Merge pull request #2919 from devitocodes/dependabot-fix-lower

CI: prevent dependabot from updating lower bound of deps

Author: mloubout

.github/dependabot.yaml

@@ -9,6 +9,8 @@ updates:
     directory: "/" # Location of package manifests
     schedule:
       interval: "daily"
+    # Use the widen strategy to update requirements to avoid lower bound bump
+    versioning-strategy: "widen"
     # Add assignees
     assignees:
       - "mloubout"