[llvm] [bazel] Sort bazel_deps into 'compat floor' and 'latest' sections (PR #207605)

[via llvm-commits]

https://github.com/UebelAndre created https://github.com/llvm/llvm-project/pull/207605

Some dependencies have big knock-on effects and to the benefit of consumers should best be tracked as min-supported-version. This change divides the `MODULE.bazel` file into two sections where one contains known sensitive dependencies that should only be bumped as needed and the second are flex dependencies that can freely be updated with minimal impact to external consumers.

>From 3ddb0c11fb006bb2e73e8ff9e30f6a5f218e49df Mon Sep 17 00:00:00 2001
From: UebelAndre <github at uebelandre.com>
Date: Sun, 5 Jul 2026 12:12:52 -0700
Subject: [PATCH] [bazel] Sort bazel_deps into 'compat floor' and 'latest'
 sections

---
 utils/bazel/MODULE.bazel | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/utils/bazel/MODULE.bazel b/utils/bazel/MODULE.bazel
index 10390ba3a0600..db747649ab2be 100644
--- a/utils/bazel/MODULE.bazel
+++ b/utils/bazel/MODULE.bazel
@@ -6,14 +6,21 @@
 
 module(name = "llvm-project-overlay")
 
+# Compatibility floor: the oldest version of each dep that llvm-project is
+# tested against. Downstream consumers may override to any version >= this.
+# Bumping requires updating the compatibility docs; do not bump casually.
 bazel_dep(name = "apple_support", version = "2.6.1", repo_name = "build_bazel_apple_support")
-bazel_dep(name = "bazel_skylib", version = "1.9.0")
-bazel_dep(name = "platforms", version = "1.1.0")
 bazel_dep(name = "protobuf", version = "35.0", repo_name = "com_google_protobuf")
 bazel_dep(name = "rules_android", version = "0.7.2")
 bazel_dep(name = "rules_cc", version = "0.2.19")
-bazel_dep(name = "rules_python", version = "2.0.2")
+bazel_dep(name = "rules_python", version = "1.7.0")
 bazel_dep(name = "rules_shell", version = "0.8.0")
+
+# Latest pins: track upstream freely. No compatibility contract -- bump to
+# whatever version LLVM's own build needs; downstream consumers get whatever
+# resolves in their module graph.
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
+bazel_dep(name = "platforms", version = "1.1.0")
 bazel_dep(name = "zlib-ng", version = "2.3.3", repo_name = "llvm_zlib")
 bazel_dep(name = "zstd", version = "1.5.7.bcr.1", repo_name = "llvm_zstd")
 bazel_dep(name = "gmp", version = "6.3.0.bcr.1")