From d51c0acee92763e2f396eeb05b21333605d210ba Mon Sep 17 00:00:00 2001
From: Logan Bussell <loganbussell@microsoft.com>
Date: Fri, 16 May 2025 16:47:40 -0700
Subject: [PATCH 1/7] Add stub of new staging pipeline command

---
 .../FromStagingPipelineCommand.cs             | 23 ++++++++++++++++
 .../FromStagingPipelineOptions.cs             | 27 +++++++++++++++++++
 eng/update-dependencies/Program.cs            |  4 +++
 3 files changed, 54 insertions(+)
 create mode 100644 eng/update-dependencies/FromStagingPipelineCommand.cs
 create mode 100644 eng/update-dependencies/FromStagingPipelineOptions.cs

diff --git a/eng/update-dependencies/FromStagingPipelineCommand.cs b/eng/update-dependencies/FromStagingPipelineCommand.cs
new file mode 100644
index 0000000000..122341f268
--- /dev/null
+++ b/eng/update-dependencies/FromStagingPipelineCommand.cs
@@ -0,0 +1,23 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System.Threading.Tasks;
+using Microsoft.Extensions.Logging;
+
+namespace Dotnet.Docker;
+
+internal class FromStagingPipelineCommand(
+    ILogger<FromStagingPipelineCommand> logger)
+    : BaseCommand<FromStagingPipelineOptions>
+{
+    private readonly ILogger<FromStagingPipelineCommand> _logger = logger;
+
+    public override async Task<int> ExecuteAsync(FromStagingPipelineOptions options)
+    {
+        _logger.LogInformation(
+            "Processing staging pipeline run with ID {options.StagingPipelineRunId}",
+            options.StagingPipelineRunId);
+
+        return 0; // Return success for now
+    }
+}
diff --git a/eng/update-dependencies/FromStagingPipelineOptions.cs b/eng/update-dependencies/FromStagingPipelineOptions.cs
new file mode 100644
index 0000000000..d9bc7c3f73
--- /dev/null
+++ b/eng/update-dependencies/FromStagingPipelineOptions.cs
@@ -0,0 +1,27 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System.Collections.Generic;
+using System.CommandLine;
+
+namespace Dotnet.Docker;
+
+internal class FromStagingPipelineOptions : CreatePullRequestOptions, IOptions
+{
+    public required string StagingPipelineRunId { get; init; }
+
+    public static new List<Argument> Arguments { get; } =
+    [
+        new Argument<string>("stagingPipelineRunId")
+        {
+            Arity = ArgumentArity.ExactlyOne,
+            Description = "The staging pipeline run ID to use as a source for the update"
+        },
+        ..CreatePullRequestOptions.Arguments,
+    ];
+
+    public static new List<Option> Options { get; } =
+    [
+        ..CreatePullRequestOptions.Options,
+    ];
+}
diff --git a/eng/update-dependencies/Program.cs b/eng/update-dependencies/Program.cs
index 4195a930ab..13bee3277e 100644
--- a/eng/update-dependencies/Program.cs
+++ b/eng/update-dependencies/Program.cs
@@ -20,6 +20,9 @@
     FromChannelCommand.Create(
         name: "from-channel",
         description: "Update dependencies using the latest build from a channel"),
+    FromStagingPipelineCommand.Create(
+        name: "from-staging-pipeline",
+        description: "Update dependencies using a specific staging pipeline run"),
     SpecificCommand.Create(
         name: "specific",
         description: "Update dependencies using specific product versions"),
@@ -51,6 +54,7 @@
 
             FromBuildCommand.Register<FromBuildCommand>(services);
             FromChannelCommand.Register<FromChannelCommand>(services);
+            FromStagingPipelineCommand.Register<FromStagingPipelineCommand>(services);
             SpecificCommand.Register<SpecificCommand>(services);
         })
     );

From ffae367c120b1692d55ce5711ad8af9e604516a7 Mon Sep 17 00:00:00 2001
From: Logan Bussell <loganbussell@microsoft.com>
Date: Mon, 19 May 2025 17:40:55 -0700
Subject: [PATCH 2/7] Download release config from staging storage account

---
 .../BuildUpdaterService.cs                    |  14 +--
 .../CreatePullRequestOptions.cs               |   3 +-
 eng/update-dependencies/FromBuildOptions.cs   |   2 +-
 eng/update-dependencies/FromChannelOptions.cs |   2 +-
 .../FromStagingPipelineCommand.cs             | 104 +++++++++++++++++-
 .../FromStagingPipelineOptions.cs             |  34 +++++-
 .../Model/Release/ReleaseManifest.cs          |  59 ++++++++++
 eng/update-dependencies/Program.cs            |  35 ++++--
 eng/update-dependencies/ReleaseConfig.cs      |  65 +++++++++++
 .../SpecificCommandOptions.cs                 |   2 +-
 eng/update-dependencies/StorageAccount.cs     |  48 ++++++++
 eng/update-dependencies/VersionHelper.cs      |  39 +++++++
 .../update-dependencies.csproj                |   2 +
 13 files changed, 374 insertions(+), 35 deletions(-)
 create mode 100644 eng/update-dependencies/Model/Release/ReleaseManifest.cs
 create mode 100644 eng/update-dependencies/ReleaseConfig.cs
 create mode 100644 eng/update-dependencies/StorageAccount.cs
 create mode 100644 eng/update-dependencies/VersionHelper.cs

diff --git a/eng/update-dependencies/BuildUpdaterService.cs b/eng/update-dependencies/BuildUpdaterService.cs
index 73ff8996dd..1325e6a262 100644
--- a/eng/update-dependencies/BuildUpdaterService.cs
+++ b/eng/update-dependencies/BuildUpdaterService.cs
@@ -57,7 +57,7 @@ public async Task<int> UpdateFrom(Build build, CreatePullRequestOptions pullRequ
         string productCommitsJson = await _buildAssetService.GetAssetTextContentsAsync(productCommitsAsset);
         ProductCommits productCommits = ProductCommits.FromJson(productCommitsJson);
 
-        Version dockerfileVersion = ResolveMajorMinorVersion(productCommits.Sdk.Version);
+        Version dockerfileVersion = VersionHelper.ResolveMajorMinorVersion(productCommits.Sdk.Version);
 
         // Run old update-dependencies command using the resolved versions
         var updateDependencies = new SpecificCommand();
@@ -82,6 +82,7 @@ public async Task<int> UpdateFrom(Build build, CreatePullRequestOptions pullRequ
             AzdoOrganization = pullRequestOptions.AzdoOrganization,
             AzdoProject = pullRequestOptions.AzdoProject,
             AzdoRepo = pullRequestOptions.AzdoRepo,
+            AzdoToken = pullRequestOptions.AzdoToken,
             VersionSourceName = pullRequestOptions.VersionSourceName,
             SourceBranch = pullRequestOptions.SourceBranch,
             TargetBranch = pullRequestOptions.TargetBranch,
@@ -90,17 +91,6 @@ public async Task<int> UpdateFrom(Build build, CreatePullRequestOptions pullRequ
         return await updateDependencies.ExecuteAsync(updateDependenciesOptions);
     }
 
-    private static Version ResolveMajorMinorVersion(string versionString)
-    {
-        string[] versionParts = versionString.Split('.');
-        if (versionParts.Length < 2)
-        {
-            throw new InvalidOperationException($"Could not parse major-minor version from '{versionString}'.");
-        }
-
-        return new Version(major: int.Parse(versionParts[0]), minor: int.Parse(versionParts[1]));
-    }
-
     private static bool IsVmrBuild(Build build)
     {
         string repo = build.GitHubRepository ?? build.AzureDevOpsRepository;
diff --git a/eng/update-dependencies/CreatePullRequestOptions.cs b/eng/update-dependencies/CreatePullRequestOptions.cs
index 37db9078c9..dc6374cf1b 100644
--- a/eng/update-dependencies/CreatePullRequestOptions.cs
+++ b/eng/update-dependencies/CreatePullRequestOptions.cs
@@ -6,7 +6,7 @@
 
 namespace Dotnet.Docker;
 
-public abstract class CreatePullRequestOptions
+public abstract record CreatePullRequestOptions
 {
     private string? _targetBranch = null;
 
@@ -16,6 +16,7 @@ public abstract class CreatePullRequestOptions
     public string AzdoOrganization { get; init; } = "";
     public string AzdoProject { get; init; } = "";
     public string AzdoRepo { get; init; } = "";
+    public string AzdoToken { get; init; } = "";
     public string VersionSourceName { get; init; } = "";
     public string SourceBranch { get; init; } = "nightly";
     public string TargetBranch
diff --git a/eng/update-dependencies/FromBuildOptions.cs b/eng/update-dependencies/FromBuildOptions.cs
index f8fe9139e4..f5ae9736f1 100644
--- a/eng/update-dependencies/FromBuildOptions.cs
+++ b/eng/update-dependencies/FromBuildOptions.cs
@@ -6,7 +6,7 @@
 
 namespace Dotnet.Docker;
 
-internal class FromBuildOptions : CreatePullRequestOptions, IOptions
+internal record FromBuildOptions : CreatePullRequestOptions, IOptions
 {
     public required int Id { get; init; }
 
diff --git a/eng/update-dependencies/FromChannelOptions.cs b/eng/update-dependencies/FromChannelOptions.cs
index 973ef64568..4b9c674815 100644
--- a/eng/update-dependencies/FromChannelOptions.cs
+++ b/eng/update-dependencies/FromChannelOptions.cs
@@ -6,7 +6,7 @@
 
 namespace Dotnet.Docker;
 
-internal class FromChannelOptions : CreatePullRequestOptions, IOptions
+internal record FromChannelOptions : CreatePullRequestOptions, IOptions
 {
     public required int Channel { get; init; }
     public required string Repo { get; init; }
diff --git a/eng/update-dependencies/FromStagingPipelineCommand.cs b/eng/update-dependencies/FromStagingPipelineCommand.cs
index 122341f268..93b52adc23 100644
--- a/eng/update-dependencies/FromStagingPipelineCommand.cs
+++ b/eng/update-dependencies/FromStagingPipelineCommand.cs
@@ -1,23 +1,119 @@
 // Licensed to the .NET Foundation under one or more agreements.
 // The .NET Foundation licenses this file to you under the MIT license.
 
