Pin version for dependency-review-action

See kachick/kachick.github.io#148

Import kachick/anylang-template@ef7a373

No renovate config changes for now

CI of #171 is broken from this

.github/workflows/dependency-review.yml

@@ -11,7 +11,7 @@ jobs:
       - name: 'Checkout Repository'
         uses: actions/checkout@v4
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@v4
+        uses: actions/dependency-review-action@5bbc3ba658137598168acb2ab73b21c432dd411b # v4.2.5
         with:
           # https://spdx.org/licenses/
           allow-licenses: MIT, BSD-3-Clause, BSD-2-Clause, 0BSD, Unlicense, ISC, Apache-2.0