ci: update the Dependabot caller to merge every passing update (#38)

Pins the reusable Dependabot workflow to fallow-rs/.github at b07e7920c4342ef56423e951763cf207f31377fa.
It merges major and SHA-only updates that pass CI, and it pushes repairs
that touch only lockfiles, package manifests, tests or generated files.

Signed-off-by: Bart Waardenburg <bart@waardenburg.dev>

Author: BartWaardenburg

.github/workflows/dependabot.yml

@@ -32,7 +32,7 @@ jobs:
       github.event_name != 'workflow_run' ||
       (github.event.workflow_run.head_repository.full_name == github.repository &&
       github.event.workflow_run.event == 'pull_request')
-    uses: fallow-rs/.github/.github/workflows/dependabot.yml@c2aa294638fe85770df6c71343d32114c79ec8fb # main
+    uses: fallow-rs/.github/.github/workflows/dependabot.yml@b07e7920c4342ef56423e951763cf207f31377fa # main
     permissions:
       actions: write
       checks: read