relax dependencies reqirements

Author: Vaiz

.github/dependabot.yml

@@ -5,18 +5,26 @@
 
 version: 2
 updates:
-  - package-ecosystem: "github-actions" # See documentation for possible values
-    directory: "/" # Location of package manifests
-    schedule:
-      interval: "weekly"
-    commit-message:
-      prefix: "chore: "
-  - package-ecosystem: "cargo" # See documentation for possible values
-    directory: "/" # Location of package manifests
-    schedule:
-      interval: "weekly"
-      day: "saturday"
-      time: "07:00"
-      timezone: "UTC"
-    commit-message:
-      prefix: "chore: "
+- package-ecosystem: "github-actions" # See documentation for possible values
+  directory: "/" # Location of package manifests
+  schedule:
+    interval: "weekly"
+  commit-message:
+    prefix: "chore: "
+
+- package-ecosystem: "cargo" # See documentation for possible values
+  directory: "/" # Location of package manifests
+  schedule:
+    interval: "weekly"
+    day: "saturday"
+    time: "07:00"
+    timezone: "UTC"
+  commit-message:
+    prefix: "chore: "
+  ignore:
+    # keep minimal tokio version low
+    - dependency-name: "tokio"
+      versions: ["[1.0.0, 2.0.0)"]
+    # ignore patch updates for all dependencies
+    - dependency-name: "*"
+      update-types: ["version-update:semver-patch"]