ci: add Forgejo-free Dependabot updates

.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: cargo
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    groups:
+      rust-minor:
+        update-types: [minor, patch]
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5

.github/workflows/ci.yml

@@ -11,25 +11,14 @@ permissions:
 
 jobs:
   rust:
+    # Dependabot metadata PRs do not consume the self-hosted validation runner.
+    if: github.event_name != 'pull_request' || github.event.pull_request.user.type != 'Bot'
     runs-on: [self-hosted, node-b, linux, x64]
     steps:
       - uses: actions/checkout@v7
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt,clippy
-      - name: Configure retained Forgejo registry credentials
-        env:
-          FORGEJO_CARGO_TOKEN: ${{ secrets.FORGEJO_CARGO_TOKEN }}
-        shell: bash
-        run: |
-          test -n "$FORGEJO_CARGO_TOKEN"
-          export CARGO_HOME="$RUNNER_TEMP/cargo-home"
-          mkdir -p "$CARGO_HOME"
-          chmod 700 "$CARGO_HOME"
-          printf '[registries.forgejo]\nindex = "sparse+https://repo.indexarr.net/api/packages/indexarr/cargo/"\ncredential-provider = "cargo:token"\n' > "$CARGO_HOME/config.toml"
-          printf '[registries.forgejo]\ntoken = "Bearer %s"\n' "$FORGEJO_CARGO_TOKEN" > "$CARGO_HOME/credentials.toml"
-          chmod 600 "$CARGO_HOME/credentials.toml"
-          printf 'CARGO_HOME=%s\n' "$CARGO_HOME" >> "$GITHUB_ENV"
       - run: cargo fmt --all -- --check
       - run: cargo check --workspace
       - run: cargo test --workspace

.github/workflows/policy.yml

@@ -11,6 +11,8 @@ permissions:
 
 jobs:
   policy:
+    # Dependabot metadata PRs do not consume the self-hosted policy runner.
+    if: github.event_name != 'pull_request' || github.event.pull_request.user.type != 'Bot'
     runs-on: [self-hosted, node-b, linux, x64]
     steps:
       - uses: actions/checkout@v7