set version field of java_runtime

Using JDK 17+, java_test rules fail if Bazel cannot determine the runtime version from the JavaRuntimeInfo provider, since the java security manager was deprecated in that version.

See also: bazelbuild/bazel@7556e11

toolchains/java/java.bzl

@@ -26,6 +26,7 @@ with import <nixpkgs> { config = {}; overlays = []; };
 { attrPath
 , attrSet
 , filePath
+, javaToolchainVersion
 }:
 
 let
@@ -41,6 +42,10 @@ let
     else
       "${javaHome}/${filePath}"
     ;
+  versionArg = if javaToolchainVersion == null then
+    "# version not set"
+  else
+    "version = ${javaToolchainVersion},";
 in
 
 pkgs.runCommand "bazel-nixpkgs-java-runtime"
@@ -58,6 +63,7 @@ pkgs.runCommand "bazel-nixpkgs-java-runtime"
     java_runtime(
         name = "runtime",
         java_home = r"${javaHomePath}",
+        ${versionArg}
         visibility = ["//visibility:public"],
     )
     EOF
@@ -238,6 +244,12 @@ def nixpkgs_java_configure(
         "filePath",
         java_home_path,
     ])
+    if toolchain_version:
+        nixopts.extend([
+            "--argstr",
+            "javaToolchainVersion",
+            toolchain_version,
+        ])
 
     nixpkgs_package(
         name = name,

toolchains/java/local_java_repository.bzl

@@ -61,6 +61,7 @@ def local_java_runtime(name, java_home, version, runtime_name = None, visibility
         native.java_runtime(
             name = runtime_name,
             java_home = java_home,
+            version = version,
             visibility = visibility,
         )