From 51c48adb8c5ae62abccc867cec3f358a8a4ff1d7 Mon Sep 17 00:00:00 2001
From: Jinbo Wang <jinbwan@microsoft.com>
Date: Fri, 21 Mar 2025 10:07:03 +0800
Subject: [PATCH 1/7] Onboard pipelines to MicroBuild

---
 .azure-pipelines/signjars-nightly.yml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/.azure-pipelines/signjars-nightly.yml b/.azure-pipelines/signjars-nightly.yml
index 8f405a72..14e393f7 100644
--- a/.azure-pipelines/signjars-nightly.yml
+++ b/.azure-pipelines/signjars-nightly.yml
@@ -45,6 +45,23 @@ extends:
             steps:
               - checkout: self
                 fetchTags: true
+              - task: UsePythonVersion@0
+                displayName: 'Use Python 3.11.x'
+                inputs:
+                  versionSpec: 3.11.x
+              - task: UseDotNet@2
+                displayName: 'Use .NET Core 3.1.x'
+                inputs:
+                  packageType: 'sdk'
+                  version: '3.1.x'
+              - task: MicroBuildSigningPlugin@4
+                displayName: 'Install Signing Plugin'
+                inputs:
+                  signType: real
+                  azureSubscription: 'MicroBuild Signing Task (MSEng)'
+                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
+                env:
+                  SYSTEM_ACCESSTOKEN: $(System.AccessToken)
               - task: JavaToolInstaller@0
                 displayName: Use Java 21
                 inputs:

From 5a0e525eef1bdb842b79a645053dc0eee875d035 Mon Sep 17 00:00:00 2001
From: Jinbo Wang <jinbwan@microsoft.com>
Date: Fri, 21 Mar 2025 10:33:02 +0800
Subject: [PATCH 2/7] onboard code sign to microbuild

---
 .azure-pipelines/signjars-nightly.yml |  80 +++---------
 .azure-pipelines/signjars-rc.yml      | 179 +++++++-------------------
 2 files changed, 62 insertions(+), 197 deletions(-)

diff --git a/.azure-pipelines/signjars-nightly.yml b/.azure-pipelines/signjars-nightly.yml
index 14e393f7..19ab29ba 100644
--- a/.azure-pipelines/signjars-nightly.yml
+++ b/.azure-pipelines/signjars-nightly.yml
@@ -87,38 +87,16 @@ extends:
 
                     mkdir -p jars
                     mv .repository/com/microsoft/java/com.microsoft.java.debug.core/$RELEASE_VERSION/com.microsoft.java.debug.core*.jar jars/
-              - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@5
-                displayName: Sign core.jar
+              - task: CmdLine@2
+                displayName: Sign core jars
                 inputs:
-                  ConnectedServiceName: $(ConnectedServiceName)
-                  AppRegistrationClientId: $(AppRegistrationClientId)
-                  AppRegistrationTenantId: $(AppRegistrationTenantId)
-                  AuthAKVName: $(AuthAKVName)
-                  AuthCertName: $(AuthCertName)
-                  AuthSignCertName: $(AuthSignCertName)
-                  FolderPath: jars
-                  Pattern: com.microsoft.java.debug.core*.jar
-                  signConfigType: inlineSignParams
-                  inlineOperation: |-
-                    [
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaSign",
-                        "Parameters" : {
-                            "SigAlg" : "SHA256withRSA",
-                            "Timestamp" : "-tsa http://sha256timestamp.ws.digicert.com/sha256/timestamp"
-                        },
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      },
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaVerify",
-                        "Parameters" : {},
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      }
-                    ]
+                  script: |
+                    files=$(find . -type f -name "com.microsoft.java.debug.core*.jar")
+                    for file in $files; do
+                        fileName=$(basename "$file")
+                        dotnet "$MBSIGN_APPFOLDER/DDSignFiles.dll" -- /file:"$fileName" /certs:100010171
+                    done
+                  workingDirectory: 'jars'
               - task: CmdLine@2
                 displayName: install signed core.jar
                 inputs:
@@ -133,38 +111,16 @@ extends:
 
