chore: grouped dependabot updates

[kzantow]

This PR enables grouped dependabot updates

[wagoodman]

I'm down for grouping dep PRs -- should we group minor and patch into a single PR and keep major versions in a separate PR (since those have the likely hood of breaking things per semver)?

[kzantow]

@wagoodman I'm ok making more changes here, but for the time being I updated the go updates to exclude grouping the major version bumps but left this for action updates. Looking at our current pull requests, there are multiple major action bumps which are probably not causing problems, but 3 go updates to major and minor versions which do not pass all checks. Happy to make more changes here, just trying to reduce the noise as much as possible.

[wagoodman]

Thanks for thinking of this... there are a lot of dependabot PRs 😳