do not publish when running depandabot checks

Author: hauner

.github/workflows/ci.yaml

@@ -14,8 +14,43 @@ on:
   workflow_dispatch:
 
 jobs:
+
   build:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v6
+
+    - name: set up JDK
+      uses: actions/setup-java@v5
+      with:
+        distribution: 'temurin'
+        java-version: 17
+
+    - name: build & publish (sonatype)
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        ORG_GRADLE_PROJECT_signKey: ${{ secrets.SIGN_KEY }}
+        ORG_GRADLE_PROJECT_signPwd: ${{ secrets.SIGN_PWD }}
+        PUBLISH_USER: ${{ secrets.PUBLISH_USER }}
+        PUBLISH_KEY: ${{ secrets.PUBLISH_KEY }}
+      run: ./gradlew check --stacktrace
+
+  check-publish:
+    needs: [build]
+    name: check publish
 
+    runs-on: ubuntu-latest
+    if: >-
+      github.actor != 'dependabot[bot]' &&
+      github.actor == 'hauner' && contains(needs.version.outputs.BUILD_VERSION, 'SNAPSHOT')
+
+    steps:
+      - run: echo "should publish ..."
+
+
+  publish:
+    needs: [check-publish]
     runs-on: ubuntu-latest
 
     steps:
@@ -25,18 +60,13 @@ jobs:
       uses: actions/setup-java@v5
       with:
         distribution: 'temurin'
-        java-version: |
-          17
+        java-version: 17
 
     - name: build & publish (sonatype)
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-#        SIGN_KEY: ${{ secrets.SIGN_KEY }}
-#        SIGN_PWD: ${{ secrets.SIGN_PWD }}
         ORG_GRADLE_PROJECT_signKey: ${{ secrets.SIGN_KEY }}
         ORG_GRADLE_PROJECT_signPwd: ${{ secrets.SIGN_PWD }}
         PUBLISH_USER: ${{ secrets.PUBLISH_USER }}
         PUBLISH_KEY: ${{ secrets.PUBLISH_KEY }}
       run: ./gradlew build publishToMavenCentral --stacktrace
-
-# -i -d