Skip to content

deps: Update mu_msvm to v26.0.3 release#3421

Open
maheeraeron wants to merge 5 commits intomicrosoft:mainfrom
maheeraeron:user/maheeraeron/uefi-update
Open

deps: Update mu_msvm to v26.0.3 release#3421
maheeraeron wants to merge 5 commits intomicrosoft:mainfrom
maheeraeron:user/maheeraeron/uefi-update

Conversation

@maheeraeron
Copy link
Copy Markdown
Contributor

mu_msvm release notes: https://github.com/microsoft/mu_msvm/releases/tag/v26.0.3

This includes a fix to a critical race condition with EfiHvDxe where we freed a page back to DXE core without clearing the RO flags, then try to write to it again after.

Copilot AI review requested due to automatic review settings May 5, 2026 01:12
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the pinned microsoft/mu_msvm UEFI firmware dependency to the v26.0.3 release, aligning both the Nix-based firmware fetch and Flowey pipeline version selection.

Changes:

  • Bump Nix uefi_mu_msvm derivation to download mu_msvm v26.0.3 artifacts.
  • Update Flowey’s central MU_MSVM version constant to 26.0.3.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
nix/uefi_mu_msvm.nix Updates the mu_msvm release URL/version used by Nix to fetch MSVM.fd artifacts.
flowey/flowey_lib_hvlite/src/_jobs/cfg_versions.rs Bumps the Flowey pipeline’s mu_msvm version constant to match the new release.

Comment thread nix/uefi_mu_msvm.nix
Comment on lines +17 to 23
version = "26.0.3";

src = fetchzip {
url =
"https://github.com/microsoft/mu_msvm/releases/download/v26.0.1/RELEASE-${archToolchain}-artifacts.tar.gz";
"https://github.com/microsoft/mu_msvm/releases/download/v26.0.3/RELEASE-${archToolchain}-artifacts.tar.gz";
stripRoot = false;
inherit hash;
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

probably real

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are the hashes coming from the sha256 entries here?:
https://github.com/microsoft/mu_msvm/releases/tag/v26.0.3

RELEASE-X64-VS2022 is: sha256:d8e320f89f0e4871e5dfac6433dde62c4ac96988a192fcd713f12a96ff6c07a5
RELEASE-AARCH64-CLANGPDB is: sha256:255fbd69f1cf1d3d769d8bad20e1533fe1fcde3436f53bd94d8d387fbbad70f6

The format looks different than what is on this file right now?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like it comes from some nix tool that you can get in linux, but there is some more conversion needed

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

right you need to build nix locally otherwise this update will break it. if you're not ready to update this, you should hold off.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ran sudo nix-shell --pure twice after emtpying those hash strings. The first one failed for x64 with:

unpacking source archive /build/RELEASE-X64-VS2022-artifacts.tar.gz
error: hash mismatch in fixed-output derivation '/nix/store/01c33fsp6vix5agcqkng26w6lcm22gkk-source.drv':
         specified: sha256-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
            got:    sha256-yThByWhaSWNPAdUyBrqzdY1VT/QIzf+yopFumoigajc=

And the second time fails for arm64 (after populating x64):

unpacking source archive /build/RELEASE-AARCH64-CLANGPDB-artifacts.tar.gz
error: hash mismatch in fixed-output derivation '/nix/store/lbj91hwmdv458pnp5602j8kl7wi4gj5y-source.drv':
         specified: sha256-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
            got:    sha256-L1xRlkfek0cajN55neRPnaBjFQnz/G3liZPLzIf2WD4=

These hashes match the state of what's in the PR today, so should be good to go

@maheeraeron maheeraeron marked this pull request as ready for review May 5, 2026 20:58
@maheeraeron maheeraeron requested a review from a team as a code owner May 5, 2026 20:58
Copilot AI review requested due to automatic review settings May 6, 2026 21:25
Comment thread nix/update_hashes.py Outdated
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

Comment thread nix/update_hashes.py Outdated
Comment thread nix/update_hashes.py Outdated
Comment thread nix/update_hashes.py Outdated
Copilot AI review requested due to automatic review settings May 9, 2026 00:08
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

@maheeraeron maheeraeron enabled auto-merge (squash) May 9, 2026 04:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants