🌱 Add dependabot groups. Allow additional patch updates

[killianmuldoon]

Allow patch updates for the ignored dependencies in our dependabot config and group the k8s.io dependencies to reduce the number of individual PRs.

/area ci

[sbueringer]

/lgtm

[k8s-ci-robot]

LGTM label has been added.

Git tree hash: de9657b1ccaab09d8ef23493de1be866e0aea075

[killianmuldoon]

/hold

For squash

[killianmuldoon]

/tide merge-method-squash

To test for the release notes tool ref #9249

[killianmuldoon]

/hold cancel

[furkatgofurov7]

Is there a way to test this (or a link to PR where you already tested it maybe?) on the fork?

/lgtm

[sbueringer]

We used everything apart from the groups in CAPV for a while and recently merged the groups there. Not sure if we explicitly tested the groups.

But as it's a just GitHub feature that we use, I'm fine with just trying it

[sbueringer]

/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: sbueringer

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [sbueringer]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[killianmuldoon]

Not sure if we explicitly tested the groups.

I tested the groups on my own fork, but not on a schedule. I saw a couple of race conditions, but it's an improvement in any case IMO.

[sbueringer]

Yup in the meantime we got a bunch of PRs opened and it looks fine to me