Route stable release dependencies through CFS

[Miller Wang (wangmingliang-ms)]

Summary

• enable 1ES Network Isolation for the stable release pipeline
• route Maven Central and ordinary Gradle dependency restores through the vscjava Central Feed Service
• isolate the Maven-to-Gradle Utils handoff so only locally built reactor modules can resolve from the scoped local repository
• keep CFS credentials scoped to the build step and preserve purpose-specific JetBrains/vendor repositories

Validation

• pipeline-equivalent local build with JDK 21: Maven Utils reactor BUILD SUCCESS
• IntelliJ clean buildPlugin: BUILD SUCCESSFUL (410 tasks)
• authenticated CFS traffic observed: 4,332 Maven events and 1,701 Gradle events
• no direct Maven Central, Gradle Plugin Portal, or Sonatype package downloads observed
• generated azure-toolkit-for-intellij-3.97.7-2026.1.zip (197,357,054 bytes)

Remaining validation

• run the disabled stable-release definition after review to confirm server-side YAML expansion and zero CFSClean / CFSClean2 / CFSClean3 findings

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
There may be pipelines that require an authorized user to comment /azp run to run.