From 3287b2acf485dace9312c90ebb4dcccc86e10b20 Mon Sep 17 00:00:00 2001
From: wenytang-ms <wenyutang@microsoft.com>
Date: Tue, 18 Aug 2026 13:44:08 +0800
Subject: [PATCH] Revert "ci: pin Windows signing plugin to 1.1.1306"

This reverts commit e5220ca3c0981d38b22fcdc800e5cc3a468bb0e0.

SR21 validation is complete. Follow-up signing changes will target the specific JAR signing flow.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: ac225268-483d-4498-a08f-fe79a87d4d2e
---
 .azure-pipelines/nightly.yml | 19 +++++--------------
 .azure-pipelines/rc.yml      | 19 +++++--------------
 2 files changed, 10 insertions(+), 28 deletions(-)

diff --git a/.azure-pipelines/nightly.yml b/.azure-pipelines/nightly.yml
index 1a53afd8..a1ee16a2 100644
--- a/.azure-pipelines/nightly.yml
+++ b/.azure-pipelines/nightly.yml
@@ -33,7 +33,11 @@ extends:
             templateContext:
               mb:
                 signing:
-                  enabled: false
+                  enabled: true
+                  signType: real
+                  signWithProd: true
+                  zipSources: false
+                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
               outputs:
                 - output: pipelineArtifact
                   artifactName: extension
@@ -43,19 +47,6 @@ extends:
               - checkout: self
                 clean: true
                 fetchTags: true
-              # Pin the last known-good Windows plugin while the 1.1.1374 client certificate regression is unresolved.
-              - task: NuGetAuthenticate@1
-                displayName: Authenticate MicroBuild feed
-              - task: MicroBuildSigningPlugin@4
-                displayName: Install Signing Plugin 1.1.1306
-                inputs:
-                  signType: real
-                  version: '1.1.1306'
-                  zipSources: false
-                  ConnectedPMEServiceName: '40012d40-9ded-4f75-8476-d60758200346'
-                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
-                env:
-                  MicroBuildOutputFolderOverride: '$(Agent.TempDirectory)'
               - task: NodeTool@0
                 displayName: Use Node 20.x
                 inputs:
diff --git a/.azure-pipelines/rc.yml b/.azure-pipelines/rc.yml
index 07da2067..59286c81 100644
--- a/.azure-pipelines/rc.yml
+++ b/.azure-pipelines/rc.yml
@@ -28,7 +28,11 @@ extends:
             templateContext:
               mb:
                 signing:
-                  enabled: false
+                  enabled: true
+                  signType: real
+                  signWithProd: true
+                  zipSources: false
+                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
               outputs:
                 - output: pipelineArtifact
                   artifactName: extension
@@ -38,19 +42,6 @@ extends:
               - checkout: self
                 clean: true
                 fetchTags: true
-              # Pin the last known-good Windows plugin while the 1.1.1374 client certificate regression is unresolved.
-              - task: NuGetAuthenticate@1
-                displayName: Authenticate MicroBuild feed
-              - task: MicroBuildSigningPlugin@4
-                displayName: Install Signing Plugin 1.1.1306
-                inputs:
-                  signType: real
-                  version: '1.1.1306'
-                  zipSources: false
-                  ConnectedPMEServiceName: '40012d40-9ded-4f75-8476-d60758200346'
-                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
-                env:
-                  MicroBuildOutputFolderOverride: '$(Agent.TempDirectory)'
               - task: NodeTool@0
                 displayName: Use Node 20.x
                 inputs: