ci: add dependabot config

.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: '/'
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    versioning-strategy: increase
+  - package-ecosystem: cargo
+    directory: '/'
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10

.github/workflows/bench.yaml

@@ -12,6 +12,7 @@ on:
 jobs:
   bench:
     name: Bench
+    if: "!contains(github.event.head_commit.message, 'bump')"
     runs-on: ubuntu-latest
 
     steps: