Now that we're in the RC phase and close to release, we only want to
pick up maintenance releases of our managed dependencies. This commit
updates bomr's config accordingly.