Fix vite vulnerabilities and enable Dependabot

[Copilot]

Resolves 3 vite security vulnerabilities (1 moderate, 2 low) affecting file serving and path traversal. Adds Dependabot configuration for automated dependency updates.

Changes

• Security fixes: Updated vitest ecosystem from 3.2.4 to 4.0.5, transitively updating vite from 7.1.4 to 7.1.12

  • vitest: 3.2.4 → 4.0.5
  • @vitest/ui: 3.2.4 → 4.0.5
  • @vitest/coverage-v8: 3.2.4 → 4.0.5

• Dependabot: Added .github/dependabot.yml

  • Weekly npm dependency updates with grouped minor/patch versions
  • Weekly GitHub Actions updates

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Fix vulnerabilities</issue_title>
<issue_description>I got this error:

Run actions/checkout@v4
Syncing repository: empeje/bakul-mcp
Getting Git version info
Temporarily overriding HOME='/home/runner/work/_temp/b846d3f1-9222-4b85-9773-6719d0c62630' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
/usr/bin/git config --global --add safe.directory /home/runner/work/bakul-mcp/bakul-mcp
Deleting the contents of '/home/runner/work/bakul-mcp/bakul-mcp'
Initializing the repository
Disabling automatic garbage collection
Setting up auth
Fetching the repository
Determining the checkout info
/usr/bin/git sparse-checkout disable
/usr/bin/git config --local --unset-all extensions.worktreeConfig
Checking out the ref
/usr/bin/git log -1 --format=%H
bc6d3d868099b41e614210ef577223a253cfaa7a

Also would be nice to enable dependabot.</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Fix vulnerabilities #1

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.