+using System;
+using System.Collections.Generic;
 using System.Threading.Tasks;
 using Microsoft.Extensions.Logging;
+using Dotnet.Docker.Model.Release;
+using System.Linq;
+using System.Text.RegularExpressions;
 
 namespace Dotnet.Docker;
 
-internal class FromStagingPipelineCommand(
-    ILogger<FromStagingPipelineCommand> logger)
+internal partial class FromStagingPipelineCommand(ILogger<FromStagingPipelineCommand> logger)
     : BaseCommand<FromStagingPipelineOptions>
 {
     private readonly ILogger<FromStagingPipelineCommand> _logger = logger;
 
     public override async Task<int> ExecuteAsync(FromStagingPipelineOptions options)
     {
+        if (options.Internal)
+        {
+            throw new NotImplementedException("Updating Dockerfiles for internal builds is not implemented yet.");
+        }
+
+        ArgumentException.ThrowIfNullOrWhiteSpace(options.AzdoOrganization);
+        ArgumentException.ThrowIfNullOrWhiteSpace(options.AzdoProject);
+
         _logger.LogInformation(
-            "Processing staging pipeline run with ID {options.StagingPipelineRunId}",
+            "Updating dependencies based on staging pipeline run ID {options.StagingPipelineRunId}",
             options.StagingPipelineRunId);
 
-        return 0; // Return success for now
+        // Each pipeline run has a corresponding blob container named stage-${options.StagingPipelineRunId}.
+        // Release metadata is stored in metadata/ReleaseManifest.json.
+        // Release assets are stored individually under in assets/shipping/assets/[Sdk|Runtime|aspnetcore|...].
+
+        // Get release manifest from staging storage account
+        var storageAccount = new StorageAccount(options.StagingStorageAccount);
+        var releaseManifestJson = await storageAccount.DownloadTextAsync(
+            containerName: $"stage-{options.StagingPipelineRunId}",
+            blobPath: "metadata/ReleaseManifest.json");
+
+        var releaseManifest = ReleaseManifest.FromJson(releaseManifestJson);
+        var allAssets = releaseManifest.AllAssets.ToList();
+
+        // Look through all the assets and get the version of the highest SDK feature band
+        var sdkAssets = allAssets
+            .Where(asset => SdkRegex.IsMatch(asset.Name))
+            .ToList();
+        var sdkVersions = sdkAssets.Select(asset => asset.Version);
+        string highestSdkVersion = VersionHelper.GetHighestSdkVersion(sdkVersions);
+        string dockerfileVersion = VersionHelper.ResolveMajorMinorVersion(highestSdkVersion).ToString();
+
+        string runtimeVersion = allAssets
+            .Where(asset => RuntimeRegex.IsMatch(asset.Name))
+            .Select(asset => asset.Version)
+            .First();
+
+        string aspnetVersion = allAssets
+            .Where(asset => AspNetCoreRegex.IsMatch(asset.Name))
+            .Select(asset => asset.Version)
+            .First();
+
+        _logger.LogInformation(
+            """
+            Resolved .NET versions:
+            .NET: {dockerfileVersion}
+            - SDK: {highestSdkVersion}
+            - Runtime: {runtimeVersion}
+            - ASP.NET Core: {aspnetVersion}
+            """,
+            dockerfileVersion, highestSdkVersion, runtimeVersion, aspnetVersion);
+
+        // Run old update-dependencies command using the resolved versions
+        var updateDependencies = new SpecificCommand();
+        var updateDependenciesOptions = new SpecificCommandOptions()
+        {
+            DockerfileVersion = dockerfileVersion.ToString(),
+            ProductVersions = new Dictionary<string, string?>()
+            {
+                // "dotnet" version is required. It sets the "dotnet|*|product-version"
+                // variable which is used for runtime-deps, runtime, and aspnet tags.
+                { "dotnet", runtimeVersion },
+                { "runtime",  runtimeVersion },
+                { "aspnet", aspnetVersion },
+                { "aspnet-composite", aspnetVersion },
+                { "sdk", highestSdkVersion },
+            },
+
+            // Pass through all properties of CreatePullRequestOptions
+            User = options.User,
+            Email = options.Email,
+            Password = options.Password,
+            AzdoOrganization = options.AzdoOrganization,
+            AzdoProject = options.AzdoProject,
+            AzdoRepo = options.AzdoRepo,
+            AzdoToken = options.AzdoToken,
+            VersionSourceName = options.VersionSourceName,
+            SourceBranch = options.SourceBranch,
+            TargetBranch = options.TargetBranch,
+        };
+
+        return await updateDependencies.ExecuteAsync(updateDependenciesOptions);
     }
+
+    // Examples:
+    // - "Sdk/8.0.117-servicing.25269.14/dotnet-sdk-8.0.117-linux-x64.tar.gz"
+    // - "Sdk/8.0.310-servicing.25113.14/dotnet-sdk-8.0.310-linux-musl-arm64.tar.gz"
+    [GeneratedRegex(@"Sdk/.*/dotnet-sdk-.*-linux-x64.tar.gz$")]
+    private static partial Regex SdkRegex { get; }
+
+    // "aspnetcore/Runtime/8.0.14-servicing.25112.21/aspnetcore-runtime-8.0.14-linux-x64.tar.gz",
+    [GeneratedRegex(@"aspnetcore/Runtime/.*/aspnetcore-runtime-.*-linux-x64.tar.gz")]
+    private static partial Regex AspNetCoreRegex { get; }
+
+    // "Runtime/8.0.14-servicing.25111.18/dotnet-runtime-8.0.14-linux-x64.tar.gz"
+    [GeneratedRegex(@"Runtime/.*/dotnet-runtime-.*-linux-x64.tar.gz")]
+    private static partial Regex RuntimeRegex { get; }
 }
diff --git a/eng/update-dependencies/FromStagingPipelineOptions.cs b/eng/update-dependencies/FromStagingPipelineOptions.cs
index d9bc7c3f73..1a0153dd44 100644
--- a/eng/update-dependencies/FromStagingPipelineOptions.cs
+++ b/eng/update-dependencies/FromStagingPipelineOptions.cs
@@ -6,22 +6,50 @@
 
