Use increase-if-necessary for dependabot pub updates (#9683)

This likely should be the default, but it's [not
yet](dependabot/dependabot-core#4979). `widen`
doesn't make sense for example use cases, we just want to use the
latest.