Today we constantly receive a number of PRs for dependencies that aren't compatible with our version of Node.js. E.g.:

• chore(deps): update dependency sinon to v16 google-auth-library-nodejs#1642
• fix(deps): update dependency @octokit/rest to v20 google-cloud-node#4413
• chore(deps): update actions/checkout action to v4 nodejs-storage#2295

Sometimes we accidentally merge these PRs, causing issues for us - and potentially customers:

• fix: Revert "fix(deps): update dependency puppeteer to v19" google-auth-library-nodejs#1480

We can greatly reduce this toil by setting renovate's constraintsfiltering option to strict here: synthtool/gcp/templates/node_library/renovate.json

Note: this can potentially work for other languages as well, including Python.

Discussion: renovatebot/renovate#24679