Fix download issues in pipelines (#15901)

* Fix download issues in pipelines

* Fix pipeline YAML

Author: vmoroz

.ado/jobs/desktop-single.yml

@@ -27,15 +27,29 @@ steps:
     displayName: Install IIS
 
   - pwsh: |
-      Invoke-WebRequest `
+      function Invoke-WebRequestWithRetry($Uri, $OutFile, $MaxRetries = 3) {
+        for ($i = 1; $i -le $MaxRetries; $i++) {
+          try {
+            Write-Host "Downloading $OutFile (attempt $i of $MaxRetries)"
+            Invoke-WebRequest -Uri $Uri -OutFile $OutFile
+            return
+          } catch {
+            Write-Host "Attempt $i failed: $_"
+            if ($i -eq $MaxRetries) { throw }
+            Start-Sleep -Seconds (5 * $i)
+          }
+        }
+      }
+
+      Invoke-WebRequestWithRetry `
         -Uri 'https://download.visualstudio.microsoft.com/download/pr/20598243-c38f-4538-b2aa-af33bc232f80/ea9b2ca232f59a6fdc84b7a31da88464/dotnet-hosting-8.0.3-win.exe' `
         -OutFile dotnet-hosting-8.0.3-win.exe
 
       Write-Host 'Installing .NET hosting bundle'
       Start-Process -Wait -FilePath .\dotnet-hosting-8.0.3-win.exe -ArgumentList '/INSTALL', '/QUIET', '/NORESTART'
       Write-Host 'Installed .NET hosting bundle'
 
-      Invoke-WebRequest `
+      Invoke-WebRequestWithRetry `
         -Uri 'https://download.visualstudio.microsoft.com/download/pr/f2ec926e-0d98-4a8b-8c70-722ccc2ca0e5/b59941b0c60f16421679baafdb7e9338/dotnet-sdk-7.0.407-win-x64.exe' `
         -OutFile dotnet-sdk-7.0.407-win-x64.exe
 

.ado/jobs/linting.yml

@@ -16,7 +16,29 @@ jobs:
     variables: [template: ../variables/windows.yml]
     pool: ${{ parameters.AgentPool.Medium }}
     steps:
-      - template: ../templates/checkout-shallow.yml
+      - ${{ if eq(parameters.buildEnvironment, 'Continuous') }}:
+        - template: ../templates/checkout-shallow.yml
+          parameters:
+            persistCredentials: true
+
+        # Extract the GitHub OAuth token that ADO uses to clone the repo.
+        # Any authenticated token raises the GitHub API rate limit from 60 to
+        # 5,000 req/hr, which prevents validate-overrides from being throttled.
+        - pwsh: |
+            $headerLine = git config --get-regexp "http.*\.extraheader" 2>$null | Select-Object -First 1
+            if (-not $headerLine) {
+              Write-Host "##vso[task.logissue type=warning]No HTTP extraheader found — validate-overrides will run without GitHub auth"
+              exit 0
+            }
+            $encoded = ($headerLine.Split(' ')[-1]).Trim()
+            $decoded = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($encoded))
+            $token = $decoded.Split(':')[-1]
+            Write-Host "Extracted GitHub OAuth token (length=$($token.Length))"
+            Write-Host "##vso[task.setvariable variable=GitHubOAuthToken;issecret=true]$token"
+          displayName: Extract GitHub OAuth token
+
+      - ${{ else }}:
+        - template: ../templates/checkout-shallow.yml
 
       - template: ../templates/prepare-js-env.yml
 
@@ -28,6 +50,9 @@ jobs:
 
       - script: yarn validate-overrides
         displayName: yarn validate-overrides
+        ${{ if eq(parameters.buildEnvironment, 'Continuous') }}:
+          env:
+            PLATFORM_OVERRIDE_GITHUB_TOKEN: $(GitHubOAuthToken)
 
       - script: npx unbroken -q --local-only --allow-local-line-sections
         displayName: check local links in .md files

.ado/templates/checkout-shallow.yml

@@ -1,8 +1,14 @@
 # Checkout the state of the repo at the time of the commit being tested,
 # without full history.
+parameters:
+  - name: persistCredentials
+    type: boolean
+    default: false
+
 steps:
   - checkout: self
     fetchDepth: 1
     clean: false
     submodules: false
     lfs: false
+    persistCredentials: ${{ parameters.persistCredentials }}