⬆️ deps(github-actions): update getplumber/plumber action to v0.3.70

[Open-Source-Bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
getplumber/plumber	action	patch	v0.3.50 → v0.3.70	v0.3.73 (+2)

---

Release Notes

getplumber/plumber (getplumber/plumber)

v0.3.70

Compare Source

🔧 Chores

• ci: bump actions/checkout from 6.0.3 to 7.0.0 (b9ad7a3)
• ci: Fix trigger ci (0641e69)

👷 CI/CD

• release: pin v0.3.70 refs [skip ci] (18a8265)

v0.3.69

Compare Source

✨ Features

• controls: Issue-184. Add controls for github and gitlab that detect if actions/components versions also exist as branches, causing confusion (da6d2c4)

👷 CI/CD

• release: pin v0.3.69 refs [skip ci] (d617406)

v0.3.68

Compare Source

🐛 Bug Fixes

• template: avoid circular GITLAB_TOKEN/PLUMBER_TOKEN reference (d78e21e)

👷 CI/CD

• release: add all commit type in release notes (db81766)
• release: pin v0.3.68 refs [skip ci] (67fe2fc)

v0.3.67

Compare Source

v0.3.66

Compare Source

v0.3.65

Compare Source

♻️ Refactoring

• provider: add provider abstraction, dissolve collector into gitlab/github (c309d1d)

v0.3.64

Compare Source

✨ Features

• analyze,template: add verbose env var and simplify CI template via env var delegation (742487f)
• analyze: support environment variables (cd47fcd)

🐛 Bug Fixes

• analyze: document env vars and cover fallbacks with tests (3a659f9)
• lint: replace spaces by tabs (gofmt) (5a84933)

v0.3.62

Compare Source

✨ Features

• control: add githubActionMustComeFromAuthorizedSources (ISSUE-713) (74d60c6), closes #​253

v0.3.61

Compare Source

🐛 Bug Fixes

• wizard: Make platform selection in wizard cleaner (2987afb)

v0.3.60

Compare Source

🐛 Bug Fixes

• control: Issue #​156 - Outdated Includes (00d6866)

v0.3.59

Compare Source

🐛 Bug Fixes

• control: Add missing pullRequestTargetHeadCheckoutResult and correctly count workflowsWithDangerousTrigger in reports (4e73959)

v0.3.58

Compare Source

🐛 Bug Fixes

• control: Fix false positives in issue 207 (3a471ba)

v0.3.57

Compare Source

🐛 Bug Fixes

• analysis: Issue #​220 - Make data collection on github and gitlab more robust to network and fetch failures and render them in a UX friendly way (650b13a)

v0.3.56

Compare Source

🐛 Bug Fixes

• control: ISSUE-411 false positive when piping a local variable into an interpreter (echo "$VAR" | python3). Issue #​236 (201755d)

v0.3.55

Compare Source

🐛 Bug Fixes

• control: Align dangerous-trigger metric with rule events and de-duplicate findings per job. Issue #​235 (51e4c01)

v0.3.54

Compare Source

🐛 Bug Fixes

• control: Recognize safe dangerous triggers through protective mechanis such as psuh events and author association list. Issue #​235 (7aea20e)

v0.3.53

Compare Source

🐛 Bug Fixes

• analysis: Display clear error when fetching remote branch that doesnt exist (9f15e31)

v0.3.52

Compare Source

✨ Features

• score: Enforce --score always. Always make it so that this automatically uses this for the plumber compliance badge and mr comments (809685a)

v0.3.51

Compare Source

✨ Features

• gh: Make data collector retry fetching tags with no auth if auth gets blocked + allow users to provide a metadata token to be used (a pat) (dd65ebc)

🐛 Bug Fixes

• ctrl: False positive when using moving tags (84b4a8f)

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • At 10:00 PM through 11:59 PM and 12:00 AM through 06:59 AM (* 22-23,0-6 * * *)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.