Bum dependency-review action

[lucasmrod]

Fixes the following warning

found in the following run: https://github.com/fleetdm/fleet/actions/runs/29234677374/job/86766507782

Summary by CodeRabbit

• Chores
  • Updated dependency review checks to use the latest workflow action version.

[Copilot]

Pull request overview

This PR updates the GitHub Actions dependency review workflow to use the latest major version of actions/dependency-review-action, addressing the warning surfaced in CI.

Changes:

• Bumps actions/dependency-review-action from v4.7.1 to v5.0.0 (pinned by commit SHA).
• Keeps the workflow permissions and structure unchanged (still contents: read), which remains sufficient unless PR-commenting features are enabled.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 4353af3d-9e9c-4d24-8b19-016cfefe12e9

📥 Commits

Reviewing files that changed from the base of the PR and between 2299f02 and 1c7b852.

📒 Files selected for processing (1)

• .github/workflows/dependency-review.yml

---

Walkthrough

Updated the Dependency Review workflow step to use actions/dependency-review-action v5.0.0 instead of v4.7.1.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is too brief and does not follow the required template sections or checklist items.	Add the template sections, including related issue, checklist items, testing, and any applicable deployment or migration notes.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title is concise and matches the change: updating the dependency-review action.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch update-dependency-review-action-to-5.0.0

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}