chore: limit dependency version range to prevent them being flagged (#6279)

Author: BridgeAR

.github/dependabot.yml

@@ -79,7 +79,8 @@ updates:
           - "@datadog/wasm-js-rewriter"
           - "@opentelemetry/api"
   - package-ecosystem: "npm"
-    directory: "/packages/dd-trace/test/plugins/versions"
+    directories:
+      - "/packages/dd-trace/test/plugins/versions"
     schedule:
       interval: "daily"
     open-pull-requests-limit: 1
@@ -92,3 +93,22 @@ updates:
       test-versions:
         patterns:
           - "*"
+  - package-ecosystem: "npm"
+    directories:
+      - "/integration-tests/esbuild"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 1
+    labels:
+      - dependabot
+      - dependencies
+      - javascript
+      - semver-patch
+    ignore:
+      - dependency-name: "express"
+        # Update express manually for now due to esbuild breaking otherwise
+        update-types: ["version-update:semver-major"]
+    groups:
+      test-versions:
+        patterns:
+          - "*"

integration-tests/esbuild/package.json

@@ -20,14 +20,14 @@
   "author": "Thomas Hunter II <[email protected]>",
   "license": "ISC",
   "dependencies": {
-    "@apollo/server": "*",
-    "@koa/router": "*",
-    "aws-sdk": "*",
-    "axios": "*",
-    "esbuild": "*",
-    "express": "^4.16.2",
-    "knex": "*",
-    "koa": "*",
-    "openai": "*"
+    "@apollo/server": "5.0.0",
+    "@koa/router": "14.0.0",
+    "aws-sdk": "2.1692.0",
+    "axios": "1.11.0",
+    "esbuild": "0.25.9",
+    "express": "4.21.2",
+    "knex": "3.1.0",
+    "koa": "3.0.1",
+    "openai": "5.12.2"
   }
 }