chore(deps): Bump github.com/DeliciousBuding/cloud-path from 0.2.42 to 0.2.43 in /drivers/stcb

[dependabot]

Bumps github.com/DeliciousBuding/cloud-path from 0.2.42 to 0.2.43.

Release notes

Sourced from github.com/DeliciousBuding/cloud-path's releases.

v0.2.43

CloudPath v0.2.43.

Assets follow cloudpath-<component>_<version>_<os>_<arch>[.exe]; verify them with sha256sum -c checksums.txt --ignore-missing.

The server embeds the WebUI (built with -tags embed_ui) and every artifact is CGO_ENABLED=0 -trimpath. linux/arm64 is the required release target; see deploy/README.md for the systemd

• nginx SOP and deploy/compose/README.md for the containerized form. A multi-arch image of the same tag is published to GHCR by .github/workflows/container.yml. CloudPath is licensed under the Apache License 2.0; LICENSE and NOTICE are included as release assets.

What's Changed

• chore(deps-dev): bump vitest from 3.2.7 to 4.1.11 in /webui by @​dependabot[bot] in DeliciousBuding/cloud-path#21
• feat: 支持插件 monorepo catalog 发现与安装 by @​DeliciousBuding in DeliciousBuding/cloud-path#41
• fix: 强化插件 catalog 安装边界 by @​DeliciousBuding in DeliciousBuding/cloud-path#42

New Contributors

• @​dependabot[bot] made their first contribution in DeliciousBuding/cloud-path#21

Full Changelog: DeliciousBuding/cloud-path@v0.2.42...v0.2.43

Changelog

Sourced from github.com/DeliciousBuding/cloud-path's changelog.

v0.2.43 — 2026-09-10

状态：已发布（2026-09-10）；v0.2.43 Release 含六平台 18 个二进制与 checksums.txt。生产 Server/Edge 与临时 CloudPath 服务继续保持退役，不做部署。

• 插件目录：新增 monorepo 根 plugins.yaml catalog 解析与校验；tagPrefix 必须严格等于插件 path，条目可用 id、slug 或 path 精确选择，archived: true 不进入搜索/检查/安装候选。
• Release：catalog 插件按 <path>/v* 列出 Release 并选最高 semver，再断言 tag 严格等于 <path>/v<manifest.version>；单插件仓库继续使用 /releases/latest。
• 锁与信任：LockedPlugin/RegistryEntry 增加可选 tag、pluginPath；旧 lock 保持可读并继续使用格式版本 1。更新跨 source 迁移必须显式 --allow-source-change，且不能把 verified 安装降级为 unreviewed TOFU。
• CLI：inspect/install 增加 --plugin，update 增加 --source、--plugin、--allow-source-change；install 在替换已安装插件时也接受 --allow-source-change；search 在 topic 命中上展开非 archived catalog 候选，并对单个 catalog 失败保留 topic 回退和安全 warning。
• 信任硬化：install/reinstall 自动读取同 ID 的已有 lock，继续受 verified/source/publisher 门禁；update 的目标 lock ID 与解析出的 manifest ID 强绑定。catalog entry 的 id/kind 必须与 <path>/plugin.yaml 一致，空 catalog 也不回退到单插件布局。
• 资产选择：catalog asset 按 <asset>_<version>_<goos>_<goarch>[.exe] 绑定当前平台；没有精确架构时 fail-closed，不再回退到同 OS 的其它架构。

Commits

• c2a781e fix: 强化插件 catalog 安装边界 (#42)
• 44d0804 feat: 支持插件 monorepo catalog 发现与安装 (#41)
• 1a1fe39 chore(deps-dev): bump vitest to 4.1.11
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)