232 python requirements use dependabot only for security and pip compile for everything else

.github/dependabot.yml

@@ -4,7 +4,5 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
-    groups:
-      weekly-batch:
-        patterns:
-          - "*"
+      # disable version update PRs
+      open-pull-requests-limit: 0

.github/workflows/pip_dependancy_updates.yml

@@ -0,0 +1,32 @@
+name: Pip dependency update
+
+on:
+  pull_request:
+    branches: [ develop ]
+
+jobs:
+  test-update-requirements-files:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code Repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.head_ref }}
+
+      - name: Set up Python 3.9
+        uses: actions/setup-python@v5
+        with:
+          python-version: 3.9
+
+      - name: Update requirements files
+        uses: UW-GAC/pip-tools-actions/update-requirements-files@v0.2
+        with:
+          requirements_files:  |-
+            requirements.txt
+            requirements-dev.txt
+
+            pr-commit-message: "Test update requirements files commit message"
+            pr-title: "Test update requirements files title"
+            pr-body: "Test update requirements files body"
+            pr-branch-suffix: "${{ github.event.number}}"