From 68649f267286d46d05f21cdca91ae5374ac1beaa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jakub=20Jare=C5=A1?= <me@jakubjares.com>
Date: Wed, 24 May 2023 08:54:34 +0200
Subject: [PATCH] Re-order sources to restore signed packages

---
 NuGet.config | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/NuGet.config b/NuGet.config
index 2964044c45..881cc70686 100644
--- a/NuGet.config
+++ b/NuGet.config
@@ -19,8 +19,10 @@
     <add key="dotnet-tools" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-tools/nuget/v3/index.json" />
     <add key="dotnet-public" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public/nuget/v3/index.json" />
     <add key="vs-impl" value="https://pkgs.dev.azure.com/azure-public/vside/_packaging/vs-impl/nuget/v3/index.json" />
-    <add key="vssdk-archived" value="https://pkgs.dev.azure.com/azure-public/vside/_packaging/vssdk-archived/nuget/v3/index.json" />
     <add key="vs-impl-archived" value="https://pkgs.dev.azure.com/azure-public/vside/_packaging/vs-impl-archived/nuget/v3/index.json" />
+    <!-- DON'T move this up. This feed contains some unsigned packages, at least Microsoft.VisualStudio.Telemetry, which we don't want to restore,
+    instead we want to restore it from vs-impl-archived, which has the package correctly signed. -->
+    <add key="vssdk-archived" value="https://pkgs.dev.azure.com/azure-public/vside/_packaging/vssdk-archived/nuget/v3/index.json" />
   </packageSources>
   <fallbackPackageFolders>
     <clear />