[release/8.0] Use WIF for OneLocBuild in DevDiv - #17417
Merged
missymessa merged 3 commits intoAug 27, 2026
Merged
Conversation
Acquire a short-lived Ceapex feed token in both supported Azure DevOps projects so DevDiv consumers no longer fall back to dn-bot-ceapex-package-r. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 42b6e46d-b9c0-4558-856d-1d1bdb50609d
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 42b6e46d-b9c0-4558-856d-1d1bdb50609d
Contributor
There was a problem hiding this comment.
Pull request overview
Backports the OneLocBuild Ceapex feed authentication updates to release/8.0, enabling workload identity federation (WIF) for DevDiv while keeping PAT-based fallback for other projects and for callers that explicitly disable the service connection path.
Changes:
- Enable WIF token acquisition and usage for both
internalandDevDivAzure DevOps projects in the OneLocBuild job templates. - Update template parameter comments to reflect the supported project-scoped service connection behavior.
- Document the
CeapexServiceConnectionparameter behavior and DevDiv pipeline authorization requirement.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| eng/common/templates/job/onelocbuild.yml | Enables WIF path for DevDiv and updates inline guidance while preserving PAT fallback logic. |
| eng/common/templates-official/job/onelocbuild.yml | Mirrors the same DevDiv WIF enablement and fallback behavior for the templates-official layout. |
| Documentation/OneLocBuild.md | Documents CeapexServiceConnection behavior, supported projects, and authorization requirement. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Preserve the latest GitHub App authentication and package extraction changes while adding Ceapex WIF for DevDiv. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 42b6e46d-b9c0-4558-856d-1d1bdb50609d
mmitche
approved these changes
Aug 27, 2026
missymessa
enabled auto-merge (squash)
August 27, 2026 14:46
Member
Author
|
/azp run |
|
Azure Pipelines: Successfully started running 1 pipeline(s). |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Backport of #17415 for Arcade consumers pinned to release/8.0. This branch uses the legacy templates and templates-official layout, so both OneLoc variants are updated. It enables Ceapex WIF for DevDiv/DevDiv while preserving PAT fallback elsewhere. Relates to AB#10151.