Modify Renovate configuration to make maintenance easier

[dmwelch]

Lower maintenance burden (and adopters' impressions of projects) by auto-merging minor dependency upgrades OR ignore all but major version updates for dependencies. Pin all dependencies to avoid insecure updates for users and lower support requirements.

Advantages:

• fewer PRs means fewer build occurrences necessary
• easier to maintain
• PRs and issues from adopters addressed quicker
• consolidation of renovate configuration across project
• fewer minor versions (if just updating major versions)

Disadvantages:

• automated PR approval opens project to some security risk
• Many minor version updates increases maintenance burden of projects built using commitizen packages

[jimthedev]

Yeah, one complaint I had before was relating to:

Many minor version updates increases maintenance burden of projects built using commitizen packages

So what I tried to do was to batch together minor updates and push them together.

That being said, I am ok with this change if it reduces the overhead of these changes. I'd also be open to work to minimize our dependencies if there are any we can remove easily but modernizing our code base. I've though about this when it comes to say, lodash.

[felipecrs]

Should not we use dependabot instead?