms = [
        "linux/amd64",
        "linux/arm64/v8",
    ],
)
...

[github-actions[bot]]

Hi there,

Get your discussion fixed faster by creating a minimal reproduction. This means a repository dedicated to reproducing this issue with the minimal dependencies and config possible.

Before we start working on your issue we need to know exactly what's causing the current behavior. A minimal reproduction helps us with this. Discussions without reproductions are less likely to be converted to Issues.

Please follow these steps:

1. Read our guide on creating a minimal reproduction.
2. Go to our minimal reproduction template repository.
3. Select the Use this template button to create a new repository based on the template.
4. Work on the minimal reproduction in your own repository.
5. Fill out the information in your repository's README.md.
6. Add the link to your reproduction to the first post of your Discussion. If you are not the original author, you can post a new comment with the link.

If you need help with running renovate on your minimal reproduction repository, please refer to our Running Renovate guide.
Good luck,

The Renovate team

[gzm0]

Minimal example: https://github.com/gzm0/bzlmod-oci-update

[gzm0]

(FWIW: I'm happy to contribute this, but wanted to go through the correct process).

[rarkins]

@gzm0 thanks for the reproduction. I've converted this into an issue: #32526

You're welcome to walk on it

[gzm0]

FWIW: maven extension update support has since been implemented:
#27601
#30884