build: onboard dependency installs to CFS

.github/workflows/ogf_workflow.yml

@@ -79,6 +79,9 @@ jobs:
     # V. IMPORTANT: Copy this strategy section to the dependent cleanup job as well,
     # if you are making changes. Make sure they are the same.
     steps:         
+      - name: Check out repository configuration
+        uses: actions/checkout@v4
+
       - name: Install node and npm
         uses: actions/setup-node@v2
         with:
@@ -91,6 +94,8 @@ jobs:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
 
       - name: Install Core Tools and K6
+        env:
+          NPM_CONFIG_USERCONFIG: ${{ github.workspace }}/.npmrc
         run: |
           npm i -g azure-functions-core-tools@3 --unsafe-perm true
 

.npmrc

@@ -0,0 +1,2 @@
+registry=https://pkgs.dev.azure.com/azfunc/public/_packaging/upstream-public/npm/registry/
+always-auth=false

eng/ci/emulator-tests.yml

@@ -49,6 +49,4 @@ extends:
       jobs:
       - template: /eng/templates/jobs/ci-emulator-tests.yml@self
         parameters:
-          PoolName: 1es-pool-azfunc
-          ArtifactFeed: 'internal/PythonWorker_Internal_PublicPackages'
-          NuGetServiceConnection: 'PythonWorker_Internal_PublicPackages'
+          PoolName: 1es-pool-azfunc

eng/ci/official-build.yml

@@ -63,16 +63,12 @@ extends:
           - template: /eng/templates/jobs/ci-emulator-tests.yml@self
             parameters:
               PoolName: 1es-pool-azfunc
-              ArtifactFeed: 'internal/PythonWorker_Internal_PublicPackages'
-              NuGetServiceConnection: 'PythonWorker_Internal_PublicPackages'
       - stage: RunWorkerUnitTests
         dependsOn: BuildPythonWorker
         jobs:
           - template: /eng/templates/jobs/ci-unit-tests.yml@self
             parameters:
               PoolName: 1es-pool-azfunc
-              ArtifactFeed: 'internal/PythonWorker_Internal_PublicPackages'
-              NuGetServiceConnection: 'PythonWorker_Internal_PublicPackages'
       - stage: RunWorkerDockerDedicatedTests
         dependsOn: BuildPythonWorker
         jobs:
@@ -99,8 +95,6 @@ extends:
               PROJECT_NAME: 'Python V2 Library'
               PROJECT_DIRECTORY: 'runtimes/v2'
               PoolName: 1es-pool-azfunc
-              ArtifactFeed: 'internal/PythonWorker_Internal_PublicPackages'
-              NuGetServiceConnection: 'PythonWorker_Internal_PublicPackages'
 
       # Python V1 Library Build and Test Stages
       - stage: BuildV1Library
@@ -118,6 +112,4 @@ extends:
             parameters:
               PROJECT_NAME: 'Python V1 Library'
               PROJECT_DIRECTORY: 'runtimes/v1'
-              PoolName: 1es-pool-azfunc
-              ArtifactFeed: 'internal/PythonWorker_Internal_PublicPackages'
-              NuGetServiceConnection: 'PythonWorker_Internal_PublicPackages'
+              PoolName: 1es-pool-azfunc

eng/ci/public-build.yml

@@ -79,24 +79,19 @@ extends:
       - template: /eng/templates/jobs/ci-dependency-check.yml@self
         parameters:
           PoolName: 1es-pool-azfunc-public
-          ArtifactFeed: 'public/PythonWorker_PublicPackages'
     - stage: RunWorkerUnitTests
       dependsOn: BuildPythonWorker
       jobs:
         - template: /eng/templates/jobs/ci-unit-tests.yml@self
           parameters:
             PROJECT_DIRECTORY: 'workers'
             PoolName: 1es-pool-azfunc-public
-            ArtifactFeed: 'public/PythonWorker_PublicPackages'
-            NuGetServiceConnection: 'PythonWorker_PublicPackages'
     - stage: RunWorkerEmulatorTests
       dependsOn: BuildPythonWorker
       jobs:
         - template: /eng/templates/jobs/ci-emulator-tests.yml@self
           parameters:
             PoolName: 1es-pool-azfunc-public
-            ArtifactFeed: 'public/PythonWorker_PublicPackages'
-            NuGetServiceConnection: 'PythonWorker_PublicPackages'
 
