A potentially dangerous Request.Path value was detected from the client (:).

A potentially dangerous Request.Path value was detected from the client (:).

A potentially dangerous Request.Path value was detected from the client (:).\\n```\\n\\nThis breaks **both** pipelines that emit the tag:\\n\\n- Source build (`azure-pipelines.yml`): https://dev.azure.com/dnceng/internal/_build/results?buildId=2978468\\n- Release-publish (`release-publish-nuget.yml`): https://dev.azure.com/dnceng/internal/_build/results?buildId=2978372\\n\\n## Fix\\n\\nSwitch the tag format from `release-version:13.3.4` to `release-version - 13.3.4`, mirroring the existing `BAR ID - ` tag style that AzDO already emits without issue:\\n\\n\\n\\nChanges:\\n\\n- `eng/pipelines/azure-pipelines.yml` — emit `release-version - $version` instead of `release-version:$version`.\\n- `eng/pipelines/release-publish-nuget.yml` — update the regex parser, error/warning messages, and surrounding comments to match the new format. The redundant cosmetic addbuildtag on the release run stays removed (no functional impact).\\n- `docs/release-process.md` — update the two references to the tag format.\\n\\n## Safety\\n\\n- Only the *display* format of the tag changes; the parser is updated in lockstep with the emitter.\\n- A source build done from `main` (or any release branch that picks up this change) will emit the new format, and the release-publish pipeline run from that same commit will read it correctly.\\n- For an in-flight release where the source build was made before this change, operators can pass `-ReleaseVersion ` explicitly — the documented override path is unchanged.\",\"state\":\"closed\",\"draft\":false,\"merged\":true,\"mergeable_state\":\"unknown\",\"html_url\":\"https://github.com/microsoft/aspire/pull/17236\",\"user\":{\"login\":\"joperezr\",\"id\":13854455,\"profile_url\":\"https://github.com/joperezr\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/13854455?v=4\"},\"merged_by\":\"joperezr\",\"head\":{\"ref\":\"joperezr/fix-release-pipeline-tag-colon\",\"sha\":\"[REDACTED]\",\"repo\":{\"full_name\":\"microsoft/aspire\",\"description\":\"Aspire is the tool for code-first, extensible, observable dev and deploy.\"}},\"base\":{\"ref\":\"main\",\"sha\":\"[REDACTED]\",\"repo\":{\"full_name\":\"microsoft/aspire\",\"description\":\"Aspire is the tool for code-first, extensible, observable dev and deploy.\"}},\"additions\":20,\"deletions\":18,\"changed_files\":3,\"commits\":2,\"comments\":1,\"created_at\":\"2026-05-19T03:04:01Z\",\"updated_at\":\"2026-05-19T05:09:12Z\",\"closed_at\":\"2026-05-19T05:08:52Z\",\"merged_at\":\"2026-05-19T05:08:52Z\",\"milestone\":\"13.4\"}","type":"text"}]}}}

A potentially dangerous Request.Path value was detected from the client (:).\\n```\\n\\nThis breaks **both** pipelines that emit the tag:\\n\\n- Source build (`azure-pipelines.yml`): https://dev.azure.com/dnceng/internal/_build/results?buildId=2978468\\n- Release-publish (`release-publish-nuget.yml`): https://dev.azure.com/dnceng/internal/_build/results?buildId=2978372\\n\\n## Fix\\n\\nSwitch the tag format from `release-version:13.3.4` to `release-version - 13.3.4`, mirroring the existing `BAR ID - ` tag style that AzDO already emits without issue:\\n\\n\\n\\nChanges:\\n\\n- `eng/pipelines/azure-pipelines.yml` — emit `release-version - $version` instead of `release-version:$version`.\\n- `eng/pipelines/release-publish-nuget.yml` — update the regex parser, error/warning messages, and surrounding comments to match the new format. The redundant cosmetic addbuildtag on the release run stays removed (no functional impact).\\n- `docs/release-process.md` — update the two references to the tag format.\\n\\n## Safety\\n\\n- Only the *display* format of the tag changes; the parser is updated in lockstep with the emitter.\\n- A source build done from `main` (or any release branch that picks up this change) will emit the new format, and the release-publish pipeline run from that same commit will read it correctly.\\n- For an in-flight release where the source build was made before this change, operators can pass `-ReleaseVersion ` explicitly — the documented override path is unchanged.\",\"state\":\"closed\",\"draft\":false,\"merged\":true,\"mergeable_state\":\"unknown\",\"html_url\":\"https://github.com/microsoft/aspire/pull/17236\",\"user\":{\"login\":\"joperezr\",\"id\":13854455,\"profile_url\":\"https://github.com/joperezr\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/13854455?v=4\"},\"merged_by\":\"joperezr\",\"head\":{\"ref\":\"joperezr/fix-release-pipeline-tag-colon\",\"sha\":\"[REDACTED]\",\"repo\":{\"full_name\":\"microsoft/aspire\",\"description\":\"Aspire is the tool for code-first, extensible, observable dev and deploy.\"}},\"base\":{\"ref\":\"main\",\"sha\":\"[REDACTED]\",\"repo\":{\"full_name\":\"microsoft/aspire\",\"description\":\"Aspire is the tool for code-first, extensible, observable dev and deploy.\"}},\"additions\":20,\"deletions\":18,\"changed_files\":3,\"commits\":2,\"comments\":1,\"created_at\":\"2026-05-19T03:04:01Z\",\"updated_at\":\"2026-05-19T05:09:12Z\",\"closed_at\":\"2026-05-19T05:08:52Z\",\"merged_at\":\"2026-05-19T05:08:52Z\",\"milestone\":\"13.4\"}","type":"text"}]}}}

