Add resilient build.ps1 blog post

authors.choices.jsonc

@@ -1,17 +1,28 @@
 [
-  {
-    "_comment": "This file is auto-generated from blog/authors.yml via a psake task"
-  },
-  {
-    "url": "https://gilbertsanchez.com",
-    "title": "Core Contributor",
-    "image_url": "https://github.com/heyitsgilbert.png",
-    "name": "Gilbert Sanchez",
-    "socials": {
-      "linkedin": "gilbertsanchez",
-      "github": "HeyItsGilbert",
-      "x": "HeyItsGilbertS"
+    {
+        "_comment":  "This file is auto-generated from blog/authors.yml via a psake task"
     },
-    "handle": "heyitsgilbert"
-  }
+    {
+        "url":  "https://gilbertsanchez.com",
+        "handle":  "heyitsgilbert",
+        "image_url":  "https://github.com/heyitsgilbert.png",
+        "name":  "Gilbert Sanchez",
+        "socials":  {
+                        "linkedin":  "gilbertsanchez",
+                        "github":  "HeyItsGilbert",
+                        "x":  "HeyItsGilbertS"
+                    },
+        "title":  "Core Contributor"
+    },
+    {
+        "url":  "https://tablackburn.github.io",
+        "handle":  "tablackburn",
+        "image_url":  "https://github.com/tablackburn.png",
+        "name":  "Trent Blackburn",
+        "socials":  {
+                        "linkedin":  "trentblackburn",
+                        "github":  "tablackburn"
+                    },
+        "title":  "Contributor"
+    }
 ]

