Don't upload codecov for dependabot runs (#43)

it can't access secret

Author: ejfine

template/.github/workflows/ci.yaml.jinja

@@ -61,7 +61,7 @@ jobs:
 
 {% endraw %}{% if use_codecov %}{% raw %}      - name: Upload coverage to Codecov
         # only upload coverage from fastest job
-        if: matrix.JOB_MATCHING_DEV_ENV == true
+        if: matrix.JOB_MATCHING_DEV_ENV == true && ${{ github.actor != 'dependabot[bot]' }} # dependabot by default doesn't have access to the necessary secret...and dependabot should never be changing coverage anyway so it's fine not uploading it
         uses: codecov/codecov-action@v5.1.1
         with:
           files: ./coverage.xml