Skip to content

Releases: microsoft/mu_devops

v9.1.5

21 Feb 16:23
@github-actions github-actions
v9.1.5
673cf93
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v9.1.5

What's Changed

  • Use cargo-binstall to sync rust tool versions @Javagedes (#319)
    Change Details
      Update RustSetupSteps to download cargo-binstall and use it to download all other rust tools. This is to make it easy for CI to pass the updated RustEnvironmentCheck (https://github.com/microsoft/mu_basecore/pull/737) by downloading the exact tool versions as specified in the rust-toolchain.toml file.

Full Changelog: v9.1.4...v9.1.5

Contributors

Javagedes and apop5
Assets 2
Loading

v9.1.4

08 Feb 20:45
@github-actions github-actions
v9.1.4
ca9b6b4
Compare
Choose a tag to compare
v9.1.4

What's Changed

  • .sync/workflows/codeql-platform: Update irrelevant plugin removal dir [Rebase \& FF] @makubacki (#317)
    Change Details
      Two commits. One to prepare `codeql-platform.yml` for 202311 and the other to expand contextual comments in both CodeQL workflow files.

    .sync/workflows/codeql-platform: Update irrelevant plugin removal dir

    Updates the directory used for irrelevant plugin removal in this
    workflow to match codeql.yml which using the pytool directory rather
    than the directory the CodeQL plugin is found in.

    This is important because the CodeQL plugin moved from .pytool to
    BaseTools in Mu release 202311 so the plugin dir needs to be fixed
    rather than relative to the CodeQL plugin location.

    .sync/workflows/codeql: Add more inline documentation

    Updates and adds some additional comments to the CodeQL workflow
    files to give better context.



Full Changelog: v9.1.3...v9.1.4

Contributors

makubacki
Assets 2
Loading

v9.1.3

06 Feb 18:39
@github-actions github-actions
v9.1.3
170b872
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v9.1.3

What's Changed

  • Introduce extra\_build\_args to Jobs/PrGate.yml. Move extra\_install\_steps to after stuart\_update call. @apop5 (#292)
    Change Details
      extra_install_step is moved to after stuart_update.

    extra_install_steps can be used to pass a call to another stuart_update to include the --codeql parameter.



  • .sync/Version.njk: Update Ubuntu container image @makubacki (#316)
    Change Details
      Update the Ubuntu build container to an image that includes Rust 1.74.
  • Update Version.njk for release @Javagedes (#313)
    Change Details
      Updates the mu_devops version in Version.njk to 9.1.2 in preparation for a 9.1.2 release of mu_devops that will be sync'd.

Full Changelog: v9.1.2...v9.1.3

Contributors

makubacki, Javagedes, and apop5
Assets 2
Loading

v9.1.2

05 Feb 23:58
@github-actions github-actions
v9.1.2
af0c4bd
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v9.1.2

What's Changed

  • .sync/Version.njk: Update to Rust 1.74 @makubacki (#310)
    Change Details
      Routine update to keep current.
  • .sync/version.njk: Update latest Mu branch to 202311 @makubacki (#309)
    Change Details
      Updates the latest and previous branches to 202311 and 202308.

    Also updates references to 202302 throughout the repo to prevent the
    examples from getting too stale over time.



Full Changelog: v9.1.1...v9.1.2

Contributors

makubacki
Assets 2
Loading

v9.1.1

31 Jan 17:20
@github-actions github-actions
v9.1.1
c5b1c90
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v9.1.1

What's Changed

🔐 Security Impacting

  • workflows: Add permissions. @Javagedes (#305)
    Change Details
      Add permissions to the workflows across mu_devops. This includes the workflows sync'd across repositories, and workflows used in mu_devops itself.

    With MU_BASECORE's Settings -> Code and automation -> Actions -> General -> Workflow permissions set to "Read repository contents and packages permissions" selected, I had no failures, with the following tested:

    .github/workflows

    • AutoMerger.yml - Untested
    • FileSyncer.yml - Tested
    • IssueAssignment.yml - Tested
    • IssueTriager.yml - Tested
    • LabelSyncer.yml - Tested
    • Labeler.yml - Tested
    • ReleaseDrafter.yml - Tested

