Limt dependabot updates to only direct dependencies

[utam0k]

The indirect type creates PR too much.

[codecov-commenter]

Codecov Report

Merging #2725 (61ca476) into main (c3ddb6e) will increase coverage by 0.01%.
Report is 2 commits behind head on main.
The diff coverage is n/a.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2725      +/-   ##
==========================================
+ Coverage   65.20%   65.21%   +0.01%     
==========================================
  Files         133      133              
  Lines       16981    16981              
==========================================
+ Hits        11073    11075       +2     
+ Misses       5908     5906       -2     

[YJDoc2]

I'd prefer if we allow security updates for indirect (but not feature updates) , but for now I'm approving and merging this.