Build(deps): bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 (#1476)

* Build(deps): bump dependabot/fetch-metadata from 2.4.0 to 2.5.0

Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 2.4.0 to 2.5.0.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@v2.4.0...v2.5.0)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chrome-secomp: add openat2

Fixes: docker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error closing exec fds: get handle to /proc/thread-self/fd: unsafe procfs detected: openat2 fsmount:fscontext:proc/thread-self/fd/: function not implemented

See https://forums.docker.com/t/unable-to-start-container-process/150457

* chrome-seccomp.json: log not allowed syscalls instead of blocking

* chrome-secomp: add statx

Fixes docker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error closing exec fds: get handle to /proc/thread-self/fd: reopen fsmount:fscontext:proc/thread-self/fd/: check safety of /proc/thread-self/fd/8 magiclink: get root mount id: statx(STATX_MNT_ID_...) fsmount:fscontext:proc/: could not get mount id: operation not permitted

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: macbre <maciej.brencz@gmail.com>

Author: dependabot[bot]

.github/workflows/auto-merge-dependabot.yml

@@ -13,7 +13,7 @@ jobs:
         steps:
             - name: Dependabot metadata
               id: metadata
-              uses: dependabot/fetch-metadata@v2.4.0
+              uses: dependabot/fetch-metadata@v2.5.0
               with:
                   github-token: "${{ secrets.GITHUB_TOKEN }}"
             - name: Enable auto-merge for Dependabot PRs

chrome-seccomp.json

@@ -826,6 +826,11 @@
             "action": "SCMP_ACT_ALLOW",
             "args": null
         },
+        {
+            "name": "openat2",
+            "action": "SCMP_ACT_ALLOW",
+            "args": null
+        },
         {
             "name": "pause",
             "action": "SCMP_ACT_ALLOW",
@@ -1341,6 +1346,11 @@
             "action": "SCMP_ACT_ALLOW",
             "args": null
         },
+        {
+            "name": "statx",
+            "action": "SCMP_ACT_ALLOW",
+            "args": null
+        },
         {
             "name": "symlink",
             "action": "SCMP_ACT_ALLOW",