From c2bfd9c4490d48843a99b01ebd07bca5bb87c4a0 Mon Sep 17 00:00:00 2001
From: unattributed <shopkeeper@unattributed.blog>
Date: Mon, 29 Jun 2026 06:49:31 +0000
Subject: [PATCH 1/2] deps: update concurrent-ruby security floor

---
 Gemfile.lock | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index 8c00402..c8400ce 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -15,7 +15,7 @@ GEM
     base64 (0.3.0)
     bigdecimal (4.1.2)
     colorator (1.1.0)
-    concurrent-ruby (1.3.6)
+    concurrent-ruby (1.3.7)
     csv (3.3.5)
     em-websocket (0.5.3)
       eventmachine (>= 0.12.9)

From 4546a14cc4abc26bbfca8bc10a50a6d0f915d391 Mon Sep 17 00:00:00 2001
From: unattributed <shopkeeper@unattributed.blog>
Date: Mon, 29 Jun 2026 06:49:53 +0000
Subject: [PATCH 2/2] ci: validate jekyll pull requests

---
 .github/workflows/jekyll.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/jekyll.yml b/.github/workflows/jekyll.yml
index bbe1452..1e732aa 100644
--- a/.github/workflows/jekyll.yml
+++ b/.github/workflows/jekyll.yml
@@ -7,6 +7,10 @@ on:
   push:
     branches: ["main"]
 
+  # Validate pull requests before dependency or content changes are merged
+  pull_request:
+    branches: ["main"]
+
   # Allow manual triggering from the Actions tab
   workflow_dispatch:
 
@@ -54,6 +58,7 @@ jobs:
 
   # Deployment job
   deploy:
+    if: github.event_name == 'push'
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}