[dependabot]

Bumps the github-actions group with 1 update: github/gh-aw/actions/setup.

Updates github/gh-aw/actions/setup from 0.91.3 to 0.92.0

Release notes

Sourced from github/gh-aw/actions/setup's releases.

v0.92.0

🌟 Release Highlights

This release focuses on model routing correctness, more reliable work-queue and cross-repo workflows, and stronger safe-output integrity.

✨ What's New

• Clearer Model Routing docs – the reference page is rewritten for workflow authors. Learn more
• Claude on Copilot – Claude Code now receives a modelOverrides map for Copilot's dotted Claude model IDs.
• Trusted dispatch for work queues, with fixes for history amplification.
• Go Fan bounded-research A/B experiment added.

🐛 Bug Fixes & Improvements

• An omitted allowed-models now means any model when merging imports.
• Copilot now rejects silent substitution of the configured model.
• The optional target repository defaults before MCP gateway startup.
• Cross-repo PR patches work for environment-resolved targets.
• Safe-output patch and bundle application is bound to validated bytes (security hardening).
• Work queue honors the configured GitHub server host, and its reconciliation step summaries are collapsed.
• The unified session summary renders at top level, and missing session parser dependencies are included.
• gh-aw-node runtime packages are rebuilt on scheduled publishes.

📚 Documentation

• Restored the factory policy admission invariant and trimmed the linter-factory pattern page.

Generated by 🚀 Release · copilot · auto · 13.9 AIC · ⊞ 11.7K

---

What's Changed

• Collapse work queue reconciliation step summaries by @​pelikhan in github/gh-aw#68821
• fix: render unified session summary at top level by @​pelikhan in github/gh-aw#68820
• fix: rebuild gh-aw-node runtime packages on scheduled publishes by @​pelikhan in github/gh-aw#68814
• Add trusted dispatch and fix work-queue history amplification by @​pelikhan in github/gh-aw#68827
• fix: include missing session parser dependencies by @​pelikhan in github/gh-aw#68844
• Fix cross-repo PR patches for environment-resolved targets by @​pelikhan in github/gh-aw#68815
• chore: recompile stale workflow lock files by @​pelikhan in github/gh-aw#68858
• Bind safe-output patch and bundle application to validated bytes by @​pelikhan with @​Copilot in github/gh-aw#68732
• Docs: rewrite the Model Routing reference page for workflow authors by @​SivaKesava1 with @​Copilot in github/gh-aw#68860
• fix(copilot): reject silent configured-model substitution by @​pelikhan in github/gh-aw#68819
• Default optional target repository before MCP gateway startup by @​lpcox with @​Copilot in github/gh-aw#68882
• [docs] docs: unbloat linter-factory pattern by @​github-actions[bot] in github/gh-aw#68919
• fix(work-queue): honor the configured GitHub server host by @​pelikhan in github/gh-aw#68871
• Model routing: an omitted allowed-models means any model when merging imports by @​SivaKesava1 with @​Copilot in github/gh-aw#68883
• Add Go Fan bounded-research A/B experiment by @​pelikhan with @​Copilot in github/gh-aw#68936
• Claude on Copilot: pass Claude Code a modelOverrides map for Copilot's dotted Claude model ids by @​SivaKesava1 with @​Copilot in github/gh-aw#68839
• fix(docs): restore factory policy admission invariant by @​pelikhan in github/gh-aw#68952

... (truncated)

Commits

• a68f5a9 fix(docs): restore factory policy admission invariant (#68952)
• d91f5c9 Claude on Copilot: pass Claude Code a modelOverrides map for Copilot's dotted...
• af6f1e3 Add Go Fan bounded-research A/B experiment (#68936)
• 2b42b5a Model routing: an omitted allowed-models means any model when merging impor...
• 74f32e8 fix(work-queue): honor the configured GitHub server host (#68871)
• e7bc605 [docs] docs: unbloat linter-factory pattern (#68919)
• b99bdc4 Default optional target repository before MCP gateway startup (#68882)
• 80fcc13 Define optional target repository before MCP Gateway startup (#68907)
• a5c6031 fix(copilot): reject silent configured-model substitution (#68819)
• be0e331 Docs: rewrite the Model Routing reference page for workflow authors (#68860)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.