vscode-python-debugger/build/azure-devdiv-pipeline.stable.yml at b412a04d1ed4e27449fe31df45821cdc03e8546b · bschnurr/vscode-python-debugger · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
name: Publish Release
trigger:
  branches:
    include:
      - refs/tags/*

resources:
  repositories:
    - repository: MicroBuildTemplate
      type: git
      name: 1ESPipelineTemplates/MicroBuildTemplate
      ref: refs/tags/release
variables:
  - name: TeamName
    value: VSCode-python-debugger
  - name: VsixName
    value: python-debugger.vsix

parameters:
  - name: publishExtension
    displayName: 🚀 Publish Extension
    type: boolean
    default: false

extends:
  template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
  parameters:
    sdl:
      sourceAnalysisPool: VSEngSS-MicroBuild2022-1ES
      codeSignValidation:
        enabled: true
      sbom:
        enabled: false # Disable global SBOM generation; we'll enable selectively per artifact output
    pool:
      name: AzurePipelines-EO
      os: windows

    customBuildTags:
      - ES365AIMigrationTooling
    stages:
      - stage: Build
        displayName: Build & Package Extension
        jobs:
          - job: Build
            displayName: Build Job
            pool:
              name: VSEngSS-MicroBuild2022-1ES # use windows for codesigning to make things easier https://dev.azure.com/devdiv/DevDiv/_wiki/wikis/DevDiv.wiki/650/MicroBuild-Signing
              os: windows
            templateContext:
              mb:
                signing:
                  enabled: true
                  signType: real
                  signWithProd: true
              outputs:
                - output: pipelineArtifact
                  displayName: 'Publish Drop Artifact'
                  targetPath: '$(Build.StagingDirectory)\drop'
                  artifactName: drop
                  sbomEnabled: true
            steps:
              - task: NodeTool@0
                inputs:
                  versionSpec: '22.x'
                  checkLatest: true
                displayName: Select Node 22 LTS
              - task: UsePythonVersion@0
                inputs:
                  versionSpec: '3.9' # note Install Python dependencies step below relies on Python 3.9
                  addToPath: true
                  architecture: 'x64'
                displayName: Select Python version

              - script: npm ci
                displayName: Install NPM dependencies

              - script: python -m pip install -U pip
                displayName: Upgrade pip

              - script: python -m pip install wheel
                displayName: Install wheel

              - script: python -m pip install nox
                displayName: Install nox

              - script: python -m nox --session install_bundled_libs
                displayName: Install Python dependencies

              - script: python ./build/update_ext_version.py --release --for-publishing
                displayName: Update build number

              - script: npm run vsce-package
                displayName: Build VSIX

              - template: build/templates/sign.yml@self
                parameters:
                  vsixName: $(VsixName)
                  workingDirectory: $(Build.StagingDirectory)\drop
                  signType: real
                  verifySignature: true

              - ${{ if eq(parameters.publishExtension, true) }}:
                  - template: build/templates/publish.yml@self
                    parameters:
                      azureSubscription: PylancePublishPipelineSecureConnectionWithManagedIdentity
                      vsixName: $(VsixName)
                      manifestName: extension.manifest
                      signatureName: extension.signature.p7s
                      publishFolder: drop
                      preRelease: false