Also add the `mac_geckodriver` behavior, and remove the unused `mac_pkg` behavior.
Differential Revision: https://phabricator.services.mozilla.com/D36690
--HG--
extra : moz-landing-system : lando
For mac hardened runtime signing, we use an entitlements file that's now
in-tree. This patch passes the url for that file in the task definition.
The original patch for this was written by sfraser.
Differential Revision: https://phabricator.services.mozilla.com/D33859
--HG--
extra : rebase_source : 38485a646b2e5bb22a55744cc88d20c55f84b279
extra : source : 548486142c1b957643d7dea883b92743d2fd70d7
This moves mac signing tasks to the notarization/iscript pool. It also
adds support for pkg installers and notarization.
Differential Revision: https://phabricator.services.mozilla.com/D33857
--HG--
extra : rebase_source : ee50dec3cbe1a55e476f4fc6c4e03db990e18ea7
There are a number of ways we want to vary workers over time and jobs, including
- we are working on migrating to gce
- pgo builds have a dedicated worker-type for running the instrumented build
at level 3 but not level 1
Rather than have all tasks know about how the machines are provisioned, this
moves to using short-names for the worker types, and then has a config mapping
those to the actual worker types.
This adds support for aliases, and an initial set of them. Follow up work will
switch the existing uses of these worker types to using the aliases.
Differential Revision: https://phabricator.services.mozilla.com/D22549
--HG--
extra : moz-landing-system : lando
Supports partner builds on esr60 by re-arranging how we specify the manifest repositories, which are different for esr60 compared to beta+release. The defaults for enabling partners and EME-free now depend on the partner-urls definition in taskcluster/ci/config.yml.
This patch also adds support for partner & EMEfree repacks in try staging releases, for all the various release branches. It makes release_level available early in the decision task (for the release promotion action) where a Parameters object is not available. Signing worker type is no longer hard-coded, and we use level-1 secrets for querying Github (via bug 1513375).
Differential Revision: https://phabricator.services.mozilla.com/D15185
--HG--
extra : moz-landing-system : lando
We don't apply schema defaults, since when `taskgraph.fast`, we skip validation --
which if we were using the result of applying defaults would mean that
behavior changes when we skip validation.
Differential Revision: https://phabricator.services.mozilla.com/D7381
--HG--
extra : moz-landing-system : lando
The release-update-verify-config task requires that the versions passed
to it match up with what's been released. The version of Thunderbird
does not necessarily match the Gecko version it's based on.
Depends on D6509
Differential Revision: https://phabricator.services.mozilla.com/D6510
--HG--
extra : moz-landing-system : lando
yaml.load() can evaluate arbitrary Python code via syntax such as
`!!python/object/apply:os.system`. Seriously.
Let's switch taskgraph to yaml.safe_load(), which is reasonable
about limiting magic.
Differential Revision: https://phabricator.services.mozilla.com/D1736
If we're not passed `release_partner_config` in the input, let's poll github for it in the action.
MozReview-Commit-ID: 2swx76vhTE5
--HG--
extra : rebase_source : d16c517348e506519bc6e6296ad7a0cb2f90527c
extra : source : 3ad2e53b051d48a54dfb1cf88b743ed4d9571ff6
This was useful when we still had buildbot-based build jobs, but all
it achieves nowadays is add friction when adding new build jobs on
taskcluster.
--HG--
extra : rebase_source : aa6a21a875eff1888c16900acf6d01ff37ab832b
This allows firefox and thunderbird builds to avoid using each others bits.
MozReview-Commit-ID: KYQYDd2tkGj
--HG--
extra : rebase_source : 42f1d13ec609f066cb3bd3050ed894296b72d982
Aki Sasaki
Tom Prince
Nick Thomas
Rob Lemley
Gregory Szorc
Mike Hommey