Create dependabot.yml (#227)

.github/dependabot.yml

@@ -0,0 +1,15 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: weekly
+- package-ecosystem: pip     # See documentation for possible values
+  directory: /     # Location of package manifests
+  schedule:
+    interval: weekly

.github/workflows/test-and-build-action.yaml

@@ -2,8 +2,14 @@ name: Test & Build
 
 on:
   push:
+    branches:
+    - '*'
+    - '!dependabot/**'
   pull_request:
     types: [reopened, opened, synchronize]
+    branches:
+    - '*'
+    - '!dependabot/**'
   release:
     types:
     - created
@@ -106,7 +112,7 @@ jobs:
         path: htmlcov/
 
   build:
-    if: ${{ github.event_name == 'push' }}
+    if: ${{ github.event_name == 'push' }} && !startsWith(github.ref, 'refs/heads/dependabot/')
     runs-on: ubuntu-latest
     needs: test
     steps:
@@ -135,7 +141,7 @@ jobs:
         path: dist/
 
   docker-build:
-    if: ${{ github.event_name == 'push' }}
+    if: ${{ github.event_name == 'push' }} && !startsWith(github.ref, 'refs/heads/dependabot/')
     runs-on: ubuntu-latest
     needs: [build]
     steps: