Sprint 220

AndroidSigning (V2)

• [Component Governance Alert] - CVE-2022-24999 in qs 6.9.4 (#18009) (2023-03-28)

AndroidSigning (V3)

• [Component Governance Alert] - CVE-2022-24999 in qs 6.9.4 (#18009) (2023-03-28)

AzureAppServiceManage (V0)

• WorkloadIdentityFederation auth support (#17821) (2023-03-23)

AzureContainerApps (V0)

• Update localization [Part 4] (#18020) (2023-03-27)
• Update AzureContainerAppsV0 with latest changes and Introduce AzureContainerAppsV1 task (#18055) (2023-04-03)

AzureContainerApps (V1)

• Update AzureContainerAppsV0 with latest changes and Introduce AzureContainerAppsV1 task (#18055) (2023-04-03)

AzureFileCopy (V1)

• Add additional arguments validation for AzureFileCopy (#18022) (2023-04-05)

AzureFileCopy (V2)

• Add additional arguments validation for AzureFileCopy (#18022) (2023-04-05)

AzureFileCopy (V3)

• Add additional arguments validation for AzureFileCopy (#18022) (2023-04-05)

AzureFileCopy (V4)

• Add additional arguments validation for AzureFileCopy (#18022) (2023-04-05)

AzureFileCopy (V5)

• Add additional arguments validation for AzureFileCopy (#18022) (2023-04-05)

AzureFunction (V1)

• Update localization [Part 4] (#18020) (2023-03-27)

AzureKeyVault (V2)

• Update localization [Part 4] (#18020) (2023-03-27)

AzurePowerShell (V3)

• Update localization [Part 4] (#18020) (2023-03-27)

AzureRmWebAppDeployment (V4)

• Set USE_MSAL to false in unit tests (#18064) (2023-04-04)

AzureSpringCloud (V0)

• Set USE_MSAL to false in unit tests (#18064) (2023-04-04)

CondaEnvironment (V0)

• [Component Governance Alert] - CVE-2022-24999 in qs 6.10.1 (#18008) (2023-03-28)

CondaEnvironment (V1)

• [Component Governance Alert] - CVE-2022-24999 in qs 6.10.1 (#18008) (2023-03-28)

DotNetCoreInstaller (V0)

• vulnerabilities fix for DotNetCoreInstallerV0 (#17981) (2023-03-28)

DownloadBuildArtifacts (V0)

• Properly handle & in URL in DownloadBuildArtifactsV0 task (#17902) (2023-03-23)

DownloadFileshareArtifacts (V0)

• vulnerabilities fixes for DownloadFileshareArtifactsV0 (#17975) (2023-03-28)

DownloadSecureFile (V1)

• [Component Governance Alert] - CVE-2022-24999 in qs 6.9.4 (#18009) (2023-03-28)

FileTransform (V1)

• Vulnerability Fix for FileTransformV1 (#17900) (2023-03-24)

InstallAppleCertificate (V2)

• [Component Governance Alert] - CVE-2022-24999 in qs 6.9.4 (#18009) (2023-03-28)

InstallAppleProvisioningProfile (V1)

• [Component Governance Alert] - CVE-2022-24999 in qs 6.9.4 (#18009) (2023-03-28)

JenkinsDownloadArtifacts (V1)

• vulnerabilities fixes for JenkinsDownloadArtifactsV1 (#17983) (2023-03-28)

Maven (V2)

• [Component Governance Alert] - CVE-2022-24999 in qs 6.5.2 (#18006) (2023-03-28)

Npm (V0)

• CVE-2021-23358 (#18032) (2023-03-31)
• Release 2-3 tasks to test task switching mechanism (#18036) (2023-03-29)
• Release 2-3 tasks to test task switching mechanism (#18037) (2023-03-29)
• Release 2-3 tasks to test task switching mechanism (#18038) (2023-03-30)

Npm (V1)

• CVE-2021-23358 (#18032) (2023-03-31)

NuGetAuthenticate (V0)

• Release 2-3 tasks to test task switching mechanism (#18041) (2023-03-29)
• Release 2-3 tasks to test task switching mechanism (#18042) (2023-03-29)
• Release 2-3 tasks to test task switching mechanism (#18043) (2023-03-30)

NuGetCommand (V2)

• NuGetCommand V2 add 4.9.6 nuget.exe (#18013) (2023-03-27)

NuGetPublisher (V0)

• CVE-2021-23358 (#18032) (2023-03-31)

NuGetRestore (V1)

• CVE-2021-23358 (#18032) (2023-03-31)

NuGetToolInstaller (V0)

• bump version for nugetToolInstaller task for updated package-common lib (#18048) (2023-03-30)

NuGetToolInstaller (V1)

• bump version for nugetToolInstaller task for updated package-common lib (#18048) (2023-03-30)

PipAuthenticate (V0)

• CVE-2021-23358 (#18032) (2023-03-31)

PublishSymbols (V2)

• Revert "Upgrade PublishSymbolsV2 to NodeJS16 (#17230)" (#17997) (2023-03-29)

TwineAuthenticate (V0)

• CVE-2021-23358 (#18032) (2023-03-31)

UseNode (V1)

• [UseNodeV1] Fix duplicate lib and update localization (#18014) (2023-03-29)
• [UseNodeV1] Update version of "azure-pipelines-tool-lib" to 2.0.3 (#18023) (2023-04-03)

UsePythonVersion (V0)

• [UsePythonVersionV0] Fix duplicate lib and update localization (#17979) (2023-03-24)

WindowsMachineFileCopy (V1)

• Added additional arguments validation for WindowsMachineFileCopy task (#17895) (2023-03-27)

WindowsMachineFileCopy (V2)

• Added additional arguments validation for WindowsMachineFileCopy task (#17895) (2023-03-27)

Xcode (V5)

• [Component Governance Alert] - CVE-2022-24999 in qs 6.9.6 (#18007) (2023-03-28)