Add Windows pipeline & Sync with upstream code

.clang-format

@@ -0,0 +1,24 @@
+---
+# Defaults for all languages.
+BasedOnStyle:  Google
+
+# Setting ColumnLimit to 0 so developer choices about where to break lines are maintained.
+# Developers are responsible for adhering to the 120 character maximum.
+ColumnLimit:     0
+SortIncludes: false
+DerivePointerAlignment: false
+# Avoid adding spaces between tokens in GSL_SUPPRESS arguments.
+# E.g., don't change "GSL_SUPPRESS(r.11)" to "GSL_SUPPRESS(r .11)".
+WhitespaceSensitiveMacros: ["GSL_SUPPRESS"]
+
+# if you want to customize when working locally see https://clang.llvm.org/docs/ClangFormatStyleOptions.html for options.
+# See ReformatSource.ps1 for a script to update all source according to the current options in this file.
+# e.g. customizations to use Allman bracing and more indenting.
+# AccessModifierOffset: -2
+# BreakBeforeBraces: Allman
+# CompactNamespaces: false
+# IndentCaseLabels: true
+# IndentWidth:     4
+# NamespaceIndentation: All
+
+...

.github/workflows/linux_ci.yml

@@ -7,27 +7,27 @@
   pull_request:
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.ref || github.sha }}
   cancel-in-progress: true
-  
+
 jobs:
   Linux_arm64_gcc_release:
-    runs-on: ["self-hosted", "1ES.Pool=mlas-linux-ARM64-CPU"]
+    runs-on: ubuntu-24.04-arm
     steps:
       - uses: actions/checkout@v4
       - run: |
-         set -e -x
-         rm -rf build
-         cmake --workflow --preset linux_gcc_release_workflow
+          set -e -x
+          rm -rf build
+          cmake --workflow --preset linux_gcc_release_workflow
 
   Linux_x64_gcc_ubuntu24_release_no_ort:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - run: |
-         set -e -x
-         rm -rf build
-         cmake --workflow --preset linux_gcc_release_no_ort_workflow
+          set -e -x
+          rm -rf build
+          cmake --workflow --preset linux_gcc_release_no_ort_workflow
 
   Linux_x64_gcc_ubuntu24_release:
     runs-on: ubuntu-24.04
@@ -43,16 +43,16 @@
           config-file: ./.github/codeql/codeql-config.yml
           languages: 'cpp'
       - run: |
-         set -e -x
-         rm -rf build
-         cmake --workflow --preset linux_gcc_release_workflow
+          set -e -x
+          rm -rf build
+          cmake --workflow --preset linux_gcc_release_workflow
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v3
         with:
           category: "/language:cpp"
           output: sarif-results
           upload: failure-only
-        
+
       - name: filter-sarif
         uses: advanced-security/filter-sarif@v1
         with:
@@ -68,92 +68,92 @@
         uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: sarif-results/cpp.sarif
- 
+
   Linux_x64_gcc_ubuntu22_release:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
       - run: |
-         set -e -x
-         rm -rf build
-         cmake --workflow --preset linux_gcc_release_workflow
+          set -e -x
+          rm -rf build
+          cmake --workflow --preset linux_gcc_release_workflow
   Linux_x64_gcc_ubuntu24_debug:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - run: |
-         set -e -x
-         rm -rf build
-         cmake --workflow --preset linux_gcc_debug_workflow
+          set -e -x
+          rm -rf build
+          cmake --workflow --preset linux_gcc_debug_workflow
   Linux_x64_clang_ubuntu24_debug:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - run: |
-         set -e -x
-         rm -rf build
-         cmake --workflow --preset linux_clang_debug_workflow
+          set -e -x
+          rm -rf build
+          cmake --workflow --preset linux_clang_debug_workflow
   Linux_x64_gcc_ubuntu24_debug_asan:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - run: |
-         set -e -x
-         rm -rf build
-         cmake --workflow --preset linux_gcc_debug_asan_workflow
+          set -e -x
+          rm -rf build
+          cmake --workflow --preset linux_gcc_debug_asan_workflow
   Linux_wasm_debug_asan:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - run: |
-         set -e -x
-         rm -rf build
-         mkdir -p build
-         cd build
-         git clone https://github.com/emscripten-core/emsdk.git
-         cd emsdk
-         ./emsdk install latest
-         ./emsdk activate latest
-         source emsdk_env.sh
-         cd ..
-         CFLAGS="-O0 -g -fsanitize=address" CXXFLAGS="-O0 -g -fsanitize=address" emcmake cmake .. -DCMAKE_BUILD_TYPE=Debug -DMLAS_ENABLE_WEBASSEMBLY_THREADS=ON
-         make -j $(nproc) all
-         ctest --output-on-failure
+          set -e -x
+          rm -rf build
+          mkdir -p build
+          cd build
+          git clone https://github.com/emscripten-core/emsdk.git
+          cd emsdk
+          ./emsdk install latest
+          ./emsdk activate latest
+          source emsdk_env.sh
+          cd ..
+          CFLAGS="-O0 -g -fsanitize=address" CXXFLAGS="-O0 -g -fsanitize=address" emcmake cmake .. -DCMAKE_BUILD_TYPE=Debug -DMLAS_ENABLE_WEBASSEMBLY_THREADS=ON
+          make -j $(nproc) all
+          ctest --output-on-failure
 
   Linux_wasm_release:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - run: |
-         set -e -x
-         rm -rf build
-         mkdir -p build
-         cd build
-         git clone https://github.com/emscripten-core/emsdk.git
-         cd emsdk
-         ./emsdk install latest
-         ./emsdk activate latest
-         source emsdk_env.sh
-         cd ..
-         CFLAGS="-O2 -DNDEBUG -g" CXXFLAGS="-O2 -DNDEBUG -g" emcmake cmake .. -DCMAKE_BUILD_TYPE=Release -DMLAS_ENABLE_WEBASSEMBLY_THREADS=ON
-         make -j $(nproc) all
-         ctest --output-on-failure
+          set -e -x
+          rm -rf build
+          mkdir -p build
+          cd build
+          git clone https://github.com/emscripten-core/emsdk.git
+          cd emsdk
+          ./emsdk install latest
+          ./emsdk activate latest
+          source emsdk_env.sh
+          cd ..
+          CFLAGS="-O2 -DNDEBUG -g" CXXFLAGS="-O2 -DNDEBUG -g" emcmake cmake .. -DCMAKE_BUILD_TYPE=Release -DMLAS_ENABLE_WEBASSEMBLY_THREADS=ON
+          make -j $(nproc) all
+          ctest --output-on-failure
 
   Linux_wasm_release_no_exception:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
       - run: |
-         set -e -x
-         rm -rf build
-         mkdir -p build
-         cd build
-         git clone https://github.com/emscripten-core/emsdk.git
-         cd emsdk
-         ./emsdk install latest
-         ./emsdk activate latest
-         source emsdk_env.sh
-         cd ..
-         CFLAGS="-O2 -DNDEBUG -g" CXXFLAGS="-O2 -DNDEBUG -g" emcmake cmake .. -DCMAKE_BUILD_TYPE=Release -DMLAS_ENABLE_WEBASSEMBLY_THREADS=ON -DMLAS_ENABLE_WEBASSEMBLY_EXCEPTION_CATCHING=ON
-         make -j $(nproc) all
-         ctest --output-on-failure
+          set -e -x
+          rm -rf build
+          mkdir -p build
+          cd build
+          git clone https://github.com/emscripten-core/emsdk.git
+          cd emsdk
+          ./emsdk install latest
+          ./emsdk activate latest
+          source emsdk_env.sh
+          cd ..
+          CFLAGS="-O2 -DNDEBUG -g" CXXFLAGS="-O2 -DNDEBUG -g" emcmake cmake .. -DCMAKE_BUILD_TYPE=Release -DMLAS_ENABLE_WEBASSEMBLY_THREADS=ON -DMLAS_ENABLE_WEBASSEMBLY_EXCEPTION_CATCHING=ON
+          make -j $(nproc) all
+          ctest --output-on-failure

.github/workflows/macos_ci.yml

@@ -7,25 +7,25 @@ on:
   pull_request:
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.ref || github.sha }}
   cancel-in-progress: true
-  
+
 jobs:
   # The following one doesn't work on macos-12. It has some compiling errors related to std::date
   MacOS14_arm64_release:
     runs-on: macos-14
     steps:
       - uses: actions/checkout@v4
       - run: |
-         set -e -x
-         rm -rf build
-         cmake --workflow --preset macos_arm64_release_workflow
-         
+          set -e -x
+          rm -rf build
+          cmake --workflow --preset macos_arm64_release_workflow
+
   MacOS14_universal2_release:
     runs-on: macos-14
     steps:
       - uses: actions/checkout@v4
-      - run: |
-         set -e -x
-         rm -rf build
-         cmake --workflow --preset macos_universal2_release_workflow
+      - run: |-
+          set -e -x
+          rm -rf build
+          cmake --workflow --preset macos_universal2_release_workflow

.github/workflows/reusable_windows_build.yml

@@ -0,0 +1,83 @@
+name: Reusable Windows Build
+
+on:
+  workflow_call:
+    inputs:
+      job-name: # For display purposes in the reusable workflow logs
+        required: true
+        type: string
+      runner-os: # New input for the runner OS
+        required: true
+        type: string
+      cmake-workflow-preset:
+        required: true
+        type: string
+      enable-codeql:
+        required: false
+        type: boolean
+        default: false
+      codeql-config-file:
+        required: false
+        type: string
+        default: ./.github/codeql/codeql-config.yml
+      codeql-sarif-output-dir:
+        required: false
+        type: string
+        default: sarif-results
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write # Needed if CodeQL analysis runs & uploads
+
+jobs:
+  build_and_optional_analyze:
+    name: ${{ inputs.job-name }}
+    runs-on: ${{ inputs.runner-os }} # Use the input for runs-on
+    permissions: # Permissions moved here as they are job-specific
+      actions: read
+      contents: read
+      security-events: write # Needed if CodeQL analysis runs & uploads
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Initialize CodeQL (if enabled)
+        if: ${{ inputs.enable-codeql }}
+        uses: github/codeql-action/init@v3
+        with:
+          config-file: ${{ inputs.codeql-config-file }}
+          languages: 'cpp'
+
+      - name: Run CMake Workflow
+        run: |
+          cmake --workflow --preset ${{ inputs.cmake-workflow-preset }}
+        shell: cmd 
+
+      - name: Perform CodeQL Analysis (if enabled)
+        if: ${{ inputs.enable-codeql }}
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:cpp" 
+          output: ${{ inputs.codeql-sarif-output-dir }} 
+          upload: failure-only 
+
+      - name: Filter SARIF (if CodeQL enabled)
+        if: ${{ inputs.enable-codeql }}
+        uses: advanced-security/filter-sarif@v1
+        with:
+          patterns: |
+            +**/*.cc
+            +**/*.h
+            -tests/**/*.*
+            -build/**/*.*
+          input: ${{ inputs.codeql-sarif-output-dir }}/cpp.sarif
+          output: ${{ inputs.codeql-sarif-output-dir }}/cpp.sarif.filtered 
+
+      - name: Upload filtered SARIF (if CodeQL enabled)
+        if: ${{ inputs.enable-codeql }}
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: ${{ inputs.codeql-sarif-output-dir }}/cpp.sarif.filtered
+          category: cpp-${{ inputs.job-name }}