bugfix: Attempt at fixing #26 by excluding PRs from dependabot[bot]…

… from triggering an `npm publish`; also move to node-20 for future support

.github/workflows/reference-lib.publish.yml

@@ -12,7 +12,6 @@ defaults:
     working-directory: ./reference-lib
     shell: bash
 
-
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -23,7 +22,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: '16.x'
+          node-version: '20.x'
           registry-url: 'https://npm.pkg.github.com'
           scope: '@nginxinc'
       - name: Install dependencies
@@ -35,7 +34,7 @@ jobs:
       - name: get package-version
         run: node -p -e '`PACKAGE_VERSION=${require("./package.json").version}`' >> $GITHUB_ENV
       - name: publish package
-        if: github.event_name == 'push'
+        if: github.event_name == 'push' && github.actor != 'dependabot[bot]'
         run: npm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}