diff --git a/Cargo.toml b/Cargo.toml
index 7fabbe05..a902c513 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -3,7 +3,9 @@ members = ["crates/*"]
 resolver = "2"
 
 [profile.release]
-strip = true
+# Enable all optimizations
+opt-level = 3
+# Enable full link-time-optimizations
 lto = true
 codegen-units = 1
 # Enable full debug info for optimized builds.
diff --git a/azure-pipelines/playground.yml b/azure-pipelines/playground.yml
index 9b668f3b..d49182dd 100644
--- a/azure-pipelines/playground.yml
+++ b/azure-pipelines/playground.yml
@@ -7,16 +7,17 @@ resources:
     - repository: templates
       type: github
       name: microsoft/vscode-engineering
-      ref: kanadig/rust-binaries1 # TODO: Change this to `main` after `kanadig/rust-binaries1` is merged to `main`.
+      ref: main
       endpoint: Monaco
 
 extends:
-  template: azure-pipelines/extension/pipeline.yml@templates
+  template: azure-pipelines/rust-package/pipeline.yml@templates
   parameters:
     ghCreateTag: false
     binaryName: "pet"
     signing: false
     buildWasm: false
+    apiScanSoftwareVersion: 2024 # major version of `pet` for internal reporting
 
     buildPlatforms:
       - name: Linux
diff --git a/azure-pipelines/pre-release.yml b/azure-pipelines/pre-release.yml
index 5ba16eb9..c62c5aee 100644
--- a/azure-pipelines/pre-release.yml
+++ b/azure-pipelines/pre-release.yml
@@ -15,16 +15,17 @@ resources:
     - repository: templates
       type: github
       name: microsoft/vscode-engineering
-      ref: kanadig/rust-binaries1 # TODO: Change this to `main` after `kanadig/rust-binaries1` is merged to `main`.
+      ref: main
       endpoint: Monaco
 
 extends:
-  template: azure-pipelines/extension/pipeline.yml@templates
+  template: azure-pipelines/rust-package/pipeline.yml@templates
   parameters:
     ghCreateTag: false
     binaryName: "pet"
-    signing: false # TODO: remove this before consuming in extensions (currently extensions build and sign directly)
+    signing: true
     buildWasm: false
+    apiScanSoftwareVersion: 2024 # major version of `pet` for internal reporting
 
     buildPlatforms:
       - name: Linux
diff --git a/azure-pipelines/stable.yml b/azure-pipelines/stable.yml
index 36bc765d..64058ba1 100644
--- a/azure-pipelines/stable.yml
+++ b/azure-pipelines/stable.yml
@@ -7,16 +7,17 @@ resources:
     - repository: templates
       type: github
       name: microsoft/vscode-engineering
-      ref: kanadig/rust-binaries1 # TODO: Change this to `main` after `kanadig/rust-binaries1` is merged to `main`.
+      ref: main
       endpoint: Monaco
 
 extends:
-  template: azure-pipelines/extension/pipeline.yml@templates
+  template: azure-pipelines/rust-package/pipeline.yml@templates
   parameters:
     ghCreateTag: false
     binaryName: "pet"
-    signing: false # TODO: remove this before consuming in extensions (currently extensions build and sign directly)
+    signing: true
     buildWasm: false
+    apiScanSoftwareVersion: 2024 # major version of `pet` for internal reporting
 
     buildPlatforms:
       - name: Linux