v18.0.6

What's Changed

• Update Version.njk mu\_devops to 18.0.6 @Flickdm (#568)
  
  Change Details

    Updates the Version.njk mu_devops to 18.0.6

  ---

• Add mu\_crypto\_release to CodeQL workflow sync @Flickdm (#567)
  
  Change Details

    Add microsoft/mu_crypto_release to the leaf CodeQL CI workflow sync list so the repo receives the codeql.yml workflow and gets CodeQL security scanning on push and PR.

  ---

• PackageCi: Enable core.longpaths on Windows runners @Flickdm (#566)
  
  Change Details

    Add git config --system core.longpaths true after checkout on Windows runners to prevent failures when submodule trees contain filenames exceeding the 260-character Windows path limit.

  Without this MU_CRYPTO_RELEASE is failing

  https://github.com/microsoft/mu_crypto_release/actions/runs/25198194771/job/73883433904?pr=218

  Cloning into 'D:/a/mu_crypto_release/mu_crypto_release/MU_BASECORE/SecurityPkg/DeviceSecurity/SpdmLib/libspdm/os_stub/openssllib/openssl/gost-engine/libprov'...
  error: unable to create file 
  ....
  

    </blockquote>
    <hr>
  </details>
  

• Update robinraju/release-downloader from 1.12 to 1.13 @apop5 (#565)
  
  Change Details

    Update to address the multiple PRs in mu repos.

  ---

• .sync: Add mm\_supv clangpdb-ci @Javagedes (#563)
  
  Change Details

    Adds `microsoft/mu_feature_mm_supv` to the list of repositories to have the `clangpdb-ci.yml` repo sync'd to.

  It is added with the following configuration:

  psuh / pull_request target branch: main
  setup: both (stuart_ci_setup && stuart_setup)
  

  
  

  ---

  
  

• GitHub Actions: Bump actions/github-script from 8 to 9 @apop5 (#561)
  
  Change Details

    Updates `actions/github-script` from 8 to 9

  Update the workflow file and the sync files.
  

  
  

  ---

  
  

• Change `mu_crypto_release` license @Javagedes (#560)
  
  Change Details

    This commit updates `mu_crypto_release` license from the Microsoft license to the tianocore license.

  ---

• [REBASE\&FF] clangpdb-ci improvements @Javagedes (#558)
  
  Change Details

    This pull request does two things:

  (1) It adds a concurrency group to the workflow so that when new pushes are made to a branch, any running CLANGPDB CI workflows running are cancelled

  (2) It collapses all matrix job results into a single job that can be marked as required in the github UI for a PR to be merged. This is useful because some repositires have 10+ packages, resulting in over 40 jobs needing to be marked as required to pass.

  Testing

  (1) Manually ran the file syncer to make sure the new changes sync properly across repositories

  • Javagedes#4

  (2) Ran the workflow in a repository, ensuring the final job passes are succeeds as expected

  • https://github.com/Javagedes/mu_basecore/actions/runs/24202010258
  • https://github.com/Javagedes/mu_basecore/actions/runs/24201048338

  ---

• .sync/Files.yml: Sync pull-request-formatting-validator.yml to secureboot\_objects @makubacki (#557)
  
  Change Details

    This workflow is primarily being synced to secureboot_objects to ensure file sync PR titles are updated from the default string value.

  ---

🐛 Bug Fixes

• .sync: Add arch sync param to the CodeQL workflow @makubacki (#571)
  
  Change Details

    Allow the architecture list to be passed into the workflow for matrix generation. All existing repos continue to use the previous default of "IA32,X64", the mu_crypto_release repo only supports X64, so sync it accordingly.

  ---

  Note: Bug label applied since this addresses a CodeQL build failure introduced in 2ffad0f.
  

  
  

  ---

  
  

Full Changelog: v18.0.5...v18.0.6