From 450a7f816de3ca96d374c189cf7e6ede795c11c6 Mon Sep 17 00:00:00 2001 From: MerlinBot Date: Mon, 6 Jun 2022 16:58:44 +0000 Subject: [PATCH 1/5] As a repository owner, you must take action to protect Microsoft against potential Software Supply Chain attacks. This starts with ensuring your repository has a valid Azure Artifacts configuration so you can take advantage of [Central Feed Services](https://aka.ms/cfs). We are opening this PR with a fix on known issue(s) which we have detected in your repository. Please review and approve this PR at your earliest convenience. **This may impact the ability for pipelines and developers to install packages and build projects.** ## Address **breaking changes** before you merge: * Confirm the suggested Feed is configured per your organization's guidelines. If changes are necessary, work with your Project Administrators to set it up correctly. [Learn more...](https://docs.microsoft.com/en-us/azure/devops/artifacts/feeds/feed-permissions?view=azure-devops) * Add authentication to any failing pipeline definitions. [nuget](https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/package/nuget-authenticate?view=azure-devops), [npm](https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/package/npm-authenticate?view=azure-devops). * Reach out to developers who may need to authenticate to the feed using the [internal_PublicPackages's Connect to feed](https://dev.azure.com/dnceng/internal/_artifacts/feed/internal_PublicPackages/connect) instructions in Azure Artifacts. ## Changes * `.npmrc` added as a sibling to this [package.json](/package.json) referencing [internal_PublicPackages](https://dev.azure.com/dnceng/internal/_artifacts/feed/internal_PublicPackages) feed ### Still stuck? Reach out to feedprotection@microsoft.com with any questions. --- This change was automatically generated by [1ES Gardener](https://www.1eswiki.com/wiki/1ES_Gardener) which is an initiative by the 1ES team to help repos stay up-to-date with latest tools, features, and best practices. For feedback or questions, please contact the [Gardener team](mailto:gardener@microsoft.com). --- .npmrc | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 .npmrc diff --git a/.npmrc b/.npmrc new file mode 100644 index 0000000..66742bc --- /dev/null +++ b/.npmrc @@ -0,0 +1,4 @@ +# Auto generated file from Gardener Plugin CentralFeedServiceAdoptionPlugin +registry=https://pkgs.dev.azure.com/dnceng/internal/_packaging/internal_PublicPackages/npm/registry/ + +always-auth=true From ed75f289ef64baf3879eab20ed4b4e63e682d6f0 Mon Sep 17 00:00:00 2001 From: William Godbe Date: Tue, 28 Jun 2022 09:06:30 -0700 Subject: [PATCH 2/5] Update .npmrc --- .npmrc | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/.npmrc b/.npmrc index 66742bc..e4fc99a 100644 --- a/.npmrc +++ b/.npmrc @@ -1,4 +1 @@ -# Auto generated file from Gardener Plugin CentralFeedServiceAdoptionPlugin -registry=https://pkgs.dev.azure.com/dnceng/internal/_packaging/internal_PublicPackages/npm/registry/ - -always-auth=true +registry=https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/ From eecb65527cafd990e71ab863ba775ef3e9d096ca Mon Sep 17 00:00:00 2001 From: William Godbe Date: Wed, 6 Jul 2022 12:53:54 -0700 Subject: [PATCH 3/5] Update default-build.yml --- .vsts-pipelines/templates/default-build.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.vsts-pipelines/templates/default-build.yml b/.vsts-pipelines/templates/default-build.yml index 0774cf5..727f7be 100644 --- a/.vsts-pipelines/templates/default-build.yml +++ b/.vsts-pipelines/templates/default-build.yml @@ -120,9 +120,9 @@ jobs: - task: NuGetToolInstaller@1 displayName: 'Install NuGet.exe' - task: NodeTool@0 - displayName: Install Node 10.x + displayName: Install Node 16.x inputs: - versionSpec: 10.x + versionSpec: 16.x - script: .\build.cmd /p:SignType=$(_SignType) /p:Configuration=$(BuildConfiguration) $(BuildScriptArgs) /bl:artifacts/logs/build.binlog displayName: Run build.cmd - ${{ if ne(parameters.agentOs, 'Windows') }}: From dfa06d576c82b4d5491dd5773a6542f575c12983 Mon Sep 17 00:00:00 2001 From: Matt Mitchell Date: Wed, 6 Jul 2022 14:36:18 -0700 Subject: [PATCH 4/5] Revert "Update default-build.yml" This reverts commit eecb65527cafd990e71ab863ba775ef3e9d096ca. --- .vsts-pipelines/templates/default-build.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.vsts-pipelines/templates/default-build.yml b/.vsts-pipelines/templates/default-build.yml index 727f7be..0774cf5 100644 --- a/.vsts-pipelines/templates/default-build.yml +++ b/.vsts-pipelines/templates/default-build.yml @@ -120,9 +120,9 @@ jobs: - task: NuGetToolInstaller@1 displayName: 'Install NuGet.exe' - task: NodeTool@0 - displayName: Install Node 16.x + displayName: Install Node 10.x inputs: - versionSpec: 16.x + versionSpec: 10.x - script: .\build.cmd /p:SignType=$(_SignType) /p:Configuration=$(BuildConfiguration) $(BuildScriptArgs) /bl:artifacts/logs/build.binlog displayName: Run build.cmd - ${{ if ne(parameters.agentOs, 'Windows') }}: From 0efc30617d2ec4d70d52353b430032220ba53d86 Mon Sep 17 00:00:00 2001 From: Matt Mitchell Date: Wed, 6 Jul 2022 14:39:34 -0700 Subject: [PATCH 5/5] Revert "Revert "Update default-build.yml"" This reverts commit dfa06d576c82b4d5491dd5773a6542f575c12983. --- .vsts-pipelines/templates/default-build.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.vsts-pipelines/templates/default-build.yml b/.vsts-pipelines/templates/default-build.yml index 0774cf5..727f7be 100644 --- a/.vsts-pipelines/templates/default-build.yml +++ b/.vsts-pipelines/templates/default-build.yml @@ -120,9 +120,9 @@ jobs: - task: NuGetToolInstaller@1 displayName: 'Install NuGet.exe' - task: NodeTool@0 - displayName: Install Node 10.x + displayName: Install Node 16.x inputs: - versionSpec: 10.x + versionSpec: 16.x - script: .\build.cmd /p:SignType=$(_SignType) /p:Configuration=$(BuildConfiguration) $(BuildScriptArgs) /bl:artifacts/logs/build.binlog displayName: Run build.cmd - ${{ if ne(parameters.agentOs, 'Windows') }}: