…ing the git tag (#27650)

Co-authored-by: Justin Chung <124807742+jshigetomi@users.noreply.github.com>
Co-authored-by: Justin Chung <chungjustin@microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

…r Wix (#27665)

Co-authored-by: Aditya Patwardhan <adityap@microsoft.com>

…es (#27651)

Co-authored-by: Anam Navied <anam.naviyou@gmail.com>

Validate CAB path before expansion (#167)

----
#### AI description  (iteration 1)
#### PR Classification
Security fix to prevent path traversal vulnerabilities during CAB file extraction.

#### PR Summary
This PR adds path validation to prevent malicious CAB files from extracting content outside the intended help directory. A new `ValidateExtractionPath` method ensures CAB entries use only relative paths and remain within the target directory after resolution.

- `CabinetNativeApi.cs`: Added `ValidateExtractionPath` method to reject rooted paths, UNC paths, paths with colons (blocking Windows Alternate Data Streams), and paths that would resolve outside the intended help directory
- `CabinetNativeApi.cs`: Modified `FdiNotify` method to validate extraction paths before creating files in both `FdintCOPY_FILE` and `FdintCLOSE_FILE_INFO` cases, with comprehensive exception handling to reject invalid CAB entries
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->

Ensure PSResourceGet version available is 1.2.0

----
#### AI description  (iteration 1)
#### PR Classification
Bug fix to ensure the minimum required version (1.2.0) of Microsoft.PowerShell.PSResourceGet module is installed.

#### PR Summary
Updates the PSResourceGet module installation logic to enforce a minimum version requirement of 1.2.0, preventing issues with older incompatible versions.

- `tools/wix/wix.psm1`: Added version check to ensure PSResourceGet module is at least version 1.2.0, reinstalling if the version is older
- `tools/wix/wix.psm1`: Added `Select-Object -First 1` to handle multiple module versions and prevent ambiguity
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->

Install PSResourceGet from CFS feed

----
#### AI description  (iteration 1)
#### PR Classification
Configuration change to specify an explicit repository source for PowerShell module installation in build scenarios.

#### PR Summary
This pull request modifies the PSResourceGet module installation to explicitly use the 'powershell' repository, which is a registered CFS (Cloud File Share) feed for build scenarios.

- `tools/wix/wix.psm1`: Added `-Repository 'powershell'` parameter to `Install-Module` command with explanatory comment about the CFS feed for build scenarios.
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->

…ourceGet

Register the powershell feed as v2 for install PSResourceGet

----
#### AI description  (iteration 1)
#### PR Classification
Bug fix to properly register the PowerShell feed as v2 for installing PSResourceGet module in build scenarios.

#### PR Summary
Updates the PSResourceGet installation process to explicitly register and use the PowerShell CFS feed as a v2 NuGet source. Previously, the code relied on a pre-registered 'powershell' repository which may not have been properly configured.

- `tools/wix/wix.psm1`: Wraps PSResourceGet installation in a try-finally block that registers 'powershell-cfs' repository with explicit v2 NuGet source location, installs the module, and ensures cleanup by unregistering the repository afterward
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->

…tion in CI

Use the -sval parameter for light.exe to skip validation in CI

----
#### AI description  (iteration 1)
#### PR Classification
Build configuration change to disable validation during MSI package creation in CI environments.

#### PR Summary
This pull request modifies the WiX Light tool invocation to skip validation checks during MSI build processes by adding the `-sval` parameter, which disables all ICE validation. Additionally, minor whitespace formatting cleanup was performed.

- `/tools/packaging/packaging.psm1`: Added `-sval` parameter to `light.exe` invocation in `Start-MsiBuild` function to skip validation checks during MSI creation
- `/tools/packaging/packaging.psm1`: Cleaned up trailing whitespace in `Get-MacOSPackageIdentifierInfo` function
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->