Utilize a separate pipeline for release tasks

package.json

@@ -27,7 +27,7 @@
 		"@types/source-map-support": "^0.5.6",
 		"@typescript-eslint/eslint-plugin": "^8.0.0",
 		"@typescript-eslint/parser": "^8.0.0",
-		"@vscode/vsce": "^3.6.0",
+		"@vscode/vsce": "^3.7.1",
 		"eslint": "^8.57.0",
 		"eslint-config-prettier": "^9.1.0",
 		"eslint-import-resolver-node": "^0.3.9",

pipeline-templates/package-vsix.yaml

@@ -128,11 +128,4 @@ jobs:
       SourceFolder: '$(Build.SourcesDirectory)'
       Contents: '**\*.binlog'
       TargetFolder: '$(Build.ArtifactStagingDirectory)'
-      flattenFolders: false
-- ${{ if eq(parameters.useOneEngineeringPool, 'true') }}:
-  - template: publish.yaml
-    parameters:
-      pool: ${{ parameters.pool }}
-      SignType: ${{ parameters.SignType }}
-      version: $(GetVersion.version)
-      useOneEngineeringPool: true
+      flattenFolders: false

release.yml

@@ -0,0 +1,92 @@
+trigger: none
+pr: none
+
+parameters:
+  - name: test
+    type: boolean
+    default: false
+
+variables:
+# This is expected to provide the PAT used to tag the release.
+- group: DncEng-Partners-Tokens
+
+resources:
+  repositories:
+  - repository: 1ESPipelineTemplates
+    type: git
+    name: 1ESPipelineTemplates/1ESPipelineTemplates
+    ref: refs/tags/release
+  pipelines:
+  - pipeline: officialBuildCI
+    source: dotnet-vscode-dotnet-runtime
+    branch: main
+extends:
+  template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
+  parameters:
+    pool:
+      name: netcore1espool-internal
+      image: 1es-windows-2022
+      os: windows
+    customBuildTags:
+    - ES365AIMigrationTooling
+    stages:
+    - stage: PublishStage
+      jobs:
+      - deployment: PublishToMarketplace
+        displayName: PublishToMarketplace
+        environment: vscode-dotnetcore-extension-releases
+        pool:
+          name: netcore1espool-internal
+          image: 1es-ubuntu-2204
+          os: linux
+        templateContext:
+          type: releaseJob
+          isProduction: true
+          inputs:
+          - input: pipelineArtifact
+            pipeline: officialBuildCI
+            artifactName: vscode-dotnet-runtime
+            destinationPath: $(Pipeline.Workspace)
+        strategy:
+          runOnce:
+            deploy:
+              steps:
+              - template: /pipelines-templates/install-node.yaml
+              - template: list-file-structure.yaml
+              - bash: |
+                  VERSION=`node -p "require('./package.json').version"`
+                  npm version $VERSION --allow-same-version
+                  echo "##vso[task.setvariable variable=version;isOutput=true]$VERSION"
+                name: GetVersion
+                displayName: '❓ Get Version'
+                workingDirectory: 'vscode-dotnet-runtime-extension'
+              - pwsh: |
+                  npm ci @vscode/vsce
+                displayName: '⬇️ Install @vscode/vsce'
+              - task: AzureCLI@2
+                displayName: '🚀 Publish to Marketplace'
+                inputs:
+                  azureSubscription: 'VSCode Marketplace Publishing'
+                  scriptType: "pscore"
+                  scriptLocation: 'inlineScript'
+                  workingDirectory: '$(System.ArtifactsDirectory)'
+                  inlineScript: |
+                    $basePublishArgs = , "publish"
+                    $basePublishArgs += '--azure-credential'
+                    $basePublishArgs += '--packagePath'
+                    $publishArgs = $basePublishArgs + 'vscode-dotnet-runtime-$(GetVersion.version)-signed.vsix'
+                    $publishArgs += '--manifestPath'
+                    $publishArgs += 'vscode-dotnet-runtime-$(GetVersion.version).manifest'
+                    $publishArgs += '--signaturePath'
+                    $publishArgs += 'vscode-dotnet-runtime-$(GetVersion.version).signature.p7s'
+                    If ("${{ parameters.SignType }}" -ne "Real") {
+                      Write-Host "With a test-signed build, the command to publish is printed instead of run."
+                      Write-Host "##[command]npx vsce $publishArgs"
+
+                      Write-Host "🔒 Verify PAT."
+                      npx vsce verify-pat --azure-credential ms-dotnettools
+                    }
+                    Else {
+                      Write-Host "##[command]npx vsce $publishArgs"
+
+                    }