chore(deps): bump r-lib/actions/setup-r-dependencies from 2.11.4 to 2.12.1

[dependabot]

Bumps r-lib/actions/setup-r-dependencies from 2.11.4 to 2.12.1.

Changelog

Sourced from r-lib/actions/setup-r-dependencies's changelog.

v2.12.1 (2026-06-23)

• [setup-r] now avoids a warning about an url.parse() deprecation (#1074).

• [setup-r-dependencies] now uses quarto-dev/quarto-actions v2.2.0 (@​jdblischak, #1076).

• Examples: test-coverage.yaml now uses codecov/codecov-action v7 (@​shikokuchuo, #1081).

• New example claude-investigate.yaml workflow (@​DavisVaughan, #1084).

v2.12.0 (2026-04-29)

• All node.js actions use node 24 now. Relatedly, all example workflows use recent versions of actions that use node 24.

• [setup-r] now uses use-public-rspm: true by default on Linux and Windows. macOS binaries require further opt-in with use-public-rspm: always.

• It is now possible to require actions to be pinned to a full-length commit SHA in repositories using r-lib/actions (#1070).

• [setup-pandoc][setup-r-dependencies] now default to Pandoc version 3.8.3.

• [setup-r-dependencies] now includes the R architecture in the cache key, so caches for macos-15 (Apple Silicon) and macos-15-intel (Rosetta/x86_64) no longer collide (#1035).

• [setup-r] run apt-get update without -qq on Linux, to make debugging update failures easier (#1058).

v2.11.4 (2025-10-08)

• [setup-r] correctly installs Rtools again on aarch64 Windows, as needed.

v2.11.3 (2025-03-24)

• [setup-r] now supports Rtools45, and installs it by default for R >= 4.5.0.

v2.11.2 (2025-02-19)

• [setup-r] now installs gfortran 14.2 for R 4.5.0 and later (#965).

• [setup-r] now does not use PPM on aarch64 Linux, because PPM

... (truncated)

Commits

• d3c5be5 Update NEWS for v1.12.1 (#1087)
• 0d1fbb4 Add /investigate workflow (#1084)
• ed1849b Use codecov/codecov-action v7 (#1082)
• 173cb9d Update lock-threads and scorecard action versions
• 2e3959d Update quarto-dev/quarto-actions/setup to v2.2.0 (#1076)
• ff9d3a3 [setup-r] avoid typed-rest-client (#1075)
• 122fa05 Fix typo (#1073)
• a51a801 Pin SHA of dependent actions (#1071)
• 9f58233 Update NEWS heading before release (#1068)
• 59b36d9 No need to test on windows/oldrel/4 any more (#1069)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.