Merge main into live

.github/CODEOWNERS

@@ -0,0 +1,5 @@
+# Any repo changes beyond docs require PM owner approval.
+*                         @localden @jmprieur
+
+# Conceptual and API content needs the review of the engineering team.
+msal-go/*    @MicrosoftDocs/identity-sdk-cca-engineering-team

.github/policies/auto-merge.yml

@@ -0,0 +1,47 @@
+id:
+name: GitOps.PullRequestIssueManagement
+description: GitOps.PullRequestIssueManagement primitive
+owner:
+resource: repository
+disabled: false
+where:
+configuration:
+  resourceManagementConfiguration:
+    eventResponderTasks:
+    - description: Approve and auto-squash-merge bot PRs to main labeled 'auto-merge'
+      triggerOnOwnActions: true
+      if:
+        - payloadType: Pull_Request
+        - labelAdded:
+            label: ':octocat: auto-merge'
+        - targetsBranch:
+            branch: main
+        - isActivitySender:
+            user: microsoft-github-policy-service[bot]
+      then:
+        - enableAutoMerge:
+            mergeMethod: Squash
+        - approvePullRequest:
+            comment: "Approved; this PR will merge when all status checks pass."
+
+    - description: Auto-merge policy service bot PRs to live labeled 'auto-merge'
+      triggerOnOwnActions: true
+      if:
+        - payloadType: Pull_Request
+        - labelAdded:
+            label: ':octocat: auto-merge'
+        - targetsBranch:
+            branch: live
+        - isActivitySender:
+            user: microsoft-github-policy-service[bot]
+      then:
+        - enableAutoMerge:
+            mergeMethod: Merge
+
+    - description: Don't auto-merge PRs with 'auto-merge' label removed
+      if:
+        - payloadType: Pull_Request
+        - labelRemoved:
+            label: ':octocat: auto-merge'
+      then:
+        - disableAutoMerge

.github/policies/label-new-issues.yml

@@ -0,0 +1,18 @@
+id:
+name: GitOps.PullRequestIssueManagement
+description: GitOps.PullRequestIssueManagement primitive
+owner:
+resource: repository
+disabled: false
+where:
+configuration:
+    resourceManagementConfiguration:
+        eventResponderTasks:
+            - description: Add untriaged label to new issues
+              if:
+                  - payloadType: Issues
+                  - isAction:
+                        action: Opened
+              then:
+                  - addLabel:
+                        label: untriaged

.github/policies/scheduled-prod-sync.yml

@@ -0,0 +1,43 @@
+name: GitOps.PullRequestIssueManagement - Scheduled PRs
+description: Creates pull requests on a schedule
+resource: repository
+
+where:
+configuration:
+  resourceManagementConfiguration:
+    scheduledSearches:
+    - description: Push to live branch (scheduled 11AM PT publish)
+      frequencies:
+      - daily:
+          time: 18:00
+      filters: []
+      actions:
+      - createPullRequest:
+          head: main
+          base: live
+          title: Merge main into live
+          body: Automated merge of the main branch into live.
+
+    - description: Push to live branch (scheduled 7PM PT publish)
+      frequencies:
+      - daily:
+          time: 2:00
+      filters: []
+      actions:
+      - createPullRequest:
+          head: main
+          base: live
+          title: Merge main into live
+          body: Automated merge of the main branch into live.
+
+    - description: Push to live branch (scheduled 3AM PT publish)
+      frequencies:
+      - daily:
+          time: 10:00
+      filters: []
+      actions:
+      - createPullRequest:
+          head: main
+          base: live
+          title: Merge main into live
+          body: Automated merge of the main branch into live.

.github/policies/scheduled-stage-sync.yml

@@ -0,0 +1,43 @@
+name: GitOps.PullRequestIssueManagement - Scheduled PRs
+description: Creates pull requests on a schedule
+resource: repository
+
+where:
+configuration:
+  resourceManagementConfiguration:
+    scheduledSearches:
+    - description: Push to main branch (scheduled 10AM PT publish)
+      frequencies:
+      - daily:
+          time: 17:00
+      filters: []
+      actions:
+      - createPullRequest:
+          head: smoke-test
+          base: main
+          title: Merge smoke-test into main
+          body: Automated merge of the smoke-test branch into main.
+
+    - description: Push to main branch (scheduled 6PM PT publish)
+      frequencies:
+      - daily:
+          time: 1:00
+      filters: []
+      actions:
+      - createPullRequest:
+          head: smoke-test
+          base: main
+          title: Merge smoke-test into main
+          body: Automated merge of the smoke-test branch into main.
+
+    - description: Push to main branch (scheduled 2AM PT publish)
+      frequencies:
+      - daily:
+          time: 9:00
+      filters: []
+      actions:
+      - createPullRequest:
+          head: smoke-test
+          base: main
+          title: Merge smoke-test into main
+          body: Automated merge of the smoke-test branch into main.

