Merge pull request #25492 from microsoftgraph/surabhi-calla-windowsupdates-hotpatchupdate

Adding area for hotpatch update

Author: Lauragra

api-reference/beta/resources/windowsupdates-productrevision.md

@@ -1,7 +1,7 @@
 ---
 title: "productRevision resource type"
 description: "Represents a product revision that is associated with a quality update."
-author: "angiechen22"
+author: "Ryan-K-Williams"
 ms.localizationpriority: medium
 ms.subservice: autopatch
 doc_type: resourcePageType
@@ -23,6 +23,7 @@ When a quality update is released, it includes one or more product revisions to
 |:---|:---|:---|
 |displayName|String|The display name of the content. Read-only.|
 |id|String|The unique identifier for the product revision. Read-only.|
+|isHotpatchUpdate|Boolean|`True` indicates that the content is hotpatchable; otherwise, `false`. For more information, see [Deploy a hotpatch quality update](/graph/windowsupdates-hotpatch-update) using Windows Autopatch. Read-only.|
 |osBuild|[microsoft.graph.windowsUpdates.buildVersionDetails](../resources/windowsupdates-buildversiondetails.md)|The version details of the product revision. Read-only.|
 |product|String|The product of the revision. Possible values are: `Windows 10`, `Windows 11`. Read-only.|
 |releaseDateTime|DateTimeOffset|The release date for the content. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`. Read-only.|
@@ -50,6 +51,7 @@ The following JSON representation shows the resource type.
   "@odata.type": "#microsoft.graph.windowsUpdates.productRevision",
   "displayName": "String",
   "id": "String (identifier)",
+  "isHotpatchUpdate": "Boolean",
   "osBuild": { "@odata.type": "microsoft.graph.windowsUpdates.buildVersionDetails" },
   "product": "String",
   "releaseDateTime": "String (timestamp)",

api-reference/beta/resources/windowsupdates-qualityupdatefilter.md

@@ -0,0 +1,43 @@
+---
+title: "qualityUpdateFilter resource type"
+description: "Represents a filter to determine which quality update content matches the rule on an ongoing basis."
+author: "ryan-k-williams"
+ms.localizationpriority: medium
+ms.subservice: autopatch
+doc_type: resourcePageType
+---
+
+# qualityUpdateFilter resource type
+
+Namespace: microsoft.graph.windowsUpdates
+
+[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
+
+Represents a filter to determine which quality update content matches the rule on an ongoing basis.
+
+Inherits from [windowsUpdateFilter](../resources/windowsupdates-windowsupdatefilter.md).
+
+## Properties
+
+|Property|Type|Description|
+|:---|:---|:---|
+|cadence|microsoft.graph.windowsUpdates.qualityUpdateCadence|Specifies the cadence for publishing quality updates of the filter. The possible values are: `monthly`, `outOfBand`, `unknownFutureValue`. |
+|classification|microsoft.graph.windowsUpdates.qualityUpdateClassification|Specifies the quality update classification of the filter. The possible values are: `all`, `security`, `nonSecurity`, `unknownFutureValue`. |
+
+## Relationships
+None.
+
+## JSON representation
+The following JSON representation shows the resource type.
+<!-- {
+  "blockType": "resource",
+  "@odata.type": "microsoft.graph.windowsUpdates.qualityUpdateFilter"
+}
+-->
+``` json
+{
+  "@odata.type": "#microsoft.graph.windowsUpdates.qualityUpdateFilter", 
+  "cadence": "String",
+  "classification": "String"
+}
+```

api-reference/beta/resources/windowsupdates-userexperiencesettings.md

@@ -1,6 +1,6 @@
 ---
 title: "userExperienceSettings resource type"
-description: "Settings controlling the user's update experience on a device."
+description: "Settings that control the user's update experience on a device."
 author: "ryan-k-williams"
 ms.localizationpriority: medium
 ms.subservice: autopatch
@@ -13,13 +13,14 @@ Namespace: microsoft.graph.windowsUpdates
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Settings controlling the user's update experience on a device.
+Settings that control the user's update experience on a device.
 
