Merge pull request #17204 from machine424/ccl

chore(workflows/check_release_notes): do not run on dependabot PRs and only run against main

.github/workflows/check_release_notes.yml

@@ -1,6 +1,8 @@
 name: 'Check release notes'
 on:
   pull_request:
+    branches:
+      - main
     types:
       - opened
       - reopened
@@ -14,7 +16,9 @@ jobs:
   check_release_notes:
     name: check
     runs-on: ubuntu-latest
-    if: github.repository_owner == 'prometheus' || github.repository_owner == 'prometheus-community' # Don't run this workflow on forks.
+    # Don't run this workflow on forks.
+    # Don't run it on dependabot PRs either as humans would take control in case a bump introduces a breaking change.
+    if: (github.repository_owner == 'prometheus' || github.repository_owner == 'prometheus-community') && github.event.pull_request.user.login != 'dependabot[bot]'
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - env: