ci: Only allow automated security-related updates until v0.37.0 release (#9430)
ci: Only allow automated security-related updates until v0.37.0 release (#9430)

As per discussion with @sergio-mena, this should disable all automated
dependency updates that are not security-related. We should make this
part of our standard practice when cutting new major releases, given
that our QA process for major releases is expensive at present and we
cannot re-run it for every dependency update.

Once we have cut a final major release, we can consider re-enabling
automated dependency updates here that can be rolled out in minor
releases.

Signed-off-by: Thane Thomson <f11a107f38328604e9320754224b60375758bca1@thanethomson.com>

Signed-off-by: Thane Thomson <f11a107f38328604e9320754224b60375758bca1@thanethomson.com>
tendermint/tendermint,tendermint/tendermint,tendermint/tendermint,tendermint/tendermint