Add INSTALL_RUN_RUSH_LOCKFILE_PATH to pipeline runs.

.github/workflows/ci.yml

@@ -34,6 +34,8 @@ jobs:
             OS: windows-latest
     name: Node.js v${{ matrix.NodeVersionDisplayName }} (${{ matrix.OS }})
     runs-on: ${{ matrix.OS }}
+    env:
+      INSTALL_RUN_RUSH_LOCKFILE_PATH: ${{ github.workspace }}/repo-a/common/config/validation/rush-package-lock.json
     steps:
       - name: Create ~/.rush-user/settings.json
         shell: pwsh

common/config/azure-pipelines/npm-post-publish.yaml

@@ -96,17 +96,26 @@ extends:
               - script: 'git config --local user.name Rushbot'
                 displayName: 'git config name'
 
-              - script: 'node common/scripts/install-run-rush.js install --to repo-toolbox'
-                displayName: 'Rush Install'
+              - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+                parameters:
+                  Arguments: 'install --to repo-toolbox'
+                  DisplayName: 'Rush Install'
 
-              - script: 'node common/scripts/install-run-rush.js build --to repo-toolbox --verbose'
-                displayName: 'Rush Build (repo-toolbox)'
+              - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+                parameters:
+                  Arguments: 'build --to repo-toolbox --verbose'
+                  DisplayName: 'Rush Build (repo-toolbox)'
 
               - script: 'node repo-scripts/repo-toolbox/lib-commonjs/start.js bump-decoupled-local-dependencies'
                 displayName: 'Bump decoupled local dependencies'
 
-              - script: 'node common/scripts/install-run-rush.js update'
-                displayName: 'Rush Update'
+              - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+                parameters:
+                  Arguments: 'update'
+                  DisplayName: 'Rush Update'
+
+              - bash: cp common/temp/install-run/@microsoft+rush@*/package-lock.json common/config/validation/rush-package-lock.json
+                displayName: 'Update rush-package-lock.json'
 
               - bash: |
                   set -e
@@ -124,15 +133,15 @@ extends:
                   git commit -m "$(CommitMessage)"
                 displayName: 'Commit dependency changes'
 
-              - bash: |
-                  set -e
-
-                  node common/scripts/install-run-rush.js change \
-                    --bulk \
-                    --bump-type none \
+              - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+                parameters:
+                  Arguments: >
+                    change
+                    --bulk
+                    --bump-type none
                     --commit-message "chore: generate change files for decoupled dependency bump"
-                displayName: 'Generate change files'
-                condition: and(succeeded(), eq(variables.HasChanges, 'true'))
+                  DisplayName: 'Generate change files'
+                  Condition: "and(succeeded(), eq(variables.HasChanges, 'true'))"
 
               - template: /common/config/azure-pipelines/templates/push-and-create-github-pr.yaml@self
                 parameters:
@@ -163,13 +172,15 @@ extends:
                 parameters:
                   NodeMajorVersion: 24
 
-              # Build the custom Docusaurus plugin for api-documenter in the
-              # rushstack-websites repo.
-              - script: 'node common/scripts/install-run-rush.js install'
-                displayName: 'Rush Install (rushstack-websites)'
+              - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+                parameters:
+                  Arguments: 'install'
+                  DisplayName: 'Rush Install (rushstack-websites)'
 
-              - script: 'node common/scripts/install-run-rush.js build --to-except api.rushstack.io --verbose'
-                displayName: 'Rush Build to-except api.rushstack.io (rushstack-websites)'
+              - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+                parameters:
+                  Arguments: 'build --to-except api.rushstack.io --verbose'
+                  DisplayName: 'Rush Build to-except api.rushstack.io (rushstack-websites)'
 
               # Download the api artifact from the triggering publish pipeline.
               # AzDO automatically resolves which pipeline resource triggered this run.

common/config/azure-pipelines/templates/build.yaml

@@ -10,20 +10,26 @@ steps:
   - script: 'git config --local user.name Rushbot'
     displayName: 'git config name'
 
-  - script: 'node common/scripts/install-run-rush.js change --verify'
-    displayName: 'Verify Change Logs'
+  - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+    parameters:
+      Arguments: 'change --verify'
+      DisplayName: 'Verify Change Logs'
 
