From 393d21d50a54f7102a86c0e9827bcf95c55f9b12 Mon Sep 17 00:00:00 2001
From: Brian Moeskau <brian@moeskau.com>
Date: Fri, 1 May 2026 16:10:23 -0500
Subject: [PATCH] ci: improve Pages workflow and add Dependabot

---
 .github/dependabot.yml                | 10 ++++++++++
 .github/workflows/jekyll-gh-pages.yml | 11 ++++++++---
 2 files changed, 18 insertions(+), 3 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..95a0c95
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+# Keep GitHub Actions used in workflows up to date.
+# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "ci"
diff --git a/.github/workflows/jekyll-gh-pages.yml b/.github/workflows/jekyll-gh-pages.yml
index 9cb771a..2239769 100644
--- a/.github/workflows/jekyll-gh-pages.yml
+++ b/.github/workflows/jekyll-gh-pages.yml
@@ -1,4 +1,4 @@
-# Sample workflow for building and deploying a Jekyll site to GitHub Pages
+# Workflow for building and deploying the Jekyll site to GitHub Pages
 name: Deploy Jekyll with GitHub Pages dependencies preinstalled
 
 on:
@@ -6,6 +6,10 @@ on:
   push:
     branches: ["main"]
 
+  # Also build (but do not deploy) on pull requests for verification
+  pull_request:
+    branches: ["main"]
+
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
@@ -29,7 +33,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
       - name: Setup Pages
-        uses: actions/configure-pages@v4
+        uses: actions/configure-pages@v5
       - name: Build with Jekyll
         uses: actions/jekyll-build-pages@v1
         with:
@@ -38,8 +42,9 @@ jobs:
       - name: Upload artifact
         uses: actions/upload-pages-artifact@v3
 
-  # Deployment job
+  # Deployment job — only runs on pushes to main / manual dispatch, not PRs
   deploy:
+    if: github.event_name != 'pull_request'
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}