At the end of the year, we won't be able to publish extensions using PATs any more.

Action required: Azure DevOps global PATs are retiring

Global PATs allow a single token to access all Azure DevOps organizations you belong to. To reduce risk from broadly scoped credentials and support regional data requirements, this token type is being retired.

You’re receiving this email because one or more global personal access token(s) associated with your account was used in 1 organization(s) in the last 30 days.

My request to support organization-scoped PATs has not been responded to (microsoft/vsmarketplace#2121).

However, the Publishing Extensions Docs has been updated to say:

Important

On December 1, 2026, global Personal Access Tokens (PATs) in Azure DevOps are retired. To keep publishing extensions, use secure automated publishing with Microsoft Entra ID instead of PATs. For more information, see Retirement of global Personal Access Tokens in Azure DevOps.

We should figure out the best way forward here.