U/sgriffin/vc2026

.github/workflows/clang.yml

@@ -24,4 +24,4 @@ jobs:
       with:
         clang-format-version: '17'
         exclude-regex: 'include/*'
-        fallback-style: 'Microsoft'
+        fallback-style: 'Microsoft'

.github/workflows/codeql.yml

@@ -15,7 +15,8 @@ permissions:
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
-    runs-on: windows-latest
+    # Use VS 2026 preview runner (GA May 4, 2026, then switch to windows-2025)
+    runs-on: windows-2025-vs2026
     permissions:
       packages: read
       actions: read
@@ -39,9 +40,32 @@ jobs:
         with:
           submodules: 'recursive'
 
+      - name: Install Windows 11 SDK (10.0.22621.0)
+        shell: pwsh
+        run: |
+          $sdkPath = "${env:ProgramFiles(x86)}\Windows Kits\10\Include\10.0.22621.0"
+          if (Test-Path $sdkPath) {
+            Write-Host "Windows SDK 10.0.22621.0 already installed"
+            exit 0
+          }
+          Write-Host "Downloading Windows 11 SDK 10.0.22621.0..."
+          $installer = "$env:TEMP\winsdksetup.exe"
+          Invoke-WebRequest -Uri "https://go.microsoft.com/fwlink/?linkid=2196241" -OutFile $installer
+          Write-Host "Installing SDK (this may take a few minutes)..."
+          $proc = Start-Process -FilePath $installer -ArgumentList "/features OptionId.DesktopCPPx64 OptionId.DesktopCPPx86 /quiet /norestart /log $env:TEMP\sdk_install.log" -Wait -PassThru
+          Write-Host "Installer exit code: $($proc.ExitCode)"
+          if (Test-Path $sdkPath) {
+            Write-Host "Windows SDK 10.0.22621.0 installed successfully"
+          } else {
+            Write-Host "SDK install log:"
+            Get-Content "$env:TEMP\sdk_install.log" -ErrorAction SilentlyContinue | Select-Object -Last 50
+            Write-Error "Windows SDK installation failed - path not found: $sdkPath"
+            exit 1
+          }
+
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
+        uses: github/codeql-action/init@b5ebac6f4c00c8ccddb7cdcd45fdb248329f808a # v3.32.2
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
@@ -53,11 +77,11 @@ jobs:
           # queries: security-extended,security-and-quality
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
+        uses: github/codeql-action/autobuild@b5ebac6f4c00c8ccddb7cdcd45fdb248329f808a # v3.32.2
 
       - name: Perform CodeQL Analysis
         id: analyze
-        uses: github/codeql-action/analyze@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
+        uses: github/codeql-action/analyze@b5ebac6f4c00c8ccddb7cdcd45fdb248329f808a # v3.32.2
         with:
           category: "/language:${{matrix.language}}"
 

.github/workflows/devskim.yml

@@ -29,11 +29,11 @@ jobs:
         uses: microsoft/DevSkim-Action@4b5047945a44163b94642a1cecc0d93a3f428cc6 # v1.0.16
 
       - name: Upload DevSkim scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
+        uses: github/codeql-action/upload-sarif@b5ebac6f4c00c8ccddb7cdcd45fdb248329f808a # v3.32.2
         with:
           sarif_file: devskim-results.sarif
 
       - name: Upload DevSkim scan results as an artifact
         uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
-          path: devskim-results.sarif
+          path: devskim-results.sarif

.github/workflows/github-ci.yml

@@ -13,7 +13,8 @@ permissions:
 
 jobs:
   build:
-    runs-on: windows-latest
+    # Use VS 2026 preview runner (GA May 4, 2026, then switch to windows-2025)
+    runs-on: windows-2025-vs2026
     permissions:
       security-events: write
     strategy:
@@ -32,6 +33,29 @@ jobs:
       with:
         submodules: 'recursive'
 
