[release/v7.6] Hardcode Official templates#26972
Merged
daxian-dbw merged 1 commit intoPowerShell:release/v7.6from Mar 9, 2026
Merged
[release/v7.6] Hardcode Official templates#26972daxian-dbw merged 1 commit intoPowerShell:release/v7.6from
daxian-dbw merged 1 commit intoPowerShell:release/v7.6from
Conversation
daxian-dbw
added
the
CL-BuildPackaging
Contributor
There was a problem hiding this comment.
Pull request overview
Backports the “hardcode official OneBranch templates” change to release/v7.6 to comply with 1ES Drift Management by removing OfficialBuild toggles from official pipelines and always extending official governed templates.
Changes:
- Removed the
OfficialBuildpipeline parameter and related template-selection variables from official build pipelines. - Hardcoded official governed templates (
v2/Microsoft.Official.yml,v2/OneBranch.Official.CrossPlat.yml) inextends. - Updated pipeline run names and key variables (e.g.,
releaseEnvironment,ps_official_build) to fixed “official/prod” values.
Reviewed changes
Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| .pipelines/PowerShell-vPack-Official.yml | Removes OfficialBuild parameter/template selector and always extends Microsoft.Official template; run name hardcoded to .true. |
| .pipelines/PowerShell-Release-Official.yml | Removes OfficialBuild parameter/template selector; hardcodes releaseEnvironment to Production and extends official cross-plat template. |
| .pipelines/PowerShell-Release-Official-Azure.yml | Removes OfficialBuild parameter/template selector and always extends official cross-plat template; run name hardcoded to .true. |
| .pipelines/PowerShell-Packages-Official.yml | Removes OfficialBuild parameter/template selector and always extends official cross-plat template; MSIX template invoked with OfficialBuild: true. |
| .pipelines/PowerShell-Coordinated_Packages-Official.yml | Removes OfficialBuild parameter/template selector; hardcodes ps_official_build to true and extends official cross-plat template. |
adityapatwardhan
approved these changes
Mar 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Backport of #26928 to release/v7.6
Triggered by @daxian-dbw on behalf of @jshigetomi
Original CL Label: CL-BuildPackaging
/cc @PowerShell/powershell-maintainers
Impact
REQUIRED: Choose either Tooling Impact or Customer Impact (or both). At least one checkbox must be selected.
Tooling Impact
Enforces 1ES Drift Management policy compliance by hardcoding official OneBranch templates in all build pipelines. Removes OfficialBuild parameter and conditional logic, simplifying pipeline configuration and preventing misconfigurations.
Customer Impact
Regression
REQUIRED: Check exactly one box.
This is not a regression.
Testing
Successfully backported to v7.4 and merged. Changes validated through CI/CD pipeline runs in official build environment. v7.5 backport (#26968) currently in testing.
Risk
REQUIRED: Check exactly one box.
High risk as it modifies core build pipeline infrastructure by hardcoding official OneBranch templates. However, this is necessary for 1ES Drift Management policy compliance. Changes have been validated in v7.4 (merged successfully) and stabilization is in progress for v7.5. Not taking this change creates policy compliance risks.