Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merge latest Library.Template #187

Merged
merged 17 commits into from
Jun 20, 2024
Merged

Merge latest Library.Template #187

merged 17 commits into from
Jun 20, 2024

Conversation

AArnott
Copy link
Member

@AArnott AArnott commented Jun 18, 2024

  • Bump dotnet-coverage from 17.11.0 to 17.11.3 (#272)
  • Bump Nerdbank.GitVersioning to 3.6.139
  • Bump nbgv to 3.6.139
  • Enable ShallowClone for VSInsertion
  • Ensure Expand-Template uses UTF-8 when replacing placeholders.
  • Drop SourceLink package reference
  • Remove WPF workarounds for bugs fixed years ago
  • Enable codeSignValidation and exclude non-shipping files
  • Consolidate official build and real sign switches
  • Switch from PAT-based to WIF-based auth
  • Fix initArgs required parameter break

dependabot bot and others added 16 commits June 3, 2024 11:15
Bumps [dotnet-coverage](https://github.com/microsoft/codecoverage) from 17.11.0 to 17.11.3.
- [Commits](https://github.com/microsoft/codecoverage/commits)

---
updated-dependencies:
- dependency-name: dotnet-coverage
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Enabling shallow cloning will make cloning the VS repo faster when
creating the PR.
Enable ShallowClone when performing insertion
Ensure Expand-Template uses UTF-8 when replacing placeholders.
Per @KirillOsenkov in [this comment](dotnet/sdk#36666 (comment)), SourceLink is now built into the .NET SDK.
Justification:
- Official builds will soon be _required_ to sign everything.
- Signing outside of an official build would allow bypassing all compliance checks, defeating the intent of all these checks.

Therefore: signing must happen if and only if we are running an official build, and thus we should have only one switch that controls both.
When pulling from or pushing packages to the `azure-public` account, we need to authenticate when doing so from the `devdiv` account. We were previously doing this through PAT-based service connections. With this change, we switch to WIF (Workload Identity Federation) to authenticate.
@AArnott AArnott merged commit 6b6c1f6 into main Jun 20, 2024
4 checks passed
@AArnott AArnott deleted the libtemplateUpdate branch June 20, 2024 17:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants