Merge remote-tracking branch 'azure/dev' into mi-arc

Author: jiasli

.azure-pipelines/breaking-change-tests.yml

@@ -22,9 +22,9 @@ jobs:
     fetchTags: true
     persistCredentials: true
   - task: UsePythonVersion@0
-    displayName: 'Use Python 3.10'
+    displayName: 'Use Python 3.11'
     inputs:
-      versionSpec: 3.10
+      versionSpec: 3.11
   - template: ${{ variables.Pipeline.Workspace }}/.azure-pipelines/templates/azdev_setup.yml
   - bash: |
       set -ev

.azure-pipelines/reference-pipeline-trigger-bootstrap.yml

@@ -0,0 +1,15 @@
+trigger:
+- main
+- dev
+
+pr: none # Disable pull request triggers.
+
+resources:
+  repositories:
+    - repository: templates
+      type: git
+      name: Content CI/ReferenceAutomation
+      ref: refs/heads/master
+
+extends:
+  template: ReferencePipelineTrigger/template.yml@templates

.github/CODEOWNERS

@@ -36,7 +36,7 @@
 /src/azure-cli/azure/cli/command_modules/container/ @joseph-porter
 /src/azure-cli/azure/cli/command_modules/cosmosdb/ @dmakwana @kristynhamasaki @evelyn-ys @calvinhzy
 /src/azure-cli/azure/cli/command_modules/databoxedge/ @evelyn-ys
-/src/azure-cli/azure/cli/command_modules/dls/ @akharit @rahuldutta90 @jsntcy
+/src/azure-cli/azure/cli/command_modules/dls/ @akharit @rahuldutta90 @jsntcy @yonzhan @evelyn-ys
 /src/azure-cli/azure/cli/command_modules/dms/ @temandr @binuj
 /src/azure-cli/azure/cli/command_modules/eventgrid/ @evelyn-ys @VidyaKukke
 /src/azure-cli/azure/cli/command_modules/eventhubs/ @v-ajnava
@@ -46,7 +46,7 @@
 /src/azure-cli/azure/cli/command_modules/identity/ @zhoxing-ms @jiasli @yanzhudd
 /src/azure-cli/azure/cli/command_modules/iot/ @digimaun @zhoxing-ms @yanzhudd
 /src/azure-cli/azure/cli/command_modules/keyvault/ @evelyn-ys @jiasli @calvinhzy
-/src/azure-cli/azure/cli/command_modules/monitor/ @jsntcy @kairu-ms @necusjz
+/src/azure-cli/azure/cli/command_modules/monitor/ @jsntcy @kairu-ms @necusjz @AllyW
 /src/azure-cli/azure/cli/command_modules/mysql/ @honghr @evelyn-ys
 /src/azure-cli/azure/cli/command_modules/natgateway/ @khannarheams @jsntcy @kairu-ms @necusjz
 /src/azure-cli/azure/cli/command_modules/network/ @jsntcy @kairu-ms @wangzelin007 @necusjz

.github/azure-client-tools-bot/config.yml

@@ -1,4 +1,4 @@
-similar_issue: true
+similar_issue: false
 allowed_branches:
   - "dev"
 auto_choose_milestone:

.github/policies/resourceManagement.yml

@@ -1410,8 +1410,8 @@ configuration:
         then:
         - mentionUsers:
             mentionees:
-            - AnatoliB
-            - Francisco-Gamino
+            - kamperiadis
+            - khkh-ms
             - shreyabatra4
             replyTemplate: Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc ${mentionees}.
             assignMentionees: False
@@ -3219,10 +3219,16 @@ configuration:
       - payloadType: Issues
       - or:
         - titleContains:
-            pattern: '[Aa]z \b(account|group|resource|provider|feature|tag|policy|lock|managedapp|resourcemanagement)\b'
+            pattern: '[Aa]z \b(group|resource|provider|feature|tag|policy|lock|managedapp|resourcemanagement)\b'
             isRegex: True
         - bodyContains:
-            pattern: '[Aa]z \b(account|group|resource|provider|feature|tag|policy|lock|managedapp|resourcemanagement)\b'
+            pattern: '[Aa]z \b(group|resource|provider|feature|tag|policy|lock|managedapp|resourcemanagement)\b'
+            isRegex: True
+        - titleContains:
+            pattern: '[Aa]z account (lock|management-group)\b'
+            isRegex: True
+        - bodyContains:
+            pattern: '[Aa]z account (lock|management-group)\b'
             isRegex: True
       - or:
         - isAction:
@@ -3240,6 +3246,31 @@ configuration:
       - addLabel:
           label: question
       description: '[arm] auto assign labels and users based on issue description.'
+    - if:
+        - payloadType: Issues
+        - or:
+            - titleContains:
+                pattern: '[Aa]z account\b(?!\s+(lock|management-group)\b)'
+                isRegex: True
+            - bodyContains:
+                pattern: '[Aa]z account\b(?!\s+(lock|management-group)\b)'
+                isRegex: True
+        - or:
+            - isAction:
+                action: Opened
+      then:
+        - addLabel:
+            label: Auto-Assign
+        - addLabel:
+            label: ARM
+        - assignTo:
+            users:
+              - jiasli
+        - addLabel:
+            label: Azure CLI Team
+        - addLabel:
+            label: question
+      description: '[arm] auto assign labels and users based on issue description. '
     - if:
       - payloadType: Issues
       - or:

.github/template/non-security-comment.md

@@ -0,0 +1,7 @@
+Hi, this inquiry has been well received albeit being triaged as non-security related ask.
+
+Azure CLI is currently prioritizing direct SFI requirements and items and this request does not seem to be related to SFI. We'll retain it in our backlog at this point. Please reach out to AzPyCli@microsoft.com if you'd justify it's highly customer-impacted and need to be escalated.
+
+Thank you,
+
+Azure CLI team

.github/workflows/AddIssueCommentWithLabel.yml

@@ -0,0 +1,25 @@
+name: Comment Issue when labeled non-security
+on:
+  issues:
+    types: [opened, labeled, unlabeled]
+
+jobs:
+  comment-non-security:
+    if: contains(github.event.issue.labels.*.name, 'non-security')
+    runs-on: ubuntu-20.04
+    permissions:
+      issues: write
+    name: Comment on issue
+    steps:
+      - name: Checkout comment message
+        uses: actions/checkout@v4
+        with:
+          sparse-checkout: |
+            .github/template/non-security-comment.md
+      - name: Comment on issue with no security label
+        uses: mshick/add-pr-comment@v2
+        with:
+           repo-token: ${{ secrets.GITHUB_TOKEN }}
+           message-id: issueNoSecurityCommentBot
+           message-path: |
+            .github/template/non-security-comment.md

.github/workflows/RunIssueSentinel.yml

@@ -0,0 +1,15 @@
+name: Run issue sentinel
+on:
+  issues:
+    types: [opened, edited, closed]
+
+jobs:
+  Issue:
+    permissions:
+        issues: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run Issue Sentinel
+        uses: Azure/issue-sentinel@v1
+        with:
+          password: ${{secrets.ISSUE_SENTINEL_PASSWORD}}

.gitignore

@@ -117,3 +117,5 @@ pip.log
 
 az_command_coverage.txt
 
+#cmd coverage
+cmd_coverage/*

alpine.dockerfile

@@ -36,7 +36,7 @@ ARG JP_VERSION="0.2.1"
 
 RUN --mount=type=bind,target=/azure-cli,source=./,rw apk add --no-cache ca-certificates bash bash-completion libintl icu-libs libc6-compat jq openssh-keygen \
     && apk add --no-cache --virtual .build-deps gcc musl-dev linux-headers libffi-dev curl \
-    && update-ca-certificates && cd /azure-cli && ./scripts/install_full.sh && python ./scripts/trim_sdk.py \
+    && update-ca-certificates && pip install --upgrade pip setuptools && cd /azure-cli && ./scripts/install_full.sh && python ./scripts/trim_sdk.py \
     && cat /azure-cli/az.completion > ~/.bashrc \
     && dos2unix /root/.bashrc /usr/local/bin/az \
     && arch=$(arch | sed s/aarch64/arm64/ | sed s/x86_64/amd64/) && curl -L https://github.com/jmespath/jp/releases/download/${JP_VERSION}/jp-linux-$arch -o /usr/local/bin/jp \