Patch Tuesday for September 2025 + macOS 15.6.1

scripts/azure-pipelines/android/Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1.4
 # DisableDockerDetector "Used to build the container deployed to Azure Container Registry"
-FROM ubuntu:noble-20250714
+FROM ubuntu:noble-20250805
 
 ADD https://packages.microsoft.com/config/ubuntu/24.04/packages-microsoft-prod.deb /packages-microsoft-prod.deb
 ADD https://github.com/adoptium/temurin17-binaries/releases/download/jdk-17.0.14+7/OpenJDK17U-jdk_x64_linux_hotspot_17.0.14_7.tar.gz /OpenJDK17U-jdk_x64_linux_hotspot_17.0.14_7.tar.gz

scripts/azure-pipelines/android/azure-pipelines.yml

@@ -28,9 +28,9 @@ jobs:
   - name: ANDROID_NDK_HOME
     value: /android-ndk-r28c
   - name: ANDROID_DOCKER_IMAGE
-    value: 'vcpkgandroidwus.azurecr.io/vcpkg-android:2025-08-12'
+    value: 'vcpkgandroidwus.azurecr.io/vcpkg-android:2025-09-11'
   - name: LINUX_DOCKER_IMAGE
-    value: 'vcpkgandroidwus.azurecr.io/vcpkg-linux:2025-08-12'
+    value: 'vcpkgandroidwus.azurecr.io/vcpkg-linux:2025-09-11'
   steps:
     # Note: /mnt is the Azure machines' temporary disk.
   - bash: |

scripts/azure-pipelines/azure-pipelines.yml

@@ -69,14 +69,14 @@ jobs:
 - template: osx/azure-pipelines.yml
   parameters:
     jobName: x64_osx
-    poolName: 'PrOsx-2025-01-24'
+    poolName: 'PrOsx-2025-09-11'
     vcpkgToolSha: ${{ parameters.vcpkgToolSha }}
     tripletPattern: ${{ parameters.tripletPattern }}
 
 - template: osx/azure-pipelines.yml
   parameters:
     jobName: arm64_osx
-    poolName: 'PrOsx-2025-01-24-arm64'
+    poolName: 'PrOsx-2025-09-11-arm64'
     vcpkgToolSha: ${{ parameters.vcpkgToolSha }}
     tripletPattern: ${{ parameters.tripletPattern }}
 

scripts/azure-pipelines/linux/Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1.4
 # DisableDockerDetector "Used to build the container deployed to Azure Container Registry"
-FROM ubuntu:jammy-20250714
+FROM ubuntu:noble-20250805
 ADD provision-image.sh /provision-image.sh
 RUN apt-get update && \
   apt-get install --no-install-recommends -y curl gnupg ca-certificates

scripts/azure-pipelines/linux/azure-pipelines.yml

@@ -27,7 +27,7 @@ jobs:
   - name: VCPKG_DOWNLOADS
     value: /mnt/vcpkg-ci/downloads
   - name: LINUX_DOCKER_IMAGE
-    value: 'vcpkgandroidwus.azurecr.io/vcpkg-linux:2025-08-12'
+    value: 'vcpkgandroidwus.azurecr.io/vcpkg-linux:2025-09-11'
   steps:
     # Note: /mnt is the Azure machines' temporary disk.
   - bash: |

scripts/azure-pipelines/linux/provision-image.sh

@@ -7,7 +7,7 @@ export DEBIAN_FRONTEND=noninteractive
 
 # Add apt repos
 
-# Detect Ubuntu VERSION_ID from /etc/os-release (e.g., "20.04") and format to "2004"
+# Detect Ubuntu VERSION_ID from /etc/os-release (e.g., "24.04") and format to "2404"
 UBUNTU_VERSION_ID=$(. /etc/os-release && echo "$VERSION_ID")
 NVIDIA_REPO_VERSION=$(echo "$UBUNTU_VERSION_ID" | sed 's/\.//')
 

scripts/azure-pipelines/osx/README.md

@@ -9,9 +9,10 @@ This is the checklist for what the vcpkg team does when updating the macOS machi
 - [ ] A Parallels license for amd64 or [macosvm](https://github.com/s-u/macosvm) allow-listed
   by macOS for arm64. Note that the directory 'Parallels' is still used when using `macosvm`
   just so that scripts know where to find the VM and friends.
-- [ ] An Xcode installer - you can get this from Apple's developer website,
+- [ ] An Xcode .xip - you can get this from Apple's developer website,
   although you'll need to sign in first: <https://developer.apple.com/downloads>  
   If you are doing this from a local macos box, you can skip to the "update the macos host" step.  
+- [ ] An Xcode Command Line Tools installer
 
