Ignore ORC major/minor bumps on release branches

ORC v2.4.0 depends on k8s.io/* v0.34
and controller-runtime v0.22, which causes cascading updates when
Dependabot tries to update ORC on release branches.

By adding ORC to the ignore list for release branches, we prevent these
cascading updates from occurring.

Signed-off-by: Lennart Jern <lennart.jern@est.tech>

Author: lentzi90

.github/dependabot.yml

@@ -93,6 +93,9 @@ updates:
     update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
   - dependency-name: "sigs.k8s.io/controller-tools"
     update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
+  # Ignore ORC major and minor bumps to prevent cascading k8s.io and controller-runtime updates
+  - dependency-name: "github.com/k-orc/openstack-resource-controller*"
+    update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
   labels:
   - "area/dependency"
   - "ok-to-test"
@@ -142,6 +145,9 @@ updates:
     update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
   - dependency-name: "sigs.k8s.io/controller-tools"
     update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
+  # Ignore ORC major and minor bumps to prevent cascading k8s.io and controller-runtime updates
+  - dependency-name: "github.com/k-orc/openstack-resource-controller*"
+    update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
   # We will need k8s v0.31.3 to bump structured-merge-diff to v4.4.2 (check git history for details).
   - dependency-name: "sigs.k8s.io/structured-merge-diff/*"
   # These dependencies are skipped because they require a newer version of go: