build(.github/workflows): workflow no longer triggered on tag push, d…

…ependabot/snyk push

.github/workflows/build-test-deploy.yml

@@ -7,6 +7,11 @@ name: build-test-deploy
 on:
   workflow_dispatch: # * Treated like a `push` event with custom refs
   push:
+    tags-ignore:
+      - '**'
+    branches-ignore:
+      - 'dependabot/**'
+      - 'snyk-*'
   pull_request:
     types: [opened, synchronize]
     branches: [main, canary]

CONTRIBUTING.md

@@ -166,7 +166,9 @@ even reach the remote CI pipeline.
 The CI/CD pipeline is triggered by two
 [events](https://docs.github.com/en/free-pro-team@latest/actions/reference/events-that-trigger-workflows):
 
-- `push` events
+- `push` events that:
+  - Are of non-tag refs (pushed tags are ignored by CI/CD)
+  - Are of refs that do not start with `dependabot/` or `snyk-`
 - `pull_request` events that:
   - Are of type `synchronize` or `opened`
   - Compare against branches `main` or `canary`