[IOTDB-1862] Optimize dependabot strategy

[ericpai]

JIRA https://issues.apache.org/jira/browse/IOTDB-1862

[ericpai]

@SteveYurongSu See these changes please :)

[coveralls]

Coverage increased (+0.03%) to 67.477% when pulling e8c4433 on ericpai:improve/iotdb-1862 into e4b7f64 on apache:master.

[SteveYurongSu]

Reference: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#ignore

[ericpai]

Reference: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#ignore

Yes, it said You can combine this with dependency-name: "*" to ignore particular update-types for all dependencies . These code changes mean that we ignore all the major and minor version update in all dependency (We only care patch version update).

[SteveYurongSu]

Reference: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#ignore

Yes, it said You can combine this with dependency-name: "*" to ignore particular update-types for all dependencies . These code changes mean that we ignore all the major and minor version update in all dependency (We only care patch version update).

Understood. :D

Thanks for your contribution!

[ericpai]

Need to cherry-pick to rel/0.12 ?

[SteveYurongSu]

Need to cherry-pick to rel/0.12 ?

No need. :D

The config is already activated at branch rel/0.12 since we declared:

target-branch: "rel/0.12"