From b06f85d83bb67974298041b05c602fdc4b003df4 Mon Sep 17 00:00:00 2001 From: Vincent Biret Date: Wed, 12 Aug 2026 08:28:03 -0400 Subject: [PATCH 1/7] ci: fixes nuget deploy due to cfs lock-down Signed-off-by: Vincent Biret --- .azure-pipelines/ci-build.yml | 68 ++++++++++++++++++----------------- nuget.config | 7 ++++ 2 files changed, 42 insertions(+), 33 deletions(-) create mode 100644 nuget.config diff --git a/.azure-pipelines/ci-build.yml b/.azure-pipelines/ci-build.yml index 74f652c9a..628f7dc3e 100644 --- a/.azure-pipelines/ci-build.yml +++ b/.azure-pipelines/ci-build.yml @@ -71,33 +71,23 @@ extends: inputs: useGlobalJson: true - # Install the nuget tool. - - task: NuGetToolInstaller@1 - displayName: 'Use NuGet >=6.11.0' - inputs: - versionSpec: '>=6.11.0' - checkLatest: true - # Build the Product project - task: NuGetAuthenticate@1 displayName: 'Authenticate to Azure Artifacts' - - pwsh: | - @" - - - - - - - - "@ | Set-Content -Path "$(Build.SourcesDirectory)/nuget.config" -Encoding UTF8 - displayName: 'Create nuget.config (central feed)' + - task: DotNetCoreCLI@2 + displayName: 'restore' + inputs: + command: restore + projects: '$(Build.SourcesDirectory)\Microsoft.OpenApi.slnx' + feedsToUse: config + nugetConfigPath: '$(Build.SourcesDirectory)\nuget.config' + - task: DotNetCoreCLI@2 displayName: 'build' inputs: projects: '$(Build.SourcesDirectory)\Microsoft.OpenApi.slnx' - arguments: '--configuration $(BuildConfiguration) --no-incremental' + arguments: '--configuration $(BuildConfiguration) --no-incremental --no-restore' # Run the Unit test - task: DotNetCoreCLI@2 @@ -162,15 +152,15 @@ extends: PendingAnalysisWaitTimeoutMinutes: '5' # Pack core lib - - pwsh: dotnet pack $(Build.SourcesDirectory)/src/Microsoft.OpenApi/Microsoft.OpenApi.csproj -o $(Build.ArtifactStagingDirectory) --configuration $(BuildConfiguration) --no-build --include-symbols --include-source /p:SymbolPackageFormat=snupkg + - pwsh: dotnet pack $(Build.SourcesDirectory)/src/Microsoft.OpenApi/Microsoft.OpenApi.csproj -o $(Build.ArtifactStagingDirectory) --configuration $(BuildConfiguration) --no-build --no-restore --include-symbols --include-source /p:SymbolPackageFormat=snupkg displayName: 'pack OpenAPI' # Pack YamlReader - - pwsh: dotnet pack $(Build.SourcesDirectory)/src/Microsoft.OpenApi.YamlReader/Microsoft.OpenApi.YamlReader.csproj -o $(Build.ArtifactStagingDirectory) --configuration $(BuildConfiguration) --no-build --include-symbols --include-source /p:SymbolPackageFormat=snupkg + - pwsh: dotnet pack $(Build.SourcesDirectory)/src/Microsoft.OpenApi.YamlReader/Microsoft.OpenApi.YamlReader.csproj -o $(Build.ArtifactStagingDirectory) --configuration $(BuildConfiguration) --no-build --no-restore --include-symbols --include-source /p:SymbolPackageFormat=snupkg displayName: 'pack YamlReader' # Pack hidi - - pwsh: dotnet pack $(Build.SourcesDirectory)/src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj -o $(Build.ArtifactStagingDirectory) --configuration $(BuildConfiguration) --no-build --include-symbols --include-source /p:SymbolPackageFormat=snupkg + - pwsh: dotnet pack $(Build.SourcesDirectory)/src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj -o $(Build.ArtifactStagingDirectory) --configuration $(BuildConfiguration) --no-build --no-restore --include-symbols --include-source /p:SymbolPackageFormat=snupkg displayName: 'pack Hidi' - task: EsrpCodeSigning@5 @@ -212,7 +202,7 @@ extends: displayName: publish Hidi as executable inputs: command: 'publish' - arguments: -c Release --runtime win-x64 /p:PublishSingleFile=true /p:PackAsTool=false --self-contained --output $(Build.ArtifactStagingDirectory)/Microsoft.OpenApi.Hidi + arguments: -c Release --runtime win-x64 -p:RestoreConfigFile=$(Build.SourcesDirectory)\nuget.config /p:PublishSingleFile=true /p:PackAsTool=false --self-contained --output $(Build.ArtifactStagingDirectory)/Microsoft.OpenApi.Hidi projects: 'src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj' publishWebProjects: False zipAfterPublish: false @@ -252,7 +242,7 @@ extends: inputs: - input: pipelineArtifact artifactName: Nugets - targetPath: '$(Pipeline.Workspace)' + targetPath: '$(Pipeline.Workspace)/Nugets' dependsOn: [] environment: nuget-org strategy: @@ -264,10 +254,14 @@ extends: - task: 1ES.PublishNuget@1 displayName: 'NuGet push' inputs: - packagesToPush: '$(Pipeline.Workspace)/Microsoft.OpenApi.Hidi.*.nupkg' - packageParentPath: '$(Pipeline.Workspace)' + useDotNetTask: true + packagesToPush: '$(Pipeline.Workspace)/Nugets/Microsoft.OpenApi.Hidi.*.nupkg' + packageParentPath: '$(Pipeline.Workspace)/Nugets' nuGetFeedType: external publishFeedCredentials: 'OpenAPI Nuget Connection' + publishPackageMetadata: true + requestTimeout: 600000 + retryCountOnTaskFailure: 2 - deployment: deploy_lib condition: and(contains(variables['build.SourceBranch'], 'refs/tags/v'), succeeded()) @@ -277,7 +271,7 @@ extends: inputs: - input: pipelineArtifact artifactName: Nugets - targetPath: '$(Pipeline.Workspace)' + targetPath: '$(Pipeline.Workspace)/Nugets' dependsOn: [] environment: nuget-org strategy: @@ -287,7 +281,7 @@ extends: vmImage: ubuntu-latest steps: - pwsh: | - $fileNames = "$(Pipeline.Workspace)/Microsoft.OpenApi.Hidi.*.nupkg", "$(Pipeline.Workspace)/Microsoft.OpenApi.YamlReader.*.nupkg", "$(Pipeline.Workspace)/Microsoft.OpenApi.Workbench.*.nupkg" + $fileNames = "$(Pipeline.Workspace)/Nugets/Microsoft.OpenApi.Hidi.*.nupkg", "$(Pipeline.Workspace)/Nugets/Microsoft.OpenApi.YamlReader.*.nupkg", "$(Pipeline.Workspace)/Nugets/Microsoft.OpenApi.Workbench.*.nupkg" foreach($fileName in $fileNames) { if(Test-Path $fileName) { Remove-Item $fileName -Verbose @@ -297,10 +291,14 @@ extends: - task: 1ES.PublishNuget@1 displayName: 'NuGet push' inputs: - packagesToPush: '$(Pipeline.Workspace)/Microsoft.OpenApi.*.nupkg' - packageParentPath: '$(Pipeline.Workspace)' + useDotNetTask: true + packagesToPush: '$(Pipeline.Workspace)/Nugets/Microsoft.OpenApi.*.nupkg' + packageParentPath: '$(Pipeline.Workspace)/Nugets' nuGetFeedType: external publishFeedCredentials: 'OpenAPI Nuget Connection' + publishPackageMetadata: true + requestTimeout: 600000 + retryCountOnTaskFailure: 2 - deployment: deploy_yaml_reader condition: and(contains(variables['build.SourceBranch'], 'refs/tags/v'), succeeded()) @@ -310,7 +308,7 @@ extends: inputs: - input: pipelineArtifact artifactName: Nugets - targetPath: '$(Pipeline.Workspace)' + targetPath: '$(Pipeline.Workspace)/Nugets' dependsOn: deploy_lib environment: nuget-org strategy: @@ -322,10 +320,14 @@ extends: - task: 1ES.PublishNuget@1 displayName: 'NuGet push' inputs: - packagesToPush: '$(Pipeline.Workspace)/Microsoft.OpenApi.YamlReader.