Skip to content

[release/v7.4.16] Fix *nix permissions and use certificate_logical_to_actual#27450

Closed
adityapatwardhan wants to merge 363 commits into
masterfrom
backport-27385
Closed

[release/v7.4.16] Fix *nix permissions and use certificate_logical_to_actual#27450
adityapatwardhan wants to merge 363 commits into
masterfrom
backport-27385

Conversation

@adityapatwardhan
Copy link
Copy Markdown
Member

@adityapatwardhan adityapatwardhan commented May 14, 2026

Backport of #27385 to release/v7.4.16

Triggered by @adityapatwardhan on behalf of @andyleejordan
Original CL Label: CL-BuildPackaging

/cc @PowerShell/powershell-maintainers

Impact

REQUIRED: Choose either Tooling Impact or Customer Impact (or both). At least one checkbox must be selected.

Tooling Impact

  • Required tooling change
  • Optional tooling change (include reasoning)

Updates native dependency for PowerShell build.

Customer Impact

  • Customer reported
  • Found internally

Regression

REQUIRED: Check exactly one box.

  • Yes
  • No

This is not a regression.

Testing

CI workflows will validate the update. No manual product testing required.

Risk

REQUIRED: Check exactly one box.

  • High
  • Medium
  • Low

Dependency update to latest GA version; minimal risk to product functionality.

adityapatwardhan and others added 30 commits October 15, 2024 13:16
Co-authored-by: Travis Plunk <travis.plunk@microsoft.com>
`textlint` runs clean for the new entry

----
#### AI description  (iteration 1)
#### PR Classification
Documentation update for the v7.4.6 release.

#### PR Summary
This pull request updates the changelog to document the changes and improvements made in the v7.4.6 release.
- `CHANGELOG/7.4.md`: Added a new section for v7.4.6 detailing build and packaging improvements, including updates to .NET SDK, new NuGet package sources, and various fixes and enhancements.
Update change log for 7.4.6

----
#### AI description  (iteration 1)
#### PR Classification
Documentation update.

#### PR Summary
Updated the changelog for version 7.4.6 to reflect the latest changes and improvements.
- `CHANGELOG/7.4.md`: Updated the release date to 2024-10-22 and added an entry for copying to static site instead of making blob public.
Fix typo in release-MakeBlobPublic.yml

----
#### AI description  (iteration 1)
#### PR Classification
Bug fix

#### PR Summary
This pull request fixes a typo in the YAML configuration file for the release pipeline.
- Corrected indentation in `/.pipelines/templates/release-MakeBlobPublic.yml` for the `Capture Environment Variables` step.
#### AI description  (iteration 1)
#### PR Classification
New feature

#### PR Summary
This pull request updates the firewall configuration to monitor network traffic.
- `.pipelines/PowerShell-Release-Official.yml`: Added feature flags for `LinuxHostVersion` and `WindowsHostVersion` to enable network monitoring.
#### AI description  (iteration 1)
#### PR Classification
Code cleanup and configuration update.

#### PR Summary
This pull request updates the pipeline configuration for copying blobs to PSInfra storage.
- `.pipelines/templates/release-MakeBlobPublic.yml`: Added custom pool configuration and demands for `PowerShell1ES`. Simplified environment variable capture command.
`textlint` runs clean for the new entry

----
#### AI description  (iteration 1)
#### PR Classification
Documentation update for the v7.4.6 release.

#### PR Summary
This pull request updates the changelog to document the changes and improvements made in the v7.4.6 release.
- `CHANGELOG/7.4.md`: Added a new section for v7.4.6 detailing build and packaging improvements, including updates to .NET SDK, new NuGet package sources, and various fixes and enhancements.
Update change log for 7.4.6

----
#### AI description  (iteration 1)
#### PR Classification
Documentation update.

#### PR Summary
Updated the changelog for version 7.4.6 to reflect the latest changes and improvements.
- `CHANGELOG/7.4.md`: Updated the release date to 2024-10-22 and added an entry for copying to static site instead of making blob public.
Fix typo in release-MakeBlobPublic.yml

----
#### AI description  (iteration 1)
#### PR Classification
Bug fix

#### PR Summary
This pull request fixes a typo in the YAML configuration file for the release pipeline.
- Corrected indentation in `/.pipelines/templates/release-MakeBlobPublic.yml` for the `Capture Environment Variables` step.
#### AI description  (iteration 1)
#### PR Classification
New feature

#### PR Summary
This pull request updates the firewall configuration to monitor network traffic.
- `.pipelines/PowerShell-Release-Official.yml`: Added feature flags for `LinuxHostVersion` and `WindowsHostVersion` to enable network monitoring.
#### AI description  (iteration 1)
#### PR Classification
Code cleanup and configuration update.

