From 99680cbdaba5c393dabb66bee938adeffaa133d0 Mon Sep 17 00:00:00 2001
From: David Rabkin <david@rabkin.co.il>
Date: Wed, 15 Jul 2026 01:21:18 +0300
Subject: [PATCH 1/2] ci: add dependency review and experimental ruby-head job

---
 .github/workflows/dependency-review.yml | 20 ++++++++++++++++++++
 .github/workflows/rake.yml              |  4 ++++
 2 files changed, 24 insertions(+)
 create mode 100644 .github/workflows/dependency-review.yml

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
new file mode 100644
index 0000000..47ed0d7
--- /dev/null
+++ b/.github/workflows/dependency-review.yml
@@ -0,0 +1,20 @@
+# SPDX-FileCopyrightText: 2026 David Rabkin
+# SPDX-License-Identifier: 0BSD
+---
+name: dependency-review
+'on':
+  pull_request:
+permissions:
+  contents: read
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  dependency-review:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v7.0.0
+        with:
+          persist-credentials: false
+      - uses: actions/dependency-review-action@v5.0.0
diff --git a/.github/workflows/rake.yml b/.github/workflows/rake.yml
index bb82125..a9f22ac 100644
--- a/.github/workflows/rake.yml
+++ b/.github/workflows/rake.yml
@@ -38,9 +38,13 @@ jobs:
           - 3.2
           - 3.3
           - 3.4
+        include:
+          - os: ubuntu-24.04
+            ruby: head
     name: Rake on ${{ matrix.os }} / Ruby ${{ matrix.ruby }}
     runs-on: ${{ matrix.os }}
     timeout-minutes: 15
+    continue-on-error: ${{ matrix.ruby == 'head' }}
     steps:
       - uses: actions/checkout@v7.0.0
         with:

From 6cac805707036fb5c083585f6cea52997b3f0055 Mon Sep 17 00:00:00 2001
From: David Rabkin <david@rabkin.co.il>
Date: Wed, 15 Jul 2026 01:26:15 +0300
Subject: [PATCH 2/2] ci: use default bundler on ruby head

---
 .github/workflows/rake.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/rake.yml b/.github/workflows/rake.yml
index a9f22ac..167ad43 100644
--- a/.github/workflows/rake.yml
+++ b/.github/workflows/rake.yml
@@ -41,6 +41,7 @@ jobs:
         include:
           - os: ubuntu-24.04
             ruby: head
+            bundler: default
     name: Rake on ${{ matrix.os }} / Ruby ${{ matrix.ruby }}
     runs-on: ${{ matrix.os }}
     timeout-minutes: 15
@@ -52,5 +53,6 @@ jobs:
       - uses: ruby/setup-ruby@v1.318.0
         with:
           ruby-version: ${{ matrix.ruby }}
+          bundler: ${{ matrix.bundler || 'Gemfile.lock' }}
           bundler-cache: true
       - run: bundle exec rake