     # Python V2 Library Build and Test Stages
     - stage: BuildV2Library
@@ -115,8 +110,6 @@ extends:
             PROJECT_NAME: 'V2 Library'
             PROJECT_DIRECTORY: 'runtimes/v2'
             PoolName: 1es-pool-azfunc-public
-            ArtifactFeed: 'public/PythonWorker_PublicPackages'
-            NuGetServiceConnection: 'PythonWorker_PublicPackages'
 
     # Python V1 Library Build and Test Stages
     - stage: BuildV1Library
@@ -134,6 +127,4 @@ extends:
           parameters:
             PROJECT_NAME: 'V1 Library'
             PROJECT_DIRECTORY: 'runtimes/v1'
-            PoolName: 1es-pool-azfunc-public
-            ArtifactFeed: 'public/PythonWorker_PublicPackages'
-            NuGetServiceConnection: 'PythonWorker_PublicPackages'
+            PoolName: 1es-pool-azfunc-public

eng/pack/templates/macos_64_env_gen.yml

@@ -5,9 +5,10 @@ parameters:
 
 steps:
 - task: PipAuthenticate@1
-  displayName: 'Pip Authenticate'
+  displayName: 'Authenticate pip to CFS'
   inputs:
-    artifactFeeds: 'internal/PythonWorker_Internal_PublicPackages'
+    artifactFeeds: 'public/upstream-public'
+    onlyAddExtraIndex: false
 - task: UsePythonVersion@0
   inputs:
     versionSpec: ${{ parameters.pythonVersion }}

eng/pack/templates/nix_arm64_env_gen.yml

@@ -5,9 +5,10 @@ parameters:
 
 steps:
 - task: PipAuthenticate@1
-  displayName: 'Pip Authenticate'
+  displayName: 'Authenticate pip to CFS'
   inputs:
-    artifactFeeds: 'internal/PythonWorker_Internal_PublicPackages'
+    artifactFeeds: 'public/upstream-public'
+    onlyAddExtraIndex: false
 - task: UsePythonVersion@0
   inputs:
     versionSpec: ${{ parameters.pythonVersion }}

eng/pack/templates/nix_env_gen.yml

@@ -5,9 +5,10 @@ parameters:
 
 steps:
 - task: PipAuthenticate@1
-  displayName: 'Pip Authenticate'
+  displayName: 'Authenticate pip to CFS'
   inputs:
-    artifactFeeds: 'internal/PythonWorker_Internal_PublicPackages'
+    artifactFeeds: 'public/upstream-public'
+    onlyAddExtraIndex: false
 - task: UsePythonVersion@0
   inputs:
     versionSpec: ${{ parameters.pythonVersion }}

eng/pack/templates/win_env_gen.yml

@@ -5,9 +5,10 @@ parameters:
 
 steps:
 - task: PipAuthenticate@1
-  displayName: 'Pip Authenticate'
+  displayName: 'Authenticate pip to CFS'
   inputs:
-    artifactFeeds: 'internal/PythonWorker_Internal_PublicPackages'
+    artifactFeeds: 'public/upstream-public'
+    onlyAddExtraIndex: false
 - task: UsePythonVersion@0
   inputs:
     versionSpec: ${{ parameters.pythonVersion }}

eng/scripts/install-dependencies.sh

@@ -1,6 +1,8 @@
 #!/bin/bash
 set -e
 
+export UV_DEFAULT_INDEX="${UV_DEFAULT_INDEX:-$PIP_INDEX_URL}"
+
 # Install uv for faster dependency resolution / installation.
 python -m pip install --upgrade pip
 python -m pip install uv

eng/scripts/test-extensions.sh

@@ -1,6 +1,8 @@
 #!/bin/bash
 set -e
 
+export UV_DEFAULT_INDEX="${UV_DEFAULT_INDEX:-$PIP_INDEX_URL}"
+
 python -m pip install --upgrade pip
 python -m pip install uv
 

eng/scripts/test-sdk.sh

@@ -1,6 +1,8 @@
 #!/bin/bash
 set -e
 
+export UV_DEFAULT_INDEX="${UV_DEFAULT_INDEX:-$PIP_INDEX_URL}"
+
 python -m pip install --upgrade pip
 python -m pip install uv
 

eng/templates/jobs/build.yml

@@ -18,5 +18,4 @@ jobs:
         parameters:
           PYTHON_VERSION: ${{ parameters.PYTHON_VERSION }}
           PROJECT_NAME: ${{ parameters.PROJECT_NAME }}
-          PROJECT_DIRECTORY: ${{ parameters.PROJECT_DIRECTORY }}
-          ArtifactFeed: 'public/PythonWorker_PublicPackages'
+          PROJECT_DIRECTORY: ${{ parameters.PROJECT_DIRECTORY }}

eng/templates/jobs/ci-dependency-check.yml

@@ -1,6 +1,4 @@
 parameters:
-  ArtifactFeed: ''
-
 jobs:
   - job: "TestPython"
     displayName: "Run Dependency Checks"
@@ -26,9 +24,10 @@ jobs:
           PYTHON_VERSION: '3.14'
     steps:
       - task: PipAuthenticate@1
-        displayName: 'Pip Authenticate'
+        displayName: 'Authenticate pip to CFS'
         inputs:
-          artifactFeeds: ${{ parameters.ArtifactFeed }}
+          artifactFeeds: 'public/upstream-public'
+          onlyAddExtraIndex: false
       - task: UsePythonVersion@0
         inputs:
           versionSpec: $(PYTHON_VERSION)
@@ -54,6 +53,7 @@ jobs:
         displayName: 'Set necessary variables'
       - bash: |
             echo "Checking azure_functions_worker (Python < 3.13)..."
+            export UV_DEFAULT_INDEX="${UV_DEFAULT_INDEX:-$PIP_INDEX_URL}"
             cd workers
             python -m pip install --upgrade pip
             python -m pip install uv
@@ -67,6 +67,7 @@ jobs:
         condition: eq(variables['proxyWorker'], false)
       - bash: |
             echo "Checking proxy_worker (Python >= 3.13)..."
+            export UV_DEFAULT_INDEX="${UV_DEFAULT_INDEX:-$PIP_INDEX_URL}"
             cd workers
             python -m pip install --upgrade pip
             python -m pip install uv
@@ -79,6 +80,7 @@ jobs:
         condition: eq(variables['proxyWorker'], true)
       - bash: |
             echo "Checking V1 Library Worker (Python >= 3.13)..."
+            export UV_DEFAULT_INDEX="${UV_DEFAULT_INDEX:-$PIP_INDEX_URL}"
             cd runtimes/v1
             python -m pip install --upgrade pip
             python -m pip install uv
@@ -88,6 +90,7 @@ jobs:
         condition: eq(variables['proxyWorker'], true)
       - bash: |
             echo "Checking V2 Library Worker (Python >= 3.13)..."
+            export UV_DEFAULT_INDEX="${UV_DEFAULT_INDEX:-$PIP_INDEX_URL}"
             cd runtimes/v2
             python -m pip install --upgrade pip
             python -m pip install uv

eng/templates/jobs/ci-emulator-tests.yml

@@ -1,7 +1,5 @@
 parameters:
   PROJECT_DIRECTORY: 'workers'
-  ArtifactFeed: ''
-  NuGetServiceConnection: ''
 
 jobs:
   - job: "TestPython"
@@ -28,9 +26,10 @@ jobs:
           PYTHON_VERSION: '3.14'
     steps:
       - task: PipAuthenticate@1
-        displayName: 'Pip Authenticate'
+        displayName: 'Authenticate pip to CFS'
         inputs:
-          artifactFeeds: ${{ parameters.ArtifactFeed }}
+          artifactFeeds: 'public/upstream-public'
+          onlyAddExtraIndex: false
       - bash: |
           echo "Disk space before cleanup:"
           df -h
@@ -77,19 +76,7 @@ jobs:
         inputs:
           version: 10.0.x
       - task: NuGetAuthenticate@1
-        displayName: 'NuGet Authenticate'
-      - bash: |
-          # Remove the feed that doesn't match the current service connection
-          if [[ "${{ parameters.NuGetServiceConnection }}" == "PythonWorker_PublicPackages" ]]; then
-            # Remove internal feed for public builds
-            sed -i '/_Internal_PublicPackages/d' nuget.config
-          else
-            # Remove public feed for internal builds
-            sed -i '/PythonWorker_PublicPackages[^_]/d' nuget.config
-          fi
-          echo "Updated nuget.config:"
-          cat nuget.config
-        displayName: 'Configure NuGet feed for current organization'
+        displayName: 'Authenticate NuGet to CFS'
       - bash: |
           chmod +x eng/scripts/install-dependencies.sh
           eng/scripts/install-dependencies.sh $(PYTHON_VERSION) ${{ parameters.PROJECT_DIRECTORY }}

