fix(deps): update ghcr.io/containerbase/base docker tag to v13.5.7

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/containerbase/base	final	patch	13.5.5 -> 13.5.7

---

Release Notes

containerbase/base (ghcr.io/containerbase/base)

v13.5.7

Compare Source

Tests

• deps: update dependency pnpm to v9.15.2 (main) (#​3877) (e506a71)
• deps: update dependency sops to v3.9.3 (main) (#​3879) (105fbc8)

Build System

• deps: update dependency @​yao-pkg/pkg to v6.2.0 (main) (#​3881) (646ddac)

Miscellaneous Chores

• deps: update dependency lint-staged to v15.3.0 (main) (#​3880) (fc60bc0)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v13.5.6 (main) (#​3875) (0cc4b27)
• deps: update pnpm to v9.15.2 (main) (#​3876) (c2e3d5c)

v13.5.6

Compare Source

Tests

• deps: update dependency checkov to v3.2.344 (main) (#​3871) (fb8f83e)
• deps: update dependency renovate to v39.86.0 (main) (#​3872) (81214e0)

Build System

• deps: lock file maintenance (main) (#​3874) (cfab7dd)

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v3.5.17 (main) (#​3873) (884e251)
• deps: update dependency type-fest to v4.31.0 (main) (#​3870) (679a174)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v13.5.5 (main) (#​3869) (1c68dc6)
• renovate: add ruby versioning annotation (#​3868) (b9f0f7d)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.