ci: prevent dependabot from bumping placeholder packages

.github/dependabot.yml

@@ -8,4 +8,11 @@ updates:
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "weekly"
+    # TS subpackages pin deps to 0.0.0-PLACEHOLDER; real versions are managed
+    # in the root package.json Keep Dependabot out of them so it stops 
+    # "bumping" the placeholder (see PR #267).
+    exclude-paths:
+      - "resolve-check-config/**"
+      - "setup-install/**"
+      - "supported-version/**"