chore(deps): Bump r-lib/actions/setup-r from 2.12.1 to 2.13.0

[dependabot]

Bumps r-lib/actions/setup-r from 2.12.1 to 2.13.0.

Changelog

Sourced from r-lib/actions/setup-r's changelog.

v2.13.0 (2026-08028)

• [setup-r] now retries r-hub.io HTTP failures (#1088, @​nbenn).

• [setup-r] now sets the correct RTOOLS environment variables on aarch64 Windows (@​vjymisal0, #1104).

• [setup-r] keep repositories if they are set by the build. E.g. aarch64 Windows builds now set them (@​jeroen, #1101).

• [setup-r] now retries transient failures when resolving the R version from api.r-hub.io, rather than failing the job on the first timeout or server error (@​nbenn, #1086).

• [setup-r-dependencies] now switches back to classic sudo, if available, on Linux. This fixes installing pak on Ubuntu 26.04 runners (@​jeroen, #1096).

v2.12.1 (2026-06-23)

• [setup-r] now avoids a warning about an url.parse() deprecation (#1074).

• [setup-r-dependencies] now uses quarto-dev/quarto-actions v2.2.0 (@​jdblischak, #1076).

• Examples: test-coverage.yaml now uses codecov/codecov-action v7 (@​shikokuchuo, #1081).

• New example claude-investigate.yaml workflow (@​DavisVaughan, #1084).

v2.12.0 (2026-04-29)

• All node.js actions use node 24 now. Relatedly, all example workflows use recent versions of actions that use node 24.

• [setup-r] now uses use-public-rspm: true by default on Linux and Windows. macOS binaries require further opt-in with use-public-rspm: always.

• It is now possible to require actions to be pinned to a full-length commit SHA in repositories using r-lib/actions (#1070).

• [setup-pandoc][setup-r-dependencies] now default to Pandoc version 3.8.3.

• [setup-r-dependencies] now includes the R architecture in the cache key, so caches for macos-15 (Apple Silicon) and macos-15-intel (Rosetta/x86_64) no longer collide (#1035).

... (truncated)

Commits

• 465b7d8 NEWS for 2.13.0 (#1105)
• d06a540 [setup-r] retry transient r-hub.io request failures (#1088)
• ed9aa85 fix(setup-r): export correct RTOOLS HOME env vars on Windows ARM64 and x64 (#...
• c86f32c setup-r-dependencies: set JAVA_HOME on Windows runners from Java 21 env vars ...
• 2a66450 setup-r-dependencies: switch back to classic sudo on runners with sudo-rs (#1...
• 5cc1f0d Fix minor typo (#1098)
• 33d09fb fix: Remove stray ::group:: (#1103)
• aae88a2 Special-case CRAN mirror for Windows ARM64 (#1101)
• b7484da [setup-r] Support installing RTools without installing R (#1093)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Overview
Updates the CI workflow pin for r-lib/actions/setup-r from commit d3c5be51… (v2.12.1) to 465b7d8e… (v2.13.0). No application or R/Python script changes—only the R setup step in .github/workflows/ci.yml.

The newer action mainly improves reliability of R version resolution (retries on transient api.r-hub.io / r-hub.io failures) and includes platform fixes that matter more on Windows/aarch64 than on this repo’s ubuntu-latest job.

^{Reviewed by Cursor Bugbot for commit 0f2a2af. Bugbot is set up for automated code reviews on this repo. Configure here.}