What's Changed

Sbsa: Carve Out MM Comm Buffer Into Reserved HOB @os-d (#1418)
Change Details
## Description
The latest ArmMmCommunicationDxe, pulled in with the new basecore, expects that the MM Comm Buffer region is either not produced in a HOB or is in a reserved HOB. SBSA was producing it in a system memory HOB. As such, it was failing in that driver.

This updates SBSA to produce a reserved HOB and split up the system memory HOB.

It also updates the cacheability of this region to be WB, as it did not need to be WC.

Note, this only contains one of the commits from patina-qemu because the change to map all MMIO in resource descriptor HOBs was not brought here.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

No longer hits assert.

Integration Instructions

N/A.
```
  </blockquote>
  <hr>
</details>
```

Update MU\_BASECORE to v2025110001.0.8 @Flickdm (#1412)
Change Details
Description

Update MU_BASECORE submodule to pick up CryptoPkg OneCrypto external dependency update to v1.0.1.

For details on how to complete these options and their meaning refer to CONTRIBUTING.md.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Locally and on Physical Platforms - Expectation is that the Crypto Unit Tests which have already been successful on the library implementations is also successful on the binaries thus proving the integration is successful

Integration Instructions

<Describe how these changes should be integrated. Use N/A if nothing is required.>
```
  </blockquote>
  <hr>
</details>
```

Fixing intermittent QEMU launching failure @kuqin12 (#1409)
Change Details
## Description
There have been intermittent pipeline failures on QEMU launching instances.

The theory is that multiple github action could be run on the same agent, which will clash with the other session in terms of the port number.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

This was tested locally and does not redirect the serial logs to port 50001.

Integration Instructions

N/A

[SBSA] Update basecore with new TPM revision @kuqin12 (#1408)
Change Details
## Description
The TPM over FFA ACPI table change in BASECORE needs to pair up with the new revision from the platform side.

This change updates the BASECORE and update the table revision value to 5 for SBSA. A few integration errors were also fixed to ensure the FFA ACPI driver to load properly without excessive logs.

For details on how to complete these options and their meaning refer to CONTRIBUTING.md.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

This was tested locally with a TPM enabled SBSA build and verified the system booted to UEFI shell.

Integration Instructions

N/A
```
  </blockquote>
  <hr>
</details>
```

platform-ci: Set FW Run timeout @Javagedes (#1392)
Change Details
## Description
Unlike azure pipelines, github workflows appear to have a 6 hour runtime limit for any given job. This commit adds a 15 minute timeout for platform flashing and booting to shell (and running tests) so the workflow does not stall for 6 hours when we freeze.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

N/A

Integration Instructions

N/A
```
  </blockquote>
  <hr>
</details>
```

Fix file\_regex for QEMU SBSA @kuqin12 (#1389)
Change Details
## Description
The file regex recently changed for SBSA caused the test apps not running due to the target folder being wrong.

For details on how to complete these options and their meaning refer to CONTRIBUTING.md.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

This was tested on QEMU SBSA and fixed the test app not running issue.

Integration Instructions

N/A
```
  </blockquote>
  <hr>
</details>
```

QemuSbsaPkg: Add toggle for Windows support (#223) @Javagedes (#1388)
Change Details
## Description
When HAF / TF-A source code is updated, there is a period of at least one commit where the source code and binary external dependency are out of sync. In this scenario, the platform must compile the HAF / TF-A binaries locally, otherwise unexpected behavior may occur.

This commit enforces that requirement with the caveat that building HAF / TF-A is not supported on windows, so we instead log a warning and abort the build.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Ran CI with HAF_TFA_EXTDEP_BINS_CURRENT set to True and False to ensure builds are aborted when expected and fully executed otherwise.

Integration Instructions

N/A
```
  </blockquote>
  <hr>
</details>
```

Platforms: Wire up OneCrypto binary drivers @Flickdm (#1278)
Change Details
## Description
This pull request migrates the QemuQ35Pkg and QemuSbsaPkg platforms from the BaseCryptLibOnProtocolPpi drivers to the new OneCrypto drivers and libraries for DXE and StandaloneMM phases, while maintaining BaseCryptLibOnProtocolPpi for PEI where required. The changes update both .dsc and .fdf files to use the new OneCrypto binaries, adjust library class assignments, and ensure unit test coverage. This improves cryptographic implementation consistency and prepares the platforms for future enhancements.

Migration to OneCrypto drivers and libraries:
- Replaced BaseCryptLibOnProtocolPpi driver includes with OneCrypto driver binaries in the DXE and StandaloneMM sections of QemuQ35Pkg.fdf and QemuSbsaPkg.fdf, adding the appropriate INF entries for OneCrypto loaders and binaries.
- Updated .dsc files (QemuQ35PkgCommon.dsc.inc, QemuSbsaPkg.dsc) to assign BaseCryptLib and TlsLib to OneCrypto-backed implementations for DXE, RuntimeDXE, and StandaloneMM phases; PEI continues to use BaseCryptLibOnProtocolPpi
Configuration and build system updates:
- Changed crypto service and architecture variables in platform .dsc files to disable BaseCryptLibOnProtocolPpi for DXE and StandaloneMM phases, reflecting the switch to OneCrypto.
Component and unit test integration:
- Added OneCrypto binary drivers to the [Components] section of .dsc files, with debug print level configuration.
- Updated unit test build sections to use the OneCrypto-backed BaseCryptLib for test applications.
  For details on how to complete these options and their meaning refer to CONTRIBUTING.md.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Ran the BaseCryptLibUnitTests
```
python Platforms/QemuQ35Pkg/PlatformBuild.py TARGET=DEBUG EMPTY_DRIVE=TRUE BLD_*_QEMU_CORE_NUM=4 QEMU_KVM=TRUE FILE_REGEX=*BaseCryptLibUnitTestApp*.efi RUN_TESTS=TRUE TOOL_CHAIN_TAG=GCC5
```
Booted to Windows
```
python Platforms/QemuQ35Pkg/PlatformBuild.py TARGET=DEBUG BLD_*_QEMU_CORE_NUM=4 QEMU_KVM=TRUE TOOL_CHAIN_TAG=GCC5 PATH_TO_OS=ValidationOS.qcow2 --FlashOnly
```
Integration Instructions

N/A
```
  </blockquote>
  <hr>
</details>
```

Logical Secure Partition Patch Update @Raymond-MS (#1379)
Change Details
## Description
Update the LSP patch to hard code the TPM service UUID rather than use the byte swapping method. This was causing issues on patina-qemu as the bytes would show up differently and the communication between the LSP and the TPM service would fail.

For details on how to complete these options and their meaning refer to CONTRIBUTING.md.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Built QEMU SBSA with TPM enabled. Verified TPM communication and boot to UEFI shell.

Integration Instructions

N/A
```
  </blockquote>
  <hr>
</details>
```

Global: Update to New FltUsedLib Location @os-d (#1382)
Change Details
## Description
FltUsedLib has been moved to MsCorePkg. Update accordingly.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

N/A.

Integration Instructions

N/A.
```
  </blockquote>
  <hr>
</details>
```

QemuSbsaPkg: Update RT Code bucket and Disable Mem Type Info Reset [Rebase \& FF] @makubacki (#1371)
Change Details
## Description
Two memory type info related changes for SBSA.

QemuSbsaPkg: Update RT Code bucket

Currently memory type info causes resets because the RT Code bucket is too small. Current value is 0x300 needed value is 0x425, this provides some buffer at 0x450.

Disable Memory Type Information Change Reset

Memory Type Information sets the size of memory buckets used for
runtime memory types for S4 memory map stability. The actual values
are platform-specific based on allocations of those memory types
cumulatively performed by the platform firmware.

The reset helps maintain a consistent runtime memory map across S4
resume in the field but it is not a very effective method for
detecting runtime memory map changes as they resets often go unnoticed
and the reset extends CI boot time until the reset is noticed.

This change removes the reset for SBSA since PEI is being removed
and the memory map is expected to be stable across S4 resume without
the reset. A future mechanism to detect bucket size changes is being
tracked in mu_basecore.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested
- QemuSbsaPkg boot to EFI shell
  - No memory type info reset after change
Integration Instructions
- N/A

.azurepipelines: de-duplicate Platform Build CI @Javagedes (#1366)
Change Details
## Description
This commit removes some jobs from the job matrix for GCC and VS azure pipelines as they have been effectively replaced by the platform-ci.yml github workflow.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

N/A

Integration Instructions

N/A
```
  </blockquote>
  <hr>
</details>
```

.github: Add Platform Build CI workflow @Javagedes (#1363)
Change Details
## Description
Adds a new github workflow to build and run Q35 / SBSA.

The current matrix has temporary exclude filters on the job matrix while some issues are actively being resolved.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

CI

Integration Instructions

N/A
```
  </blockquote>
  <hr>
</details>
```

Update submodules @apop5 (#1364)
Change Details
Description

Update mu_basecore from v2025110000.0.0 to v2025110000.0.3
Update mm_supv from v23.0.0 to v23.0.1
Update mu_plus from v2025110000.0.0 to v2025110000.0.2
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Booted Q35, Booted Sbsa

Integration Instructions

No integration necessary.

QemuSbsa Binary Updates @Raymond-MS (#1354)
Change Details
## Description
Updated the pipeline Release.yml to disable building the Hafnium and TF-A binaries. Updated the QemuSbsa platform binaries to point to the updated Hafnium and TF-A binaries released from v12.0.1.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Built QemuSbsa with HAF_TFA_BUILD=TRUE and HAF_TFA_BUILD=FALSE.

Integration Instructions

N/A

⚠️ Breaking Changes

Remove QEMU\_CORE\_NUM support for SBSA as it is hardcoded anyway @kuqin12 (#1393)
Change Details
## Description
Current CI builds and PR gates are failing because of a fix to re-enable the test app runs.

This surfaced an issue that MP test is broken on SBSA, where the MP service will rely on the hardcoded library to perform initialization, which will perceive itself being a 256-core system. This causes the MP test to fail when the core number option is not 4.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

This was tested on QEMU SBSA and passed the test locally.

Integration Instructions

BLD_*_QEMU_CORE_NUM no longer works on SBSA.

🐛 Bug Fixes

QemuQ35Pkg: drop stale Tpm2DebugLib mapping (fixes TPM\_ENABLE=TRUE bu… @scottsh (#1427)
Change Details
Fixes #1426
Description

Building QemuQ35Pkg with BLD_*_TPM_ENABLE=TRUE failed because QemuQ35PkgCommon.dsc.inc mapped the Tpm2DebugLib library class to SecurityPkg/Library/Tpm2DebugLib/Tpm2DebugLibSimple.inf, but that class and its INF were removed from MU_BASECORE (absent as of v2025110001.x). No module in the platform consumes the class, so the mapping is vestigial.

Because the referenced INF path does not exist on disk, the failure surfaces in the OverrideValidation prebuild plugin: get_dsc_inf_list() enumerates dscp.Libs (including this mapping), GetAbsolutePathOnThisSystemFromEdk2RelativePath() returns None for the missing INF, and that None is passed into override_detect_process() (os.path.normpath(None)), crashing the prebuild. Default CI does not hit this because TPM_ENABLE defaults to FALSE. The failure is target-independent: TARGET=RELEASE and TARGET=DEBUG fail identically.

Remove the dead mapping (no replacement needed; the class has no consumers, so no instance is required). Validated: Override/Deprecation Validation runs cleanly and full GCC5/X64 builds succeed for both DEBUG and RELEASE with TPM_ENABLE=TRUE. The DEBUG firmware was further booted under QEMU with an swtpm vTPM: PEI TPM2Startup success, PCR banks reallocated to SHA256, and DXE Tcg2Dxe installs Tcg2Protocol and measures PCR7 (SecureBoot/PK/KEK/db/dbx) with no asserts.

For details on how to complete these options and their meaning refer to CONTRIBUTING.md.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested
- Full build succeeds: Q35TPM_RC=0, 0204 Images Verified, Summary: Success (~17 min). Tcg2Pei, Tcg2Dxe, Tcg2ConfigPei all build.
- Booted headless under QEMU with an swtpm vTPM: PEI TPM2Startup: TPM_RC_SUCCESS, PCR banks reallocated to SHA256; DXE Tcg2Dxe installs Tcg2Protocol and measures PCR7 (SecureBoot/PK/KEK/db/dbx) and PCR1 (boot vars); boot reaches BDS with no asserts.
Integration Instructions

N/A
```
  </blockquote>
  <hr>
</details>
```

Remove QEMU\_CORE\_NUM support for SBSA as it is hardcoded anyway @kuqin12 (#1393)
Change Details
## Description
Current CI builds and PR gates are failing because of a fix to re-enable the test app runs.