 ## Properties
 |Property|Type|Description|
 |:---|:---|:---|
 |daysUntilForcedReboot|Int32|Specifies the number of days after an update is installed, during which the user of the device can control when the device restarts.|
-|offerAsOptional|Boolean|Specifies whether the update is offered as **Optional** rather than **Required**.
+|isHotpatchEnabled|Boolean|Specifies whether the update is offered as a hotpatch. It can only be set to `true` on automatic policies that target monthly security updates.|
+|offerAsOptional|Boolean|Specifies whether the update is offered as **Optional** rather than **Required**. |
 
 ## Relationships
 None.
@@ -34,7 +35,8 @@ The following JSON representation shows the resource type.
 ``` json
 {
   "@odata.type": "#microsoft.graph.windowsUpdates.userExperienceSettings",
-  "daysUntilForcedReboot": "Integer", 
+  "daysUntilForcedReboot": "Int32",
+  "isHotpatchEnabled": "Boolean", 
   "offerAsOptional": "Boolean"
 }
 ```

api-reference/beta/toc/device-and-app-management/toc.yml

@@ -8564,6 +8564,8 @@ items:
       href: ../../resources/windowsupdates-qualityupdatecatalogentry.md
     - name: Quality update cve severity information
       href: ../../resources/windowsupdates-qualityupdatecveseverityinformation.md
+    - name: Quality update filter
+      href: ../../resources/windowsupdates-qualityupdatefilter.md
     - name: Rate driven rollout settings
       href: ../../resources/windowsupdates-ratedrivenrolloutsettings.md
     - name: Safeguard profile

api-reference/beta/toc/toc.mapping.json

@@ -675,6 +675,7 @@
             "microsoft.graph.windowsUpdates.productRevision",
             "microsoft.graph.windowsUpdates.qualityUpdateCatalogEntry",
             "microsoft.graph.windowsUpdates.qualityUpdateCveSeverityInformation",
+            "microsoft.graph.windowsUpdates.qualityUpdateFilter",
             "microsoft.graph.windowsUpdates.rateDrivenRolloutSettings",
             "microsoft.graph.windowsUpdates.safeguardProfile",
             "microsoft.graph.windowsUpdates.safeguardSettings",

changelog/Microsoft.WindowsUpdates.json

@@ -1,5 +1,39 @@
 {
   "changelog": [
+    {
+      "ChangeList": [
+        {
+          "Id": "4101419b-664e-4423-99d9-e8dc5b637213",
+          "ApiChange": "Property",
+          "ChangedApiName": "isHotpatchUpdate",
+          "ChangeType": "Addition",
+          "Description": "Added the **isHotpatchUpdate** property to the [productRevision](https://learn.microsoft.com/en-us/graph/api/resources/windowsUpdates-productRevision?view=graph-rest-beta) resource.",
+          "Target": "productRevision"
+        },
+        {
+          "Id": "4101419b-664e-4423-99d9-e8dc5b637213",
+          "ApiChange": "Property",
+          "ChangedApiName": "isHotpatchEnabled",
+          "ChangeType": "Addition",
+          "Description": "Added the **isHotpatchEnabled** property to the [userExperienceSettings](https://learn.microsoft.com/en-us/graph/api/resources/windowsupdates-userexperiencesettings?view=graph-rest-beta) resource.",
+          "Target": "userExperienceSettings"
+        },
+        {
+          "Id": "4101419b-664e-4423-99d9-e8dc5b637213",
+          "ApiChange": "Resource",
+          "ChangedApiName": "qualityUpdateFilter",
+          "ChangeType": "Addition",
+          "Description": "Added the [qualityUpdateFilter](https://learn.microsoft.com/en-us/graph/api/resources/windowsupdates-qualityupdatefilter?view=graph-rest-beta) resource type.",
+          "Target": "qualityUpdateFilter"
+        }
+      ],
+      "Id": "4101419b-664e-4423-99d9-e8dc5b637213",
+      "Cloud": "Prod",
+      "Version": "beta",
+      "CreatedDateTime": "2024-11-18T20:33:53.2380322Z",
+      "WorkloadArea": "Device and app management",
+      "SubArea": "Device updates"
+    },
     {
       "ChangeList": [
         {
@@ -1145,4 +1179,4 @@
       "SubArea": "Device updates"
     }
   ]
-}
+}

concepts/toc.yml

@@ -476,6 +476,8 @@ items:
         href: windowsupdates-enroll.md
       - name: Deploy a feature update
         href: windowsupdates-deploy-update.md
+      - name: Deploy a hotpatch update
+        href: windowsupdates-hotpatch-update.md
       - name: Deploy an expedited update
         href: windowsupdates-deploy-expedited-update.md
       - name: Manage driver update

concepts/whats-new-overview.md

@@ -33,6 +33,12 @@ Use the **administrativeUnitInfos** property on [participant](/graph/api/resourc
 
 Use the **reservePercentage** property in the [cloudPcProvisioningPolicy: apply] method to specify the percentage of Cloud PCs to keep available for frontline shared scenarios.
 
