Bump the github-actions group with 2 updates

Bumps the github-actions group with 2 updates: [actions/dependency-review-action](https://github.com/actions/dependency-review-action) and [davelosert/vitest-coverage-report-action](https://github.com/davelosert/vitest-coverage-report-action).


Updates `actions/dependency-review-action` from 4.9.0 to 5.0.0
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@v4.9.0...v5.0.0)

Updates `davelosert/vitest-coverage-report-action` from 2.11.2 to 2.12.0
- [Release notes](https://github.com/davelosert/vitest-coverage-report-action/releases)
- [Changelog](https://github.com/davelosert/vitest-coverage-report-action/blob/main/release.config.js)
- [Commits](davelosert/vitest-coverage-report-action@3c50566...02f3c2e)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: davelosert/vitest-coverage-report-action
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/dependency-review.yml

@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v6.0.2
 
       - name: Dependency Review
-        uses: actions/dependency-review-action@v4.9.0
+        uses: actions/dependency-review-action@v5.0.0
         with:
           fail-on-severity: critical
           comment-summary-in-pr: always

.github/workflows/test.yml

@@ -69,7 +69,7 @@ jobs:
         if: steps.vitest.outcome == 'success' &&
           hashFiles('coverage/coverage-summary.json') != ''
         # v2.9.0
-        uses: davelosert/vitest-coverage-report-action@3c50566c523e04813df28de8f7c48dd97d663f1c
+        uses: davelosert/vitest-coverage-report-action@02f3c2e641286b7fa308cd3e430783103ce6103b
         with:
           json-summary-path: "./coverage/coverage-summary.json"
           json-final-path: "./coverage/coverage-final.json"