From e31065b995960001bfb6f4fc520f62dd17b6c51f Mon Sep 17 00:00:00 2001
From: David Federman <dfederm@microsoft.com>
Date: Thu, 16 Apr 2026 10:08:13 -0700
Subject: [PATCH] Add NuGet publish to official build pipeline

Replace the classic release pipeline (blocked by 1ES drift management)
with an output: nuget entry in the 1ES template. Publishes to nuget.org
via the 'MSBuild SDKs' service connection when a Microsoft.Build* tag
is pushed, scoped to only the tagged package.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 azure-pipelines-official.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/azure-pipelines-official.yml b/azure-pipelines-official.yml
index 4d19657..d04b282 100644
--- a/azure-pipelines-official.yml
+++ b/azure-pipelines-official.yml
@@ -55,6 +55,13 @@ extends:
             condition: always()
             targetPath: '$(ArtifactsDirectoryName)'
             artifactName: $(ArtifactsDirectoryName)
+          - output: nuget
+            displayName: 'Push NuGet Packages to nuget.org'
+            condition: and(succeeded(), startsWith(variables['Build.SourceBranch'], 'refs/tags/Microsoft.Build'))
+            packageParentPath: '$(ArtifactsDirectoryName)'
+            packagesToPush: '$(ArtifactsDirectoryName)/**/$(Build.SourceBranchName).nupkg'
+            nuGetFeedType: 'external'
+            publishFeedCredentials: 'MSBuild SDKs'
         steps:
         - task: PowerShell@2
           displayName: 'Update Build Number, and Add Build Tag for tagged commits'