Merge branch 'main' into scotv-working

Author: Ruchika-mittal01

.github/workflow-config.json

@@ -0,0 +1,27 @@
+{
+  "AutoIssueAssign": {
+    "ExcludedUserList": ["user1", "user2"]
+  },
+  "AutoLabelAssign": {
+    "AutoAssignUsers": 1,
+    "AutoAssignReviewers": 1,
+    "AutoLabel": 1,
+    "ExcludedUserList": ["user1", "user2"],
+    "ExcludedBranchList": ["branch1", "branch2"]
+  },
+  "AutoPublish": {
+    "EnableAutoPublish": true,
+    "EnableAutoMerge": true
+  },
+  "Stale": {
+    "RunDebug": false
+  },
+  "StaleBranch": {
+    "RepoBranchSkipList": ["ExampleBranch1", "ExampleBranch2"],
+    "ReportOnly": false
+  },
+  "TierManagement": {
+    "EnableWriteSignOff": 1,
+    "EnableReadOnlySignoff": 1
+  }
+}

.github/workflows/AutoIssueAssign.yml

@@ -1,6 +1,7 @@
 name: (Scheduled) Auto issue assign
 
 permissions:
+  contents: read
   issues: write
 
 on:
@@ -12,14 +13,29 @@ on:
 
 jobs:
 
+  config:
+    if: github.repository_owner == 'MicrosoftDocs'
+    runs-on: ubuntu-latest
+    outputs:
+      ExcludedUserList: ${{ steps.read.outputs.ExcludedUserList }}
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          sparse-checkout: .github/workflow-config.json
+          sparse-checkout-cone-mode: false
+      - id: read
+        shell: pwsh
+        run: |
+          $Config = (Get-Content '.github/workflow-config.json' | ConvertFrom-Json).AutoIssueAssign
+          "ExcludedUserList=$($Config.ExcludedUserList | ConvertTo-Json -Compress)" >> $Env:GITHUB_OUTPUT
+
   stale-branch:
     if: github.repository_owner == 'MicrosoftDocs'
-    uses: MicrosoftDocs/microsoft-365-docs/.github/workflows/Shared-AutoIssueAssign.yml@workflows-prod
+    needs: config
+    uses: MicrosoftDocs/tcp-workflows/.github/workflows/Shared-AutoIssueAssign.yml@workflows-prod
     with:
         PayloadJson: ${{ toJSON(github) }}
-        ExcludedUserList: '["user1", "user2"]'
-
-        
+        ExcludedUserList: ${{ needs.config.outputs.ExcludedUserList }}
     secrets:
         AccessToken: ${{ secrets.GITHUB_TOKEN }}
         PrivateKey: ${{ secrets.M365_APP_PRIVATE_KEY }}

.github/workflows/AutoLabelAssign.yml

@@ -12,10 +12,34 @@ on:
             - completed
 
 jobs:
+    config:
+        if: github.repository_owner == 'MicrosoftDocs'
+        runs-on: ubuntu-latest
+        outputs:
+            AutoAssignUsers: ${{ steps.read.outputs.AutoAssignUsers }}
+            AutoAssignReviewers: ${{ steps.read.outputs.AutoAssignReviewers }}
+            AutoLabel: ${{ steps.read.outputs.AutoLabel }}
+            ExcludedUserList: ${{ steps.read.outputs.ExcludedUserList }}
+            ExcludedBranchList: ${{ steps.read.outputs.ExcludedBranchList }}
+        steps:
+            - uses: actions/checkout@v5
+              with:
+                sparse-checkout: .github/workflow-config.json
+                sparse-checkout-cone-mode: false
+            - id: read
+              shell: pwsh
+              run: |
+                $Config = (Get-Content '.github/workflow-config.json' | ConvertFrom-Json).AutoLabelAssign
+                "AutoAssignUsers=$($Config.AutoAssignUsers)" >> $Env:GITHUB_OUTPUT
+                "AutoAssignReviewers=$($Config.AutoAssignReviewers)" >> $Env:GITHUB_OUTPUT
+                "AutoLabel=$($Config.AutoLabel)" >> $Env:GITHUB_OUTPUT
+                "ExcludedUserList=$($Config.ExcludedUserList | ConvertTo-Json -Compress)" >> $Env:GITHUB_OUTPUT
+                "ExcludedBranchList=$($Config.ExcludedBranchList | ConvertTo-Json -Compress)" >> $Env:GITHUB_OUTPUT
+
     download-payload:
         name: Download and extract payload artifact
         if: github.repository_owner == 'MicrosoftDocs'
-        uses: MicrosoftDocs/microsoft-365-docs/.github/workflows/Shared-ExtractPayload.yml@workflows-prod
+        uses: MicrosoftDocs/tcp-workflows/.github/workflows/Shared-ExtractPayload.yml@workflows-prod
         with:
             WorkflowId: ${{ github.event.workflow_run.id }}
             OrgRepo: ${{ github.repository }}
@@ -25,19 +49,18 @@ jobs:
     label-assign:
         name: Run assign and label
         if: github.repository_owner == 'MicrosoftDocs'
-        needs: [download-payload]
-        uses: MicrosoftDocs/microsoft-365-docs/.github/workflows/Shared-AutoLabelAssign.yml@workflows-test
+        needs: [config, download-payload]
+        uses: MicrosoftDocs/tcp-workflows/.github/workflows/Shared-AutoLabelAssign.yml@workflows-prod
         with:
             PayloadJson: ${{ needs.download-payload.outputs.WorkflowPayload }}
-            AutoAssignUsers: 1
-            AutoAssignReviewers: 1
-            AutoLabel: 1
-            ExcludedUserList: '["user1", "user2"]'
-            ExcludedBranchList: '["branch1", "branch2"]'
+            AutoAssignUsers: ${{ fromJSON(needs.config.outputs.AutoAssignUsers) }}
+            AutoAssignReviewers: ${{ fromJSON(needs.config.outputs.AutoAssignReviewers) }}
+            AutoLabel: ${{ fromJSON(needs.config.outputs.AutoLabel) }}
+            ExcludedUserList: ${{ needs.config.outputs.ExcludedUserList }}
+            ExcludedBranchList: ${{ needs.config.outputs.ExcludedBranchList }}
         secrets:
             AccessToken: ${{ secrets.GITHUB_TOKEN }}
             PrivateKey: ${{ secrets.M365_APP_PRIVATE_KEY }}
-
             ClientId: ${{ secrets.M365_APP_CLIENT_ID }}
 
 

.github/workflows/AutoLabelMsftContributor.yml

@@ -14,15 +14,33 @@ on:
 
 jobs:
 
+  config:
+    if: github.repository_owner == 'MicrosoftDocs' && contains(github.event.repository.topics, 'build')
+    runs-on: ubuntu-latest
+    outputs:
+      EnableAutoPublish: ${{ steps.read.outputs.EnableAutoPublish }}
+      EnableAutoMerge: ${{ steps.read.outputs.EnableAutoMerge }}
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          sparse-checkout: .github/workflow-config.json
+          sparse-checkout-cone-mode: false
+      - id: read
+        shell: pwsh
+        run: |
+          $Config = (Get-Content '.github/workflow-config.json' | ConvertFrom-Json).AutoPublish
+          "EnableAutoPublish=$("$($Config.EnableAutoPublish)".ToLower())" >> $Env:GITHUB_OUTPUT
+          "EnableAutoMerge=$("$($Config.EnableAutoMerge)".ToLower())" >> $Env:GITHUB_OUTPUT
+
   auto-publish:
     if: github.repository_owner == 'MicrosoftDocs' && contains(github.event.repository.topics, 'build')
-    uses: MicrosoftDocs/microsoft-365-docs/.github/workflows/Shared-AutoPublishV2.yml@workflows-prod
+    needs: config
+    uses: MicrosoftDocs/tcp-workflows/.github/workflows/Shared-AutoPublishV2.yml@workflows-prod
     with:
         PayloadJson: ${{ toJSON(github) }}
-        EnableAutoPublish: true
-        EnableAutoMerge: true
-
+        EnableAutoPublish: ${{ fromJSON(needs.config.outputs.EnableAutoPublish) }}
+        EnableAutoMerge: ${{ fromJSON(needs.config.outputs.EnableAutoMerge) }}
     secrets:
         AccessToken: ${{ secrets.GITHUB_TOKEN }}
         PrivateKey: ${{ secrets.M365_APP_PRIVATE_KEY }}
-        ClientId: ${{ secrets.M365_APP_CLIENT_ID }}
+        ClientId: ${{ secrets.M365_APP_CLIENT_ID }}

.github/workflows/AutoPublish.yml

@@ -22,7 +22,7 @@ jobs:
           mkdir -p ./pr
           echo $PayloadJson > ./pr/PayloadJson.json
           sed -i -e "s/$AccessToken/XYZ/g" ./pr/PayloadJson.json
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v6
         with:
           name: PayloadJson
           path: pr/

.github/workflows/BackgroundTasks.yml

@@ -12,7 +12,7 @@ jobs:
 
   build-status:
     if: github.repository_owner == 'MicrosoftDocs'
-    uses: MicrosoftDocs/microsoft-365-docs/.github/workflows/Shared-BuildValidation.yml@workflows-prod
+    uses: MicrosoftDocs/tcp-workflows/.github/workflows/Shared-BuildValidation.yml@workflows-prod
     with:
       PayloadJson: ${{ toJSON(github) }}
     secrets:

.github/workflows/BuildValidation.yml

@@ -13,7 +13,7 @@ jobs:
 
   live-merge:
     if: github.repository_owner == 'MicrosoftDocs'
-    uses: MicrosoftDocs/microsoft-365-docs/.github/workflows/Shared-LiveMergeCheck.yml@workflows-prod
+    uses: MicrosoftDocs/tcp-workflows/.github/workflows/Shared-LiveMergeCheck.yml@workflows-prod
     with:
       PayloadJson: ${{ toJSON(github) }}
     secrets:

.github/workflows/LiveMergeCheck.yml

@@ -23,7 +23,7 @@ jobs:
         steps:
           - name: Get previous run ID
             id: previous_run
-            uses: actions/github-script@v7
+            uses: actions/github-script@v8
             with:
               script: |
                 const response = await github.rest.actions.listWorkflowRuns({
@@ -47,7 +47,7 @@ jobs:
       name: Update includes
       runs-on: ubuntu-latest
       steps:
-        - uses: actions/download-artifact@v4
+        - uses: actions/download-artifact@v7
           name: Download previous run data artifact
           continue-on-error: true
           with: 
@@ -904,7 +904,7 @@ jobs:
             ls -alr $dataPath
             Write-Host "Finished endpoints update script"
 
-        - uses: actions/upload-artifact@v4
+        - uses: actions/upload-artifact@v6
           name: Upload run data artifact
           with:
             name: RunData

.github/workflows/M365Endpoints.yml

@@ -13,7 +13,7 @@ jobs:
 
   file-count:
     if: github.repository_owner == 'MicrosoftDocs'
-    uses: MicrosoftDocs/microsoft-365-docs/.github/workflows/Shared-PrFileCount.yml@workflows-prod
+    uses: MicrosoftDocs/tcp-workflows/.github/workflows/Shared-PrFileCount.yml@workflows-prod
     with:
       PayloadJson: ${{ toJSON(github) }}
     secrets: