[kikoso]

Brings dependabot.yml in line with android-places-compose and the other Maps repos:

• Groups: minor and patch bumps are collapsed into one PR per ecosystem (gradle-minor-and-patch, github-actions-minor-and-patch). Majors still get their own PR. Without groups, every library bump opens a separate PR, and each one has to be updated and re-run against main, since branch protection uses strict status checks.
• Cooldown: a new release waits a few days before dependabot proposes it (Gradle 7/14/7/3 days by default, major, minor and patch; Actions 7 days). That narrows the window for a compromised or yanked release to get in.

The config is copied as is from android-places-compose. This file is under .github/ and outside .github/workflows/, so it needs a googlemaps-admin code owner review.

[github-actions]

Coverage (unit tests)

No unit baseline recorded in coverage/history.csv yet, so this run only reports absolute numbers.

Module	Line %	Change	Branch %	Change
golden-testing	90.42%	new	58.00%	new
robolectric-testing	84.06%	new	51.87%	new
visual-testing	36.54%	new	25.07%	new
TOTAL	78.88%	new	44.10%	new

_{Line and branch coverage from unit test reports. History is recorded in coverage/history.csv after each merge to main.}