Merge pull request #4861 from nojnhuh/dependabot-ignore-prometheus

Make dependabot ignore major and minor Prometheus go mod bumps

Author: k8s-ci-robot

.github/dependabot.yml

@@ -40,6 +40,8 @@ updates:
     - dependency-name: "sigs.k8s.io/controller-runtime"
     # Ignore k8s and its transitives modules as they are upgraded manually together with controller-runtime.
     - dependency-name: "k8s.io/*"
+    - dependency-name: "github.com/prometheus/*"
+      update-types: [ "version-update:semver-major", "version-update:semver-minor"] # Consume only patch updates.
     - dependency-name: "go.etcd.io/*"
     - dependency-name: "google.golang.org/grpc"
     - dependency-name: "sigs.k8s.io/cloud-provider-azure"