github microsoft/azure-pipelines-tasks v282
on GitHub

one hour ago

Sprint 282

AppCenterDistribute (V3)

  • AppCenterDistributeV3 task package updates (#22681) (2026-10-19)

AzureAppConfigurationExport (V10)

  • Updated required packages to fix vulnerabilities in multiple tasks (#22637) (2026-10-13)

AzureAppConfigurationImport (V10)

  • Updated required packages to fix vulnerabilities in multiple tasks (#22637) (2026-10-13)

AzureAppConfigurationSnapshot (V1)

  • Updated required packages to fix vulnerabilities in multiple tasks (#22637) (2026-10-13)

AzureAppServiceManage (V0)

  • Enhance release-management tasks output filtering (#22726) (2026-10-23)

AzureCLI (V2)

  • Localization update (#22714) (2026-10-22)

AzureCLI (V3)

  • Localization update (#22714) (2026-10-22)

AzureContainerApps (V1)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Add VSO output sanitization to GitHubRelease@1 and AzureContainerApps@1 tasks (#22551) (2026-10-16)
  • Localization update (#22714) (2026-10-22)

AzureFileCopy (V6)

  • Escape single quotes in AzureFileCopyV6 TargetPath before script embedding (#22668) (2026-10-27)

AzureFunction (V2)

  • Localization update (#22714) (2026-10-22)

AzureFunctionApp (V1)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)

AzureFunctionApp (V2)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)
  • Localization update (#22714) (2026-10-22)

AzureFunctionAppContainer (V1)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)

AzureIoTEdge (V2)

  • AzureIotEdgeV2 task package updates (#22682) (2026-10-19)

AzureMysqlDeployment (V1)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)
  • Localization update (#22714) (2026-10-22)

AzureMysqlDeployment (V2)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)
  • Localization update (#22714) (2026-10-22)
  • Mysql hardening for AzureMysqlDeploymentV2 task (#22697) (2026-10-27)

AzureNLBManagement (V1)

  • update package dependencies for AzureNLBManagementV1 (#22727) (2026-10-30)

AzurePowerShell (V4)

  • Localization update (#22714) (2026-10-22)
  • AzurePowerShell: Remove internal variables from customer script scope (#22722) (2026-10-23)

AzurePowerShell (V5)

  • AzurePowerShellV5: bound Windows module-version advisory check (#22561) (2026-10-13)
  • Localization update (#22714) (2026-10-22)
  • AzurePowerShell: Remove internal variables from customer script scope (#22722) (2026-10-23)

AzureResourceGroupDeployment (V2)

  • Fix percent-decoding whitespace/empty-check bug in ARM deployment output compatibility (#22693) (2026-10-19)
  • Adjust ARM task file diagnostics (#22706) (2026-10-20)
  • Localization update (#22714) (2026-10-22)

AzureResourceManagerTemplateDeployment (V3)

  • Fix percent-decoding whitespace/empty-check bug in ARM deployment output compatibility (#22693) (2026-10-19)
  • Adjust ARM task file diagnostics (#22706) (2026-10-20)
  • Localization update (#22714) (2026-10-22)

AzureRmWebAppDeployment (V3)

  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)
  • Adjust Azure web app package diagnostics (#22725) (2026-10-26)

AzureRmWebAppDeployment (V4)

  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)
  • Localization update (#22714) (2026-10-22)
  • Adjust Azure web app package diagnostics (#22725) (2026-10-26)

AzureRmWebAppDeployment (V5)

  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)
  • Localization update (#22714) (2026-10-22)
  • Adjust Azure web app package diagnostics (#22725) (2026-10-26)

AzureSpringCloud (V0)

  • Update package versions to address security vulnerabilities in AzureSpringCloudV0 (#22641) (2026-10-13)

AzureStaticWebApp (V0)

  • Update package versions to address security vulnerabilities in AzureStaticWebAppV0 (#22643) (2026-10-13)

AzureTestPlan (V0)

  • [AzureTestPlanV0] Use structured Jest arguments for test names (#22674) (2026-10-19)
  • AzureTestPlanV0: Preserve Jest name whitespace compatibility (#22751) (2026-10-29)

AzureVmssDeployment (V0)

  • AzureVmssDeployment: transport Windows arguments as guarded payload data (#22659) (2026-10-20)
  • Localization update (#22714) (2026-10-22)

AzureVmssDeployment (V1)

  • AzureVmssDeployment: transport Windows arguments as guarded payload data (#22659) (2026-10-20)

AzureWebApp (V1)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)

AzureWebAppContainer (V1)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)

Bash (V3)

  • BashV3 task package updates (#22678) (2026-10-19)

BicepDeploy (V0)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Localization update (#22714) (2026-10-22)
  • BicepDeployV0: update bicep-deploy-common to 0.6.6 and output handling (#22743) (2026-10-28)

Cache (V2)

  • Localization update (#22714) (2026-10-22)

CargoAuthenticate (V0)

  • Improve CargoAuthenticate feed url Validation (#22677) (2026-10-16)
  • Localization update (#22714) (2026-10-22)
  • update packages for WIF tasks (#22680) (2026-10-23)
  • CargoAuthenticateV0 - Update URL parsing for registry host validation (#22709) (2026-10-27)

CMake (V1)

  • CMakeV1: escape shell backslashes fix (#22673) (2026-10-16)

CondaAuthenticate (V0)

  • update packages for WIF tasks (#22680) (2026-10-23)

ContainerBuild (V0)

  • Localization update (#22714) (2026-10-22)

DockerCompose (V1)

  • Localization update (#22714) (2026-10-22)

DockerInstaller (V0)

  • [DockerInstallerV0] Validate release types before installation (#22701) (2026-10-20)
  • Localization update (#22714) (2026-10-22)

DownloadBuildArtifacts (V0)

  • [DownloadBuildArtifactsV0] Validate symlinks in extracted TAR (#22655) (2026-10-14)
  • DownloadBuildArtifactsV0: update artifact-engine to 2.281.2 (#22707) (2026-10-20)

DownloadGitHubNpmPackage (V1)

  • Validate package name and version arguments in DownloadGithubNpmPackageV1 (#22683) (2026-10-16)
  • Localization update (#22714) (2026-10-22)

DownloadPackage (V1)

  • update package dependencies for DownloadPackageV1 task (#22688) (2026-10-21)
  • Localization update (#22714) (2026-10-22)
  • Update packaging-common consumers for output filtering (#22741) (2026-10-27)
  • DownloadPackageV1 - Add Destination symlink Check (#22664) (2026-10-28)

FileTransform (V1)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)

FileTransform (V2)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)

GitHubComment (V0)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)

GitHubRelease (V1)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)
  • Add VSO output sanitization to GitHubRelease@1 and AzureContainerApps@1 tasks (#22551) (2026-10-16)
  • Localization update (#22714) (2026-10-22)

Gradle (V2)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)

Gradle (V3)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)

Gradle (V4)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)

GradleAuthenticate (V0)

  • update packages for GradleAuthenticateV0 task (#22689) (2026-10-21)

HelmDeploy (V0)

  • Enhance release-management tasks output filtering (#22726) (2026-10-23)

HelmDeploy (V1)

  • Enhance release-management tasks output filtering (#22726) (2026-10-23)

IISWebAppDeploymentOnMachineGroup (V0)

  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)
  • update package dependencies for IISWebAppDeploymentOnMachineGroupV0 task (#22730) (2026-10-30)

InvokeRestApi (V1)

  • Localization update (#22714) (2026-10-22)

JenkinsDownloadArtifacts (V1)

  • Jenkins: select artifact-engine command blocking mode (#22716) (2026-10-22)
  • Enhance release-management tasks output filtering (#22726) (2026-10-23)
  • JenkinsDownloadArtifactsV1/V2: Add feature-flagged artifact path JSON and URL encoding (#22736) (2026-10-28)

JenkinsDownloadArtifacts (V2)

  • Update JenkinsDownloadArtifactsV2 task to improve compatibility and documentation (#22715) (2026-10-21)
  • Jenkins: select artifact-engine command blocking mode (#22716) (2026-10-22)
  • Enhance release-management tasks output filtering (#22726) (2026-10-23)
  • JenkinsDownloadArtifactsV1/V2: Add feature-flagged artifact path JSON and URL encoding (#22736) (2026-10-28)

Kubernetes (V0)

  • Validate the kubectl version before building the download URL (#22684) (2026-10-16)

Kubernetes (V1)

  • Validate the kubectl version before building the download URL (#22684) (2026-10-16)
  • Localization update (#22714) (2026-10-22)

KubernetesManifest (V1)

  • KubernetesManifestV1: sanitize untrusted kubectl output to prevent logging command injection (#22631) (2026-10-19)

Maven (V4)

  • Add external log filtering to Maven4 (#22656) (2026-10-19)

MavenAuthenticate (V0)

  • Localization update (#22714) (2026-10-22)
  • update packages for WIF tasks (#22680) (2026-10-23)

MysqlDeploymentOnMachineGroup (V1)

  • Update web deployment common to 4.282.0 (#22669) (2026-10-16)

Notation (V0)

  • Update NotationV0 credential file lifecycle (#22666) (2026-10-14)
  • Localization update (#22714) (2026-10-22)

Npm (V0)

  • update package dependencies for Npm tasks (#22690) (2026-10-22)

Npm (V1)

  • update package dependencies for Npm tasks (#22690) (2026-10-22)
  • NpmV1 Task - Add endpoint validation before adding credentials (#22702) (2026-10-27)

NpmAuthenticate (V0)