eng/templates/jobs/ci-library-unit-tests.yml

@@ -1,8 +1,6 @@
 parameters:
   PROJECT_NAME: ''
   PROJECT_DIRECTORY: ''
-  ArtifactFeed: ''
-  NuGetServiceConnection: ''
 
 jobs:
   - job: "TestPython"
@@ -20,9 +18,10 @@ jobs:
 
     steps:
       - task: PipAuthenticate@1
-        displayName: 'Pip Authenticate'
+        displayName: 'Authenticate pip to CFS'
         inputs:
-          artifactFeeds: ${{ parameters.ArtifactFeed }}
+          artifactFeeds: 'public/upstream-public'
+          onlyAddExtraIndex: false
       - task: UsePythonVersion@0
         inputs:
           versionSpec: $(PYTHON_VERSION)
@@ -31,19 +30,7 @@ jobs:
         inputs:
           version: 10.0.x
       - task: NuGetAuthenticate@1
-        displayName: 'NuGet Authenticate'
-      - bash: |
-          # Remove the feed that doesn't match the current service connection
-          if [[ "${{ parameters.NuGetServiceConnection }}" == "PythonWorker_PublicPackages" ]]; then
-            # Remove internal feed for public builds
-            sed -i '/_Internal_PublicPackages/d' nuget.config
-          else
-            # Remove public feed for internal builds  
-            sed -i '/PythonWorker_PublicPackages[^_]/d' nuget.config
-          fi
-          echo "Updated nuget.config:"
-          cat nuget.config
-        displayName: 'Configure NuGet feed for current organization'
+        displayName: 'Authenticate NuGet to CFS'
       - bash: |
           chmod +x eng/scripts/install-dependencies.sh          
           eng/scripts/install-dependencies.sh $(PYTHON_VERSION) ${{ parameters.PROJECT_DIRECTORY }}

eng/templates/jobs/ci-unit-tests.yml

@@ -1,7 +1,5 @@
 parameters:
   PROJECT_DIRECTORY: 'workers'
-  ArtifactFeed: ''
-  NuGetServiceConnection: ''
 
 jobs:
   - job: "TestPython"
@@ -28,9 +26,10 @@ jobs:
           PYTHON_VERSION: '3.14'
     steps:
       - task: PipAuthenticate@1
-        displayName: 'Pip Authenticate'
+        displayName: 'Authenticate pip to CFS'
         inputs:
-          artifactFeeds: ${{ parameters.ArtifactFeed }}
+          artifactFeeds: 'public/upstream-public'
+          onlyAddExtraIndex: false
       - bash: |
           echo "Disk space before cleanup:"
           df -h
@@ -80,19 +79,7 @@ jobs:
         inputs:
           version: 10.0.x
       - task: NuGetAuthenticate@1
-        displayName: 'NuGet Authenticate'
-      - bash: |
-          # Remove the feed that doesn't match the current service connection
-          if [[ "${{ parameters.NuGetServiceConnection }}" == "PythonWorker_PublicPackages" ]]; then
-            # Remove internal feed for public builds
-            sed -i '/_Internal_PublicPackages/d' nuget.config
-          else
-            # Remove public feed for internal builds
-            sed -i '/PythonWorker_PublicPackages[^_]/d' nuget.config
-          fi
-          echo "Updated nuget.config:"
-          cat nuget.config
-        displayName: 'Configure NuGet feed for current organization'
+        displayName: 'Authenticate NuGet to CFS'
       - bash: |
           chmod +x eng/scripts/install-dependencies.sh
           eng/scripts/install-dependencies.sh $(PYTHON_VERSION) ${{ parameters.PROJECT_DIRECTORY }}

eng/templates/official/jobs/build-library.yml

@@ -21,9 +21,10 @@ jobs:
 
     steps:
       - task: PipAuthenticate@1
-        displayName: 'Pip Authenticate'
+        displayName: 'Authenticate pip to CFS'
         inputs:
-          artifactFeeds: 'public/PythonWorker_PublicPackages'
+          artifactFeeds: 'public/upstream-public'
+          onlyAddExtraIndex: false
       - task: UsePythonVersion@0
         inputs:
           versionSpec: "3.13"