Repository navigation
Primary nuget pipeline runs with CFS clean. - #32400
Merged
Merged
Conversation
Contributor
There was a problem hiding this comment.
🔵 Needs a closer look
Production signing and network-isolation changes require validation in the live Azure Pipelines environment.
Pull request overview
Enables CFS-clean NuGet packaging by routing dependencies through authenticated feeds and updating signing infrastructure.
Changes:
- Enables stricter network isolation policies.
- Propagates authenticated feed configuration into container builds.
- Upgrades ESRP signing tasks and removes obsolete QNN AAR testing.
File summaries
| File | Description |
|---|---|
templates/win-esrp-dll.yml |
Upgrades Windows signing to ESRP v6. |
templates/setup-feeds-and-python-steps.yml |
Adds authenticated Gradle plugin resolution. |
templates/mac-esrp-dylib.yml |
Upgrades macOS signing to ESRP v6. |
templates/esrp_nuget.yml |
Upgrades NuGet signing to ESRP v6. |
templates/c-api-linux-cpu.yml |
Mounts authenticated Git configuration. |
templates/android-java-api-aar.yml |
Configures feeds for containerized AAR builds. |
custom-nuget-packaging-pipeline.yml |
Enables CFS-clean network isolation. |
c-api-noopenmp-test-pipelines.yml |
Removes the QNN AAR test stage. |
c-api-noopenmp-packaging-pipelines.yml |
Enables CFS-clean network isolation. |
c-api-noopenmp-packaging-pipelines-cuda13.yml |
Replaces permissive networking with restricted policies. |
Review details
- Files reviewed: 10/10 changed files
- Comments generated: 0
- Review effort level: Balanced
💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Tianlei Wu (tianleiwu)
approved these changes
Sep 3, 2026
Tianlei Wu (tianleiwu)
enabled auto-merge (squash)
September 3, 2026 03:03
adrastogi
added a commit
that referenced
this pull request
Oct 1, 2026
<!-- Describe your changes. --> This cherry-picks the following infrastructure fixes from main to unblock the 1.28.3 packaging pipelines: * #31724 * #29743 * #32400 * #32005 #29743 required one conflict resolution: the release branch's x64-only CUDA plugin job was preserved while adopting the checkout redirect. The other picks applied cleanly. --------- Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
This was referenced Oct 5, 2026
This was referenced Oct 13, 2026
Open
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Motivation and Context