Update Common-Packages version to pipelineTasks by v-dmerugu · Pull Request #22011 · microsoft/azure-pipelines-tasks

v-dmerugu · 2026-04-16T07:57:06Z

Context

Updated
ios-signing-common
java-common
msbuildhelpers
securefiles-common Package versions for respective tasks.
AB#2362035
AB#2362036
AB#2362039
AB#2362040

Related PR - microsoft/azure-pipelines-tasks-common-packages#601

Task Name

AndroidSigningV2, AndroidSigningV3, DownloadSecureFileV1, GradleV2, GradleV3, GradleV4, HelmDeployV0, HelmDeployV1, InstallAppleCertificateV2, InstallAppleProvisioningProfileV2, InstallSSHKeyV0, MavenV2, MavenV3, MavenV4, MSBuildV1, VSBuildV1, XcodeV5

Risk Assessment (Low / Medium / High)

Low

Change Behind Feature Flag (Yes / No)

No

Additional Testing Performed

Validated through CI checks

Rollback Scenario and Process (Yes/No)

Rollback plan is documented.

Dependency Impact Assessed and Regression Tested (Yes/No)

All impacted internal modules, APIs, services, and third-party libraries are analyzed.
Results are reviewed and confirmed to not break existing functionality.

Checklist

Related issue linked (if applicable)
Task version was bumped — see versioning guide
Verified the task behaves as expected

azure-pipelines · 2026-04-16T07:57:29Z

Azure Pipelines: Successfully started running 3 pipeline(s).

azure-pipelines · 2026-04-16T07:57:40Z

Azure Pipelines: Successfully started running 3 pipeline(s).

v-dmerugu · 2026-04-16T08:01:14Z

/azp run

azure-pipelines · 2026-04-16T08:01:36Z

Azure Pipelines: Successfully started running 3 pipeline(s).

Copilot

Pull request overview

Updates multiple Azure Pipelines in-box tasks to consume newer versions of shared azure-pipelines-tasks-*-common packages (ios-signing-common, java-common, msbuildhelpers, securefiles-common), along with corresponding task version bumps and lockfile refreshes.

Changes:

Bump task version.Minor across impacted tasks (and reset Patch where applicable).
Update task-level package.json dependencies to newer common-packages versions.
Refresh package-lock.json files to reflect the updated dependency graph (including transitive updates like azure-pipelines-task-lib).