+### Device and app management | Device updates
+
+- [Deploy a hotpatch quality update](/graph/windowsupdates-hotpatch-update) using Windows Autopatch.
+- Use the **isHotpatchUpdate** property on [productRevision](/graph/api/resources/windowsupdates-productrevision?view=graph-rest-beta&preserve-view=true) to identify whether the content is hotpatchable.
+- Use the **isHotpatchEnabled** property on [userExperienceSettings](/graph/api/resources/windowsupdates-userexperiencesettings?view=graph-rest-beta&preserve-view=true) to identify whether the update is offered as a hotpatch.
+
 ### Identity and access | Network access
 
 List, create, get, update, and delete [fqdnFilteringRule](/graph/api/resources/networkaccess-fqdnfilteringrule?view=graph-rest-beta&preserve-view=true) and [webCategoryFilteringRule](/graph/api/resources/networkaccess-webcategoryfilteringrule?view=graph-rest-beta&preserve-view=true) resources that are derived types of [filteringRule](/graph/api/resources/networkaccess-filteringrule?view=graph-rest-beta&preserve-view=true).

concepts/windowsupdates-concept-overview.md

@@ -20,7 +20,7 @@ IT professionals and management tool vendors alike can use Windows Autopatch to:
 * Bypass pre-configured Windows Update for Business policies to immediately deploy a security update.
 * Ensure coverage of hardware and software in your organization through deployments tailored to unique device population(s).
 
-Today, Windows Autopatch supports managing Windows feature updates, expediting Windows security updates, and managing driver updates. To learn more about the context of Windows Autopatch, see [What is Windows Autopatch](/windows/deployment/windows-autopatch/overview/windows-autopatch-overview). To track the progress and status of your deployments, see [Windows Update for Business reports overview](/windows/deployment/update/wufb-reports-overview). This solution is integrated with Windows Autopatch to enable per deployment reporting, monitoring, and troubleshooting.
+Today, Windows Autopatch supports managing Windows feature updates, hotpatch quality updates, expediting Windows security updates, and managing driver updates. To learn more about the context of Windows Autopatch, see [What is Windows Autopatch](/windows/deployment/windows-autopatch/overview/windows-autopatch-overview). To track the progress and status of your deployments, see [Windows Update for Business reports overview](/windows/deployment/update/wufb-reports-overview). This solution is integrated with Windows Autopatch to enable per deployment reporting, monitoring, and troubleshooting.
 
 ## Prerequisites
 
@@ -46,7 +46,9 @@ Feature updates add new features and functionality to Windows 10 and Windows 11.
 
 ## Quality updates
 
-Quality updates released by Microsoft deliver both security and non-security fixes. Windows Autopatch helps devices to take security updates through Expedite. Security updates are typically released on the second Tuesday of each month, although out-of-band security updates can be released at any time. Quality updates are cumulative, so installing the latest quality update is sufficient to get all the available fixes released for your specific operating system version.
+Quality updates released by Microsoft deliver both security and non-security fixes, helping devices stay protected and up-to-date. Windows Autopatch facilitates security updates through the Expedite service, which prioritizes and accelerates the installation of critical updates. While regular security updates are typically released on the second Tuesday of each month, out-of-band security updates can be issued at any time.
+
+To further reduce downtime, hotpatch updates are released on a monthly basis as specialized security updates. These updates allow organizations to install critical fixes without the need to restart a device. This approach enhances security by enabling faster protection without disrupting workflows.
 
