ci: bump github/gh-aw/actions/setup from 0.81.6 to 0.82.13

[dependabot]

Bumps github/gh-aw/actions/setup from 0.81.6 to 0.82.13.

Release notes

Sourced from github/gh-aw/actions/setup's releases.

v0.82.13

🌟 Release Highlights

This release brings smarter ESLint rule detection, improved audit accuracy, and key bug fixes across the CLI, workshop, and setup tooling — with a notable breaking change in gh aw add.

⚠️ Breaking Changes

• gh aw add now rejects packages with aw.yml config — packages that include an aw.yml configuration file will no longer be accepted. Update any such packages before upgrading. See [PR #46273](github/gh-aw#46273) for details.

✨ What's New

• Auto-configure COPILOT_PROVIDER_WIRE_API from the model catalog (#46156) — The CLI now automatically resolves the provider wire API endpoint from the model catalog, reducing manual configuration overhead.
• Default-on issue intent metadata (#46207) — set_issue_type, set_issue_field, and add_labels now emit issue intent metadata by default, enabling richer audit trails without extra configuration.
• NO_COLOR support for stdout (#46197) — The CLI now honours the NO_COLOR environment variable, improving compatibility with non-interactive and accessibility-focused terminals.
• Stronger ESLint alias detection (#46365) — The no-core-setoutput/exportvariable rules now catch aliased and destructured @actions/core bindings, closing a common bypass pattern.
• Debug logging across CLI bootstrap and logs orchestration (#46337) — New structured debug output makes it easier to trace startup and log-download behaviour.

🐛 Bug Fixes & Improvements

• Accurate safe-output write counts in audit reports (#46360) — SafeItemsCount is now correctly populated in run_summary.json, so audit dashboards reflect real write activity.
• Workshop progress rail and overflow fixes (#46378) — Resolves state coupling in the progress rail and responsive overflow issues in the workshop UI.
• ESLint spawn-error alias guard (#46199) — Single-assignment aliases of spawn errors are now correctly recognised as valid guards, reducing false positives.
• mapdeletecheck autofix safety (#46159) — Autofixes are now suppressed when comments overlap the replaced span, preventing incorrect edits.
• Setup-JS error resilience (#46102) — All synchronous filesystem calls in actions/setup/js are now wrapped in try/catch blocks.
• Integer overflow fix in allocation size hints (#46375) — Resolves a go/allocation-size-overflow code scanning alert.

📚 Documentation

• Workshop view guide added (#46237) — New documentation covering the workshop UI view.
• Ephemerals reference streamlined (#46288) — The ephemerals reference page has been trimmed for clarity and readability.
• ESLint factory rules documented (#46361) — Six previously undocumented ESLint factory rules now have full README entries.

[!WARNING]

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

... (truncated)

Commits

• 017cdbc fix: populate SafeItemsCount in run_summary.json so audits report accurate sa...
• f6feabb [code-scanning-fix] Fix go/allocation-size-overflow: integer overflow in allo...
• 9ecb2eb feat(styles,console,colorwriter): hoist palette color.Color vars and honor NO...
• 991f7d4 Default-on issue intent metadata for set_issue_type, set_issue_field, and add...
• e9f95f2 feat(eslint): extend no-core-setoutput/exportvariable rules to detect aliased...
• 65a55ec test(errorutil): improve edge-case coverage and reduce assertion noise (#46366)
• 54e9fe9 [jsweep] Clean validate_secrets.cjs (#46129)
• 61e0494 docs(eslint-factory): document 6 undocumented rules in README (#46361)
• 75936ce [formal-spec] Add PM-10/AppG formal model coverage for security architecture ...
• 72b1988 fix(eslint): resolve route/URL/control-flow lint violations in actions/setup/...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: area/ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.