Bump the npm-dependencies group in /sources with 2 updates

Bumps the npm-dependencies group in /sources with 2 updates: [semver](https://github.com/npm/node-semver) and [eslint-plugin-github](https://github.com/github/eslint-plugin-github).


Updates `semver` from 7.6.3 to 7.7.1
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.6.3...v7.7.1)

Updates `eslint-plugin-github` from 5.1.6 to 5.1.7
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](github/eslint-plugin-github@v5.1.6...v5.1.7)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>