Use authenticated package feeds in packaging pipelines

tools/ci_build/github/azure-pipelines/npm-packaging-pipeline.yml

@@ -96,6 +96,7 @@ extends:
         pool: 'onnxruntime-Win-CPU-VS2022-Latest'
         variables:
           runCodesignValidationInjection: false
+          skipComponentGovernanceDetection: true
         timeoutInMinutes: 10
         steps:
     #    This pipeline is triggered by the Nuget - Packaging - CUDA13 pipeline.

tools/ci_build/github/azure-pipelines/nuget/templates/dml-vs-2022.yml

@@ -84,12 +84,6 @@ stages:
          @echo ##vso[task.setvariable variable=Configuration]$(BuildConfig)
         displayName: 'Set Configuration variable'
 
-
-      - task: NuGetToolInstaller@0
-        displayName: Use Nuget 6.10.x
-        inputs:
-          versionSpec: 6.10.x
-
       # Nuget packaging if needed
       - ${{ if eq(parameters['DoNugetPack'], 'true') }}:
         # Esrp signing. Requires older .net SDK currently (ESRP v5.1.1)

tools/ci_build/github/azure-pipelines/stages/nuget-win-cuda-packaging-stage.yml

@@ -120,8 +120,9 @@ stages:
     pool:
       name: 'onnxruntime-Win2022-GPU-A10'
     variables:
-      CUDA_MODULE_LOADINGL: 'LAZY'
+      CUDA_MODULE_LOADING: 'LAZY'
       GRADLE_OPTS: '-Dorg.gradle.daemon=false'
+      skipComponentGovernanceDetection: true
       ${{ if eq(parameters.CudaVersion, '13.0') }}:
         CUDA_VERSION_MAJOR: '13'
       ${{ if eq(parameters.CudaVersion, '12.8') }}:

tools/ci_build/github/azure-pipelines/templates/c-api-cpu.yml

@@ -351,6 +351,8 @@ stages:
     - checkout: self
       submodules: true
 
+    - template: setup-feeds-and-python-steps.yml
+
     - script: |
         dir
       workingDirectory: '$(Build.BinariesDirectory)/nuget-artifact'
@@ -385,17 +387,17 @@ stages:
     - task: MSBuild@1
       displayName: 'Restore NuGet Packages and create project.assets.json'
       inputs:
-        solution: '$(Build.SourcesDirectory)\csharp\OnnxRuntime.CSharp.sln'
-        platform: 'Any CPU'
+        solution: '$(Build.SourcesDirectory)\csharp\src\Microsoft.ML.OnnxRuntime\Microsoft.ML.OnnxRuntime.csproj'
+        platform: 'AnyCPU'
         configuration: RelWithDebInfo
         msbuildArguments: '-t:restore -p:OrtPackageId=$(OrtPackageId)'
         workingDirectory: '$(Build.SourcesDirectory)\csharp'
 
     - task: MSBuild@1
       displayName: 'Build C# bindings'
       inputs:
-        solution: '$(Build.SourcesDirectory)\csharp\OnnxRuntime.CSharp.sln'
-        platform: 'Any CPU'
+        solution: '$(Build.SourcesDirectory)\csharp\src\Microsoft.ML.OnnxRuntime\Microsoft.ML.OnnxRuntime.csproj'
+        platform: 'AnyCPU'
         configuration: RelWithDebInfo
         msbuildArguments: '-p:OnnxRuntimeBuildDirectory="$(Build.BinariesDirectory)" -p:OrtPackageId=$(OrtPackageId) -p:IsReleaseBuild=${{ parameters.IsReleaseBuild }} -p:ReleaseVersionSuffix=$(ReleaseVersionSuffix) -p:PackageVersion=$(OnnxRuntimeVersion)'
         workingDirectory: '$(Build.SourcesDirectory)\csharp'
@@ -406,8 +408,6 @@ stages:
         DisplayName: 'ESRP - Sign C# dlls'
         DoEsrp: true
 
-    - template: setup-feeds-and-python-steps.yml
-
     - task: MSBuild@1
       displayName: 'Build Nuget Packages'
       inputs:

tools/ci_build/github/azure-pipelines/templates/publish-symbolrequestprod-api.yml

@@ -26,11 +26,6 @@ parameters:
     type: string
 
 steps:
-  - powershell: |-
-      Get-PackageProvider -Name NuGet -ForceBootstrap
-      Install-Module -Verbose -AllowClobber -Force Az.Accounts, Az.Storage, Az.Network, Az.Resources, Az.Compute
-    displayName: Install Azure Module Dependencies
-
   - task: PublishSymbols@2
     displayName: Publish Symbols (to current Azure DevOps tenant)
     continueOnError: True

tools/ci_build/github/azure-pipelines/templates/setup-feeds-and-python-steps.yml

@@ -47,6 +47,7 @@ steps:
       Set-Content -Force -Path $npmrcPath -Value @"
       registry=https://aiinfra.pkgs.visualstudio.com/_packaging/${env:artifact_feed}/npm/registry/
       always-auth=true
+      replace-registry-host=npmjs
       "@
 
       Write-Host "Generated npmrc contents:"
@@ -219,9 +220,9 @@ steps:
     targetType: 'inline'
     script: |
       # NuGet appears to fail if any of the pkg sources are unreachable.
-      # Replace the NuGet.config w/ one that only has the internal feed.
+      # Replace NuGet configs w/ one that only has the internal feed.
       # HACK: We'd rather splice the structure, not override the file.
-      Set-Content -Path "NuGet.config" -Value @"
+      $nugetConfig = @"
       <?xml version="1.0" encoding="utf-8"?>
       <configuration>
         <solution>
@@ -236,3 +237,11 @@ steps:
         </disabledPackageSources>
       </configuration>
       "@
+
+      Set-Content -Path "NuGet.config" -Value $nugetConfig
+
+      # C# builds explicitly pass this config file to dotnet/msbuild restore.
+      $csharpNugetConfigPath = "csharp/NuGet.CSharp.config"
+      if (Test-Path $csharpNugetConfigPath) {
+        Set-Content -Path $csharpNugetConfigPath -Value $nugetConfig
+      }