XS⚠️ ◾ Release v1.7.4: Adding Code Signing

[muiriswoulfe]

Summary

This changes includes updates to the release pipeline, the inclusion of code signing, a version bump for the PR Metrics tool, and minor formatting improvements to configuration files. Below is a summary of the most important changes:

Release Pipeline Enhancements:

• Updated the Azure DevOps release pipeline to use a static IP pool (Azure-Pipelines-1ESPT-ExDShared-StaticIP) and added a variable group for PR Metrics. (.github/azure-devops/release.yml, .github/azure-devops/release.ymlL61-R65)
• Introduced the EsrpCodeSigning@5 task for signing .vsix files with ESRP code signing credentials. (.github/azure-devops/release.yml, .github/azure-devops/release.ymlR95-R127)

Version Updates:

• Incremented the version of PR Metrics from 1.7.3 to 1.7.4 across multiple files, including package.json, README.md, task.json, and vss-extension.json. [1] [2] [3] [4]

Configuration and Metadata Improvements:

• Reformatted JSON arrays and objects in vss-extension.json for better readability. (src/vss-extension.json, [1] [2]
• Updated the userAgent string in gitHubReposInvoker.ts and its associated test to reflect the new version. (src/task/src/repos/gitHubReposInvoker.ts, [1]; src/task/tests/repos/gitHubReposInvoker.spec.ts, [2]

Testing

Test Types

• Unit tests
• Manual tests

[github-actions]

PR Metrics

✔ Thanks for keeping your pull request small.
⚠️ Consider adding additional tests.

	Lines
Product Code	2
Test Code	1
Subtotal	3
Ignored Code	49
Total	52

Metrics computed by PR Metrics. Add it to your Azure DevOps and GitHub PRs!

[Copilot]

Pull Request Overview

This PR updates the release pipeline to add static IP usage, include code signing via ESRP, and bumps the PR Metrics version from 1.7.3 to 1.7.4 across manifests, code, and docs.

• Release pipeline changes: switch to static IP pool, add PR Metrics variable group, and insert EsrpCodeSigning@5 task.
• Version bumps: updated version strings in JSON configs, code outputs, tests, package.json, and README.
• Formatting: minor JSON reformatting in vss-extension.json.

Reviewed Changes

Copilot reviewed 11 out of 14 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
src/vss-extension.json	Bumped extension version to 1.7.4
src/task/tests/repos/gitHubReposInvoker.spec.ts	Updated expectedUserAgent to “PRMetrics/v1.7.4”
src/task/task.loc.json	Updated patch version to 4
src/task/task.json	Bumped friendlyName and patch version to 1.7.4
src/task/src/repos/gitHubReposInvoker.ts	Updated userAgent string to “PRMetrics/v1.7.4”
src/task/Strings/resources.resjson/en-US/resources.resjson	Updated loc.friendlyName to “PR Metrics v1.7.4”
package.json	Bumped package version to 1.7.4
README.md	Updated GitHub Actions usage tag to v1.7.4
.github/workflows/support/release-trigger.txt	Updated release trigger version to 1.7.4
.github/workflows/release-phase-1.yml	Updated patch number (see comment below)
.github/azure-devops/release.yml	Switched pool to static IP, added PR Metrics variable group, and inserted ESRP code signing task

Comments suppressed due to low confidence (1)

.github/workflows/release-phase-1.yml:24

• The patch version is set to 5 here, but the PR is for v1.7.4; it should be patch: 4 to match the intended release.

      patch: 5