#### PR Summary
This pull request updates the pipeline configuration for copying blobs to PSInfra storage.
- `.pipelines/templates/release-MakeBlobPublic.yml`: Added custom pool configuration and demands for `PowerShell1ES`. Simplified environment variable capture command.
#### AI description  (iteration 1)
#### PR Classification
Bug fix and new feature implementation.

#### PR Summary
This pull request adds missing backports and introduces new fixes to the pipeline configurations.
- `.pipelines/PowerShell-vPack-Official.yml`: Replaces AzCopy installation and download steps with a package artifact download.
- `.pipelines/templates/release-MakeBlobPublic.yml`: Adds parameters for skipping PSInfra installers and modifies blob copy logic.
- `.pipelines/PowerShell-Release-Official.yml`: Adds a parameter to skip copying archives and installers to PSInfrastructure public location.
- `.pipelines/templates/release-symbols.yml` and `.pipelines/templates/release-upload-buildinfo.yml`: Ensures checkout is done at the beginning of the restore phase.
- `.pipelines/templates/release-publish-pmc.yml`: Changes `BlobFolderName` from `AzureVersion` to `ReleaseTag`.
Temporary fix for firewall issue in OneBranch

----
#### AI description  (iteration 1)
#### PR Classification
Configuration update for the build pipeline.

#### PR Summary
This pull request updates the pool configuration for the "Publish BuildInfo" job to use a custom pool.
- `.pipelines/templates/release-upload-buildinfo.yml`: Changed the pool to `PowerShell1ES`, set `isCustom` to true, and added a demand for `ImageOverride` to equal `PSMMS2019-Secure`.
daxian-dbw and others added 17 commits April 9, 2026 10:10
…-LTS store package within the same `msixbundle-vpack` pipeline (#27242)
Co-authored-by: Dongbo Wang <dongbow@microsoft.com>
…nux container (#27322)

Co-authored-by: Dongbo Wang <dongbow@microsoft.com>
…7330)

Co-authored-by: Justin Chung <chungjustin@microsoft.com>
The tarball staging path used `Copy-Item`, which on *nix doesn't preserve
the source file mode, so `pwsh` ended up 644 in the `.tar.gz`. The Debian,
RPM, and macOS PKG paths explicitly `chmod` everything to 644 and then bump
`pwsh` back to 755, which silently demoted `createdump` (the .NET helper
that produces crash minidumps) along with it. Now we `chmod 755` both
executables in all package staging paths, guarded by `Test-Path` since
fxdependent builds don't bundle `createdump`.

Also added regression tests which check the permissions of `pwsh` inside
the Linux and macOS tarballs before we upload them.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
… group

The `CP-…` key codes used for ESRP signing are now set from ADO via the
`certificate_logical_to_actual` variable group. The templates reference
the following variables instead of literal codes:

- `$(authenticode_cert_id)`
- `$(authenticode_test_cert_id)`
- `$(nuget_cert_id)`
- `$(apple_cert_id)`
- `$(pgp_linux_cert_id)`
- `$(pgp_release_cert_id)`

`nupkg.yml`, `mac-package-build.yml`, and `linux-package-build.yml` pick
up the new group import. `linux-package-build.yml` also now selects the
PGP signing profile based on whether `jobName` starts with `mariner`, so
`PowerShell-Packages-Stages.yml` no longer threads a `signingProfile`
parameter in for the two Mariner jobs.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
It's been this way for a couple years which means we've been passing...something else?
Copilot AI review requested due to automatic review settings May 14, 2026 19:36
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review this pull request because it exceeds the maximum number of files (300). Try reducing the number of changed files and requesting a review from Copilot again.

@adityapatwardhan adityapatwardhan changed the title Backport 27385 [release/v7.4.16] Fix *nix permissions and use certificate_logical_to_actual May 14, 2026
@adityapatwardhan
Copy link
Copy Markdown
Member Author

wrong base branch.. closing

@adityapatwardhan adityapatwardhan deleted the backport-27385 branch May 14, 2026 19:38
@adityapatwardhan adityapatwardhan restored the backport-27385 branch May 14, 2026 19:38
@adityapatwardhan adityapatwardhan deleted the backport-27385 branch May 14, 2026 19:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

10 participants