Repo File Sync: Update to Mu DevOps v15.0.0 and Rust to 1.85 (#1153)

synced local file(s) with
[microsoft/mu_devops](https://github.com/microsoft/mu_devops).

🤖: View the [Repo File Sync Configuration
File](https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml)
to see how files are synced.

---

This PR was created automatically by the
[repo-file-sync-action](https://github.com/BetaHuhn/repo-file-sync-action)
workflow run
[#15330387217](https://github.com/microsoft/mu_devops/actions/runs/15330387217)

Signed-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>
Co-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>

Author: mu-automation[bot]

.azurepipelines/MuDevOpsWrapper.yml

@@ -19,7 +19,7 @@ resources:
       type: github
       endpoint: microsoft
       name: microsoft/mu_devops
-      ref: refs/tags/v14.0.1
+      ref: refs/tags/v15.0.0
 
 parameters:
 - name: do_ci_build
@@ -82,7 +82,7 @@ parameters:
 jobs:
 - template: Jobs/PrGate.yml@mu_devops
   parameters:
-    linux_container_image: ghcr.io/microsoft/mu_devops/ubuntu-24-build:4d8e1b7
+    linux_container_image: ghcr.io/microsoft/mu_devops/ubuntu-24-build:68fa63a
     ${{ if eq(parameters.rust_build, true) }}:
       linux_container_options: --security-opt seccomp=unconfined
     do_ci_build: ${{ parameters.do_ci_build }}
@@ -105,7 +105,7 @@ jobs:
 
     container:
 
-      image: ghcr.io/microsoft/mu_devops/ubuntu-24-build:4d8e1b7
+      image: ghcr.io/microsoft/mu_devops/ubuntu-24-build:68fa63a
       options: --user root --name mu_devops_build_container --security-opt seccomp=unconfined
 
     steps:

.github/workflows/issue-assignment.yml

@@ -23,4 +23,4 @@ jobs:
       contents: read
       issues: write
 
-    uses: microsoft/mu_devops/.github/workflows/IssueAssignment.yml@v14.0.1
+    uses: microsoft/mu_devops/.github/workflows/IssueAssignment.yml@v15.0.0

.github/workflows/label-issues.yml

@@ -36,4 +36,4 @@ jobs:
       contents: read
       pull-requests: write
 
-    uses: microsoft/mu_devops/.github/workflows/Labeler.yml@v14.0.1
+    uses: microsoft/mu_devops/.github/workflows/Labeler.yml@v15.0.0

.github/workflows/label-sync.yml

@@ -28,4 +28,4 @@ jobs:
     permissions:
       issues: write
 
-    uses: microsoft/mu_devops/.github/workflows/LabelSyncer.yml@v14.0.1
+    uses: microsoft/mu_devops/.github/workflows/LabelSyncer.yml@v15.0.0

.github/workflows/release-draft.yml

@@ -33,5 +33,5 @@ jobs:
       contents: write
       pull-requests: write
 
-    uses: microsoft/mu_devops/.github/workflows/ReleaseDrafter.yml@v14.0.1
+    uses: microsoft/mu_devops/.github/workflows/ReleaseDrafter.yml@v15.0.0
     secrets: inherit

.github/workflows/stale.yml

@@ -29,4 +29,4 @@ jobs:
       issues: write
       pull-requests: write
 
-    uses: microsoft/mu_devops/.github/workflows/Stale.yml@v14.0.1
+    uses: microsoft/mu_devops/.github/workflows/Stale.yml@v15.0.0

.github/workflows/submodule-release-update.yml

@@ -39,11 +39,11 @@ jobs:
         id: app-token
         uses: actions/create-github-app-token@v2
         with:
-          app-id: $
-          private-key: $
+          app-id: ${{ vars.MU_ACCESS_APP_ID }}
+          private-key: ${{ secrets.MU_ACCESS_APP_PRIVATE_KEY }}
 
       - name: Update Submodules to Latest Release
-        uses: microsoft/mu_devops/.github/actions/submodule-release-updater@v14.0.1
+        uses: microsoft/mu_devops/.github/actions/submodule-release-updater@v15.0.0
         with:
           GH_PAT: ${{ steps.app-token.outputs.token }}
           GH_USER: "ProjectMuBot"

.github/workflows/triage-issues.yml

@@ -23,4 +23,4 @@ jobs:
     permissions:
       issues: write
 
-    uses: microsoft/mu_devops/.github/workflows/IssueTriager.yml@v14.0.1
+    uses: microsoft/mu_devops/.github/workflows/IssueTriager.yml@v15.0.0

rust-toolchain.toml

@@ -1,5 +1,5 @@
 [toolchain]
-channel = "1.84.0"
+channel = "1.85.0"
 
 [tools]
 cargo-make = "0.37.24"