Skip to content

feat: bump pipeline-tools to v2.1.0#165

Open
hoobio wants to merge 1 commit into
mainfrom
feat/upgrade-pipeline-tools-v2.1.0
Open

feat: bump pipeline-tools to v2.1.0#165
hoobio wants to merge 1 commit into
mainfrom
feat/upgrade-pipeline-tools-v2.1.0

Conversation

@hoobio
Copy link
Copy Markdown
Owner

@hoobio hoobio commented May 21, 2026

Summary

Bumps 10 pipeline-tools pins from @v1.6.0 to @v2.1.0 and adopts the v2 Backstage hierarchy routing for Dependency-Track. The Resolve DT channel step now special-cases default-branch so bitwarden-extension@main sits as a top-level sibling of release / prerelease / ci / hotfix instead of nesting under ci.

Channel routing

Event Channel SubChannel MarkLatest Prune
release event release (none) true false
release-please prerelease PR prerelease (none) false true
default-branch push (main) main (none) false true
feature branch / dispatch / PR ci <sanitized-branch> false true

Pre-v2.1.0 builds uploaded everything to ci/<branch> (including main), which the v2 hierarchy now flattens via the always-on sweep. default-branch: main is passed so the sweep promotes any existing bitwarden-extension@ci/main to top-level on the first run.

Why

  • v2.1.0 cuts the v1 → v2 migration story: legacy ci/<X> umbrellas get re-parented automatically.
  • Channel-aware prune defaults (release/prerelease keep all, ci keeps 3, default-branch keeps 10) drop the brittle inline keep toggle. workflow_dispatch still overrides to keep=1 / ci-keep=1 for manual aggressive cleanup.
  • Top-level default-branch channel matches gigagrug's pattern, makes the DT UI navigation parity across consumers.

Test plan

  • Merge triggers main build → bitwarden-extension@main/<sha> parented under bitwarden-extension@component
  • Sweep promotes legacy bitwarden-extension@ci/main (if any) on first run; other ci/<branch> legacies nest under bitwarden-extension@ci
  • release-please PR routes to prerelease channel correctly
  • Eventual release: published event routes to release with mark-latest=true

🤖 Generated with Claude Code

Bumps all 10 hoobio/pipeline-tools pins from v1.6.0 to v2.1.0 and adopts the
v2 channel routing for the Backstage hierarchy in Dependency-Track:

- Default-branch (main) now routes to its own top-level channel (channel=main,
  sub_channel="") instead of nesting under ci/main. Matches the v2 layout
  spec (release / prerelease / main / ci / hotfix as top-level siblings).
- Feature branches / dispatch / PRs route to channel=ci with sub_channel=<branch>,
  so per-branch SBOM history groups under a shared ci umbrella.
- Passes `default-branch: main` so the v2.1.0 sweep promotes any legacy
  `bitwarden-extension@ci/main` to top-level on first run.
- Adds explicit `ci-keep` override for workflow_dispatch (manual aggressive
  cleanup); regular runs use v2.1.0's channel-aware defaults.
@github-actions
Copy link
Copy Markdown
Contributor

✅ WACK Results (x64)

🟢 23 passed ⚠️ 1 excluded

Excluded Tests

Test Reason
Blocked executables mscordbi.dll and Microsoft.CommandPalette.Extensions.Toolkit.dll (PowerToys SDK) reference CreateProcessW — these are third-party binaries outside our control
All tests
Test Result
Blocked executables ⚠️ Excluded
Install signed driver and executable files 🟢 Pass
Archive files usage 🟢 Pass
Properties 🟢 Pass
General metadata correctness 🟢 Pass
Type name correctness 🟢 Pass
Type name case-sensitivity 🟢 Pass
Type location 🟢 Pass
ExclusiveTo attribute 🟢 Pass
Special use capabilities 🟢 Pass
Debug configuration 🟢 Pass
Branding 🟢 Pass
App resources 🟢 Pass
Private code signing 🟢 Pass
Banned file analyzer 🟢 Pass
Resource Packages 🟢 Pass
Enterprise Features 🟢 Pass
Registry checks 🟢 Pass
File association verbs 🟢 Pass
App manifest 🟢 Pass
Application count 🟢 Pass
User account control run level 🟢 Pass
Platform appropriate files 🟢 Pass
DPIAwarenessValidation 🟢 Pass

@github-actions
Copy link
Copy Markdown
Contributor

✅ WACK Results (ARM64)

🟢 23 passed ⚠️ 1 excluded

Excluded Tests

Test Reason
Blocked executables mscordbi.dll and Microsoft.CommandPalette.Extensions.Toolkit.dll (PowerToys SDK) reference CreateProcessW — these are third-party binaries outside our control
All tests
Test Result
Blocked executables ⚠️ Excluded
Install signed driver and executable files 🟢 Pass
Archive files usage 🟢 Pass
Properties 🟢 Pass
General metadata correctness 🟢 Pass
Type name correctness 🟢 Pass
Type name case-sensitivity 🟢 Pass
Type location 🟢 Pass
ExclusiveTo attribute 🟢 Pass
Special use capabilities 🟢 Pass
Debug configuration 🟢 Pass
Branding 🟢 Pass
App resources 🟢 Pass
Private code signing 🟢 Pass
Banned file analyzer 🟢 Pass
Resource Packages 🟢 Pass
Enterprise Features 🟢 Pass
Registry checks 🟢 Pass
File association verbs 🟢 Pass
App manifest 🟢 Pass
Application count 🟢 Pass
User account control run level 🟢 Pass
Platform appropriate files 🟢 Pass
DPIAwarenessValidation 🟢 Pass

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant