Skip to content

Modernize release workflow for v1.9.x releases#443

Merged
jozefizso merged 11 commits intoreleases/netoffice_v1.9.8from
dev/release_workflow_dotnet_sign
Nov 3, 2025
Merged

Modernize release workflow for v1.9.x releases#443
jozefizso merged 11 commits intoreleases/netoffice_v1.9.8from
dev/release_workflow_dotnet_sign

Conversation

@jozefizso
Copy link
Member

@jozefizso jozefizso commented Nov 2, 2025

To continue releasing bugfixes in the v1.9 train the release workflow is modernized with support for Azure Trusted Signing and NuGet Trusted Publishing.

The workflow will use federated OIDC logins to Azure and NuGet to minimize secret tokens management.

Workflow is split to two parts. Release will build and digitally signed NetOffice assemblies and it will create the legacy archive and all nuget packages. As the Azure Trusted Signing is used short lived three day certificates and the NuGet Gallery does not support the Public Trust Identity EKU yet (see NuGet/NuGetGallery#10027), developer must manually download the certificate artifact and upload the .cer file to NuGet Account for NetOffice.

The nuget-gallery environment is gated by manual approval, so the second part of the release workflow will run only after the certificate was uploaded to NuGet Gallyer account.

@jozefizso jozefizso added this to the 1.9.8 milestone Nov 2, 2025
@jozefizso jozefizso self-assigned this Nov 2, 2025
@jozefizso jozefizso merged commit fefd4d3 into releases/netoffice_v1.9.8 Nov 3, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants