Restrict dependabot to patch-only updates for MSBuild/Roslyn/SQLite/SqlClient packages

[Copilot]

MSBuild and Roslyn packages (Microsoft.Build.Locator, Microsoft.CodeAnalysis.Workspaces.MSBuild, Microsoft.Build.Framework, Microsoft.Build.Utilities.Core, Microsoft.CodeAnalysis.CSharp.Workspaces) ship major versions tied to VS/SDK releases and patch versions that can introduce breaking tooling changes — minor updates are the safe update cadence.

SQLite minor package updates usually need special handling

SqlClient packages can change from LTS to STS on minor versions

Changes

• All branches (main, release/8.0, release/9.0, release/10.0): added explicit ignore entries for the packages with update-types: ["version-update:semver-major", "version-update:semver-minor"], leaving only semver-patch updates enabled

[AndriySvyryd]

@copilot For the new packages change it to ignore major and minor versions instead

[Copilot]

Done — updated all 5 packages across all 4 branches to ignore semver-major and semver-minor, so only patch updates are allowed (commit: $(git -C /home/runner/work/efcore/efcore rev-parse --short HEAD)).

[AndriySvyryd]

@copilot Order the new packages alphabetically

[Copilot]

Done in eb46d3b — packages are now ordered alphabetically across all 4 branches.

[Copilot]

Pull request overview

This PR updates the repository’s Dependabot configuration to constrain version update cadence for selected NuGet dependencies (MSBuild/Roslyn/SQLite/SqlClient) to reduce tooling break risk across main and release branches.

Changes:

• Added per-package ignore rules to prevent semver-major and semver-minor updates for several MSBuild/Roslyn/SQLite (and release branches also SqlClient) packages.
• Kept the existing release-branch rule that blocks semver-major updates for all packages (dependency-name: "*") while further tightening patch-only for specific packages.