Bump packageurl-js from 1.2.1 to 2.0.1

Bumps [packageurl-js](https://github.com/package-url/packageurl-js) from 1.2.1 to 2.0.1.
- [Changelog](https://github.com/package-url/packageurl-js/blob/master/CHANGELOG.md)
- [Commits](package-url/packageurl-js@v1.2.1...v2.0.1)

---
updated-dependencies:
- dependency-name: packageurl-js
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

example/package.json

@@ -13,7 +13,7 @@
   "dependencies": {
     "@actions/exec": "^1.1.1",
     "@github/dependency-submission-toolkit": "file:../",
-    "packageurl-js": "^1.2.1"
+    "packageurl-js": "^2.0.1"
   },
   "devDependencies": {
     "@tsconfig/strictest": "^2.0.2",

package-lock.json

@@ -40,7 +40,7 @@
     "@actions/github": "^6.0.0",
     "@octokit/request-error": "^6.1.1",
     "@octokit/webhooks-types": "^7.5.0",
-    "packageurl-js": "^1.2.1"
+    "packageurl-js": "^2.0.1"
   },
   "devDependencies": {
     "@biomejs/biome": "^1.7.0",