…hing the git tag (#27648)

Co-authored-by: Justin Chung <124807742+jshigetomi@users.noreply.github.com>
Co-authored-by: Justin Chung <chungjustin@microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

…hes (#27649)

Co-authored-by: Anam Navied <anam.naviyou@gmail.com>

…or Wix (#27664)

Co-authored-by: Aditya Patwardhan <adityap@microsoft.com>

Validate CAB path before expansion (#167)

----
#### AI description  (iteration 1)
#### PR Classification
Security fix to prevent path traversal vulnerabilities during CAB file extraction.

#### PR Summary
This PR adds path validation to prevent malicious CAB files from extracting content outside the intended help directory. A new `ValidateExtractionPath` method ensures CAB entries use only relative paths and remain within the target directory after resolution.

- `CabinetNativeApi.cs`: Added `ValidateExtractionPath` method to reject rooted paths, UNC paths, paths with colons (blocking Windows Alternate Data Streams), and paths that would resolve outside the intended help directory
- `CabinetNativeApi.cs`: Modified `FdiNotify` method to validate extraction paths before creating files in both `FdintCOPY_FILE` and `FdintCLOSE_FILE_INFO` cases, with comprehensive exception handling to reject invalid CAB entries
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->


Cherry picked from !40609

----
#### AI description  (iteration 1)
#### PR Classification
Security vulnerability fix to prevent directory traversal attacks during CAB file extraction.

#### PR Summary
This PR adds path validation to prevent malicious CAB files from extracting content outside the intended help directory, addressing a potential directory traversal security vulnerability.

- **`CabinetNativeApi.cs`**: Added `ValidateExtractionPath()` method to validate CAB entry paths by rejecting rooted paths, UNC paths, paths with colons (Windows Alternate Data Streams), and paths that resolve outside the intended help directory using canonical path comparison
- **`CabinetNativeApi.cs`**: Modified `FdiNotify()` method to validate extraction paths in both `FdintCOPY_FILE` and `FdintCLOSE_FILE_INFO` notification cases, with comprehensive exception handling to reject invalid CAB entries
- **`CabinetNativeApi.cs`**: Enhanced error handling with specific exception types (InvalidOperationException, ArgumentException, IOException, SecurityException, etc.) to gracefully handle path validation failures

Ensure PSResourceGet version available is 1.2.0

----
#### AI description  (iteration 1)
#### PR Classification
Bug fix to ensure the required minimum version (1.2.0) of PSResourceGet module is installed.

#### PR Summary
This change enforces a minimum version requirement for the Microsoft.PowerShell.PSResourceGet module and updates the installation process to use a specific PowerShell package repository.

- `tools/wix/wix.psm1`: Added version check to ensure PSResourceGet is at least version 1.2.0
- `tools/wix/wix.psm1`: Modified installation logic to temporarily register the 'powershell-cfs' repository from Azure DevOps for installing PSResourceGet
- `tools/wix/wix.psm1`: Added cleanup logic to unregister the temporary repository after installation
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->

…tion in CI

Use the -sval parameter for light.exe to skip validation in CI

----
#### AI description  (iteration 1)
#### PR Classification
Build configuration change to disable validation during MSI package creation in CI environments.

#### PR Summary
This pull request modifies the WiX Light tool invocation to skip validation checks during MSI build processes by adding the `-sval` parameter, which disables all ICE validation. Additionally, minor whitespace formatting cleanup was performed.

- `/tools/packaging/packaging.psm1`: Added `-sval` parameter to `light.exe` invocation in `Start-MsiBuild` function to skip validation checks during MSI creation
- `/tools/packaging/packaging.psm1`: Cleaned up trailing whitespace in `Get-MacOSPackageIdentifierInfo` function
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->


Cherry picked from !40638

----
#### AI description  (iteration 1)
#### PR Classification
Build process optimization to skip validation during MSI build in CI by adding a command-line parameter.

#### PR Summary
This PR modifies the MSI build process to skip validation by adding the `-sval` parameter to the WiX light.exe command, which will improve CI build performance.

- `/tools/packaging/packaging.psm1`: Added `-sval` parameter to `light.exe` invocation in `Start-MsiBuild` function to skip validation during MSI creation
- `/tools/packaging/packaging.psm1`: Minor whitespace cleanup in `Get-MacOSPackageIdentifierInfo` function