v2.4.0

What's Changed

• .sync/dependabot: Disable automatic rebasing @makubacki (#159)
  
  Change Details

    Sets the rebase-strategy to "disabled" to prevent automatic rebasing.

  This prevents CI resources from building changes that may not actually
  be merged for a while (and need to be rebuilt later again).

  Rebasing can be done manually in the dependabot PR either through
  the GitHub UI or the dependabot command or via a push to the
  dependabot PR branch.
  

  
  

  ---

  
  

🚀 Features & ✨ Enhancements

• Add Submodule Release Updater GitHub Action and Workflow [Rebase \& FF] @makubacki (#161)
  
  Change Details

    Adds an action with a leaf workflow to update submodules in a repository to the latest GitHub release available for the submodule.

  Changes:

  1. .github/actions: Add initial Submodule Release Updater GitHub Action

  Adds an action that checks if any submodules in a repository have a
  GitHub release available. If so, the submodule is updated to the
  latest release and a pull request is made in the repository for
  the submodule update.

  2. .sync/Files.yml: Sync Submodule Release Update workflow

  Syncs a new workflow to update submodules to the latest GitHub
  release to mu_tiano_platforms.

  3. .sync/Version.njk: Update Mu repos to Mu DevOps v2.4.0

  Updates to v2.4.0 so the GitHub action is available.

  Changes since last release:
  v2.3.0...v2.4.0

  General release info: https://github.com/microsoft/mu_devops/releases

  ---

  • Example Action Run on Fork

  Example Pull Requests Created by the Action (on fork):

  • Bump MU_BASECORE from 2022080001.1.0 to 2022080001.2.1
  • Bump Features/DFCI from 2.0.2 to 2.3.1

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

Full Changelog: v2.3.3...v2.4.0

v2.3.3

What's Changed

• .sync/Files.yml: Sync release drafter to mu\_basecore @makubacki (#158)
  
  Change Details

    Syncs the following files to mu_basecore to enable the release drafter workflow in that repo.

  • release-draft.yml - Leaf workflow
  • release-draft-config.yml - Action config file

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

• .sync/dependabot: Check for submodule updates weekly @makubacki (#157)
  
  Change Details

    Reduce frequency of submodule checks from daily to weekly to reduce CI thrash.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

Full Changelog: v2.3.2...v2.3.3

v2.3.2

What's Changed

🐛 Bug Fixes

• codeql.yml: Remove PIP caching from pkg gathering @makubacki (#156)
  
  Change Details

    PIP modules are not pulled down during the initial job in the CodeQL workflow (package gathering) so PIP caching is not needed.

  Also works around a setup-python task issue that fails to ignore cache
  contents if they do not previously exist and are not populated during the job.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

Full Changelog: v2.3.1...v2.3.2

v2.3.1

What's Changed

• Jobs/PrGate.yml: Add Linux container option parameter @makubacki (#155)
  
  Change Details

    Allows the caller to specify options passed to the Linux container.

  See the following article for more information about options:. https://learn.microsoft.com/en-us/azure/devops/pipelines/process/container-phases?view=azure-devops#options
  

  
  

  ---

  
  

• .sync/workflows/codeql.yml: Add PIP module caching @makubacki (#152)
  
  Change Details

    Adds caching of PIP dependencies. This reduces overall execution time and decreases likelihood of a network error reaching out pypi to get the dependencies.

  Caching happens automatically based on pip-requirements.txt.

  https://github.com/actions/setup-python#caching-packages-dependencies

  Every job before:

  Run pip install -r pip-requirements.txt --upgrade
  Collecting edk2-pytool-library==0.14.0
    Downloading edk2_pytool_library-0.14.0-py3-none-any.whl (468 kB)
       -------------------------------------- 468.7/468.7 kB 2.7 MB/s eta 0:00:00
  Collecting edk2-pytool-extensions==0.22.2
    Downloading edk2_pytool_extensions-0.22.2-py3-none-any.whl (2.5 MB)
       ---------------------------------------- 2.5/2.5 MB 10.7 MB/s eta 0:00:00
  Collecting edk2-basetools==0.1.29
    Downloading edk2_basetools-0.1.29-py3-none-any.whl (1.3 MB)
       ---------------------------------------- 1.3/1.3 MB 4.5 MB/s eta 0:00:00
  Collecting antlr4-python3-runtime==4.12.0
    Downloading antlr4_python3_runtime-4.12.0-py3-none-any.whl (144 kB)
       -------------------------------------- 144.4/144.4 kB 2.2 MB/s eta 0:00:00
  Collecting regex==2023.3.23
    Downloading regex-2023.3.23-cp311-cp311-win_amd64.whl (267 kB)
       -------------------------------------- 267.7/267.7 kB 2.4 MB/s eta 0:00:00
  ...
  

