Bump google/osv-scanner-action/osv-reporter-action from 2.3.8 to 2.5.0

Bumps [google/osv-scanner-action/osv-reporter-action](https://github.com/google/osv-scanner-action) from 2.3.8 to 2.5.0.
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@9a49870...8deb546)

---
updated-dependencies:
- dependency-name: google/osv-scanner-action/osv-reporter-action
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/release.yml

@@ -71,7 +71,7 @@ jobs:
             ./deployah-amd64.tar
 
       - name: Report OSV-Scanner results
-        uses: google/osv-scanner-action/osv-reporter-action@9a498708959aeaef5ef730655706c5a1df1edbc2 # v2.3.8
+        uses: google/osv-scanner-action/osv-reporter-action@8deb546fdb875b9996d27d4950be7312dac076a1 # v2.5.0
         with:
           scan-args: |-
             --output=results.sarif