chore: group dependabot updates when minor/patch

[jmeridth]

leave major dependency updates to their own PR so they stand out and are tested correctly

Checklist:

• [x] I have updated the necessary documentation
• [x] I have signed off all my commits as required by DCO
• [x] My build is green