Bump the nuget-dependencies group with 2 updates (#95)

Bumps demaconsulting.spdxtool from 2.7.0 to 2.8.0
Bumps Polyfill from 9.12.0 to 9.13.0

---
updated-dependencies:
- dependency-name: demaconsulting.spdxtool
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Polyfill
  dependency-version: 9.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.config/dotnet-tools.json

@@ -9,7 +9,7 @@
       ]
     },
     "demaconsulting.spdxtool": {
-      "version": "2.7.0",
+      "version": "2.8.0",
       "commands": [
         "spdx-tool"
       ]

src/DemaConsulting.SonarMark/DemaConsulting.SonarMark.csproj

@@ -66,7 +66,7 @@
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
     <!-- Polyfill is a source-only package; contentfiles delivers the polyfill source into this project -->
-    <PackageReference Include="Polyfill" Version="9.12.0">
+    <PackageReference Include="Polyfill" Version="9.13.0">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>