diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 19df17e93c13..046d552836b6 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -1,12 +1,13 @@
 name: Lint
 
 on:
-  pull_request:
+  pull_request_target:
   workflow_dispatch:
   merge_group:
 
 permissions:
   contents: write
+  checks: write
 
 jobs:
   lint:
@@ -21,7 +22,7 @@ jobs:
 
       - name: Run linters
         uses: wearerequired/lint-action@548d8a7c4b04d3553d32ed5b6e91eb171e10e7bb # v2
-        if: ${{ github.event_name == 'pull_request' }}
+        if: ${{ github.event_name == 'pull_request_target' }}
         with:
           auto_fix: true
           rubocop: true
diff --git a/Gemfile b/Gemfile
index e5ac7f7f62ce..d3fb5b6f366b 100644
--- a/Gemfile
+++ b/Gemfile
@@ -1,8 +1,13 @@
 source "https://rubygems.org"
 
-gem "faraday-retry", "~> 2.3.2"
+gem "faraday-retry", "2.3.1"
 gem "github-pages", "~> 232", group: :jekyll_plugins
 gem "nokogiri", "~> 1.18.8"
+gem "rake", "13.2.1"
+gem "rubocop", "1.75.5"
+gem "faraday", "2.12.2"
+gem "json", "2.11.3"
+gem "language_server-protocol", "3.17.0.4"
 
 group :test do
   gem "fastimage"
@@ -10,8 +15,6 @@ group :test do
   gem "minitest"
   gem "octokit"
   gem "pry", require: false
-  gem "rake"
-  gem "rubocop"
   gem "rubocop-performance"
   gem "safe_yaml"
 end
diff --git a/Gemfile.lock b/Gemfile.lock
index 9a486cad5c1e..24ecb225d2a0 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,7 +1,7 @@
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (8.0.1)
+    activesupport (8.0.2)
       base64
       benchmark (>= 0.3)
       bigdecimal
@@ -18,8 +18,8 @@ GEM
       public_suffix (>= 2.0.2, < 7.0)
     ast (2.4.3)
     base64 (0.2.0)
-    benchmark (0.4.0)
-    bigdecimal (3.1.9)
+    benchmark (0.4.1)
+    bigdecimal (3.2.2)
     coderay (1.1.3)
     coffee-script (2.4.1)
       coffee-script-source
@@ -28,12 +28,12 @@ GEM
     colorator (1.1.0)
     commonmarker (0.23.11)
     concurrent-ruby (1.3.5)
-    connection_pool (2.5.0)
-    csv (3.3.3)
+    connection_pool (2.5.3)
+    csv (3.3.5)
     dnsruby (1.72.3)
       base64 (~> 0.2.0)
       simpleidn (~> 0.2.1)
-    drb (2.2.1)
+    drb (2.2.3)
     em-websocket (0.5.3)
       eventmachine (>= 0.12.9)
       http_parser.rb (~> 0)
@@ -41,26 +41,26 @@ GEM
       ffi (>= 1.15.0)
     eventmachine (1.2.7)
     execjs (2.10.0)
-    faraday (2.13.1)
+    faraday (2.12.2)
       faraday-net_http (>= 2.0, < 3.5)
       json
       logger
     faraday-net_http (3.4.1)
       net-http (>= 0.5.0)
-    faraday-retry (2.3.2)
+    faraday-retry (2.3.1)
       faraday (~> 2.0)
     fastimage (2.4.0)
-    ffi (1.17.1)
-    ffi (1.17.1-aarch64-linux-gnu)
-    ffi (1.17.1-aarch64-linux-musl)
-    ffi (1.17.1-arm-linux-gnu)
-    ffi (1.17.1-arm-linux-musl)
-    ffi (1.17.1-arm64-darwin)
-    ffi (1.17.1-x86-linux-gnu)
-    ffi (1.17.1-x86-linux-musl)
-    ffi (1.17.1-x86_64-darwin)
-    ffi (1.17.1-x86_64-linux-gnu)
-    ffi (1.17.1-x86_64-linux-musl)
+    ffi (1.17.2)
+    ffi (1.17.2-aarch64-linux-gnu)
+    ffi (1.17.2-aarch64-linux-musl)
+    ffi (1.17.2-arm-linux-gnu)
+    ffi (1.17.2-arm-linux-musl)
+    ffi (1.17.2-arm64-darwin)
+    ffi (1.17.2-x86-linux-gnu)
+    ffi (1.17.2-x86-linux-musl)
+    ffi (1.17.2-x86_64-darwin)
+    ffi (1.17.2-x86_64-linux-gnu)
+    ffi (1.17.2-x86_64-linux-musl)
     forwardable-extended (2.6.0)
     gemoji (4.1.0)
     github-pages (232)
@@ -235,12 +235,12 @@ GEM
       gemoji (>= 3, < 5)
       html-pipeline (~> 2.2)
       jekyll (>= 3.0, < 5.0)
-    json (2.12.2)
+    json (2.11.3)
     kramdown (2.4.0)
       rexml
     kramdown-parser-gfm (1.1.0)
       kramdown (~> 2.0)
-    language_server-protocol (3.17.0.5)
+    language_server-protocol (3.17.0.4)
     lint_roller (1.1.0)
     liquid (4.0.4)
     listen (3.9.0)
@@ -250,13 +250,13 @@ GEM
     mercenary (0.3.6)
     method_source (1.1.0)
     mini_mime (1.1.5)
-    mini_portile2 (2.8.8)
+    mini_portile2 (2.8.9)
     minima (2.5.1)
       jekyll (>= 3.5, < 5.0)
       jekyll-feed (~> 0.9)
       jekyll-seo-tag (~> 2.1)
     minitest (5.25.5)
-    multi_xml (0.7.1)
+    multi_xml (0.7.2)
       bigdecimal (~> 3.1)
     net-http (0.6.0)
       uri
@@ -295,14 +295,14 @@ GEM
     public_suffix (5.1.1)
     racc (1.8.1)
     rainbow (3.1.1)
-    rake (13.3.0)
+    rake (13.2.1)
     rb-fsevent (0.11.2)
     rb-inotify (0.11.1)
       ffi (~> 1.0)
     regexp_parser (2.10.0)
-    rexml (3.4.0)
+    rexml (3.4.1)
     rouge (3.30.0)
-    rubocop (1.77.0)
+    rubocop (1.75.5)
       json (~> 2.3)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.1.0)
@@ -310,7 +310,7 @@ GEM
       parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 2.9.3, < 3.0)
-      rubocop-ast (>= 1.45.1, < 2.0)
+      rubocop-ast (>= 1.44.0, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 4.0)
     rubocop-ast (1.45.1)
@@ -361,16 +361,19 @@ PLATFORMS
   x86_64-linux-musl
 
 DEPENDENCIES
-  faraday-retry (~> 2.3.2)
+  faraday (= 2.12.2)
+  faraday-retry (= 2.3.1)
   fastimage
   github-pages (~> 232)
   httparty
+  json (= 2.11.3)
+  language_server-protocol (= 3.17.0.4)
   minitest
   nokogiri (~> 1.18.8)
   octokit
   pry
-  rake
-  rubocop
+  rake (= 13.2.1)
+  rubocop (= 1.75.5)
   rubocop-performance
   safe_yaml
   webrick