BUG: code review score should exclude automated dependency updates

[monperrus]

Description

It's a good practice to have dependency bots (Dependabot, Renovate). Today, it's often thee case that there are more dependency PRs than human made commits. With strong testing, it's a good to automerge dependency updates.

Assume you have 30 commits in a release, incl. 1 with code review and 29 bot updates.

Expected behavior

• Exclude bot PRs
• Code review score: 0/10

Actual behavior

• Include all PRs, regardless of content
• Code review score: 10/10

Additional context

See for example https://deps.dev/maven/fr.inria.gforge.spoon%3Aspoon-core/11.1.1-beta-23