build(deps): bump github/gh-aw/actions/setup-cli from 0.88.7 to 0.89.14 in the actions group (#12034)

Bumps the actions group with 1 update:
[github/gh-aw/actions/setup-cli](https://github.com/github/gh-aw).

Updates `github/gh-aw/actions/setup-cli` from 0.88.7 to 0.89.14
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/gh-aw/releases">github/gh-aw/actions/setup-cli's
releases</a>.</em></p>
<blockquote>
<h2>v0.89.13</h2>
<h2>🌟 Release Highlights</h2>
<p>A small maintenance release focused on logs tooling, release-notes
governance, and a documentation fix.</p>
<h3>✨ What's New</h3>
<ul>
<li><strong>Wildcard support for cached logs</strong> — <code>gh aw logs
--cached-logs</code> now accepts trailing-wildcard prefixes (e.g.
<code>logs-*</code>), merging all matching <code>*.jsonl</code> shards,
pruning out-of-range files, and writing fresh results to a new
collision-resistant shard. Handy for teams sharing rolling log caches.
(<a
href="https://redirect.github.com/github/gh-aw/pull/60702">#60702</a>)</li>
<li><strong>Safer release-notes automation</strong> — agentic workflows
that touch release notes must now go through the
<code>update-release</code> safe output instead of direct GitHub
mutations, keeping agent jobs read-only and closing off a class of
unintended writes. (<a
href="https://redirect.github.com/github/gh-aw/pull/60701">#60701</a>)</li>
</ul>
<h3>📚 Documentation</h3>
<ul>
<li>Fixed the <a
href="https://github.github.com/gh-aw/reference/artifacts/">Artifacts
reference</a> table, which listed <code>aw-info</code> and
<code>prompt</code> as current artifact names even though no compiled
workflow produces them; the correct <code>info</code> artifact is now
documented, and the legacy names are marked back-compat. (<a
href="https://redirect.github.com/github/gh-aw/pull/60706">#60706</a>)</li>
</ul>
<h3>🔧 Internal</h3>
<ul>
<li>Weekly blog post summarizing recent activity. (<a
href="https://redirect.github.com/github/gh-aw/pull/60729">#60729</a>)</li>
</ul>
<p><em>No community-labeled issues were closed in this release
window.</em></p>
<blockquote>
<p>Generated by <a
href="https://github.com/github/gh-aw/actions/runs/34817102125">🚀
Release</a> · copilot · auto · 23.1 AIC · ⊞ 11.9K</p>
</blockquote>
<!-- raw HTML omitted -->
<hr />
<h2>What's Changed</h2>
<ul>
<li>Require update-release for agent-generated release notes by <a
href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a
href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/github/gh-aw/pull/60701">github/gh-aw#60701</a></li>
<li>[docs] Self-healing documentation fixes from issue analysis -
2026-09-13 by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/github/gh-aw/pull/60706">github/gh-aw#60706</a></li>
<li>Support wildcard cached logs files by <a
href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a
href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/github/gh-aw/pull/60702">github/gh-aw#60702</a></li>
<li>[blog] Weekly blog post – 2026-09-14 by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/github/gh-aw/pull/60729">github/gh-aw#60729</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/github/gh-aw/compare/v0.89.12...v0.89.13">https://github.com/github/gh-aw/compare/v0.89.12...v0.89.13</a></p>
<h2>v0.89.12</h2>
<h2>🌟 Release Highlights</h2>
<p>A small security-hardening and CI reliability release.</p>
<h3>🐛 Bug Fixes &amp; Improvements</h3>
<ul>
<li><strong>Reduced credential blast radius in slash-command
router</strong> — The generated central slash-command router workflow
(<code>.github/workflows/agentic_commands.yml</code>) now checks out the
repository with <code>persist-credentials: false</code>, so
<code>GITHUB_TOKEN</code> is no longer persisted in the local git config
for the lifetime of the routing job (<a
href="https://redirect.github.com/github/gh-aw/pull/60685">#60685</a>).</li>
<li><strong>Fixed failing CI job</strong> — Resolved a failure in the
&quot;Integration: CMD Tests&quot; GitHub Actions job to restore green
CI signal (<a
href="https://redirect.github.com/github/gh-aw/pull/60683">#60683</a>).</li>
</ul>
<blockquote>
<p>Generated by <a
href="https://github.com/github/gh-aw/actions/runs/34787104019">🚀
Release</a> · copilot · auto · 19.3 AIC · ⊞ 11.9K</p>
</blockquote>
<!-- raw HTML omitted -->
<hr />
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/gh-aw/blob/main/CHANGELOG.md">github/gh-aw/actions/setup-cli's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<h2>v0.40.1 - 2026-02-03</h2>
<h3>Move from githubnext/gh-aw to github/gh-aw</h3>
<p>If you were a former user of the githubnext Agentic Workflows you
might have to <strong>re-register</strong> the extension to reflect the
new location.
As the gh-aw project moved from githubnext to github please delete the
old channel and register the new one.</p>
<p>Example:</p>
<pre data-meta="wrap" lang="text"><code>gh extension list
NAME   REPO              VERSION
gh aw  githubnext/gh-aw  v0.36.0
<p>gh extension upgrade --all
[aw]: already up to date</p>
<p>gh extension remove gh-aw</p>
<p>gh extension install github/gh-aw
✓ Installed extension github/gh-aw</p>
