build: pin MicroBuild signing plugin

Use the last known-good Windows signing package in nightly and RC pipelines until the 1.1.1374 client certificate regression is resolved.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: ac225268-483d-4498-a08f-fe79a87d4d2e

Author: wenytang-ms

.azure-pipelines/vscode-java-test-nightly.yml

@@ -32,11 +32,7 @@ extends:
             templateContext:
               mb:
                 signing:
-                  enabled: true
-                  signType: real
-                  signWithProd: true
-                  zipSources: false
-                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
+                  enabled: false
               outputs:
                 - output: pipelineArtifact
                   artifactName: extension
@@ -45,6 +41,19 @@ extends:
             steps:
               - checkout: self
                 fetchTags: true
+              # Pin the last known-good Windows plugin while the 1.1.1374 client certificate regression is unresolved.
+              - task: NuGetAuthenticate@1
+                displayName: Authenticate MicroBuild feed
+              - task: MicroBuildSigningPlugin@4
+                displayName: Install Signing Plugin 1.1.1330
+                inputs:
+                  signType: real
+                  version: '1.1.1330'
+                  zipSources: false
+                  ConnectedPMEServiceName: '40012d40-9ded-4f75-8476-d60758200346'
+                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
+                env:
+                  MicroBuildOutputFolderOverride: '$(Agent.TempDirectory)'
               - task: UseNode@1
                 displayName: Use Node 20.x
                 inputs:

.azure-pipelines/vscode-java-test-rc.yml

@@ -27,11 +27,7 @@ extends:
             templateContext:
               mb:
                 signing:
-                  enabled: true
-                  signType: real
-                  signWithProd: true
-                  zipSources: false
-                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
+                  enabled: false
               outputs:
                 - output: pipelineArtifact
                   artifactName: extension
@@ -40,6 +36,19 @@ extends:
             steps:
               - checkout: self
                 fetchTags: true
+              # Pin the last known-good Windows plugin while the 1.1.1374 client certificate regression is unresolved.
+              - task: NuGetAuthenticate@1
+                displayName: Authenticate MicroBuild feed
+              - task: MicroBuildSigningPlugin@4
+                displayName: Install Signing Plugin 1.1.1330
+                inputs:
+                  signType: real
+                  version: '1.1.1330'
+                  zipSources: false
+                  ConnectedPMEServiceName: '40012d40-9ded-4f75-8476-d60758200346'
+                  feedSource: 'https://mseng.pkgs.visualstudio.com/DefaultCollection/_packaging/MicroBuildToolset/nuget/v3/index.json'
+                env:
+                  MicroBuildOutputFolderOverride: '$(Agent.TempDirectory)'
               - task: UseNode@1
                 displayName: Use Node 20.x
                 inputs: