chore(renovate): don't update patches

[MarcoIeni]

Close #153

This should prevent Cargo.lock updates from a.b.c to a.b.(c+1).

From my understanding, unfortunately disabling minor as well means that we'll stop get updates from 0.x.y to 0.(x+1).0, so I haven't disabled minor.

However ideally we want to disable updates from a.b.c to a.(b+1).0. Maybe something we can investigate further in the future.

[Kobzol]

We could probably group the Rust PRs into groups that are merged less frequently and enable only security vulnerability patches to be applied, but this seems like a quick solution that should work.

However, I'm not sure if this also doesn't disable security patch updates, that would be bad.

Maybe we also need to enable these explicitly? renovatebot/renovate#15490 (comment)

[MarcoIeni]

I'll do some tests in my repo for the security vulnerabilities. In the meantime I think we can merge this.

Please do this setup for the repo to get prepared for the next pr: https://docs.renovatebot.com/configuration-options/#vulnerabilityalerts

[Kobzol]

I don't have access to settings on this repo :) I agree that we can merge this for now, thanks!