allow --reject option while updating dependencies

[vsramalwan]

pnpm update could support an equivalent option of ncu --reject to not upgrade a small set of dependencies. This is quite helpful for teams updating their dependencies frequently.

[zkochan]

I think this is useful in several cases. Sometimes you want to prohibit updates to specific version. For instance, a package may change its license in a specific version, so you might want to disallow updates to that version.

Prior art. Renovate has package rules to declare allow ranges for updates:

pnpm/renovate.json

Lines 75 to 104 in d7a6669

	"packageRules": [
	{
	"packageNames": ["@types/ramda"],
	"allowedVersions": "0.25.34"
	},
	{
	"packageNames": ["agentkeepalive"],
	"allowedVersions": "4.0.0"
	},
	{
	"packageNames": ["graceful-fs"],
	"allowedVersions": "4.2.1"
	},
	{
	"packageNames": ["https-proxy-agent"],
	"allowedVersions": "2.2.1"
	},
	{
	"packageNames": ["ssri"],
	"allowedVersions": "6.0.1"
	},
	{
	"packageNames": ["uuid"],
	"allowedVersions": "^3.4.0"
	},
	{
	"packageNames": ["nock"],
	"allowedVersions": "12.0.3"
	}
	],