Avoid (more) dependency updates which mandate a major version bump.

In the same fashion as 198807c, but also
for `hapi` and `@types/hapi`.  See comment on that commit for more details.

Ref: #2382
Ref: #2371
Ref: #2426
Ref: #2201
Ref: #2647

Author: abernix

renovate.json5

@@ -36,6 +36,10 @@
       "packageNames": ["@koa/cors"],
       "allowedVersions": "<3"
     },
+    {
+      "packageNames": ["hapi", "@types/hapi"],
+      "allowedVersions": "<18"
+    },
     {
       "packageNames": ["ws"],
       "allowedVersions": "<7"