A potentially dangerous Request.Path value was detected from the client (:).\\n```\\n\\nThis breaks **both** pipelines that emit the tag:\\n\\n- Source build (`azure-pipelines.yml`): https://dev.azure.com/dnceng/internal/_build/results?buildId=2978468\\n- Release-publish (`release-publish-nuget.yml`): https://dev.azure.com/dnceng/internal/_build/results?buildId=2978372\\n\\n## Fix\\n\\nSwitch the tag format from `release-version:13.3.4` to `release-version - 13.3.4`, mirroring the existing `BAR ID - ` tag style that AzDO already emits without issue:\\n\\n\\n\\nChanges:\\n\\n- `eng/pipelines/azure-pipelines.yml` — emit `release-version - $version` instead of `release-version:$version`.\\n- `eng/pipelines/release-publish-nuget.yml` — update the regex parser, error/warning messages, and surrounding comments to match the new format. The redundant cosmetic addbuildtag on the release run stays removed (no functional impact).\\n- `docs/release-process.md` — update the two references to the tag format.\\n\\n## Safety\\n\\n- Only the *display* format of the tag changes; the parser is updated in lockstep with the emitter.\\n- A source build done from `main` (or any release branch that picks up this change) will emit the new format, and the release-publish pipeline run from that same commit will read it correctly.\\n- For an in-flight release where the source build was made before this change, operators can pass `-ReleaseVersion ` explicitly — the documented override path is unchanged.\",\"state\":\"closed\",\"draft\":false,\"merged\":true,\"mergeable_state\":\"unknown\",\"html_url\":\"https://github.com/microsoft/aspire/pull/17236\",\"user\":{\"login\":\"joperezr\",\"id\":13854455,\"profile_url\":\"https://github.com/joperezr\",\"avatar_url\":\"https://avatars.githubusercontent.com/u/13854455?v=4\"},\"merged_by\":\"joperezr\",\"head\":{\"ref\":\"joperezr/fix-release-pipeline-tag-colon\",\"sha\":\"[REDACTED]\",\"repo\":{\"full_name\":\"microsoft/aspire\",\"description\":\"Aspire is the tool for code-first, extensible, observable dev and deploy.\"}},\"base\":{\"ref\":\"main\",\"sha\":\"[REDACTED]\",\"repo\":{\"full_name\":\"microsoft/aspire\",\"description\":\"Aspire is the tool for code-first, extensible, observable dev and deploy.\"}},\"additions\":20,\"deletions\":18,\"changed_files\":3,\"commits\":2,\"comments\":1,\"created_at\":\"2026-05-19T03:04:01Z\",\"updated_at\":\"2026-05-19T05:09:12Z\",\"closed_at\":\"2026-05-19T05:08:52Z\",\"merged_at\":\"2026-05-19T05:08:52Z\",\"milestone\":\"13.4\"}","type":"text"}]}}}

A potentially dangerous Request.Path value was detect...`

A potentially dangerous Request.Path value was detect...`

A potentially dangerous Request.Path value was detect...`

Input 'app-id' has been deprecated with message: Use 'client-id' instead.

Input 'app-id' has been deprecated with message: Use 'client-id' instead.

Token revocation failed: Bad credentials - https://docs.github.com/rest

Input 'app-id' has been deprecated with message: Use 'client-id' instead.