release.yml: update the AzDO release pipeline YAML

Previously the .azure-pipelines/release.yml file was not being used for
release builds, but instead a private repository containing the real
YAML (in Azure Repos) was being used.

Let's bring the actual pipeline YAML into the main repo on GitHub.
This is what we do in other projects like microsoft/git and
git-ecosystem/git-credential-manager, and allows us to keep build
changes in sync between GH and AzDO.

Signed-off-by: Matthew John Cheetham <mjcheetham@outlook.com>

Author: mjcheetham

.azure-pipelines/release.yml

@@ -1,93 +1,95 @@
-# NOTE: this pipeline definition is not currently used to build releases of VFS for Git.
-# This is still done in the GVFS-Release-RealSign "classic" pipeline.
-
 name: $(date:yy)$(DayOfYear)$(rev:.r)
+trigger: none
+pr: none
 
 variables:
-  signType: test
-  teamName: GVFS
-  configuration: Release
-  signPool: VSEng-MicroBuildVS2019
   GVFSMajorAndMinorVersion: 1.0
   GVFSRevision: $(Build.BuildNumber)
-
-jobs:
-- job: build
-  displayName: Windows Build and Sign
-
-  pool:
-    name: $(signPool)
-
-  steps:
-  - task: ms-vseng.MicroBuildTasks.30666190-6959-11e5-9f96-f56098202fef.MicroBuildSigningPlugin@2
-    displayName: Install signing plugin
-    inputs:
-      signType: '$(SignType)'
-
-  - task: UseDotNet@2
-    displayName: Install .NET SDK
-    inputs:
-      packageType: sdk
-      version: 8.0.413
-
-  - task: CmdLine@2
-    displayName: Build VFS for Git
-    inputs:
-      script: $(Build.Repository.LocalPath)\scripts\Build.bat $(configuration) $(GVFSMajorAndMinorVersion).$(GVFSRevision) detailed
-
-  - task: CmdLine@2
-    displayName: Run unit tests
-    inputs:
-      script: $(Build.Repository.LocalPath)\scripts\RunUnitTests.bat $(configuration)
-
-  - task: CmdLine@2
-    displayName: Create build artifacts
-    inputs:
-      script: $(Build.Repository.LocalPath)\scripts\CreateBuildArtifacts.bat $(configuration) $(Build.ArtifactStagingDirectory)
-
-  - task: PublishBuildArtifacts@1
-    displayName: 'Publish Artifact: Installer'
-    inputs:
-      PathtoPublish: $(Build.ArtifactStagingDirectory)\NuGetPackages
-      ArtifactName: Installer
-
-  - task: PublishBuildArtifacts@1
-    displayName: 'Publish Artifact: FastFetch'
-    inputs:
-      PathtoPublish: $(Build.ArtifactStagingDirectory)\FastFetch
-      ArtifactName: FastFetch
-
-  - task: PublishSymbols@1
-    displayName: Enable Source Server
-    condition: eq(succeeded(), eq(variables['signType'], 'real'))
-    inputs:
-      SearchPattern: '**\*.pdb'
-      SymbolsFolder: $(Build.ArtifactStagingDirectory)\Symbols
-
-  - task: PublishBuildArtifacts@1
-    displayName: 'Publish Artifact: Symbols'
-    inputs:
-      PathtoPublish: $(Build.ArtifactStagingDirectory)\Symbols
-      ArtifactName: Symbols
-
-  - task: ms-vscs-artifact.build-tasks.artifactSymbolTask-1.artifactSymbolTask@0
-    displayName: Publish to Symbols on Symweb
-    condition: eq(succeeded(), eq(variables['signType'], 'real'))
-    inputs:
-      symbolServiceURI: https://microsoft.artifacts.visualstudio.com/DefaultCollection
-      sourcePath: $(Build.ArtifactStagingDirectory)/Symbols
-      expirationInDays: 2065
-      usePat: false
-
-  - task: NuGetCommand@2
-    displayName: Push GVFS.Installers package
-    condition: eq(succeeded(), eq(variables['signType'], 'real'))
-    inputs:
-      command: push
-      packagesToPush: $(Build.ArtifactStagingDirectory)\NuGetPackages\GVFS.Installers.*.nupkg
-      nuGetFeedType: external
-      publishFeedCredentials: '1essharedassets GVFS [PUBLISH]'
-
-  - task: ms-vseng.MicroBuildTasks.521a94ea-9e68-468a-8167-6dcf361ea776.MicroBuildCleanup@1
-    displayName: Send MicroBuild Telemetry
-    condition: always()
+  BuildConfiguration: Release
+  TeamName: GVFS
+
+resources:
+  repositories:
+  - repository: MicroBuildTemplate
+    type: git
+    name: 1ESPipelineTemplates/MicroBuildTemplate
+    ref: refs/tags/release
+
+  - repository: VFSForGit
+    type: github
+    name: microsoft/VFSForGit
+    ref: releases/shipped
+    endpoint: GitHub-VFSForGit
+
+extends:
+  template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
+  parameters:
+    pool:
+      name: VSEngSS-MicroBuild2022-1ES
+
+    featureFlags:
+      incrementalSDLBinaryAnalysis: false
+      disableNetworkIsolation: true
+
+    sdl:
+      binskim:
+        enabled: false
+        justificationForDisabling: "Guardian and BinSkim do not support a suppression for InnoSetup installer file"
+      sourceRepositoriesToScan:
+        include:
+        - repository: VFSForGit
+
+    stages:
+      - stage: Release
+
+        jobs:
+        - job: Build
+          templateContext:
+            mb:
+              signing:
+                enabled: true
+                feedSource: 'https://pkgs.dev.azure.com/mseng/_packaging/MicroBuildToolset/nuget/v3/index.json'
+                signType: real
+                signWithProd: true
+
+            outputs:
+              - output: pipelineArtifact
+                targetPath: $(Build.ArtifactStagingDirectory)\GVFS.Installers
+                artifactName: Installer
+              - output: pipelineArtifact
+                targetPath: $(Build.ArtifactStagingDirectory)\FastFetch
+                artifactName: FastFetch
+              - output: pipelineArtifact
+                targetPath: $(Build.ArtifactStagingDirectory)\Symbols
+                artifactName: Symbols
+              - output: pipelineArtifact
+                targetPath: $(Build.ArtifactStagingDirectory)\GVFS.FunctionalTests
+                artifactName: FunctionalTests
+
+          steps:
+            - checkout: VFSForGit
+              displayName: 'Checkout VFS for Git'
+              path: vfsforgit\src
+
+            - task: NuGetToolInstaller@1
+              displayName: 'Use NuGet 6.x'
+              inputs:
+                versionSpec: '6.x'
+
+            - script: |
+                $(Agent.BuildDirectory)\vfsforgit\src\scripts\Build.bat ^
+                  $(BuildConfiguration) ^
+                  $(GVFSMajorAndMinorVersion).$(GVFSRevision) ^
+                  detailed
+              displayName: 'Build and sign ($(BuildConfiguration))'
+
+            - script: |
+                $(Agent.BuildDirectory)\vfsforgit\src\scripts\RunUnitTests.bat ^
+                  $(BuildConfiguration)
+              displayName: 'Run unit tests'
+
+            - script: |
+                $(Agent.BuildDirectory)\vfsforgit\src\scripts\CreateBuildArtifacts.bat ^
+                  $(BuildConfiguration) ^
+                  $(Build.ArtifactStagingDirectory)
+              displayName: 'Create artifacts'