Bump the npm-dependencies group in /sources with 2 updates

Bumps the npm-dependencies group in /sources with 2 updates: [semver](https://github.com/npm/node-semver) and [eslint-plugin-github](https://github.com/github/eslint-plugin-github).


Updates `semver` from 7.6.3 to 7.7.1
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.6.3...v7.7.1)

Updates `eslint-plugin-github` from 5.1.6 to 5.1.7
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v5.1.6...v5.1.7)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

sources/package.json

@@ -43,7 +43,7 @@
     "@octokit/rest": "21.1.0",
     "@octokit/webhooks-types": "7.6.1",
     "cheerio": "^1.0.0",
-    "semver": "7.6.3",
+    "semver": "7.7.1",
     "string-argv": "0.3.2",
     "typed-rest-client": "2.1.0",
     "unhomoglyph": "1.0.6",
@@ -58,7 +58,7 @@
     "@typescript-eslint/parser": "7.18.0",
     "@vercel/ncc": "0.38.3",
     "eslint": "8.57.1",
-    "eslint-plugin-github": "5.1.6",
+    "eslint-plugin-github": "5.1.7",
     "eslint-plugin-jest": "28.11.0",
     "jest": "29.7.0",
     "js-yaml": "4.1.0",