marketplace publish: "PATs in Azure DevOps are retired"
Author: justinmkCreated Sep 11, 2026Updated Sep 18, 2026
Labelscategory: meta
https://code.visualstudio.com/api/working-with-extensions/publishing-extension mentions a different problem:
On December 1, 2026, global Personal Access Tokens (PATs) in Azure DevOps are retired. To keep publishing extensions, use secure automated publishing with Microsoft Entra ID instead of PATs.
This probably affects us because VS Marketplace authentication is based on Azure DevOps?
Next steps
Follow steps at https://github.com/microsoft/vscode-vsce#trusted-publishing
vsce publish --oidc
Configure a trusted publishing policy for the repository and workflow on the Visual Studio Marketplace, then grant the workflow permission to request an OIDC token:
Source: vscode-neovim/vscode-neovim