7.0.1rc1

External Deps

• Let module extensions track calls to Label() (#20750)
• Fix bootstrapped Bazel binary (#20612)
• Attempt to make main repo mapping inverse more efficient (#20625)

Local Execution

• Mount user-specified bind mounts before Bazel's own magic. (#20609)
• Print interactive sandboxed shell command with --sandbox_debug (#20734)
• Fix two issues with --incompatible_sandbox_hermetic_tmp that manifested themselves when the output base was under /tmp (#20718)
• Add support for bind mounts under /tmp with hermetic tmp (#20749)

Java

• Auto-create deploy jars for Bazel java_test targets if requested (#20602)
• java_binary wrapper should forward restricted_to (#20611)