Update WiX Toolset

[arixmkii]

Tool name

WiX

Tool license

Microsoft Reciprocal License (MS-RL)

Add or update?

• Add
• Update

Desired version

3.14

Approximate size

No response

Brief description of tool

WiX handles MSI installation as you folks most likely know. WiX was recently released v 3.14 to mitigate DLL redirect vulnerability

• https://wixtoolset.org/news/2024/02/06/wix-v4.0.4-available/
• https://www.firegiant.com/blog/2024/2/6/wix-security-releases-available/

URL for tool's homepage

https://wixtoolset.org/

Provide a basic test case to validate the tool's functionality.

Platforms where you need the tool

• Azure DevOps
• GitHub Actions

Runner images where you need the tool

• Ubuntu 20.04
• Ubuntu 22.04
• macOS 11
• macOS 12
• macOS 13
• macOS 13 Arm64
• macOS 14
• macOS 14 Arm64
• Windows Server 2019
• Windows Server 2022

Can this tool be installed during the build?

No response

Tool installation time in runtime

No response

Are you willing to submit a PR?

No response

[shamil-mubarakshin]

Hey @arixmkii,
Images with updated wixtoolset are expected to be deployed by the end of next week.

[dbenzhuser]

And here I was wondering why my builds that ran fine just yesterday are now failing ...

Anybody else getting these after the update to 3.14?

light.exe : error LGHT0204: ICEM10: The property 'ProductCode' is not allowed in a Merge Module

light.exe : error LGHT0217: Error executing ICE action 'ICE103'. The most common cause of this kind of ICE failure is an incorrectly registered scripting engine. See http://wixtoolset.org/documentation/error217/ for details and how to solve this problem. The following string format was not expected by the external UI message logger: "There is a problem with this Windows Installer package. A DLL required for this install to complete could not be run. Contact your support personnel or package vendor.

[mikhailkoliada]

Deployed!

[dbenzhuser]

Just in case anybody finds this: Seems to be a bug in VS's mergemodule.cub that got picked up in Wix 3.14 and just never got fixed. Merge modules can be built by suppressing ICE103 and ICEM10.

[chrpai]

I've found multiple issues with this change and reported it under #9543

[chrpai]

Yes, taking mergemod.cub from 3.11 and copying it to 3.14\bin works around this issue. I also found an issue with the NetFx Extension which can be solved in a similar way. I don't know what other issues might lurk in 3.14 though.