-  - script: 'node common/scripts/install-run-rush.js install'
-    displayName: 'Rush Install'
+  - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+    parameters:
+      Arguments: 'install'
+      DisplayName: 'Rush Install'
 
   # - bash: |
   #     /usr/bin/Xvfb :99 -screen 0 1024x768x24 > /dev/null 2>&1 &
   #     echo ">>> Started xvfb"
   #   displayName: Start xvfb
   #   condition: and(succeeded(), eq(variables['Agent.OS'], 'Linux'))
 
-  - script: 'node common/scripts/install-run-rush.js retest --verbose --production ${{ parameters.BuildParameters }}'
-    displayName: 'Rush retest (install-run-rush)'
+  - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+    parameters:
+      Arguments: 'retest --verbose --production ${{ parameters.BuildParameters }}'
+      DisplayName: 'Rush retest (install-run-rush)'
 
   - script: 'npm run test'
     workingDirectory: 'build-tests/rush-package-manager-integration-test'

common/config/azure-pipelines/templates/bump-versions.yaml

@@ -6,5 +6,11 @@ parameters:
     default: $(Build.SourceBranchName)
 
 steps:
-  - script: 'node common/scripts/install-run-rush.js version --bump --version-policy ${{ parameters.VersionPolicyName }} --target-branch ${{ parameters.BranchName }}'
-    displayName: 'Rush Version (Policy: ${{ parameters.VersionPolicyName }})'
+  - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+    parameters:
+      Arguments: >
+        version
+        --bump
+        --version-policy ${{ parameters.VersionPolicyName }}
+        --target-branch ${{ parameters.BranchName }}
+      DisplayName: 'Rush Version (Policy: ${{ parameters.VersionPolicyName }})'

common/config/azure-pipelines/templates/install-run-rush.yaml

@@ -0,0 +1,23 @@
+# Runs install-run-rush.js with the specified CLI arguments and sets the
+# INSTALL_RUN_RUSH_LOCKFILE_PATH environment variable.
+parameters:
+  - name: Arguments
+    type: string
+  - name: DisplayName
+    type: string
+  - name: Condition
+    type: string
+    default: ''
+  - name: NpmAuthToken
+    type: string
+    default: ''
+
+steps:
+  - script: 'node common/scripts/install-run-rush.js ${{ parameters.Arguments }}'
+    displayName: '${{ parameters.DisplayName }}'
+    ${{ if ne(parameters.Condition, '') }}:
+      condition: ${{ parameters.Condition }}
+    env:
+      INSTALL_RUN_RUSH_LOCKFILE_PATH: $(Build.SourcesDirectory)/common/config/validation/rush-package-lock.json
+      ${{ if ne(parameters.NpmAuthToken, '') }}:
+        NPM_AUTH_TOKEN: ${{ parameters.NpmAuthToken }}

common/config/azure-pipelines/templates/pack.yaml

@@ -1,3 +1,10 @@
 steps:
-  - script: 'node common/scripts/install-run-rush.js publish --publish --pack --include-all --release-folder $(Build.ArtifactStagingDirectory)/packages'
-    displayName: 'Rush Pack'
+  - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+    parameters:
+      Arguments: >
+        publish
+        --publish
+        --pack
+        --include-all
+        --release-folder $(Build.ArtifactStagingDirectory)/packages
+      DisplayName: 'Rush Pack'

common/config/azure-pipelines/templates/publish.yaml

@@ -6,7 +6,14 @@ parameters:
     default: $(Build.SourceBranchName)
 
 steps:
-  - script: 'node common/scripts/install-run-rush.js publish --apply --publish --include-all --target-branch ${{ parameters.BranchName }} --add-commit-details --set-access-level public'
-    displayName: 'Rush Publish (Policy: ${{ parameters.VersionPolicyName }})'
-    env:
-      NPM_AUTH_TOKEN: $(npmToken)
+  - template: /common/config/azure-pipelines/templates/install-run-rush.yaml@self
+    parameters:
+      Arguments: >
+        publish
+        --apply
+        --publish
+        --include-all
+        --target-branch ${{ parameters.BranchName }}
+        --add-commit-details --set-access-level public
+      DisplayName: 'Rush Publish (Policy: ${{ parameters.VersionPolicyName }})'
+      NpmAuthToken: $(npmToken)