Configure Dependabot to only consider patch version bumps

https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#ignore

.github/dependabot.yml

@@ -4,6 +4,11 @@ updates:
   directory: "/"
   schedule:
     interval: "daily"
+  ignore:
+    - dependency-name: "*"
+      update-types:
+        - version-update:semver-minor
+        - version-update:semver-major
 - package-ecosystem: "github-actions"
   directory: "/"
   schedule: