Repo File Sync: synced file(s) with microsoft/mu_devops (#371)

synced local file(s) with
[microsoft/mu_devops](https://github.com/microsoft/mu_devops).

Signed-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>
Co-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>

Author: mu-automation[bot]

.azurepipelines/MuDevOpsWrapper.yml

@@ -19,7 +19,7 @@ resources:
       type: github
       endpoint: microsoft
       name: microsoft/mu_devops
-      ref: refs/tags/v13.0.3
+      ref: refs/tags/v14.0.1
 
 parameters:
 - name: do_ci_build

.github/release-draft-config-n-1-dev.yml

@@ -20,7 +20,7 @@
 name-template: 'dev-v$RESOLVED_VERSION'
 tag-template: 'dev-v$RESOLVED_VERSION'
 
-commitish: refs/heads/dev/202311
+commitish: refs/heads/dev/202405
 filter-by-commitish: true
 
 template: |

.github/release-draft-config-n-1.yml

@@ -20,7 +20,7 @@
 name-template: 'dev-v$RESOLVED_VERSION'
 tag-template: 'dev-v$RESOLVED_VERSION'
 
-commitish: refs/heads/dev/202311
+commitish: refs/heads/dev/202405
 filter-by-commitish: true
 include-labels: ["type:backport"]
 

.github/release-draft-config-n-dev.yml

@@ -20,7 +20,7 @@
 name-template: 'dev-v$RESOLVED_VERSION'
 tag-template: 'dev-v$RESOLVED_VERSION'
 
-commitish: refs/heads/dev/202405
+commitish: refs/heads/dev/202502
 filter-by-commitish: true
 
 template: |

.github/release-draft-config-n.yml

@@ -20,7 +20,7 @@
 name-template: 'dev-v$RESOLVED_VERSION'
 tag-template: 'dev-v$RESOLVED_VERSION'
 
-commitish: refs/heads/dev/202405
+commitish: refs/heads/dev/202502
 filter-by-commitish: true
 include-labels: ["type:backport"]
 

.github/workflows/backport-to-release-branch.yml

@@ -1,5 +1,12 @@
 # This workflow moves marked commits from a development branch to a release branch.
 #
+# This workflow requires a GitHub App with the following permissions:
+# - Read and write access to repository contents
+# - Read and write access to pull requests
+#
+# The GitHub App ID and private key should be stored in the repository as a variable named `MU_ACCESS_APP_ID` and a
+# secret named `MU_ACCESS_APP_PRIVATE_KEY` respectively.
+#
 # Each commit in the development branch is cherry-picked to the release branch if the commit originates from a merged
 # PR that is marked for backport.
 #
@@ -25,6 +32,7 @@ name: Backport Commits to Release Branch
 on:
   push:
     branches:
+      - dev/202502
       - dev/202405
 
 jobs:
@@ -33,11 +41,18 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+    - name: Generate Token
+      id: app-token
+      uses: actions/create-github-app-token@v2
+      with:
+        app-id: ${{ vars.MU_ACCESS_APP_ID }}
+        private-key: ${{ secrets.MU_ACCESS_APP_PRIVATE_KEY }}
+
     - name: Checkout code
       uses: actions/checkout@v4
       with:
         fetch-depth: 0
-        token: ${{ secrets.CHERRY_PICK_TOKEN }}
+        token: ${{ steps.app-token.outputs.token }}
 
     - name: Determine Contribution Info
       id: backport_info
@@ -229,5 +244,5 @@ jobs:
         -H "Content-Type: application/json" \
         -d "{\"title\":\"$PR_TITLE\",\"body\":\"$PR_BODY\",\"head\":\"$PR_BRANCH\",\"base\":\"$BASE_BRANCH\",\"labels\":[\"type:release-merge-conflict\"]}"
       env:
-        CHERRY_PICK_TOKEN: ${{ secrets.CHERRY_PICK_TOKEN }}
+        CHERRY_PICK_TOKEN: ${{ steps.app-token.outputs.token }}
 

.github/workflows/issue-assignment.yml

@@ -23,4 +23,4 @@ jobs:
       contents: read
       issues: write
 
-    uses: microsoft/mu_devops/.github/workflows/IssueAssignment.yml@v13.0.3
+    uses: microsoft/mu_devops/.github/workflows/IssueAssignment.yml@v14.0.1

.github/workflows/label-issues.yml

@@ -36,4 +36,4 @@ jobs:
       contents: read
       pull-requests: write
 
-    uses: microsoft/mu_devops/.github/workflows/Labeler.yml@v13.0.3
+    uses: microsoft/mu_devops/.github/workflows/Labeler.yml@v14.0.1

.github/workflows/label-issues/regex-pull-requests.yml

@@ -10,24 +10,45 @@
 # SPDX-License-Identifier: BSD-2-Clause-Patent
 #
 # For more information, see:
-# https://github.com/github/issue-labeler
+# https://github.com/srvaroa/labeler
 
 # Maintenance: Keep labels organized in ascending alphabetical order - easier to scan, identify duplicates, etc.
+version: 1
+issues: False
 
-type:backport:
-  - '\s*-\s*\[\s*[x|X]\s*\] Backport to release branch\?'
+labels:
+  - label: type:backport
+    type: "pull_request"
+    body: '\s*\[\s*(x|X){1}\s*\]\s*Backport to release branch\?'
 
-impact:breaking-change:
-  - '\s*-\s*\[\s*[x|X]\s*\] Breaking change\?'
+  - label: type:backport
+    type: "pull_request"
+    authors: ["mu-automation[bot]"]
+    branch : "repo-sync/mu_devops/default"  
+    base-branch: "dev/20[0-9]{4}"
 
-type:documentation:
-  - '\s*-\s*\[\s*[x|X]\s*\] Includes documentation\?'
+  - label: type:backport
+    type: "pull_request"
+    authors: ["dependabot[bot]"]
+    branch : "dependabot/*"
+    base-branch: "dev/20[0-9]{4}"
 
-impact:non-functional:
-  - '\s*-\s*\[\s*(?![x|X])\s*\] Impacts functionality\?'
+  - label: impact:breaking-change
+    type: "pull_request"
+    body: '\s*\[\s*(x|X){1}\s*\]\s*Breaking\s*change\?'
 
-impact:security:
-  - '\s*-\s*\[\s*[x|X]\s*\] Impacts security\?'
+  - label: type:documentation
+    type: "pull_request"
+    body: '\s*\[\s*(x|X){1}\s*\]\s*Includes\s*documentation\?'
 
-impact:testing:
-  - '\s*-\s*\[\s*[x|X]\s*\] Includes tests\?'
+  - label: impact:non-functional
+    type: "pull_request"
+    body: '\s*\[\s*\]\s*Impacts\s*functionality\?'
+
+  - label: impact:security
+    type: "pull_request"
+    body: '\s*\[\s*(x|X){1}\s*\]\s*Impacts\s*security\?'
+
+  - label: impact:testing
+    type: "pull_request"
+    body: '\[\s*(x|X){1}\s*\]\s*Includes\s*tests\?'

.github/workflows/label-sync.yml

@@ -28,4 +28,4 @@ jobs:
     permissions:
       issues: write
 
-    uses: microsoft/mu_devops/.github/workflows/LabelSyncer.yml@v13.0.3
+    uses: microsoft/mu_devops/.github/workflows/LabelSyncer.yml@v14.0.1