feat: Skip canary deploys for Dependabot PRs

Author: smockle

.github/workflows/ci.yml

@@ -26,7 +26,7 @@ jobs:
         run: npm run test
 
       - name: Create .npmrc
-        if: github.event_name == 'push'
+        if: ${{ github.event_name == 'push' && github.actor != 'dependabot[bot]' }}
         run: |
           cat << EOF > "$HOME/.npmrc"
             //registry.npmjs.org/:_authToken=$NPM_TOKEN
@@ -35,7 +35,7 @@ jobs:
           NPM_TOKEN: ${{ secrets.NPM_AUTH_TOKEN_SHARED }}
 
       - name: Publish canary version
-        if: github.event_name == 'push'
+        if: ${{ github.event_name == 'push' && github.actor != 'dependabot[bot]' }}
         run: |
           echo "$( jq '.version = "0.0.0"' package.json )" > package.json
           echo -e "---\n'@primer/components': patch\n---\n\nFake entry to force publishing" > .changeset/force-snapshot-release.md
@@ -45,7 +45,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Output canary version number
-        if: github.event_name == 'push'
+        if: ${{ github.event_name == 'push' && github.actor != 'dependabot[bot]' }}
         run: |
           name=$(jq -r .name package.json)
           version=$(jq -r .version package.json)