Skip to content

[release/10.0.4xx] Cloak SignatureCycle2 binary from VMR - #8226

Merged
mthalman merged 1 commit into
dotnet:release/10.0.4xxfrom
mthalman:mthalman-port-8214-signature-cycle2
Aug 11, 2026
Merged

[release/10.0.4xx] Cloak SignatureCycle2 binary from VMR#8226
mthalman merged 1 commit into
dotnet:release/10.0.4xxfrom
mthalman:mthalman-port-8214-signature-cycle2

Conversation

@mthalman

@mthalman mthalman commented Aug 11, 2026

Copy link
Copy Markdown
Member

Backport of #8214

The checked-in SignatureCycle2.exe test resource contains a signature cycle that blocks source tarball signing when Roslyn is synchronized into the VMR.

This ports the merged fix to release/10.0.4xx: exclude the binary from Roslyn source synchronization, remove it from the VMR, and conditionally embed it so the test resources project still builds when the cloaked file is absent.

Validation: built Microsoft.CodeAnalysis.Compiler.Test.Resources.csproj in VMR mode with 0 warnings and 0 errors.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).
1 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

@dotnet-policy-service
dotnet-policy-service Bot requested a review from a team August 11, 2026 13:12
@mthalman
mthalman marked this pull request as ready for review August 11, 2026 13:13
@mthalman
mthalman requested a review from mmitche August 11, 2026 13:13
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).
1 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

@mthalman
mthalman merged commit b24a7b4 into dotnet:release/10.0.4xx Aug 11, 2026
6 of 8 checks passed
@mthalman
mthalman deleted the mthalman-port-8214-signature-cycle2 branch August 11, 2026 16:40
This was referenced Sep 8, 2026
github-actions Bot added a commit to secana/PeNet that referenced this pull request Sep 10, 2026
Updated [Microsoft.SourceLink.GitHub](https://github.com/dotnet/dotnet)
from 10.0.400 to 10.0.401.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.SourceLink.GitHub's
releases](https://github.com/dotnet/dotnet/releases)._

## 10.0.401

[Release](https://github.com/dotnet/core/releases/tag/v10.0.12)

