Update Library.Template

[Andrew Arnott (AArnott)]

Summary

• Merge the latest Library.Template microbuild branch.
• Update MicroBuild to 2.0.257 while retaining repository-specific package properties.

Validation

• dotnet restore
• dotnet build -t:build,pack --no-restore -c Release -warnAsError -warnNotAsError:NU1901,NU1902,NU1903,NU1904,LOCTASK002
• .\tools\dotnet-test-cloud.ps1 -Configuration Release -Agent local

[Copilot]

Pull request overview

Updates Library.Template dependencies, build tooling, Azure Pipeline network policies, release documentation, and repository tools.

Changes:

• Updates MicroBuild and related tool versions.
• Applies DefaultDeny,CFSClean3 across Azure Pipelines.
• Refreshes release guidance for artifacts and trusted publishing.

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Summary
Directory.Packages.props	Updates package versions.
CONTRIBUTING.md	Refreshes release instructions; one documentation nit noted regarding referenced workflows.
azure-pipelines/vs-validation.yml	Updates network isolation policy.
azure-pipelines/vs-insertion.yml	Updates network isolation policy.
azure-pipelines/unofficial.yml	Updates network isolation policy.
azure-pipelines/release.yml	Updates network isolation policy.
azure-pipelines/official.yml	Updates network isolation policy.
azure-pipelines/libtemplate-update.yml	Updates network isolation policy.
azure-pipelines/archive-sourcecode.yml	Updates network isolation policy.
.config/dotnet-tools.json	Updates CLI tool versions.

Suppressed comments (3)

azure-pipelines/archive-sourcecode.yml:39

• This pipeline invokes Archive-SourceCode.ps1, which POSTs the archival request to the configured external Source Code Archival service. Under DefaultDeny, that call will be blocked unless the service endpoint is explicitly allowlisted, making the archival pipeline fail after the policy change. Please add the archival endpoint to the network exception or retain an egress-permitting policy for this job.

      networkIsolationPolicy: DefaultDeny,CFSClean3

azure-pipelines/libtemplate-update.yml:34

• This job still performs git fetch https://github.com/aarnott/Library.Template at line 62. Switching it to DefaultDeny will block that public GitHub egress unless the endpoint is explicitly allowlisted, so the scheduled Library.Template update will fail before it can create a PR. Please add the required network exception or retain an egress-permitting policy for this job.

      networkIsolationPolicy: DefaultDeny,CFSClean3

azure-pipelines/release.yml:24

• The release stage uses an external NuGet feed (nuGetFeedType: external with publishFeedCredentials: ... (nuget.org) at lines 45–46). DefaultDeny will prevent the package push from reaching nuget.org unless that endpoint is explicitly allowlisted, so releases can build successfully but fail during publication. Please add the required egress exception or keep an egress-permitting policy for this pipeline.

      networkIsolationPolicy: DefaultDeny,CFSClean3

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.