Ignore pushes to dependabot branches as per official recommendation

Author: marcphilipp

.github/workflows/codeql-analysis.yml

@@ -2,10 +2,16 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [main, releases/**]
+    branches:
+      - main
+      - 'releases/**'
+    branches-ignore:
+      - dependabot/**
   pull_request:
     # The branches below must be a subset of the branches above
-    branches: [main, releases/**]
+    branches:
+      - main
+      - 'releases/**'
   schedule:
     - cron: '0 19 * * 3'
 

.github/workflows/cross-version.yml

@@ -4,7 +4,9 @@ on:
   push:
     branches:
       - main
-      - 'releases/*'
+      - 'releases/**'
+    branches-ignore:
+      - dependabot/**
   pull_request:
     branches:
       - '*'

.github/workflows/gradle-wrapper-validation.yml

@@ -1,5 +1,15 @@
 name: "Validate Gradle Wrapper"
-on: [push, pull_request]
+
+on:
+  push:
+    branches:
+      - main
+      - 'releases/**'
+    branches-ignore:
+      - dependabot/**
+  pull_request:
+    branches:
+      - '*'
 
 jobs:
   validation:

.github/workflows/main.yml

@@ -4,7 +4,9 @@ on:
   push:
     branches:
       - main
-      - 'releases/*'
+      - 'releases/**'
+    branches-ignore:
+      - dependabot/**
   pull_request:
     branches:
       - '*'

.github/workflows/reproducible-build.yml

@@ -3,11 +3,13 @@ name: Reproducible build
 on:
   push:
     branches:
-    - main
-    - 'releases/*'
+      - main
+      - 'releases/**'
+    branches-ignore:
+      - dependabot/**
   pull_request:
     branches:
-    - '*'
+      - '*'
 
 env:
   GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}