This surfaced an issue that MP test is broken on SBSA, where the MP service will rely on the hardcoded library to perform initialization, which will perceive itself being a 256-core system. This causes the MP test to fail when the core number option is not 4.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

This was tested on QEMU SBSA and passed the test locally.

Integration Instructions

BLD_*_QEMU_CORE_NUM no longer works on SBSA.

📖 Documentation Updates

TPM Updates for Q35 \& SBSA Including TpmShellApp @Raymond-MS (#1423)
Change Details
## Description
Updating platform level to re-enable TPM on Q35. Add TpmShellApp support for both Q35 and SBSA. Updated the platform to include mapping the CRB region for Q35. Updated the QemuRunner for Q35 to include automatically setting up and running the swtpm. Updated the OemPkg/DeviceBootManagerLib to set up the physical presence variables which are used in the TpmShellApp when attempting to activate PCR banks. Added documentation regarding the TPM on Q35 and SBSA as well as a document about the TpmShellApp and its use on both platforms. Updated the ACPI NV Reclaim memory to support the TPM on Q35. Added a CI workflow to build and run Q35 with the TPM enabled.
- Impacts functionality?
- Impacts security?
- Breaking change?
- Includes tests?
- Includes documentation?
How This Was Tested

Built both QEMU Q35 and SBSA with TPM enabled (TPM2_ENABLE -> Q35 & TPM_ENABLE -> SBSA). Verified TPM functionality. Verified TpmShellApp functionality.