 ## Drivers and firmware
 

concepts/windowsupdates-deploy-expedited-update.md

@@ -1,6 +1,6 @@
 ---
 title: "Deploy an expedited quality update using Windows Autopatch"
-description: "Follow these steps to deploy expedited Windows quality updates to devices in a Microsoft Entra tenant in case of an emergency by using Windows Autopatch."
+description: "Follow these steps to deploy expedited Windows quality updates to devices in a Microsoft Entra tenant when an emergency occurs by using Windows Autopatch."
 author: "ryan-k-williams"
 ms.localizationpriority: medium
 ms.subservice: autopatch
@@ -10,7 +10,7 @@ ms.date: 11/07/2024
 
 # Deploy an expedited quality update using Windows Autopatch
 
-With Windows Autopatch, you can deploy Windows updates to devices in a Microsoft Entra tenant. Today, Windows Autopatch supports the [deployment](windowsupdates-deployments.md) of Windows 10/11 feature updates, expedited quality updates, and driver updates. This topic focuses on the deployment of expedited quality updates. For information about deploying feature updates, see [Deploy a feature update](windowsupdates-deploy-update.md).  For information about deploying driver updates, see [Manage driver update](./windowsupdates-manage-driver-update.md).
+With Windows Autopatch, you can deploy Windows updates to devices in a Microsoft Entra tenant. Today, Windows Autopatch supports the [deployment](windowsupdates-deployments.md) of Windows 10/11 feature updates, hotpatch quality updates, expedited quality updates, and driver updates. This topic focuses on the deployment of expedited quality updates. For information about deploying feature updates, see [Deploy a feature update](windowsupdates-deploy-update.md). For information about how to deploy hotpatch quality updates, see [Deploy a hotpatch quality update](./windowsupdates-hotpatch-update.md). For information about how to deploy driver updates, see [Manage driver update](./windowsupdates-manage-driver-update.md).
 
 Expediting a quality update overrides Windows Update for Business deferral policies so that the update is installed as quickly as possible. It can be useful when critical quality events arise and you need to deploy the latest updates more rapidly than normal. However, while it can help to achieve compliance targets against a specific quality update, it's not designed to be used every month. Instead, consider using [compliance deadlines for updates](/windows/deployment/update/wufb-compliancedeadlines).
 
@@ -25,7 +25,7 @@ Expedited quality updates also have the following characteristics:
 ## Prerequisites
 
 * Devices meet the [prerequisites for Windows Autopatch](windowsupdates-concept-overview.md#prerequisites).
-* Devices have installed the update described in [KB4023057 - Update for Windows 10 Update Service components](https://support.microsoft.com/topic/kb4023057-update-for-windows-10-update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a) (or newer).
+* Devices installed the update described in [KB4023057 - Update for Windows 10 Update Service components](https://support.microsoft.com/topic/kb4023057-update-for-windows-10-update-service-components-fccad0ca-dc10-2e46-9ed1-7e392450fb3a) (or a newer version).
 * To verify that your devices meet the prerequisites for receiving an expedited update, use the [Readiness test for expediting updates](/windows/deployment/windows-autopatch/manage/windows-autopatch-windows-quality-update-programmatic-controls).
 
 ## Step 1: (Optional) Get a list of expeditable updates
@@ -34,7 +34,7 @@ You can query the Windows Autopatch catalog API to get a list of updates that ca
 
 Quality updates are represented by the [qualityUpdateCatalogEntry](/graph/api/resources/windowsupdates-qualityupdatecatalogentry) type, with a **qualityUpdateClassification** of `security` or `nonSecurity`. All Windows 10 quality updates that are classified as `security` and all Windows 11 quality updates that are classified as `security` or `non-security` can be expedited.
 
-All quality updates refer to a list of [product revisions](/graph/api/resources/windowsupdates-productrevision). Add `$expand=microsoft.graph.windowsUpdates.qualityUpdateCatalogEntry/productRevisions` to the request URL to identify the operating system builds that are affected by each quality update.
+All quality updates refer to a list of [product revisions](/graph/api/resources/windowsupdates-productrevision). Add `$expand=microsoft.graph.windowsUpdates.qualityUpdateCatalogEntry/productRevisions` to the request URL to identify which operating system builds each quality update affects.
 
 The following example shows how to query for all Windows 10 quality updates that can be deployed as expedited updates by Windows Autopatch. We recommend to only show the three most current updates, so the following example includes `$top=3`.