[release/dnup] Cut over dotnetup bootstrap to versioned signed daily aka.ms link#55154
Merged
nagilson merged 5 commits intoJul 7, 2026
Merged
Conversation
Repoint eng/dotnetup-shared.{ps1,sh} and the dotnetup README download snippets off the legacy raw-GitHub vanity link (aka.ms/dotnetup/get-dotnetup.*) to the signed, version-stable https://aka.ms/dotnet/dotnetup/daily/get-dotnetup.{ps1,sh} link. Document a save-then-run PowerShell pattern so the Authenticode signature is actually verified (iwr | iex bypasses execution policy).
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
This PR updates the dotnetup bootstrap scripts and documentation to use the new version-stable, signed daily aka.ms endpoints for get-dotnetup.{ps1,sh}, moving consumers off the legacy raw-GitHub vanity links.
Changes:
- Repointed
eng/dotnetup-shared.{sh,ps1}fallback download URLs tohttps://aka.ms/dotnet/dotnetup/daily/get-dotnetup.*. - Updated the dotnetup README install snippets to use the new URLs.
- Added README guidance for Windows to “save then run” so PowerShell Authenticode signature verification can apply (with the one-liner kept as an option).
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| eng/dotnetup-shared.sh | Updates the fallback getter URL to the new daily aka.ms endpoint. |
| eng/dotnetup-shared.ps1 | Updates the fallback getter URL to the new daily aka.ms endpoint. |
| documentation/general/dotnetup/README.md | Updates download snippets and documents signature-verifiable PowerShell install flow. |
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Per PR feedback, use the shorter https://aka.ms/dotnetup/get-dotnetup.* vanity redirects in the getting started instructions while keeping the versioned signed daily link for the CI bootstrap scripts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
marcpopMSFT
approved these changes
Jul 7, 2026
Member
Author
|
@dsplaisted Do you own the Probably shouldn't merge this PR until then since it tells users to verify the signature on the link that doesnt provide a signature. |
Member
Author
|
@baronfel had permission, ty! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Part 3 of migrating dotnetup bootstrap scripts to versioned, signed daily aka.ms links, targeting
release/dnup. Tracks #54990. Companion to themainPR #55153.Codeflow can handle the aka.ms link part but not the readme.md update so I opened this PR as well.
README: make the signature actually verifiable
iwr | iexruns the script as an in-memory expression and bypasses execution-policy signature checks entirely. The README now documents a save-then-run PowerShell pattern so the Authenticode signature is honored, keeping the one-liner as a convenience alternative.Not included
aka.ms/dotnetup/get-dotnetup.*is an aka.ms infra change, not a repo change.