Repo File Sync: synced file(s) with microsoft/mu_devops (#332)

mu-automation[bot] · web-flow · commit c89b8d02bed4 · 2025-04-29T12:31:54.000-07:00
synced local file(s) with [microsoft/mu_devops](https://github.com/microsoft/mu_devops). Signed-off-by: Project Mu UEFI Bot <uefibot@microsoft.com> Co-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>
diff --git a/.azurepipelines/MuDevOpsWrapper.yml b/.azurepipelines/MuDevOpsWrapper.yml
@@ -19,7 +19,7 @@ resources:
       type: github
       endpoint: microsoft
       name: microsoft/mu_devops
-      ref: refs/tags/v13.0.3
+      ref: refs/tags/v14.0.1
 
 parameters:
 - name: do_ci_build
diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
@@ -0,0 +1,12 @@
+{
+  "image": "ghcr.io/microsoft/mu_devops/ubuntu-24-dev:latest",
+  "postCreateCommand": "git config --global --add safe.directory '*' && git config --global --add core.autocrlf false && pip install --upgrade -r pip-requirements.txt",
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "ms-vscode.cpptools",
+        "DavidAnson.vscode-markdownlint"
+      ]
+    }
+  }
+}
diff --git a/.gitattributes b/.gitattributes
@@ -0,0 +1 @@
+* -text
diff --git a/.github/release-draft-config-n-1-dev.yml b/.github/release-draft-config-n-1-dev.yml
@@ -20,7 +20,7 @@
 name-template: 'dev-v$RESOLVED_VERSION'
 tag-template: 'dev-v$RESOLVED_VERSION'
 
-commitish: refs/heads/dev/202311
+commitish: refs/heads/dev/202405
 filter-by-commitish: true
 
 template: |
diff --git a/.github/release-draft-config-n-1.yml b/.github/release-draft-config-n-1.yml
@@ -20,7 +20,7 @@
 name-template: 'dev-v$RESOLVED_VERSION'
 tag-template: 'dev-v$RESOLVED_VERSION'
 
-commitish: refs/heads/dev/202311
+commitish: refs/heads/dev/202405
 filter-by-commitish: true
 include-labels: ["type:backport"]
 
diff --git a/.github/release-draft-config-n-dev.yml b/.github/release-draft-config-n-dev.yml
@@ -20,7 +20,7 @@
 name-template: 'dev-v$RESOLVED_VERSION'
 tag-template: 'dev-v$RESOLVED_VERSION'
 
-commitish: refs/heads/dev/202405
+commitish: refs/heads/dev/202502
 filter-by-commitish: true
 
 template: |
diff --git a/.github/release-draft-config-n.yml b/.github/release-draft-config-n.yml
@@ -20,7 +20,7 @@
 name-template: 'dev-v$RESOLVED_VERSION'
 tag-template: 'dev-v$RESOLVED_VERSION'
 
-commitish: refs/heads/dev/202405
+commitish: refs/heads/dev/202502
 filter-by-commitish: true
 include-labels: ["type:backport"]
 
diff --git a/.github/workflows/backport-to-release-branch.yml b/.github/workflows/backport-to-release-branch.yml
@@ -1,5 +1,12 @@
 # This workflow moves marked commits from a development branch to a release branch.
 #
+# This workflow requires a GitHub App with the following permissions:
+# - Read and write access to repository contents
+# - Read and write access to pull requests
+#
+# The GitHub App ID and private key should be stored in the repository as a variable named `MU_ACCESS_APP_ID` and a
+# secret named `MU_ACCESS_APP_PRIVATE_KEY` respectively.
+#
 # Each commit in the development branch is cherry-picked to the release branch if the commit originates from a merged
 # PR that is marked for backport.
 #
@@ -25,6 +32,7 @@ name: Backport Commits to Release Branch
 on:
   push:
     branches:
+      - dev/202502
       - dev/202405
 
 jobs:
@@ -33,11 +41,18 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+    - name: Generate Token
+      id: app-token
+      uses: actions/create-github-app-token@v2
+      with:
+        app-id: ${{ vars.MU_ACCESS_APP_ID }}
+        private-key: ${{ secrets.MU_ACCESS_APP_PRIVATE_KEY }}
+
     - name: Checkout code
       uses: actions/checkout@v4
       with:
         fetch-depth: 0
-        token: ${{ secrets.CHERRY_PICK_TOKEN }}
+        token: ${{ steps.app-token.outputs.token }}
 
