build: focus Dependabot on security updates (#1929)

* build: validate dependency PRs against CFS

* build: disable routine Dependabot updates

* build: remove Dependabot version update config

* build: enforce npm package minimum age

* build: remove GitHub package age gate

* build: limit CFS validation to dependency changes

* build: include Maven dependency changes in CFS validation

Author: wenytang-ms

.azure-pipelines/vscode-java-test-ci.yml

@@ -17,6 +17,17 @@ trigger:
   branches:
     include:
       - main
+pr:
+  branches:
+    include:
+      - main
+  paths:
+    include:
+      - package.json
+      - package-lock.json
+      - java-extension/**/pom.xml
+      - java-extension/.mvn/wrapper/maven-wrapper.properties
+      - scripts/buildJdtlsExt.js
 extends:
   template: v1/1ES.Unofficial.PipelineTemplate.yml@1esPipelines
   parameters: