229 Commits

Author SHA1 Message Date
Billy O'Neal
f06267da58
Patch Tuesday for December 2024 (#42749) 2024-12-21 11:48:36 +00:00
Billy O'Neal
29bd7c9661
Improve asset cache handling for python3 in our pipeline. (#42556) 2024-12-06 11:39:48 -08:00
Billy O'Neal
2e77c4d88b
Enable asset caching for use of Python3 in build file lists step. (#42375) 2024-11-26 19:24:05 -08:00
Billy O'Neal
0857a4b08c
Patch Tuesday for November 2024 (#42165) 2024-11-19 22:42:29 +00:00
Javier Matos Denizac
2964ea8e32
Remove msiexec dependency by adding using vcpkg.exe to unpack 7z.exe (#41604)
Co-authored-by: Javier Matos <javiermatos@Javiers-Laptop.local>
2024-11-04 14:24:25 -05:00
Kai Pastor
e1af7285d1
CI with android NDK r27c (#40339)
Co-authored-by: Billy Robert O'Neal III <bion@microsoft.com>
2024-10-23 19:44:30 -07:00
Billy O'Neal
da5024ed2b
Patch Tuesday for October 2024 (#41585) 2024-10-18 00:36:30 -07:00
Billy O'Neal
efb544d5a5
Patch Tuesday for September 2024 (#40921) 2024-09-16 17:40:40 -07:00
Billy O'Neal
85392b146f
Patches for August 2024 (#40688) 2024-08-30 11:07:40 -07:00
Billy O'Neal
b6fcbeaa7f
Avoid ConvertTo-SecureString -AsPlainText -Force (#40658) 2024-08-27 12:34:26 -07:00
Billy O'Neal
df8e3eb37b
Update vcpkg-tool to 2024-08-01 and fix hidden CI failures (#40198) 2024-08-01 12:41:09 -07:00
Billy O'Neal
1318ab14aa
Use Workload Identity Federation for testing MSVC (#39952) 2024-07-16 16:31:21 -07:00
Billy O'Neal
6cd9d7ff90
Patch Tuesday for July 2024 (#39896) 2024-07-15 23:18:52 -07:00
Billy O'Neal
83365426d7
Attempt to disable CodeQL (#39844) 2024-07-11 11:51:52 -04:00
Billy O'Neal
0dab813d5f
Patch Tuesday June 2024 (#39325) 2024-07-03 20:01:35 -07:00
Kai Pastor
e158d10763
Activate Android NDK r26d in vcpkg CI (#35851) 2024-06-11 13:26:30 -07:00
Kai Pastor
ad25766aef
Add NDK r26 to CI image (#38975) 2024-06-08 10:54:48 -07:00
Billy O'Neal
a4275b7eee
Update macOS machines for May 2024 (#38834)
* Run through the macOS update instructions one more time. I think
they're in a pretty good state now since this is the first attempt to
rerun them since we dropped Vagrant.
* Removed Parallels references for arm64.
* Removed references to removing Vagrant because it's no longer on any
of the hosts.
* Update macOS to 14.5.
* Update XCode CLT to 14.3.
2024-06-04 13:35:41 -07:00
Billy O'Neal
01f6021959
Patch Tuesday for May 2024 (Again) (#38891)
* Update AzCopy, PowerShell Core, and VS.
2024-05-24 22:22:47 -07:00
Billy O'Neal
77daaf0982
Revert "Patch Tuesday for May 2024" (#38890)
Reverts microsoft/vcpkg#38802
2024-05-23 00:03:14 -07:00
Billy O'Neal
6bc37f3520
Patch Tuesday for May 2024 (#38802) 2024-05-22 23:43:51 -07:00
Billy O'Neal
261dd68316
DevDiv Internal Mint SAS Tokens (#38803)
Mint asset caching SAS token using user-delegation SAS instead of
storage keys.
2024-05-20 12:30:38 -07:00
Billy O'Neal
90a5b03c9f
Patch Tuesday for April 2024 (#38166)
Changes this month:

