diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b452da2..0f725af 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -3,15 +3,22 @@ name: CI
 on:
   push:
     branches: [main]
+    paths: [bin/**, .github/workflows/ci.yml]
   pull_request:
     branches: [main]
+    paths: [bin/**, .github/workflows/ci.yml]
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   shellcheck:
     name: ShellCheck
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Run shellcheck
         run: |
           shopt -s nullglob
@@ -27,8 +34,9 @@ jobs:
   smoke:
     name: Smoke (--help)
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Run --help on every bin entry
         run: |
           shopt -s nullglob
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 4fb8493..4786ff8 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -2,7 +2,7 @@ name: Deploy Pages
 on:
   push:
     branches: [main]
-    paths: [docs/**]
+    paths: [docs/**, .github/workflows/pages.yml]
   workflow_dispatch:
 permissions:
   contents: read
@@ -17,8 +17,9 @@ jobs:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/configure-pages@v5
       - uses: actions/upload-pages-artifact@v3
         with: