We are announcing the deprecation of the Azure DevOps issuer in workload identity federation (WIF) service connections, with planned retirement on July 1, 2027. The Azure DevOps issuer uses the prefix in federated credentials. This change is part of Microsoft's broader initiative to standardize on the Microsoft Entra issuer across Azure services t...

To ensure our hosted agents in Azure Pipelines are operating in the most secure and up-to-date environments, we continuously update the supported images and phase out older ones. In October 2024, we announced support for Ubuntu-24.04. Soon, we plan to update the ubuntu-latest image to map to Ubuntu-24.04. Additionally, MacOS 15 Sequoia and Windows ...

We are excited to share some recent updates that improve the experience of using Workload identity federation (OpenID Connect) with Azure DevOps and Terraform on Microsoft Azure. Many working parts have come together to make this possible and we'll share those here. We are also very pleased to announce version 5 of the Microsoft DevLabs Terraform...

Introduction We have announced the retirement of Edgio CDN for Azure DevOps and are transitioning to a solution served by Akamai and Azure Front Door CDNs. This change affects Azure DevOps Pipelines customers. This article provides guidance for the Azure DevOps Pipelines customers to check if they are impacted by this change in CDN and the changes...

Update: the retirement date of macOS-12 has been moved to January 8. Azure DevOps is starting the deprecation process for the (Monterey) hosted pilelines image. While the image is being deprecated, you may experience longer queue times during peak usage hours. Deprecation will begin on October 7 and the image will be fully unsupported by January ...

Azure Pipelines includes around 150 build & release tasks as well as many more task extensions. Various included tasks have multiple (major) versions bringing the total to over included 200 tasks. Some of these tasks have been deprecated for some time, as newer tasks have replaced them. Deprecation means the task is still supported, before it ...

In September, we announced the ability to configure Azure service connections that do not need a secret. Azure service connections that use workload identity federation are easier to manage and more secure. Many customers have adopted this feature and we're excited to announce it is now generally available! Improved security Workload identity f...

Do you want to stop storing secrets and certificates in Azure service connections? Are you tired rotating these secrets whenever they expire? We are now announcing a public preview of workload identity federation for Azure service connections. Workload identity federation uses an industry-standard technology, Open ID Connect (OIDC), to simplify the...

Kubernetes tasks & Service Connections Azure DevOps supports Kubernetes deployments with a number of included tasks: These tasks can be configured to target a Kubernetes cluster in a number of ways, using the property: Kubernetes Service Connection limitations when accessing AKS You can create a Kubernetes Service Connection wi...

RHEL 6 & .NET Core 3.1 The current versions of the Azure Pipelines agent across all OSes depend on .NET Core 3.1. .NET Core 3.1 no longer ships updates for RHEL 6, including security related patches. We will be updating the .NET Core 3.1 (minor) version to keep it up-to-date for other operating systems. As part of this update we will drop supp...