.github/policies/stale-issues.yml

@@ -0,0 +1,21 @@
+name: Stale issues
+description: Close needs-more-info issues that haven't had a response in 14 days
+resource: repository
+where:
+configuration:
+    resourceManagementConfiguration:
+        scheduledSearches:
+          - frequencies:
+            - daily:
+                time: 12:00
+            filters:
+              - isIssue
+              - isOpen
+              - hasLabel:
+                  label: needs-more-info
+              - noActivitySince:
+                  days: 14
+            actions:
+              - addReply:
+                  reply: This issue has been automatically closed due to no response from the original author. Feel free to reopen it if you have more information that can help us investigate the issue further.
+              - closeIssue

.github/policies/tag-automatic-pr.yml

@@ -0,0 +1,39 @@
+id:
+name: GitOps.PullRequestIssueManagement
+description: GitOps.PullRequestIssueManagement primitive
+owner:
+resource: repository
+disabled: false
+where:
+configuration:
+  resourceManagementConfiguration:
+    eventResponderTasks:
+    - description: Sync API docs to staging
+      triggerOnOwnActions: true
+      if:
+      - payloadType: Pull_Request
+      - isAction:
+          action: Opened
+      - isActivitySender:
+          user: microsoft-github-policy-service[bot]
+      - titleContains:
+          pattern: Merge smoke-test into main
+          isRegex: False
+      then:
+      - addLabel:
+          label: ':octocat: auto-merge'
+
+    - description: Sync staging to production
+      triggerOnOwnActions: true
+      if:
+      - payloadType: Pull_Request
+      - isAction:
+          action: Opened
+      - isActivitySender:
+          user: microsoft-github-policy-service[bot]
+      - titleContains:
+          pattern: Merge main into live
+          isRegex: False
+      then:
+      - addLabel:
+          label: ':octocat: auto-merge'

.github/workflows/linkchecker.yml

@@ -0,0 +1,34 @@
+name: Validate existing links
+
+on:
+  push:
+  repository_dispatch:
+  workflow_dispatch:
+  schedule:
+    - cron: "00 18 * * *"
+
+jobs:
+  linkChecker:
+    permissions:
+      contents: write
+      issues: write
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Link Checker
+        id: lychee
+        uses: lycheeverse/lychee-action@master
+        env:
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+        with:
+          args: --accept=200,429,403,502,503 --verbose --no-progress './**/*.md'
+          fail: true
+
+      - name: Create Issue From File
+        if: always() && env.lychee_exit_code != 0 && github.event_name != 'pull_request'
+        uses: peter-evans/create-issue-from-file@main
+        with:
+          title: Link Checker Report
+          content-filepath: ./lychee/out.md
+          labels: report, automated issue

.lycheeignore

@@ -0,0 +1,11 @@
+https://aka.ms/msal/estsr/guidance
+xref:.*
+https://go.microsoft.com/fwlink/\?linkid=2083908
+https://endpoint.microsoft.com.*
+https://portal.azure.com.*
+https://account.microsoft.com.*
+https://azure.microsoft.com/overview/azure-stack.*
+https://azure.microsoft.com/products/kubernetes-service.*
+github.com/AzureAD/microsoft-authentication-library-for-go/apps/public
+http://localhost:port
+file:///home/runner/work/microsoft-authentication-library-for-go/microsoft-authentication-library-for-go/msal-go/packages/public/http:/localhost:port

README.md

@@ -1,31 +1,29 @@
+# Microsoft Authentication Library (MSAL) for Go
 
-# Contributing
+[![Validate existing links](https://github.com/MicrosoftDocs/microsoft-authentication-library-for-go/actions/workflows/linkchecker.yml/badge.svg)](https://github.com/MicrosoftDocs/microsoft-authentication-library-for-go/actions/workflows/linkchecker.yml)
 
-This project welcomes contributions and suggestions.  Most contributions require you to agree to a
-Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us
-the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.
+This is the **documentation repository** for Microsoft Authentication Library (MSAL) for Go.
 
-When you submit a pull request, a CLA bot will automatically determine whether you need to provide
-a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions
-provided by the bot. You will only need to do this once across all repos using our CLA.
+| Resource                     | Location   |
+|:-----------------------------|:-----------|
+| ✅ **SDK Repository**           | [`AzureAD/microsoft-authentication-library-for-go`](https://github.com/AzureAD/microsoft-authentication-library-for-go) |
+| ✅ **SDK Package**              | [`AzureAD/microsoft-authentication-library-for-go`](https://github.com/AzureAD/microsoft-authentication-library-for-go) |
+| ✅ **SDK Documentation**        | [MSAL for Go on Microsoft Learn](https://learn.microsoft.com/entra/msal/go/) |
+| 🔒 **SDK Documentation CI Job** | N/A |
 
-This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).
-For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or
-contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additional questions or comments.
+## Contributions
+
+Contributions to our documentation are welcome. Make sure to familiarize yourself with the [Microsoft Writing Style Guide](https://learn.microsoft.com/style-guide/welcome/) and the [Contributor Guide](https://learn.microsoft.com/contribute/) before making any changes.
 
-# Legal Notices
+If you would like to author an entirely new document (e.g., for a new scenario), make sure to [open an issue](https://github.com/AzureAD/microsoft-authentication-library-for-go/issues) first. This will allow the engineering team to discuss the proposed changes and ensure that it won't be overwritten by future changes.
 
-Microsoft and any contributors grant you a license to the Microsoft documentation and other content
-in this repository under the [Creative Commons Attribution 4.0 International Public License](https://creativecommons.org/licenses/by/4.0/legalcode),
-see the [LICENSE](LICENSE) file, and grant you a license to any code in the repository under the [MIT License](https://opensource.org/licenses/MIT), see the
-[LICENSE-CODE](LICENSE-CODE) file.
+## API Documentation
 
-Microsoft, Windows, Microsoft Azure and/or other Microsoft products and services referenced in the documentation
-may be either trademarks or registered trademarks of Microsoft in the United States and/or other countries.
-The licenses for this project do not grant you rights to use any Microsoft names, logos, or trademarks.
-Microsoft's general trademark guidelines can be found at http://go.microsoft.com/fwlink/?LinkID=254653.
+**Do not** modify any XML files in the `msal-go/packages` folder - those are generated automatically from the library source code and any changes will be automatically overwritten the next time the documentation job runs.
 
-Privacy information can be found at https://privacy.microsoft.com/en-us/
+To make changes to any API docs you will need to open a pull request in the [`AzureAD/microsoft-authentication-library-for-go`](https://github.com/AzureAD/microsoft-authentication-library-for-go) repository and amend code comments.
 
-Microsoft and any contributors reserve all other rights, whether under their respective copyrights, patents,
-or trademarks, whether by implication, estoppel or otherwise.
+## Microsoft Open Source Code of Conduct
+
+This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).
+For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additional questions or comments.

msal-go/index.md

@@ -6,9 +6,9 @@ description: "An introduction to using Microsoft Authentication Library (MSAL) f
 # Microsoft Authentication Library (MSAL) for Go
 
 >[!NOTE]
-> Microsoft Authentication Library (MSAL) for Go is a new addition to the MSAL family of libraries. It has been made available in production-ready preview to gauge customer interest and to gather feedback from the community. We welcome all contributors (see [contribution guidelines in the library repository](https://github.com/AzureAD/microsoft-authentication-library-for-go/blob/dev/CONTRIBUTING.md)) to help us improve the library.
+> Microsoft Authentication Library (MSAL) for Go is a new addition to the MSAL family of libraries. It has been made available in production-ready preview to gauge customer interest and to gather feedback from the community. We welcome all contributors (see [contribution guidelines in the library repository](https://github.com/AzureAD/microsoft-authentication-library-for-go/blob/main/CONTRIBUTING.md)) to help us improve the library.
 
-The Microsoft Authentication Library (MSAL) for Go is part of the [Microsoft identity platform for developers](https://aka.ms/aaddevv2). It allows you to sign in users or apps with Microsoft identities ([Azure AD](https://azure.microsoft.com/services/active-directory/) and [Microsoft Accounts](https://account.microsoft.com)) and obtain tokens to call APIs such as [Microsoft Graph](https://graph.microsoft.io/) or your own APIs registered with the Microsoft identity platform. It is built using industry standard OAuth2 and OpenID Connect protocols.
+The Microsoft Authentication Library (MSAL) for Go is part of the [Microsoft identity platform for developers](/entra/identity-platform/v2-overview). It allows you to sign in users or apps with Microsoft identities ([Azure AD](https://azure.microsoft.com/services/active-directory/) and [Microsoft Accounts](https://account.microsoft.com)) and obtain tokens to call APIs such as [Microsoft Graph](https://graph.microsoft.io/) or your own APIs registered with the Microsoft identity platform. It is built using industry standard OAuth2 and OpenID Connect protocols.
 
 The latest code resides in the `dev` branch in the [library GitHub repository](https://github.com/AzureAD/microsoft-authentication-library-for-go).
 
@@ -81,7 +81,7 @@ Acquiring tokens with MSAL Go follows this general three step pattern. There mig
     accessToken := result.AccessToken
     ```
 
-You can view the [developer sample apps](https://github.com/AzureAD/microsoft-authentication-library-for-go/tree/dev/apps/tests/devapps) on how to use MSAL Go with various application types in various scenarios.
+You can view the [developer sample apps](https://github.com/AzureAD/microsoft-authentication-library-for-go/tree/main/apps/tests/devapps) on how to use MSAL Go with various application types in various scenarios.
 
 ## Releases