Bump the npm_and_yarn group group with 2 updates

Bumps the npm_and_yarn group group with 2 updates: [mocha](https://github.com/mochajs/mocha) and [flat](https://github.com/hughsk/flat).


Updates `mocha` from 7.2.0 to 10.3.0
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)
- [Commits](mochajs/mocha@v7.2.0...v10.3.0)

Updates `flat` from 4.1.0 to 5.0.2
- [Release notes](https://github.com/hughsk/flat/releases)
- [Commits](hughsk/flat@4.1.0...5.0.2)

---
updated-dependencies:
- dependency-name: mocha
  dependency-type: direct:development
  dependency-group: npm_and_yarn-security-group
- dependency-name: flat
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
...

Signed-off-by: dependabot[bot] <support@github.com>