Sprint 275

ANT (V1)

• Update serialize-javascript package to fix vulnerability (#22217) (2026-06-03)

AzureAppConfigurationExport (V10)

• updated required version to fix vulnerabilities in multiple tasks (#22193) (2026-05-22)

AzureAppConfigurationImport (V10)

• updated required version to fix vulnerabilities in multiple tasks (#22193) (2026-05-22)

AzureAppConfigurationSnapshot (V1)

• updated required version to fix vulnerabilities in multiple tasks (#22193) (2026-05-22)

AzureAppServiceManage (V0)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)

AzureAppServiceSettings (V1)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)

AzureCLI (V1)

• AzureCLI V1/V2/V3: isolate AZURE_CONFIG_DIR per task invocation (#22221) (2026-06-03)

AzureCLI (V2)

• AzureCLI V1/V2/V3: isolate AZURE_CONFIG_DIR per task invocation (#22221) (2026-06-03)
• Update dependencies to patch security flaws (#22208) (2026-05-29)
• Enhance argument validation for PowerShell and Bash scripts in AzureCLI (#22181) (2026-05-25)
• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

AzureCLI (V3)

• AzureCLI V1/V2/V3: isolate AZURE_CONFIG_DIR per task invocation (#22221) (2026-06-03)
• Update dependencies to patch security flaws (#22208) (2026-05-29)
• Enhance argument validation for PowerShell and Bash scripts in AzureCLI (#22181) (2026-05-25)
• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

AzureCloudPowerShellDeployment (V1)

• package feed updates (#22200) (2026-06-10)

AzureCloudPowerShellDeployment (V2)

• package feed updates (#22200) (2026-06-10)

AzureFileCopy (V1)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

AzureFileCopy (V2)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

AzureFileCopy (V3)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

AzureFileCopy (V4)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

AzureFileCopy (V5)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

AzureFileCopy (V6)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

AzureFunctionAppContainer (V1)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)
• Update supported tasks to azure-pipelines-tasks-webdeployment-common 4.274.2 for CommaSeperatedConnectionString FF removal (#22178) (2026-05-18)

AzureFunctionApp (V1)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)
• Update supported tasks to azure-pipelines-tasks-webdeployment-common 4.274.2 for CommaSeperatedConnectionString FF removal (#22178) (2026-05-18)

AzureFunctionApp (V2)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)
• Update supported tasks to azure-pipelines-tasks-webdeployment-common 4.274.2 for CommaSeperatedConnectionString FF removal (#22178) (2026-05-18)

AzureFunctionOnKubernetes (V1)

• Bump azure-pipelines-task-lib to ^5.2.10 for 8 Kubernetes tasks (#22227) (2026-06-02)
• Audit dependencies in RM tasks (#22218) (2026-05-29)

AzureKeyVault (V2)

• Bump azure-pipelines-task-lib to ^5.2.10 for AzureKeyVaultV2, AzurePowerShellV4, AzurePowerShellV5 (#22219) (2026-06-01)

AzureMysqlDeployment (V2)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)
• Update supported tasks to azure-pipelines-tasks-webdeployment-common 4.274.2 for CommaSeperatedConnectionString FF removal (#22178) (2026-05-18)

AzurePowerShell (V2)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

AzurePowerShell (V3)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

AzurePowerShell (V4)

• package feed updates (#22200) (2026-06-10)
• Bump azure-pipelines-task-lib to ^5.2.10 for AzureKeyVaultV2, AzurePowerShellV4, AzurePowerShellV5 (#22219) (2026-06-01)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

AzurePowerShell (V5)

• package feed updates (#22200) (2026-06-10)
• Bump azure-pipelines-task-lib to ^5.2.10 for AzureKeyVaultV2, AzurePowerShellV4, AzurePowerShellV5 (#22219) (2026-06-01)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

AzureResourceGroupDeployment (V2)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)

AzureResourceManagerTemplateDeployment (V3)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)

AzureRmWebAppDeployment (V3)

• Audit dependencies in RM tasks (#22218) (2026-05-29)

AzureRmWebAppDeployment (V4)

• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)
• Update supported tasks to azure-pipelines-tasks-webdeployment-common 4.274.2 for CommaSeperatedConnectionString FF removal (#22178) (2026-05-18)

AzureRmWebAppDeployment (V5)

• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)
• Update supported tasks to azure-pipelines-tasks-webdeployment-common 4.274.2 for CommaSeperatedConnectionString FF removal (#22178) (2026-05-18)

AzureSpringCloud (V0)

• Update serialize-javascript package to fix vulnerability (#22217) (2026-06-03)
• Bump package versions to address security vulnerabilities in AzureSpringCloudV0 (#22213) (2026-05-29)

AzureStaticWebApp (V0)

• Bump dependencies to remediate vulnerabilities (#22197) (2026-05-25)

AzureVmssDeployment (V0)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)

AzureVmssDeployment (V1)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)

AzureWebAppContainer (V1)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)
• Update supported tasks to azure-pipelines-tasks-webdeployment-common 4.274.2 for CommaSeperatedConnectionString FF removal (#22178) (2026-05-18)

AzureWebApp (V1)

• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)
• Update supported tasks to azure-pipelines-tasks-webdeployment-common 4.274.2 for CommaSeperatedConnectionString FF removal (#22178) (2026-05-18)

BicepDeploy (V0)

• Update serialize-javascript package to fix vulnerability (#22217) (2026-06-03)

CargoAuthenticate (V0)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

CmdLine (V2)

• package feed updates (#22200) (2026-06-10)

CondaAuthenticate (V0)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

DockerCompose (V1)

• Audit dependencies in RM tasks (#22218) (2026-05-29)

DockerInstaller (V0)

• Audit dependencies in RM tasks (#22218) (2026-05-29)

Docker (V1)

• Audit dependencies in RM tasks (#22218) (2026-05-29)

Docker (V2)

• Audit dependencies in RM tasks (#22218) (2026-05-29)

DotNetCoreCLI (V2)

• Upgrading package Version qs to 6.15.1 to fix vulnerabilities (#22046) (2026-05-19)

DownloadBuildArtifacts (V0)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)
• Bump artifact-engine to ^2.275.2 for DownloadBuildArtifactsV0 (#22210) (2026-05-27)

DownloadFileshareArtifacts (V1)

• Audit dependencies in RM tasks (#22218) (2026-05-29)

DownloadGitHubNpmPackage (V1)

• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)

DownloadGitHubNugetPackage (V1)

• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)

DownloadGitHubRelease (V0)

• Audit dependencies in RM tasks (#22218) (2026-05-29)

DownloadPackage (V0)

• Upgrading package Version qs to 6.15.1 to fix vulnerabilities (#22046) (2026-05-19)

DownloadPackage (V1)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

FileTransform (V2)

• Update supported tasks to azure-pipelines-tasks-webdeployment-common 4.274.2 for CommaSeperatedConnectionString FF removal (#22178) (2026-05-18)

FuncToolsInstaller (V0)

• Update dependencies to patch security flaws (#22208) (2026-05-29)
• Audit dependencies in RM tasks (#22218) (2026-05-29)

GitHubComment (V0)

• Updated packages to eliminate security issues (#22198) (2026-05-22)

GitHubRelease (V1)

• Audit dependencies in RM tasks (#22218) (2026-05-29)

GoTool (V0)

• Audit dependencies in RM tasks (#22218) (2026-05-29)

Go (V0)

• Audit dependencies in RM tasks (#22218) (2026-05-29)

GradleAuthenticate (V0)

• GradleAuthenticateV0 (#22165) (2026-06-08)

Gradle (V2)

• Update serialize-javascript package to fix vulnerability (#22217) (2026-06-03)

Gradle (V3)

• Update serialize-javascript package to fix vulnerability (#22217) (2026-06-03)

Gradle (V4)

• Update serialize-javascript package to fix vulnerability (#22217) (2026-06-03)

HelmDeploy (V0)

• Bump azure-pipelines-task-lib to ^5.2.10 for 8 Kubernetes tasks (#22227) (2026-06-02)
• Audit dependencies in RM tasks (#22218) (2026-05-29)

HelmDeploy (V1)

• Bump azure-pipelines-task-lib to ^5.2.10 for 8 Kubernetes tasks (#22227) (2026-06-02)
• Audit dependencies in RM tasks (#22218) (2026-05-29)

HelmInstaller (V1)

• Bump azure-pipelines-task-lib to ^5.2.10 for 8 Kubernetes tasks (#22227) (2026-06-02)
• Audit dependencies in RM tasks (#22218) (2026-05-29)

IISWebAppDeploymentOnMachineGroup (V0)

• Update supported tasks to azure-pipelines-tasks-webdeployment-common 4.274.2 for CommaSeperatedConnectionString FF removal (#22178) (2026-05-18)

IISWebAppManagementOnMachineGroup (V0)

• package feed updates (#22200) (2026-06-10)

JenkinsDownloadArtifacts (V1)

• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)

JenkinsDownloadArtifacts (V2)