+    - name: Install Windows 11 SDK (10.0.22621.0)
+      shell: pwsh
+      run: |
+        $sdkPath = "${env:ProgramFiles(x86)}\Windows Kits\10\Include\10.0.22621.0"
+        if (Test-Path $sdkPath) {
+          Write-Host "Windows SDK 10.0.22621.0 already installed"
+          exit 0
+        }
+        Write-Host "Downloading Windows 11 SDK 10.0.22621.0..."
+        $installer = "$env:TEMP\winsdksetup.exe"
+        Invoke-WebRequest -Uri "https://go.microsoft.com/fwlink/?linkid=2196241" -OutFile $installer
+        Write-Host "Installing SDK (this may take a few minutes)..."
+        $proc = Start-Process -FilePath $installer -ArgumentList "/features OptionId.DesktopCPPx64 OptionId.DesktopCPPx86 /quiet /norestart /log $env:TEMP\sdk_install.log" -Wait -PassThru
+        Write-Host "Installer exit code: $($proc.ExitCode)"
+        if (Test-Path $sdkPath) {
+          Write-Host "Windows SDK 10.0.22621.0 installed successfully"
+        } else {
+          Write-Host "SDK install log:"
+          Get-Content "$env:TEMP\sdk_install.log" -ErrorAction SilentlyContinue | Select-Object -Last 50
+          Write-Error "Windows SDK installation failed - path not found: $sdkPath"
+          exit 1
+        }
+
     - name: "Build"
       shell: pwsh
       run: |
@@ -63,4 +87,4 @@ jobs:
       - name: Publish Test Results
         uses: EnricoMi/publish-unit-test-result-action@27d65e188ec43221b20d26de30f4892fad91df2f # v2.22.0
         with:
-          files: "artifacts/**/*.trx"
+          files: "artifacts/**/*.trx"

.github/workflows/scorecards.yml

@@ -71,6 +71,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
+        uses: github/codeql-action/upload-sarif@b5ebac6f4c00c8ccddb7cdcd45fdb248329f808a # v3.32.2
         with:
           sarif_file: results.sarif

.vsconfig

@@ -29,7 +29,7 @@
 		  "Microsoft.VisualStudio.Component.VC.Tools.ARM64",
 		  "Microsoft.VisualStudio.Component.VC.Tools.ARM64EC",
 		  "Microsoft.VisualStudio.Component.VC.Tools.x86.x64",
-		  "Microsoft.VisualStudio.Component.Windows10SDK.18362",
+		  "Microsoft.VisualStudio.Component.Windows11SDK.22621",
 		  "Microsoft.VisualStudio.ComponentGroup.ArchitectureTools.Native",
 		  "Microsoft.VisualStudio.ComponentGroup.NativeDesktop.Core",
 		  "Microsoft.VisualStudio.Workload.CoreEditor",

Directory.Build.props

@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project>
+  <PropertyGroup>
+    <!-- VS 2026 Toolset -->
+    <PlatformToolset>v145</PlatformToolset>
+
+    <!-- Windows 11 SDK (pinned for reproducible builds) -->
+    <WindowsTargetPlatformVersion>10.0.22621.0</WindowsTargetPlatformVersion>
+
+    <!-- Security Features (PropertyGroup level) -->
+    <!-- Note: Spectre mitigated libs may not be available for ARM64EC -->
+    <SpectreMitigation Condition="'$(Platform)' != 'ARM64EC'">Spectre</SpectreMitigation>
+    <SpectreMitigation Condition="'$(Platform)' == 'ARM64EC'">false</SpectreMitigation>
+    <ControlFlowGuard>Guard</ControlFlowGuard>
+    <GuardEHContMetadata>true</GuardEHContMetadata>
+
+    <!-- CET (Control-flow Enforcement Technology) - not supported on ARM64EC -->
+    <!-- Note: CETCompat must be set at linker level, handled in ItemDefinitionGroup below -->
+  </PropertyGroup>
+
+  <!-- Compiler Settings - Quality & Security Baseline -->
+  <ItemDefinitionGroup>
+    <ClCompile>
+      <WarningLevel>Level4</WarningLevel>
+      <TreatWarningAsError>true</TreatWarningAsError>
+      <SDLCheck>true</SDLCheck>
+      <LanguageStandard>stdcpplatest</LanguageStandard>
+    </ClCompile>
+  </ItemDefinitionGroup>
+
+  <!-- Disable CET for ARM64EC (not supported) -->
+  <ItemDefinitionGroup Condition="'$(Platform)' == 'ARM64EC'">
+    <Link>
+      <CETCompat>false</CETCompat>
+    </Link>
+  </ItemDefinitionGroup>
+</Project>

mapistub.sln

@@ -1,7 +1,7 @@
 
 Microsoft Visual Studio Solution File, Format Version 12.00
-# Visual Studio 15
-VisualStudioVersion = 15.0.28307.779
+# Visual Studio Version 18
+VisualStudioVersion = 18.0.0.0
 MinimumVisualStudioVersion = 10.0.40219.1
 Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "mapistub", "mapistub.vcxproj", "{ACD4DD9F-0FB8-42C8-BC1C-25A5A29CB40C}"
 EndProject