build(deps): bump github/gh-aw/actions/setup from 0.83.4 to 0.85.4

[dependabot]

Bumps github/gh-aw/actions/setup from 0.83.4 to 0.85.4.

Release notes

Sourced from github/gh-aw/actions/setup's releases.

v0.85.4

🌟 Release Highlights

This release is a major security-hardening pass — expanding secret masking across git, JavaScript runtimes, and MCP servers — alongside new automated audits, linter capabilities, and documentation improvements.

🔒 Security Hardening

• Expanded secret masking coverage: git invocations in JS action scripts, derived secrets in JavaScript runtimes, authHeader values in git auth helpers, and API-derived OTLP access tokens are now automatically masked with core.setSecret, closing several avenues for accidental secret leakage in logs and artifacts.
• MCP server secret protection: secret masking is now prevented from leaking through MCP servers, and safe-output artifacts no longer capture base64 CI trigger tokens or raw process stdout/stderr logs.
• Zizmor CI gating: workflows now fail CI on high/critical severity Zizmor findings, and Zizmor now runs against all generated workflows in CI for continuous security scanning.

✨ What's New

• Daily action/setup security audit with cache-memory aspect rotation to continuously check for supply-chain risk.
• report-failed-jobs added to the safe-outputs JSON schema.
• New linters: regexpdynamicpattern flags non-constant regexp compile patterns, and the errormessage linter gained a full-repo audit mode.
• list_label MCP pagination now supports name filtering.
• Custom engine execution steps now receive GH_AW_ENGINE_VERSION for better version-aware behavior.

🐛 Bug Fixes & Improvements

• Fixed add_labels silently applying no labels.
• Fixed container pin validation to correctly skip unpinned containers.
• Fixed a fleet-wide smoke-test outage caused by a cli-proxy image tag mismatch.
• Fixed trial not forwarding issue_number to workflows that don't declare it, and rendering the logical repo in the github-context prompt.
• Fixed GITHUB_STEP_SUMMARY being unwritable in the AWF sandbox during threat detection (external detector bumped to v0.4.0).
• Fixed detection-analysis-report timeouts and redundant log downloads.
• compile no longer adds an ineffective merge=ours entry to the generated .gitattributes.
• Retained jobs.*.permissions for built-in safe-outputs and conclusion jobs.

📚 Documentation

• New guide documenting ARC and sandbox runtime architecture.
• Refined homepage security features and highlighted self-hosted runners with microVM isolation.
• Clarified that custom safe-output jobs run once per workflow run, not once per tool call.
• Various self-healing documentation fixes and an unbloated "About" page.> Generated by 🚀 Release · auto · 18.4 AIC · ⊞ 11.2K

---

What's Changed

• fix: prevent secret leakage in git invocations in JS action scripts by @​pelikhan with @​Copilot in github/gh-aw#50730
• fix: exclude process stdout/stderr logs from safe-outputs-items artifact by @​pelikhan with @​Copilot in github/gh-aw#50739
• fix: detection-analysis-report timeout and redundant log downloads by @​pelikhan with @​Copilot in github/gh-aw#50716
• Add full-repo audit mode to pkg/linters/errormessage by @​pelikhan with @​Copilot in github/gh-aw#50695
• trial: fail and report rejected safe-output errors instead of always reporting success by @​pelikhan with @​Copilot in github/gh-aw#50723
• fix: propagate max-ai-credits to external detector AWF config by @​pelikhan with @​Copilot in github/gh-aw#50721
• Mask derived secrets in JavaScript runtimes by @​pelikhan with @​Copilot in github/gh-aw#50741
• threat-detection: fix GITHUB_STEP_SUMMARY unwritable in AWF sandbox (v0.4.0 exit 2) by @​pelikhan with @​Copilot in github/gh-aw#50717
• [avenger] Apply prettier formatting to shim.cjs by @​github-actions[bot] in github/gh-aw#50750
• [log] Add debug logging to under-instrumented workflow/cli files by @​github-actions[bot] in github/gh-aw#50755
• Prevent secret masking from MCP servers by @​pelikhan in github/gh-aw#50746
• Mask API-derived OTLP access tokens by @​pelikhan with @​Copilot in github/gh-aw#50774

... (truncated)

Commits

• 53843da feat: add daily-action-setup-security-audit workflow (#50783)
• 591c9c5 fix: mask inferred OTLP access tokens (#50774)
• 1755de8 Prevent secret masking from MCP servers (#50746)
• 1e995ee Add debug logging to under-instrumented workflow/cli files (#50755)
• ae3c3a5 Apply prettier formatting to shim.cjs (#50750)
• bdf4846 threat-detection: fix GITHUB_STEP_SUMMARY unwritable in AWF sandbox (v0.4.0 e...
• 6beb5a8 Mask derived secrets in JavaScript runtimes (#50741)
• 1451c2e recompile
• 7ef59c0 fix daily reports
• 6b969a6 fix: propagate max-ai-credits to external detector AWF config (#50721)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)