Merge pull request #849 from govuk-one-login/dependabot-update

Update dependabot configuration

.github/dependabot.yml

@@ -1,7 +1,11 @@
 version: 2
 updates:
   - package-ecosystem: npm
-    directory: /
+    directories:
+      - "/express"
+      - "/backend/api"
+      - "/backend/cognito"
+      - "/"
     schedule:
       interval: daily
     labels:
@@ -16,6 +20,17 @@ updates:
         update-types:
           - "minor"
           - "patch"
+      dev-dependencies:
+        applies-to: version-updates
+        dependency-type: "development"
+        update-types:
+          - "minor"
+          - "patch"
+    ignore:
+      - dependency-name: "@types/node"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "@govuk-frontend"
+        update-types: ["version-update:semver-major"]
   - package-ecosystem: github-actions
     directory: /
     schedule: