Repo File Sync: Update to mu_devops v18.0.8

.github/actions/submodule-release-updater/action.yml

@@ -42,7 +42,7 @@ runs:
 
   steps:
     - name: Set up Python Environment
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
       with:
         python-version: 3.12
 

.github/dependabot.yml

@@ -1,89 +1,89 @@
-## @file
-# Dependabot configuration file to enable GitHub services for managing and updating
-# dependencies.
-#
-# NOTE: This file is automatically synchronized from Mu DevOps. Update the original file there
-#       instead of the file in this repo.
-#
-#       This dependabot file is limited to syncing the following type of dependencies. Other files
-#       are already available in Mu DevOps to sync other dependency types.
-#         - Rust Crate Dependencies (`cargo`)
-#         - GitHub Actions (`github-actions`)
-#         - Python PIP Modules (`pip`)
-#
-#       Dependabot does not update the microsoft/mu_devops version because that is updated once in mu_devops
-#       and then synced to all repos when the file sync occurs.
-#
-# - Mu DevOps Repo: https://github.com/microsoft/mu_devops
-# - File Sync Settings: https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml
-#
-# Copyright (c) Microsoft Corporation.
-# SPDX-License-Identifier: BSD-2-Clause-Patent
-#
-# Please see the documentation for all dependabot configuration options:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-##
-
-version: 2
-
-updates:
-  - package-ecosystem: "cargo"
-    directory: "/"
-    schedule:
-      interval: "monthly"
-      day: "monday"
-      timezone: "America/Los_Angeles"
-      time: "03:00"
-    cooldown:
-      default-days: 7
-    commit-message:
-      prefix: "Rust Dependency"
-    labels:
-      - "type:dependencies"
-      - "type:dependabot"
-    rebase-strategy: "disabled"
-
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "monthly"
-      day: "monday"
-      timezone: "America/Los_Angeles"
-      time: "06:00"
-    cooldown:
-      default-days: 7
-    ignore:
-      # Ignore dependencies that are synced from mu_devops
-      - dependency-name: "microsoft/mu_devops*"
-      - dependency-name: "github/codeql-action*"
-    groups:
-      all-actions-dependencies:
-        patterns:
-          - "*"
-    commit-message:
-      prefix: "GitHub Action"
-    labels:
-      - "type:dependencies"
-      - "type:dependabot"
-    rebase-strategy: "disabled"
-
-  - package-ecosystem: "pip"
-    directory: "/"
-    schedule:
-      interval: "monthly"
-      day: "wednesday"
-      timezone: "America/Los_Angeles"
-      time: "01:00"
-    cooldown:
-      default-days: 7
-    groups:
-      all-pip-dependencies:
-        patterns:
-          - "*"
-    commit-message:
-      prefix: "pip"
-    labels:
-      - "language:python"
-      - "type:dependencies"
-      - "type:dependabot"
-    rebase-strategy: "disabled"
+## @file
+# Dependabot configuration file to enable GitHub services for managing and updating
+# dependencies.
+#
+# NOTE: This file is automatically synchronized from Mu DevOps. Update the original file there
+#       instead of the file in this repo.
+#
+#       This dependabot file is limited to syncing the following type of dependencies. Other files
+#       are already available in Mu DevOps to sync other dependency types.
+#         - Rust Crate Dependencies (`cargo`)
+#         - GitHub Actions (`github-actions`)
+#         - Python PIP Modules (`pip`)
+#
+#       Dependabot does not update the microsoft/mu_devops version because that is updated once in mu_devops
+#       and then synced to all repos when the file sync occurs.
+#
+# - Mu DevOps Repo: https://github.com/microsoft/mu_devops
+# - File Sync Settings: https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml
+#
+# Copyright (c) Microsoft Corporation.
+# SPDX-License-Identifier: BSD-2-Clause-Patent
+#
+# Please see the documentation for all dependabot configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+##
+
+version: 2
+
+updates:
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+      day: "monday"
+      timezone: "America/Los_Angeles"
+      time: "03:00"
+    cooldown:
+      default-days: 7
+    commit-message:
+      prefix: "Rust Dependency"
+    labels:
+      - "type:dependencies"
+      - "type:dependabot"
+    rebase-strategy: "disabled"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+      day: "monday"
+      timezone: "America/Los_Angeles"
+      time: "06:00"
+    cooldown:
+      default-days: 7
+    ignore:
+      # Ignore dependencies that are synced from mu_devops
+      - dependency-name: "microsoft/mu_devops*"
+      - dependency-name: "github/codeql-action*"
+    groups:
+      all-actions-dependencies:
+        patterns:
+          - "*"
+    commit-message:
+      prefix: "GitHub Action"
+    labels:
+      - "type:dependencies"
+      - "type:dependabot"
+    rebase-strategy: "disabled"
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+      day: "wednesday"
+      timezone: "America/Los_Angeles"
+      time: "01:00"
+    cooldown:
+      default-days: 7
+    groups:
+      all-pip-dependencies:
+        patterns:
+          - "*"
+    commit-message:
+      prefix: "pip"
+    labels:
+      - "language:python"
+      - "type:dependencies"
+      - "type:dependabot"
+    rebase-strategy: "disabled"

.github/workflows/PackageCi.yml

@@ -84,11 +84,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Setup Python ${{ inputs.python-version }}
         if: ${{ inputs.container == null }}
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
           python-version: ${{ inputs.python-version }}
           cache: 'pip'
@@ -121,7 +121,7 @@ jobs:
 
       - name: Upload CI build logs
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: ci-logs-${{ matrix.packages }}-${{ matrix.architectures }}-${{ matrix.targets }}-${{ inputs.runner }}
           path: ${{ steps.package-ci.outputs.log-path }}

.github/workflows/pull-request-formatting-validator.yml

@@ -27,7 +27,7 @@ jobs:
     steps:
       - name: Generate Token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
         with:
           app-id: ${{ vars.MU_ACCESS_APP_ID }}
           private-key: ${{ secrets.MU_ACCESS_APP_PRIVATE_KEY }}
@@ -68,7 +68,7 @@ jobs:
 
       - name: Check for Validation Errors
         if: env.VALIDATION_ERROR
-        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
         with:
           script: |
             core.setFailed('PR Formatting Validation Check Failed!')

.github/workflows/scheduled-maintenance.yml

@@ -28,7 +28,7 @@ jobs:
     steps:
       - name: Generate Token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
         with:
           app-id: ${{ vars.MU_ACCESS_APP_ID }}
           private-key: ${{ secrets.MU_ACCESS_APP_PRIVATE_KEY }}

Containers/Ubuntu-22/Dockerfile

@@ -131,7 +131,7 @@ ENV RUSTUP_HOME="$HOME/.rustup"
 ENV PATH="$CARGO_HOME/bin:$PATH"
 
 # Install Rust/Cargo and extras (rust-src, rust fmt, cargo-make, cargo-tarpaulin)
-RUN RUST_VERSION=1.92.0 && \
+RUN RUST_VERSION=1.95.0 && \
     curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain ${RUST_VERSION} --profile minimal && \
     rustup component add rustfmt rust-src --toolchain ${RUST_VERSION}-x86_64-unknown-linux-gnu
 

Containers/Ubuntu-24/Dockerfile

@@ -132,7 +132,7 @@ ENV RUSTUP_HOME="$HOME/.rustup"
 ENV PATH="$CARGO_HOME/bin:$PATH"
 
 # Install Rust/Cargo and extras (rust-src, rust fmt, cargo-make, cargo-tarpaulin)
-RUN RUST_VERSION=1.92.0 && \
+RUN RUST_VERSION=1.95.0 && \
     curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain ${RUST_VERSION} --profile minimal && \
     rustup component add rustfmt rust-src --toolchain ${RUST_VERSION}-x86_64-unknown-linux-gnu
 

Steps/RustSetupSteps.yml

@@ -79,13 +79,13 @@ steps:
 # those on both Linux and Windows agents for consistency in the pipeline runs.
 #
 - script: |
-    rustup install --no-self-update 1.92.0
-  displayName: Install Rust 1.92.0 (Windows)
+    rustup install --no-self-update 1.95.0
+  displayName: Install Rust 1.95.0 (Windows)
   condition: eq(variables['Agent.OS'], 'Windows_NT')
 
 - script: |
-    rustup default 1.92.0
-  displayName: Set Rust 1.92.0 (Windows)
+    rustup default 1.95.0
+  displayName: Set Rust 1.95.0 (Windows)
   condition: eq(variables['Agent.OS'], 'Windows_NT')
 
 - script: pip install requests --upgrade
@@ -130,6 +130,6 @@ steps:
     cargo binstall -y cargo-tarpaulin --version 0.31.5
   displayName: Install cargo-tarpaulin
 
-- script: rustup component add rustfmt rust-src --toolchain 1.92.0-$(rust_target_triple)
+- script: rustup component add rustfmt rust-src --toolchain 1.95.0-$(rust_target_triple)
   displayName: rustup add rust-src
   condition: and(succeeded(), eq(variables['Agent.OS'], 'Windows_NT'))