diff --git a/.github/actions/submodule-release-updater/action.yml b/.github/actions/submodule-release-updater/action.yml index 1357b8ad..4725572e 100644 --- a/.github/actions/submodule-release-updater/action.yml +++ b/.github/actions/submodule-release-updater/action.yml @@ -42,7 +42,7 @@ runs: steps: - name: Set up Python Environment - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 with: python-version: 3.12 diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 578b6462..e98edd50 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,89 +1,89 @@ -## @file -# Dependabot configuration file to enable GitHub services for managing and updating -# dependencies. -# -# NOTE: This file is automatically synchronized from Mu DevOps. Update the original file there -# instead of the file in this repo. -# -# This dependabot file is limited to syncing the following type of dependencies. Other files -# are already available in Mu DevOps to sync other dependency types. -# - Rust Crate Dependencies (`cargo`) -# - GitHub Actions (`github-actions`) -# - Python PIP Modules (`pip`) -# -# Dependabot does not update the microsoft/mu_devops version because that is updated once in mu_devops -# and then synced to all repos when the file sync occurs. -# -# - Mu DevOps Repo: https://github.com/microsoft/mu_devops -# - File Sync Settings: https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml -# -# Copyright (c) Microsoft Corporation. -# SPDX-License-Identifier: BSD-2-Clause-Patent -# -# Please see the documentation for all dependabot configuration options: -# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates -## - -version: 2 - -updates: - - package-ecosystem: "cargo" - directory: "/" - schedule: - interval: "monthly" - day: "monday" - timezone: "America/Los_Angeles" - time: "03:00" - cooldown: - default-days: 7 - commit-message: - prefix: "Rust Dependency" - labels: - - "type:dependencies" - - "type:dependabot" - rebase-strategy: "disabled" - - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "monthly" - day: "monday" - timezone: "America/Los_Angeles" - time: "06:00" - cooldown: - default-days: 7 - ignore: - # Ignore dependencies that are synced from mu_devops - - dependency-name: "microsoft/mu_devops*" - - dependency-name: "github/codeql-action*" - groups: - all-actions-dependencies: - patterns: - - "*" - commit-message: - prefix: "GitHub Action" - labels: - - "type:dependencies" - - "type:dependabot" - rebase-strategy: "disabled" - - - package-ecosystem: "pip" - directory: "/" - schedule: - interval: "monthly" - day: "wednesday" - timezone: "America/Los_Angeles" - time: "01:00" - cooldown: - default-days: 7 - groups: - all-pip-dependencies: - patterns: - - "*" - commit-message: - prefix: "pip" - labels: - - "language:python" - - "type:dependencies" - - "type:dependabot" - rebase-strategy: "disabled" +## @file +# Dependabot configuration file to enable GitHub services for managing and updating +# dependencies. +# +# NOTE: This file is automatically synchronized from Mu DevOps. Update the original file there +# instead of the file in this repo. +# +# This dependabot file is limited to syncing the following type of dependencies. Other files +# are already available in Mu DevOps to sync other dependency types. +# - Rust Crate Dependencies (`cargo`) +# - GitHub Actions (`github-actions`) +# - Python PIP Modules (`pip`) +# +# Dependabot does not update the microsoft/mu_devops version because that is updated once in mu_devops +# and then synced to all repos when the file sync occurs. +# +# - Mu DevOps Repo: https://github.com/microsoft/mu_devops +# - File Sync Settings: https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml +# +# Copyright (c) Microsoft Corporation. +# SPDX-License-Identifier: BSD-2-Clause-Patent +# +# Please see the documentation for all dependabot configuration options: +# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates +## + +version: 2 + +updates: + - package-ecosystem: "cargo" + directory: "/" + schedule: + interval: "monthly" + day: "monday" + timezone: "America/Los_Angeles" + time: "03:00" + cooldown: + default-days: 7 + commit-message: + prefix: "Rust Dependency" + labels: + - "type:dependencies" + - "type:dependabot" + rebase-strategy: "disabled" + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "monthly" + day: "monday" + timezone: "America/Los_Angeles" + time: "06:00" + cooldown: + default-days: 7 + ignore: + # Ignore dependencies that are synced from mu_devops + - dependency-name: "microsoft/mu_devops*" + - dependency-name: "github/codeql-action*" + groups: + all-actions-dependencies: + patterns: + - "*" + commit-message: + prefix: "GitHub Action" + labels: + - "type:dependencies" + - "type:dependabot" + rebase-strategy: "disabled" + + - package-ecosystem: "pip" + directory: "/" + schedule: + interval: "monthly" + day: "wednesday" + timezone: "America/Los_Angeles" + time: "01:00" + cooldown: + default-days: 7 + groups: + all-pip-dependencies: + patterns: + - "*" + commit-message: + prefix: "pip" + labels: + - "language:python" + - "type:dependencies" + - "type:dependabot" + rebase-strategy: "disabled" diff --git a/.github/workflows/PackageCi.yml b/.github/workflows/PackageCi.yml index f551b3b6..c9fa44a1 100644 --- a/.github/workflows/PackageCi.yml +++ b/.github/workflows/PackageCi.yml @@ -84,11 +84,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Setup Python ${{ inputs.python-version }} if: ${{ inputs.container == null }} - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 with: python-version: ${{ inputs.python-version }} cache: 'pip' @@ -121,7 +121,7 @@ jobs: - name: Upload CI build logs if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 with: name: ci-logs-${{ matrix.packages }}-${{ matrix.architectures }}-${{ matrix.targets }}-${{ inputs.runner }} path: ${{ steps.package-ci.outputs.log-path }} diff --git a/.github/workflows/pull-request-formatting-validator.yml b/.github/workflows/pull-request-formatting-validator.yml index 654d1bcc..25cf067a 100644 --- a/.github/workflows/pull-request-formatting-validator.yml +++ b/.github/workflows/pull-request-formatting-validator.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Generate Token id: app-token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ vars.MU_ACCESS_APP_ID }} private-key: ${{ secrets.MU_ACCESS_APP_PRIVATE_KEY }} @@ -68,7 +68,7 @@ jobs: - name: Check for Validation Errors if: env.VALIDATION_ERROR - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 + uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9 with: script: | core.setFailed('PR Formatting Validation Check Failed!') diff --git a/.github/workflows/scheduled-maintenance.yml b/.github/workflows/scheduled-maintenance.yml index 2f370a4d..72c8a1f4 100644 --- a/.github/workflows/scheduled-maintenance.yml +++ b/.github/workflows/scheduled-maintenance.yml @@ -28,7 +28,7 @@ jobs: steps: - name: Generate Token id: app-token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ vars.MU_ACCESS_APP_ID }} private-key: ${{ secrets.MU_ACCESS_APP_PRIVATE_KEY }} diff --git a/Containers/Ubuntu-22/Dockerfile b/Containers/Ubuntu-22/Dockerfile index e891028e..867f91ff 100644 --- a/Containers/Ubuntu-22/Dockerfile +++ b/Containers/Ubuntu-22/Dockerfile @@ -131,7 +131,7 @@ ENV RUSTUP_HOME="$HOME/.rustup" ENV PATH="$CARGO_HOME/bin:$PATH" # Install Rust/Cargo and extras (rust-src, rust fmt, cargo-make, cargo-tarpaulin) -RUN RUST_VERSION=1.92.0 && \ +RUN RUST_VERSION=1.95.0 && \ curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain ${RUST_VERSION} --profile minimal && \ rustup component add rustfmt rust-src --toolchain ${RUST_VERSION}-x86_64-unknown-linux-gnu diff --git a/Containers/Ubuntu-24/Dockerfile b/Containers/Ubuntu-24/Dockerfile index d232cc59..f15285f9 100644 --- a/Containers/Ubuntu-24/Dockerfile +++ b/Containers/Ubuntu-24/Dockerfile @@ -132,7 +132,7 @@ ENV RUSTUP_HOME="$HOME/.rustup" ENV PATH="$CARGO_HOME/bin:$PATH" # Install Rust/Cargo and extras (rust-src, rust fmt, cargo-make, cargo-tarpaulin) -RUN RUST_VERSION=1.92.0 && \ +RUN RUST_VERSION=1.95.0 && \ curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain ${RUST_VERSION} --profile minimal && \ rustup component add rustfmt rust-src --toolchain ${RUST_VERSION}-x86_64-unknown-linux-gnu diff --git a/Steps/RustSetupSteps.yml b/Steps/RustSetupSteps.yml index f30cba51..a63ff3b2 100644 --- a/Steps/RustSetupSteps.yml +++ b/Steps/RustSetupSteps.yml @@ -79,13 +79,13 @@ steps: # those on both Linux and Windows agents for consistency in the pipeline runs. # - script: | - rustup install --no-self-update 1.92.0 - displayName: Install Rust 1.92.0 (Windows) + rustup install --no-self-update 1.95.0 + displayName: Install Rust 1.95.0 (Windows) condition: eq(variables['Agent.OS'], 'Windows_NT') - script: | - rustup default 1.92.0 - displayName: Set Rust 1.92.0 (Windows) + rustup default 1.95.0 + displayName: Set Rust 1.95.0 (Windows) condition: eq(variables['Agent.OS'], 'Windows_NT') - script: pip install requests --upgrade @@ -130,6 +130,6 @@ steps: cargo binstall -y cargo-tarpaulin --version 0.31.5 displayName: Install cargo-tarpaulin -- script: rustup component add rustfmt rust-src --toolchain 1.92.0-$(rust_target_triple) +- script: rustup component add rustfmt rust-src --toolchain 1.95.0-$(rust_target_triple) displayName: rustup add rust-src condition: and(succeeded(), eq(variables['Agent.OS'], 'Windows_NT'))