Adjust Dependabot strategy and bypass CLA (#77)

Author: aahrun

.github/dependabot.yml

@@ -9,6 +9,7 @@ updates:
     schedule:
       interval: "weekly"
       day: "monday"
+    versioning-strategy: lockfile-only
     open-pull-requests-limit: 10
     labels:
       - "dependencies"
@@ -23,6 +24,7 @@ updates:
     schedule:
       interval: "weekly"
       day: "monday"
+    versioning-strategy: lockfile-only
     open-pull-requests-limit: 10
     labels:
       - "dependencies"

.github/workflows/cla.yaml

@@ -52,3 +52,5 @@ jobs:
           remote-organization-name: 'modular'
           remote-repository-name: 'cla'
           path-to-signatures: 'signatures/version1/cla.json'
+          # Exempt bot accounts from CLA requirements
+          allowlist: dependabot*,github-actions*