 ### Instructions (AMD64)
 
@@ -23,9 +24,9 @@ This is the checklist for what the vcpkg team does when updating the macOS machi
 - [ ] Update or install parallels
 - [ ] Download the macOS installer from the app store. See https://support.apple.com/en-us/102662  
       Note: This portion of the instructions is that which breaks most often depending on what Parallels and macOS are doing.
-      You might need to use `softwareupdate --fetch-full-installer --full-installer-version 15.6` and point Parallels
+      You might need to use `softwareupdate --fetch-full-installer --full-installer-version 15.6.1` and point Parallels
       at that resulting installer in 'Applications' instead.
-- [ ] Run parallels, and select that installer you just downloaded. Name the VM "vcpkg-osx-<DATE>-amd64", for example "vcpkg-osx-2025-08-12-amd64".
+- [ ] Run parallels, and select that installer you just downloaded. Name the VM "vcpkg-osx-<DATE>", for example "vcpkg-osx-2025-09-11".
 - [ ] When creating the VM, customize the hardware to the following:
     * 12 processors
     * 24000 MB of memory
@@ -46,33 +47,40 @@ This is the checklist for what the vcpkg team does when updating the macOS machi
 - [ ] Set the desktop wallpaper to a fixed color from Settings -> Wallpaper . (This makes the KVM a lot easier to use :) )
 - [ ] Disable automatic updates in the VM: Settings -> General -> Automatic Updates -> Disable them all
 - [ ] Enable remote login in System Settings -> General -> Sharing -> Remote Login
-- [ ] Update the Azure Agent URI in setup-box.sh to the current version. You can find this by going to the agent pool, selecting "New agent", picking macOS, and copying the link. For example https://download.agent.dev.azure.com/agent/4.259.0/vsts-agent-osx-x64-4.259.0.tar.gz
+- [ ] Update the Azure Agent URI in setup-box.sh to the current version. You can find this by going to the agent pool, selecting "New agent", picking macOS, and copying the link. For example https://download.agent.dev.azure.com/agent/4.261.0/vsts-agent-osx-x64-4.261.0.tar.gz
 - [ ] In the guest, set the vcpkg user to be able to use sudo without a password. From a dev machine:
     ```sh
+    scp path/to/Xcode.xip vcpkg@HOSTMACHINE:/Users/vcpkg/Xcode.xip
     ssh vcpkg@HOSTMACHINE
+    rm ~/.ssh/known_hosts
     export GUEST_IP=`prlctl list --full | sed -nr 's/^.*running *([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}).*/\1/p'`
     export SSH_COOKIE=vcpkg@$GUEST_IP
-    ssh $SSH_COOKIE  # and then enter the password here
+    scp Xcode.xip $SSH_COOKIE:/Users/vcpkg/Xcode.xip
+    ssh $SSH_COOKIE # and then enter the password here
     printf 'vcpkg\tALL=(ALL)\tNOPASSWD:\tALL\n' | sudo tee -a '/etc/sudoers.d/vcpkg'
     sudo chmod 0440 '/etc/sudoers.d/vcpkg'
-    exit
+    sudo mdutil -ad
+    xip --expand Xcode.xip
+    sudo mv Xcode.app /Applications/Xcode.app
+    rm Xcode.xip
     exit
     ```
-- [ ] Copy setup-guest, setup-box.sh, and the xcode installer renamed to 'clt.dmg' to the host, and run setup-guest.sh.  From a developer machine:
+- [ ] Open Xcode from Applications in the guest GUI. Accept the EULA.
+- [ ] Update the Azure Agent URI in setup-box.sh to the current version. You can find this by going to the agent pool, selecting "New agent", picking macOS, and copying the link. For example https://download.agent.dev.azure.com/agent/4.261.0/vsts-agent-osx-x64-4.261.0.tar.gz
+- [ ] Copy setup-box.sh and the xcode installer renamed to 'clt.dmg' to the host. For example from a dev workstation:
     ```sh
     scp ./setup-guest.sh vcpkg@HOSTMACHINE:/Users/vcpkg
     scp ./setup-box.sh vcpkg@HOSTMACHINE:/Users/vcpkg
     scp path/to/console/tools.dmg vcpkg@HOSTMACHINE:/Users/vcpkg/clt.dmg
     ssh vcpkg@HOSTMACHINE
-    rm ~/.ssh/known_hosts
     chmod +x setup-guest.sh
     ./setup-guest.sh
     rm setup-guest.sh
     rm setup-box.sh
     rm clt.dmg
     exit
     ```
-- [ ] Shut down the VM cleanly
+- [ ] Shut down the VM cleanly.
 - [ ] Ensure that there is no host system specific 'hardware' like macOS install .isos attached.
 - [ ] Set the VM 'Isolated'
 - [ ] Boot and then cleanly shut down the VM.
@@ -82,8 +90,8 @@ This is the checklist for what the vcpkg team does when updating the macOS machi
     ```sh
     ssh vcpkg@HOSTMACHINE
     brew install azcopy
-    azcopy copy ~/Parallels/vcpkg-osx-2025-08-12-amd64.pvmp "https://vcpkgimageminting.blob.core.windows.net/pvms?<SAS>"
-    azcopy copy ~/Parallels/vcpkg-osx-2025-08-12-amd64.sha256.txt "https://vcpkgimageminting.blob.core.windows.net/pvms?<SAS>"
+    azcopy copy ~/Parallels/vcpkg-osx-2025-09-11.pvmp "https://vcpkgimageminting.blob.core.windows.net/pvms?<SAS>"
+    azcopy copy ~/Parallels/vcpkg-osx-2025-09-11.sha256.txt "https://vcpkgimageminting.blob.core.windows.net/pvms?<SAS>"
     exit
     ```
 - [ ] Go to https://dev.azure.com/vcpkg/public/_settings/agentqueues and create a new self hosted Agent pool named `PrOsx-YYYY-MM-DD` based on the current date. Grant microsoft.vcpkg.ci and microsoft.vcpkg.pr access.
@@ -104,13 +112,13 @@ This is the checklist for what the vcpkg team does when updating the macOS machi
     rm macosvm-0.2-1-arm64-darwin21.tar.gz
     exit
     ```
-- [ ] Download the matching `.ipsw` for the macOS copy to install. See https://mrmacintosh.com/apple-silicon-m1-full-macos-restore-ipsw-firmware-files-database/ ; links there to find the .ipsw. Example: https://updates.cdn-apple.com/2025SummerFCS/fullrestores/082-08674/51294E4D-A273-44BE-A280-A69FC347FB87/UniversalMac_15.6_24G84_Restore.ipsw
-- [ ] Determine the VM name using the form "vcpkg-osx-<date>-arm64", for example "vcpkg-osx-2025-08-12-arm64".
-- [ ] Open a terminal and run the following commands to create the VM with vcpkg-osx-2025-08-12-arm64 and UniversalMac_15.6_24G84_Restore.ipsw replaced as appropriate. This must be run in the KVM as it uses a GUI:
+- [ ] Download the matching `.ipsw` for the macOS copy to install. See https://mrmacintosh.com/apple-silicon-m1-full-macos-restore-ipsw-firmware-files-database/ ; links there to find the .ipsw. Example: https://updates.cdn-apple.com/2025SummerFCS/fullrestores/093-10809/CFD6DD38-DAF0-40DA-854F-31AAD1294C6F/UniversalMac_15.6.1_24G90_Restore.ipsw
+- [ ] Determine the VM name using the form "vcpkg-osx-<date>-arm64", for example "vcpkg-osx-2025-09-11-arm64".
+- [ ] Open a terminal and run the following commands to create the VM with vcpkg-osx-2025-09-11-arm64 and UniversalMac_15.6.1_24G90_Restore.ipsw replaced as appropriate. This must be run in the KVM as it uses a GUI:
     ```sh
-    mkdir -p ~/Parallels/vcpkg-osx-2025-08-12-arm64
-    cd ~/Parallels/vcpkg-osx-2025-08-12-arm64
-    ~/macosvm --disk disk.img,size=500g --aux aux.img -c 8 -r 12g --restore ~/UniversalMac_15.6_24G84_Restore.ipsw ./vm.json
+    mkdir -p ~/Parallels/vcpkg-osx-2025-09-11-arm64
+    cd ~/Parallels/vcpkg-osx-2025-09-11-arm64
+    ~/macosvm --disk disk.img,size=500g --aux aux.img -c 8 -r 12g --restore ~/UniversalMac_15.6.1_24G90_Restore.ipsw ./vm.json
     ~/macosvm -g ./vm.json
     ```
 - [ ] Follow prompts as you would on real hardware.
@@ -126,16 +134,23 @@ This is the checklist for what the vcpkg team does when updating the macOS machi
 - [ ] Set the desktop wallpaper to a fixed color from Settings -> Wallpaper . (This makes the KVM a lot easier to use :) )
 - [ ] Disable automatic updates in the VM: Settings -> General -> Automatic Updates -> Disable them all
 - [ ] Enable remote login in the VM: Settings -> General -> Sharing -> Remote Login
-- [ ] Set the vcpkg user to be able to use sudo without a password. For example from a dev workstation:
+- [ ] Set the vcpkg user to be able to use sudo without a password, and install Xcode. For example from a dev workstation:
     ```sh
+    scp path/to/Xcode.xip vcpkg@HOSTMACHINE:/Users/vcpkg/Xcode.xip
     ssh vcpkg@HOSTMACHINE
     rm ~/.ssh/known_hosts
+    scp Xcode.xip vcpkg@vcpkgs-Virtual-Machine.local:/Users/vcpkg/Xcode.xip
     ssh vcpkg@vcpkgs-Virtual-Machine.local
     printf 'vcpkg\tALL=(ALL)\tNOPASSWD:\tALL\n' | sudo tee -a '/etc/sudoers.d/vcpkg'
     sudo chmod 0440 '/etc/sudoers.d/vcpkg'
+    sudo mdutil -ad
+    xip --expand Xcode.xip
+    sudo mv Xcode.app /Applications/Xcode.app
+    rm Xcode.xip
     exit
     ```
-- [ ] Update the Azure Agent URI in setup-box.sh to the current version. You can find this by going to the agent pool, selecting "New agent", picking macOS, and copying the link. For example https://download.agent.dev.azure.com/agent/4.259.0/vsts-agent-osx-arm64-4.259.0.tar.gz
+- [ ] Open Xcode from Applications in the guest GUI. Uncheck the "code completion model" and accept the EULA.
+- [ ] Update the Azure Agent URI in setup-box.sh to the current version. You can find this by going to the agent pool, selecting "New agent", picking macOS, and copying the link. For example https://download.agent.dev.azure.com/agent/4.261.0/vsts-agent-osx-arm64-4.261.0.tar.gz
 - [ ] Copy setup-box.sh and the xcode installer renamed to 'clt.dmg' to the host. For example from a dev workstation:
     ```sh
     scp ./setup-guest.sh vcpkg@HOSTMACHINE:/Users/vcpkg
@@ -178,8 +193,8 @@ Run these steps on each machine to add to the fleet. Skip steps that were done i
     ssh vcpkg@HOSTMACHINE
     brew install azcopy
     cd ~/Parallels
-    azcopy copy "https://vcpkgimageminting.blob.core.windows.net/pvms/vcpkg-osx-<DATE>-amd64.pvmp?<SAS>" .
-    azcopy copy "https://vcpkgimageminting.blob.core.windows.net/pvms/vcpkg-osx-<DATE>-amd64.sha256.txt?<SAS>" .
+    azcopy copy "https://vcpkgimageminting.blob.core.windows.net/pvms/vcpkg-osx-<DATE>.pvmp?<SAS>" .
+    azcopy copy "https://vcpkgimageminting.blob.core.windows.net/pvms/vcpkg-osx-<DATE>.sha256.txt?<SAS>" .
     exit
     ```
 - [ ] Open the .pvmp in Parallels, and unpack it.
@@ -197,7 +212,12 @@ Run these steps on each machine to add to the fleet. Skip steps that were done i
 - [ ] [grab a PAT][] if you don't already have one
 - [ ] Copy the guest deploy script to the host, and run it with a first parameter of your PAT. From a developer machine:
     ```sh
-    ./fire-register-guest.ps1 -Target HOSTMACHINE -Pat YourPatGoesHere
+    scp register-guest.sh vcpkg@HOSTMACHINE:/Users/vcpkg/register-guest.sh
+    ssh vcpkg@HOSTMACHINE
+    rm .ssh/known_hosts
+    chmod +x register-guest.sh
+    ./register-guest.sh PAT GOES HERE
+    rm register-guest.sh
     ```
 - [ ] In the VM, open a terminal on the host and run:
     ```
@@ -243,7 +263,12 @@ Run these steps on each machine to add to the fleet. Skip steps that were done i
 - [ ] [grab a PAT][] if you don't already have one
 - [ ] Copy the guest deploy script to the host, and run it with a first parameter of your PAT. From a developer machine:
     ```sh
-    ./fire-register-guest.ps1 -Target HOSTMACHINE -Pat YourPatGoesHere
+    scp register-guest.sh vcpkg@HOSTMACHINE:/Users/vcpkg/register-guest.sh
+    ssh vcpkg@HOSTMACHINE
+    rm .ssh/known_hosts
+    chmod +x register-guest.sh
+    ./register-guest.sh PAT GOES HERE
+    rm register-guest.sh
     ```
 - [ ] That will cleanly shut down the VM. In the KVM's terminal, relaunch the VM in ephemeral mode with:
     ```sh

