ci: remove osv action job and bump requests depenency

Author: dependabot[bot]

.github/workflows/security.yml

@@ -9,17 +9,6 @@ on:
     - cron: "0 0 * * 1" # every Monday at 00:00 UTC
 
 jobs:
-  osv-scanner:
-    if: "!startsWith(github.event.head_commit.message, 'bump:')"
-    runs-on: ubuntu-latest
-    container:
-      image: ghcr.io/google/osv-scanner:v2.1.0@sha256:9a1ba57d2a1506c9e9d0dfbeaf46346507e829745b70d47d77e12c38e66de8d7
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - name: Run OSV Scanner
-        run: |
-          /osv-scanner --format table -r .
-
   semgrep:
     if: github.event_name != 'schedule' && !startsWith(github.event.head_commit.message, 'bump:')
     runs-on: ubuntu-latest
@@ -29,7 +18,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Run Semgrep
         run: |
-          semgrep scan --config auto
+          semgrep scan --config auto --error
 
   twyn:
     if: github.event_name != 'schedule' && !startsWith(github.event.head_commit.message, 'bump:')