Refactor AzDO pipelines.

Author: iclanton

common/config/azure-pipelines/ci-build.yaml

@@ -1,13 +1,41 @@
-pool:
-  vmImage: 'ubuntu-latest'
-variables:
-  NodeVersion: 18
-  FORCE_COLOR: 1
-steps:
-  - checkout: self
-    persistCredentials: true
-  - template: templates/build.yaml
-  - script: 'node common/scripts/install-run-rush.js version --bump --version-policy BOGUS --target-branch $(Build.SourceBranchName)'
-    displayName: 'Rush Version'
-  - script: 'node common/scripts/install-run-rush.js publish --apply --publish --include-all --npm-auth-token $(npmToken)'
-    displayName: 'Rush Publish'
+resources:
+  repositories:
+    - repository: RushstackMainRepo
+      type: github
+      name: Microsoft/rushstack
+      endpoint: 'GitHub (Rushbot)'
+    - repository: 1esPipelines
+      type: git
+      name: 1ESPipelineTemplates/1ESPipelineTemplates
+      ref: refs/tags/release
+
+extends:
+  template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
+  parameters:
+    pool:
+      name: Azure-Pipelines-1ESPT-ExDShared
+      os: windows
+    stages:
+      - stage:
+        jobs:
+          - job:
+            pool:
+              name: publish-rushstack
+              os: linux
+            templateContext:
+              outputs:
+                - output: pipelineArtifact
+                  targetPath: $(Build.ArtifactStagingDirectory)/published-versions
+                  artifactName: published-versions
+            steps:
+              - checkout: self
+                persistCredentials: true
+                path: tsdoc
+
+              - template: /common/config/azure-pipelines/templates/install-node.yaml@self
+
+              - template: /common/config/azure-pipelines/templates/build.yaml@self
+
+              - template: /common/config/azure-pipelines/templates/publish.yaml@self
+
+              - template: /common/config/azure-pipelines/templates/record-published-versions.yaml@self

common/config/azure-pipelines/npm-publish.yaml

@@ -17,7 +17,9 @@ jobs:
     steps:
       - checkout: self
 
-      - template: ./templates/build.yaml
+      - template: /common/config/azure-pipelines/templates/install-node.yaml@self
+
+      - template: /common/config/azure-pipelines/templates/build.yaml@self
 
       - publish: playground/dist
         artifact: 'playground'

common/config/azure-pipelines/npm-republish.yaml

@@ -1,19 +1,20 @@
 steps:
-  - task: NodeTool@0
-    displayName: 'Use Node $(NodeVersion).x'
-    inputs:
-      versionSpec: '$(NodeVersion).x'
-      checkLatest: true
-  - template: ./configure-git.yaml
+  - script: 'git config --local user.email rushbot@users.noreply.github.com'
+    displayName: 'git config email'
+    workingDirectory: '$(Agent.BuildDirectory)/tsdoc'
+
+  - script: 'git config --local user.name Rushbot'
+    displayName: 'git config name'
+    workingDirectory: '$(Agent.BuildDirectory)/tsdoc'
+
   - script: 'node common/scripts/install-run-rush.js change --verify'
     displayName: 'Verify Change Logs'
-  - script: 'node common/scripts/install-run-rush.js check'
-    displayName: 'Rush Check'
+    workingDirectory: '$(Agent.BuildDirectory)/tsdoc'
+
   - script: 'node common/scripts/install-run-rush.js install'
     displayName: 'Rush Install'
+    workingDirectory: '$(Agent.BuildDirectory)/tsdoc'
+
   - script: 'node common/scripts/install-run-rush.js retest --verbose --production'
     displayName: 'Rush retest'
-    env:
-      # Prevent time-based browserslist update warning
-      # See https://github.com/microsoft/rushstack/issues/2981
-      BROWSERSLIST_IGNORE_OLD_DATA: 1
+    workingDirectory: '$(Agent.BuildDirectory)/tsdoc'

common/config/azure-pipelines/playground-build.yaml

@@ -0,0 +1,10 @@
+parameters:
+  - name: NodeMajorVersion
+    type: number
+    default: 18
+
+steps:
+  - task: NodeTool@0
+    inputs:
+      versionSpec: '${{ parameters.NodeMajorVersion }}.x'
+    displayName: 'Install Node.js ${{ parameters.NodeMajorVersion }}'

common/config/azure-pipelines/templates/build.yaml

@@ -0,0 +1,10 @@
+steps:
+  - script: 'node common/scripts/install-run-rush.js version --bump --version-policy tsdoc --target-branch $(Build.SourceBranchName)'
+    displayName: 'Rush Version'
+    workingDirectory: '$(Agent.BuildDirectory)/tsdoc'
+
+  - script: 'node common/scripts/install-run-rush.js publish --apply --publish --include-all --target-branch $(Build.SourceBranchName) --add-commit-details --set-access-level public'
+    displayName: 'Rush Publish'
+    env:
+      NPM_AUTH_TOKEN: $(npmToken)
+    workingDirectory: '$(Agent.BuildDirectory)/tsdoc'

common/config/azure-pipelines/templates/configure-git.yaml

@@ -0,0 +1,28 @@
+steps:
+  - checkout: RushstackMainRepo
+    path: rushstack
+
+  - script: 'git config --local user.email rushbot@users.noreply.github.com'
+    displayName: 'git config email'
+    workingDirectory: '$(Agent.BuildDirectory)/rushstack'
+
+  - script: 'git config --local user.name Rushbot'
+    displayName: 'git config name'
+    workingDirectory: '$(Agent.BuildDirectory)/rushstack'
+
+  - script: 'node common/scripts/install-run-rush.js install --to repo-toolbox'
+    displayName: 'Rush Install (rushstack)'
+    workingDirectory: '$(Agent.BuildDirectory)/rushstack'
+
+  - script: 'node common/scripts/install-run-rush.js build --verbose --production --to repo-toolbox'
+    displayName: 'Rush Rebuild (rushstack)'
+    workingDirectory: '$(Agent.BuildDirectory)/rushstack'
+
+  - script: 'node $(Agent.BuildDirectory)/rushstack/repo-scripts/repo-toolbox/lib/start.js record-versions --out-file $(Build.ArtifactStagingDirectory)/published-versions/published-versions.json'
+    displayName: 'Record Published Versions'
+    workingDirectory: '$(Agent.BuildDirectory)/tsdoc'
+
+  # Published by the 1ES template
+  # - publish: $(Build.ArtifactStagingDirectory)/published-versions
+  #   artifact: published-versions
+  #   displayName: 'Publish Artifact: published-versions'

common/config/azure-pipelines/templates/install-node.yaml

@@ -18,3 +18,7 @@
 #
 #   //registry.npmjs.org/:_authToken=${NPM_AUTH_TOKEN}
 #
+
+registry=https://registry.npmjs.org/
+always-auth=true
+//registry.npmjs.org/:_authToken=${NPM_AUTH_TOKEN}