Use dependabot on both main branches

[pyrello]

Hopefully this will allow @dependabot to check both the 3.x and 4.x branches and open pull requests against them.