20260327.1 remove refrances to release as we plan to move that to the ESRP release path.

Author: RyAuld

.Pipelines/pipeline-publish.yml

@@ -3,28 +3,12 @@
 # Release pipeline for the msal Python package — manually triggered only.
 # Source: https://github.com/AzureAD/microsoft-authentication-library-for-python
 #
-# Delegates all stages to template-pipeline-stages.yml, which is shared with
-# the (future) PR gate and post-merge CI pipelines.
+# Runs SDL security scans (PreBuildCheck) and the full test matrix (CI).
+# Package publishing is handled via the ESRP release path.
 # For one-time ADO setup, see ADO-PUBLISH-SETUP.md.
 
-parameters:
-- name: packageVersion
-  displayName: 'Package version to publish (must match msal/sku.py, e.g. 1.36.0 or 1.36.0rc1)'
-  type: string
-
-- name: publishTarget
-  displayName: 'Publish target'
-  type: string
-  values:
-  - 'test.pypi.org (Preview / RC)'
-  - 'pypi.org (Production)'
-
 trigger: none    # manual runs only — no automatic branch or tag triggers
 pr: none
 
 stages:
 - template: template-pipeline-stages.yml
-  parameters:
-    packageVersion: ${{ parameters.packageVersion }}
-    publishTarget: ${{ parameters.publishTarget }}
-    runPublish: true

.Pipelines/template-pipeline-stages.yml

@@ -3,34 +3,14 @@
 # Unified pipeline stages template for the msal Python package.
 #
 # Called from:
-#   pipeline-publish.yml              — release build (runPublish: true)
-#   (future) pipeline-ci.yml          — post-merge CI  (runPublish: false)
-#   (future) pipeline-pullrequest.yml — PR gate        (runPublish: false)
+#   pipeline-publish.yml — release build (SDL scans + test matrix)
+#   azure-pipelines.yml  — PR gate and post-merge CI
 #
-# Parameters:
-#   packageVersion  - Version to validate against msal/sku.py
-#                     Required when runPublish is true; unused otherwise.
-#   publishTarget   - 'test.pypi.org (Preview / RC)' or 'pypi.org (Production)'
-#                     Required when runPublish is true; unused otherwise.
-#   runPublish      - When true: also run Validate, Build, and Publish stages.
-#                     When false (PR / merge builds): only the CI stage runs.
+# Package publishing is handled via the ESRP release path (not in this template).
 #
 # Stage flow:
 #
-#   runPublish: true  → PreBuildCheck ─► Validate ─► CI ─► Build ─► PublishMSALPython
-#                                                                   └─► PublishPyPI
-#   runPublish: false → PreBuildCheck ─► CI  (Validate / Build / Publish are skipped)
-
-parameters:
-- name: packageVersion
-  type: string
-  default: ''
-- name: publishTarget
-  type: string
-  default: ''
-- name: runPublish
-  type: boolean
-  default: false
+#   PreBuildCheck ─► CI
 
 stages:
 
@@ -73,55 +53,12 @@ stages:
         GdnBreakGdnToolPoliCheck: true
 
 # ══════════════════════════════════════════════════════════════════════════════
-# Stage 1 · Validate — verify packageVersion matches msal/sku.py __version__
-#           Skipped when runPublish is false (PR / merge builds).
-# ══════════════════════════════════════════════════════════════════════════════
-- stage: Validate
-  displayName: 'Validate version'
-  dependsOn: PreBuildCheck
-  condition: and(${{ parameters.runPublish }}, eq(dependencies.PreBuildCheck.result, 'Succeeded'))
-  jobs:
-  - job: ValidateVersion
-    displayName: 'Check version matches source'
-    pool:
-      vmImage: ubuntu-latest
-    steps:
-    - task: UsePythonVersion@0
-      inputs:
-        versionSpec: '3.12'
-      displayName: 'Set up Python'
-
-    - bash: |
-        PARAM_VER="${{ parameters.packageVersion }}"
-        SKU_VER=$(grep '__version__' msal/sku.py | sed 's/.*"\(.*\)".*/\1/')
-
-        if [ -z "$PARAM_VER" ]; then
-          echo "##vso[task.logissue type=error]packageVersion is required. Enter the version to publish (must match msal/sku.py __version__)."
-          exit 1
-        elif [ "$PARAM_VER" != "$SKU_VER" ]; then
-          echo "##vso[task.logissue type=error]Version mismatch: parameter '$PARAM_VER' != msal/sku.py '$SKU_VER'"
-          echo "Update msal/sku.py __version__ to match the packageVersion parameter, or correct the parameter."
-          exit 1
-        else
-          echo "Version validated: $PARAM_VER"
-        fi
-      displayName: 'Verify version parameter matches msal/sku.py'
-
-# ══════════════════════════════════════════════════════════════════════════════
-# Stage 2 · CI — run the full test matrix across all supported Python versions.
-#           Always runs. Waits for Validate when runPublish is true;
-#           runs immediately when Validate is skipped (PR / merge builds).
+# Stage 1 · CI — run the full test matrix across all supported Python versions.
 # ══════════════════════════════════════════════════════════════════════════════
 - stage: CI
   displayName: 'Run tests'
-  dependsOn:
-  - PreBuildCheck
-  - Validate
-  condition: |
-    and(
-      eq(dependencies.PreBuildCheck.result, 'Succeeded'),
-      in(dependencies.Validate.result, 'Succeeded', 'Skipped')
-    )
+  dependsOn: PreBuildCheck
+  condition: eq(dependencies.PreBuildCheck.result, 'Succeeded')
   jobs:
   - job: Test
     displayName: 'Run unit tests'
@@ -204,10 +141,6 @@ stages:
     - bash: rm -f "$(Agent.TempDirectory)/lab-auth.pfx"
       displayName: 'Clean up lab certificate'
       condition: and(always(), ne(variables['LAB_APP_CLIENT_ID'], ''))
-
-# ══════════════════════════════════════════════════════════════════════════════
-# Stage 3 · Build — build sdist + wheel (release only)
-# ══════════════════════════════════════════════════════════════════════════════
 - stage: Build
   displayName: 'Build package'
   dependsOn: CI