[PR #16081] build: add a OneBranch Official release pipeline #30822

Open
opened 2026-01-31 09:43:12 +00:00 by claunia · 0 comments
Owner

Original Pull Request: https://github.com/microsoft/terminal/pull/16081

State: closed
Merged: Yes


This pipeline does everything the existing release pipeline does, except it does it using the OneBranch official templates.

Most of our existing build infrastructure has been reused, with the following changes:

  • We are no longer using job-submit-windows-vpack, as OneBranch does this for us.
  • job-merge-msix-into-bundle now supports afterBuildSteps, which we use to stage the msixbundle into the right place for the vpack
  • job-build-project supports deleting all non-signed files (which the OneBranch post-build validation requires)
  • job-build-project now deletes console.dll, which is unused in any of our builds, because XFGCheck blows up on it for some reason on x86
  • job-publish-symbols now supports two different types of PAT ingestion
  • I have pulled out the NuGet filename variables into a shared variables template

I have also introduced a TSA config (which files bugs on us for binary analysis failures as well as using the word 'sucks' and stuff.)

I have also baselined a number of control flow guard/binary analysis failures.

**Original Pull Request:** https://github.com/microsoft/terminal/pull/16081 **State:** closed **Merged:** Yes --- This pipeline does everything the existing release pipeline does, except it does it using the OneBranch official templates. Most of our existing build infrastructure has been reused, with the following changes: - We are no longer using `job-submit-windows-vpack`, as OneBranch does this for us. - `job-merge-msix-into-bundle` now supports afterBuildSteps, which we use to stage the msixbundle into the right place for the vpack - `job-build-project` supports deleting all non-signed files (which the OneBranch post-build validation requires) - `job-build-project` now deletes `console.dll`, which is unused in any of our builds, because XFGCheck blows up on it for some reason on x86 - `job-publish-symbols` now supports two different types of PAT ingestion - I have pulled out the NuGet filename variables into a shared variables template I have also introduced a TSA config (which files bugs on us for binary analysis failures as well as using the word 'sucks' and stuff.) I have also baselined a number of control flow guard/binary analysis failures.
claunia added the pull-request label 2026-01-31 09:43:12 +00:00
Sign in to join this conversation.
No Label pull-request
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/terminal#30822