Reviewed changes

Copilot reviewed 51 out of 68 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
Tasks/XcodeV5/task.loc.json	Bumps task version metadata.
Tasks/XcodeV5/task.json	Bumps task version metadata.
Tasks/XcodeV5/package.json	Updates `azure-pipelines-tasks-ios-signing-common` dependency.
Tasks/XcodeV5/package-lock.json	Lockfile refresh for updated ios-signing-common + transitive deps.
Tasks/VSBuildV1/task.loc.json	Bumps task version metadata.
Tasks/VSBuildV1/task.json	Bumps task version metadata.
Tasks/VSBuildV1/package.json	Updates `azure-pipelines-tasks-msbuildhelpers` dependency.
Tasks/VSBuildV1/package-lock.json	Lockfile refresh for updated msbuildhelpers + transitive deps.
Tasks/MavenV4/task.loc.json	Bumps task version metadata.
Tasks/MavenV4/task.json	Bumps task version metadata.
Tasks/MavenV4/package.json	Updates `azure-pipelines-tasks-java-common` dependency.
Tasks/MavenV4/package-lock.json	Lockfile refresh for updated java-common + transitive deps.
Tasks/MavenV3/task.loc.json	Bumps task version metadata (and resets patch).
Tasks/MavenV3/task.json	Bumps task version metadata (and resets patch).
Tasks/MavenV3/package.json	Updates `azure-pipelines-tasks-java-common` dependency.
Tasks/MavenV3/package-lock.json	Lockfile refresh for updated java-common + transitive deps.
Tasks/MavenV2/task.loc.json	Bumps task version metadata.
Tasks/MavenV2/task.json	Bumps task version metadata.
Tasks/MavenV2/package.json	Updates `azure-pipelines-tasks-java-common` dependency.
Tasks/MavenV2/package-lock.json	Lockfile refresh for updated java-common + transitive deps.
Tasks/MSBuildV1/task.loc.json	Bumps task version metadata.
Tasks/MSBuildV1/task.json	Bumps task version metadata.
Tasks/MSBuildV1/package.json	Updates `azure-pipelines-tasks-msbuildhelpers` dependency.
Tasks/MSBuildV1/package-lock.json	Lockfile refresh for updated msbuildhelpers + transitive deps.
Tasks/InstallSSHKeyV0/task.loc.json	Bumps task version metadata.
Tasks/InstallSSHKeyV0/task.json	Bumps task version metadata.
Tasks/InstallSSHKeyV0/package.json	Updates `azure-pipelines-tasks-securefiles-common` dependency.
Tasks/InstallAppleProvisioningProfileV1/task.loc.json	Bumps task version metadata.
Tasks/InstallAppleProvisioningProfileV1/task.json	Bumps task version metadata.
Tasks/InstallAppleProvisioningProfileV1/package.json	Updates ios-signing-common + securefiles-common dependencies.
Tasks/InstallAppleCertificateV2/task.loc.json	Bumps task version metadata.
Tasks/InstallAppleCertificateV2/task.json	Bumps task version metadata.
Tasks/InstallAppleCertificateV2/package.json	Updates ios-signing-common + securefiles-common dependencies.
Tasks/InstallAppleCertificateV2/package-lock.json	Lockfile refresh for updated signing/securefiles common packages.
Tasks/HelmDeployV1/task.loc.json	Bumps task version metadata.
Tasks/HelmDeployV1/task.json	Bumps task version metadata.
Tasks/HelmDeployV1/package.json	Updates `azure-pipelines-tasks-securefiles-common` dependency.
Tasks/HelmDeployV1/package-lock.json	Lockfile refresh for updated securefiles-common + transitive deps.
Tasks/HelmDeployV0/task.loc.json	Bumps task version metadata.
Tasks/HelmDeployV0/task.json	Bumps task version metadata.
Tasks/HelmDeployV0/package.json	Updates `azure-pipelines-tasks-securefiles-common` dependency.
Tasks/HelmDeployV0/package-lock.json	Lockfile refresh for updated securefiles-common + transitive deps.
Tasks/GradleV4/task.loc.json	Bumps task version metadata.
Tasks/GradleV4/task.json	Bumps task version metadata.
Tasks/GradleV4/package.json	Updates `azure-pipelines-tasks-java-common` dependency.
Tasks/GradleV4/package-lock.json	Lockfile refresh for updated java-common + transitive deps.
Tasks/GradleV3/task.loc.json	Bumps task version metadata.
Tasks/GradleV3/task.json	Bumps task version metadata.
Tasks/GradleV3/package.json	Updates `azure-pipelines-tasks-java-common` dependency.
Tasks/GradleV3/package-lock.json	Lockfile refresh for updated java-common + transitive deps.
Tasks/GradleV2/task.loc.json	Bumps task version metadata.
Tasks/GradleV2/task.json	Bumps task version metadata.
Tasks/GradleV2/package.json	Updates `azure-pipelines-tasks-java-common` dependency.
Tasks/GradleV2/package-lock.json	Lockfile refresh for updated java-common + transitive deps.
Tasks/DownloadSecureFileV1/task.loc.json	Bumps task version metadata.
Tasks/DownloadSecureFileV1/task.json	Bumps task version metadata.
Tasks/DownloadSecureFileV1/package.json	Updates `azure-pipelines-tasks-securefiles-common` dependency.
Tasks/AndroidSigningV3/task.loc.json	Bumps task version metadata.
Tasks/AndroidSigningV3/task.json	Bumps task version metadata.
Tasks/AndroidSigningV3/package.json	Updates `azure-pipelines-tasks-securefiles-common` dependency.
Tasks/AndroidSigningV3/package-lock.json	Lockfile refresh for updated securefiles-common + transitive deps.
Tasks/AndroidSigningV2/task.loc.json	Bumps task version metadata.
Tasks/AndroidSigningV2/task.json	Bumps task version metadata.
Tasks/AndroidSigningV2/package.json	Updates `azure-pipelines-tasks-securefiles-common` dependency.

Files not reviewed (17)

Tasks/AndroidSigningV2/package-lock.json: Language not supported
Tasks/AndroidSigningV3/package-lock.json: Language not supported
Tasks/DownloadSecureFileV1/package-lock.json: Language not supported
Tasks/GradleV2/package-lock.json: Language not supported
Tasks/GradleV3/package-lock.json: Language not supported
Tasks/GradleV4/package-lock.json: Language not supported
Tasks/HelmDeployV0/package-lock.json: Language not supported
Tasks/HelmDeployV1/package-lock.json: Language not supported
Tasks/InstallAppleCertificateV2/package-lock.json: Language not supported
Tasks/InstallAppleProvisioningProfileV1/package-lock.json: Language not supported
Tasks/InstallSSHKeyV0/package-lock.json: Language not supported
Tasks/MSBuildV1/package-lock.json: Language not supported
Tasks/MavenV2/package-lock.json: Language not supported
Tasks/MavenV3/package-lock.json: Language not supported
Tasks/MavenV4/package-lock.json: Language not supported
Tasks/VSBuildV1/package-lock.json: Language not supported
Tasks/XcodeV5/package-lock.json: Language not supported

Copilot · 2026-04-16T08:54:17Z

  "author": "Microsoft Corporation",
  "version": {
    "Major": 2,
-    "Minor": 263,
+    "Minor": 273,
    "Patch": 0
  },


AndroidSigningV2 is marked as deprecated (see "deprecated": true in this file). Repo policy is to avoid feature/enhancement work in deprecated tasks; please confirm this dependency/version bump is strictly a security fix, or otherwise apply the update only to the latest non-deprecated task version.

azure-pipelines · 2026-04-16T09:07:37Z

Azure Pipelines: Successfully started running 3 pipeline(s).

azure-pipelines · 2026-04-17T06:59:44Z

Azure Pipelines: Successfully started running 3 pipeline(s).

tarunramsinghani · 2026-04-17T08:03:16Z

Do we have a reported vuln in MavenV2 MavenV3 and AndroidSigningV2 ? If not then we should not update those tasks as they are deprecated..

…//github.com/microsoft/azure-pipelines-tasks into users/v-dmerugu/UpdateCommon-packageVersions

azure-pipelines · 2026-04-20T05:53:19Z

Azure Pipelines: Successfully started running 3 pipeline(s).

v-dmerugu · 2026-04-20T05:56:49Z

/azp run

azure-pipelines · 2026-04-20T05:57:07Z

Azure Pipelines: Successfully started running 3 pipeline(s).

v-dmerugu · 2026-04-20T16:35:15Z

/azp run

azure-pipelines · 2026-04-20T16:35:27Z

Azure Pipelines: Successfully started running 3 pipeline(s).

azure-pipelines · 2026-04-20T16:35:38Z

Azure Pipelines: Successfully started running 3 pipeline(s).

v-dmerugu added 2 commits April 16, 2026 13:26

Update Common-Packages topipelineTasks

63f9296

Merge branch 'master' into users/v-dmerugu/UpdateCommon-packageVersions

a7ed2a7

v-dmerugu requested a review from Copilot April 16, 2026 08:46

Copilot started reviewing on behalf of v-dmerugu April 16, 2026 08:47 View session

Copilot AI reviewed Apr 16, 2026

View reviewed changes

v-dmerugu changed the title ~~Update Common-Packages topipelineTasks~~ Update Common-Packages version to pipelineTasks Apr 16, 2026

v-dmerugu marked this pull request as ready for review April 16, 2026 09:07

v-dmerugu requested review from a team, manolerazvan and tarunramsinghani as code owners April 16, 2026 09:07

sanjuyadav24 approved these changes Apr 16, 2026

View reviewed changes

Merge branch 'master' into users/v-dmerugu/UpdateCommon-packageVersions

abca061

v-dmerugu added 2 commits April 20, 2026 11:22

Reverting deprecated tasks

39099fc

Merge branch 'users/v-dmerugu/UpdateCommon-packageVersions' of https:…

0029511

…//github.com/microsoft/azure-pipelines-tasks into users/v-dmerugu/UpdateCommon-packageVersions

tarunramsinghani approved these changes Apr 20, 2026

View reviewed changes

manolerazvan approved these changes Apr 20, 2026

View reviewed changes

v-dmerugu enabled auto-merge (squash) April 20, 2026 16:34

Merge branch 'master' into users/v-dmerugu/UpdateCommon-packageVersions

a1404a1

Conversation

v-dmerugu commented Apr 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Context

Related PR - microsoft/azure-pipelines-tasks-common-packages#601

Task Name

Risk Assessment (Low / Medium / High)

Change Behind Feature Flag (Yes / No)

Additional Testing Performed

Rollback Scenario and Process (Yes/No)

Dependency Impact Assessed and Regression Tested (Yes/No)

Checklist

Uh oh!

azure-pipelines bot commented Apr 16, 2026

Uh oh!

azure-pipelines bot commented Apr 16, 2026

Uh oh!

v-dmerugu commented Apr 16, 2026

Uh oh!

azure-pipelines bot commented Apr 16, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Copilot AI Apr 16, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

azure-pipelines bot commented Apr 16, 2026

Uh oh!

azure-pipelines bot commented Apr 17, 2026

Uh oh!

tarunramsinghani commented Apr 17, 2026

Uh oh!

azure-pipelines bot commented Apr 20, 2026

Uh oh!

v-dmerugu commented Apr 20, 2026

Uh oh!

azure-pipelines bot commented Apr 20, 2026

Uh oh!

v-dmerugu commented Apr 20, 2026

Uh oh!

azure-pipelines bot commented Apr 20, 2026

Uh oh!

azure-pipelines bot commented Apr 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

v-dmerugu commented Apr 16, 2026 •

edited

Loading