chore(deps): add Dependabot uv ecosystem for Python dependency updates

Enable Dependabot's native uv ecosystem to manage Python dependencies
in this uv workspace monorepo. Dependabot uv support is now GA
(version updates since March 2025, security updates since Dec 2025).

- Add package-ecosystem 'uv' pointing at the workspace root
- Group dependencies by production vs development
- Ignore workspace-internal packages to work around dependabot-core#14004
- Group github-actions updates with a wildcard pattern

Closes #2510

Co-authored-by: openhands <openhands@all-hands.dev>

Author: openhands-agent

.github/dependabot.yml

@@ -1,9 +1,6 @@
 ---
 # Dependabot configuration for automated dependency updates
 # See: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
-#
-# Note: Python (pip) ecosystem is not configured here because Dependabot does not
-# fully support uv workspaces yet. See issue #2510 for tracking.
 
 version: 2
 
@@ -13,5 +10,27 @@ updates:
       directory: /
       schedule:
           interval: weekly
+      groups:
+          github-actions:
+              patterns:
+                  - '*'
+      commit-message:
+          prefix: chore(deps)
+
+  # Python (uv) — workspace root covers all member packages
+    - package-ecosystem: uv
+      directory: /
+      schedule:
+          interval: weekly
+      groups:
+          production:
+              dependency-type: production
+          development:
+              dependency-type: development
+      ignore:
+          - dependency-name: openhands-sdk
+          - dependency-name: openhands-tools
+          - dependency-name: openhands-workspace
+          - dependency-name: openhands-agent-server
       commit-message:
           prefix: chore(deps)