Bump github/gh-aw from 0.45.4 to 0.46.0

[dependabot]

Bumps github/gh-aw from 0.45.4 to 0.46.0.

Release notes

Sourced from github/gh-aw's releases.

v0.46.0

🌟 Release Highlights

This release focuses on security hardening and workflow discoverability, with critical injection attack protection and smarter secret management.

🔒 Security Improvements

• Injection attack prevention - Numeric context variables in activation are now validated to prevent sophisticated injection attacks that could exploit numeric-to-string coercion (#16515). This hardens workflows against malicious input in issue numbers, PR numbers, and other numeric GitHub context fields.

✨ What's New

• Smart secret detection - gh aw secrets bootstrap now automatically analyzes your workflows to determine which secrets are actually required, eliminating guesswork and reducing setup friction (#16475). Learn more

• Granular discussion permissions - Safe output tools add-comment and hide-comment now support an optional discussions field, giving you fine-grained control over the discussions:write permission (#16509). Only request discussion access when you need it.

⚡ Performance

• Faster compilation - Failed action resolutions are now cached per compilation run, significantly reducing compile times for workflows with missing actions (#16506)

🐛 Bug Fixes & Improvements

• Better title formatting - Workflow titles with prefixes ending in ] or - now have proper spacing, improving readability in the GitHub Actions UI (#16517)

• Playground UX - Removed the Copy button from the playground editor to streamline the editing experience (#16508)

📚 Documentation

• Bootstrap discovery docs - Updated documentation reflects the new workflow analysis feature in gh aw secrets bootstrap (#16512)
• Safe outputs spec - Specification updated to document the new discussions permission control (#16516)

---

For complete details, see CHANGELOG.

Generated by Release

---

What's Changed

• Analyze workflows to determine required secrets in bootstrap by @​Copilot in github/gh-aw#16475
• Cache failed action resolutions per compilation run by @​Copilot in github/gh-aw#16506
• Remove Copy button from playground editor by @​Copilot in github/gh-aw#16508
• [docs] Update documentation for gh aw secrets bootstrap workflow discovery feature by @​github-actions[bot] in github/gh-aw#16512
• Add optional discussions field to control discussions:write permission for add-comment and hide-comment by @​Copilot in github/gh-aw#16509
• chore(deps): bump fast-xml-parser from 5.3.5 to 5.3.6 in /docs in the npm_and_yarn group across 1 directory by @​dependabot[bot] in github/gh-aw#16484
• Update safe outputs spec with discussions field from PR #16509 by @​Copilot in github/gh-aw#16516
• Add spacing after title prefixes ending with ] or - by @​Copilot in github/gh-aw#16517
• Validate numeric context variables in activation to prevent injection attacks by @​Copilot in github/gh-aw#16515

Full Changelog: github/gh-aw@v0.45.7...v0.46.0

... (truncated)

Commits

• f88ec26 Validate numeric context variables in activation to prevent injection attacks...
• c286af9 Add spacing after title prefixes ending with ] or - (#16517)
• b570272 Update safe outputs spec with discussions field from PR #16509 (#16516)
• cda7588 chore(deps): bump fast-xml-parser (#16484)
• 6c2f9f4 Add optional discussions field to control discussions:write permission for ad...
• 4ac90ee Update documentation for gh aw secrets bootstrap workflow discovery (#16512)
• 67fe116 Remove Copy button from playground editor (#16508)
• 3abf128 Cache failed action resolutions per compilation run (#16506)
• 6df6663 Analyze workflows to determine required secrets in bootstrap (#16475)
• 5d8900e Enable LLM gateway support for Copilot engine (#16485)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)