     - name: Determine Contribution Info
       id: backport_info
@@ -229,5 +244,5 @@ jobs:
         -H "Content-Type: application/json" \
         -d "{\"title\":\"$PR_TITLE\",\"body\":\"$PR_BODY\",\"head\":\"$PR_BRANCH\",\"base\":\"$BASE_BRANCH\",\"labels\":[\"type:release-merge-conflict\"]}"
       env:
-        CHERRY_PICK_TOKEN: ${{ secrets.CHERRY_PICK_TOKEN }}
+        CHERRY_PICK_TOKEN: ${{ steps.app-token.outputs.token }}
 
diff --git a/.github/workflows/issue-assignment.yml b/.github/workflows/issue-assignment.yml
@@ -23,4 +23,4 @@ jobs:
       contents: read
       issues: write
 
-    uses: microsoft/mu_devops/.github/workflows/IssueAssignment.yml@v13.0.3
+    uses: microsoft/mu_devops/.github/workflows/IssueAssignment.yml@v14.0.1
diff --git a/.github/workflows/label-issues.yml b/.github/workflows/label-issues.yml
@@ -36,4 +36,4 @@ jobs:
       contents: read
       pull-requests: write
 
-    uses: microsoft/mu_devops/.github/workflows/Labeler.yml@v13.0.3
+    uses: microsoft/mu_devops/.github/workflows/Labeler.yml@v14.0.1
diff --git a/.github/workflows/label-issues/regex-pull-requests.yml b/.github/workflows/label-issues/regex-pull-requests.yml
@@ -10,24 +10,45 @@
 # SPDX-License-Identifier: BSD-2-Clause-Patent
 #
 # For more information, see:
-# https://github.com/github/issue-labeler
+# https://github.com/srvaroa/labeler
 
 # Maintenance: Keep labels organized in ascending alphabetical order - easier to scan, identify duplicates, etc.
+version: 1
+issues: False
 
-type:backport:
-  - '\s*-\s*\[\s*[x|X]\s*\] Backport to release branch\?'
+labels:
+  - label: type:backport
+    type: "pull_request"
+    body: '\s*\[\s*(x|X){1}\s*\]\s*Backport to release branch\?'
 
-impact:breaking-change:
-  - '\s*-\s*\[\s*[x|X]\s*\] Breaking change\?'
+  - label: type:backport
+    type: "pull_request"
+    authors: ["mu-automation[bot]"]
+    branch : "repo-sync/mu_devops/default"  
+    base-branch: "dev/20[0-9]{4}"
 
-type:documentation:
-  - '\s*-\s*\[\s*[x|X]\s*\] Includes documentation\?'
+  - label: type:backport
+    type: "pull_request"
+    authors: ["dependabot[bot]"]
+    branch : "dependabot/*"
+    base-branch: "dev/20[0-9]{4}"
 
-impact:non-functional:
-  - '\s*-\s*\[\s*(?![x|X])\s*\] Impacts functionality\?'
+  - label: impact:breaking-change
+    type: "pull_request"
+    body: '\s*\[\s*(x|X){1}\s*\]\s*Breaking\s*change\?'
 
-impact:security:
-  - '\s*-\s*\[\s*[x|X]\s*\] Impacts security\?'
+  - label: type:documentation
+    type: "pull_request"
+    body: '\s*\[\s*(x|X){1}\s*\]\s*Includes\s*documentation\?'
 
