Please add nojdk packages of Bazel for Windows

[JayBazuzi]

Description of the problem / feature request:

Currently Bazel produces nojdk packages of Bazel for Linux and Mac, but not for Windows. Please expand that to include Windows.

Feature requests: what underlying problem are you trying to solve with this feature?

Bazel 4.1.0 comes with JDK 11.0.6 which has known security vulnerabilities. Our organization requires that we stay up to date with dependencies that have CVEs, and JDK 11.0.6 is flagged as prohibted.

We know that we can supply a JDK with JAVA_HOME and that Bazel will use it (which is great!) but the non-nojdk distribution of Bazel still unpacks the older JDK on the machine even though it doesn't use it, which is still flagged by our organization's security scans.

What operating system are you running Bazel on?

Windows (and Linux and Mac, but this request is specific to Windows).

What's the output of bazel info release?

INFO: Invocation ID: 10b6c3d7-b46a-4947-a546-279ba6c6e4a1
release 4.1.0

Have you found anything relevant by searching the web?

https://bazelbuild.slack.com/archives/CA31HN1T3/p1627277344349100

[meteorcloudy]

@comius Looks like we should also upgraded our embedded JDK version to not use 11.0.6 ?

[comius]

I tried upgrading jdk before, but I'm blocked by android, and nothing got resolved.
Related issues:
#12512
#13444
#12880

[philwo]

Was this fixed by bazelbuild/continuous-integration#1206?

[meteorcloudy]

Yes nojdk binaries for Windows are available for 4.2.1 now.