{"id":19109,"date":"2021-08-09T11:10:13","date_gmt":"2021-08-09T19:10:13","guid":{"rendered":"https:\/\/devblogs.microsoft.com\/powershell\/?p=19109"},"modified":"2021-08-09T11:10:13","modified_gmt":"2021-08-09T19:10:13","slug":"powershell-for-visual-studio-code-august-2021-update","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/powershell\/powershell-for-visual-studio-code-august-2021-update\/","title":{"rendered":"PowerShell for Visual Studio Code August 2021 Update"},"content":{"rendered":"
We are excited to announce that an update to our PowerShell extension<\/a> is now available on the Visual Studio Code Marketplace<\/a>. This blog will explain what is new in this release as well as what you can expect from extension updates in the coming months.<\/p>\n

<\/a>What’s new in the PowerShell Extension release<\/h2>\n

This release includes the near-completion of the CI\/CD Infrastructure Project<\/a>. While our release cadence already doubled over the past six months, the final major piece of this effort is complete: with PRs #3461<\/a> and #1528<\/a> (among others) the release process has been fully automated.<\/p>\n

This means that we can now release the extension any time we like and spend more time building features and fixing bugs! The release process and versioning scheme are fully documented<\/a>, but in short:<\/p>\n

    \n
  1. A maintainer (me) invokes the New-Release<\/code> function from the revamped ReleaseTools<\/code> module<\/a> and supplies the new version numbers.<\/li>\n
  2. The module queries GitHub for all merged Pull Requests since the last release and auto-generates the CHANGELOG<\/a> entry, complete with emoji, links to closed bugs, descriptions of work, and thanks to contributors.<\/li>\n
  3. The module automatically increments every required version number field in both projects, including tertiary information such as the preview<\/code> flag, description, and icon (which now differs for the stable and preview channels). This prevents the recurrence of bugs where our versions were mismatched, or the stable extension was marked as “preview” in the marketplace.<\/li>\n
  4. The module automatically pushes the release<\/code> branch to GitHub for both repositories with these changes and opens a Pull Request for the next release.<\/li>\n
  5. A maintainer (me) reviews the changelog and when satisfied with any edits, pushes the release<\/code> branches to our internal Azure DevOps mirrors.<\/li>\n
  6. This push kicks off Azure Pipelines which complete the rest of the process: PowerShell Editor Services is built, tested, and signed. The ReleaseTools<\/code> module is used by the pipeline to create a draft GitHub release with the signed bits directly uploaded from the secure build agent. The completion of this pipeline triggers the PowerShell Extension’s pipeline and supplies it with the signed Editor Services bits. This pipeline similarly builds, tests, and signs the extension. The module is then used again to create its draft GitHub release, and then waits for manual approval.<\/li>\n
  7. Finally, after manual verification of the extension, a maintainer approves the final deployment step of the pipeline, which automatically uploads the extension to the Visual Studio Code Marketplace directly from the build agent (it also publishes our Install-VSCode.ps1<\/code> script to the PowerShell Gallery).<\/li>\n<\/ol>\n

    A key improvement is that last step, where the published bits come directly<\/em> from the secure build agents. Previously, a maintainer had to download the bits to their development machine and then upload them manually to all the release locations (GitHub, VS Code Marketplace, PowerShell Gallery). It is well known that the introduction of a developer’s machine into this workflow is a key point of security failure. Eliminating this step took a herculean effort to coordinate updated build pipelines that automated each step perfectly, moved the pipeline assets along only after signing and verification, ensured that each pipeline used and recorded the correct sources and bits, and asked for just enough manual approval for verification.<\/p>\n

    In addition to this CI\/CD Infrastructure work (which frankly took the bulk of our time), I’d like to highlight several other improvements:<\/p>\n