diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..ef9e3d16
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,21 @@
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "composer"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      # pickup security releases on wednesdays
+      # https://www.drupal.org/drupal-security-team/security-release-numbers-and-release-timing#s-release-timing
+      day: "thursday"
+    versioning-strategy: increase-if-necessary
+    allow:
+      - dependency-name: "drupal/*"
+      - dependency-name: "drush/drush"
+      - dependency-name: "islandora-rdm/islandora_fits"
+      - dependency-name: "islandora/views_nested_details"
+      - dependency-name: "mjordan/islandora_workbench_integration"
+    commit-message:
+      prefix: "composer update"
+      include: "scope"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 37771f76..bdcd0c0a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,8 +6,12 @@ on:
   pull_request: {}
   workflow_dispatch: {}
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
-  build:
+  ubuntu-test:
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -51,3 +55,28 @@ jobs:
         run: |
           composer exec -- drush en config_inspector
           composer exec -- drush config:inspect --only-error --detail
+
+  isle-test:
+    runs-on: ubuntu-latest
+    name: ISLE site template
+    steps:
+      - name: Checkout isle-site-template
+        uses: actions/checkout@v4
+        with:
+          repository: Islandora-Devops/isle-site-template
+
+      - name: Install mkcert
+        run: |-
+          curl -JLO "https://dl.filippo.io/mkcert/latest?for=linux/amd64"
+          chmod +x mkcert-v*-linux-amd64
+          sudo cp mkcert-v*-linux-amd64 /usr/local/bin/mkcert
+
+      - name: Start islandora-starter-site
+        run: ./tests/init-template-starter.sh
+        env:
+          # isle-buildkit tag
+          ISLANDORA_TAG: main
+          # the branch the PR is running on
+          ISLANDORA_STARTER_REF: "heads/${{ github.event_name == 'pull_request' && github.head_ref || github.ref_name }}"
+          # if coming from a fork, get the owner's repo
+          ISLANDORA_STARTER_OWNER: "${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.owner.login || github.repository_owner }}"