Skip to content

Conversation

@bschnurr
Copy link
Member

@bschnurr bschnurr commented Oct 8, 2025

@karthiknadig Looking to test pre-release market publish.

  • added a stable pipeline so that I can hook it with permissions

This PR refactors and enhances the Azure Pipelines configuration for the vscode-autopep8 extension, focusing on pre-release and release workflows:

  • Updates the pre-release pipeline (azure-devdiv-pipeline.pre-release.yml) for improved scheduling, signing, and publishing of VSIX artifacts.
  • Adds a new stable release pipeline (azure-devdiv-pipeline.stable.yml) optimized for tagged releases.
  • Introduces reusable pipeline templates (build/templates/sign.yml, build/templates/publish.yml) to automate extension signing, signature validation, and marketplace publishing.
  • Adds an MSBuild signing project (build/sign.proj) and NuGet packages config to support MicroBuild code signing.
  • Switches pipeline build agents and environments to ensure cross-platform compatibility and secure artifact signing.
  • Updates NPM dependencies (such as @vscode/vsce), Node.js and Python versions for modern toolchain support.
  • Improves build and packaging scripts, including manifest generation and post-sign verification steps.
  • Refactors and cleans up schedules, variables, and job steps to streamline the CI/CD process and enable secure artifact handling for both pre-release and stable releases.

@bschnurr bschnurr added the debt label Oct 8, 2025
@bschnurr bschnurr requested a review from karthiknadig November 6, 2025 17:27
@bschnurr
Copy link
Member Author

bschnurr commented Nov 6, 2025

Looking to test a pre-release

@bschnurr bschnurr requested a review from eleanorjboyd November 6, 2025 19:14
@karthiknadig karthiknadig requested a review from Copilot November 6, 2025 19:40
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR upgrades the @vscode/vsce package from version 2.24.0 to 3.6.2 and adds comprehensive signing and publishing infrastructure for the VS Code extension. The changes include new Azure DevOps pipeline templates for signing and publishing, updated build pipelines, and the introduction of NuGet packages for Microsoft signing tools.

Key Changes:

  • Upgraded @vscode/vsce to v3.6.2, bringing in new dependencies including @secretlint packages for secret detection
  • Added signing infrastructure via MSBuild project and NuGet packages
  • Created reusable pipeline templates for signing and publishing extension artifacts
  • Updated format-check script to remove quotes around glob patterns

Reviewed Changes

Copilot reviewed 8 out of 9 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
package.json Upgraded @vscode/vsce dependency, added fix-format script, removed quotes from format-check globs
package-lock.json Updated lockfile with new dependencies from vsce upgrade and secretlint packages
packages.config Added NuGet configuration for MicroBuild signing tools
build/sign.proj New MSBuild project defining signing targets and file paths
build/templates/sign.yml New template for signing VSIX artifacts with validation steps
build/templates/publish.yml New template for publishing extensions to marketplace
build/azure-devdiv-pipeline.stable.yml New stable release pipeline using MicroBuild templates
build/azure-devdiv-pipeline.pre-release.yml Updated pre-release pipeline with signing and publishing
build/azure-pipeline.pre-release.yml Commented out nightly schedule

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@bschnurr bschnurr requested a review from rchiodo November 6, 2025 20:00
@bschnurr bschnurr requested a review from heejaechang November 6, 2025 20:09
@bschnurr bschnurr merged commit 939b5eb into main Nov 12, 2025
19 checks passed
@bschnurr bschnurr deleted the azure-pipelines branch November 12, 2025 19:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants