Update bazel and module versions (#5822)

- Update bazel to 8.3.1, just to stay reasonably up to date.
- Bazel warned about the platforms version, so I generally updated
packages that have central registry versions.
- Note there's a newer re2 in the central registry, but I got a download
error with it.
- `--experimental_guard_against_concurrent_changes` is deprecated; I
wasn't sure it's worth explicitly setting
`--guard_against_concurrent_changes=full`, but figured it may be
consistent (it's not clear to me -- see
https://github.com/bazelbuild/bazel/pull/25874).

.bazelrc

@@ -47,9 +47,8 @@ common --disk_cache=~/.cache/carbon-lang-build-cache
 # line to `user.bazelrc` in the repository root and modify the number there.
 common --experimental_disk_cache_gc_max_size=100G
 
-# Enable some safety when using the build cache, likely to be defaulted in
-# future Bazel releases.
-common --experimental_guard_against_concurrent_changes
+# Enable some safety when using the build cache. Defaults to `lite`.
+common --guard_against_concurrent_changes=full
 
 # Used by clang_configuration.bzl.
 common --action_env=CC --host_action_env=CC

.bazelversion

@@ -1 +1 @@
-8.2.1
+8.3.1

MODULE.bazel

@@ -28,14 +28,15 @@ http_archive = use_repo_rule(
     "http_archive",
 )
 
-bazel_dep(name = "abseil-cpp", version = "20240722.0.bcr.2")
-bazel_dep(name = "bazel_skylib", version = "1.7.1")
-bazel_dep(name = "google_benchmark", version = "1.8.5")
-bazel_dep(name = "googletest", version = "1.15.2")
+bazel_dep(name = "abseil-cpp", version = "20250512.1")
+bazel_dep(name = "bazel_skylib", version = "1.8.1")
+bazel_dep(name = "google_benchmark", version = "1.9.4")
+bazel_dep(name = "googletest", version = "1.17.0")
 bazel_dep(name = "re2", version = "2024-07-02.bcr.1")
-bazel_dep(name = "rules_cc", version = "0.1.1")
-bazel_dep(name = "rules_pkg", version = "1.0.1")
-bazel_dep(name = "rules_shell", version = "0.4.1")
+bazel_dep(name = "rules_cc", version = "0.1.4")
+bazel_dep(name = "rules_pkg", version = "1.1.0")
+bazel_dep(name = "rules_shell", version = "0.5.0")
+bazel_dep(name = "tcmalloc", version = "0.0.0-20250331-43fcf6e")
 bazel_dep(name = "tree-sitter-bazel", version = "0.24.4")
 
 # The registry only has an old version. We use that here to avoid a miss but
@@ -57,17 +58,6 @@ archive_override(
     urls = ["https://github.com/wcohen/libpfm4/archive/v{0}.tar.gz".format(libpfm_version)],
 )
 
-# The registry has a snapshot, but upstream is active and not regularly marking
-# releases. We start with the BCR snapshot to avoid a miss and then override it
-# with a more recent commit.
-bazel_dep(name = "tcmalloc", version = "0.0.0-20240411-5ed309d", dev_dependency = True)
-git_override(
-    module_name = "tcmalloc",
-    # HEAD as of 2025-01-09.
-    commit = "d02a005a369252a4f239b36cc698daf7f87ba648",
-    remote = "https://github.com/google/tcmalloc.git",
-)
-
 bazel_dep(name = "bazel_clang_tidy", dev_dependency = True)
 git_override(
     module_name = "bazel_clang_tidy",
@@ -103,9 +93,9 @@ http_archive(
 )
 
 # Required for llvm-project.
-bazel_dep(name = "platforms", version = "0.0.10")
-bazel_dep(name = "zlib", version = "1.3.1.bcr.4", repo_name = "llvm_zlib")
-bazel_dep(name = "zstd", version = "1.5.6", repo_name = "llvm_zstd")
+bazel_dep(name = "platforms", version = "1.0.0")
+bazel_dep(name = "zlib", version = "1.3.1.bcr.6", repo_name = "llvm_zlib")
+bazel_dep(name = "zstd", version = "1.5.7", repo_name = "llvm_zstd")
 
 ###############################################################################
 # llvm-project
@@ -142,7 +132,7 @@ use_repo(llvm_project, "llvm-project")
 # Python
 ###############################################################################
 
-bazel_dep(name = "rules_python", version = "1.0.0")
+bazel_dep(name = "rules_python", version = "1.5.1")
 
 python = use_extension("@rules_python//python/extensions:python.bzl", "python")
 python.toolchain(