⬆️ deps(github-actions): update getplumber/plumber action to v0.4.57

[Open-Source-Bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
getplumber/plumber	action	patch	v0.4.48 → v0.4.57	v0.4.63 (+5)

---

Release Notes

getplumber/plumber (getplumber/plumber)

v0.4.57

Compare Source

✨ Features

• platform: export the score band and push final_points (95216ef)

👷 CI/CD

• release: pin v0.4.57 refs [skip ci] (d7bb560)

v0.4.56

Compare Source

✨ Features

• cidigest: add the wire-stable ci config digest_v1 replica (ADR-0034 rule 1) (3cb009c)
• platform: decode project details, security policy, raw config and merge status from the snapshot (f0abae3)
• platform: evaluate merge settings and security policy from the snapshot lanes (1892301)
• platform: use the served merge status, ci errors and raw config (607912c)

🐛 Bug Fixes

• platform: gate the served raw config on the anchor, validate the merge status (628c343)
• platform: serve the raw config only at the snapshot's commit; name absent lanes (7faf706)

📚 Documentation

• platform: design spec for platform-mode collection without a GitLab token (640128f)
• platform: implementation plan for token-free platform-mode collection (7c9e6d1)
• platform: rescope the platform-mode work to the snapshot lanes the cli does not consume yet (68c25e5)

👷 CI/CD

• release: pin v0.4.56 refs [skip ci] (2c9b116)

v0.4.55

Compare Source

✨ Features

• catalog: authored requiresConfig flag for controls inert without configuration (#​458) (747baab), closes getplumber/plumber#459
• catalog: export the control/issue catalog as the single source of truth (#​458) (15ed919), closes #​448

🐛 Bug Fixes

• catalog: drop the false debug-trace default; the engine has no built-in list (6a7c2dd)
• catalog: rendered-string cleanup, contract guard tests and CI deadcode exemption (#​458) (8317e03)

📚 Documentation

• catalog: design spec and implementation plan for the catalog export (#​458) (6ebc83c)

👷 CI/CD

• release: pin v0.4.55 refs [skip ci] (bad1d73)

v0.4.54

Compare Source

🐛 Bug Fixes

• address review comment on #​442 (0d67cd6)
• BUG: ISSUE-705 cannot see a ref-scoped type=gha buildx cache (scope= parameter ignored) (#​433) (25facb0)

👷 CI/CD

• release: pin v0.4.54 refs [skip ci] (a5d3fd5)

v0.4.53

Compare Source

🐛 Bug Fixes

• ci: build release binaries with Go 1.26.6 (a5fc07c), closes #​446

👷 CI/CD

• release: pin v0.4.53 refs [skip ci] (b03e5d3)

v0.4.52

Compare Source

🐛 Bug Fixes

• image: move to Alpine 3.23 and bump x/crypto to v0.56.0 to clear image CVEs (77425b9)

👷 CI/CD

• release: pin v0.4.52 refs [skip ci] (dcafb49)

v0.4.51

Compare Source

✨ Features

• artifacts: emit the analyzed commit ref in every artifact and the analyzed CI file in the JSON report (#​443) (15e5bd6)

👷 CI/CD

• release: pin v0.4.51 refs [skip ci] (d71e846)

v0.4.50

Compare Source

✨ Features

• catalog: export human-readable control names and categories (#​440) (c50e9c7)

✅ Tests

• platform: assert display metadata on the decoded push body for all three finding branches (2dbf0c5)
• platform: pin the review-flagged guards from the platform-mode audit (8261477), closes #​431

👷 CI/CD

• release: pin v0.4.50 refs [skip ci] (39b2b67)

v0.4.49

Compare Source

✨ Features

• platform: export include job attribution and consume includes[].jobs (619949c)
• platform: fetch policies and collected data from the platform (9e3fb7e)
• platform: fire the resolve request at setup and collect it at first use (97656cb)

🐛 Bug Fixes

• cmd: compare the checkout remote to --gitlab-url ignoring the scheme (bdc398e)
• gitlab: a platform cache miss is not an authoritative empty variables listing (4c6f96e)
• gitlab: normalise the nested-include comparison and export SplitComponentPath (81322b0)
• platform: drop the sync ResolveRunConfig wrapper the deadcode gate rejects (9f2bb87)
• platform: push effective_config as the flat per-provider controls map (fd04954)

👷 CI/CD

• release: pin v0.4.49 refs [skip ci] (0c96d72)

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • At 10:00 PM through 11:59 PM and 12:00 AM through 06:59 AM (* 22-23,0-6 * * *)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.