[pull] master from microsoft:master

Tools/SandboxTest.ps1

@@ -8,11 +8,11 @@
 ###
 
 [CmdletBinding()]
-Param(
+param(
     # Manifest
     [Parameter(Position = 0, HelpMessage = 'The Manifest to install in the Sandbox.')]
     [ValidateScript({
-            if (-Not (Test-Path -Path $_)) { throw "$_ does not exist" }
+            if (-not (Test-Path -Path $_)) { throw "$_ does not exist" }
             return $true
         })]
     [String] $Manifest,
@@ -22,7 +22,7 @@ Param(
     # MapFolder
     [Parameter(HelpMessage = 'The folder to map in the Sandbox.')]
     [ValidateScript({
-            if (-Not (Test-Path -Path $_ -PathType Container)) { throw "$_ is not a folder." }
+            if (-not (Test-Path -Path $_ -PathType Container)) { throw "$_ is not a folder." }
             return $true
         })]
     [String] $MapFolder = $pwd,
@@ -165,7 +165,7 @@ function Initialize-Folder {
 ####
 function Get-Release {
     [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingConvertToSecureStringWithPlainText', '',
-        Justification='The standard workflow that users use with other applications requires the use of plaintext GitHub Access Tokens')]
+        Justification = 'The standard workflow that users use with other applications requires the use of plaintext GitHub Access Tokens')]
 
     param (
         [Parameter()]
@@ -183,8 +183,7 @@ function Get-Release {
         Write-Verbose 'Adding Bearer Token Authentication to Releases API Request'
         $requestParameters.Add('Authentication', 'Bearer')
         $requestParameters.Add('Token', $(ConvertTo-SecureString $GitHubToken -AsPlainText))
-    }
-    else {
+    } else {
         # No token was provided or the token has expired
         # If an invalid token was provided, an exception will have been thrown before this code is reached
         Write-Warning @"
@@ -243,8 +242,7 @@ function Get-RemoteContent {
     try {
         $downloadTask = $script:HttpClient.GetByteArrayAsync($URL)
         [System.IO.File]::WriteAllBytes($localfile.FullName, $downloadTask.Result)
-    }
-    catch {
+    } catch {
         # If the download fails, write a zero-byte file anyways
         $null | Out-File $localFile.FullName
     }
@@ -347,7 +345,7 @@ function Test-FileChecksum {
 ####
 function Test-GithubToken {
     [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingConvertToSecureStringWithPlainText', '',
-        Justification='The standard workflow that users use with other applications requires the use of plaintext GitHub Access Tokens')]
+        Justification = 'The standard workflow that users use with other applications requires the use of plaintext GitHub Access Tokens')]
 
     param (
         [Parameter(Mandatory = $true)]
@@ -403,7 +401,7 @@ function Test-GithubToken {
             $tokenExpirationDays = [Math]::Round($tokenExpirationDays, 2) # We don't need all the precision the system provides
 
             if ($cachedExpirationForParsing -eq [System.DateTime]::MaxValue.ToLongDateString().Trim()) {
-                Write-Verbose "The cached token contained content. It is set to never expire"
+                Write-Verbose 'The cached token contained content. It is set to never expire'
                 return $true
             }
 
@@ -416,21 +414,18 @@ function Test-GithubToken {
                 Write-Verbose 'The cached token contained content, but it could not be parsed as a date. It will be re-validated'
                 Invoke-FileCleanup -FilePaths $cachedToken.FullName
                 # Do not return anything, since the token will need to be re-validated
-            }
-            else {
+            } else {
                 Write-Verbose "The cached token contained content, but the token expired $([Math]::Abs($tokenExpirationDays)) days ago"
                 # Leave the cached token so that it doesn't throw script exceptions in the future
                 # Invoke-FileCleanup -FilePaths $cachedToken.FullName
                 return $false
             }
-        }
-        else {
+        } else {
             # Either the token was empty, or the cached token is expired. Remove the cached token so that re-validation
             # of the token will update the date the token was cached if it is still valid
             Invoke-FileCleanup -FilePaths $cachedToken.FullName
         }
-    }
-    else {
+    } else {
         Write-Verbose 'Token was not found in the cache'
     }
 
@@ -458,18 +453,18 @@ function Test-GithubToken {
     Write-Verbose 'Token validated successfully. Adding to cache'
     # Trim off any non-digit characters from the end
     # Strip off the array wrapper since it is no longer needed
-    $tokenExpiration = $tokenExpiration[0] -replace '[^0-9]+$',''
+    $tokenExpiration = $tokenExpiration[0] -replace '[^0-9]+$', ''
     # If the token doesn't expire, write a special value to the file
     if (!$tokenExpiration -or [string]::IsNullOrWhiteSpace($tokenExpiration)) {
-        Write-Debug "Token expiration was empty, setting it to maximum"
+        Write-Debug 'Token expiration was empty, setting it to maximum'
         $tokenExpiration = [System.DateTime]::MaxValue
     }
     # Try parsing the value to a datetime before storing it
-    if ([DateTime]::TryParse($tokenExpiration,[ref]$tokenExpiration)) {
+    if ([DateTime]::TryParse($tokenExpiration, [ref]$tokenExpiration)) {
         Write-Debug "Token expiration successfully parsed as DateTime ($tokenExpiration)"
     } else {
         # TryParse Failed
-        Write-Warning "Could not parse expiration date as a DateTime object. It will be set to the minimum value"
+        Write-Warning 'Could not parse expiration date as a DateTime object. It will be set to the minimum value'
         $tokenExpiration = [System.DateTime]::MinValue
     }
     # Explicitly convert to a string here to avoid implicit casting
@@ -483,7 +478,7 @@ function Test-GithubToken {
 #### Start of main script ####
 
 # Check if Windows Sandbox is enabled
-if (-Not (Get-Command 'WindowsSandbox' -ErrorAction SilentlyContinue)) {
+if (-not (Get-Command 'WindowsSandbox' -ErrorAction SilentlyContinue)) {
     Write-Error -ErrorAction Continue -Category NotInstalled -Message @'
 Windows Sandbox does not seem to be available. Check the following URL for prerequisites and further details:
 https://docs.microsoft.com/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview
@@ -501,20 +496,20 @@ if (!$SkipManifestValidation -and ![String]::IsNullOrWhiteSpace($Manifest)) {
         Write-Error -Category NotInstalled 'WinGet is not installed. Manifest cannot be validated' -ErrorAction Continue
         Invoke-CleanExit -ExitCode 3
     }
-    Write-Information "--> Validating Manifest"
+    Write-Information '--> Validating Manifest'
     $validateCommandOutput =
-        & {
-            # Store current output encoding setting
-            $prevOutEnc = [Console]::OutputEncoding
-            # Set [Console]::OutputEncoding to UTF-8 since winget uses UTF-8 for output
-            [Console]::OutputEncoding = $OutputEncoding = [System.Text.Utf8Encoding]::new()
+    & {
+        # Store current output encoding setting
+        $prevOutEnc = [Console]::OutputEncoding
+        # Set [Console]::OutputEncoding to UTF-8 since winget uses UTF-8 for output
+        [Console]::OutputEncoding = $OutputEncoding = [System.Text.Utf8Encoding]::new()
 
-            winget.exe validate $Manifest
+        winget.exe validate $Manifest
 
-            # Reset the encoding to the previous values
-            [Console]::OutputEncoding = $prevOutEnc
-        }
-        switch ($LASTEXITCODE) {
+        # Reset the encoding to the previous values
+        [Console]::OutputEncoding = $prevOutEnc
+    }
+    switch ($LASTEXITCODE) {
         '-1978335191' {
             # Skip the first line and the empty last line
             $validateCommandOutput | Select-Object -Skip 1 -SkipLast 1 | ForEach-Object {
@@ -532,7 +527,7 @@ if (!$SkipManifestValidation -and ![String]::IsNullOrWhiteSpace($Manifest)) {
             Write-Warning 'Manifest validation succeeded with warnings'
             Start-Sleep -Seconds 5 # Allow the user 5 seconds to read the warnings before moving on
         }
-        Default {
+        default {
             Write-Information $validateCommandOutput.Trim() # On the success, print an empty line after the command output
         }
     }
@@ -595,8 +590,7 @@ if ($script:AppInstallerParsedVersion -ge [System.Version]'1.9.25180') {
         Algorithm   = 'SHA256'
         SaveTo      = (Join-Path -Path $script:AppInstallerReleaseAssetsFolder -ChildPath $script:DependenciesZipFileName)
     }
-}
-else {
+} else {
     $script:DependencySource = [DependencySources]::Legacy
     # Add the VCLibs to the dependencies
     Write-Debug 'Adding VCLibs UWP to dependency list'
@@ -626,8 +620,7 @@ else {
             Algorithm   = 'SHA256'
             SaveTo      = (Join-Path -Path $script:DependenciesCacheFolder -ChildPath 'Microsoft.UI.Xaml.2.7.x64.appx')
         }
-    }
-    else {
+    } else {
         # Add Xaml 2.8 to the dependencies
         Write-Debug 'Adding Microsoft.UI.Xaml (v2.8) to dependency list'
         $script:AppInstallerDependencies += @{
@@ -712,7 +705,7 @@ $script:SandboxWinGetSettings | ConvertTo-Json | Out-File -FilePath (Join-Path -
 foreach ($dependency in $script:AppInstallerDependencies) { Copy-Item -Path $dependency.SaveTo -Destination $script:TestDataFolder -ErrorAction SilentlyContinue }
 
 # Create a script file from the script parameter
-if (-Not [String]::IsNullOrWhiteSpace($Script)) {
+if (-not [String]::IsNullOrWhiteSpace($Script)) {
     Write-Verbose "Creating script file from 'Script' argument"
     $Script | Out-File -Path (Join-Path $script:TestDataFolder -ChildPath 'BoundParameterScript.ps1')
 }
@@ -779,6 +772,14 @@ Tip: you can type 'Update-EnvironmentVariables' to update your environment varia
 
 Write-Host @'
 
+--> Fixing slow MSI package installers
+'@
+
+reg add "HKLM\SYSTEM\CurrentControlSet\Control\CI\Policy" /v "VerifiedAndReputablePolicyState" /t REG_DWORD /d 0 /f # See: https://github.com/microsoft/Windows-Sandbox/issues/68#issuecomment-2754867968
+CiTool.exe --refresh --json | Out-Null # Refreshes policy. Use json output param or else it will prompt for confirmation, even with Out-Null
+
+Write-Host @'
+
 --> Configuring Winget
 '@
 winget settings --Enable LocalManifestFiles
@@ -860,15 +861,15 @@ Write-Information @"
     - Configuring Winget
 "@
 
-if (-Not [String]::IsNullOrWhiteSpace($Manifest)) {
+if (-not [String]::IsNullOrWhiteSpace($Manifest)) {
     Write-Information @"
       - Installing the Manifest $(Split-Path $Manifest -Leaf)
       - Refreshing environment variables
       - Comparing ARP Entries
 "@
 }
 
