Repo File Sync: synced file(s) with microsoft/mu_devops (#328)

synced local file(s) with
[microsoft/mu_devops](https://github.com/microsoft/mu_devops).

🤖: View the [Repo File Sync Configuration
File](https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml)
to see how files are synced.

---

This PR was created automatically by the
[repo-file-sync-action](https://github.com/BetaHuhn/repo-file-sync-action)
workflow run
[#14244728070](https://github.com/microsoft/mu_devops/actions/runs/14244728070)

Signed-off-by: Project Mu UEFI Bot <[email protected]>
Co-authored-by: Aaron <[email protected]>

Author: uefibot

.azurepipelines/MuDevOpsWrapper.yml

@@ -19,7 +19,7 @@ resources:
       type: github
       endpoint: microsoft
       name: microsoft/mu_devops
-      ref: refs/tags/v13.0.0
+      ref: refs/tags/v13.0.3
 
 parameters:
 - name: do_ci_build
@@ -82,7 +82,7 @@ parameters:
 jobs:
 - template: Jobs/PrGate.yml@mu_devops
   parameters:
-    linux_container_image: ghcr.io/microsoft/mu_devops/ubuntu-24-build:d412ccd
+    linux_container_image: ghcr.io/microsoft/mu_devops/ubuntu-24-build:b089181
     ${{ if eq(parameters.rust_build, true) }}:
       linux_container_options: --security-opt seccomp=unconfined
     do_ci_build: ${{ parameters.do_ci_build }}
@@ -105,7 +105,7 @@ jobs:
 
     container:
 
-      image: ghcr.io/microsoft/mu_devops/ubuntu-24-build:d412ccd
+      image: ghcr.io/microsoft/mu_devops/ubuntu-24-build:b089181
       options: --user root --name mu_devops_build_container --security-opt seccomp=unconfined
 
     steps:

.github/workflows/auto-approve.yml

@@ -29,5 +29,5 @@ jobs:
 
     if: |
       github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'uefibot'
-    uses: microsoft/mu_devops/.github/workflows/[email protected].0
+    uses: microsoft/mu_devops/.github/workflows/[email protected].3
     secrets: inherit

.github/workflows/auto-merge.yml

@@ -32,5 +32,5 @@ jobs:
 
     if: |
       github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'uefibot'
-    uses: microsoft/mu_devops/.github/workflows/[email protected].0
+    uses: microsoft/mu_devops/.github/workflows/[email protected].3
     secrets: inherit

.github/workflows/codeql.yml

@@ -216,7 +216,7 @@ jobs:
 
     - name: Download cargo-make
       if: steps.cargo_make_cache.outputs.cache-hit != 'true'
-      uses: robinraju/release-downloader@v1.11
+      uses: robinraju/release-downloader@v1.12
       with:
         repository: 'sagiegurari/cargo-make'
         tag: '${{ steps.get_cargo_tool_details.outputs.cargo_make_version }}'

.github/workflows/issue-assignment.yml

@@ -23,4 +23,4 @@ jobs:
       contents: read
       issues: write
 
-    uses: microsoft/mu_devops/.github/workflows/[email protected].0
+    uses: microsoft/mu_devops/.github/workflows/[email protected].3

.github/workflows/label-issues.yml

@@ -36,4 +36,4 @@ jobs:
       contents: read
       pull-requests: write
 
-    uses: microsoft/mu_devops/.github/workflows/[email protected].0
+    uses: microsoft/mu_devops/.github/workflows/[email protected].3

.github/workflows/label-sync.yml

@@ -3,6 +3,12 @@
 # All repos should sync at the same time.
 #   '0 0,12 * * *''
 #
+# NOTE: This file is automatically synchronized from Mu DevOps. Update the original file there
+#       instead of the file in this repo.
+#
+# - Mu DevOps Repo: https://github.com/microsoft/mu_devops
+# - File Sync Settings: https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml
+#
 # Copyright (c) Microsoft Corporation.
 # SPDX-License-Identifier: BSD-2-Clause-Patent
 #
@@ -18,4 +24,8 @@ on:
 
 jobs:
   sync:
-    uses: microsoft/mu_devops/.github/workflows/LabelSyncer.yml@main
+
+    permissions:
+      issues: write
+
+    uses: microsoft/mu_devops/.github/workflows/[email protected]

.github/workflows/release-draft.yml

@@ -35,5 +35,5 @@ jobs:
       contents: write
       pull-requests: write
 
-    uses: microsoft/mu_devops/.github/workflows/[email protected].0
+    uses: microsoft/mu_devops/.github/workflows/[email protected].3
     secrets: inherit

.github/workflows/scheduled-maintenance.yml

@@ -24,6 +24,11 @@ on:
 jobs:
   repo_cleanup:
     runs-on: ubuntu-latest
+
+    permissions:
+      pull-requests: write
+      issues: write
+
     steps:
       - name: Get Repository Info
         run: echo "REPOSITORY_NAME=${GITHUB_REPOSITORY#*/}" >> $GITHUB_ENV

.github/workflows/stale.yml

@@ -1,5 +1,11 @@
 # This workflow warns and then closes issues and PRs that have had no activity for a specified amount of time.
 #
+# NOTE: This file is automatically synchronized from Mu DevOps. Update the original file there
+#       instead of the file in this repo.
+#
+# - Mu DevOps Repo: https://github.com/microsoft/mu_devops
+# - File Sync Settings: https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml
+#
 # Copyright (c) Microsoft Corporation.
 # SPDX-License-Identifier: BSD-2-Clause-Patent
 #
@@ -18,4 +24,9 @@ on:
 
 jobs:
   check:
-    uses: microsoft/mu_devops/.github/workflows/Stale.yml@main
+
+    permissions:
+      issues: write
+      pull-requests: write
+
+    uses: microsoft/mu_devops/.github/workflows/[email protected]