Only update minor and patch versions

[cmorinupgrade]

Context
I am running dependabot-script using the dependabot-core image in a Argo Workflow on AWS EKS.

Package managers I use

• npm_and_yarn
• maven
• go_modules
• pip

What I am trying to achieve
There is a requirement that is to only update minor and patch versions. I took a deep look at dependabot-core and dependabot-script codebases and haven't found anything related to the equivalent update-types in Dependabot SaaS offering. The only thing I have found is the IGNORE_CONDITIONS environment variable which seems to only be available for dependabot cli.

Anybody here was able to configure the UpdateChecker (or any other component along the process) so it only updates minor and patch versions? I work in a large company where bumping major versions is not always possible due to the potential regression and security considerations it may have.

Thank you