Skip to content

v281

Choose a tag to compare

@tarunramsinghani tarunramsinghani released this 19 Oct 05:30
4a9930e

Sprint 281

ANTV1

  • Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

ArchiveFiles (V2)

  • Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

AzureAppServiceManage (V0)

  • Updated dependencies to fix reported vulnerabilities in multiple tasks (#22540) (2026-10-05)

AzureAppServiceSettings (V1)

  • Updated dependencies to fix reported vulnerabilities in multiple tasks (#22540) (2026-10-05)

AzureCLI (V1)

  • Update AzureCLI certificate file lifecycle (#22544) (2026-09-23)
  • Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureCLI (V2)

  • Update AzureCLI certificate file lifecycle (#22544) (2026-09-23)
  • Reject cmd.exe percent expansion in AzureCLI batch arguments (#22613) (2026-10-07)
  • Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureCLI (V3)

  • Update AzureCLI certificate file lifecycle (#22544) (2026-09-23)
  • Reject cmd.exe percent expansion in AzureCLI batch arguments (#22613) (2026-10-07)
  • Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureCloudPowerShellDeployment (V1)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

AzureCloudPowerShellDeployment (V2)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

AzureContainerApps (V1)

  • Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

AzureFileCopy (V1)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

AzureFileCopy (V2)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
  • Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

AzureFileCopy (V3)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
  • Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

AzureFileCopy (V4)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
  • Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureFileCopy (V5)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
  • Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureFileCopy (V6)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
  • Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureFunctionAppContainer (V1)

  • Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzureFunctionApp (V1)

  • Updated dependencies to fix reported vulnerabilities in multiple tasks (#22540) (2026-10-05)

AzureFunctionApp (V2)

  • Updated dependencies to fix reported vulnerabilities in multiple tasks (#22540) (2026-10-05)

AzureFunctionOnKubernetes (V0)

  • Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

AzureFunctionOnKubernetes (V1)

  • Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzureIoTEdge (V2)

  • Update docker-common to 2.280.4 in AzureIoTEdgeV2 (#22524) (2026-09-24)
  • AzureIoTEdgeV2: harden registry credential handling and task restrictions (#22598) (2026-10-06)
  • Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureKeyVault (V2)

  • Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureMysqlDeployment (V1)

  • Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzureMysqlDeployment (V2)

  • Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzurePowerShell (V2)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

AzurePowerShell (V3)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

AzurePowerShell (V4)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
  • Reject cmd.exe percent expansion in AzureCLI batch arguments (#22613) (2026-10-07)
  • Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzurePowerShell (V5)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
  • Reject cmd.exe percent expansion in AzureCLI batch arguments (#22613) (2026-10-07)
  • Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureResourceGroupDeployment (V2)

  • Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzureResourceManagerTemplateDeployment (V3)

  • Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzureRmWebAppDeployment (V3)

  • Update AzureRmWebAppDeployment MSDeploy dependency (#22602) (2026-10-05)

AzureRmWebAppDeployment (V4)

  • Update AzureRmWebAppDeployment MSDeploy dependency (#22602) (2026-10-05)

AzureRmWebAppDeployment (V5)

  • Update AzureRmWebAppDeployment MSDeploy dependency (#22602) (2026-10-05)

AzureSpringCloud (V0)

  • Neutralize Azure Pipelines logging commands in untrusted deployment logs and restrict task-settable variables to the documented output (#22595) (2026-10-09)

AzureWebApp (V1)

  • Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

AzureWebAppContainer (V1)

  • Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

BicepDeploy (V0)

  • Update BicepDeploy dependencies and logging (#22609) (2026-10-06)

Cache (V2)

  • Add saveOnPartialSuccess input to CacheV2 (#22611) (2026-10-06)

CmdLine (V2)

  • update task-lib for CmdLineV2 task (#22554) (2026-09-23)

CUrlUploader (V2)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DecryptFile (V1)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DeleteFiles (V1)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DockerCompose (V1)

  • Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

Docker (V1)

  • Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

Docker (V2)

  • Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

DotNetCoreCLI (V2)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DotNetCoreInstaller (V0)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DotNetCoreInstaller (V1)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DownloadBuildArtifacts (V0)

  • Update artifact-engine and azure-pipelines-task-lib dependencies to latest versions (#22586) (2026-09-30)
  • Update DownloadBuildArtifactsV0 to azure-pipelines-task-lib 5.281.1 (#22618) (2026-10-07)
  • Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)
  • Users/shaparashar/download build artifact@0 (#22630) (2026-10-12)

DownloadFileshareArtifacts (V1)

  • Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

DownloadGitHubNpmPackage (V1)

  • Update DownloadGitHubNpmPackage task to improve error handling and update dependencies (#22585) (2026-09-30)
  • Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

DownloadGitHubNugetPackage (V1)

  • Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

DownloadGitHubRelease (V0)

  • Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

DownloadPackage (V1)

  • Improve path validation in DownloadPackageV1 (#22632) (2026-10-09)

DownloadSecureFile (V1)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

ExtractFiles (V1)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

FileTransform (V1)

  • Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

FileTransform (V2)

  • Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

FtpUpload (V1)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

FtpUpload (V2)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

FuncToolsInstaller (V0)

  • Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

GitHubRelease (V1)

  • Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

GoTool (V0)

  • Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

Go (V0)

  • Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

GradleAuthenticate (V0)

  • GradleAuthenticateV0 stdout escaping (#22597) (2026-10-06)
  • GradleAuthenticateV0 Add Gradle plugin version validation (#22623) (2026-10-08)

Gradle (V2)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

Gradle (V3)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

Gradle (V4)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

Grunt (V0)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

Gulp (V0)

  • Updated latest common package version in multiple tasks (#22549) (2026-09-30)

HelmDeploy (V0)

  • Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

HelmDeploy (V1)

  • Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

HelmInstaller (V1)

  • Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

InstallAppleCertificate (V2)

  • Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

InstallAppleProvisioningProfile (V1)

  • Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

InstallSSHKey (V0)

  • Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

JavaToolInstaller (V0)

  • Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

JavaToolInstaller (V1)

  • Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

JenkinsDownloadArtifacts (V1)

  • Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

JenkinsDownloadArtifacts (V2)

  • Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

JenkinsQueueJob (V2)

  • Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

KubectlInstaller (V0)

  • Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

KubeloginInstaller (V0)

  • Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

Kubernetes (V0)

  • Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

Kubernetes (V1)

  • KubernetesV1: sanitize Azure Pipelines logging-command markers in streamed kubectl output (#22542) (2026-09-23)
  • Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

MavenAuthenticate (V0)

  • MavenAuth - Harden ~/.m2/settings.xml file permissions (#22569) (2026-10-09)

Maven (V2)

  • Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

Maven (V3)

  • Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

Maven (V4)

  • Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

MSBuild (V1)

  • package dependencies update for MSBuildV1 task (#22483) (2026-09-23)

MysqlDeploymentOnMachineGroup (V1)

  • Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

NodeTaskRunnerInstaller (V0)

  • Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

NodeTool (V0)

  • Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

Notation (V0)

  • Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

NpmAuthenticate (V0)

  • Harden npmAuthenticate file handling (#22596) (2026-10-05)
  • NpmAuthenticateV0 output handling (#22647) (2026-10-09)

Npm (V0)

  • NpmV0 and NpmV1 child process output handling (#22646) (2026-10-09)

Npm (V1)

  • NpmV0 and NpmV1 child process output handling (#22646) (2026-10-09)

PackerBuild (V0)

  • Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

PackerBuild (V1)

  • Apply package upgrades to mitigate security issues (#22478) (2026-09-30)
  • Add External Logs filtering to PackerBuildV1 (#22583) (2026-10-05)

PowerShell (V2)

  • Remediate security findings by updating dependencies (#22480) (2026-09-30)

PublishBuildArtifacts (V1)

  • Remediate security findings by updating dependencies (#22480) (2026-09-30)

PublishCodeCoverageResults (V2)

  • Restrict coverage source reads for PCCRV2 task (#22546) (2026-09-27)

PublishPipelineMetadata (V0)

  • Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)
  • Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

PyPIPublisher (V0)

  • Remediate security findings by updating dependencies (#22480) (2026-09-30)

PythonScript (V0)

  • update package dependencies for PythonScriptV0 (#22616) (2026-10-06)

ServiceFabricDeploy (V1)

  • Fix path traversal in ServiceFabricDeployV1 diff package and image store paths (#22543) (2026-09-28)

ServiceFabricUpdateManifests (V2)

  • Fix path traversal in ServiceFabricDeployV1 diff package and image store paths (#22543) (2026-09-28)

ShellScript (V2)

  • Remediate security findings by updating dependencies (#22480) (2026-09-30)

SqlAzureDacpacDeployment (V1)

  • Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

Ssh (V0)

  • Remediate security findings by updating dependencies (#22480) (2026-09-30)

UniversalPackages (V1)

  • UniversalPackagesV1: use task-scoped variable for ArtifactTool path (#22650) (2026-10-09)
  • Redo the Build Config Gen task generator project (#22653) (2026-10-12)

UseDotNet (V2)

  • Remediate security findings by updating dependencies (#22480) (2026-09-30)
  • Filter the versions in global.json file in UseDotNetV2 Task (#22603) (2026-10-06)
  • Modernize the UseDotNet task icon (#22619) (2026-10-06)

UseNode (V1)

  • Remediate security findings by updating dependencies (#22480) (2026-09-30)

UsePythonVersion (V0)

  • Remediate security findings by updating dependencies (#22480) (2026-09-30)

UseRubyVersion (V0)

  • Remediate security findings by updating dependencies (#22480) (2026-09-30)

VSBuild (V1)

  • Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

VsTest (V2)

  • Update TestAgent package for VSTest V2 (#22636) (2026-10-09)

VsTest (V3)

  • Update TestAgent package for VSTest V3 (#22635) (2026-10-09)

WindowsMachineFileCopy (V1)

  • WindowsMachineFileCopyV1: import VstsTaskSdk non-interactively (fixes #22579) (#22605) (2026-10-06)

WindowsMachineFileCopy (V2)

  • WindowsMachineFileCopyV2: import VstsTaskSdk non-interactively (#22617) (2026-10-06)

XamarinAndroid (V1)

  • Remediate security findings by updating dependencies (#22480) (2026-09-30)

XamariniOS (V2)

  • Remediate security findings by updating dependencies (#22480) (2026-09-30)

XamarinTestCloud (V1)

  • Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

Xcode (V5)

  • Update dependencies for XCodeV5 task (#22482) (2026-09-23)