 namespace Dotnet.Docker;
 
-internal class FromStagingPipelineOptions : CreatePullRequestOptions, IOptions
+internal record FromStagingPipelineOptions : CreatePullRequestOptions, IOptions
 {
-    public required string StagingPipelineRunId { get; init; }
+    /// <summary>
+    /// The staging pipeline run ID to use as a source for the update.
+    /// </summary>
+    public required int StagingPipelineRunId { get; init; }
+
+    /// <summary>
+    /// Whether or not to use the internal versions of the staged build.
+    /// </summary>
+    public bool Internal { get; init; } = false;
+
+    /// <summary>
+    /// This Azure Storage Account will be used as a source for the update.
+    /// This should be one of two storage accounts: dotnetstagetest or dotnetstage.
+    /// </summary>
+    public required string StagingStorageAccount { get; init; }
 
     public static new List<Argument> Arguments { get; } =
     [
-        new Argument<string>("stagingPipelineRunId")
+        new Argument<int>("staging-pipeline-run-id")
         {
             Arity = ArgumentArity.ExactlyOne,
             Description = "The staging pipeline run ID to use as a source for the update"
         },
+        new Argument<string>("staging-storage-account")
+        {
+            Arity = ArgumentArity.ExactlyOne,
+            Description = "The Azure Storage Account to use as a source for the update."
+                + " This should be one of two storage accounts: dotnetstagetest or dotnetstage."
+                + " For example: https://dotnetstagetest.blob.core.windows.net/"
+        },
         ..CreatePullRequestOptions.Arguments,
     ];
 
     public static new List<Option> Options { get; } =
     [
+        new Option<bool>("--internal")
+        {
+            Description = "Whether or not to use the internal versions of the staged build. When not using an internal"
+                + " build, Dockerfiles will be updated as if the staged build has already been released. When using an"
+                + " internal build, Dockerfiles will be updated with internal download links and will only be buildable"
+                + " by using an internal Azure DevOps access token."
+        },
         ..CreatePullRequestOptions.Options,
     ];
 }
diff --git a/eng/update-dependencies/Model/Release/ReleaseManifest.cs b/eng/update-dependencies/Model/Release/ReleaseManifest.cs
new file mode 100644
index 0000000000..a217e42963
--- /dev/null
+++ b/eng/update-dependencies/Model/Release/ReleaseManifest.cs
@@ -0,0 +1,59 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Collections;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text.Json;
+
+namespace Dotnet.Docker.Model.Release;
+
+public record ReleaseManifest
+{
+    private static readonly JsonSerializerOptions s_jsonOptions = new()
+    {
+        WriteIndented = true,
+        PropertyNamingPolicy = JsonNamingPolicy.CamelCase,
+    };
+
+    public required Build[] Builds { get; init; }
+    public required Asset[] ExtraAssets { get; init; }
+
+    public IEnumerable<Asset> AllAssets =>
+        Builds
+            .SelectMany(build => build.Assets)
+            .Concat(ExtraAssets);
+
+    public override string ToString() =>
+        JsonSerializer.Serialize(this, s_jsonOptions);
+
+    public static ReleaseManifest FromJson(string json) =>
+        JsonSerializer.Deserialize<ReleaseManifest>(json, s_jsonOptions)
+            ?? throw new InvalidOperationException($"Failed to deserialize {nameof(ReleaseManifest)}: " + json);
+}
+
+public record Build
+{
+    public required Uri Repo { get; init; }
+    public required string Commit { get; init; }
+    public required string Branch { get; init; }
+    public required DateTimeOffset Produced { get; init; }
+    public required string BuildNumber { get; init; }
+    public required long BarBuildId { get; init; }
+    public required Channel[] Channels { get; init; }
+    public required Asset[] Assets { get; init; }
+}
+
+public record Asset
+{
+    public required string Name { get; init; }
+    public string? Origin { get; init; } = null;
+    public bool? DotnetReleaseShipping { get; init; } = false;
+    public required string Version { get; init; }
+    public required bool NonShipping { get; init; }
+    public required Uri Source { get; init; }
+    public required long BarAssetId { get; init; }
+}
+
+public record Channel(long Id, string Name);
diff --git a/eng/update-dependencies/Program.cs b/eng/update-dependencies/Program.cs
index 13bee3277e..c149058fc9 100644
--- a/eng/update-dependencies/Program.cs
+++ b/eng/update-dependencies/Program.cs
@@ -11,6 +11,7 @@
 using Microsoft.DotNet.DarcLib;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Hosting;
+using Microsoft.Extensions.Logging;
 
