[Muiris Woulfe (muiriswoulfe)]

Summary

• Restore Marketplace publishing from protected main when the release marker changes, instead of publishing from a tag with an unknown protection state.
• Validate the source branch, repository, release marker, package and lockfile versions, extension version, and task versions before the publishing job starts. Keep checkout credentials out of the working tree.
• Prepare release 1.8.1 using the version-update script used by Release Initiate. Update the release marker, manifests, lockfile, README examples, user agent, resources, and bundled GitHub Action. .github/release-version.json intentionally contains 1.8.2, the next release.
• Remove the newly added PowerShell tests as requested. Preserve the existing application tests and the user's release-guard formatting.

The Azure resource checks were updated separately and verified: branch protection remains required, unknown protection states are rejected, and only main and the required internal release and canary template refs are permitted. The connections remain restricted to the existing production and release pipelines. GitHub production environment and PR automation controls are unchanged.

No dependency refresh is included. This PR applies the release-number updates and the publishing fix.

Testing

Test Types

• Unit tests
• Manual tests

Unit Test Coverage

npm run test:no-install: passed, 902 tests. Coverage is 100% for statements, branches, functions, and lines. This is the dependency-preserving test command documented in package.json.

Other Test Details

• npm run build:no-install: passed, including the release build, committed action bundle, resources, and documentation generation.
• npm run lint -- --no-fix: passed.
• Invoke-ScriptAnalyzer -Path '.azure-devops\Assert-Release.ps1': passed, no findings.
• & '.\.azure-devops\Assert-Release.ps1': passed with the actual 1.8.1 manifests and main-branch build metadata. Smoke checks confirmed rejection of a release tag, a PR merge ref, and a PR run.
• VSIX creation using npm exec --offline -- tfx extension create --manifest-globs vss-extension.json --output-path $vsixPath, from release: passed, extension ms-omex.PRMetrics, version 1.8.1.
• Parsed YAML and manifest checks: passed, including the main-only trigger, disabled PR trigger, validation-job dependency, credential persistence settings, bundled version, and next-release version.
• git diff --check: passed.

Azure's expanded-YAML dry run could not run because the current identity lacks EditBuild permission. No approval, template check, or branch-protection requirement was bypassed. End-to-end signing and Marketplace publishing have not run for this PR; they occur after merge.

Screenshots

Not applicable.

[github-actions]

PR Metrics

✔ Thanks for keeping your pull request small.
⚠️ Consider adding additional tests.

	Lines
Product Code	51
Test Code	-
Subtotal	51
Ignored Code	26
Total	77

Metrics computed by PR Metrics. Add it to your Azure DevOps and GitHub PRs!

[Copilot]

🔵 Needs a closer look

Security-sensitive publishing changes require human verification because Azure template expansion and end-to-end signing and publishing remain unverified.

No open issues 🎉

What changed in this PR

Prepares PR Metrics v1.8.1 and restores Marketplace publishing from protected main with release validation.

Changes:

• Restricts publishing to release-marker changes on main, with validation before publishing.
• Checks repository identity and release-version consistency; disables checkout credential persistence.
• Updates release metadata to 1.8.1 and advances the next-release version to 1.8.2.

File	Description
src/​vss-extension.json	Sets extension version to 1.8.1.
src/​task/​task.loc.json	Updates localized task version.
src/​task/​task.json	Updates task version and display name.
src/​task/​Strings/​resources.resjson/​en-US/​resources.resjson	Updates localized display name.
src/​task/​src/​utilities/​constants.ts	Updates the API user agent version.
README.md	Updates action examples to v1.8.1.
package.json	Updates package version.
package-lock.json	Synchronizes root package versions.
dist/​resources.resjson	Updates bundled display name.
.github/​release-version.json	Sets next release to 1.8.2.
.github/​release-publish-trigger.txt	Marks release 1.8.1 for publishing.
.azure-devops/​release.yml	Gates main-branch publishing on validation.
.azure-devops/​Assert-Release.ps1	Validates release source and manifest versions.

_{Review effort: Balanced}

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
EDITORCONFIG	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
JSON_PRETTIER	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
POWERSHELL	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
TYPESCRIPT_PRETTIER	Pass ✅
XML	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter
Super-linter revision: 2da136927bd4a73596db63044b504547c62cb854
Super-linter version: 9.0.0