<p>gh extension list
NAME   REPO          VERSION
gh aw  github/gh-aw  v0.40.1
</code></pre></p>
<h3>Bug Fixes</h3>
<h4>Handle 502 Bad Gateway errors in assign_to_agent handler by treating
them as success. The cloud gateway may return 502 errors during agent
assignment, but the assignment typically succeeds despite the error. The
handler now logs 502 errors for troubleshooting but does not fail the
workflow.</h4>
<h4>Add discussion interaction to smoke workflows and serialize the
discussion</h4>
<p>flag in safe-outputs handler config.</p>
<p>Smoke workflows now select a random discussion and post thematic
comments to
validate discussion comment functionality. The compiler now emits the
<code>&quot;discussion&quot;: true</code> flag in
<code>GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG</code> when a
workflow requests discussion output, and lock files include
<code>discussions: write</code>
permission where applicable.</p>
<h4>Add discussion interaction to smoke workflows; compiler now
serializes the <code>discussion</code> flag into the safe-outputs
handler config so workflows can post comments to discussions. Lock files
include <code>discussions: write</code> where applicable.</h4>
<p>Smoke workflows pick a random discussion and post a thematic comment
(copilot: playful, claude: comic-book, codex: mystical oracle, opencode:
space mission). This is a non-breaking tooling/workflow change.</p>
<h4>Add discussion interaction to smoke workflows; deprecate the
<code>discussion</code> flag and</h4>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/gh-aw/commit/97b9a7c376bb60bd7cbcf348a5a6349b52e266ff"><code>97b9a7c</code></a>
Surface safe-output entities in logs and usage artifacts (<a
href="https://redirect.github.com/github/gh-aw/issues/60788">#60788</a>)</li>
<li><a
href="https://github.com/github/gh-aw/commit/25ea846e6735c6a1ebd1b2bea16390a4053313df"><code>25ea846</code></a>
Add Agent of the Day blog post for September 14, 2026 (<a
href="https://redirect.github.com/github/gh-aw/issues/60854">#60854</a>)</li>
<li><a
href="https://github.com/github/gh-aw/commit/53cdd80d8b34ba40e3b804b583be83b2126e5f57"><code>53cdd80</code></a>
Clarify missing GitHub Release safe-output errors (<a
href="https://redirect.github.com/github/gh-aw/issues/60845">#60845</a>)</li>
<li><a
href="https://github.com/github/gh-aw/commit/c20c996eda54ba597e931c2ace51f37b305ec0a2"><code>c20c996</code></a>
Apply safe-output temporary IDs to repo memory (<a
href="https://redirect.github.com/github/gh-aw/issues/60789">#60789</a>)</li>
<li><a
href="https://github.com/github/gh-aw/commit/12f29c3e961731614b76d3aeee65ddc6d8b92291"><code>12f29c3</code></a>
[instructions] Sync assign-to-agent docs with reasoning-effort field (<a
href="https://redirect.github.com/github/gh-aw/issues/60800">#60800</a>)</li>
<li><a
href="https://github.com/github/gh-aw/commit/19f31829253e4083b46b62efd91cc7ebac947047"><code>19f3182</code></a>
Test wildcard JSONL cache sharding in live logs integration (<a
href="https://redirect.github.com/github/gh-aw/issues/60782">#60782</a>)</li>
<li><a
href="https://github.com/github/gh-aw/commit/70581f41c2b5d7f0112e907eedcf7873ff3e1be2"><code>70581f4</code></a>
Simplify operational-value grading to one-shot evaluators (<a
href="https://redirect.github.com/github/gh-aw/issues/60682">#60682</a>)</li>
<li><a
href="https://github.com/github/gh-aw/commit/a013f5a88a73b26fe91dbcd401427cc3bc76701f"><code>a013f5a</code></a>
docs: unbloat frontmatter reference (<a
href="https://redirect.github.com/github/gh-aw/issues/60713">#60713</a>)</li>
<li><a
href="https://github.com/github/gh-aw/commit/aa0cabfb259e06ef1bfa7a1b7b9f19733f41c33f"><code>aa0cabf</code></a>
Add weekly blog post for 2026-09-14 (<a
href="https://redirect.github.com/github/gh-aw/issues/60729">#60729</a>)</li>
<li><a
href="https://github.com/github/gh-aw/commit/c3d7c9eca8852123712e3ff979af249aab3c7b2f"><code>c3d7c9e</code></a>
Support wildcard cached logs files (<a
href="https://redirect.github.com/github/gh-aw/issues/60702">#60702</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/github/gh-aw/compare/bde367913adeb3132f0a171594c88a17f4b7d08c...97b9a7c376bb60bd7cbcf348a5a6349b52e266ff">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/gh-aw/actions/setup-cli&package-manager=github_actions&previous-version=0.88.7&new-version=0.89.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/check-agentic-workflows.yml

@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install gh-aw
-        uses: github/gh-aw/actions/setup-cli@bde367913adeb3132f0a171594c88a17f4b7d08c # v0.88.7
+        uses: github/gh-aw/actions/setup-cli@97b9a7c376bb60bd7cbcf348a5a6349b52e266ff # v0.89.14
         with:
           version: v0.88.7
 

.github/workflows/copilot-setup-steps.yml

@@ -21,6 +21,6 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install gh-aw extension
-        uses: github/gh-aw/actions/setup-cli@bde367913adeb3132f0a171594c88a17f4b7d08c # v0.88.7
+        uses: github/gh-aw/actions/setup-cli@97b9a7c376bb60bd7cbcf348a5a6349b52e266ff # v0.89.14
         with:
           version: v0.50.1