Skip PMD scan for Dependabot updates. (#3085)

* Skip PMD scan for Dependabot updates.

* Update secrets baseline.

(cherry picked from commit 1e599ec)

Author: tpage-alfresco

.github/workflows/ci.yml

@@ -135,6 +135,7 @@ jobs:
     runs-on: ubuntu-latest
     if: >
       github.event_name == 'pull_request' &&
+      github.actor != 'dependabot[bot]' &&
       !contains(github.event.head_commit.message, '[skip pmd]') &&
       !contains(github.event.head_commit.message, '[skip tests]')
     steps: