chore: move release publishing to Azure pipelines by janechu · Pull Request #7674 · microsoft/fast

Jane Chu (janechu) · 2026-08-06T20:41:21Z

Pull Request

📖 Description

Moves release publishing off GitHub Actions and onto two Azure Pipelines under .ado/pipelines/ — azure-pipelines-build.yml (FAST CD Build) and azure-pipelines-cd.yml (FAST CD) — so release credentials never leave the Azure environment.

FAST CD Build triggers on every push to main, detects publishable workspaces whose ${name}_v${version} tag doesn't yet exist on origin, and packs their npm tarballs and paired Rust crates into pipeline artifacts.
FAST CD triggers automatically when FAST CD Build's BuildArtifacts stage completes, signs the artifacts, publishes to npm/crates.io via FAST.Release.PipelineTemplate, and only then creates the git tag and GitHub release per package — publishing before tagging means a publish failure never strands a tag, so the next FAST CD Build run automatically retries.
Removes the nightly cd-github-releases.yml GitHub Actions workflow and the old create-github-releases.mjs / download-github-releases.mjs script pair, replacing them with pack-pending-releases.mjs, check-release-tags.mjs, read-release-manifest.mjs, and a shared publishable-workspaces.mjs helper.
Updates check-publish-pipeline.mjs (the PR-validation guardrail that keeps Azure CD task coverage in sync with publishable workspaces), CONTRIBUTING.md, and .github/workflows/README.md to describe the new pipeline design.

👩‍💻 Reviewer Notes

Required before this can run for real: both FAST CD Build and FAST CD need to be registered as pipelines in Azure DevOps and repointed at the new .ado/pipelines/azure-pipelines-build.yml / .ado/pipelines/azure-pipelines-cd.yml paths (and the old root-level azure-pipelines-cd.yml pipeline definition retired/repointed) before this change is effective. This is an operational/ADO-admin step outside of this repo's source and cannot be verified from GitHub tooling.
Operational verification item: FAST.Sign.PipelineTemplate.yml and FAST.Release.PipelineTemplate.yml live in the internal open-source/FASTPipelineTemplates Azure DevOps repository, which is not accessible from GitHub tooling. Their exact parameter contracts (in particular how they handle an absent artifact directory) could not be independently verified while authoring this pipeline — please confirm against the live templates during ADO pipeline registration/rollout. The empty-directory removal step in the Publish job is a defense-in-depth measure taken because that contract could not be confirmed.
Please review the publish-then-tag ordering rationale in .github/workflows/README.md (FAST CD section) — it's the key behavioral change from the prior design and affects retry/idempotency semantics.

📑 Test Plan

node build/scripts/check-publish-pipeline.mjs — passes, verifies Azure CD coverage for all 4 publishable workspaces.
node build/scripts/pack-pending-releases.mjs --check-only — passes, reports 0 pending releases against current tags.
npm run checkchange — passes, no change file required (paths touched are all under beachball's ignored .github//tooling scope).
node build/biome-changed.mjs check --staged — passes, checked 5 staged .mjs files, no fixes needed.
Validated all three new/changed .ado/pipelines/*.yml files parse as valid YAML.
node --check syntax validation on all new/modified .mjs scripts.

✅ Checklist

General

I have included a change request file using $ npm run change
I have added tests for my changes.
I have tested my changes.
I have updated the project documentation to reflect my changes.
I have read the CONTRIBUTING documentation and followed the standards for this project.

Agents

I have linked to an existing issue in this project that this change addresses
I have read the skills
I have read the DESIGN.md file(s) in packages relevant to my changes
I have updated the DESIGN.md file(s) in packages relevant to my changes

Move release publishing off GitHub Actions and onto two Azure Pipelines under .ado/pipelines/ (FAST CD Build and FAST CD), so release credentials never leave the Azure environment. FAST CD Build packs pending npm tarballs and paired Rust crates on every push to main; FAST CD signs those artifacts, publishes to npm/crates.io, and only then creates the git tag and GitHub release per package, so a publish failure never strands a tag. Replaces the nightly cd-github-releases.yml GitHub Actions workflow and the old download-github-releases.mjs/create-github-releases.mjs pair with pack-pending-releases.mjs, check-release-tags.mjs, read-release-manifest.mjs, and a shared publishable-workspaces.mjs helper. Updates check-publish-pipeline.mjs, CONTRIBUTING.md, and .github/workflows/README.md to match. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5e1aa6a9-5ec9-4b4a-b088-9181bf93a95d

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5e1aa6a9-5ec9-4b4a-b088-9181bf93a95d

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9c779966-eecf-4fcc-a215-679e3cf03da9

Jane Chu (janechu)

Requesting changes for release-path consistency and retry safety.

Jane Chu (janechu) · 2026-08-12T05:05:15Z

+          releaseCommit: $[ stageDependencies.ValidateArtifacts.Validate.outputs['release.releaseCommit'] ]
+          releaseTags: $[ stageDependencies.ValidateArtifacts.Validate.outputs['release.releaseTags'] ]
+          # When adding a new publishable package, add its package-specific
+          # variables here and a matching GitHubRelease@1 task below. See


validate-release-artifacts.mjs emits package outputs dynamically, but this list is a second, manual registry for GitHub-release coverage. A newly publishable workspace will still be tagged and handed to the registry publisher, yet it will have no GitHubRelease@1 task unless someone remembers to edit this YAML. Please add a CI/test guard that compares the publishable workspace set to the static release-task wiring and fails on missing coverage. The documentation-only instruction is not sufficient for a release path.

Jane Chu (janechu) · 2026-08-12T05:05:15Z

+            },
+        );
+
+        if (response.status === 200) {


Here 200 means true, which feeds the GitHubRelease@1 skip condition. If a prior run created the release but failed while uploading assets, its retry skips the release even when manifest assets are absent. The invocation also provides neither token read by this function, and one transient API failure occurs after registry publication. Please pass a non-logged read credential, use bounded retry/backoff for transient failures, and return complete only when every manifest asset filename is present. Fail explicitly for incomplete releases and test these paths.

Jane Chu (janechu) · 2026-08-12T05:05:15Z

+
+function parsePackOutput(output) {
+    const packages = JSON.parse(output);
+    if (!Array.isArray(packages) || packages.length === 0 || !packages[0].filename) {


parsePackOutput accepts a nonempty array and trusts the first filename; it neither requires one record nor binds it to the selected workspace. The manifest can therefore advertise a wrong-but-valid .tgz if npm output is unexpected. Please require exactly one object with a safe filename and matching name/version, rejecting malformed, extra, and mismatched records with focused tests.

Jane Chu (janechu) added 2 commits August 6, 2026 12:55

fix: correct Azure pipeline names

750751e

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5e1aa6a9-5ec9-4b4a-b088-9181bf93a95d

Jane Chu (janechu) requested a lite review from Copilot August 6, 2026 20:57

Copilot AI reviewed Aug 6, 2026

Jane Chu (janechu) requested a balanced review from Copilot August 6, 2026 21:34

Copilot AI reviewed Aug 6, 2026

Copilot started reviewing on behalf of Jane Chu (janechu) August 6, 2026 23:29 View session

Copilot started reviewing on behalf of Jane Chu (janechu) August 6, 2026 23:32 View session

Jane Chu (janechu) and others added 16 commits August 11, 2026 11:23

chore: align Azure pipeline file layout

987c3e4

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9c779966-eecf-4fcc-a215-679e3cf03da9

chore: remove unnecessary release signing

d0e12f5

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9c779966-eecf-4fcc-a215-679e3cf03da9

chore: add pre-publish release tagging

8d138f3

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9c779966-eecf-4fcc-a215-679e3cf03da9

chore: align release deployment tracking

f375a49

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9c779966-eecf-4fcc-a215-679e3cf03da9

chore: harden release pipeline validation

df52c6f

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9c779966-eecf-4fcc-a215-679e3cf03da9

chore: preserve selected release batches

21431d3

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9c779966-eecf-4fcc-a215-679e3cf03da9

chore: align release build conventions

dc54858

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9c779966-eecf-4fcc-a215-679e3cf03da9

more alignment

41e47ae

Update deploy markers

886ea23

alignment work

21738a2

Flatten build script structure

5211c3f

Alignment work

da7ee5a

update fetch depth

aa25911

update display name

03bfede

alignment

74b5007

update docs

55730bd

Jane Chu (janechu) commented Aug 12, 2026

View reviewed changes

more alignment

5de0966

Navigation Menu

Uh oh!

chore: move release publishing to Azure pipelines - #7674

chore: move release publishing to Azure pipelines#7674
Jane Chu (janechu) wants to merge 19 commits into
mainfrom
chore/ado-release-pipelines

Jane Chu (janechu) commented Aug 6, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI left a comment

Uh oh!

Jane Chu (janechu) left a comment

Uh oh!

Jane Chu (janechu) Aug 12, 2026

Uh oh!

Jane Chu (janechu) Aug 12, 2026

Uh oh!

Jane Chu (janechu) Aug 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

Jane Chu (janechu) commented Aug 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Pull Request

📖 Description

👩‍💻 Reviewer Notes

📑 Test Plan

✅ Checklist

General

Agents

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Jane Chu (janechu) left a comment

Choose a reason for hiding this comment

Uh oh!

Jane Chu (janechu) Aug 12, 2026

Choose a reason for hiding this comment

Uh oh!

Jane Chu (janechu) Aug 12, 2026

Choose a reason for hiding this comment

Uh oh!

Jane Chu (janechu) Aug 12, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Jane Chu (janechu) commented Aug 6, 2026 •

edited

Loading