👷 dependabot: ignore sigs.k8s.io major/minor updates

[jfbus]

No description provided.

[github-actions]

✅dependabot config looks good 👍

[Joseph94m]

@jfbus Hi, why are the k8s and signs dependencies ignored by dependabot?

      - dependency-name: k8s.io/*
        update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
      - dependency-name: sigs.k8s.io/*
        update-types: [ "version-update:semver-major", "version-update:semver-minor" ]

[jfbus]

@Joseph94m k8s upgrades are too important and have too much impact to be applied by a bot. The policy is currently to plan semver-minor upgrades in releases.

Disabling semver-major and semver-minor in Dependabot allows us to be notified on patch releases that otherwise would not be sent.