*.nupkg' - packageParentPath: '$(Pipeline.Workspace)' + useDotNetTask: true + packagesToPush: '$(Pipeline.Workspace)/Nugets/Microsoft.OpenApi.YamlReader.*.nupkg' + packageParentPath: '$(Pipeline.Workspace)/Nugets' nuGetFeedType: external publishFeedCredentials: 'OpenAPI Nuget Connection' + publishPackageMetadata: true + requestTimeout: 600000 + retryCountOnTaskFailure: 2 - deployment: create_github_release condition: and(contains(variables['build.SourceBranch'], 'refs/tags/v'), succeeded()) diff --git a/nuget.config b/nuget.config new file mode 100644 index 000000000..76a0cc26d --- /dev/null +++ b/nuget.config @@ -0,0 +1,7 @@ + + + + + + + From 6f295b87dad7ba6aaa910b8c7980f4155ff7cbab Mon Sep 17 00:00:00 2001 From: Vincent Biret Date: Wed, 12 Aug 2026 08:32:24 -0400 Subject: [PATCH 2/7] ci: fixes docker image build after CFS deployment Signed-off-by: Vincent Biret --- .azure-pipelines/ci-build.yml | 27 ++++++++++++++++++++++++++- Dockerfile | 9 ++++++++- 2 files changed, 34 insertions(+), 2 deletions(-) diff --git a/.azure-pipelines/ci-build.yml b/.azure-pipelines/ci-build.yml index 628f7dc3e..1fab7c2e8 100644 --- a/.azure-pipelines/ci-build.yml +++ b/.azure-pipelines/ci-build.yml @@ -388,6 +388,9 @@ extends: scriptLocation: inlineScript inlineScript: | az acr login --name $(REGISTRY) + + - task: NuGetAuthenticate@1 + displayName: 'Authenticate Docker build to Azure Artifacts' - pwsh: | $content = [XML](Get-Content $(Pipeline.Workspace)/Directory.Build.props) @@ -473,27 +476,49 @@ extends: - bash: | echo "Building Docker image..." echo "Using build date: ${BUILDDATE}" + if [ -z "${VSS_NUGET_ACCESSTOKEN:-}" ]; then + echo "##vso[task.logissue type=error]VSS_NUGET_ACCESSTOKEN is not available. Ensure NuGetAuthenticate@1 ran successfully before docker build." + exit 1 + fi # Using quotes around tags to prevent flag interpretation docker buildx build \ --platform linux/amd64,linux/arm64/v8 \ --push \ + --build-arg VSS_NUGET_EXTERNAL_FEED_ENDPOINTS \ + --build-arg VSS_NUGET_URI_PREFIXES \ + --secret id=vss_nuget_accesstoken,env=VSS_NUGET_ACCESSTOKEN \ -t "$(REGISTRY)/$(IMAGE_NAME):nightly" \ -t "$(REGISTRY)/$(IMAGE_NAME):${VERSION}.${BUILDDATE}${RUNNUMBER}" \ "$(Pipeline.Workspace)" displayName: 'Build and Push Nightly Image' condition: eq(variables['Build.SourceBranch'], variables['PREVIEW_BRANCH']) + env: + VSS_NUGET_ACCESSTOKEN: $(VSS_NUGET_ACCESSTOKEN) + VSS_NUGET_EXTERNAL_FEED_ENDPOINTS: $(VSS_NUGET_EXTERNAL_FEED_ENDPOINTS) + VSS_NUGET_URI_PREFIXES: $(VSS_NUGET_URI_PREFIXES) - bash: | echo "Building Docker image for release..." - docker buildx build\ + if [ -z "${VSS_NUGET_ACCESSTOKEN:-}" ]; then + echo "##vso[task.logissue type=error]VSS_NUGET_ACCESSTOKEN is not available. Ensure NuGetAuthenticate@1 ran successfully before docker build." + exit 1 + fi + docker buildx build \ --platform linux/amd64,linux/arm64/v8 \ --push \ + --build-arg VSS_NUGET_EXTERNAL_FEED_ENDPOINTS \ + --build-arg VSS_NUGET_URI_PREFIXES \ + --secret id=vss_nuget_accesstoken,env=VSS_NUGET_ACCESSTOKEN \ -t "$(REGISTRY)/$(IMAGE_NAME):latest" \ -t "$(REGISTRY)/$(IMAGE_NAME):${VERSION}" \ "$(Pipeline.Workspace)" displayName: 'Build and Push Release Image' condition: contains(variables['Build.SourceBranch'], 'refs/tags/v') + env: + VSS_NUGET_ACCESSTOKEN: $(VSS_NUGET_ACCESSTOKEN) + VSS_NUGET_EXTERNAL_FEED_ENDPOINTS: $(VSS_NUGET_EXTERNAL_FEED_ENDPOINTS) + VSS_NUGET_URI_PREFIXES: $(VSS_NUGET_URI_PREFIXES) # once the nuget has been released, fill this form to get the public documentation updated. # https://dev.azure.com/msft-skilling/Content/_workitems/create/User%20Story?templateId=39fb91e3-64a2-4c8a-83db-b2bdf3603dd3&ownerId=c4a28f90-17ae-4384-b514-7273392b082b diff --git a/Dockerfile b/Dockerfile index 25f1ec589..b9935a64f 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,11 +1,18 @@ +# syntax=docker/dockerfile:1.2 FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build-env WORKDIR /app +ARG VSS_NUGET_URI_PREFIXES +ARG VSS_NUGET_EXTERNAL_FEED_ENDPOINTS COPY ./src ./hidi/src COPY ./Directory.Build.props ./hidi/Directory.Build.props +COPY ./nuget.config ./hidi/nuget.config COPY ./README.md ./hidi/README.md WORKDIR /app/hidi -RUN dotnet publish ./src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj -c Release +RUN wget -qO- https://aka.ms/install-artifacts-credprovider.sh | bash +RUN --mount=type=secret,id=vss_nuget_accesstoken,target=/run/secrets/vss_nuget_accesstoken \ + VSS_NUGET_ACCESSTOKEN="$(cat /run/secrets/vss_nuget_accesstoken)" \ + dotnet publish ./src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj -c Release -p:RestoreConfigFile=/app/hidi/nuget.config FROM mcr.microsoft.com/dotnet/runtime:8.0-jammy-chiseled AS runtime WORKDIR /app From 70ea3e34cab8ac7393b268959deacadbd61efe7d Mon Sep 17 00:00:00 2001 From: Vincent Biret Date: Wed, 12 Aug 2026 08:37:26 -0400 Subject: [PATCH 3/7] ci: reverts to generated nuget.config to avoid impacting external contributors Signed-off-by: Vincent Biret --- .azure-pipelines/ci-build.yml | 14 ++++++++++++++ Dockerfile | 14 +++++++++----- nuget.config | 7 ------- 3 files changed, 23 insertions(+), 12 deletions(-) delete mode 100644 nuget.config diff --git a/.azure-pipelines/ci-build.yml b/.azure-pipelines/ci-build.yml index 1fab7c2e8..4ab278155 100644 --- a/.azure-pipelines/ci-build.yml +++ b/.azure-pipelines/ci-build.yml @@ -75,6 +75,18 @@ extends: - task: NuGetAuthenticate@1 displayName: 'Authenticate to Azure Artifacts' + - pwsh: | + @" + + + + + + + + "@ | Set-Content -Path "$(Build.SourcesDirectory)/nuget.config" -Encoding UTF8 + displayName: 'Create nuget.config (central feed)' + - task: DotNetCoreCLI@2 displayName: 'restore' inputs: @@ -487,6 +499,7 @@ extends: --build-arg VSS_NUGET_EXTERNAL_FEED_ENDPOINTS \ --build-arg VSS_NUGET_URI_PREFIXES \ --secret id=vss_nuget_accesstoken,env=VSS_NUGET_ACCESSTOKEN \ + --secret id=nuget_config,src="$(Pipeline.Workspace)/nuget.config" \ -t "$(REGISTRY)/$(IMAGE_NAME):nightly" \ -t "$(REGISTRY)/$(IMAGE_NAME):${VERSION}.${BUILDDATE}${RUNNUMBER}" \ "$(Pipeline.Workspace)" @@ -510,6 +523,7 @@ extends: --build-arg VSS_NUGET_EXTERNAL_FEED_ENDPOINTS \ --build-arg VSS_NUGET_URI_PREFIXES \ --secret id=vss_nuget_accesstoken,env=VSS_NUGET_ACCESSTOKEN \ + --secret id=nuget_config,src="$(Pipeline.Workspace)/nuget.config" \ -t "$(REGISTRY)/$(IMAGE_NAME):latest" \ -t "$(REGISTRY)/$(IMAGE_NAME):${VERSION}" \ "$(Pipeline.Workspace)" diff --git a/Dockerfile b/Dockerfile index b9935a64f..651a4f979 100644 --- a/Dockerfile +++ b/Dockerfile @@ -6,13 +6,17 @@ ARG VSS_NUGET_EXTERNAL_FEED_ENDPOINTS COPY ./src ./hidi/src COPY ./Directory.Build.props ./hidi/Directory.Build.props -COPY ./nuget.config ./hidi/nuget.config COPY ./README.md ./hidi/README.md WORKDIR /app/hidi -RUN wget -qO- https://aka.ms/install-artifacts-credprovider.sh | bash -RUN --mount=type=secret,id=vss_nuget_accesstoken,target=/run/secrets/vss_nuget_accesstoken \ - VSS_NUGET_ACCESSTOKEN="$(cat /run/secrets/vss_nuget_accesstoken)" \ - dotnet publish ./src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj -c Release -p:RestoreConfigFile=/app/hidi/nuget.config +RUN --mount=type=secret,id=vss_nuget_accesstoken,target=/run/secrets/vss_nuget_accesstoken,required=false \ + --mount=type=secret,id=nuget_config,target=/run/secrets/nuget_config,required=false \ + if [ -f /run/secrets/nuget_config ]; then \ + wget -qO- https://aka.ms/install-artifacts-credprovider.sh | bash && \ + VSS_NUGET_ACCESSTOKEN="$(cat /run/secrets/vss_nuget_accesstoken)" \ + dotnet publish ./src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj -c Release -p:RestoreConfigFile=/run/secrets/nuget_config; \ + else \ + dotnet publish ./src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj -c Release; \ + fi FROM mcr.microsoft.com/dotnet/runtime:8.0-jammy-chiseled AS runtime WORKDIR /app diff --git a/nuget.config b/nuget.config deleted file mode 100644 index 76a0cc26d..000000000 --- a/nuget.config +++ /dev/null @@ -1,7 +0,0 @@ - - - - - - - From c028a75b5a036cf67b8aa5bc49efd7bfc01e5898 Mon Sep 17 00:00:00 2001 From: Vincent Biret Date: Wed, 12 Aug 2026 09:15:03 -0400 Subject: [PATCH 4/7] ci: reverts switch to dotnet task Signed-off-by: Vincent Biret --- .azure-pipelines/ci-build.yml | 6 ------ 1 file changed, 6 deletions(-) diff --git a/.azure-pipelines/ci-build.yml b/.azure-pipelines/ci-build.yml index 4ab278155..946a0fa6b 100644 --- a/.azure-pipelines/ci-build.yml +++ b/.azure-pipelines/ci-build.yml @@ -266,13 +266,11 @@ extends: - task: 1ES.PublishNuget@1 displayName: 'NuGet push' inputs: - useDotNetTask: true packagesToPush: '$(Pipeline.Workspace)/Nugets/Microsoft.OpenApi.Hidi.*.nupkg' packageParentPath: '$(Pipeline.Workspace)/Nugets' nuGetFeedType: external publishFeedCredentials: 'OpenAPI Nuget Connection' publishPackageMetadata: true - requestTimeout: 600000 retryCountOnTaskFailure: 2 - deployment: deploy_lib @@ -303,13 +301,11 @@ extends: - task: 1ES.PublishNuget@1 displayName: 'NuGet push' inputs: - useDotNetTask: true packagesToPush: '$(Pipeline.Workspace)/Nugets/Microsoft.OpenApi.*.nupkg' packageParentPath: '$(Pipeline.Workspace)/Nugets' nuGetFeedType: external publishFeedCredentials: 'OpenAPI Nuget Connection' publishPackageMetadata: true - requestTimeout: 600000 retryCountOnTaskFailure: 2 - deployment: deploy_yaml_reader @@ -332,13 +328,11 @@ extends: - task: 1ES.PublishNuget@1 displayName: 'NuGet push' inputs: - useDotNetTask: true packagesToPush: '$(Pipeline.Workspace)/Nugets/Microsoft.OpenApi.YamlReader.*.nupkg' packageParentPath: '$(Pipeline.Workspace)/Nugets' nuGetFeedType: external publishFeedCredentials: 'OpenAPI Nuget Connection' publishPackageMetadata: true - requestTimeout: 600000 retryCountOnTaskFailure: 2 - deployment: create_github_release From 6a9a3fd29ea36466cd7af3c4f3b0e00e7b1be7da Mon Sep 17 00:00:00 2001 From: Vincent Biret Date: Wed, 12 Aug 2026 09:17:58 -0400 Subject: [PATCH 5/7] ci: fixes docker build net version Signed-off-by: Vincent Biret --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 651a4f979..f6aaacc2c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # syntax=docker/dockerfile:1.2 -FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build-env +FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build-env WORKDIR /app ARG VSS_NUGET_URI_PREFIXES ARG VSS_NUGET_EXTERNAL_FEED_ENDPOINTS From e0ddd2c6df1dea4abe8b33e0ceb42c165b40378e Mon Sep 17 00:00:00 2001 From: Vincent Biret Date: Wed, 12 Aug 2026 10:51:34 -0400 Subject: [PATCH 6/7] ci: adds network isolation settings Signed-off-by: Vincent Biret --- .azure-pipelines/ci-build.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.azure-pipelines/ci-build.yml b/.azure-pipelines/ci-build.yml index 946a0fa6b..5241f4c25 100644 --- a/.azure-pipelines/ci-build.yml +++ b/.azure-pipelines/ci-build.yml @@ -39,6 +39,9 @@ extends: name: Azure-Pipelines-1ESPT-ExDShared image: windows-2022 os: windows + settings: + # Direct NuGet.org publishing is blocked by CFSClean. Keep later CFS policies enabled. + networkIsolationPolicy: Permissive, CFSClean2, CFSClean3 customBuildTags: - ES365AIMigrationTooling stages: From 0de022bbbfbf339e57ef2cc5965cdea2e9033b7d Mon Sep 17 00:00:00 2001 From: Vincent Biret Date: Wed, 12 Aug 2026 11:59:24 -0400 Subject: [PATCH 7/7] ci: upgrades esrp code sign task version because of underlying node version deprecation Signed-off-by: Vincent Biret --- .azure-pipelines/ci-build.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.azure-pipelines/ci-build.yml b/.azure-pipelines/ci-build.yml index 5241f4c25..37297d5cc 100644 --- a/.azure-pipelines/ci-build.yml +++ b/.azure-pipelines/ci-build.yml @@ -112,7 +112,7 @@ extends: projects: '$(Build.SourcesDirectory)\Microsoft.OpenApi.slnx' arguments: '--configuration $(BuildConfiguration) --no-build' - - task: EsrpCodeSigning@5 + - task: EsrpCodeSigning@6 displayName: 'ESRP CodeSigning binaries' inputs: ConnectedServiceName: 'Federated DevX ESRP Managed Identity Connection' @@ -178,7 +178,7 @@ extends: - pwsh: dotnet pack $(Build.SourcesDirectory)/src/Microsoft.OpenApi.Hidi/Microsoft.OpenApi.Hidi.csproj -o $(Build.ArtifactStagingDirectory) --configuration $(BuildConfiguration) --no-build --no-restore --include-symbols --include-source /p:SymbolPackageFormat=snupkg displayName: 'pack Hidi' - - task: EsrpCodeSigning@5 + - task: EsrpCodeSigning@6 displayName: 'ESRP CodeSigning Nuget Packages' inputs: ConnectedServiceName: 'Federated DevX ESRP Managed Identity Connection'