Bumps github/gh-aw/actions/setup from 0.85.4 to 0.86.2.

Sourced from github/gh-aw/actions/setup's releases.

v0.86.2

🌟 Release Highlights

This release focuses on hardening the sandbox and MCP gateway, smoothing out safe-output and threat-detection reliability, and shipping a steady stream of security and quality fixes across the compiler and CLI.

✨ What's New

• Docker sandbox (docker-sbx) rollout continues — the sandboxed execution environment now runs for a larger share of agentic workflows, with fixes for pre-flight step naming, gVisor false positives, and Docker Hub secret handling (#51264, #51294, #51341, #51439, #51949). See the sandbox reference.
• Agent runtime tracking — sandbox.agent.runtime is now stored in aw_info.json, and gh aw logs/gh aw audit gained a --runtime filter for easier debugging across engines (#51465, #52076). See agent runtimes.
• MCP gateway hardening — explicit mount policy allowlisting for the safeoutputs backend server, plus a bump to gh-aw-mcpg v0.4.9 and github-mcp-server v1.9.0 (#51870, #51828).
• Skills frontmatter flexibility — non-SHA refs are now allowed in skills frontmatter and pinned automatically at compile time, and an explicit end-marker syntax was added for inline skills/sub-agents (#51455, #51446).
• Threat detection improvements — inline threat detection for Code Scanning Fixer, rendered detection logs with group/mask macros, and gh-aw's own <system> prompt block is no longer flagged as prompt injection (#51277, #51255, #51818). See threat detection.

🐛 Bug Fixes & Improvements

• Fixed silent failures in the Copilot session data fetcher and in gh aw mcp inspect pagination (#51195, #51193).
• Fixed Claude harness retrying invalid-JSON body errors with --continue instead of starting a fresh run (#51793).
• Fixed a CGO/CJS workflow cache key collision that caused widespread job failures (#51342).
• Fixed recurring gh-aw-firewall digest-pin loss on default firewall version bumps (#51423).
• Fixed Windows MCP server timeouts by propagating context through GitHub CLI subprocess calls (#51426).
• Fixed retry handling and denials in the Contribution Check proxy (#51631).
• Added support for HEAD-only bundles when pushing to pull request branches (#51833).
• Fixed safe-output run summary classification so entries are always linked and correctly attributed (#51484, #51478).

📚 Documentation

• Documented the --runtime flag for gh aw logs/gh aw audit, agent runtime selection/troubleshooting, and clarified Claude engine selection in automated bootstrap (#52076, #51427, #52099).
• Improved overall documentation discoverability and trimmed troubleshooting guides (#52065, #51251).

🔧 Internal

A large batch of custom-linter hardening, dependency bumps, test-parallelization, and dependency vulnerability remediations (container image pinning, ip-address patch, deprecated MCP container replacements) round out this release — thanks to the automated maintenance workflows keeping the codebase clean and secure.> Generated by 🚀 Release · auto · 20.7 AIC · ⊞ 11.3K

---

What's Changed

• Add GitHub CLI fallback guidance to Daily Team Evolution Insights workflow prompt by @​pelikhan with @​Copilot in github/gh-aw#51192
• Bump Claude Code, OpenAI Codex, and Pi CLI pinned versions by @​pelikhan with @​Copilot in github/gh-aw#51194
• Fix silent conversation-transcript fetch failures in Copilot session data fetcher by @​pelikhan with @​Copilot in github/gh-aw#51195
• fix(threat-detection): stop uploading detection.log for external gh-aw-detection path by @​davidslater in github/gh-aw#51233
• Harden safe-output field validation by @​pelikhan in github/gh-aw#51133
• [docs] Self-healing documentation fixes from issue analysis - 2026-08-07 by @​github-actions[bot] in github/gh-aw#51235
• [docs] docs: unbloat troubleshooting common issues by @​github-actions[bot] in github/gh-aw#51251
• feat: enable docker-sbx sandbox for ~50% of agentic workflows by @​pelikhan with @​Copilot in github/gh-aw#51264
• Refactor safe-outputs handler assembly by @​pelikhan with @​Copilot in github/gh-aw#51229
• Refactor engine secret validation wrappers by @​pelikhan with @​Copilot in github/gh-aw#51216
• Fix silent pagination truncation in gh aw mcp inspect, dedupe connect logic by @​pelikhan with @​Copilot in github/gh-aw#51193
• Revert sbx to 10% of agentic workflows, set gvisor to 10% by @​pelikhan with @​Copilot in github/gh-aw#51294
• feat(threat-detection): render detection.log in detection job with group/mask macros by @​pelikhan with @​Copilot in github/gh-aw#51255
• [log] Add debug logging to guard-policy, arc-dind, and validation helpers by @​github-actions[bot] in github/gh-aw#51298
• Increase post-result watchdog default to 120s and add frontmatter timeout override by @​pelikhan with @​Copilot in github/gh-aw#51292
• Handle discarded filepath.Glob errors in CLI by @​pelikhan with @​Copilot in github/gh-aw#51296

... (truncated)

• 48e5fa3 Clarify Claude engine selection in automated bootstrap (#52099)
• 9699516 Fix inverted strict: mode documentation in frontmatter reference (#52100)
• fa5e232 Improve GitHub Agentic Workflows documentation discoverability (#52065)
• 85f9048 Normalize report formatting in video-analyzer, plan, and centralization-drill...
• 1dd49c6 Suppress benign workflow exfiltration findings (#52083)
• c636d5f docs: document --runtime flag for gh aw logs and gh aw audit (#52076)
• 62647ef Harden scanner/relaunch exec trust boundaries and argument validation (#52032)
• 9922b2f Harden remote workflow import fallbacks to prevent cross-host downgrade to pu...
• 81a1321 Remediate dynamic regexp pattern findings (#51941)
• 485f970 [aw] Reduce Daily PR review tool-denial failures in Copilot SDK runs (#52060)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)