                     mkdir -p jars
                     mv .repository/com/microsoft/java/com.microsoft.java.debug.plugin/$RELEASE_VERSION/com.microsoft.java.debug.plugin*.jar jars/
-              - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@5
-                displayName: Sign plugin.jar
+              - task: CmdLine@2
+                displayName: Sign plugin jars
                 inputs:
-                  ConnectedServiceName: $(ConnectedServiceName)
-                  AppRegistrationClientId: $(AppRegistrationClientId)
-                  AppRegistrationTenantId: $(AppRegistrationTenantId)
-                  AuthAKVName: $(AuthAKVName)
-                  AuthCertName: $(AuthCertName)
-                  AuthSignCertName: $(AuthSignCertName)
-                  FolderPath: jars
-                  Pattern: com.microsoft.java.debug.plugin*.jar
-                  signConfigType: inlineSignParams
-                  inlineOperation: |-
-                    [
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaSign",
-                        "Parameters" : {
-                            "SigAlg" : "SHA256withRSA",
-                            "Timestamp" : "-tsa http://sha256timestamp.ws.digicert.com/sha256/timestamp"
-                        },
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      },
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaVerify",
-                        "Parameters" : {},
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      }
-                    ]
+                  script: |
+                    files=$(find . -type f -name "com.microsoft.java.debug.plugin*.jar")
+                    for file in $files; do
+                        fileName=$(basename "$file")
+                        dotnet "$MBSIGN_APPFOLDER/DDSignFiles.dll" -- /file:"$fileName" /certs:100010171
+                    done
+                  workingDirectory: 'jars'
               - task: CopyFiles@2
                 displayName: "Copy plugin.jar to: $(Build.ArtifactStagingDirectory)"
                 inputs:
diff --git a/.azure-pipelines/signjars-rc.yml b/.azure-pipelines/signjars-rc.yml
index c0c11e6c..e7c63f55 100644
--- a/.azure-pipelines/signjars-rc.yml
+++ b/.azure-pipelines/signjars-rc.yml
@@ -44,6 +44,23 @@ extends:
             steps:
               - checkout: self
                 fetchTags: true
+              - task: UsePythonVersion@0
+                displayName: 'Use Python 3.11.x'
+                inputs:
+                  versionSpec: 3.11.x
+              - task: UseDotNet@2
+                displayName: 'Use .NET Core 3.1.x'
+                inputs:
+                  packageType: 'sdk'
+                  version: '3.1.x'
+              - task: MicroBuildSigningPlugin@4
+                displayName: 'Install Signing Plugin'
+                inputs:
+                  signType: real
+                  azureSubscription: 'MicroBuild Signing Task (MSEng)'
+                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
+                env:
+                  SYSTEM_ACCESSTOKEN: $(System.AccessToken)
               - task: JavaToolInstaller@0
                 displayName: Use Java 21
                 inputs:
@@ -71,38 +88,16 @@ extends:
 
                     mkdir -p jars
                     mv .repository/com/microsoft/java/com.microsoft.java.debug.core/$RELEASE_VERSION/com.microsoft.java.debug.core*.jar jars/
-              - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@5
-                displayName: Sign core.jar
+              - task: CmdLine@2
+                displayName: Sign core jars
                 inputs:
-                  ConnectedServiceName: $(ConnectedServiceName)
-                  AppRegistrationClientId: $(AppRegistrationClientId)
-                  AppRegistrationTenantId: $(AppRegistrationTenantId)
-                  AuthAKVName: $(AuthAKVName)
-                  AuthCertName: $(AuthCertName)
-                  AuthSignCertName: $(AuthSignCertName)
-                  FolderPath: jars
-                  Pattern: com.microsoft.java.debug.core*.jar
-                  signConfigType: inlineSignParams
-                  inlineOperation: |-
-                    [
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaSign",
-                        "Parameters" : {
-                            "SigAlg" : "SHA256withRSA",
-                            "Timestamp" : "-tsa http://sha256timestamp.ws.digicert.com/sha256/timestamp"
-                        },
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      },
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaVerify",
-                        "Parameters" : {},
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      }
-                    ]
+                  script: |
+                    files=$(find . -type f -name "com.microsoft.java.debug.core*.jar")
+                    for file in $files; do
+                        fileName=$(basename "$file")
+                        dotnet "$MBSIGN_APPFOLDER/DDSignFiles.dll" -- /file:"$fileName" /certs:100010171
+                    done
+                  workingDirectory: 'jars'
               - task: CmdLine@2
                 displayName: install signed core.jar
                 inputs:
@@ -116,84 +111,20 @@ extends:
 
