chore(deps-dev): bump @microsoft/vally-cli from 0.4.0 to 0.5.0 in the npm-dependencies group across 1 directory

[dependabot]

Bumps the npm-dependencies group with 1 update in the / directory: @microsoft/vally-cli.

Updates @microsoft/vally-cli from 0.4.0 to 0.5.0

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.
• ⚠️ 2 packages with OpenSSF Scorecard issues.

See the Details below.

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
npm/@github/copilot	1.0.56	Unknown	Unknown
npm/@github/copilot-darwin-arm64	1.0.56	Unknown	Unknown
npm/@github/copilot-darwin-x64	1.0.56	Unknown	Unknown
npm/@github/copilot-linux-arm64	1.0.56	Unknown	Unknown
npm/@github/copilot-linux-x64	1.0.56	Unknown	Unknown
npm/@github/copilot-linuxmusl-arm64	1.0.56	Unknown	Unknown
npm/@github/copilot-linuxmusl-x64	1.0.56	Unknown	Unknown
npm/@github/copilot-sdk	1.0.0-beta.5	Unknown	Unknown
npm/@github/copilot-win32-arm64	1.0.56	Unknown	Unknown
npm/@github/copilot-win32-x64	1.0.56	Unknown	Unknown
npm/@hono/node-server	2.0.4	Unknown	Unknown
npm/@microsoft/vally	0.5.0	Unknown	Unknown
npm/@microsoft/vally-cli	0.5.0	Unknown	Unknown
npm/@microsoft/vally-server	0.5.0	Unknown	Unknown
npm/better-sqlite3	12.10.0	Unknown	Unknown
npm/bindings	1.5.0	⚠️ 2.3	Details Check Score Reason Code-Review ⚠️ 2 Found 7/25 approved changesets -- score normalized to 2 Token-Permissions ⚠️ -1 No tokens found Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Dangerous-Workflow ⚠️ -1 no workflows found Pinned-Dependencies ⚠️ -1 no dependencies found Packaging ⚠️ -1 packaging workflow not detected Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/file-uri-to-path	1.0.0	⚠️ 2.8	Details Check Score Reason Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Packaging ⚠️ -1 packaging workflow not detected Code-Review ⚠️ 0 Found 2/22 approved changesets -- score normalized to 0 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/hono	4.12.23	Unknown	Unknown

Scanned Files

• package-lock.json

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.32%. Comparing base (d2868d5) to head (2fc1f0a).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1656      +/-   ##
==========================================
- Coverage   85.33%   85.32%   -0.01%     
==========================================
  Files          90       90              
  Lines       13004    13004              
==========================================
- Hits        11097    11096       -1     
- Misses       1907     1908       +1     

Flag	Coverage Δ
pester	83.89% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[WilliamBerryiii]

@dependabot rebase

[dependabot]

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[dependabot]

Looks like @microsoft/vally-cli is updatable in another way, so this is no longer needed.