Remove unnecessary 3.13 Windows installer code

windows-release/README.md

@@ -21,16 +21,7 @@ When signing is enabled (any value besides "Unsigned"), authorised approvers wil
 will need to approve each stage that requires the signing certificate (typically three).
 This helps prevent "surprise" builds from using the official certificate.
 
-Some additional points to be aware of:
-
-* packages are not automatically published to the Microsoft Store
-* successful builds should be retained by selecting "Retain" under the "..." menu in the top-right
-
-The `msixupload` artifacts should be uploaded to the Microsoft Store at
-https://partner.microsoft.com/en-us/dashboard/apps-and-games/overview.
-Access to this site is very limited.
-We also usually update the screenshots so that the version information they show matches the release.
-
+Successful builds should be retained by selecting "Retain" under the "..." menu in the top-right.
 Azure DevOps no longer has a per-pipeline option for retention,
 and so the only way to permanently retain a build is to manually select the "Retain" option.
 Without this, the build records will be lost after 30 days.

windows-release/azure-pipelines.yml

@@ -61,17 +61,9 @@ parameters:
   type: boolean
   default: true
 - name: DoJIT
-  displayName: "Build the JIT compiler (3.14 and later)"
+  displayName: "Build the JIT compiler"
   type: boolean
   default: true
-- name: DoGPG
-  displayName: "Include GPG signatures (only up to 3.13)"
-  type: boolean
-  default: false
-- name: DoMSIX
-  displayName: "Produce Store packages (only up to 3.13)"
-  type: boolean
-  default: false
 
 # Stable version options
 # The default option matches what we use for all currently releasing versions.
@@ -269,11 +261,6 @@ stages:
           BuildToPackage: ${{ parameters.BuildToPackage }}
           DoFreethreaded: ${{ parameters.DoFreethreaded }}
           SigningCertificate: ${{ iif(eq(parameters.SigningCertificate, 'Unsigned'), '', parameters.SigningCertificate) }}
-    - ${{ if eq(parameters.DoMSIX, 'true') }}:
-      - template: stage-layout-msix.yml
-        parameters:
-          BuildToPackage: ${{ parameters.BuildToPackage }}
-          SigningCertificate: ${{ iif(eq(parameters.SigningCertificate, 'Unsigned'), '', parameters.SigningCertificate) }}
     - ${{ if eq(parameters.DoPyManager, 'true') }}:
       - template: stage-layout-pymanager.yml
         parameters:
@@ -300,10 +287,6 @@ stages:
           DoFreethreaded: ${{ parameters.DoFreethreaded }}
           SigningCertificate: ${{ iif(eq(parameters.SigningCertificate, 'Unsigned'), '', parameters.SigningCertificate) }}
           Post315OutputDir: ${{ parameters.Post315OutputDir }}
-    - ${{ if eq(parameters.DoMSIX, 'true') }}:
-      - template: stage-pack-msix.yml
-        parameters:
-          SigningCertificate: ${{ iif(eq(parameters.SigningCertificate, 'Unsigned'), '', parameters.SigningCertificate) }}
     - ${{ if eq(parameters.DoNuget, 'true') }}:
       - template: stage-pack-nuget.yml
         parameters:
@@ -359,7 +342,6 @@ stages:
         parameters:
           BuildToPublish: ${{ parameters.BuildToPublish }}
           DoEmbed: ${{ parameters.DoEmbed }}
-          IncludeGPG: ${{ parameters.DoGPG }}
     - ${{ if eq(parameters.DoNuget, 'true') }}:
       - template: stage-publish-nugetorg.yml
         parameters:

windows-release/stage-publish-pythonorg.yml

@@ -1,7 +1,6 @@
 parameters:
   BuildToPublish: current
   DoEmbed: true
-  IncludeGPG: false
   HashAlgorithms: ['SHA256', 'MD5']
 
 jobs:
@@ -74,32 +73,6 @@ jobs:
       workingDirectory: '$(Pipeline.Workspace)\embed'
       condition: and(succeeded(), ne(variables['PublishARM64'], 'true'))
 
-
-  - ${{ if eq(parameters.IncludeGPG, 'true') }}:
-    - task: DownloadSecureFile@1
-      name: gpgkey
-      inputs:
-        secureFile: 'python-signing.key'
-      displayName: 'Download GPG key'
-
-    - powershell: |
-        git clone https://github.com/python/cpython-bin-deps --branch gpg --single-branch --depth 1 --progress -v "gpg"
-        gpg/gpg2.exe --import "$(gpgkey.secureFilePath)"
-        $files = gci -File "msi\*\*", "embed\*.zip" -EA SilentlyContinue
-        $files.FullName | %{
-            gpg/gpg2.exe -ba --batch --passphrase $(GPGPassphrase) $_
-            "Made signature for $_"
-        }
-      displayName: 'Generate GPG signatures'
-      workingDirectory: $(Pipeline.Workspace)
-
-    - powershell: |
-        $p = gps "gpg-agent" -EA 0
-        if ($p) { $p.Kill() }
-      displayName: 'Kill GPG agent'
-      condition: true
-
-
   - task: DownloadSecureFile@1
     name: sshkey
     inputs:
@@ -170,17 +143,6 @@ jobs:
       workingDirectory: $(Pipeline.Workspace)
       displayName: 'Generate hashes (${{ alg }})'
 
-  - ${{ if eq(parameters.IncludeGPG, 'true') }}:
-    - powershell: |
-        "Copying:"
-        $files = gci -File "msi\*\python*.asc", "embed\*.asc" -EA SilentlyContinue
-        $files.FullName
-        $d = mkdir "$(Build.ArtifactStagingDirectory)\hashes" -Force
-        move $files $d -Force
-        gci msi -Directory | %{ move "msi\$_\*.asc" (mkdir "$d\$_" -Force) }
-      workingDirectory: $(Pipeline.Workspace)
-      displayName: 'Copy GPG signatures for build'
-
   - publish: '$(Build.ArtifactStagingDirectory)\hashes'
     artifact: hashes
     displayName: 'Publish Artifact: hashes'