* Adopt
[delegated-sas](https://learn.microsoft.com/en-us/rest/api/storageservices/create-user-delegation-sas)
tokens to allow us to shut off the storage account keys, thanks to
@ryanerdmann for the help
* Visual Studio 2022 17.8.9, hopefully resolves CVE-2024-26190,
CVE-2024-21392 . (These don't matter to us but they cause the
Microsoft-internal tool 'Service 360' to yell at us)
* https://github.com/microsoft/vcpkg/pull/37902
* https://github.com/microsoft/vcpkg/pull/37903

---------

Co-authored-by: Kai Pastor <dg0yt@darc.de>
2024-04-25 18:25:03 -07:00
Billy O'Neal
9cbab417e4
Patch Tuesday March 2024 (#37466)
This contains high priority active security things to adopt trusted
launch, and managed identity rather than SAS tokens when minting the
images, and 1ES Hosted Pools.

Some instructions are rough around the edges because I'm not sure
everything is repeatable yet while this is all in flux...
2024-03-18 13:26:24 -07:00
Billy O'Neal
90542a476c
Change Android docker hosts to CBL-Mariner (#37130)
CBL-Mariner ( https://github.com/micro…soft/azurelinux )

This resolves a Service360 alert caused by Ubuntu refusing to make a
security patch publicly available for Ubuntu 22.04 LTS, see
https://ubuntu.com/security/notices/USN-6472-1 .

It seems likely that we will need to reconsider Ubuntu being our
'default' test environment following this type of behavior, since it's
likely vcpkg customers will be similarly affected.
2024-03-05 12:35:00 -08:00
Billy O'Neal
5d7458aa89
Fix the SAS token generation script (#36938)
to account for breaking change in New-AzStorageContainerSASToken which
causes it to no longer start with a question mark.

See
https://learn.microsoft.com/en-us/powershell/azure/release-notes-azureps?view=azps-11.3.0#azstorage-600
2024-02-27 00:23:42 -08:00
Billy O'Neal
ba1465e584
Patch Tuesday for February 2024 (#36757)
* Cherry-pick infrastructure changes from
https://github.com/microsoft/vcpkg/pull/36081 as authored by @dg0yt
* Suppress warnings for the monthly docker mint as suggested by Toddy
Mladenov ( MS internal conversation
https://teams.microsoft.com/l/message/19:f498f444e97f40b2a2027d015a9047ab@thread.tacv2/1707520630587?tenantId=72f988bf-86f1-41af-91ab-2d7cd011db47&groupId=2080ccbe-0cfb-49e6-a9c1-ea6a6bf82722&parentMessageId=1707520630587&teamName=Containers%20Secure%20Supply%20Chain&channelName=3P%20Registry%20and%20Images%20Guidance&createdTime=1707520630587
)
* Move Azure Container Registry for Android to WestUS3; with this we are
officially entirely within one Azure region again :D
* Explicitly grant Azure DevOps permissions to touch the scale set
rather than relying on subscription-level assignments.
2024-02-21 16:30:42 -08:00
Dan Cristoloveanu
fba75d0906
Remove password from Osx Readme for azure pipelines (#36734) 2024-02-14 16:57:30 -08:00
Billy O'Neal
7ba0ba7334
Change Azure SKU to Standard_D32ads_v5 and move to West US 3 (#36666) 2024-02-12 15:07:57 -08:00
Cheney Wang
1aef44f1c4
[vcpkg] Extend the timeout period for vcpkg test msvc run (#36485) 2024-02-02 12:05:29 -08:00
Billy O'Neal
cf20e29526
Update macOS for January 2024 (#35617)
macOS 14.2.1 on amd64, 14.3 on arm64
XCode Console Tools 15.1

