Skip renovate upgrade for golangci-lint dependencies

[dmathieu]

Golangci-lint dependencies largely don't respect semver, and make breaking changes that require an upgrade of the linter itself.

We should configure renovate to stop opening PRs for dependencies of golangci-lint, and only upgrade things with the direct dependency.

[pellared]

AFAIK this was intentional in order to mitigate security vulns in these dependencies. See #6038

CC @MrAlias

[dmathieu]

Which makes sense. We don't need to do it for all tools dependencies.
But linters really have a high ratio of PRs being closed because they have breaking changes that will only work when the golangci-lint upgrade happens.

[MrAlias]

I'm in favor of just closing PRs with breaking changes and keeping upgrades to indirect dependencies. Like @pellared mentioned, the risk of not addressing security vulnerabilities outweighs the noise of having to close PRs.