chore(deps): bump the github-actions-minor-patch group with 2 updates

Bumps the github-actions-minor-patch group with 2 updates: [rvagg/depsound-action](https://github.com/rvagg/depsound-action) and [rvagg/depsound-action/post](https://github.com/rvagg/depsound-action).


Updates `rvagg/depsound-action` from 0.3.6 to 0.5.0
- [Release notes](https://github.com/rvagg/depsound-action/releases)
- [Changelog](https://github.com/rvagg/depsound-action/blob/master/CHANGELOG.md)
- [Commits](rvagg/depsound-action@7c7eb2b...49940d1)

Updates `rvagg/depsound-action/post` from 0.3.6 to 0.5.0
- [Release notes](https://github.com/rvagg/depsound-action/releases)
- [Changelog](https://github.com/rvagg/depsound-action/blob/master/CHANGELOG.md)
- [Commits](rvagg/depsound-action@7c7eb2b...49940d1)

---
updated-dependencies:
- dependency-name: rvagg/depsound-action
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-minor-patch
- dependency-name: rvagg/depsound-action/post
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/depsound.yml

@@ -20,7 +20,7 @@ jobs:
     permissions:
       contents: read # diff the PR's manifests; this job never sees a write token
     steps:
-      - uses: rvagg/depsound-action@7c7eb2bfc936dc8242f0592f6d7c4f9835510380 # v0.3.6
+      - uses: rvagg/depsound-action@49940d1f04828a01799cc129f3930d9bd42bceda # v0.5.0
   post:
     needs: review
     if: ${{ always() && needs.review.result != 'cancelled' }} # a failed review still posts its failure marker
@@ -30,4 +30,4 @@ jobs:
       checks: write        # set the neutral check
       actions: read        # download the report artifact
     steps:
-      - uses: rvagg/depsound-action/post@7c7eb2bfc936dc8242f0592f6d7c4f9835510380 # v0.3.6
+      - uses: rvagg/depsound-action/post@49940d1f04828a01799cc129f3930d9bd42bceda # v0.5.0