ci: bump actions/dependency-review-action from 1 to 2.5.0 (#463)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/dependency-review.yml

@@ -13,4 +13,4 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - uses: actions/checkout@v3
-      - uses: actions/dependency-review-action@v1
+      - uses: actions/dependency-review-action@v2.5.0