blog/2026-04-08-resilient-build-ps1.md

@@ -0,0 +1,178 @@
+---
+title: "Building a Resilient build.ps1 for psake Projects"
+description: "Extend your psake build.ps1 with clear error handling, dynamic tab completion, CI-safe module imports, and more."
+date: 2026-04-08T18:00:00.000Z
+slug: resilient-build-ps1
+authors:
+  - tablackburn
+tags:
+  - psake
+  - powershell
+  - build-automation
+  - ci-cd
+  - best-practices
+keywords:
+  - psake
+  - build.ps1
+  - PowerShell
+  - build automation
+  - CI/CD
+image: /img/social-card.png
+draft: false
+fmContentType: blog
+title_meta: "Building a Resilient build.ps1"
+---
+
+In psake projects, a `build.ps1` is the conventional entry point script that wires everything together. It installs dependencies, configures the environment, and hands off to psake to run your actual build tasks. Think of it as the bootstrapper that gets a fresh machine — or a CI agent — from zero to a working build in a single command: `.\build.ps1`.
+
+psake itself doesn't ship a `build.ps1` — it's a best practice that most projects adopt. A typical starter script covers the basics: bootstrap installation, help output, build environment detection, and proper CI exit codes. But once you're running concurrent CI jobs, managing internal package feeds, or onboarding new contributors, a few gaps start to show.
+
+<!-- truncate -->
+
+The script below addresses those gaps with clear error handling, dynamic tab completion, CI-safe module imports, internal repository support, and PowerShellGet version pinning. I cover each pattern in detail in the [full post on my blog](https://tablackburn.github.io/p/resilient-build-ps1/) — but here's the complete script. Copy it into your project and adjust the repository name and URL to match your environment:
+
+```powershell
+[Diagnostics.CodeAnalysis.SuppressMessageAttribute(
+    'PSReviewUnusedParameter',
+    'Command',
+    Justification = 'false positive'
+)]
+[Diagnostics.CodeAnalysis.SuppressMessageAttribute(
+    'PSReviewUnusedParameter',
+    'Parameter',
+    Justification = 'false positive'
+)]
+[Diagnostics.CodeAnalysis.SuppressMessageAttribute(
+    'PSReviewUnusedParameter',
+    'CommandAst',
+    Justification = 'false positive'
+)]
+[Diagnostics.CodeAnalysis.SuppressMessageAttribute(
+    'PSReviewUnusedParameter',
+    'FakeBoundParams',
+    Justification = 'false positive'
+)]
+[CmdletBinding(DefaultParameterSetName = 'task')]
+param(
+    [parameter(ParameterSetName = 'task', Position = 0)]
+    [ArgumentCompleter( {
+            param($Command, $Parameter, $WordToComplete, $CommandAst, $FakeBoundParams)
+            try {
+                Get-PSakeScriptTasks -BuildFile './psakeFile.ps1' -ErrorAction 'Stop' |
+                Where-Object { $_.Name -like "$WordToComplete*" } |
+                Select-Object -ExpandProperty 'Name'
+            }
+            catch {
+                @()
+            }
+        })]
+    [string[]]$Task = 'default',
+    [switch]$Bootstrap,
+    [parameter(ParameterSetName = 'Help')]
+    [switch]$Help
+)
+
+$ErrorActionPreference = 'Stop'
+$psakeFile = './psakeFile.ps1'
+
+if ($Bootstrap) {
+    # Patch TLS protocols for older Windows versions
+    [System.Net.ServicePointManager]::SecurityProtocol = (
+        [System.Net.ServicePointManager]::SecurityProtocol -bor
+        [System.Net.SecurityProtocolType]::Tls12 -bor
+        [System.Net.SecurityProtocolType]::Tls13
+    )
+
+    Get-PackageProvider -Name 'Nuget' -ForceBootstrap | Out-Null
+    Set-PSRepository -Name 'PSGallery' -InstallationPolicy 'Trusted'
+
+    # Pin PowerShellGet to v2
+    $powerShellGetModule = Get-Module -Name 'PowerShellGet' -ListAvailable |
+        Where-Object { $_.Version.Major -eq 2 } |
+        Sort-Object -Property 'Version' -Descending |
+        Select-Object -First 1
+
+    $powerShellGetModuleParameters = @{
+        Name           = 'PowerShellGet'
+        MinimumVersion = '2.0.0'
+        MaximumVersion = '2.99.99'
+        Force          = $true
+    }
+
+    if (-not $powerShellGetModule) {
+        Install-Module @powerShellGetModuleParameters -Scope 'CurrentUser' -AllowClobber
+    }
+    Import-Module @powerShellGetModuleParameters
+
+    # Register internal repository (idempotent)
+    $repositoryName = 'internal-nuget-repo'
+    if (-not (Get-PSRepository -Name $repositoryName -ErrorAction 'SilentlyContinue')) {
+        $repositoryUrl = "https://nuget.example.com/api/v2/$repositoryName"
+        $registerPSRepositorySplat = @{
+            Name                      = $repositoryName
+            SourceLocation            = $repositoryUrl
+            PublishLocation           = $repositoryUrl
+            ScriptSourceLocation      = $repositoryUrl
+            InstallationPolicy        = 'Trusted'
+            PackageManagementProvider = 'NuGet'
+        }
+        Register-PSRepository @registerPSRepositorySplat
+    }
+
+    # Install PSDepend if missing
+    if (-not (Get-Module -Name 'PSDepend' -ListAvailable)) {
+        Install-Module -Name 'PSDepend' -Repository 'PSGallery' -Scope 'CurrentUser' -Force
+    }
+
+    # Try-import-first pattern
+    $psDependParameters = @{
+        Path          = $PSScriptRoot
+        Recurse       = $False
+        WarningAction = 'SilentlyContinue'
+        Import        = $True
+        Force         = $True
+        ErrorAction   = 'Stop'
+    }
+
+    $importSucceeded = $false
+    try {
+        Invoke-PSDepend @psDependParameters
+        $importSucceeded = $true
+        Write-Verbose 'Successfully imported existing modules.' -Verbose
+    }
+    catch {
+        Write-Verbose "Could not import all required modules: $_" -Verbose
+        Write-Verbose 'Attempting to install missing or outdated dependencies...' -Verbose
+    }
+
+    if (-not $importSucceeded) {
+        try {
+            Invoke-PSDepend @psDependParameters -Install
+        }
+        catch {
+            Write-Error "Failed to install and import required dependencies: $_"
+            Write-Error 'This may be due to locked module files. Please restart the build environment or clear module locks.'
+            if ($_.Exception.InnerException) {
+                Write-Error "Inner exception: $($_.Exception.InnerException.Message)"
+            }
+            throw
+        }
+    }
+}
+else {
+    if (-not (Get-Module -Name 'PSDepend' -ListAvailable)) {
+        throw 'Missing dependencies. Please run with the "-Bootstrap" flag to install dependencies.'
+    }
+    Invoke-PSDepend -Path $PSScriptRoot -Recurse $False -WarningAction 'SilentlyContinue' -Import -Force
+}
+
+if ($PSCmdlet.ParameterSetName -eq 'Help') {
+    Get-PSakeScriptTasks -buildFile $psakeFile |
+        Format-Table -Property Name, Description, Alias, DependsOn
+}
+else {
+    Set-BuildEnvironment -Force
+    Invoke-psake -buildFile $psakeFile -taskList $Task -nologo
+    exit ([int](-not $psake.build_success))
+}
+```

blog/authors.yml

@@ -7,3 +7,12 @@ heyitsgilbert:
     x: HeyItsGilbertS
     linkedin: gilbertsanchez
     github: HeyItsGilbert
+
+tablackburn:
+  name: Trent Blackburn
+  title: Contributor
+  url: https://tablackburn.github.io
+  image_url: https://github.com/tablackburn.png
+  socials:
+    github: tablackburn
+    linkedin: trentblackburn