v15.0.4

What's Changed

• Adding missing components from docker images @kuqin12 (#473)
  
  Change Details

    This change adds 5 main components to the docker image to support Hafnium building:

  clang, device-tree-compiler, libssl-dev, lld, llvm

  This is tested with docker build, then pulled down top of main in mu_tiano_platforms from the built docker, build and run QemuSbsaPkg successfully.

    </blockquote>
    <hr>
  </details>
  

• Add RustCargoSteps workflow @magravel (#468)
  
  Change Details

    Adds a Rust workflow that makes sure the code is well formatted, doesn't have Clippy errors, and that tests that are passing and validate the documentation.

  This workflow is synced with these repositories:

  • microsoft/mu_basecore
  • microsoft/mu_plus
  • microsoft/mu_rust_helpers
  • microsoft/mu_rust_hid
  • microsoft/mu_rust_pi
  • microsoft/mu_tiano_platforms

  This has been tested on a dummy repository.

  Example: When fmt fails, we want other checks to still run in that case.
  

    </blockquote>
    <hr>
  </details>
  

• Update actions/checkout from v4 to v5 @apop5 (#470)
  
  Change Details

    Update actions/checkout@v4 to actions/checkout@v5

  This will take place of the dependabot updates that are scattered throughout the repos.

    </blockquote>
    <hr>
  </details>
  

• Move crypto\_release out of Dev/Release file sync @apop5 (#467)
  
  Change Details

    mu_crypto_release is moving to a main branch.

  Update file sync to no longer sync the
  

  
  

  ---

  
  

• Update rustfmt to use local repo version instead of mu\_devops version. @apop5 (#466)
  
  Change Details

    Some downstream repos updated to 2024 rustfmt.

  Update the synced version of rustfmt to remove specifying a format. This way, the edition will use the repo's Cargo.toml.
  

  
  

  ---

  
  

• Add to the dependenabot ignore subrepos the TFA and HAF repos @apop5 (#465)
  
  Change Details

    mu_tiano_platforms added Silicon/Arm/TFA and Silicon/Arm/HAF as submodules.

  Dependabot was creating PRs to update.

  Add these repos to the ignore list for dependabot.
  

  
  

  ---

  
  

• codeql: Go back to pull\_request @makubacki (#464)
  
  Change Details

    b9c5931 moved to pull_request_target to use the GitHub app to derive auth tokens. This may not allow GitHub to have the propoer context for the changes in the PR. This goes back to pull_request. Since only read permission is needed for the token, this sets uses the default token to make authenticated API calls.

  ---

🐛 Bug Fixes

• codeql: Add raw markers for Nunjucks @makubacki (#463)
  
  Change Details

    Marks GitHub variables as raw sections to prevent Nunjucks from interfering with them during file sync.

  ---

Full Changelog: v15.0.3...v15.0.4