[SINT-INT] Fix dependabot-automation policy to work on pull_request events

[KSerrania]

What does this PR do?

Updates .github/chainguard/dependabot-automation.sts.yaml to work on dependabot PRs running on the pull_request event.

Motivation

Fix failing dependabot-automation event.

Plugin Checklist

• Unit tests.
• Integration tests.
• Benchmarks.
• TypeScript definitions.
• TypeScript tests.
• API documentation.
• CI jobs/workflows.

Additional Notes

[github-actions]

Overall package size

Self size: 4.4 MB
Deduped: 5.22 MB
No deduping: 5.22 MB

Dependency sizes

| name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 2.0.0 | 68.46 kB | 797.03 kB | | dc-polyfill | 0.1.10 | 26.73 kB | 26.73 kB |

_{🤖 This report was automatically generated by heaviest-objects-in-the-universe}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.19%. Comparing base (39c85a4) to head (f037c0c).
⚠️ Report is 14 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #7263   +/-   ##
=======================================
  Coverage   85.19%   85.19%           
=======================================
  Files         532      532           
  Lines       22778    22778           
=======================================
  Hits        19405    19405           
  Misses       3373     3373           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[pr-commenter]

Benchmarks

Benchmark execution time: 2026-01-16 13:45:34

Comparing candidate commit f037c0c in PR branch kserrania/sint-int-fix-dd-octo-sts-dependabot-automation with baseline commit 39c85a4 in branch master.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 230 metrics, 30 unstable metrics.

[watson]

Is this a duplicate of, or a replacement for #7241?

[BridgeAR]

LGTM, let us merge this first to fix dependabot fast. The other PR can land on top

[rochdev]

@KSerrania Who is the actor when the synchronize event happen? Is it the author of the PR or the author of whoever pushed new commits?