Merge pull request #262 from edwarddavidbaker/dependabot-ignore-patch-updates

dependabot: Ignore patch updates

Author: edwarddavidbaker

.github/dependabot.yml

@@ -8,10 +8,20 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 1
+    ignore:
+      # Ignore patch updates (major.minor.patch) for all packages. This
+      # does not prevent security updates.
+      - dependency-name: "*"
+        update-types: ["version-update:semver-patch"]
 
   # Enable version updates from GitHub Actions.
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 1
+    ignore:
+      # Ignore patch updates (major.minor.patch) for all packages. This
+      # does not prevent security updates.
+      - dependency-name: "*"
+        update-types: ["version-update:semver-patch"]