Configure dependabot to only open PRs for major version bumps (#3227)

ChrisLovering · web-flow · commit 60905d84f043 · 2025-02-16T13:40:54.000Z
Security updates will always open PRs
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -4,6 +4,10 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
+    ignore:
+      update-types:
+        - sem-ver:patch
+        - sem-ver:minor
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
