Skip to content

v278

Choose a tag to compare

@tarunramsinghani tarunramsinghani released this 13 Aug 13:01
a63d7dd

Sprint 278

ANT (V1)

  • Remediate transitive dependency CVEs across multiple pipeline tasks (#22401) (2026-08-04)

AzureAppConfigurationExport (V10)

  • [AzureAppConfiguration] Fix agent base package version mismatch (#22351) (2026-07-23)

AzureAppConfigurationImport (V10)

  • [AzureAppConfiguration] Fix agent base package version mismatch (#22351) (2026-07-23)

AzureAppConfigurationSnapshot (V1)

  • [AzureAppConfiguration] Fix agent base package version mismatch (#22351) (2026-07-23)

AzureCLI (V2)

  • Rename AzureCLI FF to AzureCliUseFileInvocation and use getPipelineFeature (#22404) (2026-08-06)

AzureCLI (V3)

  • Rename AzureCLI FF to AzureCliUseFileInvocation and use getPipelineFeature (#22404) (2026-08-06)

AzureCloudPowerShellDeployment (V1)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

AzureContainerApps (V0)

  • [AzureContainerAppsV0][AzureContainerAppsV1] Harden appSourcePath handling to prevent command injection (#22384) (2026-07-28)

AzureContainerApps (V1)

  • [AzureContainerAppsV0][AzureContainerAppsV1] Harden appSourcePath handling to prevent command injection (#22384) (2026-07-28)

AzureFileCopy (V1)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

AzureFileCopy (V2)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

AzureFileCopy (V3)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

AzureFileCopy (V4)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

AzureFileCopy (V5)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

AzureFileCopy (V6)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

AzureFunctionAppContainer (V1)

  • Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)

AzureFunctionApp (V1)

  • Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)

AzureFunctionApp (V2)

  • Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)

AzurePowerShell (V2)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

AzurePowerShell (V3)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

AzurePowerShell (V4)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

AzurePowerShell (V5)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

AzureRmWebAppDeployment (V3)

  • Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)

AzureRmWebAppDeployment (V4)

  • Validate publish profile values to prevent command injection in AzureRmWebAppDeployment V4/V5 (#22388) (2026-07-28)
  • Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)

AzureRmWebAppDeployment (V5)

  • Validate publish profile values to prevent command injection in AzureRmWebAppDeployment V4/V5 (#22388) (2026-07-28)
  • Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)

AzureWebAppContainer (V1)

  • Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)

AzureWebApp (V1)

  • Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)

Bash (V3)

  • Add minified BashV3 build configuration (#22381) (2026-07-28)

BicepDeploy (V0)

  • [BicepDeployV0] Fix designer dropdowns, multi-agent login race, drop preview flag (#22406) (2026-08-04)

CmdLine (V2)

  • Update picomatch to 2.3.2 in PowerShellV2 and CmdLineV2 (#22412) (2026-08-06)

DownloadGitHubRelease (V0)

  • [DownloadGitHubReleaseV0] Sanitize release name to prevent vso logging-command injection (#22392) (2026-08-03)

JavaToolInstaller (V0)

  • update form-data package in the JavaToolInstaller Tasks (#22398) (2026-08-03)

JavaToolInstaller (V1)

  • update form-data package in the JavaToolInstaller Tasks (#22398) (2026-08-03)

JenkinsDownloadArtifacts (V1)

  • Remediate transitive dependency CVEs across multiple pipeline tasks (#22401) (2026-08-04)

Notation (V0)

  • Remediate transitive dependency CVEs across multiple pipeline tasks (#22401) (2026-08-04)

PackerBuild (V1)

  • Remediate transitive dependency CVEs across multiple pipeline tasks (#22401) (2026-08-04)

PowerShellOnTargetMachines (V3)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

PowerShell (V2)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
  • Update picomatch to 2.3.2 in PowerShellV2 and CmdLineV2 (#22412) (2026-08-06)

ServiceFabricPowerShell (V1)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

SqlAzureDacpacDeployment (V1)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

SqlDacpacDeploymentOnMachineGroup (V0)

  • SqlDacpacDeploymentOnMachineGroupV0: preserve original sqlQuery failures instead of masking with format-spec errors (#22372) (2026-08-03)
  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

VsTest (V3)

  • Remediate transitive dependency CVEs across multiple pipeline tasks (#22401) (2026-08-04)

WindowsMachineFileCopy (V1)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)

WindowsMachineFileCopy (V2)

  • Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)