Other changes:

macOS install is done from the installers rather than from the recovery partition
readme.md is now written for a vcpkg-team audience
vagrant is removed as a dependency so that discussion of how to persist the VMs between machines could be included
arm64 is added using https://github.com/s-u/macosvm
2024-01-25 10:50:32 -08:00
Billy O'Neal
91b17dd72a
Patch Tuesday for January 2023 (#36143) 2024-01-16 19:51:14 -08:00
Billy O'Neal
ab00a636c7
Update Windows Fleet for December 2023 Patch Tuesday (#35640) 2023-12-18 10:27:45 -08:00
Billy O'Neal
24d884e1b8
Update Android base image to 2023-12-05. (#35526)
Also tells Docker to invalidate caches so that our apt-get update attempt actually does something.
2023-12-06 12:17:01 -08:00
Billy O'Neal
ba823b1e1f
Patch Tuesday 2023-10-11 (except macOS) (#34431) 2023-10-13 14:57:51 -07:00
Billy O'Neal
b5d4a46b9a
Patch Tuesday September 2023 + arm-uwp=>arm64-uwp (#33759)
Co-authored-by: Leander Schulten <Leander.Schulten@rwth-aachen.de>
2023-09-15 15:01:12 -07:00
Billy O'Neal
d99b6930b9
Update macOS to 13.5 and xcode 14.3.1. (#33722) 2023-09-14 14:02:46 -07:00
dan-shaw
9edb1b8e59
Add checklist items for Android Docker (#33119) 2023-08-14 16:09:52 -07:00
Billy O'Neal
5fa92f467e
Patch Tuesday August 2023. (#33088)
* Update PowerShell to 7.3.6

* Add asan install as requested by @Neumann-A

* Use 1ES for Android docker hosts.

* Update pools.

* Update patch tuesday checklist to reflect 1ES.

* [openslide] Fix missing header.

* [libxt] Add missing header.
2023-08-14 13:58:43 -07:00
Billy O'Neal
ad46340bfc
Use 1ES to provision Linux agents. (#32937) 2023-08-07 21:22:34 -07:00
Billy O'Neal
36577b338f
Patch Tuesday July 2023 (#32537) 2023-07-14 17:05:19 -07:00
autoantwort
055b31ae32
[linux ci] install golang-go for boringssl (#32096) 2023-06-27 17:09:45 -07:00
Billy O'Neal
f6a5d4e8eb
Patch Tuesday June 2023 + Ubuntu 22.04 (#32014) 2023-06-20 12:12:03 -07:00
Billy O'Neal
a9eb339823
Add generate-sas-tokens script. (#31842) 2023-06-06 15:03:50 -07:00
Billy O'Neal
7f52deab66
Update VMs for Patch Tuesday May 2023 (#31358)
* Update PowerShell Core to not vulnerable versions.

* Fix Android create-image relative paths.

* Update pools and add docs.

* Get android create-vmss to setup managed identity.
2023-05-14 01:54:42 -07:00
dan-shaw
5787cfa699
[vcpkg] Android CI support (#29406)
* initial

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix
2023-04-24 21:22:59 -07:00
Billy O'Neal
cb2167bd7f
Patch Tuesday April 2023 (#30818) 2023-04-14 02:17:56 -07:00
Kai Pastor
0746c2aab7
Track CI baseline change effect (#30756)
* Test ci baseline change effect

* Skip parent hashes when baseline was modified

* Update head baseline variable

* Revert "Test ci baseline change effect"

This reverts commit a5e7a5c404eb400476555b92e51b3f5a87880300.

* Read raw data
2023-04-11 23:11:59 -07:00
Billy O'Neal
217194cea7
Fix cancellation, from @dan-shaw's branch: (#30722)
b877a10a13

Co-authored-by: dan-shaw <51385773+dan-shaw@users.noreply.github.com>
2023-04-07 19:21:44 -07:00
Billy O'Neal
6146b482ec
VM Updates for Patch Tuesday, March 2023 (#30223) 2023-03-21 12:27:26 -07:00