                     mkdir -p jars
                     mv .repository/com/microsoft/java/com.microsoft.java.debug.plugin/$RELEASE_VERSION/com.microsoft.java.debug.plugin*.jar jars/
-              - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@5
-                displayName: Sign plugin.jar
+              - task: CmdLine@2
+                displayName: Sign plugin jars
                 inputs:
-                  ConnectedServiceName: $(ConnectedServiceName)
-                  AppRegistrationClientId: $(AppRegistrationClientId)
-                  AppRegistrationTenantId: $(AppRegistrationTenantId)
-                  AuthAKVName: $(AuthAKVName)
-                  AuthCertName: $(AuthCertName)
-                  AuthSignCertName: $(AuthSignCertName)
-                  FolderPath: jars
-                  Pattern: com.microsoft.java.debug.plugin*.jar
-                  signConfigType: inlineSignParams
-                  inlineOperation: |-
-                    [
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaSign",
-                        "Parameters" : {
-                            "SigAlg" : "SHA256withRSA",
-                            "Timestamp" : "-tsa http://sha256timestamp.ws.digicert.com/sha256/timestamp"
-                        },
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      },
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaVerify",
-                        "Parameters" : {},
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      }
-                    ]
+                  script: |
+                    files=$(find . -type f -name "com.microsoft.java.debug.plugin*.jar")
+                    for file in $files; do
+                        fileName=$(basename "$file")
+                        dotnet "$MBSIGN_APPFOLDER/DDSignFiles.dll" -- /file:"$fileName" /certs:100010171
+                    done
+                  workingDirectory: 'jars'
               - task: CmdLine@2
                 displayName: install signed plugin.jar
                 inputs:
                   script: cp jars/com.microsoft.java.debug.plugin*.jar .repository/com/microsoft/java/com.microsoft.java.debug.plugin/$RELEASE_VERSION/
-              - task: CmdLine@2
-                displayName: Build p2 artifacts
-                inputs:
-                  script: |-
-                    # 3. Build the p2 artifacts.
-                    ./mvnw clean package -f com.microsoft.java.debug.repository/pom.xml -Dmaven.repo.local=./.repository
-
-                    mkdir -p p2/target
-                    cp -r  com.microsoft.java.debug.repository/target/repository p2/target/
-                    cp com.microsoft.java.debug.repository/pushToBintray.sh p2/
-              - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@5
-                displayName: Sign p2
-                inputs:
-                  ConnectedServiceName: $(ConnectedServiceName)
-                  AppRegistrationClientId: $(AppRegistrationClientId)
-                  AppRegistrationTenantId: $(AppRegistrationTenantId)
-                  AuthAKVName: $(AuthAKVName)
-                  AuthCertName: $(AuthCertName)
-                  AuthSignCertName: $(AuthSignCertName)
-                  FolderPath: p2
-                  Pattern: "*.jar"
-                  signConfigType: inlineSignParams
-                  inlineOperation: |-
-                    [
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaSign",
-                        "Parameters" : {
-                            "SigAlg" : "SHA256withRSA",
-                            "Timestamp" : "-tsa http://sha256timestamp.ws.digicert.com/sha256/timestamp"
-                        },
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      },
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaVerify",
-                        "Parameters" : {},
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      }
-                    ]
               - task: CmdLine@2
                 displayName: build m2 artifacts
                 inputs:
@@ -214,38 +145,16 @@ extends:
                     mkdir -p m2/com.microsoft.java.debug.plugin
                     cp com.microsoft.java.debug.plugin/target/com.microsoft.java.debug.plugin*.jar m2/com.microsoft.java.debug.plugin
                     cp com.microsoft.java.debug.plugin/pom.xml m2/com.microsoft.java.debug.plugin/com.microsoft.java.debug.plugin-$RELEASE_VERSION.pom
-              - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@5
-                displayName: Sign m2
+              - task: CmdLine@2
+                displayName: Sign m2 jars
                 inputs:
-                  ConnectedServiceName: $(ConnectedServiceName)
-                  AppRegistrationClientId: $(AppRegistrationClientId)
-                  AppRegistrationTenantId: $(AppRegistrationTenantId)
-                  AuthAKVName: $(AuthAKVName)
-                  AuthCertName: $(AuthCertName)
-                  AuthSignCertName: $(AuthSignCertName)
-                  FolderPath: m2
-                  Pattern: "*.jar"
-                  signConfigType: inlineSignParams
-                  inlineOperation: |-
-                    [
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaSign",
-                        "Parameters" : {
-                            "SigAlg" : "SHA256withRSA",
-                            "Timestamp" : "-tsa http://sha256timestamp.ws.digicert.com/sha256/timestamp"
-                        },
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      },
-                      {
-                        "KeyCode" : "CP-447347-Java",
-                        "OperationCode" : "JavaVerify",
-                        "Parameters" : {},
-                        "ToolName" : "sign",
-                        "ToolVersion" : "1.0"
-                      }
-                    ]
+                  script: |
+                    files=$(find . -type f -name "*.jar")
+                    for file in $files; do
+                        fileName=$(basename "$file")
+                        dotnet "$MBSIGN_APPFOLDER/DDSignFiles.dll" -- /file:"$fileName" /certs:100010171
+                    done
+                  workingDirectory: 'm2'
               - task: CopyFiles@2
                 displayName: "Copy p2/m2 to: $(Build.ArtifactStagingDirectory)"
                 inputs:

