CI: Dependabot: Only our own dependencies label instead of Dependabot's default labels (#3680)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: BornToBeRoot

.github/dependabot.yml

@@ -7,6 +7,9 @@ updates:
   target-branch: main
   commit-message:
     prefix: "Dependency (dependabot/nuget):"
+  # Only our own label instead of Dependabot's default labels (dependencies + ecosystem, e.g. .NET / javascript)
+  labels:
+    - ":heavy_check_mark: dependencies"
 - package-ecosystem: "dotnet-sdk"
   directory: "/Source"
   ignore:
@@ -18,13 +21,17 @@ updates:
   target-branch: main
   commit-message:
     prefix: "Dependency (dependabot/dotnet-sdk):"
+  labels:
+    - ":heavy_check_mark: dependencies"
 - package-ecosystem: "npm"
   directory: "/Website"
   schedule:
     interval: weekly
   target-branch: main
   commit-message:
     prefix: "Dependency (dependabot/npm):"
+  labels:
+    - ":heavy_check_mark: dependencies"
   groups:
     # react and react-dom must have the exact same version (otherwise the website build fails)
     react:
@@ -42,3 +49,5 @@ updates:
   target-branch: main
   commit-message:
     prefix: "Dependency (dependabot/github-actions):"
+  labels:
+    - ":heavy_check_mark: dependencies"

.github/workflows/label.yml

@@ -4,11 +4,12 @@ on:
   pull_request_target:
     types: [opened, reopened]
 
+# Dependabot sets the label itself (labels in .github/dependabot.yml)
 jobs:
   assign-dependencies-label:
     name: Assign dependencies label
     runs-on: ubuntu-latest
-    if: contains(fromJSON('["dependabot[bot]", "transifex-integration[bot]", "imgbot[bot]"]'), github.event.pull_request.user.login)
+    if: contains(fromJSON('["transifex-integration[bot]", "imgbot[bot]"]'), github.event.pull_request.user.login)
     permissions:
       issues: write
       pull-requests: write

AGENTS.md

@@ -213,13 +213,14 @@ The website is deployed to GitHub Pages at: https://borntoberoot.net/NETworkMana
   - Build and deploy are separate jobs, only the deploy job (`main` / release) has write access
 
 - **Label / Milestone** (`.github/workflows/label.yml`, `.github/workflows/milestone.yml`):
-  - Label PRs from Dependabot, Transifex and ImgBot as dependencies
+  - Label PRs from Transifex and ImgBot as dependencies (Dependabot sets the label itself)
   - Assign the next-release milestone to PRs from bots and the maintainer
 
 **Automation & Bots**:
 - **Dependabot** (`.github/dependabot.yml`):
   - Weekly updates for NuGet packages, .NET SDK, npm packages and GitHub Actions
-  - Automatic PR creation for dependency updates
+  - Automatic PR creation for dependency updates, labeled `:heavy_check_mark: dependencies` (instead of Dependabot's
+    default labels)
 
 - **Mergify** (`.github/mergify.yml`):
   - Auto-merges PRs with `LGTM` label after AppVeyor CI passes