[dependabot]

Bumps the ruby-minor-and-patch group with 2 updates: jekyll-polyglot and csv.

Updates jekyll-polyglot from 1.12.0 to 1.14.0

Updates csv from 3.3.5 to 3.3.6

Release notes

Sourced from csv's releases.

csv 3.3.6 - 2026-07-27

Improvements

• CSV::Row#to_h: Added support for block.

  • GH-356
  • Patch by Vlad

• Ensured using path_or_io for parameter name that accepts path or IO.

  • GH-358
  • Patch by Yuto Urushima

• Changed to not using enumerator in CSV.

  • GH-361
  • GH-363
  • Reported by Cas Donoghue

Fixes

• Fixed a bug that \r in unquoted fields are rejected when row separator doesn't contain \r

  • GH-60
  • GH-346
  • Patch by Jas

• Fixed a typo in documentation.

  • GH-350
  • Patch by tmr111116

Thanks

• Jas
• tmr111116
• Vlad
• Yuto Urushima
• Cas Donoghue

Changelog

Sourced from csv's changelog.

3.3.6 - 2026-07-27

Improvements

• CSV::Row#to_h: Added support for block.

  • GH-356
  • Patch by Vlad

• Ensured using path_or_io for parameter name that accepts path or IO.

  • GH-358
  • Patch by Yuto Urushima

• Changed to not using enumerator in CSV.

  • GH-361
  • GH-363
  • Reported by Cas Donoghue

Fixes

• Fixed a bug that \r in unquoted fields are rejected when row separator doesn't contain \r

  • GH-60
  • GH-346
  • Patch by Jas

• Fixed a typo in documentation.

  • GH-350
  • Patch by tmr111116

Thanks

• Jas
• tmr111116
• Vlad
• Yuto Urushima
• Cas Donoghue

Commits

• 0873ab3 Add 3.3.6 entry
• c94763a Don't use enumerator in CSV (#363)
• b36c160 Bump actions/checkout from 6 to 7 (#360)
• c773f27 Bump rubygems/configure-rubygems-credentials from 2.0.0 to 2.1.0 (#359)
• 19c7649 Unify first parameter name to path_or_io across methods (#358)
• 79eb55a Bump rubygems/configure-rubygems-credentials from 1.0.0 to 2.0.0 (#357)
• 4a5c504 Support block in CSV::Row#to_h (#356)
• bc69827 Bump actions/checkout from 5 to 6 (#354)
• a2bda1e Link to LICENSE.txt
• 0de1bf0 Bump actions/checkout from 4 to 5 (#351)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[estcarisimo]

Merged at the maintainer's request after a build comparison. Current main was built with and without this lockfile. Spanish pages are byte-identical. On every EN and FR page, only two tags change, both correctly: rel=canonical now points to the page itself (it pointed to the Spanish page), and hreflang=x-default now points to the Spanish root (it pointed to the EN/FR page). Both are jekyll-polyglot 1.14 SEO fixes. The language switcher and internal links are unchanged, and CI is green.