-if (-Not [String]::IsNullOrWhiteSpace($Script)) {
+if (-not [String]::IsNullOrWhiteSpace($Script)) {
     Write-Information @"
       - Running the following script: {
 $Script

manifests/a/AcaciaAve/HUD/1.0.086.2/AcaciaAve.HUD.installer.yaml

@@ -0,0 +1,25 @@
+# Created using wingetcreate 1.12.8.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: AcaciaAve.HUD
+PackageVersion: 1.0.086.2
+InstallerLocale: en-US
+InstallerType: msi
+InstallModes:
+- interactive
+- silent
+InstallerSwitches:
+  Silent: /quiet
+  SilentWithProgress: /passive
+UpgradeBehavior: install
+Dependencies:
+  PackageDependencies:
+  - PackageIdentifier: Microsoft.VCRedist.2015+.x64
+ProductCode: '{764CD916-9C11-4901-A65A-8EC1757E43CF}'
+Installers:
+- Architecture: x64
+  InstallerUrl: https://github.com/acaciaavellc/Heads-Up-Display/releases/download/v1.0.086.2/AcaciaAve-HUD-Personal-x64.msi
+  InstallerSha256: C8927656E89542287BA275059C6A2668944FD56F29FDBAAB06EA79D890AE5D95
+ManifestType: installer
+ManifestVersion: 1.12.0
+ReleaseDate: 2026-03-27

manifests/a/AcaciaAve/HUD/1.0.086.2/AcaciaAve.HUD.locale.en-US.yaml

@@ -0,0 +1,32 @@
+# Created using wingetcreate 1.12.8.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json
+
+PackageIdentifier: AcaciaAve.HUD
+PackageVersion: 1.0.086.2
+PackageLocale: en-US
+Publisher: Acacia Avenue LLC
+PublisherUrl: https://www.acaciaave.com
+PublisherSupportUrl: https://github.com/acaciaavellc/Heads-Up-Display/issues
+PrivacyUrl: https://www.acaciaave.com/privacy-policy.html
+PackageName: Heads-Up Display
+PackageUrl: https://www.acaciaave.com/hud-personal.html
+License: Proprietary
+LicenseUrl: https://www.acaciaave.com/hud-personal.html
+Copyright: Copyright (c) 2026 Acacia Avenue LLC
+ShortDescription: Persistent classification banner for Windows desktops
+Description: |-
+  Heads-Up Display (HUD) is a lightweight, always-on classification banner for Windows.
+  It provides a persistent visual indicator of the current system classification state,
+  designed for use in government, defense, and enterprise environments where users must
+  maintain constant awareness of the sensitivity level of the data they are handling.
+  HUD Personal is free for personal and evaluation use.
+Tags:
+- classification
+- banner
+- security
+- government
+- defense
+- netbanner
+ReleaseNotesUrl: https://github.com/acaciaavellc/Heads-Up-Display/releases/tag/v1.0.086.2
+ManifestType: defaultLocale
+ManifestVersion: 1.12.0

manifests/a/AcaciaAve/HUD/1.0.086.2/AcaciaAve.HUD.yaml

@@ -0,0 +1,8 @@
+# Created using wingetcreate 1.12.8.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.version.1.12.0.schema.json
+
+PackageIdentifier: AcaciaAve.HUD
+PackageVersion: 1.0.086.2
+DefaultLocale: en-US
+ManifestType: version
+ManifestVersion: 1.12.0

manifests/a/Avidemux/Avidemux/2.8.1/Avidemux.Avidemux.installer.yaml

@@ -0,0 +1,22 @@
+# Created with Devicie using komac v2.15.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: Avidemux.Avidemux
+PackageVersion: 2.8.1
+Platform:
+- Windows.Desktop
+InstallerType: nullsoft
+InstallModes:
+- interactive
+- silent
+InstallerSuccessCodes:
+- 1223
+UpgradeBehavior: install
+ProductCode: Avidemux 2.8 - 64 bits (64-bit)
+ReleaseDate: 2022-09-21
+Installers:
+- Architecture: x86
+  InstallerUrl: https://github.com/mean00/avidemux2/releases/download/2.8.1/Avidemux_2.8.1.VC%2B%2B.64bits.exe
+  InstallerSha256: DD962BC788D7D955B04E163E7E1A6620B573ADC379BF2EA2A2C25585782B4DCA
+ManifestType: installer
+ManifestVersion: 1.12.0

