ci: bump the ci-updates group across 1 directory with 3 updates

Bumps the ci-updates group with 3 updates in the / directory: [actions/cache](https://github.com/actions/cache), [fossas/fossa-action](https://github.com/fossas/fossa-action) and [py-cov-action/python-coverage-comment-action](https://github.com/py-cov-action/python-coverage-comment-action).


Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v4...v5)

Updates `fossas/fossa-action` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/fossas/fossa-action/releases)
- [Commits](fossas/fossa-action@3ebcea1...c414b9a)

Updates `py-cov-action/python-coverage-comment-action` from 3.39 to 3.40
- [Release notes](https://github.com/py-cov-action/python-coverage-comment-action/releases)
- [Commits](py-cov-action/python-coverage-comment-action@e623398...7188638)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-updates
- dependency-name: fossas/fossa-action
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-updates
- dependency-name: py-cov-action/python-coverage-comment-action
  dependency-version: '3.40'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-updates
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/api-docs.yaml

@@ -24,7 +24,7 @@ jobs:
           python-version: 3.x
 
       - name: Setup cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           key: ${{ github.ref }}
           path: .cache

.github/workflows/compliance.yml

@@ -35,14 +35,14 @@ jobs:
 
       - name: Send license report to Fossa
         # This will collect all necessary information (mostly used dependencies) and send it to the Fossa API
-        uses: fossas/fossa-action@3ebcea1862c6ffbd5cf1b4d0bd6b3fe7bd6f2cac # Use a specific version if locking is preferred
+        uses: fossas/fossa-action@c414b9ad82eaad041e47a7cf62a4f02411f427a0 # Use a specific version if locking is preferred
         with:
           api-key: ${{ secrets.FOSSA_LICENSE_SCAN_TOKEN }}
 
       - name: Check license compliance
         # This will poll the Fossa API until they have processed the information which we've sent in the previous step
         # and fail if Fossa found an issue with the licences of our dependencies.
-        uses: fossas/fossa-action@3ebcea1862c6ffbd5cf1b4d0bd6b3fe7bd6f2cac # Use a specific version if locking is preferred
+        uses: fossas/fossa-action@c414b9ad82eaad041e47a7cf62a4f02411f427a0 # Use a specific version if locking is preferred
         with:
           api-key: ${{ secrets.FOSSA_LICENSE_SCAN_TOKEN }}
           run-tests: true

.github/workflows/continuous-integration.yml

@@ -88,6 +88,6 @@ jobs:
         run: make tests-with-cov
       - name: Coverage comment
         id: coverage_comment
-        uses: py-cov-action/python-coverage-comment-action@e623398c19eb3853a5572d4a516e10b15b5cefbc
+        uses: py-cov-action/python-coverage-comment-action@7188638f871f721a365d644f505d1ff3df20d683
         with:
           GITHUB_TOKEN: ${{ github.token }}