sass 1.80 (and 2.x) introduces tons of "@import rules are deprecated".
These are unfixable on our side due to PatternFly using them
extensively.
We don't need any new sass features, so stick to 1.79.x. Explicitly not
ignore 3.x (which will drop @import) to get a reminder in the future to
try and clean this up again.
Same as https://github.com/cockpit-project/cockpit/pull/21155Closes#1017
Github usually updates their actions once a while and then warns about a
node env getting deprecated in runs. Which is not super easily spotted
by a developer until it's too late, so let's like npm let dependabot
handle updating.
So far the daily updates tend to run in our mornings between 7:00 and
8:00, which blocks our CI for a long time, and thus collides with
developers sending PRs. Move them to the evening instead, when they can
use the quiet bots time.
Also reduce the number of parallel PRs from 5 to 3. Parallel ones always
need to be rebased, and thus are very expensive. We still want to be
able to have a complicated PatternFly PR open for several days without
blocking other updates.