diff --git a/.bazelrc b/.bazelrc
index dc8a4f2..09113bc 100644
--- a/.bazelrc
+++ b/.bazelrc
@@ -1 +1,21 @@
-build --workspace_status_command="python ./tools/workspace_status.py"
+# TODO: Migrate all dependencies from WORKSPACE to MODULE.bazel
+common --noenable_bzlmod
+
+build --java_language_version=17
+build --java_runtime_version=remotejdk_17
+build --tool_java_language_version=17
+build --tool_java_runtime_version=remotejdk_17
+
+build --workspace_status_command="python3 ./tools/workspace_status.py"
+build --repository_cache=~/.gerritcodereview/bazel-cache/repository
+build --action_env=PATH
+build --disk_cache=~/.gerritcodereview/bazel-cache/cas
+
+# Enable strict_action_env flag to. For more information on this feature see
+# https://groups.google.com/forum/#!topic/bazel-discuss/_VmRfMyyHBk.
+# This will be the new default behavior at some point (and the flag was flipped
+# shortly in 0.21.0 - https://github.com/bazelbuild/bazel/issues/7026). Remove
+# this flag here once flipped in Bazel again.
+build --incompatible_strict_action_env
+
+test --build_tests_only
diff --git a/.bazelversion b/.bazelversion
new file mode 100644
index 0000000..66ce77b
--- /dev/null
+++ b/.bazelversion
@@ -0,0 +1 @@
+7.0.0
diff --git a/MODULE.bazel b/MODULE.bazel
new file mode 100644
index 0000000..0b932b8
--- /dev/null
+++ b/MODULE.bazel
@@ -0,0 +1,2 @@
+# TODO(davido): Migrate all dependencies from WORKSPACE to MODULE.bazel
+# https://issues.gerritcodereview.com/issues/303819949
diff --git a/WORKSPACE b/WORKSPACE
index a086685..f25a20d 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -3,7 +3,7 @@
 load("//:bazlets.bzl", "load_bazlets")
 
 load_bazlets(
-    commit = "2807d30761a889187f06d99e969fb0ea2fbe5afe",
+    commit = "f930de7dc62e319c82d2afc8f10efd1290fd62b8",
     #local_path = "/home/<user>/projects/bazlets",
 )
 
diff --git a/external_plugin_deps.bzl b/external_plugin_deps.bzl
index c4d470a..c3288c3 100644
--- a/external_plugin_deps.bzl
+++ b/external_plugin_deps.bzl
@@ -3,6 +3,6 @@
 def external_plugin_deps():
     maven_jar(
         name = "metrics_jmx",
-        artifact = "io.dropwizard.metrics:metrics-jmx:4.0.5",
-        sha1 = "d7be4ddd7ba674ee8be1d23d883fb3ca68ee1d54",
+        artifact = "io.dropwizard.metrics:metrics-jmx:4.1.12.1",
+        sha1 = "0fb1e42f6f182d306d0b567c7b9e26cadd13b49e",
     )
diff --git a/tools/workspace_status.py b/tools/workspace_status.py
index 10d1262..22cc40a 100644
--- a/tools/workspace_status.py
+++ b/tools/workspace_status.py
@@ -1,4 +1,4 @@
-#!/usr/bin/env python
+#!/usr/bin/env python3
 
 # This script will be run by bazel when the build process starts to
 # generate key-value information that represents the status of the