* [jvm-packages] Configure dependabot properly * Allow automatic updates for Scala and Spark within the same major version