Dependabot security fixes for release-3.0

[dharmit]

According to https://stackoverflow.com/a/68254421/395670 setting open-pull-requests-limit to 0 in dependabot.yml configures it to open only security fixes.

[dharmit]

Integration tests repeatedly failed yesterday for multiple PRs. I remember seeing similar excerpt in another PR too:

#8 [runner-base 2/4] RUN ARCH=$(uname -m);     [[ "${ARCH}" == "aarch64" ]] && ARCH="arm64";     zypper --non-interactive removerepo repo-update || true;     zypper --non-interactive install --no-recommends xfsprogs         util-linux-systemd         e2fsprogs         udev         rsync         grub2         dosfstools         grub2-${ARCH}-efi         mtools         gptfdisk         patterns-microos-selinux         btrfsprogs         btrfsmaintenance         snapper         lvm2 &&     zypper clean --all
#8 5.035 ......error]
#8 65.65 Repository 'openSUSE-Tumbleweed-Oss' is invalid.
#8 65.65 [repo-oss|http://download.opensuse.org/tumbleweed/repo/oss/] Failed to retrieve new repository metadata.
#8 65.65 History:
#8 65.65  - Timeout exceeded when accessing 'http://cdn.opensuse.org/tumbleweed/repo/oss/repodata/c6b265c9e3bf268e3bcd3164aaad3236105fb4ce41ea21666a17e3aaec57ef75a46d7d2f73667e56a00b30d8b55a53f7d4dfb7ada434c7bbfb1682e078b615de-appdata.xml.gz'.
#8 65.65    Timeout reached Curl error (28)
#8 65.65 Please check if the URIs defined for this repository are pointing to a valid repository.
#8 65.65 Warning: Skipping repository 'openSUSE-Tumbleweed-Oss' because of the above error.
#8 65.65 Some of the repositories have not been refreshed because of an error.

This is not related to changes in the PR. Trying a re-run.