The push trigger had no branch filter, so pull requests from branches in this repository (e.g. Dependabot) ran the workflow twice, once for push and once for pull_request.
The push trigger had no branch filter, so pull requests from branches in this repository (e.g. Dependabot) ran the workflow twice, once for push and once for pull_request.