From 12b4bb848b36f414cf034ed9c8a720cce1c3b103 Mon Sep 17 00:00:00 2001 From: Jonathan Peppers Date: Tue, 26 May 2026 16:47:14 -0500 Subject: [PATCH] [ci] Stop using preview .NET SDK channel in two lanes The `MAUI Integration` and `Publish symbols and Push to Maestro` jobs were the only two pipeline lanes installing the SDK via `DotNetPreviewSdkVersion=10.0` + `DotNetPreviewSdkQuality=preview`. Because 10.0 has shipped GA, the `preview` quality on that channel resolves to a stale pre-GA SDK that never received the security fix that landed in the 10.0 GA SDKs. As a result, Component Governance reports `Fix not detected` for those two lanes while every other lane (which installs `DotNetSdkVersion=10.0` + `DotNetSdkQuality=GA`) reports `Fix detected`. Switch both lanes to `DotNetSdkVersion` / `DotNetSdkQuality` so they install the patched GA SDK like all the other jobs, and remove the now-unused `DotNetPreviewSdk*` variables so the stale preview channel cannot be reintroduced. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- build-tools/automation/azure-pipelines.yaml | 8 ++++---- build-tools/automation/yaml-templates/variables.yaml | 4 ---- 2 files changed, 4 insertions(+), 8 deletions(-) diff --git a/build-tools/automation/azure-pipelines.yaml b/build-tools/automation/azure-pipelines.yaml index 29836acff14..b73b4f5ee57 100644 --- a/build-tools/automation/azure-pipelines.yaml +++ b/build-tools/automation/azure-pipelines.yaml @@ -134,8 +134,8 @@ extends: parameters: xaSourcePath: $(Build.SourcesDirectory)/android androidSdkPlatforms: $(DefaultTestSdkPlatforms) - dotnetVersion: $(DotNetPreviewSdkVersion) - dotnetQuality: $(DotNetPreviewSdkQuality) + dotnetVersion: $(DotNetSdkVersion) + dotnetQuality: $(DotNetSdkQuality) - task: NuGetAuthenticate@1 displayName: authenticate with azure artifacts @@ -353,8 +353,8 @@ extends: - template: /build-tools/automation/yaml-templates/use-dot-net.yaml@self parameters: - version: $(DotNetPreviewSdkVersion) - quality: $(DotNetPreviewSdkQuality) + version: $(DotNetSdkVersion) + quality: $(DotNetSdkQuality) # Download symbols to be published to the symbols artifact drop declared above - task: DownloadPipelineArtifact@2 diff --git a/build-tools/automation/yaml-templates/variables.yaml b/build-tools/automation/yaml-templates/variables.yaml index c6291fa338c..8a9d45d11f7 100644 --- a/build-tools/automation/yaml-templates/variables.yaml +++ b/build-tools/automation/yaml-templates/variables.yaml @@ -27,10 +27,6 @@ variables: value: 10.0 - name: DotNetSdkQuality value: GA -- name: DotNetPreviewSdkVersion - value: 10.0 -- name: DotNetPreviewSdkQuality - value: preview - name: GitHub.Token value: $(github--pat--vs-mobiletools-engineering-service2) - name: HostedMacImage