chore(deps): bump github/gh-aw/actions/setup from 0.81.6 to 0.82.13 in the github-actions group

[dependabot]

Bumps the github-actions group with 1 update: github/gh-aw/actions/setup.

Updates github/gh-aw/actions/setup from 0.81.6 to 0.82.13

Release notes

Sourced from github/gh-aw/actions/setup's releases.

v0.82.13

🌟 Release Highlights

This release brings smarter ESLint rule detection, improved audit accuracy, and key bug fixes across the CLI, workshop, and setup tooling — with a notable breaking change in gh aw add.

⚠️ Breaking Changes

• gh aw add now rejects packages with aw.yml config — packages that include an aw.yml configuration file will no longer be accepted. Update any such packages before upgrading. See [PR #46273](github/gh-aw#46273) for details.

✨ What's New

• Auto-configure COPILOT_PROVIDER_WIRE_API from the model catalog (#46156) — The CLI now automatically resolves the provider wire API endpoint from the model catalog, reducing manual configuration overhead.
• Default-on issue intent metadata (#46207) — set_issue_type, set_issue_field, and add_labels now emit issue intent metadata by default, enabling richer audit trails without extra configuration.
• NO_COLOR support for stdout (#46197) — The CLI now honours the NO_COLOR environment variable, improving compatibility with non-interactive and accessibility-focused terminals.
• Stronger ESLint alias detection (#46365) — The no-core-setoutput/exportvariable rules now catch aliased and destructured @actions/core bindings, closing a common bypass pattern.
• Debug logging across CLI bootstrap and logs orchestration (#46337) — New structured debug output makes it easier to trace startup and log-download behaviour.

🐛 Bug Fixes & Improvements

• Accurate safe-output write counts in audit reports (#46360) — SafeItemsCount is now correctly populated in run_summary.json, so audit dashboards reflect real write activity.
• Workshop progress rail and overflow fixes (#46378) — Resolves state coupling in the progress rail and responsive overflow issues in the workshop UI.
• ESLint spawn-error alias guard (#46199) — Single-assignment aliases of spawn errors are now correctly recognised as valid guards, reducing false positives.
• mapdeletecheck autofix safety (#46159) — Autofixes are now suppressed when comments overlap the replaced span, preventing incorrect edits.
• Setup-JS error resilience (#46102) — All synchronous filesystem calls in actions/setup/js are now wrapped in try/catch blocks.
• Integer overflow fix in allocation size hints (#46375) — Resolves a go/allocation-size-overflow code scanning alert.

📚 Documentation

• Workshop view guide added (#46237) — New documentation covering the workshop UI view.
• Ephemerals reference streamlined (#46288) — The ephemerals reference page has been trimmed for clarity and readability.
• ESLint factory rules documented (#46361) — Six previously undocumented ESLint factory rules now have full README entries.

[!WARNING]

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

... (truncated)

Commits

• 017cdbc fix: populate SafeItemsCount in run_summary.json so audits report accurate sa...
• f6feabb [code-scanning-fix] Fix go/allocation-size-overflow: integer overflow in allo...
• 9ecb2eb feat(styles,console,colorwriter): hoist palette color.Color vars and honor NO...
• 991f7d4 Default-on issue intent metadata for set_issue_type, set_issue_field, and add...
• e9f95f2 feat(eslint): extend no-core-setoutput/exportvariable rules to detect aliased...
• 65a55ec test(errorutil): improve edge-case coverage and reduce assertion noise (#46366)
• 54e9fe9 [jsweep] Clean validate_secrets.cjs (#46129)
• 61e0494 docs(eslint-factory): document 6 undocumented rules in README (#46361)
• 75936ce [formal-spec] Add PM-10/AppG formal model coverage for security architecture ...
• 72b1988 fix(eslint): resolve route/URL/control-flow lint violations in actions/setup/...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.