Merge "Set security update label in framework" into nyc-dev