Wait 7 days for dependabot updates + Fix npm updates

.github/dependabot.yml

@@ -4,6 +4,8 @@ updates:
   directory: "/"
   schedule:
     interval: daily
+  cooldown:
+    default-days: 7
   open-pull-requests-limit: 20
   rebase-strategy: "disabled"
   versioning-strategy: increase-if-necessary
@@ -27,17 +29,17 @@ updates:
   schedule:
     interval: "daily"
 
-- package-ecosystem: pip
-  directory: /.binder
-  schedule:
-    interval: daily
-
 - package-ecosystem: npm
   directory: /.github
   schedule:
     interval: daily
+  cooldown:
+    default-days: 7
+
 
 - package-ecosystem: "pre-commit"
   directory: "/"
   schedule:
     interval: daily
+  cooldown:
+    default-days: 7

.gitignore

@@ -119,6 +119,7 @@ docs/examples/driver_examples/instrument_group_example.yaml
 
 # Do not ignore pyright npm version file
 !.github/package.json
+!.github/package-lock.json
 
 # we are not currently checking in uv.lock
 uv.lock