  • Add npmAuthenticate userconfig telemetry (#22633) (2026-10-15)
  • Harden npmAuthenticate backup directory location (#22679) (2026-10-16)
  • Localization update (#22714) (2026-10-22)
  • update packages for WIF tasks (#22680) (2026-10-23)
  • npmAuthenticate: Improve post-job cleanup compatibility (#22750) (2026-10-28)

NuGet (V0)

  • update package dependencies for NuGet tasks (#22691) (2026-10-23)

NuGetAuthenticate (V0)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)

NuGetAuthenticate (V1)

  • Localization update (#22714) (2026-10-22)
  • update packages for WIF tasks (#22680) (2026-10-23)

NuGetCommand (V2)

  • update package dependencies for NuGetCommandV2 task (#22614) (2026-10-19)
  • Localization update (#22714) (2026-10-22)

NuGetInstaller (V0)

  • update package dependencies for NuGet tasks (#22691) (2026-10-23)

NuGetPublisher (V0)

  • update package dependencies for NuGet tasks (#22691) (2026-10-23)

NuGetRestore (V1)

  • update package dependencies for NuGet tasks (#22691) (2026-10-23)

NuGetToolInstaller (V0)

  • update package dependencies for NuGet tasks (#22691) (2026-10-23)

NuGetToolInstaller (V1)

  • update package dependencies for NuGet tasks (#22691) (2026-10-23)

OpenPolicyAgentInstaller (V0)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)

PackerBuild (V1)

  • Localization update (#22714) (2026-10-22)

PipAuthenticate (V0)

  • update package dependencies for Pip Twine and UniversalPack tasks (#22692) (2026-10-22)

PipAuthenticate (V1)

  • Improve Pip and Twine Authenticate feed url validation (#22676) (2026-10-16)
  • Localization update (#22714) (2026-10-22)
  • update packages for WIF tasks (#22680) (2026-10-23)

PublishCodeCoverageResults (V2)

  • Gate PublishCodeCoverageResultsV2 logging-command (#22700) (2026-10-20)
  • Localization update (#22714) (2026-10-22)

PublishTestResults (V2)

  • Remove telemetry-only .NET SDK probe from PublishTestResults@2 (#22654) (2026-10-16)

PyPIPublisher (V0)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)

ReviewApp (V0)

  • Updated packages to fix reported vulnerabilities across multiple tasks (#22532) (2026-10-15)

ServiceFabricDeploy (V1)

  • Localization update (#22714) (2026-10-22)

ServiceFabricUpdateManifests (V2)

  • Localization update (#22714) (2026-10-22)
  • ServiceFabricUpdateManifestsV2: sanitize log output and restrict task commands (#22723) (2026-10-22)
  • Enhance release-management tasks output filtering (#22726) (2026-10-23)

SqlAzureDacpacDeployment (V1)

  • Neutralize logging-command injection in SqlAzureDacpacDeploymentV1 output (#22663) (2026-10-16)
  • ServiceFabricUpdateManifestsV2: sanitize log output and restrict task commands (#22723) (2026-10-22)
  • Enhance release-management tasks output filtering (#22726) (2026-10-23)

Ssh (V0)

  • Localization update (#22714) (2026-10-22)
  • [SSHV0] Fix SSH task argument validation for PowerShell remote shells (#22745) (2026-10-28)

TwineAuthenticate (V0)

  • update package dependencies for Pip Twine and UniversalPack tasks (#22692) (2026-10-22)

TwineAuthenticate (V1)

  • Improve Pip and Twine Authenticate feed url validation (#22676) (2026-10-16)
  • Localization update (#22714) (2026-10-22)
  • update packages for WIF tasks (#22680) (2026-10-23)

UniversalPackages (V0)

  • update package dependencies for Pip Twine and UniversalPack tasks (#22692) (2026-10-22)
  • Update packaging-common consumers for output filtering (#22741) (2026-10-27)

UniversalPackages (V1)

  • Localization update (#22714) (2026-10-22)
  • update packages for WIF tasks (#22680) (2026-10-23)
  • Update packaging-common consumers for output filtering (#22741) (2026-10-27)

UseNode (V1)

  • Localization update (#22714) (2026-10-22)

VsTest (V3)

  • VsTestV3: Removing console logs related to vstest.console.exe (#22487) (2026-10-16)
  • VsTestV3: update TestAgent for configurable coverage upload limits (#22744) (2026-10-27)
  • Update VsTestV3 TestAgent package and bump patch version to 3.282.2 (#22754) (2026-10-29)

WindowsMachineFileCopy (V2)

  • Enhance release-management tasks output filtering (#22726) (2026-10-23)
Check out latest releases or
releases around microsoft/azure-pipelines-tasks v282

Don't miss a new azure-pipelines-tasks release

NewReleases is sending notifications on new releases.

Get notifications