diff --git a/build/NuGet.config b/build/NuGet.config
new file mode 100644
index 0000000..a3a2e4f
--- /dev/null
+++ b/build/NuGet.config
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<configuration>
+    <config>
+        <add key="repositoryPath" value="NuGetPackages" />
+    </config>
+    <packageSources>
+        <!-- Limit to one feed per 1ES guidance  -->
+        <clear />
+        <add key="VS-CoreXtFeeds" value="https://pkgs.dev.azure.com/devdiv/_packaging/VS-CoreXtFeeds/nuget/v3/index.json" protocolVersion="3" />
+    </packageSources>
+</configuration>
diff --git a/build/azure-devdiv-pipeline.pre-release.yml b/build/azure-devdiv-pipeline.pre-release.yml
index a03b7ac..745181d 100644
--- a/build/azure-devdiv-pipeline.pre-release.yml
+++ b/build/azure-devdiv-pipeline.pre-release.yml
@@ -79,6 +79,11 @@ extends:
                   checkLatest: true
                 displayName: Select Node 22 LTS
 
+              - task: PipAuthenticate@1
+                displayName: 'Pip Authenticate'
+                inputs:
+                  artifactFeeds: 'DevDiv/debugpy'
+
               - task: UsePythonVersion@0
                 inputs:
                   versionSpec: '3.9' # note Install Python dependencies step below relies on Python 3.9
diff --git a/build/templates/sign.yml b/build/templates/sign.yml
index fc29224..6a139af 100644
--- a/build/templates/sign.yml
+++ b/build/templates/sign.yml
@@ -39,8 +39,10 @@ steps:
     displayName: Restore signing packages
     inputs:
       command: restore
+      feedsToUse: config
       restoreSolution: '$(Build.SourcesDirectory)/packages.config'
       restoreDirectory: '$(Build.SourcesDirectory)/packages'
+      nugetConfigPath: '$(Build.SourcesDirectory)/build/NuGet.config'
 
   - powershell: |
       New-Item -ItemType Directory -Path "$(Build.StagingDirectory)\drop" -Force | Out-Null; Copy-Item "$(Build.SourcesDirectory)\$(VsixName)" "$(Build.StagingDirectory)\drop\$(VsixName)" -Force; if (!(Test-Path "$(Build.StagingDirectory)\drop\$(VsixName)")) { Write-Error 'VSIX copy failed'; exit 1 }; Get-Item "$(Build.StagingDirectory)\drop\$(VsixName)" | Format-Table Name,Length,LastWriteTime -AutoSize
diff --git a/package.json b/package.json
index 454c131..3e4e603 100644
--- a/package.json
+++ b/package.json
@@ -55,8 +55,8 @@
     "scripts": {
         "compile": "webpack",
         "compile-tests": "tsc -p . --outDir out",
-        "format-check": "prettier --check 'src/**/*.ts' 'build/**/*.yml' '.github/**/*.yml'",
-        "fix-format": "prettier --write 'src/**/*.ts' 'build/**/*.yml' '.github/**/*.yml'",
+        "format-check": "prettier --check \"src/**/*.ts\" \"build/**/*.yml\" \".github/**/*.yml\"",
+        "fix-format": "prettier --write \"src/**/*.ts\" \"build/**/*.yml\" \".github/**/*.yml\"",
         "lint": "eslint src --ext ts",
         "package": "webpack --mode production --devtool hidden-source-map",
         "pretest": "npm run compile-tests && npm run compile && npm run lint",