Limit automated dependency updates

[almondsun]

Summary

• ignore breaking major-version npm and Cargo updates
• continue grouping routine minor and patch updates
• keep GitHub Actions update automation enabled

Validation

• parsed Dependabot YAML with Ruby
• ran git diff --check

This prevents a new repository from being flooded with unrelated breaking-upgrade pull requests.

[Copilot]

Pull request overview

This PR adjusts the repository’s Dependabot configuration to reduce noise from breaking major-version upgrades while preserving automated dependency maintenance for routine updates and GitHub Actions.

Changes:

• Added an ignore rule to skip all semver-major updates for npm dependencies.
• Added an ignore rule to skip all semver-major updates for cargo dependencies.
• Kept existing minor/patch grouping and the github-actions update configuration intact.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.