scripts/azure-pipelines/osx/register-guest.sh

@@ -10,11 +10,13 @@ export POOL=`echo ~/Parallels/*/ | sed -nr 's/\/Users\/vcpkg\/Parallels\/vcpkg-o
 # on arm64, DNS works
 export SSH_COOKIE=vcpkg@vcpkgs-Virtual-Machine.local
 else
-export POOL=`echo ~/Parallels/*.pvm | sed -nr 's/\/Users\/vcpkg\/Parallels\/vcpkg-osx-([0-9]{4}-[0-9]{2}-[0-9]{2})-amd64\.pvm/PrOsx-\1/p'`
+export POOL=`echo ~/Parallels/*.pvm | sed -nr 's/\/Users\/vcpkg\/Parallels\/vcpkg-osx-([0-9]{4}-[0-9]{2}-[0-9]{2})\.pvm/PrOsx-\1/p'`
 # on amd64, DNS does not work, but luckily for us prlctl does know the IP
 export GUEST_IP=`prlctl list --full | sed -nr 's/^.*running *([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}).*/\1/p'`
 export SSH_COOKIE=vcpkg@$GUEST_IP
 fi
+echo "POOL: $POOL"
+echo "SSH_COOKIE: $SSH_COOKIE"
 ssh $SSH_COOKIE -o "StrictHostKeyChecking=no" -i ~/Parallels/*/id_guest "~/myagent/config.sh --unattended --url https://dev.azure.com/vcpkg --work ~/Data/work --auth pat --token $1 --pool $POOL --agent $AGENT --replace --acceptTeeEula"
 if [ `uname -m` = 'arm64' ]; then
   ssh $SSH_COOKIE -o "StrictHostKeyChecking=no" -i ~/Parallels/*/id_guest "sudo shutdown -h now"

scripts/azure-pipelines/osx/setup-box.sh

@@ -1,14 +1,10 @@
 #!/bin/sh
 
-# The next 2 lines are a workaround for an XCode Command Line Tools bug:
-# https://developer.apple.com/documentation/xcode-release-notes/xcode-15-release-notes#Known-Issues
-sudo mdutil -ad
-sudo mkdir -p /Library/Developer/CommandLineTools
-sudo touch /Library/Developer/CommandLineTools/.beta
 hdiutil attach clt.dmg -mountpoint /Volumes/setup-installer
 sudo installer -pkg "/Volumes/setup-installer/Command Line Tools.pkg" -target /
 hdiutil detach /Volumes/setup-installer
 rm clt.dmg
+sudo xcode-select -s /Applications/Xcode.app
 /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
 if [ `uname -m` = 'arm64' ]; then
     (echo; echo 'eval "$(/opt/homebrew/bin/brew shellenv)"') >> /Users/vcpkg/.zprofile
@@ -20,9 +16,9 @@ fi
 brew install autoconf-archive autoconf automake azcopy azure-cli bison cmake gettext gfortran gnu-sed gperf gtk-doc libtool meson mono nasm ninja pkg-config powershell python-setuptools texinfo yasm
 mkdir ~/Data
 if [ `uname -m` = 'arm64' ]; then
-curl -s -o ~/Downloads/azure-agent.tar.gz https://download.agent.dev.azure.com/agent/4.259.0/vsts-agent-osx-arm64-4.259.0.tar.gz
+curl -s -o ~/Downloads/azure-agent.tar.gz https://download.agent.dev.azure.com/agent/4.261.0/vsts-agent-osx-arm64-4.261.0.tar.gz
 else
-curl -s -o ~/Downloads/azure-agent.tar.gz https://download.agent.dev.azure.com/agent/4.259.0/vsts-agent-osx-x64-4.259.0.tar.gz
+curl -s -o ~/Downloads/azure-agent.tar.gz https://download.agent.dev.azure.com/agent/4.261.0/vsts-agent-osx-x64-4.261.0.tar.gz
 fi
 mkdir ~/myagent
 tar xf ~/Downloads/azure-agent.tar.gz -C ~/myagent

scripts/azure-pipelines/windows-unstable/azure-pipelines.yml

@@ -6,7 +6,7 @@ jobs:
 - job: x64_windows
   pool:
     name: vcpkg-testing-msvc
-    demands: ImageVersionOverride -equals 2025.08.15
+    demands: ImageVersionOverride -equals 2025.09.12
   timeoutInMinutes: 2880 # 2 days
   variables:
   - name: WORKING_ROOT

scripts/azure-pipelines/windows/azure-pipelines.yml

@@ -20,7 +20,7 @@ jobs:
   condition: and(succeeded(), contains('^${{ replace(parameters.jobName, '_', '-') }}$', '${{ parameters.tripletPattern }}'))
   pool:
     name: PrWin-WUS
-    demands: ImageVersionOverride -equals 2025.08.15
+    demands: ImageVersionOverride -equals 2025.09.12
   timeoutInMinutes: 2880 # 2 days
   variables:
   - name: WORKING_ROOT

scripts/azure-pipelines/windows/deploy-azcopy.ps1

@@ -10,11 +10,11 @@ if (Test-Path "$PSScriptRoot/utility-prefix.ps1") {
 [string]$AzCopyUrl
 if ([string]::IsNullOrEmpty($SasToken)) {
   Write-Host 'Downloading from the Internet'
-  $AzCopyUrl = 'https://github.com/Azure/azure-storage-azcopy/releases/download/v10.30.0/azcopy_windows_amd64_10.30.0.zip'
+  $AzCopyUrl = 'https://github.com/Azure/azure-storage-azcopy/releases/download/v10.30.1/azcopy_windows_amd64_10.30.1.zip'
 } else {
   Write-Host 'Downloading from vcpkgimageminting using SAS token'
   $SasToken = $SasToken.Replace('"', '')
-  $AzCopyUrl = "https://vcpkgimageminting.blob.core.windows.net/assets/azcopy_windows_amd64_10.30.0.zip?$SasToken"
+  $AzCopyUrl = "https://vcpkgimageminting.blob.core.windows.net/assets/azcopy_windows_amd64_10.30.1.zip?$SasToken"
 }
 
 mkdir -Force "C:\AzCopy10"

scripts/azure-pipelines/windows/deploy-azure-cli.ps1

@@ -10,11 +10,11 @@ if (Test-Path "$PSScriptRoot/utility-prefix.ps1") {
 [string]$AzCliUrl
 if ([string]::IsNullOrEmpty($SasToken)) {
   Write-Host 'Downloading from the Internet'
-  $AzCliUrl = 'https://azcliprod.blob.core.windows.net/msi/azure-cli-2.76.0-x64.msi'
+  $AzCliUrl = 'https://azcliprod.blob.core.windows.net/msi/azure-cli-2.77.0-x64.msi'
 } else {
   Write-Host 'Downloading from vcpkgimageminting using SAS token'
   $SasToken = $SasToken.Replace('"', '')
-  $AzCliUrl = "https://vcpkgimageminting.blob.core.windows.net/assets/azure-cli-2.76.0-x64.msi?$SasToken"
+  $AzCliUrl = "https://vcpkgimageminting.blob.core.windows.net/assets/azure-cli-2.77.0-x64.msi?$SasToken"
 }
 
 DownloadAndInstall -Url $AzCliUrl -Name 'Azure CLI' -Args @('/quiet', '/norestart')