fix: resync ci_dependabot_automerge.yml with guidance@main (#20) (#22) #10

	---
	name: ci_validate_jekyll

	on:
	pull_request:
	push:
	branches:
	- master

	permissions:
	contents: read

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v7

	- name: Setup Ruby
	uses: ruby/setup-ruby@v1
	with:
	ruby-version: "3.2"

	# Gemfile.lock pins BUNDLED WITH 2.0.2, which is incompatible with
	# Ruby 3.2 (uses String#untaint, removed in Ruby 3.0). bundle install
	# re-reads that pin at runtime regardless of what's pre-installed, and
	# even `bundle lock` itself would trip the same error before it could
	# rewrite it - so patch the line directly, in this checkout only,
	# rather than touching the committed lockfile. 2.5.23 is the default
	# bundler that ships with this Ruby version.
	- name: Repin bundler in this checkout only
	run: sed -i '/^BUNDLED WITH/,+1 s/2\.0\.2/2.5.23/' Gemfile.lock

	- name: Install gems
	run: bundle install --jobs 4

	- name: Build site
	run: bundle exec jekyll build

Navigation Menu