Bump github/gh-aw from 0.46.0 to 0.47.2

[dependabot]

Bumps github/gh-aw from 0.46.0 to 0.47.2.

Release notes

Sourced from github/gh-aw's releases.

v0.47.2

🌟 Release Highlights

This release focuses on security hardening, expanded language ecosystem support, and Gemini engine reliability improvements.

⚠️ Breaking Changes

• macOS runners are now blocked in agentic workflows (#17087): Agentic workflows no longer support macOS GitHub Actions runners. If your workflows target macOS runners, switch to a Linux runner (e.g., ubuntu-latest).

🔒 Security Improvements

• Credential cleanup across workspaces (#17086): Git credentials are now recursively scrubbed from all checkouts in the workspace and /tmp/, reducing credential exposure risk between agent steps.
• No-secrets enforcement extended to engine.env (#17065): Secret detection now covers engine.env fields in addition to top-level env, preventing accidental exposure of secrets in engine configuration.
• Validate persist-credentials in checkout steps (#17081): The compiler now validates that actions/checkout steps don't set persist-credentials: true, which could leak credentials to the agent.

✨ What's New

• Expanded ecosystem domain support (#17072): Added network allowlist domains for Clojure, Elixir, Kotlin, Scala, and Zig, enabling workflows that build projects in these languages to access their package ecosystems.

🐛 Bug Fixes & Improvements

• Gemini engine reliability (#16938, #16983): Fixed Gemini engine to use .gemini/settings.json for MCP configuration (replacing the unsupported --mcp-config flag) and added --yolo for auto-approving tool executions.
• Codespaces compatibility (#16952): Resolved HTTP 404 errors when running gh aw init inside GitHub Codespaces.
• PR footer template (#17098): Fixed messages.footer template not being applied in create_pull_request safe output.
• Compile error suggestions (#17029): GH_AW_* environment variables are no longer incorrectly redacted in compile error suggestions.
• Playground editor (#17039): Fixed footer spacing in the Playground editor UI.

📚 Documentation

• Streamlined the templating guide with a leaner, more focused reference (#17003).

---

For complete details, see CHANGELOG.

Generated by Release

---

What's Changed

• Fix macOS ARM64 smoke test: permissions, Docker, and AWF install by @​Mossaka in github/gh-aw#16910
• fix: remove leftover smoke test file by @​Mossaka in github/gh-aw#16969
• Fix HTTP 404 when running gh aw init in codespaces by @​Copilot in github/gh-aw#16952
• fix: Gemini engine uses .gemini/settings.json instead of unsupported --mcp-config flag by @​Copilot in github/gh-aw#16938
• [docs] docs: debloat templating.md (-72 lines, -21.6%) by @​github-actions[bot] in github/gh-aw#17003
• [docs] Consolidate developer specifications - fix tone, add Gemini MCP config pattern (v2.5) by @​github-actions[bot] in github/gh-aw#17000
• fix: add --yolo flag to Gemini CLI for auto-approving tool executions by @​Mossaka in github/gh-aw#16983
• Fix footer spacing in Playground editor by @​Mossaka in github/gh-aw#17039
• Enforce no-secrets check on engine.env in addition to top-level env by @​Copilot in github/gh-aw#17065
• Add ecosystem domains for clojure, elixir, kotlin, scala, zig by @​Mossaka in github/gh-aw#17072
• fix: don't redact GH_AW_* env vars in compile error suggestions by @​Copilot in github/gh-aw#17029

... (truncated)

Commits

• faf2523 fix: apply messages.footer template in create_pull_request safe output (#...
• 52b54de feat: block macOS runners in agentic workflows with FAQ entry and remove smok...
• 8d88c00 Validate actions/checkout persist-credentials in agent job steps (#17081)
• 45f92f6 Recursively clean git credentials from all checkouts in workspace and /tmp/ (...
• 45e6dc2 fix: don't redact GH_AW_* env vars in compile error suggestions (#17029)
• cb28501 Add ecosystem domains for clojure, elixir, kotlin, scala, zig (#17072)
• 8577cd1 Enforce no-secrets check on engine.env in addition to top-level env (#17065)
• 16755c9 Fix footer spacing in Playground editor (#17039)
• 3b47815 fix: add --yolo flag to Gemini CLI for auto-approving tool executions (#16983)
• d252da4 docs: consolidate developer specifications - fix tone, add Gemini MCP config ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)