Add dependency review job to code quality workflow

[frasermolyneux]

This pull request adds a new job to the GitHub Actions workflow to automatically review dependencies on pull requests. This helps ensure that any new or updated dependencies are checked for security and compliance issues before merging.

CI/CD improvements:

• .github/workflows/codequality.yml: Added a dependency-review job that runs on pull requests and uses the actions/dependency-review-action@v4 to automatically review dependency changes.

[Copilot]

Pull request overview

This pull request adds a dependency review job to the GitHub Actions code quality workflow to automatically scan and review dependencies in pull requests for security and compliance issues.

Changes:

• Added dependency-review job to the codequality.yml workflow that runs on pull requests using GitHub's dependency-review-action

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.