• Audit dependencies in RM tasks (#22218) (2026-05-29)
• Bump azure-pipelines-task-lib to ^5.2.10 for RM-team tasks (#22184) (2026-05-27)

KubectlInstaller (V0)

• Bump azure-pipelines-task-lib to ^5.2.10 for 8 Kubernetes tasks (#22227) (2026-06-02)
• Audit dependencies in RM tasks (#22218) (2026-05-29)

KubeloginInstaller (V0)

• Bump azure-pipelines-task-lib to ^5.2.10 for 8 Kubernetes tasks (#22227) (2026-06-02)
• Audit dependencies in RM tasks (#22218) (2026-05-29)

KubernetesManifest (V1)

• Bump azure-pipelines-task-lib to ^5.2.10 for 8 Kubernetes tasks (#22227) (2026-06-02)
• Audit dependencies in RM tasks (#22218) (2026-05-29)

Kubernetes (V1)

• Bump azure-pipelines-task-lib to ^5.2.10 for 8 Kubernetes tasks (#22227) (2026-06-02)

MavenAuthenticate (V0)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

Maven (V2)

• Update serialize-javascript package to fix vulnerability (#22217) (2026-06-03)
• Upgrading package Version qs to 6.15.1 to fix vulnerabilities (#22046) (2026-05-19)

Maven (V3)

• Update serialize-javascript package to fix vulnerability (#22217) (2026-06-03)
• Upgrading package Version qs to 6.15.1 to fix vulnerabilities (#22046) (2026-05-19)

Maven (V4)

• Update serialize-javascript package to fix vulnerability (#22217) (2026-06-03)

MSBuild (V1)

• package feed updates (#22200) (2026-06-10)

NpmAuthenticate (V0)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

Npm (V0)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

Npm (V1)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

NuGetAuthenticate (V1)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

NuGetCommand (V2)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)
• Update NuGetCommandV2 Timeout Option (#22192) (2026-05-22)

NuGetInstaller (V0)

• Upgrading package Version qs to 6.15.1 to fix vulnerabilities (#22046) (2026-05-19)

NuGetToolInstaller (V0)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

NuGetToolInstaller (V1)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

NuGet (V0)

• Upgrading package Version qs to 6.15.1 to fix vulnerabilities (#22046) (2026-05-19)

PipAuthenticate (V0)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

PipAuthenticate (V1)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

PowerShellOnTargetMachines (V2)

• package feed updates (#22200) (2026-06-10)

PowerShellOnTargetMachines (V3)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

PowerShell (V2)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

PublishCodeCoverageResults (V1)

• Update serialize-javascript package to fix vulnerability (#22217) (2026-06-03)

PublishPipelineMetadata (V0)

• Update dependencies to patch security flaws (#22208) (2026-05-29)
• Audit dependencies in RM tasks (#22218) (2026-05-29)

PublishSymbols (V2)

• package feed updates (#22200) (2026-06-10)
• Fix vulnerabilities with dependency upgrades (#22139) (2026-05-25)
• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

PublishTestResults (V1)

• Update packages to eliminate security issues (#22209) (2026-05-29)

PublishTestResults (V2)

• Update packages to eliminate security issues (#22209) (2026-05-29)

ReviewApp (V0)

• Updated packages to eliminate security issues (#22198) (2026-05-22)

ServiceFabricComposeDeploy (V0)

• package feed updates (#22200) (2026-06-10)

ServiceFabricDeploy (V1)

• package feed updates (#22200) (2026-06-10)

ServiceFabricPowerShell (V1)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

ServiceFabricUpdateManifests (V2)

• package feed updates (#22200) (2026-06-10)

SqlAzureDacpacDeployment (V1)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

SqlDacpacDeploymentOnMachineGroup (V0)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

TwineAuthenticate (V0)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

TwineAuthenticate (V1)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

UniversalPackages (V0)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

UniversalPackages (V1)

• Bump package versions to address security vulnerabilities (#22186) (2026-05-22)

VSBuild (V1)

• package feed updates (#22200) (2026-06-10)

VsTestPlatformToolInstaller (V1)

• Update packages to eliminate security issues (#22209) (2026-05-29)

WindowsMachineFileCopy (V1)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

WindowsMachineFileCopy (V2)

• package feed updates (#22200) (2026-06-10)
• Common/Sanitizer: terminate $env: env-name on whitespace (LF/CR/TAB) — PS twin of #22181 (#22207) (2026-05-28)
• Sanitize ScriptArguments in AzurePowerShellV2-V5 and ServiceFabricPowerShellV1 (MSRC 115118) (#22171) (2026-05-19)

XamarinAndroid (V1)

• package feed updates (#22200) (2026-06-10)