From 653399c69077ae7d92e176978ef3c8356808c6c9 Mon Sep 17 00:00:00 2001
From: Jinbo Wang <jinbwan@microsoft.com>
Date: Fri, 21 Mar 2025 10:35:35 +0800
Subject: [PATCH 3/7] remove p2 copy logic

---
 .azure-pipelines/signjars-rc.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.azure-pipelines/signjars-rc.yml b/.azure-pipelines/signjars-rc.yml
index e7c63f55..a4b02181 100644
--- a/.azure-pipelines/signjars-rc.yml
+++ b/.azure-pipelines/signjars-rc.yml
@@ -156,10 +156,9 @@ extends:
                     done
                   workingDirectory: 'm2'
               - task: CopyFiles@2
-                displayName: "Copy p2/m2 to: $(Build.ArtifactStagingDirectory)"
+                displayName: "Copy m2 to: $(Build.ArtifactStagingDirectory)"
                 inputs:
                   Contents: |+
-                    p2/**
                     m2/**
 
                   TargetFolder: $(Build.ArtifactStagingDirectory)

From d9b5fdd3b2eec3f8fb2be4be18e6642c769ea1d3 Mon Sep 17 00:00:00 2001
From: Jinbo Wang <jinbwan@microsoft.com>
Date: Fri, 21 Mar 2025 10:36:50 +0800
Subject: [PATCH 4/7] remove p2 buildartifact dir