manifests/a/Avidemux/Avidemux/2.8.1/Avidemux.Avidemux.locale.en-US.yaml

@@ -0,0 +1,74 @@
+# Created with Devicie using komac v2.15.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json
+
+PackageIdentifier: Avidemux.Avidemux
+PackageVersion: 2.8.1
+PackageLocale: en-US
+Publisher: Avidemux
+PublisherUrl: https://avidemux.sourceforge.net/
+Author: Avidemux
+PackageName: Avidemux
+PackageUrl: https://avidemux.sourceforge.net/
+License: GPL-2.0
+LicenseUrl: https://github.com/mean00/avidemux2/blob/HEAD/License.txt
+CopyrightUrl: https://github.com/mean00/avidemux2/blob/master/License.txt
+ShortDescription: Avidemux is a simple platform video editor for Linux, Windows and Mac OS X.
+Description: |-
+  Avidemux is a free video editor designed for simple cutting, filtering and encoding tasks.
+  It supports many file types, including AVI, DVD compatible MPEG files, MP4 and ASF, using a variety of codecs.
+  Tasks can be automated using projects, job queue and powerful scripting capabilities.
+Moniker: avidemux
+Tags:
+- admin
+- cross-platform
+- cutting
+- editor
+- encoding
+- filtering
+- foss
+- multimedia
+- video
+- video-editor
+ReleaseNotes: |-
+  New Features
+  New HiDPI compatible button set
+  Fast method to add partial filters via CTRL+F shortcut
+  Audio department improvements
+      custom frame rate change (audio stretch with pitch control)
+      configurable compressor (DRC)
+      3-band equalizer
+      independent channel gain options
+      independent channel delay options
+      channel remap options
+      new downmix options: stereo headphone and headphone virtual surround
+      audio track configuration up to 32 tracks
+      volume setting is saved upon exit
+  Light and dark theme options in View menu
+  Option to remember selected resize method in "Resize", "Fit to size" and "Zoom" filters
+  New filter: 3D LUT
+  New filter: Decimate
+  New filter: Arbitrary Rotate
+  New video encoder: VideoToolbox HEVC ("ffVTEncHEVC", macOS only)
+  Other Enhancements
+  HDR tonemapping performance and quality improvements
+  Extended file info
+  Rotating mouse wheel over buttons to seek by 60 seconds cycles through 1/2/4/60 seconds seek modes
+  Support for decoding 8-bit VP9 in hardware via DXVA2 on Windows and via VDPAU on Linux with graphics cards featuring a VP9 decoder
+  Buttons to seek to selection start (A) and end (B) in on-the-fly video filter preview
+  Logo image in "Add logo" video filter configuration dialog is now scalable, can be repositioned by dragging
+  By default, on-the-fly preview in video filter configuration dialogs is now rendered using OpenGL to improve performance in HiDPI conditions
+  Bugfixes
+  Crash on copy to clipboard if selection extends to the end of video, a regression introduced in v2.8.0
+  Crashes in "Resample FPS" video filter with motion interpolation enabled
+  Crash on finishing encoding with the vp9 encoder
+  Avidemux falling victim to a crash in VA-API driver triggered by probing on application startup on Linux with some recent hardware
+  Crash loading MPEG-TS or MPEG-PS file with MPEG-1 video track and HW decoder via VDPAU enabled
+  Wrong number of channels or wrong channel layout with some E-AC3 streams
+  Reduced contrast and desaturated colors in loaded BMP images
+  Selection starting at zero and ending at the last picture of video cannot be deleted
+  Disabling B-frames breaks VideoToolbox HW encoder (macOS only)
+  Miscellaneous
+  Bundled FFmpeg libraries have been updated to 4.4.2 release.
+ReleaseNotesUrl: https://github.com/mean00/avidemux2/releases/tag/2.8.1
+ManifestType: defaultLocale
+ManifestVersion: 1.12.0