Update release-gb200 branch by merging in changes from main

.github/README-RENOVATE.md

@@ -402,6 +402,8 @@ where
 - `${version}` will be resolved at runtime with the `latestVersion` and `previousLatestVersion` defined above.
 - `${CPU_ARCH}` will be resolved at runtime depending on the CPU architecture of the Node (VM) under provisioning.
 
+systemd system extensions (sysexts) are also hosted as MAR OCI artifacts, but they use a slightly different `extractVersion` rule and `downloadURL`. The distribution (e.g. `azlinux3`) is included in the version to allow different distributions within groups of artifacts. `${SYSTEMD_ARCH}` rather than `${CPU_ARCH}` is used in the URL, as systemd has different architecture names in some cases.
+
 ## `REVISION` in Dalec built container images
 Dalec-built container images use static tags in the form `vMAJOR.MINOR.PATCH-REVISION` (see the Dalec FAQ https://github.com/Azure/dalec-build-defs/blob/main/faq.md#how-do-floating-vs-static-tags-work for details). For clarity and deterministic caching we represent these container images in Agent Baker's `components.json` using the exact static tag `vMAJOR.MINOR.PATCH-REVISION`.
 

.github/renovate.json

@@ -24,13 +24,16 @@
   "packageRules": [
     {
       "matchPackageNames": [
-        "oss/kubernetes/autoscaler/addon-resizer",
+        "*/kubernetes/autoscaler/addon-resizer",
+        "*/kubernetes/autoscaler/cluster-proportional-autoscaler",
+        "*/kubernetes/coredns",
         "oss/v2/kubernetes/pause",
-        "oss/v2/kubernetes/coredns",
         "containernetworking/azure-cni",
         "containernetworking/azure-cns",
         "containernetworking/azure-ipam",
         "containernetworking/cilium/cilium",
+        "containernetworking/cilium/cilium-distroless-init",
+        "containernetworking/cilium/cilium-distroless",
         "oss/kubernetes/apiserver-network-proxy/agent",
         "oss/kubernetes-csi/secrets-store/driver",
         "oss/azure/secrets-store/provider-azure",
@@ -64,7 +67,8 @@
     },
     {
       "matchPackageNames": [
-        "oss/v2/**"
+        "oss/v2/**",
+        "!oss/v2/kubernetes/*-sysext"
       ],
       "versioning": "regex:^v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-(?<prerelease>\\d+)$",
       "ignoreUnstable": false
@@ -106,7 +110,8 @@
         "moby-runc",
         "moby-containerd",
         "containerd2",
-        "aks/aks-node-ca-watcher"
+        "aks/aks-node-ca-watcher",
+        "Azure/WALinuxAgent"
       ],
       "matchUpdateTypes": [
         "patch"
@@ -121,7 +126,8 @@
         "lilypan26",
         "djsly",
         "zachary-bailey",
-        "ganeshkumarashok"
+        "ganeshkumarashok",
+        "mxj220"
       ],
       "reviewers": [
         "devinwong",
@@ -130,14 +136,16 @@
         "lilypan26",
         "djsly",
         "zachary-bailey",
-        "ganeshkumarashok"
+        "ganeshkumarashok",
+        "mxj220"
       ]
     },
     {
       "matchPackageNames": [
         "moby-runc",
         "moby-containerd",
-        "containerd2"
+        "containerd2",
+        "Azure/WALinuxAgent"
       ],
       "matchUpdateTypes": [
         "minor"
@@ -152,7 +160,8 @@
         "lilypan26",
         "djsly",
         "zachary-bailey",
-        "ganeshkumarashok"
+        "ganeshkumarashok",
+        "mxj220"
       ],
       "reviewers": [
         "devinwong",
@@ -161,7 +170,8 @@
         "lilypan26",
         "djsly",
         "zachary-bailey",
-        "ganeshkumarashok"
+        "ganeshkumarashok",
+        "mxj220"
       ]
     },
     {
@@ -205,21 +215,27 @@
       "enabled": true,
       "groupName": "credential-provider-pmc",
       "assignees": [
-        "mainred",
         "nilo19"
       ],
       "reviewers": [
-        "mainred",
         "nilo19"
       ]
     },
     {
       "matchPackageNames": [
-        "azure-cni",
-        "containernetworking/azure-cni",
-        "containernetworking/azure-ipam"
+        "node-exporter-kubernetes"
+      ],
+      "matchUpdateTypes": [
+        "patch"
+      ],
+      "automerge": false,
+      "enabled": true,
+      "groupName": "node-exporter-kubernetes"
+    },
+    {
+      "matchPackageNames": [
+        "containernetworking/azure-cni"
       ],
-      "groupName": "azure-cni-cilium-ipam",
       "reviewers": [
         "team:acn-cni-reviewers"
       ],
@@ -235,19 +251,20 @@
         "oss/v2/azure/ip-masq-agent-v2"
       ],
       "reviewers": [
-        "robogatikov",
-        "paulgmiller"
+        "robogatikov"
       ],
       "assignees": [
-        "robogatikov",
-        "paulgmiller"
+        "robogatikov"
       ]
     },
     {
       "matchPackageNames": [
-        "containernetworking/cilium/cilium"
+        "containernetworking/cilium/cilium",
+        "containernetworking/cilium/cilium-distroless",
+        "containernetworking/cilium/cilium-distroless-init",
+        "containernetworking/azure-ipam"
       ],
-      "groupName": "azure-cni-cilium-ipam",
+      "groupName": "cilium-ipam",
       "versioning": "regex:^v(?<major>\\d+)(\\.(?<minor>\\d+))?(\\.(?<patch>\\d+))?(-(?<prerelease>.*))?$",
       "ignoreUnstable": false,
       "reviewers": [
@@ -257,7 +274,10 @@
         "rbtr",
         "behzad-mir",
         "jpayne3506",
-        "QxBytes"
+        "QxBytes",
+        "camrynl",
+        "santhoshmprabhu",
+        "vipul-21"
       ]
     },
     {
@@ -309,18 +329,15 @@
     },
     {
       "matchPackageNames": [
-        "oss/kubernetes/autoscaler/addon-resizer",
-        "oss/kubernetes/autoscaler/cluster-proportional-autoscaler",
-        "oss/kubernetes/coredns",
-        "oss/v2/kubernetes/coredns"
+        "**/kubernetes/autoscaler/addon-resizer",
+        "**/kubernetes/autoscaler/cluster-proportional-autoscaler",
+        "**/kubernetes/coredns"
       ],
       "assignees": [
-        "nirnaymsft",
-        "SriHarsha001"
+        "ashokobulapuram7"
       ],
       "reviewers": [
-        "nirnaymsft",
-        "SriHarsha001"
+        "ashokobulapuram7"
       ]
     },
     {
@@ -341,15 +358,14 @@
     },
     {
       "matchPackageNames": [
-        "oss/binaries/kubernetes/azure-acr-credential-provider"
+        "oss/binaries/kubernetes/azure-acr-credential-provider",
+        "azure-acr-credential-provider"
       ],
       "groupName": "acr-credential-provider",
       "assignees": [
-        "mainred",
         "nilo19"
       ],
       "reviewers": [
-        "mainred",
         "nilo19"
       ]
     },
@@ -377,6 +393,40 @@
         "ganeshkumarashok"
       ]
     },
+    {
+      "matchPackageNames": [
+        "ig"
+      ],
+      "matchUpdateTypes": [
+        "patch"
+      ],
+      "automerge": false,
+      "enabled": true,
+      "groupName": "inspektor-gadget",
+      "assignees": [
+        "team:ebpf-tools"
+      ],
+      "reviewers": [
+        "team:ebpf-tools"
+      ]
+    },
+    {
+      "matchPackageNames": [
+        "ig"
+      ],
+      "matchUpdateTypes": [
+        "minor"
+      ],
+      "automerge": false,
+      "enabled": true,
+      "groupName": "inspektor-gadget",
+      "assignees": [
+        "team:ebpf-tools"
+      ],
+      "reviewers": [
+        "team:ebpf-tools"
+      ]
+    },
     {
       "matchPackageNames": [
         "nvidia-device-plugin"
@@ -433,11 +483,9 @@
       ],
       "groupName": "azure-cloud-node-manager",
       "assignees": [
-        "mainred",
         "nilo19"
       ],
       "reviewers": [
-        "mainred",
         "nilo19"
       ]
     },
@@ -479,6 +527,16 @@
       ],
       "extractVersion": "^(?P<version>.*?)-[^-]*-[^-]*$"
     },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchPackageNames": [
+        "oss/v2/kubernetes/*-sysext"
+      ],
+      "matchCurrentVersion": "/-azlinux3$/",
+      "extractVersion": "^(?P<version>.+-azlinux3)-"
+    },
     {
       "matchPackageNames": [
         "aks/aks-gpu-cuda"
@@ -661,6 +719,20 @@
       "datasourceTemplate": "rpm",
       "autoReplaceStringTemplate": "\"renovateTag\": \"RPM_registry={{{registryUrl}}}, name={{{packageName}}}, os=azurelinux, release=3.0\",\n                \"latestVersion\": \"{{{newValue}}}\"{{#if depType}},\n                \"previousLatestVersion\": \"{{{currentValue}}}\"{{/if}}"
     },
+    {
+      "customType": "regex",
+      "description": "auto update GitHub release versions in components.json",
+      "managerFilePatterns": [
+        "/parts/common/components.json/"
+      ],
+      "matchStringsStrategy": "any",
+      "matchStrings": [
+        "\"renovateTag\":\\s*\"github-releases=(?<packageName>[^\"]+)\",\\s*\"latestVersion\":\\s*\"(?<currentValue>[^\"]+)\""
+      ],
+      "datasourceTemplate": "github-releases",
+      "extractVersionTemplate": "^v(?<version>.*)$",
+      "autoReplaceStringTemplate": "\"renovateTag\": \"github-releases={{{packageName}}}\",\n                \"latestVersion\": \"{{{newValue}}}\""
+    },
     {
       "customType": "regex",
       "description": "update version line in any cse_*.sh",

.github/workflows/copilot-setup-steps.yml

@@ -0,0 +1,38 @@
+name: "Copilot Setup Steps"
+
+# Automatically run the setup steps when they are changed to allow for easy validation, and
+# allow manual testing through the repository's "Actions" tab
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - .github/workflows/copilot-setup-steps.yml
+  pull_request:
+    paths:
+      - .github/workflows/copilot-setup-steps.yml
+
+jobs:
+  # The job MUST be called `copilot-setup-steps` or it will not be picked up by Copilot.
+  copilot-setup-steps:
+    runs-on: ubuntu-latest
+
+    # Set the permissions to the lowest permissions possible needed for your steps.
+    # Copilot will be given its own token for its operations.
+    permissions:
+      # If you want to clone the repository as part of your setup steps, for example to install dependencies, you'll need the `contents: read` permission. If you don't clone the repository in your setup steps, Copilot will do this for you automatically after the steps complete.
+      contents: read
+
+    # You can define any steps you want, and they will run before the agent starts.
+    # If you do not check out your code, Copilot will do this for you.
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version: '1.24'
+
+      - run: |
+          set -ex
+          make tools-reload shellspec-base-ci
+        name: Downloads all the required tools