 var rootCommand = new RootCommand()
 {
@@ -44,19 +45,29 @@
 
             return Host.CreateDefaultBuilder();
         },
-    configureHost: host => host.ConfigureServices(services =>
-        {
-            services.AddSingleton<IBuildUpdaterService, BuildUpdaterService>();
-            services.AddSingleton<IBasicBarClient>(_ =>
-                new BarApiClient(null, null, disableInteractiveAuth: true));
-            services.AddSingleton<IBuildAssetService, BuildAssetService>();
-            services.AddSingleton<HttpClient>();
+    configureHost: host => host
+        .ConfigureLogging(logging =>
+            {
+                logging.ClearProviders();
+                logging.AddSimpleConsole(options =>
+                {
+                    options.IncludeScopes = true;
+                    options.SingleLine = true;
+                });
+            })
+        .ConfigureServices(services =>
+            {
+                services.AddSingleton<IBuildUpdaterService, BuildUpdaterService>();
+                services.AddSingleton<IBasicBarClient>(_ =>
+                    new BarApiClient(null, null, disableInteractiveAuth: true));
+                services.AddSingleton<IBuildAssetService, BuildAssetService>();
+                services.AddSingleton<HttpClient>();
 
-            FromBuildCommand.Register<FromBuildCommand>(services);
-            FromChannelCommand.Register<FromChannelCommand>(services);
-            FromStagingPipelineCommand.Register<FromStagingPipelineCommand>(services);
-            SpecificCommand.Register<SpecificCommand>(services);
-        })
+                FromBuildCommand.Register<FromBuildCommand>(services);
+                FromChannelCommand.Register<FromChannelCommand>(services);
+                FromStagingPipelineCommand.Register<FromStagingPipelineCommand>(services);
+                SpecificCommand.Register<SpecificCommand>(services);
+            })
     );
 
 return await config.InvokeAsync(args);
diff --git a/eng/update-dependencies/ReleaseConfig.cs b/eng/update-dependencies/ReleaseConfig.cs
new file mode 100644
index 0000000000..c36b061c7d
--- /dev/null
+++ b/eng/update-dependencies/ReleaseConfig.cs
@@ -0,0 +1,65 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Collections.Generic;
+using System.Text.Json;
+using System.Text.Json.Serialization;
+
+namespace Dotnet.Docker;
+
+/// <summary>
+/// This represents the configuration for a single run of the .NET release and staging pipelines. It contains
+/// information about the .NET versions to be released as well as other information about the release.
+/// </summary>
+/// <remarks>
+/// This record is a subset of the model used by the .NET staging and release pipelines.
+/// This MUST stay in sync with https://dev.azure.com/dnceng/internal/_git/dotnet-release?path=%2Fsrc%2FMicrosoft.DotNet.Release%2FMicrosoft.DotNet.ReleaseLib%2FModels%2FMetadataConfig.cs
+/// </remarks>
+internal record ReleaseConfig
+{
+    public required string Channel { get; init; }
+
+    public required string MajorVersion { get; init; }
+
+    public required string Release { get; init; }
+
+    public required string Runtime { get; init; }
+
+    public required string Asp { get; init; }
+
+    public required List<string> Sdks { get; init; }
+
+    [JsonPropertyName("Runtime_Build")]
+    public required string RuntimeBuild { get; init; }
+
+    [JsonPropertyName("Asp_Build")]
+    public required string AspBuild { get; init; }
+
+    [JsonPropertyName("Sdk_Builds")]
+    public required List<string> SdkBuilds { get; init; }
+
+    [JsonPropertyName("Release_Date")]
+    public required string ReleaseDate { get; init; }
+
+    public required bool Security { get; init; }
+
+    [JsonPropertyName("Support_Phase")]
+    public required string SupportPhase { get; init; }
+
+    public required bool Internal { get; init; }
+
+    public required bool SdkOnly { get; init; }
+
+    private static readonly JsonSerializerOptions s_jsonOptions = new()
+    {
+        WriteIndented = true
+    };
+
+    public override string ToString() =>
+        JsonSerializer.Serialize(this, s_jsonOptions);
+
+    public static ReleaseConfig FromJson(string json) =>
+        JsonSerializer.Deserialize<ReleaseConfig>(json)
+            ?? throw new InvalidOperationException("Failed to deserialize release config: " + json);
+};
diff --git a/eng/update-dependencies/SpecificCommandOptions.cs b/eng/update-dependencies/SpecificCommandOptions.cs
index eadfa3ecde..515973884c 100644
--- a/eng/update-dependencies/SpecificCommandOptions.cs
+++ b/eng/update-dependencies/SpecificCommandOptions.cs
@@ -7,7 +7,7 @@
 
 namespace Dotnet.Docker
 {
-    public class SpecificCommandOptions : CreatePullRequestOptions, IOptions
+    public record SpecificCommandOptions : CreatePullRequestOptions, IOptions
     {
         public string GitHubProject { get; } = "dotnet-docker";
         public string GitHubUpstreamOwner { get; } = "dotnet";
diff --git a/eng/update-dependencies/StorageAccount.cs b/eng/update-dependencies/StorageAccount.cs
new file mode 100644
index 0000000000..0033d96ccf
--- /dev/null
+++ b/eng/update-dependencies/StorageAccount.cs
@@ -0,0 +1,48 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Threading;
+using System.Threading.Tasks;
+using Azure.Identity;
+using Azure.Storage.Blobs;
+
+namespace Dotnet.Docker;
+
+/// <summary>
+/// Provides generic blob storage operations for Azure Storage Accounts.
+/// </summary>
+internal class StorageAccount
+{
+    private readonly BlobServiceClient _blobServiceClient;
+
+    /// <summary>
+    /// Creates a new instance of <see cref="StorageAccount"/>.
+    /// </summary>
+    /// <param name="url">The url of the storage account, for example <c>https://foo.blob.core.windows.net/</c></param>
+    public StorageAccount(string url)
+    {
+        var credential = new DefaultAzureCredential();
+        var storageAccountUri = new Uri(url);
+        _blobServiceClient = new BlobServiceClient(storageAccountUri, credential);
+    }
+
+    /// <summary>
+    /// Downloads a blob as text from the specified container.
+    /// </summary>
+    /// <param name="containerName">The name of the blob container</param>
+    /// <param name="blobPath">The path to the blob within the container</param>
+    /// <param name="cancellationToken">Cancellation token</param>
+    /// <returns>The blob content as a string</returns>
+    public async Task<string> DownloadTextAsync(
+        string containerName,
+        string blobPath,
+        CancellationToken cancellationToken = default)
+    {
+        var containerClient = _blobServiceClient.GetBlobContainerClient(containerName);
+        var blobClient = containerClient.GetBlobClient(blobPath);
+
+        var response = await blobClient.DownloadContentAsync(cancellationToken);
+        return response.Value.Content.ToString();
+    }
+}
diff --git a/eng/update-dependencies/VersionHelper.cs b/eng/update-dependencies/VersionHelper.cs
new file mode 100644
index 0000000000..fac87e7b35
--- /dev/null
+++ b/eng/update-dependencies/VersionHelper.cs
@@ -0,0 +1,39 @@
+// Licensed to the .NET Foundation under one or more agreements.
+// The .NET Foundation licenses this file to you under the MIT license.
+
+using System;
+using System.Collections.Generic;
+using System.Linq;
+
+namespace Dotnet.Docker;
+
+internal static class VersionHelper
+{
+    public static Version ResolveMajorMinorVersion(string versionString)
+    {
+        string[] versionParts = versionString.Split('.');
+        if (versionParts.Length < 2)
+        {
+            throw new InvalidOperationException($"Could not parse major-minor version from '{versionString}'.");
+        }
+
+        return new Version(major: int.Parse(versionParts[0]), minor: int.Parse(versionParts[1]));
+    }
+
+    /// <summary>
+    /// Given a list of .NET SDK versions, return the highest version. For example, given the
+    /// following versions:
+    /// <code>
+    /// 8.0.409-servicing.25218.4
+    /// 8.0.312-servicing.25218.5
+    /// 8.0.116-servicing.25218.9
+    /// </code>
+    /// The version <c>8.0.409-servicing.25218.4</c> will be returned.
+    /// </summary>
+    /// <param name="sdkVersions">List of versions</param>
+    /// <returns>The highest version</returns>
+    public static string GetHighestSdkVersion(IEnumerable<string> sdkVersions) =>
+        sdkVersions
+            .OrderByDescending(version => new Version(version.Split('-')[0]))
+            .First();
+}
diff --git a/eng/update-dependencies/update-dependencies.csproj b/eng/update-dependencies/update-dependencies.csproj
index 80d9c14531..cb1a87414e 100644
--- a/eng/update-dependencies/update-dependencies.csproj
+++ b/eng/update-dependencies/update-dependencies.csproj
@@ -8,6 +8,8 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Azure.Identity" Version="1.14.0" />
+    <PackageReference Include="Azure.Storage.Blobs" Version="12.24.0" />
     <PackageReference Include="LibGit2Sharp" Version="0.30.0" />
     <PackageReference Include="Microsoft.DotNet.DarcLib" Version="1.1.0-beta.25210.2" />
     <PackageReference Include="Microsoft.DotNet.VersionTools" Version="9.0.0-beta.24151.5" />

From 451d3f125453b868cd2a2a2fceb54b718860460b Mon Sep 17 00:00:00 2001
From: Logan Bussell <loganbussell@microsoft.com>
Date: Thu, 5 Jun 2025 13:43:00 -0700
Subject: [PATCH 3/7] Remove unused property

---
 eng/update-dependencies/CreatePullRequestOptions.cs   | 1 -
 eng/update-dependencies/FromStagingPipelineCommand.cs | 1 -
 2 files changed, 2 deletions(-)

diff --git a/eng/update-dependencies/CreatePullRequestOptions.cs b/eng/update-dependencies/CreatePullRequestOptions.cs
index dc6374cf1b..cb5057568d 100644
--- a/eng/update-dependencies/CreatePullRequestOptions.cs
+++ b/eng/update-dependencies/CreatePullRequestOptions.cs
@@ -16,7 +16,6 @@ public abstract record CreatePullRequestOptions
     public string AzdoOrganization { get; init; } = "";
     public string AzdoProject { get; init; } = "";
     public string AzdoRepo { get; init; } = "";
-    public string AzdoToken { get; init; } = "";
     public string VersionSourceName { get; init; } = "";
     public string SourceBranch { get; init; } = "nightly";
     public string TargetBranch
diff --git a/eng/update-dependencies/FromStagingPipelineCommand.cs b/eng/update-dependencies/FromStagingPipelineCommand.cs
index 93b52adc23..6e1e139b27 100644
--- a/eng/update-dependencies/FromStagingPipelineCommand.cs
+++ b/eng/update-dependencies/FromStagingPipelineCommand.cs
@@ -94,7 +94,6 @@ public override async Task<int> ExecuteAsync(FromStagingPipelineOptions options)
             AzdoOrganization = options.AzdoOrganization,
             AzdoProject = options.AzdoProject,
             AzdoRepo = options.AzdoRepo,
-            AzdoToken = options.AzdoToken,
             VersionSourceName = options.VersionSourceName,
             SourceBranch = options.SourceBranch,
             TargetBranch = options.TargetBranch,

From 6e2b3f2bc0c6ea0e2b6ce96434457b4a1cd2ae00 Mon Sep 17 00:00:00 2001
From: Logan Bussell <loganbussell@microsoft.com>
Date: Mon, 9 Jun 2025 10:28:54 -0700
Subject: [PATCH 4/7] Rename ReleaseManifest -> BuildManifest

---
 eng/update-dependencies/FromStagingPipelineCommand.cs     | 4 ++--
 .../Release/{ReleaseManifest.cs => BuildManifest.cs}      | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)
 rename eng/update-dependencies/Model/Release/{ReleaseManifest.cs => BuildManifest.cs} (89%)

diff --git a/eng/update-dependencies/FromStagingPipelineCommand.cs b/eng/update-dependencies/FromStagingPipelineCommand.cs
index 6e1e139b27..9502382a6a 100644
--- a/eng/update-dependencies/FromStagingPipelineCommand.cs
+++ b/eng/update-dependencies/FromStagingPipelineCommand.cs
@@ -40,8 +40,8 @@ public override async Task<int> ExecuteAsync(FromStagingPipelineOptions options)
             containerName: $"stage-{options.StagingPipelineRunId}",
             blobPath: "metadata/ReleaseManifest.json");
 
-        var releaseManifest = ReleaseManifest.FromJson(releaseManifestJson);
-        var allAssets = releaseManifest.AllAssets.ToList();
+        var buildManifest = BuildManifest.FromJson(releaseManifestJson);
+        var allAssets = buildManifest.AllAssets.ToList();
 
         // Look through all the assets and get the version of the highest SDK feature band
         var sdkAssets = allAssets
diff --git a/eng/update-dependencies/Model/Release/ReleaseManifest.cs b/eng/update-dependencies/Model/Release/BuildManifest.cs
similarity index 89%
rename from eng/update-dependencies/Model/Release/ReleaseManifest.cs
rename to eng/update-dependencies/Model/Release/BuildManifest.cs
index a217e42963..b6cbe643af 100644
--- a/eng/update-dependencies/Model/Release/ReleaseManifest.cs
+++ b/eng/update-dependencies/Model/Release/BuildManifest.cs
@@ -9,7 +9,7 @@
 
 namespace Dotnet.Docker.Model.Release;
 
-public record ReleaseManifest
+public record BuildManifest
 {
     private static readonly JsonSerializerOptions s_jsonOptions = new()
     {
@@ -28,9 +28,9 @@ public record ReleaseManifest
     public override string ToString() =>
         JsonSerializer.Serialize(this, s_jsonOptions);
 
-    public static ReleaseManifest FromJson(string json) =>
-        JsonSerializer.Deserialize<ReleaseManifest>(json, s_jsonOptions)
-            ?? throw new InvalidOperationException($"Failed to deserialize {nameof(ReleaseManifest)}: " + json);
+    public static BuildManifest FromJson(string json) =>
+        JsonSerializer.Deserialize<BuildManifest>(json, s_jsonOptions)
+            ?? throw new InvalidOperationException($"Failed to deserialize {nameof(BuildManifest)}: " + json);
 }
 
 public record Build

From d979d3ca3859cc1eb990bb6861c13478e0ff0295 Mon Sep 17 00:00:00 2001
From: Logan Bussell <loganbussell@microsoft.com>
Date: Mon, 9 Jun 2025 10:31:01 -0700
Subject: [PATCH 5/7] Remove unused import

