Sprint 281

ANTV1

• Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

ArchiveFiles (V2)

• Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

AzureAppServiceManage (V0)

• Updated dependencies to fix reported vulnerabilities in multiple tasks (#22540) (2026-10-05)

AzureAppServiceSettings (V1)

• Updated dependencies to fix reported vulnerabilities in multiple tasks (#22540) (2026-10-05)

AzureCLI (V1)

• Update AzureCLI certificate file lifecycle (#22544) (2026-09-23)
• Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureCLI (V2)

• Update AzureCLI certificate file lifecycle (#22544) (2026-09-23)
• Reject cmd.exe percent expansion in AzureCLI batch arguments (#22613) (2026-10-07)
• Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureCLI (V3)

• Update AzureCLI certificate file lifecycle (#22544) (2026-09-23)
• Reject cmd.exe percent expansion in AzureCLI batch arguments (#22613) (2026-10-07)
• Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureCloudPowerShellDeployment (V1)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

AzureCloudPowerShellDeployment (V2)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

AzureContainerApps (V1)

• Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

AzureFileCopy (V1)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

AzureFileCopy (V2)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
• Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

AzureFileCopy (V3)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
• Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

AzureFileCopy (V4)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
• Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureFileCopy (V5)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
• Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureFileCopy (V6)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
• Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureFunctionAppContainer (V1)

• Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzureFunctionApp (V1)

• Updated dependencies to fix reported vulnerabilities in multiple tasks (#22540) (2026-10-05)

AzureFunctionApp (V2)

• Updated dependencies to fix reported vulnerabilities in multiple tasks (#22540) (2026-10-05)

AzureFunctionOnKubernetes (V0)

• Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

AzureFunctionOnKubernetes (V1)

• Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzureIoTEdge (V2)

• Update docker-common to 2.280.4 in AzureIoTEdgeV2 (#22524) (2026-09-24)
• AzureIoTEdgeV2: harden registry credential handling and task restrictions (#22598) (2026-10-06)
• Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureKeyVault (V2)

• Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureMysqlDeployment (V1)

• Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzureMysqlDeployment (V2)

• Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzurePowerShell (V2)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

AzurePowerShell (V3)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

AzurePowerShell (V4)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
• Reject cmd.exe percent expansion in AzureCLI batch arguments (#22613) (2026-10-07)
• Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzurePowerShell (V5)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)
• Reject cmd.exe percent expansion in AzureCLI batch arguments (#22613) (2026-10-07)
• Redo the Build Config Gen task generator project (#22653) (2026-10-12)

AzureResourceGroupDeployment (V2)

• Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzureResourceManagerTemplateDeployment (V3)

• Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

AzureRmWebAppDeployment (V3)

• Update AzureRmWebAppDeployment MSDeploy dependency (#22602) (2026-10-05)

AzureRmWebAppDeployment (V4)

• Update AzureRmWebAppDeployment MSDeploy dependency (#22602) (2026-10-05)

AzureRmWebAppDeployment (V5)

• Update AzureRmWebAppDeployment MSDeploy dependency (#22602) (2026-10-05)

AzureSpringCloud (V0)

• Neutralize Azure Pipelines logging commands in untrusted deployment logs and restrict task-settable variables to the documented output (#22595) (2026-10-09)

AzureWebApp (V1)

• Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

AzureWebAppContainer (V1)

• Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

BicepDeploy (V0)

• Update BicepDeploy dependencies and logging (#22609) (2026-10-06)

Cache (V2)

• Add saveOnPartialSuccess input to CacheV2 (#22611) (2026-10-06)

CmdLine (V2)

• update task-lib for CmdLineV2 task (#22554) (2026-09-23)

CUrlUploader (V2)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DecryptFile (V1)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DeleteFiles (V1)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DockerCompose (V1)

• Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

Docker (V1)

• Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

Docker (V2)

• Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

DotNetCoreCLI (V2)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DotNetCoreInstaller (V0)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DotNetCoreInstaller (V1)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

DownloadBuildArtifacts (V0)

• Update artifact-engine and azure-pipelines-task-lib dependencies to latest versions (#22586) (2026-09-30)
• Update DownloadBuildArtifactsV0 to azure-pipelines-task-lib 5.281.1 (#22618) (2026-10-07)
• Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)
• Users/shaparashar/download build artifact@0 (#22630) (2026-10-12)

DownloadFileshareArtifacts (V1)

• Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

DownloadGitHubNpmPackage (V1)

• Update DownloadGitHubNpmPackage task to improve error handling and update dependencies (#22585) (2026-09-30)
• Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

DownloadGitHubNugetPackage (V1)

• Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

DownloadGitHubRelease (V0)

• Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

DownloadPackage (V1)

• Improve path validation in DownloadPackageV1 (#22632) (2026-10-09)

DownloadSecureFile (V1)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

ExtractFiles (V1)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

FileTransform (V1)

• Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

FileTransform (V2)

• Dependency update to fix reported vulnerabilities (#22568) (2026-10-07)

FtpUpload (V1)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

FtpUpload (V2)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

FuncToolsInstaller (V0)

• Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

GitHubRelease (V1)

• Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

GoTool (V0)

• Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

Go (V0)

• Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

GradleAuthenticate (V0)

• GradleAuthenticateV0 stdout escaping (#22597) (2026-10-06)
• GradleAuthenticateV0 Add Gradle plugin version validation (#22623) (2026-10-08)

Gradle (V2)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

Gradle (V3)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

Gradle (V4)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

Grunt (V0)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

Gulp (V0)

• Updated latest common package version in multiple tasks (#22549) (2026-09-30)

HelmDeploy (V0)

• Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

HelmDeploy (V1)

• Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

HelmInstaller (V1)

• Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

InstallAppleCertificate (V2)

• Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

InstallAppleProvisioningProfile (V1)

• Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

InstallSSHKey (V0)

• Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

JavaToolInstaller (V0)

• Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

JavaToolInstaller (V1)

• Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

JenkinsDownloadArtifacts (V1)

• Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

JenkinsDownloadArtifacts (V2)

• Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

JenkinsQueueJob (V2)

• Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

KubectlInstaller (V0)

• Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

KubeloginInstaller (V0)

• Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

Kubernetes (V0)

• Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

Kubernetes (V1)

• KubernetesV1: sanitize Azure Pipelines logging-command markers in streamed kubectl output (#22542) (2026-09-23)
• Fix reported vulnerabilities by updating packages across multiple tasks (#22560) (2026-10-07)

MavenAuthenticate (V0)

• MavenAuth - Harden ~/.m2/settings.xml file permissions (#22569) (2026-10-09)

Maven (V2)

• Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

Maven (V3)

• Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

Maven (V4)

• Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

MSBuild (V1)

• package dependencies update for MSBuildV1 task (#22483) (2026-09-23)

MysqlDeploymentOnMachineGroup (V1)

• Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)

NodeTaskRunnerInstaller (V0)

• Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

NodeTool (V0)

• Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

Notation (V0)

• Apply package upgrades to mitigate security issues (#22478) (2026-09-30)

NpmAuthenticate (V0)

• Harden npmAuthenticate file handling (#22596) (2026-10-05)
• NpmAuthenticateV0 output handling (#22647) (2026-10-09)

Npm (V0)

• NpmV0 and NpmV1 child process output handling (#22646) (2026-10-09)

Npm (V1)

• NpmV0 and NpmV1 child process output handling (#22646) (2026-10-09)

PackerBuild (V0)

• Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

PackerBuild (V1)

• Apply package upgrades to mitigate security issues (#22478) (2026-09-30)
• Add External Logs filtering to PackerBuildV1 (#22583) (2026-10-05)

PowerShell (V2)

• Remediate security findings by updating dependencies (#22480) (2026-09-30)

PublishBuildArtifacts (V1)

• Remediate security findings by updating dependencies (#22480) (2026-09-30)

PublishCodeCoverageResults (V2)

• Restrict coverage source reads for PCCRV2 task (#22546) (2026-09-27)

PublishPipelineMetadata (V0)

• Update task dependencies to fix Component Governance alerts (#22566) (2026-10-07)
• Updated packages to fix reported vulnerabilities (#22521) (2026-10-08)

PyPIPublisher (V0)

• Remediate security findings by updating dependencies (#22480) (2026-09-30)

PythonScript (V0)

• update package dependencies for PythonScriptV0 (#22616) (2026-10-06)

ServiceFabricDeploy (V1)

• Fix path traversal in ServiceFabricDeployV1 diff package and image store paths (#22543) (2026-09-28)

ServiceFabricUpdateManifests (V2)

• Fix path traversal in ServiceFabricDeployV1 diff package and image store paths (#22543) (2026-09-28)

ShellScript (V2)

• Remediate security findings by updating dependencies (#22480) (2026-09-30)

SqlAzureDacpacDeployment (V1)

• Clean up Azure service principal certificate files for AzureFileCopy (#22538) (2026-09-30)

Ssh (V0)

• Remediate security findings by updating dependencies (#22480) (2026-09-30)

UniversalPackages (V1)

• UniversalPackagesV1: use task-scoped variable for ArtifactTool path (#22650) (2026-10-09)
• Redo the Build Config Gen task generator project (#22653) (2026-10-12)

UseDotNet (V2)

• Remediate security findings by updating dependencies (#22480) (2026-09-30)
• Filter the versions in global.json file in UseDotNetV2 Task (#22603) (2026-10-06)
• Modernize the UseDotNet task icon (#22619) (2026-10-06)

UseNode (V1)

• Remediate security findings by updating dependencies (#22480) (2026-09-30)

UsePythonVersion (V0)

• Remediate security findings by updating dependencies (#22480) (2026-09-30)

UseRubyVersion (V0)

• Remediate security findings by updating dependencies (#22480) (2026-09-30)

VSBuild (V1)

• Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

VsTest (V2)

• Update TestAgent package for VSTest V2 (#22636) (2026-10-09)

VsTest (V3)

• Update TestAgent package for VSTest V3 (#22635) (2026-10-09)

WindowsMachineFileCopy (V1)

• WindowsMachineFileCopyV1: import VstsTaskSdk non-interactively (fixes #22579) (#22605) (2026-10-06)

WindowsMachineFileCopy (V2)

• WindowsMachineFileCopyV2: import VstsTaskSdk non-interactively (#22617) (2026-10-06)

XamarinAndroid (V1)

• Remediate security findings by updating dependencies (#22480) (2026-09-30)

XamariniOS (V2)

• Remediate security findings by updating dependencies (#22480) (2026-09-30)

XamarinTestCloud (V1)

• Updated dependencies to fix reported vulnerabilities (#22515) (2026-10-05)

Xcode (V5)

• Update dependencies for XCodeV5 task (#22482) (2026-09-23)