▶ [patch] #6185
Fixed quarantine worker 'reason' field schema to be optional.
▶ [patch] #6058
Generic Worker no longer modifies the Access Control Lists of the Interactive Desktop and the associated Windows Station unless additional OS groups have been specified in the task payload osGroups property. Previously Generic Worker would modify the ACLs of these objects even if the access token it was using for launching task command processes already had suitable permissions. This patch is a workaround for a more general issue, which is that the ACL modifications seem not to be appropriate in all cases when a new access token is needed. See https://bugzilla.mozilla.org/show_bug.cgi?id=1815711.
There is a likely to be a follow up fix for the ACL modifications that occur when a new access token is required, once it is understood why the current modifications are not always sufficient.
v49.1.1
GENERAL
▶ [patch]
Generic worker feature task.Payload.OnExitStatus.PurgeCaches now only purges caches related to the task, instead of all caches on the worker.
USERS
▶ [patch] #5773
Fix UI bug when user profile was missing and causing whole page to crash.
▶ [patch] bug 1590886
Github status handler listens to both taskPending and taskRunning events.
v49.1.0
ADMINS
▶ [minor] bug 1826417
Changes the way expire-artifacts works. It uses a separate function to fetch all expired artifacts and then uses bulk delete to remove them from S3 and the database.
v49.0.0
GENERAL
▶ [patch]
Builds and tests generic worker (multiuser) on macOS Ventura 13 on new, arm64 machines.
USERS
▶ [MAJOR]
Remove python 3.6 support as it's past its end-of-life date.
Add python 3.10 and python 3.11 support.
▶ [minor] #6147
Adds task.payload.onExitStatus.purgeCaches feature to generic worker to bring to parity with an existing docker worker feature.
purgeCaches is an array of exit status code integers that the user wants all caches associated with the task to be purged.
▶ [patch] #6185
Fixed quarantine worker 'reason' field schema to be optional.
▶ [patch] #6058
Generic Worker no longer modifies the Access Control Lists of the Interactive Desktop and the associated Windows Station unless additional OS groups have been specified in the task payload osGroups property. Previously Generic Worker would modify the ACLs of these objects even if the access token it was using for launching task command processes already had suitable permissions. This patch is a workaround for a more general issue, which is that the ACL modifications seem not to be appropriate in all cases when a new access token is needed. See https://bugzilla.mozilla.org/show_bug.cgi?id=1815711.
There is a likely to be a follow up fix for the ACL modifications that occur when a new access token is required, once it is understood why the current modifications are not always sufficient.
v49.1.1
GENERAL
▶ [patch]
Generic worker feature task.Payload.OnExitStatus.PurgeCaches now only purges caches related to the task, instead of all caches on the worker.
USERS
▶ [patch] #5773
Fix UI bug when user profile was missing and causing whole page to crash.
▶ [patch] bug 1590886
Github status handler listens to both taskPending and taskRunning events.
v49.1.0
ADMINS
▶ [minor] bug 1826417
Changes the way expire-artifacts works. It uses a separate function to fetch all expired artifacts and then uses bulk delete to remove them from S3 and the database.
v49.0.0
GENERAL
▶ [patch]
Builds and tests generic worker (multiuser) on macOS Ventura 13 on new, arm64 machines.
USERS
▶ [MAJOR]
Remove python 3.6 support as it's past its end-of-life date.
Add python 3.10 and python 3.11 support.
▶ [minor] #6147
Adds task.payload.onExitStatus.purgeCaches feature to generic worker to bring to parity with an existing docker worker feature.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps taskcluster from 44.23.4 to 49.1.2.
Release notes
Sourced from taskcluster's releases.
... (truncated)
Changelog
Sourced from taskcluster's changelog.
... (truncated)
Commits
2cfb94f
v49.1.2e650784
Merge pull request #6188 from taskcluster/bug1815711-workaround39ff956
Merge branch 'main' into bug1815711-workaround149e8a5
Merge pull request #6189 from taskcluster/feat/6185-quarantine-ui-fix6aa7188
feat(queue): Fix quarantine worker payload schema.cd403c9
Bug 1815711 - Add changelog for initial workaround10ac114
Dump some token information4f23a55
Only grant SID Winsta Access when refreshing access token23fb4d2
v49.1.107500e1
Merge pull request #6182 from taskcluster/feat/github-statuses-pendingDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)