boringssl 0.20251002.0 (#6095)

diff --git a/modules/boringssl/0.20251002.0/MODULE.bazel b/modules/boringssl/0.20251002.0/MODULE.bazel
new file mode 100644
index 0000000..4532c8b
--- /dev/null
+++ b/modules/boringssl/0.20251002.0/MODULE.bazel
@@ -0,0 +1,36 @@
+# Copyright 2024 The BoringSSL Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# When tagging a new periodic snapshot, bump the version here and then tag at
+# the revision where we bump the version.
+module(
+    name = "boringssl",
+    version = "0.20251002.0",
+    compatibility_level = 2,
+)
+
+# Periodically update the following dependencies to their latest versions
+# listed on https://registry.bazel.build/. When doing so, run
+# `bazelisk test ...` to update the hashes in MODULE.bazel.lock.
+
+# In principle, googletest is only needed for tests and could be a
+# dev_dependency. But it would then be impossible for downstream modules to run
+# BoringSSL's tests. The downstream module provides the toolchain, so we may
+# need to request they run tests when triaging issues. If
+# https://github.com/bazelbuild/bazel/issues/22187 is ever fixed, we can change
+# this.
+bazel_dep(name = "googletest", version = "1.17.0.bcr.1")
+bazel_dep(name = "platforms", version = "1.0.0")
+bazel_dep(name = "rules_cc", version = "0.2.8")
+bazel_dep(name = "rules_license", version = "1.0.0")
diff --git a/modules/boringssl/0.20251002.0/presubmit.yml b/modules/boringssl/0.20251002.0/presubmit.yml
new file mode 100644
index 0000000..44e4b7a
--- /dev/null
+++ b/modules/boringssl/0.20251002.0/presubmit.yml
@@ -0,0 +1,61 @@
+build_targets: &build_targets
+  - "@boringssl//:crypto"
+  - "@boringssl//:ssl"
+
+matrix: &matrix
+  linux_platforms:
+    - debian11
+    - ubuntu2204
+  bazel: [7.x]
+tasks:
+  verify_targets_on_linux:
+    name: Verify build targets on Linux
+    platform: ${{ linux_platforms }}
+    bazel: ${{ bazel }}
+    build_targets: *build_targets
+    build_flags:
+      - '--cxxopt=-std=c++17'
+  verify_targets_on_windows:
+    name: Verify build targets on Windows
+    platform: windows
+    bazel: ${{ bazel }}
+    build_targets: *build_targets
+    build_flags:
+      - '--cxxopt=/std:c++17'
+  # Work around https://github.com/bazelbuild/bazel/issues/10472
+  verify_targets_on_macos:
+    name: Verify build targets on macOS
+    platform: macos
+    bazel: ${{ bazel }}
+    build_targets: *build_targets
+    build_flags: &macos_workaround
+      - '--cxxopt=-std=c++17'
+      - '--sandbox_block_path=/usr/local'
+bcr_test_module:
+  module_path: util/bazel-example
+  matrix: *matrix
+  tasks:
+    run_test_module_on_linux:
+      name: Run test module on Linux
+      platform: ${{ linux_platforms }}
+      bazel: ${{ bazel }}
+      build_targets:
+        - //...
+      build_flags:
+        - '--cxxopt=-std=c++17'
+    run_test_module_on_windows:
+      name: Run test module on Windows
+      platform: windows
+      bazel: ${{ bazel }}
+      build_targets:
+        - //...
+      build_flags:
+        - '--cxxopt=/std:c++17'
+    # Work around https://github.com/bazelbuild/bazel/issues/10472
+    run_test_module_on_macos:
+      name: Run test module on macOS
+      platform: macos
+      bazel: ${{ bazel }}
+      build_targets:
+        - //...
+      build_flags: *macos_workaround
diff --git a/modules/boringssl/0.20251002.0/source.json b/modules/boringssl/0.20251002.0/source.json
new file mode 100644
index 0000000..b230315
--- /dev/null
+++ b/modules/boringssl/0.20251002.0/source.json
@@ -0,0 +1,5 @@
+{
+    "url": "https://github.com/google/boringssl/releases/download/0.20251002.0/boringssl-0.20251002.0.tar.gz",
+    "integrity": "sha256-+Wcz/D3wPUGV22VtG3uMF0wz+V0FL4EfDsyPTk49szI=",
+    "strip_prefix": "boringssl-0.20251002.0/"
+}
diff --git a/modules/boringssl/metadata.json b/modules/boringssl/metadata.json
index f97c9af..32f69f5 100644
--- a/modules/boringssl/metadata.json
+++ b/modules/boringssl/metadata.json
@@ -45,7 +45,8 @@
         "0.20250514.0",
         "0.20250701.0",
         "0.20250807.0",
-        "0.20250818.0"
+        "0.20250818.0",
+        "0.20251002.0"
     ],
     "yanked_versions": {}
 }