Add ability to exclude dependencies from update reporting

This is a reworked version of #40 that uses `ModuleFilter` as suggested by @rtimush.