chore: merge dev changes to release branch (#763)

Author: c-ryan-k

.github/workflows/release_workflow.yml

@@ -23,6 +23,7 @@ jobs:
   security:
     permissions:
       # needed to write security info to repository
+      id-token: write
       security-events: write
       contents: read
     uses: ./.github/workflows/security_checks.yml

.github/workflows/security_checks.yml

@@ -6,6 +6,7 @@ on:
     branches:
       - dev
       - feature/*
+      - release/*
   workflow_call:
     inputs:
       continue-on-error:
@@ -20,6 +21,7 @@ jobs:
     runs-on: windows-latest
     permissions:
       # needed to write security info to repository
+      id-token: write
       security-events: write
       contents: read
     steps:

.github/workflows/stage_release.yml

@@ -18,7 +18,7 @@ jobs:
       - name: Setup python
         uses: actions/setup-python@v5
         with:
-            python-version: "3.13"
+          python-version: "3.13"
       - name: Install and determine version
         run: |
           wheel=$(find ./release/*.whl)
@@ -39,6 +39,14 @@ jobs:
           echo tag: "${{ env.tag }}"
           echo version: "${{ env.version }}"
           echo wheel: "${{ env.wheel }}"
-          gh release create "${{ env.tag }}" --generate-notes -d -t "azure-iot ${{ env.version }}" "${{ env.wheel }}" "./SBOM.zip#SBOM" --repo "${{ github.repository }}"
+          echo target: "${{ github.ref }}"
+          gh release create --draft \
+          "${{ env.tag }}" \
+          "${{ env.wheel }}" \
+          "./SBOM.zip#SBOM" \
+          --repo "${{ github.repository }}" \
+          --target "${{ github.ref }}" \
+          --title "azure-iot ${{ env.version }}" \
+          --generate-notes
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/trigger_ado_int_tests.yml

@@ -170,12 +170,12 @@ jobs:
           # if status is not completed, or the result is one of failed, canceled; then fail the job
           if [[ "$status" != "completed" || "$result" =~ (failed|canceled) ]]; then
             echo "::error::Pipeline did not complete successfully"
-            echo "# ❌ ${PIPELINE:-$DEFAULT_TITLE} Failed ❌" >> $GITHUB_STEP_SUMMARY
+            echo "# [FAILED] ${PIPELINE:-$DEFAULT_TITLE} Failed [FAILED]" >> $GITHUB_STEP_SUMMARY
             echo "The pipeline did not complete successfully. Please check the logs [here](${PORTAL_URL})" >> $GITHUB_STEP_SUMMARY
             exit 1
           fi
 
-          echo "# ✅ ${PIPELINE:-$DEFAULT_TITLE} Completed ✅" >> $GITHUB_STEP_SUMMARY
+          echo "# [SUCCESS] ${PIPELINE:-$DEFAULT_TITLE} Completed [SUCCESS]" >> $GITHUB_STEP_SUMMARY
           echo "The pipeline completed successfully. You can check the logs [here](${PORTAL_URL})" >> $GITHUB_STEP_SUMMARY
   CancelPipeline:
     runs-on: ubuntu-latest
@@ -200,5 +200,5 @@ jobs:
             -H "Content-Type: application/json" \
             -d '{"status": "cancelling"}' \
             "${RUN_URL}?api-version=7.2-preview.7"
-          echo "# ❌ ${PIPELINE:-$DEFAULT_TITLE} Cancelled ❌" >> $GITHUB_STEP_SUMMARY
+          echo "# [CANCELLED] ${PIPELINE:-$DEFAULT_TITLE} Cancelled [CANCELLED]" >> $GITHUB_STEP_SUMMARY
           echo "The pipeline was cancelled. You can check the logs [here](${PORTAL_URL})" >> $GITHUB_STEP_SUMMARY