fix(security): widen Dependabot scope and pin patched Next for webpac… (#309)

Author: thomasrockhu-codecov

.github/dependabot.yml

@@ -7,5 +7,3 @@ updates:
     directory: "/" # Location of package manifests
     schedule:
       interval: "daily"
-    allow:
-      - dependency-name: "@codecov/rollup-plugin"

packages/nextjs-webpack-plugin/package.json

@@ -57,6 +57,7 @@
     "@vitest/coverage-v8": "^2.1.9",
     "codecovProdRollupPlugin": "npm:@codecov/rollup-plugin@1.5.0",
     "msw": "^2.7.0",
+    "next": "^14.2.25",
     "ts-node": "^10.9.2",
     "typedoc": "^0.27.5",
     "typescript": "^5.3.3",