Dependency Updates

The theme uses a Zero-Pin strategy: Gemfile specifies no pinned versions; Gemfile.lock is committed to ensure reproducible builds. Dependencies are updated weekly via bundle update and a small automated PR workflow.

Quick Reference

# Update all gems
bundle update

# Check for security advisories
bundle exec bundle-audit check --update

# Verify site still builds
bundle exec jekyll build

Full Reference

The complete dependency management guide — Zero-Pin strategy rationale, Dependabot configuration, update policy, lockfile management:

Dependency Management → docs/systems/dependency-management.md