Add Dependabot configuration for uv and npm

[juhoinkinen]

PR #6 added the .github/dependabot.yml file with config only for GH Actions updates.

Now this adds configs also for uv and npm controlled dependencies, and groups all updates to a single PR and uses 10 days cooldown for all dependecies.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.58%. Comparing base (c0d74a6) to head (5180455).

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #34   +/-   ##
=======================================
  Coverage   95.58%   95.58%           
=======================================
  Files           6        6           
  Lines          68       68           
=======================================
  Hits           65       65           
  Misses          3        3           

Flag	Coverage Δ
unittests	95.58% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Copilot]

Pull request overview

Expands the repository’s Dependabot setup beyond GitHub Actions to also cover application dependencies, aiming to group updates into a single PR with a shared cadence/cooldown.

Changes:

• Introduces a multi-ecosystem-groups section intended to centralize scheduling/cooldown behavior.
• Adds Dependabot update entries for uv and npm, and assigns all ecosystems to the same group.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[osma]

Looks like the Copilot review is at least partly rubbish. Anyway, might be worth checking out. LGTM

[juhoinkinen]

Well, this did not work. There is an error message in https://github.com/NatLibFi/BIBRA/network/updates:

Your .github/dependabot.yml contained invalid details

Dependabot encountered the following error when parsing your .github/dependabot.yml:

The property '#/updates/0/patterns' is required when 'multi-ecosystem-group' is set.

Please update the config file to conform with Dependabot's specification.

So I added this to the config of each "ecosystem":

patterns:
  - "*"

Now this seems to work: #45