Bump even further

BUILD.bazel

@@ -39,8 +39,8 @@ gazelle_binary(
 )
 
 go_cross_binary(
-    name = "gazelle_local_go1.20",
-    sdk_version = "1.20",
+    name = "gazelle_local_go1.21",
+    sdk_version = "1.21",
     target = ":gazelle_local",
 )
 

MODULE.bazel

@@ -63,7 +63,7 @@ go_sdk_dev = use_extension("@io_bazel_rules_go//go:extensions.bzl", "go_sdk", de
 go_sdk_dev.download(version = "1.23.3")
 
 # Used by compatibility tests, keep as low as possible.
-go_sdk_dev.download(version = "1.20.14")
+go_sdk_dev.download(version = "1.21.13")
 
 # Known to exist since it is instantiated by rules_go itself.
 use_repo(

WORKSPACE

@@ -49,11 +49,13 @@ go_register_nogo(
     nogo = "@bazel_gazelle//:nogo",
 )
 
+# Go 1.21 is needed to support the toolchain directive in go.mod, which is non-hermetically read
+# by GoToolchainBinaryBuild on Windows.
 # Go 1.20 is needed so support nogo's use of token.File.FileStart.
 # Go 1.19 is needed for recent versions of golang.org/x/tools.
 go_download_sdk(
     name = "go_compat_sdk",
-    version = "1.20.14",
+    version = "1.21.13",
 )
 
 load("//:deps.bzl", "gazelle_dependencies")

cmd/fetch_repo/BUILD.bazel

@@ -26,10 +26,10 @@ go_binary(
     visibility = ["//visibility:public"],
 )
 
-# Verify that fetch_repo builds with Go 1.20.
+# Verify that fetch_repo builds with Go 1.21.
 go_cross_binary(
-    name = "fetch_repo_go1.20",
-    sdk_version = "1.20",
+    name = "fetch_repo_go1.21",
+    sdk_version = "1.21",
     target = ":fetch_repo",
 )