Sprint 277

ANT (V1)

• Bump common package dependencies for pipeline tasks (#22293) (2026-06-29)

AzureCLI (V2)

• Fix special char corruption in AzureCLIV2 and AzureCLIV3 passwords on Windows (#22279) (2026-07-07)

AzureCLI (V3)

• Fix special char corruption in AzureCLIV2 and AzureCLIV3 passwords on Windows (#22279) (2026-07-07)
• AzureCLIV3: emit telemetry for azure-devops extension install outcome (#22326) (2026-07-07)

AzureContainerApps (V0)

• Bump common package dependencies for pipeline tasks (#22293) (2026-06-29)
• Remediate minimatch dependency vulnerabilities across impacted tasks (#22309) (2026-07-02)
• Fix Key not found error in Tasks (#22313) (2026-07-10)

AzureContainerApps (V1)

• Bump common package dependencies for pipeline tasks (#22293) (2026-06-29)
• Remediate minimatch dependency vulnerabilities across impacted tasks (#22309) (2026-07-02)
• Fix Key not found error in Tasks (#22313) (2026-07-10)
• AzureContainerAppsV1 Use array-based execSync to block arg injection (#22324) (2026-07-15)

AzureFileCopy (V1)

• Update VstsAzureRestHelpers to update Azure SQL API version (#22296) (2026-06-29)
• Revert vso escaping in remote machine output (#22282) (#22339) (2026-07-13)
• Dry-run telemetry for vso command injection fix (ICM 31000000640794) (#22359) (2026-07-15)

AzureFileCopy (V2)

• Use New-PSSession splatting instead of Invoke-Expression in RemoteDeployer SessionHelper (#22287) (2026-06-29)
• Update VstsAzureRestHelpers to update Azure SQL API version (#22296) (2026-06-29)
• Remediate minimatch dependency vulnerabilities across impacted tasks (#22309) (2026-07-02)
• Revert vso escaping in remote machine output (#22282) (#22339) (2026-07-13)
• Dry-run telemetry for vso command injection fix (ICM 31000000640794) (#22359) (2026-07-15)

AzureFileCopy (V3)

• Use New-PSSession splatting instead of Invoke-Expression in RemoteDeployer SessionHelper (#22287) (2026-06-29)
• Update VstsAzureRestHelpers to update Azure SQL API version (#22296) (2026-06-29)
• Remediate minimatch dependency vulnerabilities across impacted tasks (#22309) (2026-07-02)
• Revert vso escaping in remote machine output (#22282) (#22339) (2026-07-13)
• Dry-run telemetry for vso command injection fix (ICM 31000000640794) (#22359) (2026-07-15)

AzureFileCopy (V4)

• Use New-PSSession splatting instead of Invoke-Expression in RemoteDeployer SessionHelper (#22287) (2026-06-29)
• Update VstsAzureRestHelpers to update Azure SQL API version (#22296) (2026-06-29)
• Revert vso escaping in remote machine output (#22282) (#22339) (2026-07-13)
• Dry-run telemetry for vso command injection fix (ICM 31000000640794) (#22359) (2026-07-15)

AzureFileCopy (V5)

• Use New-PSSession splatting instead of Invoke-Expression in RemoteDeployer SessionHelper (#22287) (2026-06-29)
• Update VstsAzureRestHelpers to update Azure SQL API version (#22296) (2026-06-29)
• Revert vso escaping in remote machine output (#22282) (#22339) (2026-07-13)
• Dry-run telemetry for vso command injection fix (ICM 31000000640794) (#22359) (2026-07-15)

AzureFileCopy (V6)

• Use New-PSSession splatting instead of Invoke-Expression in RemoteDeployer SessionHelper (#22287) (2026-06-29)
• Update VstsAzureRestHelpers to update Azure SQL API version (#22296) (2026-06-29)
• Revert vso escaping in remote machine output (#22282) (#22339) (2026-07-13)
• Dry-run telemetry for vso command injection fix (ICM 31000000640794) (#22359) (2026-07-15)

AzureFunctionApp (V2)

• AzureFunctionAppV2: correct help link to V2 task documentation (#22370) (2026-07-16)

AzureKeyVault (V1)

• Remediate minimatch dependency vulnerabilities across impacted tasks (#22309) (2026-07-02)

AzurePowerShell (V4)

• Dependency update and version bump in AzurePowerShellV4 and AzurePowerShellV5 Tasks (174882ae9c) (2026-07-06)

AzurePowerShell (V5)

• Fix AzurePowerShell V5 cleanup failures overriding task result (#22250) (2026-06-29)
• Dependency update and version bump in AzurePowerShellV4 and AzurePowerShellV5 Tasks (174882ae9c) (2026-07-06)

AzureRmWebAppDeployment (V4)

• Upgrade azure-pipelines-task-lib to version 5.277.0 across regressed tasks (#22367) (2026-07-16)

AzureRmWebAppDeployment (V5)

• Upgrade azure-pipelines-task-lib to version 5.277.0 across regressed tasks (#22367) (2026-07-16)

AzureVmssDeployment (V0)

• Update dependencies and bump version for AzureVmssDeployment and JenkinsDownloadArtifacts tasks (#22325) (2026-07-07)

