[build] move to new yaml template for signing

SignList.xml

@@ -50,6 +50,8 @@
     <!-- GPS-FB-MLKit SignList.xml -->    
     <ThirdParty Include="disklrucache.jar" />
     <ThirdParty Include="annotations.jar" />
+    <!-- Xamarin.AndroidX.Compose.Runtime.Annotation(.Jvm) -->
+    <ThirdParty Include="runtime-annotation*.jar" />
   </ItemGroup>
 
   <ItemGroup>

azure-pipelines.yml

@@ -1,6 +1,6 @@
 trigger:
   - main
-  - refs/tags/*
+  - release/*
 
 pr: none
 
@@ -25,15 +25,18 @@ resources:
   repositories:
     - repository: 1esPipelines
       type: git
-      name: 1ESPipelineTemplates/1ESPipelineTemplates
-      ref: refs/tags/release
+      name: 1ESPipelineTemplates/MicroBuildTemplate
+
     - repository: yaml-templates
       type: git
       name: DevDiv/Xamarin.yaml-templates
       ref: refs/heads/main
 
 extends:
-  template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
+  ${{ if and(startsWith(variables['Build.SourceBranch'], 'refs/heads/release/'), not(eq(variables['Build.Reason'], 'PullRequest'))) }}:
+    template: azure-pipelines/MicroBuild.1ES.Official.yml@1esPipelines
+  ${{ else }}:
+    template: azure-pipelines/MicroBuild.1ES.Unofficial.yml@1esPipelines
   parameters:
     sdl:
       sourceRepositoriesToScan:

build/ci/stage-sign-artifacts.yml

@@ -4,14 +4,14 @@ stages:
 - stage: sign_artifacts
   displayName: Sign Artifacts
   dependsOn: build_windows
-  condition: and(succeeded(), startsWith(variables['Build.SourceBranch'], 'refs/tags/'))
+  condition: succeeded()
 
   jobs:
 
-  - template: sign-artifacts/jobs/v2.yml@yaml-templates
+  - template: sign-artifacts/jobs/v4.yml@yaml-templates
     parameters:
       timeoutInMinutes: 120
       artifactName: output-windows
       usePipelineArtifactTasks: true
-      use1ESTemplate: true
       checkoutType: self
+      signType: $(signType)

build/ci/variables.yml

@@ -40,3 +40,10 @@ variables:
   # dnceng-public variables
   NetCorePublicPoolName: NetCore-Public-XL
   WindowsPoolImageNetCorePublic: windows.vs2022.amd64.open
+
+  # Signing settings
+  TeamName: .NET MAUI
+  ${{ if and(startsWith(variables['Build.SourceBranch'], 'refs/heads/release/'), not(eq(variables['Build.Reason'], 'PullRequest'))) }}:
+    signType: Real
+  ${{ else }}:
+    signType: Test