Merge branch 'main' into renovate/kubectl-1.x

Author: calvin197

.github/README-RENOVATE.md

@@ -402,6 +402,8 @@ where
 - `${version}` will be resolved at runtime with the `latestVersion` and `previousLatestVersion` defined above.
 - `${CPU_ARCH}` will be resolved at runtime depending on the CPU architecture of the Node (VM) under provisioning.
 
+systemd system extensions (sysexts) are also hosted as MAR OCI artifacts, but they use a slightly different `extractVersion` rule and `downloadURL`. The distribution (e.g. `azlinux3`) is included in the version to allow different distributions within groups of artifacts. `${SYSTEMD_ARCH}` rather than `${CPU_ARCH}` is used in the URL, as systemd has different architecture names in some cases.
+
 ## `REVISION` in Dalec built container images
 Dalec-built container images use static tags in the form `vMAJOR.MINOR.PATCH-REVISION` (see the Dalec FAQ https://github.com/Azure/dalec-build-defs/blob/main/faq.md#how-do-floating-vs-static-tags-work for details). For clarity and deterministic caching we represent these container images in Agent Baker's `components.json` using the exact static tag `vMAJOR.MINOR.PATCH-REVISION`.
 

.github/copilot-instructions.md

@@ -24,13 +24,16 @@
   "packageRules": [
     {
       "matchPackageNames": [
-        "oss/kubernetes/autoscaler/addon-resizer",
+        "*/kubernetes/autoscaler/addon-resizer",
+        "*/kubernetes/autoscaler/cluster-proportional-autoscaler",
+        "*/kubernetes/coredns",
         "oss/v2/kubernetes/pause",
-        "oss/v2/kubernetes/coredns",
         "containernetworking/azure-cni",
         "containernetworking/azure-cns",
         "containernetworking/azure-ipam",
         "containernetworking/cilium/cilium",
+        "containernetworking/cilium/cilium-distroless-init",
+        "containernetworking/cilium/cilium-distroless",
         "oss/kubernetes/apiserver-network-proxy/agent",
         "oss/kubernetes-csi/secrets-store/driver",
         "oss/azure/secrets-store/provider-azure",
@@ -64,7 +67,8 @@
     },
     {
       "matchPackageNames": [
-        "oss/v2/**"
+        "oss/v2/**",
+        "!oss/v2/kubernetes/*-sysext"
       ],
       "versioning": "regex:^v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-(?<prerelease>\\d+)$",
       "ignoreUnstable": false
@@ -235,17 +239,17 @@
         "oss/v2/azure/ip-masq-agent-v2"
       ],
       "reviewers": [
-        "robogatikov",
-        "paulgmiller"
+        "robogatikov"
       ],
       "assignees": [
-        "robogatikov",
-        "paulgmiller"
+        "robogatikov"
       ]
     },
     {
       "matchPackageNames": [
-        "containernetworking/cilium/cilium"
+        "containernetworking/cilium/cilium",
+        "containernetworking/cilium/cilium-distroless",
+        "containernetworking/cilium/cilium-distroless-init"
       ],
       "groupName": "azure-cni-cilium-ipam",
       "versioning": "regex:^v(?<major>\\d+)(\\.(?<minor>\\d+))?(\\.(?<patch>\\d+))?(-(?<prerelease>.*))?$",
@@ -309,18 +313,15 @@
     },
     {
       "matchPackageNames": [
-        "oss/kubernetes/autoscaler/addon-resizer",
-        "oss/kubernetes/autoscaler/cluster-proportional-autoscaler",
-        "oss/kubernetes/coredns",
-        "oss/v2/kubernetes/coredns"
+        "**/kubernetes/autoscaler/addon-resizer",
+        "**/kubernetes/autoscaler/cluster-proportional-autoscaler",
+        "**/kubernetes/coredns"
       ],
       "assignees": [
-        "nirnaymsft",
-        "SriHarsha001"
+        "ashokobulapuram7"
       ],
       "reviewers": [
-        "nirnaymsft",
-        "SriHarsha001"
+        "ashokobulapuram7"
       ]
     },
     {
@@ -479,6 +480,16 @@
       ],
       "extractVersion": "^(?P<version>.*?)-[^-]*-[^-]*$"
     },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchPackageNames": [
+        "oss/v2/kubernetes/*-sysext"
+      ],
+      "matchCurrentVersion": "/-azlinux3$/",
+      "extractVersion": "^(?P<version>.+-azlinux3)-"
+    },
     {
       "matchPackageNames": [
         "aks/aks-gpu-cuda"

.github/renovate.json

@@ -0,0 +1,38 @@
+name: "Copilot Setup Steps"
+
+# Automatically run the setup steps when they are changed to allow for easy validation, and
+# allow manual testing through the repository's "Actions" tab
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - .github/workflows/copilot-setup-steps.yml
+  pull_request:
+    paths:
+      - .github/workflows/copilot-setup-steps.yml
+
+jobs:
+  # The job MUST be called `copilot-setup-steps` or it will not be picked up by Copilot.
+  copilot-setup-steps:
+    runs-on: ubuntu-latest
+
+    # Set the permissions to the lowest permissions possible needed for your steps.
+    # Copilot will be given its own token for its operations.
+    permissions:
+      # If you want to clone the repository as part of your setup steps, for example to install dependencies, you'll need the `contents: read` permission. If you don't clone the repository in your setup steps, Copilot will do this for you automatically after the steps complete.
+      contents: read
+
+    # You can define any steps you want, and they will run before the agent starts.
+    # If you do not check out your code, Copilot will do this for you.
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version: '1.24'
+
+      - run: |
+          set -ex
+          make tools-reload shellspec-base-ci
+        name: Downloads all the required tools