    .sync/workflows/leaf

    • auto-approve.yml - Untested
    • auto-merge.yml - Untested
    • issue-assignment.yml - Tested through IssueAssignment.yml
    • label-issues.yml - Tested through Labeler.yml
    • label-sync.yml - Tested through LabelSyncer.yml
    • pull-request-formatting-validator.yml - Tested Directly
    • release-draft.yml - Tested through ReleaseDrafter.yml
    • scheduled-maintenance.yml - Tested Directly
    • stale.yml - Tested Directly
    • submodule-release-update.yml - Untested
    • triage-issues.yml - Tested

Full Changelog: v9.1.0...v9.1.1

Contributors

makubacki and Javagedes
Assets 2
Loading

v9.1.0

24 Jan 19:55
@github-actions github-actions
v9.1.0
45598bc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v9.1.0

What's Changed

  • .sync/workflows/codeql: Always remove plugins in .pytools @kenlautner (#302)
    Change Details
      With the CodeQL plugin moving to BaseTools (from .pytool) starting in release/202311, update the workflow to always remove unnecessary plugins (that slow down the workflow) in .pytools as opposed to relative the CodeQL plugin path.
  • .sync/workflows/codeql: Update sync action to v4 @makubacki (#301)
    Change Details
      Matches the latest version being propagated by dependabot.

🚀 Features & ✨ Enhancements

  • .sync/workflows/leaf/codeql.yml: Update CodeQL plugin from .pytool to BaseTools @makubacki (#299)
    Change Details
      The CodeQL plugin moved from .pytool to BaseTools in the Mu Basecore 202311 update. This change first looks for the plugin in BaseTools and falls back to the prior .pytool location if it is not found for backward compatibility with some earlier release branches that have not picked up the change.

    Eventually, the .pytool fallback can be removed.

    Issue to track removal of the fallback: #300



🐛 Bug Fixes

  • Fix issue with .pytool/Plugin removal which was introduced with the latest codeql.yml change. @kenlautner (#303)
    Change Details
      The latest codeql.yml change updated the cleanup step to find .pytool/Plugin folder directly instead of using a relevant path form the CodeQL plugin directory.

    That change didn't take into account how all branches from release/202302 and older have the .pytool/Plugin version of CodeQL and was deleting all plugins in .pytool besides CompilerPlugin. This change excludes the CodeQL plugin if it exists as well.



Full Changelog: v9.0.6...v9.1.0

Contributors

makubacki and kenlautner
Assets 2
Loading

v9.0.6

19 Jan 00:33
@github-actions github-actions
v9.0.6
dc54ac0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v9.0.6

What's Changed

  • Rust: Makefile.toml: Add Feature flag support @Javagedes (#298)
    Change Details
      Adds additional environment variables to the Makefile.toml to set features when building.

    setting the variable FEATURES will translate to passing --features <features> to the underlying build command.



Full Changelog: v9.0.5...v9.0.6

Contributors

Javagedes
Assets 2
Loading

v9.0.5

19 Dec 16:27
@github-actions github-actions
v9.0.5
0daa8c1
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v9.0.5

What's Changed

  • .sync/workflows/leaf: CodeQL workflow changes for upload-artifact v4 @makubacki (#291)
    Change Details
      Two key new restrictions:
    1. No more than 10 artifacts per job in a workflow run.
    2. It is no longer possible to upload to the same named artifact
      multiple times.

    These workflows can easily split their artifacts up under the 10
    artifact limit while also not uploading to the same named artifact
    in the process.

    Full Changelog: v9.0.4...v9.0.5

Contributors

makubacki
Assets 2
Loading

v9.0.4

13 Dec 20:55
@github-actions github-actions
v9.0.4
74862f7
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v9.0.4

What's Changed

  • Bump setup-python action from v4 to v5 in sync files @makubacki (#288)
    Change Details
      Updates the sync files to use v5 so they will match the latest files updated by dependabot in the synced repo. Also updates the version in the file in the submodule-release-updater action.

Full Changelog: v9.0.3...v9.0.4

Contributors

makubacki
Assets 2
Loading

v9.0.3

11 Dec 18:19
@github-actions github-actions
v9.0.3
1298d0c
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v9.0.3

What's Changed

  • Start file sync for secureboot\_objects repo @apop5 (#285)
    Change Details
      Adding a first pass of filesync for the secureboot_objects repo.

    @makubacki @Flickdm
    Please verify that all necessary files are being sycned in this PR.



Full Changelog: v9.0.2...v9.0.3

Contributors

Flickdm, makubacki, and apop5
Assets 2
Loading