## What's Changed
* [release/10.0.4xx] Source code updates from dotnet/sdk by
@​dotnet-maestro[bot] in dotnet/dotnet#8011
* [release/10.0.4xx] Source code updates from dotnet/sdk by
@​dotnet-maestro[bot] in dotnet/dotnet#8037
* [release/10.0.4xx] Source code updates from dotnet/sdk by
@​dotnet-maestro[bot] in dotnet/dotnet#8038
* Update Source-Build SDK Diff Tests Baselines and Exclusions by
@​dotnet-sb-bot in dotnet/dotnet#7754
* [release/10.0.4xx] Source code updates from dotnet/arcade by
@​dotnet-maestro[bot] in dotnet/dotnet#8101
* [release/10.0.4xx] Source code updates from dotnet/source-build-assets
by @​dotnet-maestro[bot] in dotnet/dotnet#8104
* [release/10.0.4xx] Source code updates from dotnet/msbuild by
@​dotnet-maestro[bot] in dotnet/dotnet#8142
* [release/10.0.4xx] Source code updates from dotnet/sdk by
@​dotnet-maestro[bot] in dotnet/dotnet#8132
* [release/10.0.4xx] Source code updates from dotnet/source-build-assets
by @​dotnet-maestro[bot] in dotnet/dotnet#8127
* [release/10.0.4xx] Source code updates from dotnet/arcade by
@​dotnet-maestro[bot] in dotnet/dotnet#8156
* [release/10.0.4xx] Source code updates from dotnet/roslyn by
@​dotnet-maestro[bot] in dotnet/dotnet#8148
* [release/10.0.4xx] Source code updates from dotnet/sdk by
@​dotnet-maestro[bot] in dotnet/dotnet#8176
* [release/10.0.4xx] Source code updates from dotnet/arcade by
@​dotnet-maestro[bot] in dotnet/dotnet#8171
* [release/10.0.4xx] Source code updates from dotnet/scenario-tests by
@​dotnet-maestro[bot] in dotnet/dotnet#8092
* [release/10.0.4xx] Fix IdentityModel shared-components source build by
@​mthalman in dotnet/dotnet#8189
* [release/10.0.4xx] Source code updates from nuget/nuget.client by
@​dotnet-maestro[bot] in dotnet/dotnet#8201
* [release/10.0.4xx] Allow submodule changes when reseting submodules by
@​github-actions[bot] in dotnet/dotnet#8223
* [release/10.0.4xx] Source code updates from dotnet/roslyn by
@​dotnet-maestro[bot] in dotnet/dotnet#8215
* [release/10.0.4xx] Source code updates from dotnet/arcade by
@​dotnet-maestro[bot] in dotnet/dotnet#8210
* [release/10.0.4xx] Cloak SignatureCycle2 binary from VMR by @​mthalman
in dotnet/dotnet#8226
* [release/10.0.4xx] Ignore spurious SBoM warnings by @​akoeplinger in
dotnet/dotnet#8165
* [release/10.0.4xx] Source code updates from dotnet/arcade by
@​dotnet-maestro[bot] in dotnet/dotnet#8231
* Update to the 10.0.11 August runtimes from build 324376 by @​mthalman
in dotnet/dotnet#8259
* Merging internal commits for release/10.0.4xx by @​dotnet-bot in
dotnet/dotnet#8242
* [release/10.0.4xx] Source code updates from dotnet/arcade by
@​dotnet-maestro[bot] in dotnet/dotnet#8278
* [release/10.0.4xx] Source code updates from dotnet/arcade by
@​dotnet-maestro[bot] in dotnet/dotnet#8304
* [release/10.0.4xx] Source code updates from dotnet/roslyn by
@​dotnet-maestro[bot] in dotnet/dotnet#8347
* [release/10.0.4xx] Remove duplicate dependency from scenario-tests by
@​dkurepa in dotnet/dotnet#8350
* [release/10.0.4xx] Source code updates from dotnet/sourcelink by
@​dotnet-maestro[bot] in dotnet/dotnet#8344
* [release/10.0.4xx] Source code updates from dotnet/templating by
@​dotnet-maestro[bot] in dotnet/dotnet#8354
* [release/10.0.4xx] Fix SignCheckExclusionsFile.txt to allow signed
hotreload .js file by @​github-actions[bot] in
dotnet/dotnet#8383
* [release/10.0.4xx] Remove TSA bug filing from pipelines by
@​akoeplinger in dotnet/dotnet#8389
* [release/10.0.4xx] Source code updates from dotnet/arcade by
@​dotnet-maestro[bot] in dotnet/dotnet#8396
* [release/10.0.4xx] [release/10.0.1xx] Update binskim lastModifiedDate
in PipelineAutobaseliningConfig.yml by @​github-actions[bot] in
dotnet/dotnet#8408
* [release/10.0.4xx] Fix SignCheckExclusionsFile.txt for .js in
source-build artifacts by @​github-actions[bot] in
dotnet/dotnet#8405
* [release/10.0.4xx] Source code updates from dotnet/templating by
@​dotnet-maestro[bot] in dotnet/dotnet#8419
* [release/10.0.4xx] Source code updates from dotnet/templating by
@​dotnet-maestro[bot] in dotnet/dotnet#8422
* [release/10.0.4xx] Source code updates from dotnet/msbuild by
@​dotnet-maestro[bot] in dotnet/dotnet#8429
* [release/10.0.4xx] Source code updates from dotnet/source-build-assets
by @​dotnet-maestro[bot] in dotnet/dotnet#8313
* [release/10.0.4xx] Source code updates from dotnet/templating by
@​dotnet-maestro[bot] in dotnet/dotnet#8452
* [release/10.0.4xx] Source code updates from dotnet/source-build-assets
by @​dotnet-maestro[bot] in dotnet/dotnet#8453
* [release/10.0.4xx] Source code updates from dotnet/msbuild by
@​dotnet-maestro[bot] in dotnet/dotnet#8469
* [release/10.0.4xx] Source code updates from dotnet/fsharp by
@​dotnet-maestro[bot] in dotnet/dotnet#8521
* [release/10.0.4xx] Source code updates from dotnet/arcade by
@​dotnet-maestro[bot] in dotnet/dotnet#8574
* [release/10.0.4xx] Bump patch version to 10.0.401 by @​vseanreesermsft
in dotnet/dotnet#8577


 ... (truncated)

Commits viewable in [compare
view](dotnet/dotnet@v10.0.400...v10.0.401).
</details>
This was referenced Sep 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants