Sprint 278
ANT (V1)
- Remediate transitive dependency CVEs across multiple pipeline tasks (#22401) (2026-08-04)
AzureAppConfigurationExport (V10)
- [AzureAppConfiguration] Fix agent base package version mismatch (#22351) (2026-07-23)
AzureAppConfigurationImport (V10)
- [AzureAppConfiguration] Fix agent base package version mismatch (#22351) (2026-07-23)
AzureAppConfigurationSnapshot (V1)
- [AzureAppConfiguration] Fix agent base package version mismatch (#22351) (2026-07-23)
AzureCLI (V2)
- Rename AzureCLI FF to AzureCliUseFileInvocation and use getPipelineFeature (#22404) (2026-08-06)
AzureCLI (V3)
- Rename AzureCLI FF to AzureCliUseFileInvocation and use getPipelineFeature (#22404) (2026-08-06)
AzureCloudPowerShellDeployment (V1)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
AzureContainerApps (V0)
- [AzureContainerAppsV0][AzureContainerAppsV1] Harden appSourcePath handling to prevent command injection (#22384) (2026-07-28)
AzureContainerApps (V1)
- [AzureContainerAppsV0][AzureContainerAppsV1] Harden appSourcePath handling to prevent command injection (#22384) (2026-07-28)
AzureFileCopy (V1)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
AzureFileCopy (V2)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
AzureFileCopy (V3)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
AzureFileCopy (V4)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
AzureFileCopy (V5)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
AzureFileCopy (V6)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
AzureFunctionAppContainer (V1)
- Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)
AzureFunctionApp (V1)
- Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)
AzureFunctionApp (V2)
- Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)
AzurePowerShell (V2)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
AzurePowerShell (V3)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
AzurePowerShell (V4)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
AzurePowerShell (V5)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
AzureRmWebAppDeployment (V3)
- Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)
AzureRmWebAppDeployment (V4)
- Validate publish profile values to prevent command injection in AzureRmWebAppDeployment V4/V5 (#22388) (2026-07-28)
- Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)
AzureRmWebAppDeployment (V5)
- Validate publish profile values to prevent command injection in AzureRmWebAppDeployment V4/V5 (#22388) (2026-07-28)
- Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)
AzureWebAppContainer (V1)
- Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)
AzureWebApp (V1)
- Use fixed Azure ARM REST package in app deploy tasks (#22389) (2026-07-28)
Bash (V3)
- Add minified BashV3 build configuration (#22381) (2026-07-28)
BicepDeploy (V0)
- [BicepDeployV0] Fix designer dropdowns, multi-agent login race, drop preview flag (#22406) (2026-08-04)
CmdLine (V2)
- Update picomatch to 2.3.2 in PowerShellV2 and CmdLineV2 (#22412) (2026-08-06)
DownloadGitHubRelease (V0)
- [DownloadGitHubReleaseV0] Sanitize release name to prevent vso logging-command injection (#22392) (2026-08-03)
JavaToolInstaller (V0)
- update form-data package in the JavaToolInstaller Tasks (#22398) (2026-08-03)
JavaToolInstaller (V1)
- update form-data package in the JavaToolInstaller Tasks (#22398) (2026-08-03)
JenkinsDownloadArtifacts (V1)
- Remediate transitive dependency CVEs across multiple pipeline tasks (#22401) (2026-08-04)
Notation (V0)
- Remediate transitive dependency CVEs across multiple pipeline tasks (#22401) (2026-08-04)
PackerBuild (V1)
- Remediate transitive dependency CVEs across multiple pipeline tasks (#22401) (2026-08-04)
PowerShellOnTargetMachines (V3)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
PowerShell (V2)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
- Update picomatch to 2.3.2 in PowerShellV2 and CmdLineV2 (#22412) (2026-08-06)
ServiceFabricPowerShell (V1)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
SqlAzureDacpacDeployment (V1)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
SqlDacpacDeploymentOnMachineGroup (V0)
- SqlDacpacDeploymentOnMachineGroupV0: preserve original sqlQuery failures instead of masking with format-spec errors (#22372) (2026-08-03)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
VsTest (V3)
- Remediate transitive dependency CVEs across multiple pipeline tasks (#22401) (2026-08-04)
WindowsMachineFileCopy (V1)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)
WindowsMachineFileCopy (V2)
- Fix AzureFileCopy SourcePath/additionalArguments PowerShell injection (MSRC 128417) (#22378) (2026-08-03)