v4.0.2

What's Changed

• .sync/Files.yml: Sync SECURITY.md to mu\_devops @makubacki (#189)
  
  Change Details

    Additionally syncs the file to mu_devops since it is missing. Also prevents the `microsoft-github-policy-service` bot from creating PRs to add a SECURITY.md file.

  ---

🐛 Bug Fixes

• Fixing the sync file being empty and update the version to be used @kuqin12 (#188)
  
  Change Details

    This change fixed an issue on auto-populated sync files by adding raw text tags around the applicable sections.

  It also updated the tag version to v4.0.0 to pick up the latest change of supporting self-hosted agents.
  

  
  

  ---

  
  

Full Changelog: v4.0.1...v4.0.2

v4.0.1

What's Changed

🐛 Bug Fixes

• .sync/azure\_pipelines/MuDevOpsWrapper.yml: Fix Version.njk path @makubacki (#185)
  
  Change Details

    Update the relative path for the proper number of parent directories.

  ---

Full Changelog: v4.0.0...v4.0.1

v4.0.0

What's Changed

• .sync/Version.njk: Update Mu repos to Mu DevOps v3.0.0 @makubacki (#183)
  
  Change Details

    Changes since last release: https://github.com/microsoft/mu_devops/compare/v2.5.3...v3.0.0

  General release info: https://github.com/microsoft/mu_devops/releases

  A major release is being made because of a change in the container
  images used in Project Mu pipelines.
  

  
  

  ---

  
  

⚠️ Breaking Changes

• Adding support for self-hosted pools @kuqin12 (#154)
  
  Change Details

    This change added support for self-hosted agent pools for potentially onboarding Windows on ARM systems as there is no plan for Microsoft hosted Windows ARM agents as of today.

  The main change is around the flag of installing tools or not. The existing routine will expect the incoming flag being a boolean type, which does not work when this parameter is being populated using a variable (string). This change will update the flag to string type as well.

  After changing, the only file being synced to individual repos is MuDevOpsWrapper.yml. And each repo can configure their own build matrix for build target, architecture list, run on selfhost agents or not, etc.

  This is considered a breaking change, due to:

  1. Steps/PrGate.yml updated the extra_install_steps to be invoked before stuart_setup and stuart_update. But this change does not knowingly break the existing consumers.
  2. Jobs/PrGate.yml updated the parameters to accept parameters.build_matrix, which needs the consumers to update top level yaml script to comply with the updated template.

  ---

🚀 Features & ✨ Enhancements

• Adding support for self-hosted pools @kuqin12 (#154)
  
  Change Details

    This change added support for self-hosted agent pools for potentially onboarding Windows on ARM systems as there is no plan for Microsoft hosted Windows ARM agents as of today.

  The main change is around the flag of installing tools or not. The existing routine will expect the incoming flag being a boolean type, which does not work when this parameter is being populated using a variable (string). This change will update the flag to string type as well.

  After changing, the only file being synced to individual repos is MuDevOpsWrapper.yml. And each repo can configure their own build matrix for build target, architecture list, run on selfhost agents or not, etc.

  This is considered a breaking change, due to:

  1. Steps/PrGate.yml updated the extra_install_steps to be invoked before stuart_setup and stuart_update. But this change does not knowingly break the existing consumers.
  2. Jobs/PrGate.yml updated the parameters to accept parameters.build_matrix, which needs the consumers to update top level yaml script to comply with the updated template.

  ---

Full Changelog: v3.0.0...v4.0.0

v3.0.0

What's Changed

⚠️ Breaking Changes

• .sync/Version.njk: Switch to Project Mu Ubuntu 22 containers @makubacki (#182)
  
  Change Details

    Updates the default Linux build container from Fedora 37 to Ubuntu 22.

  The container feed switched from ghcr.io/tianocore/containers
  to ghcr.io/microsoft/mu_devops.

  Note: This is marked as a breaking change because of the distro change
  from Fedora to Ubuntu. Commands run inside the container such as those
  interacting with the package manager need to be reviewed and updated.
  

  
  

  ---

  
  

Full Changelog: v2.5.4...v3.0.0

v2.5.4

What's Changed

• .sync/Files.yml: Sync release drafter to additional repos @makubacki (#181)
  
  Change Details

    More repos with `release` branches are moving to versioned releases so the release drafter workflow is synced to them in this change.

  New repos:

  • microsoft/mu_common_intel_min_platform
  • microsoft/mu_oem_sample
  • microsoft/mu_plus
  • microsoft/mu_silicon_arm_tiano
  • microsoft/mu_silicon_intel_tiano
  • microsoft/mu_tiano_plus
    

  
  

  ---

Full Changelog: v2.5.3...v2.5.4

v2.5.3

What's Changed

• .sync/Version.njk: Update latest Mu release branch to 202302 @makubacki (#179)
  
  Change Details

    Updates the `latest_mu_release_branch` value substituted into sync templates from `release/202208` to `release/202302`.

