Merge pull request #1009 from ocaml/dependabot/github_actions/actions/dependency-review-action-4.8.0

Author: smorimoto

.github/workflows/dependency-review.yml

@@ -14,4 +14,4 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Dependency Review
-        uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3
+        uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0