[TrapsterDK]

php's Windows coverage runtime and qt's Windows cells read vcruntime140.dll from @dx_msvc_runtime (rules_dx's patched windows_support) instead of the BCR @msvc_runtime, which consumers get unpatched.

Part of #11416. Remaining:

• Rerun windows_x86_64 //tools/testing/hermetic:cpp_rust once gazelle/julia: use upstream julia rules, no patched attr for consumers (part of #11418) #12641 (gazelle/julia package_name) lands.
• Bootstrap-stage (stage1/2/3, opt-in @llvm//toolchain:bootstrap_stage) clang-cl toolchains still set the LIB placeholder; needs the upstream hermetic-llvm fix.
• Upstream hermetic-llvm, windows_support and hermetic_launcher patches, bumps and drops; host_tools tag set after release.

Tests: //php/tests:version_test, //php/private/coverage:coverage_test, //php/tests/conformance:coverage_test pass on Linux. tools/dx check --affected timed out after 20 min (not checked). Nested-Bazel and consumer tests not run.
Evidence (windows_x86_64): php 43663207667 pending, qt 43663217136 pending.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Xut2hvuiHK9vSNJZWiqKfX

[TrapsterDK]

Rebased onto origin/main (clean, no lock conflict; local Bazel lock regeneration not completed because the host memgate queue blocked it). Dispatched evidence run 43221397821: windows_x86_64, //go/... test, lock_refresh=true. Its lock/ artifact carries the os:windows,arch:amd64 go_sdk entry. Still needed: lock-refresh.yml dispatch (owner) for linux arm64, osx and windows arm64 go_sdk entries, which still name 1.26.10. Consumer and nested-Bazel tests not run locally.

[TrapsterDK]

Run 43221397821 failed only at the lock-refresh step (windows amd64 go_sdk entry stale). Committed that entry from its lock/ artifact, rebased onto origin/main (clean; Linux lock regenerates with no diff), dispatched run 43235525452 (windows_x86_64, //go/..., lock_refresh=true). Local failure not from this PR: //go/private/tools/analysis/cmd/dx_staticcheck:dx_staticcheck_test_upstream (runfiles/_main: is a directory). Still needed: lock refresh for linux arm64, osx arm64, windows arm64 go_sdk entries.

[TrapsterDK]

Rebased onto origin/main. Conflict: proto_bindings fragment kept main side (go_sdk dropped by #12774); linux amd64 lock regenerated with Bazel; dropped the stale windows amd64 lock commit. Blocker: go_sdk lock entries for linux arm64, osx arm64, windows amd64 and windows arm64 need a lock-refresh.yml dispatch (pr=12297); CI runs those platforms with --lockfile_mode=error. Windows //go/... evidence (run 43235525452) had 3 test failures to recheck after that.