  ---

• Add a dependabot label and exclude it from release notes @makubacki (#177)
  
  Change Details

    The `release-drafter` GitHub action has an `exclude-contributors` configuration option that excludes usernames from the final contributors. This does not appear to work for dependabot.

  The exclude-labels configuration option does work. This change
  adds a new label type:dependabot to dependabot PRs (via the
  dependabot config file) and uses the exclude-labels option in
  the release-drafter config file to exclude those PRs from release
  notes.

  Submodules are currently updated by either dependabot or the
  submodule-release-updater GitHub action local to mu_devops. Since
  submodules are recursive to repo consumers and to keep those
  consistently in the release notes, the type:dependabot label is
  not added to dependabot submodule updates keeping those updates in
  the release notes.
  

  
  

  ---

  
  

• Initial check-in for MU Linux container and pipelines @cfernald (#175)
  
  Change Details

    Creates a Ubuntu-22 based image for building Project MU. These changes are largely based on the infrastructure from [tianocore/containers](https://github.com/tianocore/containers).

  Sizes:
  Build - 2.74 Gb
  Test - 3.63 Gb
  Dev - 3.63 Gb
  

  
  

  ---

  
  

• .sync/dependabot: Ignore additional submodules with versioned releases @makubacki (#176)
  
  Change Details

    The following repos recently moved to semantic versioning so they can be updated by their versioned releases now instead of dependabot checking for the latest commit hash.

  • mu_feature_config
  • mu_feature_mm_supv
    

  
  

  ---

📖 Documentation Updates

• Readme.rst: Reorganize and refresh content @makubacki (#180)
  
  Change Details

    1. Add a Table of Contents 2. Update Conventions section 3. Add a Containers section 4. Add missing workflow sections 5. Sort workflow sections so they're easier to find in the Table of Contents 6. Other minor miscellaneous updates

  ---

Full Changelog: v2.5.2...v2.5.3

v2.5.2

What's Changed

• .sync/Version.njk: Update Mu repos to Mu DevOps v2.5.1 @makubacki (#170)
  
  Change Details

    Changes since last release: https://github.com/microsoft/mu_devops/compare/v2.4.0...v2.5.1

  General release info: https://github.com/microsoft/mu_devops/releases
  

  
  

  ---

  
  

🐛 Bug Fixes

• .sync/codeql: Use pull\_request trigger type @makubacki (#173)
  
  Change Details

    This workflow needs to run against code on the PR merge branch and since it is just building it only needs minimal, read-only token permissions so this change updates the trigger type from `pull_request_target` to `pull_request`.

  ---

Full Changelog: v2.5.1...v2.5.2

v2.5.1

What's Changed

• <Binary/Other>CopyAndPublish.yml: Use bash to parse parameter string @makubacki (#171)
  
  Change Details

    Uses bash to parse a parameter string that could be empty since it is more robust and consistent than directly depending on pipeline string interpretation logic.

  This treats the following strings as "empty":

  • ""
  • " "
    

  
  

  ---

Full Changelog: v2.5.0...v2.5.1

v2.5.0

What's Changed

• .sync/Version.njk: Update Linux build container to Fedora 37 3b3eb8f @makubacki (#165)
  
  Change Details

    Updates the Fedora 37 build container from f1c7a20 to 3b3eb8f.

  • Fedora 37 image contents
  • 3b3eb8f

  Summary of updates:

  • Enable GTK on Fedora QEMU
  • Install vim and nano
  • Set up a user to match the outside user
  • Add the user to the sudo/wheel group to allow them to use sudo, and set a password

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

🚀 Features & ✨ Enhancements

• Add Issue Assignment workflow @makubacki (#169)
  
  Change Details

    Resolves #166

  Adds a new GitHub workflow that runs when an issue is assigned.

  While additional behavior can be added in the future, right now the
  workflow only removes the state:needs-owner label if present.
  

  
  

  ---

  
  

• .sync/codeql: Attempt to upload logs in case of success and failures @makubacki (#168)
  
  Change Details

    Currently, log artifacts are only uploaded in case of success. This change also uploads logs in case of failures to aid in debugging.

  ---

🐛 Bug Fixes

• Add quotes to git safe.directory in .devcontainer to fix parsing error @cfernald (#167)
  
  Change Details

    Currently the git command fails because the * is not parsed correctly in command line without the quote. This resolves this issue.

  ---

Full Changelog: v2.4.1...v2.5.0

v2.4.1

What's Changed

• .sync/submodule-release-update.yml: Add Nunjucks raw text tags @makubacki (#164)
  
  Change Details

    Surrounds the GitHub token syntax with raw tags to indicate that the curly braces should not be interpreted as a Nunjucks expression or variable and treated as a literal.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

• .sync/dependabot: Ignore submodules with versioned releases @makubacki (#163)
  
  Change Details

    Submodules with versioned releases will now be updated with the Submodule Release Updater action so there is no need for dependabot to create duplicate PRs for non-release updates of these submodules.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

Full Changelog: v2.4.0...v2.4.1