[missymessa]

Backport of #17247 for release/8.0.

Removes all remaining Publish-Build-Assets variable-group imports from the release-specific Arcade templates and validation pipeline. This is part of the VG20 least-privilege cleanup tracked by DNCENG 10812.

[Copilot]

Pull request overview

This backport removes remaining imports of the Publish-Build-Assets Azure DevOps variable group from release/8.0 pipeline YAML templates and the SDK validation pipeline, aligning with the least-privilege VG20 cleanup described in the PR metadata.

Changes:

• Removed - group: Publish-Build-Assets from eng/validate-sdk.yml.
• Removed Publish-Build-Assets group imports from shared and *-official post-build variable templates.
• Removed Publish-Build-Assets group imports from shared and *-official CodeQL job templates and publish-build-assets job templates.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
eng/validate-sdk.yml	Drops Publish-Build-Assets variable group import from the SDK validation pipeline job variables.
eng/common/templates/post-build/common-variables.yml	Removes Publish-Build-Assets import from shared post-build variables template.
eng/common/templates/jobs/codeql-build.yml	Removes Publish-Build-Assets import from shared CodeQL build template variables.
eng/common/templates/job/publish-build-assets.yml	Removes Publish-Build-Assets import from shared publish-build-assets job template variables.
eng/common/templates-official/post-build/common-variables.yml	Removes Publish-Build-Assets import from official post-build variables template.
eng/common/templates-official/jobs/codeql-build.yml	Removes Publish-Build-Assets import from official CodeQL build template variables.
eng/common/templates-official/job/publish-build-assets.yml	Removes Publish-Build-Assets import from official publish-build-assets job template variables.
eng/common-variables.yml	Removes Publish-Build-Assets import (and associated comment) from common internal-build variables.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 8 out of 8 changed files in this pull request and generated no new comments.

Suppressed comments (1)

eng/validate-sdk.yml:25

• The variables parameter is a YAML sequence, but the list items are currently aligned with variables: rather than nested under it. This style is inconsistent with other templates in the repo and risks the job template invocation being parsed incorrectly.

    variables:
    - group: Arcade-Promotion-GitHub
    - _BuildConfig: ${{ parameters.buildConfig }}
    - _BuildArgs: ${{ parameters.buildArgs }}
    - _ValidateBlobFeedUrl: ${{ parameters.validateBlobFeedUrl }}

[missymessa]

Added the release/8.0 backport of #17259 in commit 47f8257. It removes the remaining AzureDevOps-Artifact-Feeds-Pats imports from both publishing-template copies so the branch no longer downloads the retired dn-bot-all-orgs-artifact-feeds-rw secret.

-- GitHub Copilot CLI (posted on behalf of @missymessa)

[Copilot]

Pull request overview

Copilot reviewed 8 out of 8 changed files in this pull request and generated no new comments.