Can't package Azure DevOps Extension, cause a dependency includes a file with spaces in the name - azure-pipelines-build-task

Question

After updating QueryAzureDevOpsExtensionVersion#3 to version 4 and the same for PackageAzureDevOpsExtension, I started getting errors in PackageAzureDevOpsExtension.
All errors looked something like that:
error: Error: Part Name 'Myproject/node_modules/azure-pipelines-tasks-azure-arm-rest-v2/openssl/OpenSSL License.txt' is invalid. Please check the following: 0 [
"error: Error: Part Name 'Myproject/node_modules/azure-pipelines-tasks-azure-arm-rest-v2/openssl/OpenSSL License.txt' is invalid. Please check the following: ",
'error: 1. No whitespace or any of these characters: #^[]<>?',
'error: 2. Cannot end with a period.',
'error: 3. No percent-encoded / or \\ characters. Additionally, % must be followed by two hex characters.',
''
That part of the pipeline now looks like this:
- task: QueryAzureDevOpsExtensionVersion#4
name: QueryVersion
displayName: 'Query Extension Version'
inputs:
connectTo: 'VsTeam'
connectedServiceName: 'Clipper-Marketplace-Admin'
publisherId: '$(publisherId)'
extensionId: '$(extensionId)'
versionAction: ${{ parameters.updateKind }}
- task: PackageAzureDevOpsExtension#4
inputs:
rootFolder: '$(Build.SourcesDirectory)/AzurePipelinesTasks'
patternManifest: 'my-project-vss-extension.json'
publisherId: '$(publisherId)'
extensionId: '$(extensionId)'
extensionName: '$(extensionName)'
extensionVersion: '$(QueryVersion.Extension.Version)'
updateTasksVersion: true
updateTasksVersionType: ${{ parameters.updateKind }}
extensionVisibility: 'private' # Change to public if you're publishing to the marketplace
extensionPricing: 'free'
What can cause these errors in the pipeline? The reason why I'm updating the pipeline is because there's some issue with the latest typescript version which causes an issue with compiling the code. After updating packages, I started failing in the package stage because of errors like the above.

Answer 1

It looks like azure-pipelines-tasks-azure-arm-rest-v2 was updated to v3 in the past week. I just compared #^2 with #^3 and it indeed now includes a file with spaces in the name:
\node_modules\azure-pipelines-tasks-azure-arm-rest-v2\openssl
Mode LastWriteTime Length Name
---- ------------- ------ ----
-a--- 05/12/2022 15:27 2318 HashInfo.txt
-a--- 05/12/2022 15:27 2267136 libeay32.dll
-a--- 05/12/2022 15:27 6404 OpenSSL License.txt
-a--- 05/12/2022 15:27 548352 openssl.exe
-a--- 05/12/2022 15:27 2722 ReadMe.txt
-a--- 05/12/2022 15:27 385536 ssleay32.dll
I've personally solved that in 2 ways in the past.
Delete the offending files
Rename the offending file, replacing with _.
You have a 3rd option:
Downgrade to azure-pipelines-tasks-azure-arm-rest-v2#^2
I don't know what the limitation is in this case, I've just worked around it so far. Recommend commenting on the bug in the tfx repo.
Until then, add a pwsh script prior to running package or publish to remove the spaces:
dir -recurse | where {-Not $_.PsIscontainer -AND $_.name -match " "} | foreach {
$New=$_.name.Replace(" ","_")
Rename-Item -path $_.Fullname -newname $New -passthru
}
You can also comment on the bug with the repo that hosts azure-pipelines-tasks-azure-arm-rest-v2.