---
 eng/update-dependencies/Model/Release/BuildManifest.cs | 1 -
 1 file changed, 1 deletion(-)

diff --git a/eng/update-dependencies/Model/Release/BuildManifest.cs b/eng/update-dependencies/Model/Release/BuildManifest.cs
index b6cbe643af..259d5fda43 100644
--- a/eng/update-dependencies/Model/Release/BuildManifest.cs
+++ b/eng/update-dependencies/Model/Release/BuildManifest.cs
@@ -2,7 +2,6 @@
 // The .NET Foundation licenses this file to you under the MIT license.
 
 using System;
-using System.Collections;
 using System.Collections.Generic;
 using System.Linq;
 using System.Text.Json;

From bedaa5f85ced1d2e7d8fec802f9d89c404b5084a Mon Sep 17 00:00:00 2001
From: Logan Bussell <loganbussell@microsoft.com>
Date: Mon, 9 Jun 2025 10:32:32 -0700
Subject: [PATCH 6/7] Remove unused ToString method

---
 eng/update-dependencies/Model/Release/BuildManifest.cs | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/eng/update-dependencies/Model/Release/BuildManifest.cs b/eng/update-dependencies/Model/Release/BuildManifest.cs
index 259d5fda43..2eeb604601 100644
--- a/eng/update-dependencies/Model/Release/BuildManifest.cs
+++ b/eng/update-dependencies/Model/Release/BuildManifest.cs
@@ -24,9 +24,6 @@ public record BuildManifest
             .SelectMany(build => build.Assets)
             .Concat(ExtraAssets);
 
-    public override string ToString() =>
-        JsonSerializer.Serialize(this, s_jsonOptions);
-
     public static BuildManifest FromJson(string json) =>
         JsonSerializer.Deserialize<BuildManifest>(json, s_jsonOptions)
             ?? throw new InvalidOperationException($"Failed to deserialize {nameof(BuildManifest)}: " + json);

From 515c523c453c48822f659fea22366e56efdce6d4 Mon Sep 17 00:00:00 2001
From: Logan Bussell <loganbussell@microsoft.com>
Date: Mon, 9 Jun 2025 10:33:00 -0700
Subject: [PATCH 7/7] Add comments for BuildManifest classes

---
 .../Model/Release/BuildManifest.cs            | 23 +++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/eng/update-dependencies/Model/Release/BuildManifest.cs b/eng/update-dependencies/Model/Release/BuildManifest.cs
index 2eeb604601..f04847fa91 100644
--- a/eng/update-dependencies/Model/Release/BuildManifest.cs
+++ b/eng/update-dependencies/Model/Release/BuildManifest.cs
@@ -8,6 +8,15 @@
 
 namespace Dotnet.Docker.Model.Release;
 
+// The models in this file are a subset of the BuildManifest models used by the .NET release infrastructure.
+// They should stay in sync.
+// https://dev.azure.com/dnceng/internal/_git/dotnet-release?path=/src/Microsoft.DotNet.Release/Microsoft.DotNet.ReleaseLib/Models/BuildManifest.cs
+
+/// <summary>
+/// Represents a single release of .NET. This can contain multiple channels but typically spans only one major version
+/// of .NET. For example, a .NET 8.0 BuildManifest would contain all .NET 8.0.1XX/2XX/3XX SDKs, but no versions of .NET
+/// 9.0.
+/// </summary>
 public record BuildManifest
 {
     private static readonly JsonSerializerOptions s_jsonOptions = new()
@@ -29,6 +38,10 @@ public static BuildManifest FromJson(string json) =>
             ?? throw new InvalidOperationException($"Failed to deserialize {nameof(BuildManifest)}: " + json);
 }
 
+/// <summary>
+/// Represents a single, unique build on the .NET build asset registry (BAR). This is a unique build of a single commit
+/// of a single repository.
+/// </summary>
 public record Build
 {
     public required Uri Repo { get; init; }
@@ -41,6 +54,10 @@ public record Build
     public required Asset[] Assets { get; init; }
 }
 
+/// <summary>
+/// Represents one single downloadable asset from a .NET build. Can be a binary, NuGet package, text file, or any other
+/// type of file that is produced by a .NET build.
+/// </summary>
 public record Asset
 {
     public required string Name { get; init; }
@@ -52,4 +69,10 @@ public record Asset
     public required long BarAssetId { get; init; }
 }
 
+/// <summary>
+/// Represents a .NET build asset registry (BAR) channel. Channels group together builds of different repositories that
+/// must ship together. An example channel might be something like ".NET SDK 10.0.100-preview.1".
+/// </summary>
+/// <param name="Id">The ID of the channel</param>
+/// <param name="Name">The name of the channel</param>
 public record Channel(long Id, string Name);