  Jobs after:

  Run pip install -r pip-requirements.txt --upgrade
  Collecting edk2-pytool-library==0.14.0
    Using cached edk2_pytool_library-0.14.0-py3-none-any.whl (468 kB)
  Collecting edk2-pytool-extensions==0.22.2
    Using cached edk2_pytool_extensions-0.22.2-py3-none-any.whl (2.5 MB)
  Collecting edk2-basetools==0.1.29
    Using cached edk2_basetools-0.1.29-py3-none-any.whl (1.3 MB)
  Collecting antlr4-python3-runtime==4.12.0
    Using cached antlr4_python3_runtime-4.12.0-py3-none-any.whl (144 kB)
  Collecting regex==2023.3.23
    Using cached regex-2023.3.23-cp311-cp311-win_amd64.whl (267 kB)
  ...
  

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

• Add QemuPkg to CI for mu\_tiano\_platforms @cfernald (#150)
  
  Change Details

    Adds the QEMU package introduced by https://github.com/microsoft/mu_tiano_platforms/pull/444 to the CI for mu_tiano_platforms.

  ---

• .sync/Version.njk: Update Mu repos to Mu DevOps v2.3.0 @makubacki (#149)
  
  Change Details

    Changes since last release: https://github.com/microsoft/mu_devops/compare/v2.2.0...v2.3.0

  General release info: https://github.com/microsoft/mu_devops/releases
  

  
  

  ---

  
  

Full Changelog: v2.3.0...v2.3.1

v2.3.0

What's Changed

• Directly install opencppcoverage without choco @cfernald (#148)
  
  Change Details

    Chocolatey is no available in all build evnironments. This change removes the use of choco as a wrapper for downloading and installing opencppcoverage.

  ---

• Add variable to prevent checkout step, for pipelines that need it @apop5 (#147)
  
  Change Details

    Some containers may have performed the checkout step earlier, either for code scanning or for other reasons.

  Proposal to add a variable to prevent the checkout step for those repos /containers that have already taken the step.
  

  
  

  ---

  
  

• Updated CmdLine@1 tasks touse CmdLine@2 @apop5 (#146)
  
  Change Details

    Some pipeline now block CmdLine@1 tasks with the error message:

  ##[error]Task 'Command Line' is using legacy execution handler which is not supported in container execution flow.

  Changed all CmdLine@1 tasks to use CmdLine@2.
  

  
  

  ---

  
  

• .sync/Version.njk: Update Linux build container to Fedora 37 image @makubacki (#144)
  
  Change Details

    Updates the Linux build container from Fedora 35 to Fedora 37 image.

  Closes #145

  14d2aba image

  • Fedora 35 image contents
  • Fedora 37 image contents

  Summary of updates:

  • Fedora 35 to Fedora 37 (minimal image)
    • NEW: gcc for LoongArch (2022-09-06)
    • UPDATED: gcc 11.2.1 to gcc 12.2 (x86, x64, arm, aarch64, riscv)
    • UPDATED: Python 3.10 to Python 3.11
    • UPDATED: Qemu 6.10 to Qemu 7.2 (x86, arm, aarch64)
    • NO CHANGE: nasm 2.15.05

  ---

🚀 Features & ✨ Enhancements

• Create code coverage post-processing steps and integrate into PR Jobs @cfernald (#138)
  
  Change Details

    1. Switch to coverage files per-matrix to not publish coverage 2. Add steps to download and merge/filter all artifacts 3. Integrates steps into job templates.

  Issue #84
  

  
  

  ---

  
  

Full Changelog: v2.2.3...v2.3.0

v2.2.3

What's Changed

• .sync/Files.yml: Move CodeQL workflow comment @makubacki (#143)
  
  Change Details

    Move out of the `repos` list and append onto the preceding group description.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

• .sync/Files.yml: Remove CodeQL workflow from mu\_silicon\_arm\_tiano @makubacki (#142)
  
  Change Details

    The workflow currently builds on Visual Studio due to a CodeQL extractor bug. ARM packages only build on GCC in CI right now.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

• .sync/Files.yml: Sync CodeQL workflow to additional repos @makubacki (#140)
  
  Change Details

    Syncs the CodeQL leaf workflow to the following additional repos:

  • microsoft/mu_feature_config
  • microsoft/mu_feature_ipmi
  • microsoft/mu_oem_sample
  • microsoft/mu_silicon_arm_tiano

  The workflow is now synced to all Mu repos with large amounts of
  C code except mu_tiano_platforms. That will be included in a
  future change.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

• Notebooks: Fix mu\_silicon\_arm\_tiano repo name typo @makubacki (#139)
  
  Change Details

    Fixes repo name typo so results are returned from the repo.

  ---

Full Changelog: v2.2.2...v2.2.3

v2.2.2

What's Changed

• .sync/codeql.yml: Use Git long paths on Windows @makubacki (#136)
  
  Change Details

    It is a well known limitation that GitHub uses the pattern `/_work///` as the working directory on the GitHub workflow agents.

  It is redundant and particularly impactful on Windows as discussed
  below:

  https://github.com/msysgit/msysgit/wiki/Git-cannot-create-a-file-or-directory-with-a-long-path

  This especially causes an issue in a Mu repository at the moment
  (mu_common_intel_min_platform) due to its longer name which is
  repeated twice in the path (as <repo-name>).

  This change is limited to the GitHub CodeQL workflow and was found
  to resolve the issue encountered and not raise any additional issues
  in this workflow in testing.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

• .sync/release-draft-config.yml: Exclude dependabot contributions @makubacki (#135)
  
  Change Details

    Dependabot is noisier now than it used to be, exclude it from release notes to focus on important changes.

  ---

Full Changelog: v2.2.1...v2.2.2

v2.2.1

What's Changed

• .sync: Add main branch as a trigger to CodeQL workflow @makubacki (#134)
  
  Change Details

    Some repos that use the workflow have a `main` branch instead of a `release` branch as their primary branch.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

• .sync: Add CodeQL GitHub workflow @makubacki (#133)
  
  Change Details

    Adds a new workflow that is synced to Mu repos that are currently expected to run against CodeQL.

  This workflow has the following features to support
  maintainability across the repos it is synced to:

  • The packages are auto discovered and a dynamic matrix
    is generated for each package build. This allows the
    same file to work as-is in each repo that performs
    CI builds (packages are in the repo root directory).

  • The Mu Basecore plugin directory is auto discovered
    in the workspace based on the presence of the CodeQL
    plugin being present in the directory.

  • The operations supported by the Stuart CI script are
    dynamically discovered.

  • CodeQL is only run on Windows agents. There is a known
    issue when building edk2-style code on Linux so this
    avoids encountering that issue.

    See: github/codeql-action#1338

  • The Windows CodeQL CLI package is about 260MB at this time.

    The GitHub Action cache is used by this workflow to cache
    the CLI after it is initially pulled down in the Stuart ext
    dep update.

  • The CLI ext dep directory name and version used for caching
    are read from the ext_dep YAML file to reduce maintenance
    needed in the workflow if the file changes in the future.

  Note that the SARIF file for each run is uploaded as a per-package
  artifact. These can be downloaded and opened in VS Code with the
  SARIF Viewer extension to view issues locally with the ability
  to click to issue locations in files.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

• .sync/Version.njk: Update Mu repos to Mu DevOps v2.2.0 @makubacki (#130)
  
  Change Details

    Changes since last release: https://github.com/microsoft/mu_devops/compare/v2.0.1...v2.2.0

  General release info: https://github.com/microsoft/mu_devops/releases
  

  
  

  ---

  
  

• .sync/dependabot: Do not update microsoft/mu\_devops in Actions updates @makubacki (#129)
  
  Change Details

    The version is centrally managed in mu_devops and pushed to other repos in file syncs. Therefore, dependabot does not need to manage the version independently in respective repos.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com

    </blockquote>
    <hr>
  </details>
  

• GitHub Action: Bump microsoft/mu\_devops from 2.0.1 to 2.1.0 @dependabot (#125)
  
  Change Details

    Bumps [microsoft/mu_devops](https://github.com/microsoft/mu_devops) from 2.0.1 to 2.1.0.

  Release notes

  Sourced from microsoft/mu_devops's releases.

  v2.1.0

  What's Changed

  🚀 Features & ✨ Enhancements

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com

  📖 Documentation Updates

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com

    </blockquote>
    <hr>
  </details>
  

  Full Changelog: v2.0.2...v2.1.0

  v2.0.2

  What's Changed

  ... (truncated)

  Commits

  • bcace84 .sync/workflows/leaf: Add PR formatting validator workflow (#118)
  • fe730bb PullRequests.github-issues: Remove uefibot and ProjectMuBot from human PRs (#...
  • 883f72d .sync/azure_pipelines: Switch from microdnf to dnf (#115)
  • badf2c8 Repo File Sync: synced file(s) with microsoft/mu_devops (#114)
  • See full diff in compare view

  
  

  

  Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

  ---

  Dependabot commands and options

  
  

  You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

  ---

Full Changelog: v2.2.0...v2.2.1

v2.2.0

What's Changed

• Remove link to Microsoft security policy for Project Mu repos @spbrogan (#123)
  
  Change Details

    In the "new" issues menu there was a link for Microsoft's Security Policy. This is no longer accurate and now each repo has been updated with a valid SECURITY.MD file.

  ---

🚀 Features & ✨ Enhancements

• release-draft-config.yml: Add breaking changes section @makubacki (#120)
  
  Change Details

    Closes #119

  Breaking changes are identified with the GitHub label:
  impact:breaking-change

  Prior to this change, that label rolled the major version of the
  repo.

  Now, the label also places corresponding changes into a "Breaking
  Changes" section of the release notes so it is easy for consumers
  to see breaking changes in a release.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

Full Changelog: v2.1.0...v2.2.0

v2.1.0

What's Changed

🚀 Features & ✨ Enhancements

• .sync/workflows/leaf: Add PR formatting validator workflow @makubacki (#118)
  
  Change Details

    Adds a new workflow to validate pull request formatting.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com
  

  
  

  ---

  
  

📖 Documentation Updates

• PullRequests.github-issues: Remove uefibot and ProjectMuBot from human PRs @makubacki (#116)
  
  Change Details

    Add the bot accounts to those excluded from the "PRs opened by humans" section in the notebook.

  Signed-off-by: Michael Kubacki michael.kubacki@microsoft.com

    </blockquote>
    <hr>
  </details>
  

Full Changelog: v2.0.2...v2.1.0