AzureVmssDeployment (V1)

• Update dependencies and bump version for AzureVmssDeployment and JenkinsDownloadArtifacts tasks (#22325) (2026-07-07)

AzureWebApp (V1)

• Add .NET 10.0 runtime stack option to AzureWebAppV1 task (#22344) (2026-07-10)

CargoAuthenticate (V0)

• Bump version numbers and update dependencies for multiple authentication tasks (#22292) (2026-06-30)

CondaAuthenticate (V0)

• Bump version numbers and update dependencies for multiple authentication tasks (#22292) (2026-06-30)

ContainerBuild (V0)

• Fix Key not found error in Tasks (#22313) (2026-07-10)

GitHubRelease (V1)

• GitHubReleaseV1: Skip Discussion NOT_FOUNDs during changelog issue resolution (#22363) (2026-07-15)

GradleAuthenticate (V0)

• Bump version numbers and update dependencies for multiple authentication tasks (#22292) (2026-06-30)

HelmDeploy (V1)

• Fix HelmDeploy@1 uninstall command ignoring arguments input (#22350) (2026-07-14)

HelmInstaller (V1)

• Upgrade azure-pipelines-task-lib to version 5.277.0 across regressed tasks (#22367) (2026-07-16)

IISWebAppDeploymentOnMachineGroup (V0)

• Upgrade azure-pipelines-task-lib to version 5.277.0 across regressed tasks (#22367) (2026-07-16)

JavaToolInstaller (V0)

• Bump common package dependencies for pipeline tasks (#22293) (2026-06-29)

JavaToolInstaller (V1)

• Bump common package dependencies for pipeline tasks (#22293) (2026-06-29)

JenkinsDownloadArtifacts (V1)

• Dependency update and version bump in JenkinsDownloadArtifactsV1 Task (#22303) (2026-06-26)

JenkinsDownloadArtifacts (V2)

• Update dependencies and bump version for AzureVmssDeployment and JenkinsDownloadArtifacts tasks (#22325) (2026-07-07)

Kubernetes (V1)

• Dependency update and version bump in KubernetesV1 Task (#22314) (2026-07-03)

MavenAuthenticate (V0)

• Bump version numbers and update dependencies for multiple authentication tasks (#22292) (2026-06-30)

Maven (V4)

• Bump common package dependencies for pipeline tasks (#22293) (2026-06-29)

Notation (V0)

• Bump common package dependencies for pipeline tasks (#22293) (2026-06-29)

NpmAuthenticate (V0)

• Bump version numbers and update dependencies for multiple authentication tasks (#22292) (2026-06-30)

NuGetAuthenticate (V1)

• Bump version numbers and update dependencies for multiple authentication tasks (#22292) (2026-06-30)

NuGetPublisher (V0)

• Remediate minimatch dependency vulnerabilities across impacted tasks (#22309) (2026-07-02)

NuGetRestore (V1)

• Remediate minimatch dependency vulnerabilities across impacted tasks (#22309) (2026-07-02)

PackerBuild (V1)

• Fix PackerBuildV1 credential Leak (#22368) (2026-07-17)

PipAuthenticate (V1)

• Bump version numbers and update dependencies for multiple authentication tasks (#22292) (2026-06-30)

PowerShellOnTargetMachines (V1)

• Revert vso escaping in remote machine output (#22282) (#22339) (2026-07-13)
• Dry-run telemetry for vso command injection fix (ICM 31000000640794) (#22359) (2026-07-15)

PowerShellOnTargetMachines (V2)

• Revert vso escaping in remote machine output (#22282) (#22339) (2026-07-13)
• Dry-run telemetry for vso command injection fix (ICM 31000000640794) (#22359) (2026-07-15)

PowerShellOnTargetMachines (V3)

• Use New-PSSession splatting instead of Invoke-Expression in RemoteDeployer SessionHelper (#22287) (2026-06-29)
• Revert vso escaping in remote machine output (#22282) (#22339) (2026-07-13)
• Dry-run telemetry for vso command injection fix (ICM 31000000640794) (#22359) (2026-07-15)

PublishSymbols (V2)

• Update VstsAzureRestHelpers to update Azure SQL API version (#22296) (2026-06-29)
• Stop logging token (#22328) (2026-07-07)

SqlAzureDacpacDeployment (V1)

• Update VstsAzureRestHelpers to update Azure SQL API version (#22296) (2026-06-29)
• Fix SqlAzureDacpacDeployment: unique GUID filenames for Extract/Export to prevent file collision and data loss (#22360) (2026-07-14)

Ssh (V0)

• [SshV0] add enableVsoCommands input to control remote VSO command execution (default off) (#22369) (2026-07-17)

TwineAuthenticate (V1)

• Bump version numbers and update dependencies for multiple authentication tasks (#22292) (2026-06-30)

UniversalPackages (V1)

• Bump version numbers and update dependencies for multiple authentication tasks (#22292) (2026-06-30)

VsTest (V3)

• VsTestV3: update TestAgent.zip with changes for coverage file upload limit increase from 75MB to 100MB (#22346) (2026-07-14)
• Upgrading the Vstest task after amr64 changes (#22365) (2026-07-16)