Update dependabot config (#5149)

- Ignore major version updates for SLF4j, we don't want to move away
   from 1.x
 - Ignore test dependency commons-lang3
 - Ignore build plugin jacoco

Author: dagnir

.github/dependabot.yml

@@ -14,6 +14,12 @@ updates:
         patterns:
           - "com.fasterxml.jackson*"
     ignore:
+      # We don't want to update from 1.x.x unless necessary because it will
+      # require extra verification to ensure customers aren't broken by the
+      # update.
+      - dependency-name: "org.slf4j:*"
+        update-types: ["version-update:semver-major"]
+
       # Ignore test dependencies to reduce PR noisiness. We don't need to stay
       # on top of them as much as compile/runtime dependencies
       - dependency-name: "com.amazonaws:aws-java-sdk*"
@@ -46,3 +52,5 @@ updates:
       - dependency-name: "org.codehaus.mojo:exec-maven-plugin"
       - dependency-name: "org.apache.maven.plugin-tools:maven-plugin-annotations"
       - dependency-name: "org.graalvm.buildtools:*"
+      - dependency-name: "org.jacoco:jacoco-maven-plugin"
+      - dependency-name: "org.apache.commons:commons-lang3"