Neil a906f98baf fix(release): survive PSGallery outages in the Windows signing preflight ...

The Windows release job hard-failed in run 30125672117: every SignPath
module install attempt got 403 Forbidden from the gallery's OData API,
which is behind Azure Front Door and was also serving 502/504 at the
time. That step was the only hard-fail in an otherwise fail-open signing
chain, so a gallery incident blocked the whole release.

The gallery CDN that serves the nupkg is a separate origin and stayed
healthy throughout, so fall back to a pinned version fetched from it
after the normal install path is exhausted. The fallback verifies a
SHA-256 pin, since that route skips the gallery's own package
validation.

Extracted to a composite action so the release job and the signing
rehearsal cannot drift apart.

2026-07-30 18:16:38 -07:00

..

install-node-dependencies

Fix Node 26 test gate and happy-dom storage (#11434)

2026-07-29 17:11:16 -07:00

install-signpath-module

fix(release): survive PSGallery outages in the Windows signing preflight

2026-07-30 18:16:38 -07:00