---
 .azure-pipelines/signjars-rc.yml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/.azure-pipelines/signjars-rc.yml b/.azure-pipelines/signjars-rc.yml
index a4b02181..d63a9b19 100644
--- a/.azure-pipelines/signjars-rc.yml
+++ b/.azure-pipelines/signjars-rc.yml
@@ -37,10 +37,6 @@ extends:
                   artifactName: m2
                   targetPath: $(Build.ArtifactStagingDirectory)/m2
                   displayName: "Publish Artifact: m2"
-                - output: pipelineArtifact
-                  artifactName: p2
-                  targetPath: $(Build.ArtifactStagingDirectory)/p2
-                  displayName: "Publish Artifact: p2"
             steps:
               - checkout: self
                 fetchTags: true
@@ -160,5 +156,4 @@ extends:
                 inputs:
                   Contents: |+
                     m2/**
-
                   TargetFolder: $(Build.ArtifactStagingDirectory)

From 1d6ae10c652049a7206369946494119cea3db6cc Mon Sep 17 00:00:00 2001
From: Jinbo Wang <jinbwan@microsoft.com>
Date: Fri, 21 Mar 2025 10:43:46 +0800
Subject: [PATCH 5/7] use MicroBuild to publish to maven

---
 .azure-pipelines/publish-to-maven.yml | 100 ++++++++++++++++++++++++++
 1 file changed, 100 insertions(+)
 create mode 100644 .azure-pipelines/publish-to-maven.yml

diff --git a/.azure-pipelines/publish-to-maven.yml b/.azure-pipelines/publish-to-maven.yml
new file mode 100644
index 00000000..58dc58cf
--- /dev/null
+++ b/.azure-pipelines/publish-to-maven.yml
@@ -0,0 +1,100 @@
+name: $(Date:yyyyMMdd).$(Rev:r)
+resources:
+  repositories:
+    - repository: MicroBuildTemplate
+      type: git
+      name: 1ESPipelineTemplates/MicroBuildTemplate
+      ref: refs/tags/release
+trigger: none
+extends:
+  template: azure-pipelines/1ES.Official.Publish.yml@MicroBuildTemplate
+  parameters:
+    pool:
+      os: linux
+      name: 1ES_JavaTooling_Pool
+      image: 1ES_JavaTooling_Ubuntu-2004
+    sdl:
+      sourceAnalysisPool:
+        name: 1ES_JavaTooling_Pool
+        image: 1ES_JavaTooling_Windows_2022
+        os: windows
+    stages:
+    - stage: PublishToMaven
+      jobs:
+      - job: PublishToMaven
+        steps:
+        - task: DownloadBuildArtifacts@1
+          displayName: 'Download Jar Artifacts'
+          inputs:
+            buildType: specific
+            project: 'a4d27ce2-a42d-4b71-8eef-78cee9a9728e'
+            pipeline: 16486
+            downloadType: specific
+            extractTars: false
+            itemPattern: 'm2/**'
+        - script: |
+            echo "import public key"
+            echo $GPG_PUBLIC_B64 | base64 -d | gpg --import
+
+            echo "import secret key"
+            echo $GPG_SECRET_B64 | base64 -d | gpg --batch --passphrase $GPGPASS --import
+          displayName: 'import GPG keys'
+          env:
+            GPG_PUBLIC_B64: $(GPG_PUBLIC_B64)
+            GPG_SECRET_B64: $(GPG_SECRET_B64)
+            GPGPASS: $(GPGPASS)
+        - task: NodeTool@0
+          displayName: 'Use Node 20.x'
+          inputs:
+            versionSpec: 20.x
+        - script: |
+            cd $(System.ArtifactsDirectory)/m2
+            pluginJarFile=$(basename -- java-debug-parent/*.pom)
+
+            # remove .* from end
+            noExt=${pluginJarFile%.*}
+
+            # remove *- from start
+            export releaseVersion=${noExt##*-} 
+            echo $releaseVersion
+
+            export artifactFolder=$(pwd .)
+            wget https://raw.githubusercontent.com/microsoft/java-debug/master/scripts/publishMaven.js
+
+            export GPG_TTY=$(tty)
+            node publishMaven.js -task gpg
+          displayName: 'sign artifacts'
+          env:
+            GPG_PUBLIC_B64: $(GPG_PUBLIC_B64)
+            GPG_SECRET_B64: $(GPG_SECRET_B64)
+            GPGPASS: $(GPGPASS)
+            NEXUS_OSSRHPASS: $(NEXUS_OSSRHPASS)
+            NEXUS_OSSRHUSER: $(NEXUS_OSSRHUSER)
+            NEXUS_STAGINGPROFILEID: $(NEXUS_STAGINGPROFILEID)
+        - template: MicroBuild.Publish.yml@MicroBuildTemplate
+          parameters: 
+            intent: 'PackageDistribution'
+            contentType: 'Maven'
+            contentSource: 'Folder'
+            folderLocation: '$(System.ArtifactsDirectory)/m2/java-debug-parent'
+            waitForReleaseCompletion: true
+            owners: 'jinbwan@microsoft.com'
+            approvers: 'roml@microsoft.com'
+        - template: MicroBuild.Publish.yml@MicroBuildTemplate
+          parameters: 
+            intent: 'PackageDistribution'
+            contentType: 'Maven'
+            contentSource: 'Folder'
+            folderLocation: '$(System.ArtifactsDirectory)/m2/com.microsoft.java.debug.core'
+            waitForReleaseCompletion: true
+            owners: 'jinbwan@microsoft.com'
+            approvers: 'roml@microsoft.com'
+        - template: MicroBuild.Publish.yml@MicroBuildTemplate
+          parameters: 
+            intent: 'PackageDistribution'
+            contentType: 'Maven'
+            contentSource: 'Folder'
+            folderLocation: '$(System.ArtifactsDirectory)/m2/com.microsoft.java.debug.plugin'
+            waitForReleaseCompletion: true
+            owners: 'jinbwan@microsoft.com'
+            approvers: 'roml@microsoft.com'
\ No newline at end of file

From b29da9306f619112424ba69b4003865b7dc6c6ab Mon Sep 17 00:00:00 2001
From: Jinbo Wang <jinbwan@microsoft.com>
Date: Fri, 21 Mar 2025 12:13:31 +0800
Subject: [PATCH 6/7] fix m2 sign path

---
 .azure-pipelines/signjars-rc.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.azure-pipelines/signjars-rc.yml b/.azure-pipelines/signjars-rc.yml
index d63a9b19..201ff20f 100644
--- a/.azure-pipelines/signjars-rc.yml
+++ b/.azure-pipelines/signjars-rc.yml
@@ -147,8 +147,8 @@ extends:
                   script: |
                     files=$(find . -type f -name "*.jar")
                     for file in $files; do
-                        fileName=$(basename "$file")
-                        dotnet "$MBSIGN_APPFOLDER/DDSignFiles.dll" -- /file:"$fileName" /certs:100010171
+                        # fileName=$(basename "$file")
+                        dotnet "$MBSIGN_APPFOLDER/DDSignFiles.dll" -- /file:"$file" /certs:100010171
                     done
                   workingDirectory: 'm2'
               - task: CopyFiles@2

From a30029229bfb5593bbc65bf9599b00035fbfc94a Mon Sep 17 00:00:00 2001
From: Jinbo Wang <jinbwan@microsoft.com>
Date: Fri, 21 Mar 2025 14:13:42 +0800
Subject: [PATCH 7/7] upgrade to actions/cache@v4

---
 .github/workflows/build.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c147c483..71d726f6 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -20,7 +20,7 @@ jobs:
         java-version: '21'
 
     - name: Cache local Maven repository
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -51,7 +51,7 @@ jobs:
         java-version: '21'
 
     - name: Cache local Maven repository
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: $HOME/.m2/repository
         key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -77,7 +77,7 @@ jobs:
         java-version: '21'
 
     - name: Cache local Maven repository
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}