Maintenance: Decrease the update schedule of `aws-cdk` and `aws-sdk-v3` group in dependabot

[sdangol]

Summary

Currently, the dependabot is configured to update all the npm dependencies daily. We want to decrease this to every 1 week.

Why is this needed?

Reviewing and merging the dependabot PRs is being very time consuming and nothing relevant to us changes in those updates. So, to improve our efficiency, we should reduce the frequency of the updates.

Which area does this relate to?

Automation

Solution

Update the .github/dependabot.yml file to update the aws-cdk and aws-sdk-v3 groups weekly

Acknowledgment

• This request meets Powertools for AWS Lambda (TypeScript) Tenets
• Should this be considered in other Powertools for AWS Lambda languages? i.e. Python, Java, and .NET

Future readers

Please react with 👍 and your use case to help us understand customer demand.

[sdangol]

@dreamorosi @svozza Do you think having a different update schedule for the aws-cdk and aws-sdk-v3 would be more efficient or having a different schedule for patch releases and other (major+minor) for all the dependencies?

[dreamorosi]

I think we can limit the frequency of these two groups specifically to start, regardless of release type - neither of them is likely to make major releases any time soon anyway.

We can tune other dependencies later on if they become a problem.