Integration Instructions

N/A

🛠️ Submodule Updates

Bump MU\_BASECORE from 2025110001.0.11 to 2025110002.0.1 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1431)
Change Details
Bumps MU_BASECORE from `2025110001.0.11` to `2025110002.0.1`
Introduces 27 new commits in MU_BASECORE.
Commits
- cd8fb3 [CHERRY-PICK] MdePkg/BaseLib: Add AsmReadFsBase and AsmWriteFsBase for X86-64
- 0749d6 [CHERRY-PICK] MdeModulePkg: Add platform limit for size in Resizable BAR
- 7ceb28 Revert "ArmPkg: MmCommunicationDxe: Fix Comm Buffer Init"
- 1cd3cd [CHERRY-PICK] ArmPkg: MmCommunicationDxe: Fix Comm Buffer Init
- 08e374 [CHERRY-PICK] .pytool, MdePkg: MSVC/CLANGPDB AARCH64 Use AAPCS64 ABI for VA_LIST
- 84c9fd [release/202511] Update BaseTools ext dep to v2025110001.0.11 (#1806)
- b48ef8 Revert "Update memory map descriptor merging logic to honor the bucket type information (#1429)"
- e248a9 MdeModulePkg: Consolidate Memory Bin Logic
- 906650 MdeModulePkg: MemoryBin: Allocate Bins Contiguously
- 8bc20a MdeModulePkg: MemoryBin: Use CalculateTotalMemoryBinSizeNeeded()
- c2a07d MdeModulePkg: MemoryBin: Add DefaultBin Field to Stats
- bd8c2b MdeModulePkg: MemoryBin: Add Bin Resource Desc Hob Generation
- ae6343 MdeModulePkg: PeiCore: Add Memory Bin Support to Post-Mem PEI
- 59002d MdeModulePkg: DxeCore: Update Memory Statistics from PEI
- d21022 MdeModulePkg: MemoryBins: Add GoogleTest and README
- 2c8714 Revert "[CHERRY-PICK] MdeModulePkg/VariableSmmRuntimeDxe: Fix EFI_UNSUPPORTED leak (#1668)"
- 4592e2 Revert "MdeModulePkg/Variable: Add PCD to control RT cache allocation (#1588)"
- 723d0a Revert "MdeModulePkg/VariableSmmRuntimeDxe: Disable var RT cache on alloc failure"
- 614b36 Revert "MdeModulePkg/Variable: Move RT cache buffer allocation to DXE"
- 6f3ab7 [Cherry-Pick] MdeModulePkg: StatusCodeHandler Stmm remove assert
- bf3ee1 Revert "Move STATIC_ASSERT abstraction to common file for BaseTools usage"
- a916a3 Revert "Add CPU_INFORMATION_HEADER struct to STM_HEADER"
- 8e32d0 Revert "BaseTools: Add GenStm"
- 3a0a42 [CHERRY-PICK] BaseTools: Add CLANG support to Edk2ToolsBuild.py
- e18ece [CHERRY-PICK] BaseTools: Edk2BaseToolsBuild.py: Clean Before Building on Windows
- f26571 BaseTools: Add GenStm
- b2c598 [CHERRY-PICK] MdeModulePkg/Library: introduce ArmFfaConsoleDebugLib
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump Common/MU from 2025110000.0.4 to 2025110001.0.0 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1432)
Change Details
Bumps Common/MU from `2025110000.0.4` to `2025110001.0.0`
Introduces 12 new commits in Common/MU.
Commits
- 4eda6c Repo File Sync: Update robinraju/release-downloader from v1.12 to v1.13 (#880)
- 2dd94f Delete HelloWorldRustDxe Component (#882)
- 1d1b4d AdvLoggerPkg/AdvancedLoggerLib: Print to HW if logger info is not available (#876)
- 1d68de Migrate mu_plus from mu_uefi_boot_services crate to patina crate (#881)
- 4b08ed Repo File Sync: Update mu_devops to v18.0.6 (#884)
- 186583 AdvancedLoggerPkg/MmCoreArm: Initialize LoggerInfo if not already set by earlier firmware phase (#886)
- 24954e Fix SWM init retry when SRE is not ready (#888)
- 3e0556 Fix missing UefiLib dependency in MfciPolicyParsingUnitTestApp (#887)
- 153d5c pip: bump regex from 2026.4.4 to 2026.5.9 in the all-pip-dependencies group (#889)
- 54e563 UefiHidDxeV2: Add keystroke repeat functionality (#883)
- f72b73 Migrate to R-EFI 6.0 (#892)
- f7c042 Optimize WHEA UEFI shell test (#893)
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump Common/MU\_OEM\_SAMPLE from 2025110000.0.1 to 2025110000.0.2 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1424)
Change Details
Bumps Common/MU_OEM_SAMPLE from `2025110000.0.1` to `2025110000.0.2`
Introduces 9 new commits in Common/MU_OEM_SAMPLE.
Commits
- 7203d8 Repo File Sync: pull-request-validator: update comment if exists (#348)
- a9d0a3 pip: bump edk2-pytool-library to 0.23.13, regex to 2026.4.4 (#349)
- 10e0aa Repo File Sync: ClangPDB CI workflow updates (#351)
- 1b2c46 Repo File Sync: Update Pr Validation from actions/github-script@v8 to actions/github-script@v9 (#352)
- 4bb6a8 pip: bump pygount from 3.1.1 to 3.2.0 (#353)
- ff4fc6 Repo File Sync: Update robinraju/release-downloader from v1.12 to v1.13 (#355)
- 20c673 Repo File Sync: Update mu_devops to v18.0.6 (#356)
- 6ef10c pip: bump regex from 2026.4.4 to 2026.5.9 (#357)
- 2135f5 OemPkg: Physical Presence Variable Update (#358)
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump Features/FFA from 0.1.5 to 0.1.7 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1420)
Change Details
Bumps Features/FFA from `0.1.5` to `0.1.7`
Introduces 12 new commits in Features/FFA.
Commits
- 50223d Repo File Sync: Add extra_steps parameter to MuDevOpsWrapper.yml (#110)
- 42c29d Repo File Sync: Group Dependabot Prs and update to create-github-app-token@v3 (#112)
- 91c9b8 Global: Reduce the direct pip requirements (#114)
- 36a8c9 Repo File Sync: Update to Mu DevOps v18.0.4 (#115)
- 7af010 pip: bump the edk2-pytool-library, edk2-pytool-extension and regex
- e8f0b1 Repo File Sync: pull-request-validator: update comment if exists (#117)
- e29a60 pip: bump edk2-pytool-library to 0.23.13, regex to 2026.4.4 (#118)
- 0f3cbc Repo File Sync: Update Pr Validation from actions/github-script@v8 to actions/github-script@v9 (#120)
- 69995a Repo File Sync: Update mu_devops to v18.0.6 (#121)
- 2d29e8 pip: bump regex from 2026.4.4 to 2026.5.9 (#122)
- cc2a41 RUST SP Updates + Cargo.toml Update (#123)
- 42c9ef Test Notification Service Update/Fix (#124)
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump MU\_BASECORE from 2025110001.0.10 to 2025110001.0.11 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1417)
Change Details
Bumps MU_BASECORE from `2025110001.0.10` to `2025110001.0.11`
Introduces 2 new commits in MU_BASECORE.
Commits
- 551967 [release/202511] Update BaseTools ext dep to v2025110001.0.9 (#1800)
- 1800e6 ArmPkg: MmCommunicationDxe: Fix Comm Buffer Init
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump MU\_BASECORE from 2025110001.0.8 to 2025110001.0.10 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1415)
Change Details
Bumps MU_BASECORE from `2025110001.0.8` to `2025110001.0.10`
Introduces 5 new commits in MU_BASECORE.
Commits
- 195f6d [DROP ON REBASE] Revert "[CHERRY-PICK] SecurityPkg: Tcg2AcpiFfa: Polish revision checks for TPM2 table"
- 157501 [DROP ON REBASE] Revert "[CHERRY-PICK] SecurityPkg: Tcg2AcpiFfa: Fix endianness of partition ID"
- 22ed23 [DROP ON REBASE] SecurityPkg: Tcg2AcpiFfa: Fix endianness of partition ID
- 07ff0d [DROP ON REBASE] SecurityPkg: Tcg2AcpiFfa: Polish revision checks for TPM2 table
- a7fa5a [SQUASH ON REBASE] ArmPlatformPkg: MemoryInitPeiLib: Fix V2 HOB Attribute
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump Features/MM\_SUPV from 23.0.2 to 23.0.3 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1416)
Change Details
Bumps Features/MM_SUPV from `23.0.2` to `23.0.3`
Introduces 15 new commits in Features/MM_SUPV.
Commits
- 7ba09b Repo File Sync: pull-request-validator: update comment if exists (#635)
- 85382a pip: bump edk2-pytool-library to 0.23.13 (#637)
- 720f52 .pytool: Add PR Eval support (#640)
- 692a7d Repo File Sync: Update Pr Validation from actions/github-script@v8 to actions/github-script@v9, add ClangPdb CI (#639)
- 5462ca SeaPkg\SeaResponderReport: Initialize variable before use
- 685922 SeaPkg: Update mbedtls to v3.6.5
- 6185f7 SeaPkg\Stm: Add buildoptions for ClangPdb
- 499c08 SeaPkg\SimpleMemoryAllocationLib: Add missing functions.
- af639c pip: bump pygount from 3.1.1 to 3.2.0 (#641)
- 1c0726 MmSupervisorPkg: Core: Return status value from SaveStateRead2 (#644)
- c48511 Repo File Sync: Update robinraju/release-downloader from v1.12 to v1.13 (#645)
- 4efe74 MmSupervisorPkg: Update MmiHandlerProfileInfo hash (#648)
- 59e662 Update MM Supervisor version to 23.0.3 (#647)
- cb61da Repo File Sync: Update mu_devops to v18.0.6 (#649)
- 7d3510 Bump `MessageLength` to buffer size for supervisor communications (#650)
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump MU\_BASECORE from 2025110001.0.6 to 2025110001.0.7 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1410)
Change Details
Bumps MU_BASECORE from `2025110001.0.6` to `2025110001.0.7`
Introduces 3 new commits in MU_BASECORE.
Commits
- 7134d0 [CHERRY-PICK] MdePkg: Add PCIe capability structures for DPC and DLF
- 438654 MdeModulePkg: DxeIplPeim Move Decompress to MsCorePkg/Core/GuidedSectionExtractPeim (#1792)
- 6f6a7c [release/202511] Update BaseTools ext dep to v2025110001.0.6 (#1789)
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump Common/MU from 2025110000.0.3 to 2025110000.0.4 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1401)
Change Details
Bumps Common/MU from `2025110000.0.3` to `2025110000.0.4`
Introduces 10 new commits in Common/MU.
Commits
- 1931cf Repo File Sync: pull-request-validator: update comment if exists (#862)
- 7c8cc8 .github: Add Mu PR Validation workflow (#865)
- f3a8e8 mu-pr-validation-pending.yml: Temporarily disable commit status updates (#870)
- fb02a7 MsGraphicsPkg/SwmDialogsLib: Show OSK after dialog rendering completes (#866)
- 090bb1 Skip Mu PR validation for PRs targeting non-default branches (#872)
- 10b70d pip: bump edk2-pytool-library to 0.23.13, regex to 2026.4.4 (#867)
- 171671 Repo File Sync: Update Pr Validation from actions/github-script@v8 to actions/github-script@v9 (#874)
- 15783c GitHub Action: Update mu-pr-validation workflow to use actions/github-script 9 (#873)
- 87ab47 pip: bump pygount from 3.1.1 to 3.2.0 (#875)
- db8020 AdvLoggerPkg: Drop buffer migration (#868)
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump MU\_BASECORE from 2025110001.0.1 to 2025110001.0.2 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1386)
Change Details
Bumps MU_BASECORE from `2025110001.0.1` to `2025110001.0.2`
Introduces 1 new commits in MU_BASECORE.
Commits
- 817898 [Cherry-Pick] BaseTools: Only check for GCC prefixes when targeting
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump MU\_BASECORE from 2025110001.0.0 to 2025110001.0.1 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1383)
Change Details
Bumps MU_BASECORE from `2025110001.0.0` to `2025110001.0.1`
Introduces 1 new commits in MU_BASECORE.
Commits
- 919765 UefiCpuPkg: ArmMmuLib: Check if Block Split Following Page Alloc
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump Features/MM\_SUPV from 23.0.1 to 23.0.2 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1381)
Change Details
Bumps Features/MM_SUPV from `23.0.1` to `23.0.2`
Introduces 4 new commits in Features/MM_SUPV.
Commits
- b8eca8 Repo File Sync: Update to Mu DevOps v18.0.4 (#631)
- 3fea41 pip: bump the edk2-pytool-library, edk2-pytool-extension (#634)
- 737947 MmSupervisorPkg: Additional IDT creation update (#633)
- 4f6869 Do not include zeroed data in aux file (#518)
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump MU\_BASECORE from 2025110000.0.4 to 2025110000.0.5 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1368)
Change Details
Bumps MU_BASECORE from `2025110000.0.4` to `2025110000.0.5`
Introduces 4 new commits in MU_BASECORE.
Commits
- 6dcd36 NetworkPkg/Dhcp6Dxe: Prevent potential infinite hang in EfiDhcp6Stop() (#1722)
- dc5a5b [Cherry-Pick] Revert "MdeModulePkg/PciBusDxe: Degrade MEM64 to PMEM64..."
- 72bc4b MdeModulePkg: PciBusDxe: Degrade MEM64 to PMEM64 when bridge lacks MEM64
- ad7b24 CryptoPkg: Add OneCrypto binary external dependency
Signed-off-by: Project Mu Bot mubot@microsoft.com

