prevent dependabot from introducing bump PRs for major versions (#2869)

Signed-off-by: Sebastian Malton <sebastian@malton.name>

.dependabot/config.yml

@@ -15,3 +15,7 @@ updates:
     versioning-strategy:
       lockfile-only: false
       increase: true
+    ignore:
+      - dependency-name: *
+        update-types:
+          - version-update:semver-major