-impact:testing:
-  - '\s*-\s*\[\s*[x|X]\s*\] Includes tests\?'
+  - label: impact:non-functional
+    type: "pull_request"
+    body: '\s*\[\s*\]\s*Impacts\s*functionality\?'
+
+  - label: impact:security
+    type: "pull_request"
+    body: '\s*\[\s*(x|X){1}\s*\]\s*Impacts\s*security\?'
+
+  - label: impact:testing
+    type: "pull_request"
+    body: '\[\s*(x|X){1}\s*\]\s*Includes\s*tests\?'
diff --git a/.github/workflows/label-sync.yml b/.github/workflows/label-sync.yml
@@ -28,4 +28,4 @@ jobs:
     permissions:
       issues: write
 
-    uses: microsoft/mu_devops/.github/workflows/LabelSyncer.yml@v13.0.3
+    uses: microsoft/mu_devops/.github/workflows/LabelSyncer.yml@v14.0.1
diff --git a/.github/workflows/release-draft.yml b/.github/workflows/release-draft.yml
@@ -23,7 +23,7 @@ name: Update Release Draft
 on:
   workflow_run:
     workflows: ["Backport Commits to Release Branch"]
-    branches: [dev/202405]
+    branches: [dev/202502]
     types:
       - completed
 
@@ -35,5 +35,5 @@ jobs:
       contents: write
       pull-requests: write
 
-    uses: microsoft/mu_devops/.github/workflows/ReleaseDrafter.yml@v13.0.3
+    uses: microsoft/mu_devops/.github/workflows/ReleaseDrafter.yml@v14.0.1
     secrets: inherit
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -29,4 +29,4 @@ jobs:
       issues: write
       pull-requests: write
 
-    uses: microsoft/mu_devops/.github/workflows/Stale.yml@v13.0.3
+    uses: microsoft/mu_devops/.github/workflows/Stale.yml@v14.0.1
diff --git a/.github/workflows/triage-issues.yml b/.github/workflows/triage-issues.yml
@@ -23,4 +23,4 @@ jobs:
     permissions:
       issues: write
 
-    uses: microsoft/mu_devops/.github/workflows/IssueTriager.yml@v13.0.3
+    uses: microsoft/mu_devops/.github/workflows/IssueTriager.yml@v14.0.1
diff --git a/.markdownlint.yaml b/.markdownlint.yaml
@@ -1,14 +1,21 @@
-## @file
-# markdownlint configuration
-#
-# Copyright (c) Microsoft Corporation
-# SPDX-License-Identifier: BSD-2-Clause-Patent
-##
-
-# Rules can be found here: https://github.com/DavidAnson/markdownlint/blob/main/doc/Rules.md
-# Config info: https://github.com/DavidAnson/markdownlint#configuration
-{
-  "default": true,
-  "MD013": {"line_length": 120, "code_blocks": false, "tables": false},
-  "MD033": {"allowed_elements": ["br"]}
-}
+## @file
+# markdownlint configuration
+#
+# NOTE: This file is automatically synchronized from Mu DevOps. Update the original file there
+#       instead of the file in this repo.
+#
+# - Mu DevOps Repo: https://github.com/microsoft/mu_devops
+# - File Sync Settings: https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml
+#
+# Copyright (c) Microsoft Corporation.
+# SPDX-License-Identifier: BSD-2-Clause-Patent
+##
+
+# Rules can be found here: https://github.com/DavidAnson/markdownlint/blob/main/doc/Rules.md
+# Config info: https://github.com/DavidAnson/markdownlint#configuration
+
+{
+  "default": true,
+  "MD013": {"line_length": 120, "code_blocks": false, "tables": false},
+  "MD033": {"allowed_elements": ["br"]}
+}
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
diff --git a/License.txt b/License.txt
diff --git a/SECURITY.md b/SECURITY.md