Bump MU\_BASECORE from 2025110000.0.3 to 2025110000.0.4 @[mu-automation[bot]](https://github.com/apps/mu-automation) (#1367)
Change Details
Bumps MU_BASECORE from `2025110000.0.3` to `2025110000.0.4`
Introduces 10 new commits in MU_BASECORE.
Commits
- 7e09c4 [release/202511] Update BaseTools ext dep to v2025110000.0.2 (#1713)
- e0ab04 BaseTools: Prevent Subsection PCDs from polluting global expressions
- c79a0f [Cherry-Pick] MdePkg/BaseFdtLib: Implement new libfdt wrappers
- 8d9ab0 [Cherry-Pick] MdePkg/BaseFdtLib: FdtGetName, FdtGetPath
- 90d342 [Cherry-Pick] MdePkg/BaseFdtLib: Header style update to FdtOverlayApply and
- 10eba6 [Cherry-Pick] MdePkg: Ignore FdtLib.h for ECC
- 1f8055 Global: Remove backport workflow. (#1719)
- 5989ad GitHub Action: Bump create-github-app-token from 2 to 3, actions/setup-python from 5 to 6
- 5192ac [CHERRY-PICK] BaseTools: Suppress C4028 warning to support older VS toolchain builds
- 3f409b [CHERRY-PICK] BaseTools: Enable control flow guard for Windows builds
Signed-off-by: Project Mu Bot mubot@microsoft.com

Full Changelog: v12.0.1...v13.0.0

v13.0.0

What's Changed

How This Was Tested

Integration Instructions

Description

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Ran the BaseCryptLibUnitTests

Booted to Windows

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

Description

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

⚠️ Breaking Changes

How This Was Tested

Integration Instructions

🐛 Bug Fixes

Description

How This Was Tested

Integration Instructions

How This Was Tested

Integration Instructions

📖 Documentation Updates

How This Was Tested

Integration Instructions

🛠️ Submodule Updates

Contributors

Uh oh!