Fix network isolation issues in CI pipeline

[Vladimir Morozov (vmoroz)]

Summary

Fix the office/ISS test jobs under network isolation by keeping npm install off registry.npmjs.org and pointing it to the approved Azure DevOps feed instead.

What changed

• Added feed-aware npm config in .ado/publish.yml for the shared test job variables:
  • NPM_CONFIG_USERCONFIG=$(Build.SourcesDirectory)/.npmrc
  • NPM_CONFIG_CACHE=$(Agent.TempDirectory)/.npmCache
• Kept the test-project package closure deterministic by pinning the fixture dependency versions in the test projects.
• Updated global.json to the current .NET servicing SDK so CI stays on the supported baseline.

Why

The test suite shells out to npm install for the JS/TS fixture projects. Without the feed override, npm falls back to registry.npmjs.org, which is blocked by the office/ISS network-isolation policy. This caused the isolated test jobs to fail even though the build/package jobs were fine.

Validation

• CI is green with the office/ISS network-isolation rules in place.
• The test jobs no longer hit the public npm registry.
• The fix is limited to build infrastructure and test setup; there is no product/runtime change in the shipped library.

[Copilot]

Pull request overview

Routes fixture npm installs through the approved Azure DevOps feed for network-isolated CI.

Changes:

• Configures npm registry and cache paths for test jobs.
• Pins fixture dependencies for deterministic installation.
• Updates the .NET SDK to 10.0.303.

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.ado/publish.yml	Configures isolated test-job npm access.
global.json	Updates the servicing SDK.
test/TestCases/projects/ts-esm-module/package.json	Pins fixture dependencies.
test/TestCases/projects/ts-esm-dynamic/package.json	Pins fixture dependencies.
test/TestCases/projects/ts-cjs-module/package.json	Pins fixture dependencies.
test/TestCases/projects/ts-cjs-dynamic/package.json	Pins fixture dependencies.
test/TestCases/projects/js-esm-module/package.json	Pins fixture dependencies.
test/TestCases/projects/js-esm-dynamic/package.json	Pins fixture dependencies.
test/TestCases/projects/js-cjs-module/package.json	Pins fixture dependencies.
test/TestCases/projects/js-cjs-dynamic/package.json	Pins fixture dependencies.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.