fix: update dependabot config (#174)

Co-authored-by: Hubert <[email protected]>

.github/dependabot.yml

@@ -8,6 +8,28 @@ updates:
     open-pull-requests-limit: 1
     schedule:
       interval: "weekly"
+    # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates#example-disabling-version-updates-for-some-dependencies
+    ignore:
+      - dependency-name: "cid"
+        update-types:
+          ["version-update:semver-major", "version-update:semver-minor"]
+      - dependency-name: "*ipld*"
+        update-types:
+          ["version-update:semver-major", "version-update:semver-minor"]
+      - dependency-name: "bls-signatures"
+        update-types:
+          ["version-update:semver-major", "version-update:semver-minor"]
+      - dependency-name: "fvm*"
+        update-types:
+          ["version-update:semver-major", "version-update:semver-minor"]
+      - dependency-name: "filecoin*"
+        update-types:
+          ["version-update:semver-major", "version-update:semver-minor"]
+    # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
+    groups:
+      patch-versions:
+        update-types:
+          - "patch"
   # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot#enabling-dependabot-version-updates-for-actions
   - package-ecosystem: "github-actions"
     directory: "/"