chore(ci): Dependabot fine tuning (#1862)

* ignore major updates for mike

* set versioning strategy for cdk, dependabot is running on auto upgrade strategy per default

* ignore middy major upgrades

* remove CodeQL, it's enough to have Sonar

* update package-lock

Author: am29d

Diff for: .github/dependabot.yml

@@ -19,6 +19,9 @@ updates:
     directory: /docs
     schedule:
       interval: daily
+    ignore:
+      - dependency-name: "mike"
+        update-types: ["version-update:semver-major"]
 
   - package-ecosystem: npm
     directory: /docs/snippets
@@ -30,6 +33,7 @@ updates:
     schedule:
       interval: daily
 
+
   - package-ecosystem: npm
     directory: /examples/sam
     schedule:
@@ -44,6 +48,9 @@ updates:
     directory: /
     schedule:
       interval: daily
+    ignore:
+      - dependency-name: "@middy/core"
+        update-types: ["version-update:semver-major"]
 
   - package-ecosystem: npm
     directory: /packages/batch